CN110063045B - Message processing method and device in cloud computing system - Google Patents

Message processing method and device in cloud computing system Download PDF

Info

Publication number
CN110063045B
CN110063045B CN201680091420.2A CN201680091420A CN110063045B CN 110063045 B CN110063045 B CN 110063045B CN 201680091420 A CN201680091420 A CN 201680091420A CN 110063045 B CN110063045 B CN 110063045B
Authority
CN
China
Prior art keywords
mac address
bit
address
network
virtual
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201680091420.2A
Other languages
Chinese (zh)
Other versions
CN110063045A (en
Inventor
黄登辉
康达祥
黄毅
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Huawei Cloud Computing Technologies Co Ltd
Original Assignee
Huawei Technologies Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Huawei Technologies Co Ltd filed Critical Huawei Technologies Co Ltd
Publication of CN110063045A publication Critical patent/CN110063045A/en
Application granted granted Critical
Publication of CN110063045B publication Critical patent/CN110063045B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/46—Interconnection of networks

Abstract

The invention discloses a message processing method and device in a cloud computing system, which comprises the following steps: a first vSwitch on a first computing node receives an Address Resolution Protocol (ARP) request sent by a first Virtual Machine (VM), wherein the ARP request carries a Media Access Control (MAC) address of the first VM and an Internet Protocol (IP) address of a second VM; and extracting the MAC address of the first VM, creating the MAC address of the second VM according to the MAC address of the first VM and the IP address of the second VM, and sending an ARP response carrying the MAC address of the second VM to the first VM. The embodiment of the invention is beneficial to improving the forwarding efficiency of the data messages between the VMs in the cloud computing system.

Description

Message processing method and device in cloud computing system
Technical Field
The invention relates to the technical field of computers, in particular to a message processing method and device in a cloud computing system.
Background
A Virtual Local Area Network (VLAN) is a technology for implementing a Virtual workgroup by logically, rather than physically, dividing devices of a Local Area Network into segments. With the development of big data technology and the expansion of mass data, the wide deployment of server virtualization technology increases the computing density of a data center, the virtual machine is not restricted by a physical computing environment, services can be migrated to a target physical position in a network without limitation, and the flexibility change requirement of the services can be met.
In the existing VLAN technology, in order to enable a switch to distinguish messages of different VLANs, VLAN identification fields need to be added to the messages to represent VLAN identifications, and the length of a field for representing the VLAN identification is 12 bits in a message structure with the VLAN identification fields, so that the switch can usually divide 4094 VLANs, the value range is 1-4094, and the number of virtual network identifications in the VLAN technology is difficult to meet the service requirements along with the continuous expansion of the service capability of a cloud computing system. In addition, the data transmission quantity of the data message is increased by adding the additional mark field to encapsulate the data message, and the forwarding efficiency of the data message in the cloud computing system is reduced.
Disclosure of Invention
The invention provides a message processing method and device in a cloud computing system, which can improve the forwarding efficiency of data messages between VMs in the cloud computing system.
In a first aspect, an embodiment of the present invention provides a method for processing a packet in a cloud computing system, where the cloud computing system includes a first computing node, and a first virtual machine VM and a first virtual switch vSwitch are deployed on the first computing node, where the method includes:
the first vSwitch receives an Address Resolution Protocol (ARP) request sent by the first VM, wherein the ARP request carries a Media Access Control (MAC) address of the first VM and an Internet Protocol (IP) address of a second VM, and the second VM and the first VM belong to the same virtual network;
the first vSwitch extracts the MAC address of the first VM, and creates the MAC address of the second VM according to the MAC address of the first VM and the IP address of the second VM, wherein a virtual network identification field of the MAC address of the first VM is used as a virtual network identification field of the MAC address of the second VM, a network segment to which the IP address of the second VM belongs is used for creating a private network number field of the MAC address of the second VM, and the last three bytes of the IP address of the second VM are used as an extended identifier field of the MAC address of the second VM;
and the first vSwitch sends an ARP response carrying the MAC address of the second VM to the first VM.
As can be seen from the above, in the embodiment of the present invention, the cloud computing system constructs the MAC address of the VM by using the virtual network identifier of the virtual network in which the VM is located and the IP address information of the VM, and does not need to encapsulate an additional field in the data packet to identify the virtual network, which is beneficial to reducing the length of the data packet between VMs in the cloud computing system, reducing the transmission processing time of the VM data packet, and thus is beneficial to improving the forwarding efficiency of the data packet between VMs in the cloud computing system.
In one possible design, the cloud computing system further includes a second computing node, the second VM and the second vSwitch are deployed on the second computing node, and the first computing node and the second computing node are communicatively connected through a bearer network composed of switches; after the first vSwitch sends the ARP response carrying the MAC address of the second VM to the first VM, the method further includes:
the first vSwitch receives a first data packet sent by the first VM, where the first data packet carries an MAC address of the second VM;
the first vSwitch determines that the second VM is deployed on the second computing node according to the MAC address of the second VM, adds a network identifier of the bearer network to the first data packet, and sends the first data packet to the second VM through the switch and the second vSwitch;
the first vSwitch receives a second data packet sent by the second VM after receiving the first data packet, where the second data packet includes a network identifier of the bearer network and a MAC address of the first VM;
and the first vSwitch removes the network identifier of the bearer network, and forwards the second data packet to the first VM according to the MAC address of the first VM in the second data packet.
In one possible design, the extracting, by the first vSwitch, the MAC address of the first VM, and creating, according to the MAC address of the first VM and the IP address of the second VM, the MAC address of the second VM includes:
the first vSwitch judges that the first VM and the second VM belong to the same virtual network, extracts the MAC address of the first VM, and takes the virtual network identification field of the MAC address of the first VM as the virtual network identification field of the MAC address of the second VM;
and the first vSwitch creates a private network number field of the MAC address of the second VM according to the network segment to which the IP address of the second VM belongs, and takes the last three bytes of the IP address of the second VM as an extended identifier field of the MAC address of the second VM.
In one possible design, the MAC address is a 48-bit address field, the virtual network identification field of the MAC address is at least one of the 26 th bit to the 39 th bit and the 42 th bit to the 47 th bit of the MAC address, the private network number field of the MAC address is the 25 th bit and the 24 th bit of the MAC address, the extended identifier field of the MAC address is the 0 th bit to the 23 th bit of the MAC address, the 40 th bit of the MAC address is 0, and the 41 th bit of the MAC address is 1.
It can be seen that, in the possible design, the virtual network identifier field in the MAC address can reach 20 bits at most, that is, compared with the existing VLAN technology which can only support 4094 virtual network identifiers, the MAC address field structure provided in the embodiment of the present invention can theoretically support 2 bits at most20The virtual network identifiers of different virtual networks greatly expand the number of the virtual network identifiers supported by the cloud computing system, and the virtual network number bearing capacity of the cloud computing system is improved.
In a second aspect, an embodiment of the present invention provides a packet processing method in a cloud computing system, where the cloud computing system includes a control node, and the control node is deployed with a Network management module Network Manager and a virtual machine management module VMManager, and the method includes:
the network manager receives a VM creation request sent by the VMManager, creates a virtual port of the VM, and allocates a virtual network identifier of a virtual network to which the VM to be created belongs and an IP address of the VM to be created to the virtual port;
and the network manager creates a virtual network identification field of the MAC address of the virtual port according to the virtual network identification, creates a private network number field of the MAC address of the virtual port according to the network segment to which the allocated IP address belongs, and creates an extended identifier field of the MAC address of the virtual port according to the last three bytes of the allocated IP address.
As can be seen from the above, in the embodiment of the present invention, the cloud computing system constructs the MAC address of the VM by using the virtual network identifier of the virtual network in which the VM is located and the IP address information of the VM, and does not need to encapsulate an additional field in the data packet to identify the virtual network, which is beneficial to reducing the length of the data packet between VMs in the cloud computing system, reducing the transmission processing time of the VM data packet, and thus is beneficial to improving the forwarding efficiency of the data packet between VMs in the cloud computing system.
In one possible design, after the network manager creates an extended identifier field of the MAC address of the virtual network port according to the last three bytes of the allocated IP address, the method further includes:
the network manager sends a VM deployment resource allocation request carrying the port number of the virtual port to a VMManager, wherein the VM deployment resource allocation request is used for indicating the VMManager to allocate deployment resources for the VM to be created;
and the VMManager receives the VM deployment resource allocation request, allocates deployment resources for the VM to be created, and sends a VM creation instruction carrying deployment resource description information to a computing node according to the MAC address of the virtual port, wherein the VM creation instruction is used for indicating the computing node to create the VM by using the deployment resources corresponding to the deployment resource description information.
In one possible design, the MAC address is a 48-bit address field, the virtual network identification field of the MAC address is one or more of bits 26 to 39 and bits 42 to 47 of the MAC address, the private network number field of the MAC address is bits 25 and 24 of the MAC address, the extended identifier field of the MAC address is bits 0 to 23 of the MAC address, the bit 40 of the MAC address is 0, and the bit 41 of the MAC address is 1.
It can be seen that, in the possible design, the virtual network identifier field in the MAC address can reach 20 bits at most, that is, compared with the existing VLAN technology which can only support 4094 virtual network identifiers, the MAC address field structure provided in the embodiment of the present invention can theoretically support 2 bits at most20The virtual network identifiers of different virtual networks greatly expand the number of the virtual network identifiers supported by the cloud computing system, and the virtual network number bearing capacity of the cloud computing system is improved.
In a third aspect, an embodiment of the present invention provides a message processing apparatus of a cloud computing system, where the message processing apparatus has a function of implementing a behavior of a first virtual switch vSwitch in a first computing node in the method design of the first aspect. The functions can be realized by hardware, and the functions can also be realized by executing corresponding software by hardware. The hardware or software includes one or more modules corresponding to the above-described functions.
In a fourth aspect, an embodiment of the present invention provides a message processing apparatus of a cloud computing system, where the message processing apparatus has a function of implementing a behavior of a control node in the method design of the second aspect. The functions can be realized by hardware, and the functions can also be realized by executing corresponding software by hardware. The hardware or software includes one or more modules corresponding to the above-described functions.
In a fifth aspect, an embodiment of the present invention provides a first computing node, where the first computing node is deployed with a first virtual machine VM and a first virtual switch vSwitch, and the first computing node includes a processor, where the processor is configured to support the first computing node to perform corresponding functions in the method of the first aspect. Further, the first computing node may also include a communication interface. Further, the first computing node may also include a memory for coupling with the processor that retains program instructions and data necessary for the first computing node.
In a sixth aspect, an embodiment of the present invention provides a control node, where the control node is deployed with a Network management module Network Manager and a virtual machine management module VMManager, and the control node includes a processor, where the processor is configured to support the control node to execute corresponding functions in the method in the second aspect. Further, the control node may also comprise a communication interface. Further, the control node may also include a memory for coupling with the processor that holds the necessary program instructions and data for the control node.
In a seventh aspect, an embodiment of the present invention provides a computer program product, where the computer program product includes instructions, and when the computer program product is executed by a computer, the computer executes the message processing method in the cloud computing system provided in the first aspect or any implementation manner of the first aspect. The computer program product may be a software installation package.
In an eighth aspect, an embodiment of the present invention provides a computer program product, where the computer program product includes instructions, and when the computer program product is executed by a computer, the computer executes the message processing method in the cloud computing system provided in the second aspect or any implementation manner of the second aspect. The computer program product may be a software installation package.
In the embodiment of the invention, the cloud computing system constructs the MAC address of the VM by using the virtual network identifier of the virtual network where the VM is located and the IP address information of the VM, and does not need to package an additional field in the data message to identify the virtual network, so that the length of the data message between the VMs in the cloud computing system is favorably reduced, the transmission processing time of the VM data message is shortened, and the forwarding efficiency of the data message between the VMs in the cloud computing system is favorably improved.
Drawings
In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings needed to be used in the description of the embodiments are briefly introduced below, and it is obvious that the drawings in the following description are some embodiments of the present invention, and it is obvious for those skilled in the art to obtain other drawings based on these drawings without creative efforts.
FIG. 1A is a diagram illustrating the structure of the MAC address field in the prior art VLAN;
FIG. 1B is a system architecture diagram of an example cloud computing system provided by an embodiment of the present invention;
fig. 2A is a schematic flowchart of a message processing method in a cloud computing system according to an embodiment of the present invention;
fig. 2B is a schematic structural diagram of a MAC address of a VM according to an embodiment of the present invention;
fig. 3 is a schematic flowchart of a message processing method in a cloud computing system according to an embodiment of the present invention;
fig. 4A is a block diagram illustrating a component of a message processing apparatus according to an embodiment of the present invention;
FIG. 4B is a block diagram of a compute node according to an embodiment of the present invention;
fig. 5A is a block diagram illustrating a component of a message processing apparatus according to an embodiment of the present invention;
fig. 5B is a schematic structural diagram of a control node according to an embodiment of the present invention.
Detailed Description
The technical solution in the embodiments of the present invention will be described below with reference to the accompanying drawings.
In the VLAN technology, the MAC address of the host refers to an identifier of a network card of the host, and a Media Access Control (MAC) address of each network card is unique and fixed on the network card. As shown in fig. 1A, the MAC address is a 48-bit field, the first 24 bits are an Organization Unique Identifier (OUI), the last 24 bits are an extended Identifier, the 40 th bit of the MAC address is 0, which indicates a unicast MAC address and a multicast bit, the 41 th bit of the MAC address is 0, which indicates a global MAC, which indicates that the MAC address contains a vendor Identifier and 1 indicates a local MAC, and the local MAC indicates that the MAC address does not contain a vendor Identifier.
Referring to fig. 1B, fig. 1B is a system architecture diagram of an exemplary cloud computing system according to an embodiment of the present invention, where the cloud computing system includes a core Switch, a convergence Switch, a computing node and a control node, the core Switch is connected to the convergence Switch, the convergence Switch is used to connect the computing node and the control node, the computing node is used to deploy a Virtual Machine (VM) and a Virtual Switch (vSwitch), and the control node is used to deploy a network management module NetworkManager and a Virtual machine management module VMManager. The plurality of computing nodes are in communication connection through a bearer network formed by switches. A Virtual Machine management module (VMManager), a Network management module, and a Network database, Network DB, are deployed on the control node, a Virtual switch vSwitch, a Virtual switch Agent module vSwitch-Agent, a Virtual Machine VM (such as VM1 and VM3 on compute node 1, VM2 and VM4 on compute node 2), a Virtual Machine monitor Hypervisor, and a compute Agent management module computer Agent are deployed on the compute node, and the Network management module is responsible for issuing Virtual Network services, such as: the method comprises the steps that a network, a subnet and a port are created and used as a Control surface of a virtual network, a vSwitch-Agent is used for receiving connectivity information of a network manager, and then a corresponding forwarding flow table is issued to a vSwitch of a computing node, wherein the connectivity information comprises a corresponding relation between a Media Access Control (MAC) address of a VM of the current computing node and the virtual network, namely virtual topology, and all VMs belonging to the same virtual network can be communicated in two layers.
Referring to fig. 2A, fig. 2A is a schematic flowchart of a method for processing a packet in a cloud computing system according to an embodiment of the present invention, where the method is applied to a cloud computing system, and the cloud computing system includes a first computing node and a second computing node, where the first computing node is deployed with a first VM and a first vSwitch, the second computing node is deployed with a second VM and a second vSwitch, and the first computing node and the second computing node are communicatively connected through a bearer network, and the first VM and the second VM both belong to a first virtual network. The method comprises the following steps: parts 201-2013, specifically as follows:
201, a first VM sends a first Address Resolution Protocol (ARP) request, where the first ARP request carries an MAC Address of the first VM and an IP Address of an internet Protocol of a second VM.
202, a first vSwitch receives a first ARP request, extracts a MAC address of the first VM, creates a MAC address of the second VM according to the MAC address of the first VM and an IP address of the second VM, and sends a first ARP response carrying the MAC address of the second VM to the first VM, where a virtual network identifier field of the MAC address of the first VM is used as a virtual network identifier field of the MAC address of the second VM, a network segment to which the IP address of the second VM belongs is used for creating a private network number field of the MAC address of the second VM, and the last three bytes of the IP address of the second VM are used as an extended identifier field of the MAC address of the second VM.
The private network number field in the MAC address field of the VM is used for representing the private network segment number of the network segment to which the IP address of the VM belongs.
In one possible example, as shown in fig. 2B, the MAC address is an address field with 48 bits, the virtual network identification field of the MAC address is at least one of the 26 th bit to the 39 th bit and the 42 th bit to the 47 th bit of the MAC address, the private network number field of the MAC address is the 25 th bit and the 24 th bit of the MAC address, the extended identifier field of the MAC address is the 0 th bit to the 23 th bit of the MAC address, the 40 th bit of the MAC address is 0, and the 41 th bit of the MAC address is 1.
It can be seen that, in this possible example, the virtual network identifier field in the MAC address can reach 20 bits at most, that is, compared with the existing VLAN technology that only 4094 virtual network identifiers can be supported, the MAC address field structure provided in the embodiment of the present invention can theoretically support 2 bits at most20The virtual network identifiers of different virtual networks greatly expand the number of the virtual network identifiers supported by the cloud computing system, and the virtual network number bearing capacity of the cloud computing system is improved.
The communication process between the virtual machines in the cloud computing system adopts a unicast mode for communication, so that the 40 th bit is 0 and represents that the MAC address is a unicast address, and the 41 th bit is 1 and represents that the type of the MAC address is a local MAC because the type of the local MAC address is allowed to be customized by a user in a standard protocol. The 25 th bit and the 24 th bit 00 of the MAC address indicate a 10.x.x.x/8 private network segment number, the 25 th bit and the 24 th bit 01 indicate 172.16-32.x.x/16 private network segment number, and the 25 th bit and the 24 th bit 11 indicate 192.168.x.x/24 private network segment number. Such as: the network address field is 192.168.1.0/24, then the IP address is assigned from the network address field to 192.168.1.1, and the virtual network identification is 1, then the MAC address is obtained as: 02: 00: 06: a8: 01: 01.
in one possible example, the first vSwitch extracts the MAC address of the first VM, and the implementation manner of creating the MAC address of the second VM according to the MAC address of the first VM and the IP address of the second VM may be:
the first vSwitch judges that the first VM and the second VM belong to the same virtual network, extracts the MAC address of the first VM, and takes the virtual network identification field of the MAC address of the first VM as the virtual network identification field of the MAC address of the second VM; wherein the virtual network identifications of the plurality of VMs belonging to the unified virtual network are the same.
And the first vSwitch creates a private network number field of the MAC address of the second VM according to the network segment to which the IP address of the second VM belongs, and takes the last three bytes of the IP address of the second VM as an extended identifier field of the MAC address of the second VM.
After receiving the first ARP request, the first vSwitch-Agent determines the virtual network number of the virtual network where the first VM is located according to the MAC address of the first VM, queries whether a virtual port corresponding to the IP address of the second VM exists, and if not, judges that the first VM and the second VM do not belong to the same virtual network, and discards the first ARP request; if the virtual network address exists, the first VM and the second VM belong to the same virtual network, and a flow table is issued to the first vSwitch, wherein the flow table is used for indicating the first vSwitch to execute the operation of creating the MAC address of the second VM and sending an ARP response carrying the MAC address of the second VM to the first VM. The flow table specifically includes operation description information, where the operation description information is used to instruct the first vSwitch to execute an operation of creating the MAC address of the second VM, and send, to the first VM, description information of an ARP response that carries the MAC address of the second VM.
203, the first VM receives the first ARP response, and sends a first data packet carrying the MAC address of the second VM to the first vSwitch.
Wherein the first data packet further includes an IP address of the first VM.
204, the first vSwitch receives the first data packet, extracts the MAC address of the second VM in the first data packet, determines that the second VM is deployed on the second computing node according to the MAC address of the second VM, determines that the first VM and the second VM are deployed on different computing nodes, attaches the network identifier of the bearer network between the first computing node and the second computing node to the first data packet, and sends the first data packet attached with the network identifier of the bearer network to the switch in the bearer network.
In one possible example, the specific implementation manner of the first vSwitch determining, according to the MAC address of the second VM, that the second VM is deployed on the second computing node may be:
and the first vSwitch determines the virtual network card number of the second VM according to the MAC address of the second VM, queries the corresponding relation between the virtual network card number of the VM and the identification information of the computing node by taking the virtual network card number of the second VM as a query identifier, determines the computing node corresponding to the virtual network card number of the second VM as the second computing node, and thus determines that the second VM is deployed on the second computing node.
When a VMManager of a control node creates a VM on a computing node, the VMManager sends a corresponding relation between a virtual network card number of the VM and identification information of the computing node to a NetworkManager, the NetworkManager informs a vSwitch-Agent of the computing node of the obtained corresponding relation, and the vSwitch-Agent forwards the corresponding relation to the vSwitch, so that the corresponding relation between the virtual network card number of the VM and the identification information of the computing node is stored in the vSwitch.
205, the switch receives the first packet attached with the network identifier of the bearer network, and forwards the first packet attached with the network identifier of the bearer network to the second vSwitch according to the MAC address of the second VM in the first packet.
206, after receiving the first data packet attached with the network identifier of the bearer network, the second vSwitch unwraps the identifier information (i.e. removes the network identifier field), and forwards the first data packet to the second VM according to the MAC address of the second VM in the first data packet.
207, the second VM receives the first data packet, extracts the IP address of the first VM in the first data packet, and sends a second ARP request, where the second ARP request carries the MAC address of the second VM and the IP address of the first VM.
Because the protocol stack of the second VM does not cache the corresponding relationship between the IP address of the first VM and the MAC of the first VM in advance, the working principle of the protocol stack determines that the second VM needs to learn and cache the corresponding relationship between the IP address of the first VM and the MAC address of the first VM by sending the second ARP request and receiving the ARP query mechanism of the second ARP response, and after the corresponding relationship between the MAC address of the first VM and the IP address is cached in the protocol stack of the second VM, the second VM sends a data message to the first VM according to the corresponding relationship.
208, the second vSwitch receives the second ARP request, extracts the MAC address of the second VM, creates the MAC address of the first VM according to the IP address of the first VM and the MAC address of the second VM, and sends a second ARP response carrying the MAC address of the first VM to the second VM, wherein a virtual network identifier field of the MAC address of the second VM is used as a virtual network identifier field of the MAC address of the first VM, a network segment to which the IP address of the first VM belongs is used for creating a private network number field of the MAC address of the first VM, and the last three bytes of the IP address of the first VM are used as an extended identifier field of the MAC address of the first VM.
209, the second VM receives the second ARP response and sends a second data packet carrying the MAC address of the first VM to the second vSwitch.
After receiving the second ARP response, the second VM may cache a correspondence between the IP address of the first VM and the MAC of the first VM in the protocol stack, so that the operation of sending the second data packet may be performed according to the correspondence.
2010, the second vSwitch receives a second data packet, extracts a MAC address of the first VM in the second data packet, determines that the first VM is deployed on a first computing node according to the MAC address of the first VM, determines that the first VM and the second VM are deployed on different computing nodes, attaches a network identifier of a bearer network between the first computing node and the second computing node to the second data packet, and sends the second data packet attached with the network identifier of the bearer network to a switch in the bearer network.
2011, the switch receives the second packet with the network identifier of the bearer network, and forwards the second packet with the network identifier of the bearer network to the first vSwitch according to the MAC address of the first VM in the second packet.
2012, after the first vSwitch receives the second packet with the network identifier of the bearer network attached, the first vSwitch unwraps the network identifier (i.e. removes the network identifier field), and forwards the second packet to the first VM according to the MAC address of the first VM in the second packet.
2013, the first VM receives the second data packet.
After receiving the second data packet, the first VM may determine that the first VM and the second VM are connected in the current virtual network.
In the embodiment of the invention, the cloud computing system constructs the MAC address of the VM by using the virtual network identifier of the virtual network where the VM is located and the IP address information of the VM, and does not need to package an additional field in the data message to identify the virtual network, so that the length of the data message between the VMs in the cloud computing system is favorably reduced, the transmission processing time of the VM data message is shortened, and the forwarding efficiency of the data message between the VMs in the cloud computing system is favorably improved.
Referring to fig. 3, fig. 3 is a schematic flowchart of a message processing method in a cloud computing system according to an embodiment of the present invention, where the method is applied to the cloud computing system shown in fig. 1B. The method comprises the following steps: parts 301-308, specifically as follows:
in part 301, the VMManager detects the VM creation request, and forwards the VM creation request to the NetworkManager.
In part 302, the network manager receives a VM creation request, creates a virtual port of the VM, allocates a virtual network identifier of a virtual network to the virtual port, and allocates an IP address to the virtual port according to a network address segment of the virtual network.
The virtual network identifier may be distributed according to a sequentially distributed policy or a randomly distributed policy, which is not limited in the embodiments of the present invention. Similarly, the IP address of the virtual port is in the network address field and can be allocated according to the policy of sequential allocation.
In part 303, the network manager creates a virtual network identifier field of the MAC address of the virtual port according to the virtual network identifier, creates a private network number field of the MAC address of the virtual port according to the network segment to which the allocated IP address belongs, and creates an extended identifier field of the MAC address of the virtual port according to the last three bytes of the allocated IP address.
The private network number field in the MAC address field of the VM is used for representing the private network segment number of the network segment to which the IP address of the VM belongs.
In one possible example, as shown in fig. 2B, the MAC address is an address field with 48 bits, the virtual network identification field of the MAC address is one or more bits from 26 th bit to 39 th bit and from 42 th bit to 47 th bit of the MAC address, the private network number field of the MAC address is 25 th bit and 24 th bit of the MAC address, the extended identifier field of the MAC address is 0 th bit to 23 th bit of the MAC address, the 40 th bit of the MAC address is 0, and the 41 th bit of the MAC address is 1.
It can be seen that the number of virtual network identifiers in the MAC address can reach 20 bits at most, that is, compared with the existing VLAN technology which can only support 4094 virtual network identifiers, the MAC address field structure provided in the embodiment of the present invention can theoretically support 220 different virtual network identifiers at most, thereby greatly expanding the number of virtual network identifiers that can be supported by the cloud computing system, and facilitating improvement of the virtual network number carrying capacity of the cloud computing system.
The communication process between the virtual machines in the cloud computing system adopts a unicast mode for communication, so that the 40 th bit is 0 and represents that the MAC address is a unicast address, and the 41 th bit is 1 and represents that the type of the MAC address is a local MAC because the type of the local MAC address is allowed to be customized by a user in a standard protocol. The 25 th bit and the 24 th bit 00 of the MAC address indicate a 10.x.x.x/8 private network segment number, the 25 th bit and the 24 th bit 01 indicate 172.16-32.x.x/16 private network segment number, and the 25 th bit and the 24 th bit 11 indicate 192.168.x.x/24 private network segment number. Such as: the network address field is 192.168.1.0/24, then the IP address is assigned from the network address field to 192.168.1.1, and the virtual network identification is 1, then the MAC address is obtained as: 02: 00: 06: a8: 01: 01.
in part 304, the NetworkManager sends a VM deployment resource allocation request carrying the port number of the virtual port to the VMManager.
In part 305, the VMManager receives the VM deployment resource allocation request, allocates deployment resources for the VM to be created, sends a VM creation instruction carrying the deployment resource description information to a compute agent management module computer on the compute node according to the determined MAC address, and establishes a communication link between the virtual network card of the VM and the vSwitch of the compute node.
After the Computer Agent receives the VM creation instruction, the Computer Agent determines a deployment resource corresponding to the deployment resource description information, and creates a VM according to the deployment resource, in section 306.
In the embodiment of the invention, the cloud computing system constructs the MAC address of the VM by using the virtual network identifier of the virtual network where the VM is located and the IP address information of the VM, and does not need to package an additional field in the data message to identify the virtual network, so that the length of the data message between the VMs in the cloud computing system is favorably reduced, the transmission processing time of the VM data message is shortened, and the forwarding efficiency of the data message between the VMs in the cloud computing system is favorably improved.
The above description mainly introduces the scheme of the embodiment of the present invention from the perspective of interaction between devices of a cloud computing system. It is understood that each device, such as a computing node, a control node, a switch, etc., contains corresponding hardware structures and/or software modules for performing each function in order to realize the functions. Those of skill in the art will readily appreciate that the present invention can be implemented in hardware or a combination of hardware and computer software, with the exemplary elements and algorithm steps described in connection with the embodiments disclosed herein. Whether a function is performed as hardware or computer software drives hardware depends upon the particular application and design constraints imposed on the solution. Skilled artisans may implement the described functionality in varying ways for each particular application, but such implementation decisions should not be interpreted as causing a departure from the scope of the present invention.
In the embodiment of the present invention, functional units may be divided for the computing nodes and the like according to the above method examples, for example, each functional unit may be divided for each function, or two or more functions may be integrated into one processing unit. The integrated unit can be realized in a form of hardware, and can also be realized in a form of a software functional unit. It should be noted that the division of the unit in the embodiment of the present invention is schematic, and is only a logic function division, and there may be another division manner in actual implementation.
Referring to fig. 4A, fig. 4A is a functional unit block diagram of a message processing apparatus in a cloud computing system according to an embodiment of the present invention. The message processing apparatus 400 includes: a processing unit 402, a receiving unit 403 and a transmitting unit 404. The processing unit 402 is configured to control and manage actions of the message processing device, for example, the processing unit 402 is configured to support the message processing device to perform steps 201 and 204 and 206 and 2010 and 2012 in fig. 2A and/or other processes for the technology described herein. The receiving unit 403 and the sending unit 404 are used to support communication between the message processing apparatus and other devices in the cloud computing system, for example, communication with the control node shown in fig. 1B. The message processing apparatus may further comprise a storage unit 401 for storing program codes and data of the message processing apparatus.
The processing Unit 402 may be a Processor or a controller, such as a Central Processing Unit (CPU), a general-purpose Processor, a Digital Signal Processor (DSP), an Application-Specific Integrated Circuit (ASIC), a Field Programmable Gate Array (FPGA) or other Programmable logic device, a transistor logic device, a hardware component, or any combination thereof. Which may implement or perform the various illustrative logical blocks, modules, and circuits described in connection with the disclosure. The processor may also be a combination of computing functions, e.g., comprising one or more microprocessors, DSPs, and microprocessors, among others. The receiving unit 403 and the sending unit 404 may be a communication interface, a transceiver, a transceiving circuit, etc., wherein the communication interface is a generic term and may include one or more interfaces. The storage unit 401 may be a memory.
When the processing unit 402 is a processor, the receiving unit 403 and the sending unit 404 are transceivers, and the storage unit 401 is a memory, the message processing apparatus according to the embodiment of the present invention may be a computing node (first computing node) shown in fig. 4B.
Referring to fig. 4B, the computing node 410 is deployed with a first virtual machine VM and a first virtual switch vSwitch, and the computing node 410 includes: processor 412, transceiver 413, memory 411. Optionally, the RTD Service server 610 may further include a bus 414. Wherein, the transceiver 413, the processor 412 and the memory 411 may be connected to each other through a bus 414; the bus 414 may be a Peripheral Component Interconnect (PCI) bus, an Extended Industry Standard Architecture (EISA) bus, or the like. The bus 414 may be divided into an address bus, a data bus, a control bus, and the like. For ease of illustration, only one thick line is shown in FIG. 4B, but this does not indicate only one bus or one type of bus.
Referring to fig. 5A, fig. 5A is a functional unit block diagram of a message processing apparatus according to an embodiment of the present invention, where the message processing apparatus is a control node in the cloud computing system, the message processing apparatus 500 includes a Network management module Network Manager501 and a virtual machine management module VMManager502, and the Network management module 501 and the VMManager502 are used to support the message processing apparatus to execute step 301 and step 305 in fig. 3.
Referring to fig. 5B, fig. 5B is a schematic structural diagram of a control node in a cloud computing system, where the control node is deployed with a Network management module Network Manager and a virtual machine management module VMManager, and the control node 510 includes: a processor 512, a transceiver 513, a memory 511. Optionally, control node 510 may also include a bus 514. Wherein, the transceiver 513, the processor 512 and the memory 511 may be connected to each other by a bus 514; the bus 514 may be a Peripheral Component Interconnect (PCI) bus, an Extended Industry Standard Architecture (EISA) bus, or the like. The bus 514 may be divided into an address bus, a data bus, a control bus, etc. For ease of illustration, only one thick line is shown in FIG. 5B, but this is not intended to represent only one bus or type of bus.
Embodiments of the present invention also provide a computer program product, which includes instructions, and when the computer program product is executed by a computer, the computer executes some or all of the steps described in any of the above method embodiments. The computer program product may be a software installation package.
It should be noted that, for simplicity of description, the above-mentioned method embodiments are described as a series of acts or combination of acts, but those skilled in the art will recognize that the present invention is not limited by the order of acts, as some steps may occur in other orders or concurrently in accordance with the invention. Further, those skilled in the art should also appreciate that the embodiments described in the specification are preferred embodiments and that the acts and modules referred to are not necessarily required by the invention.
In the foregoing embodiments, the descriptions of the respective embodiments have respective emphasis, and for parts that are not described in detail in a certain embodiment, reference may be made to related descriptions of other embodiments.
In the embodiments provided in the present application, it should be understood that the disclosed apparatus may be implemented in other manners. For example, the above-described embodiments of the apparatus are merely illustrative, and for example, the division of the units is only one type of division of logical functions, and there may be other divisions when actually implementing, for example, a plurality of units or components may be combined or may be integrated into another system, or some features may be omitted, or not implemented. In addition, the shown or discussed mutual coupling or direct coupling or communication connection may be an indirect coupling or communication connection of some interfaces, devices or units, and may be an electric or other form.
The units described as separate parts may or may not be physically separate, and parts displayed as units may or may not be physical units, may be located in one place, or may be distributed on a plurality of network units. Some or all of the units can be selected according to actual needs to achieve the purpose of the solution of the embodiment.
In addition, functional units in the embodiments of the present invention may be integrated into one processing unit, or each unit may exist alone physically, or two or more units are integrated into one unit. The integrated unit can be realized in a form of hardware, and can also be realized in a form of a software functional unit.
The integrated unit, if implemented in the form of a software functional unit and sold or used as a stand-alone product, may be stored in a computer readable memory. Based on such understanding, the technical solution of the present invention may be embodied in the form of a software product, which is stored in a memory and includes several instructions for causing a computer device (which may be a personal computer, a server, a network device, or the like) to execute all or part of the steps of the method according to the embodiments of the present invention. And the aforementioned memory comprises: a U-disk, a Read-Only Memory (ROM), a Random Access Memory (RAM), a removable hard disk, a magnetic or optical disk, and other various media capable of storing program codes.
Those skilled in the art will appreciate that all or part of the steps in the methods of the above embodiments may be implemented by associated hardware instructed by a program, which may be stored in a computer-readable memory, which may include: flash Memory disks, Read-Only memories (ROMs), Random Access Memories (RAMs), magnetic or optical disks, and the like.
The above embodiments of the present invention are described in detail, and the principle and the implementation of the present invention are explained by applying specific embodiments, and the above description of the embodiments is only used to help understanding the method of the present invention and the core idea thereof; meanwhile, for a person skilled in the art, according to the idea of the present invention, there may be variations in the specific embodiments and the application scope, and in summary, the content of the present specification should not be construed as a limitation to the present invention.

Claims (21)

1. A message processing method in a cloud computing system is characterized in that the cloud computing system comprises a first computing node, a first Virtual Machine (VM) and a first virtual switch (vSwitch) are deployed on the first computing node, and the method comprises the following steps:
the first vSwitch receives an Address Resolution Protocol (ARP) request sent by the first VM, wherein the ARP request carries a Media Access Control (MAC) address of the first VM and an Internet Protocol (IP) address of a second VM, and the second VM and the first VM belong to the same virtual network;
the first vSwitch extracts the MAC address of the first VM, and creates the MAC address of the second VM according to the MAC address of the first VM and the IP address of the second VM, wherein a virtual network identification field of the MAC address of the first VM is used as a virtual network identification field of the MAC address of the second VM, a network segment to which the IP address of the second VM belongs is used for creating a private network number field of the MAC address of the second VM, and the last three bytes of the IP address of the second VM are used as an extended identifier field of the MAC address of the second VM;
and the first vSwitch sends an ARP response carrying the MAC address of the second VM to the first VM.
2. The method of claim 1, wherein the cloud computing system further comprises a second computing node, the second VM and the second vSwitch being deployed on the second computing node, the first computing node and the second computing node being communicatively connected via a bearer network comprising switches; after the first vSwitch sends the ARP response carrying the MAC address of the second VM to the first VM, the method further includes:
the first vSwitch receives a first data packet sent by the first VM, where the first data packet carries an MAC address of the second VM;
the first vSwitch determines that the second VM is deployed on the second computing node according to the MAC address of the second VM, adds a network identifier of the bearer network to the first data packet, and sends the first data packet to the second VM through the switch and the second vSwitch;
the first vSwitch receives a second data packet sent by the second VM after receiving the first data packet, where the second data packet includes a network identifier of the bearer network and a MAC address of the first VM;
and the first vSwitch removes the network identifier of the bearer network, and forwards the second data packet to the first VM according to the MAC address of the first VM in the second data packet.
3. The method of claim 1 or 2, wherein the first vSwitch extracts the MAC address of the first VM, and creates the MAC address of the second VM from the MAC address of the first VM and the IP address of the second VM, comprising:
the first vSwitch judges that the first VM and the second VM belong to the same virtual network, extracts the MAC address of the first VM, and takes the virtual network identification field of the MAC address of the first VM as the virtual network identification field of the MAC address of the second VM;
and the first vSwitch creates a private network number field of the MAC address of the second VM according to the network segment to which the IP address of the second VM belongs, and takes the last three bytes of the IP address of the second VM as an extended identifier field of the MAC address of the second VM.
4. The method according to any one of claims 1-2, wherein the MAC address is a 48-bit address field, the virtual network identification field of the MAC address is at least one of the 26 th bit to the 39 th bit and the 42 th bit to the 47 th bit of the MAC address, the private network number field of the MAC address is the 25 th bit and the 24 th bit of the MAC address, the extended identifier field of the MAC address is the 0 th bit to the 23 th bit of the MAC address, the 40 th bit of the MAC address is 0, and the 41 th bit of the MAC address is 1.
5. The method according to claim 3, wherein the MAC address is an address field with 48 bits, the virtual network identification field of the MAC address is at least one of the 26 th bit to the 39 th bit and the 42 th bit to the 47 th bit of the MAC address, the private network number field of the MAC address is the 25 th bit and the 24 th bit of the MAC address, the extended identifier field of the MAC address is the 0 th bit to the 23 th bit of the MAC address, the 40 th bit of the MAC address is 0, and the 41 th bit of the MAC address is 1.
6. A message processing method in a cloud computing system is characterized in that the cloud computing system comprises a control node, the control node is provided with a Network management module Network Manager and a virtual machine management module VMmanager, and the method comprises the following steps:
the network manager receives a VM creation request sent by the VMManager, creates a virtual port of the VM, and allocates a virtual network identifier of a virtual network to which the VM to be created belongs and an IP address of the VM to be created to the virtual port;
and the network manager creates a virtual network identification field of the MAC address of the virtual port according to the virtual network identification, creates a private network number field of the MAC address of the virtual port according to the network segment to which the allocated IP address belongs, and creates an extended identifier field of the MAC address of the virtual port according to the last three bytes of the allocated IP address.
7. The method of claim 6, wherein after the NetworkManager creates the extended identifier field of the MAC address of the virtual port from the last three bytes of the allocated IP address, the method further comprises:
the network manager sends a VM deployment resource allocation request carrying the port number of the virtual port to a VMManager, wherein the VM deployment resource allocation request is used for indicating the VMManager to allocate deployment resources for the VM to be created;
and the VMManager receives the VM deployment resource allocation request, allocates deployment resources for the VM to be created, and sends a VM creation instruction carrying deployment resource description information to a computing node according to the MAC address of the virtual port, wherein the VM creation instruction is used for indicating the computing node to create the VM by using the deployment resources corresponding to the deployment resource description information.
8. The method according to claim 6 or 7, wherein the MAC address is a 48-bit address field, the virtual network identification field of the MAC address is one or more of the 26 th bit to the 39 th bit and the 42 th bit to the 47 th bit of the MAC address, the private network number field of the MAC address is the 25 th bit and the 24 th bit of the MAC address, the extended identifier field of the MAC address is the 0 th bit to the 23 th bit of the MAC address, the 40 th bit of the MAC address is 0, and the 41 th bit of the MAC address is 1.
9. A message processing device of a cloud computing system is characterized in that the device is deployed in a first computing node in the cloud computing system, a first Virtual Machine (VM) is also deployed in the first computing node, the device comprises a receiving unit, a sending unit and a processing unit,
the receiving unit is configured to receive an Address Resolution Protocol (ARP) request sent by the first VM, where the ARP request carries a Media Access Control (MAC) address of the first VM and an Internet Protocol (IP) address of a second VM, and the second VM and the first VM belong to the same virtual network;
the processing unit is configured to extract the MAC address of the first VM from the ARP request received by the receiving unit, and create the MAC address of the second VM according to the MAC address of the first VM and the IP address of the second VM, where a virtual network identifier field of the MAC address of the first VM is used as a virtual network identifier field of the MAC address of the second VM, a network segment to which the IP address of the second VM belongs is used for creating a private network number field of the MAC address of the second VM, and the last three bytes of the IP address of the second VM are used as an extended identifier field of the MAC address of the second VM;
and the sending unit is used for sending an ARP response carrying the MAC address of the second VM to the first VM.
10. The apparatus of claim 9, wherein the cloud computing system further comprises a second computing node, the second VM and the second vSwitch being deployed on the second computing node, the first computing node and the second computing node being communicatively connected via a bearer network comprising switches;
the receiving unit is further configured to receive a first data packet sent by the first VM, where the first data packet carries an MAC address of the second VM;
the processing unit is further configured to determine, according to the MAC address of the second VM, that the second VM is deployed on the second computing node, and add a network identifier of the bearer network to the first data packet;
the sending unit is further configured to send the first data packet to the second VM through the switch and the second vSwitch;
the receiving unit is further configured to receive a second data packet sent by the second VM after receiving the first data packet, where the second data packet includes a network identifier of the bearer network and a MAC address of the first VM;
the processing unit is further configured to remove the network identifier of the bearer network carried by the second data packet, and forward the second data packet to the first VM according to the MAC address of the first VM in the second data packet.
11. The apparatus according to claim 9 or 10, wherein the processing unit is specifically configured to: judging that the first VM and the second VM belong to the same virtual network, extracting the MAC address of the first VM, and taking the virtual network identification field of the MAC address of the first VM as the virtual network identification field of the MAC address of the second VM; and a private network number field used for creating the MAC address of the second VM according to the network segment to which the IP address of the second VM belongs, and taking the last three bytes of the IP address of the second VM as an extended identifier field of the MAC address of the second VM.
12. The apparatus according to any one of claims 9-10, wherein the MAC address is a 48-bit address field, the virtual network identification field of the MAC address is at least one of the 26 th bit to the 39 th bit and the 42 th bit to the 47 th bit of the MAC address, the private network number field of the MAC address is the 25 th bit and the 24 th bit of the MAC address, the extended identifier field of the MAC address is the 0 th bit to the 23 th bit of the MAC address, the 40 th bit of the MAC address is 0, and the 41 th bit of the MAC address is 1.
13. The apparatus according to claim 11, wherein the MAC address is an address field with 48 bits, the virtual network identification field of the MAC address is at least one of the 26 th bit to the 39 th bit and the 42 th bit to the 47 th bit of the MAC address, the private network number field of the MAC address is the 25 th bit and the 24 th bit of the MAC address, the extended identifier field of the MAC address is the 0 th bit to the 23 th bit of the MAC address, the 40 th bit of the MAC address is 0, and the 41 th bit of the MAC address is 1.
14. The message processing device of the cloud computing system is characterized in that the message processing device is a control node in the cloud computing system, the message processing device comprises a Network management module Network Manager and a virtual machine management module VMmanager, and the virtual machine management module is used for sending a VM (virtual machine) creation request to the Network management module;
the network management module is used for receiving a VM creation request sent by the virtual machine management module, creating a virtual port of a VM, and allocating a virtual network identifier of a virtual network to which the VM to be created belongs and an IP address of the VM to be created to the virtual port;
the network management module is further configured to create a virtual network identifier field of the MAC address of the virtual port according to the virtual network identifier, create a private network number field of the MAC address of the virtual port according to the network segment to which the allocated IP address belongs, and create an extended identifier field of the MAC address of the virtual port according to the last three bytes of the allocated IP address.
15. The apparatus of claim 14,
the network management module is further configured to send a VM deployment resource allocation request carrying a port number of the virtual port to the virtual machine management module, where the VM deployment resource allocation request is used to instruct the virtual machine management module to allocate deployment resources to the VM to be created;
the virtual machine management module is further configured to receive the VM deployment resource allocation request, allocate deployment resources to the VM to be created, and send a VM creation instruction carrying deployment resource description information to a compute node according to the MAC address of the virtual port, where the VM creation instruction is used to instruct the compute node to create a VM using the deployment resource corresponding to the deployment resource description information.
16. The apparatus according to claim 14 or 15, wherein the MAC address is a 48-bit address field, the virtual network identification field of the MAC address is one or more of bits 26 to 39 and bits 42 to 47 of the MAC address, the private network number field of the MAC address is bits 25 and 24 of the MAC address, the extended identifier field of the MAC address is bits 0 to 23 of the MAC address, the bit 40 of the MAC address is 0, and the bit 41 is 1.
17. A first computing node, wherein a first Virtual Machine (VM) and a first virtual switch (vSwitch) are deployed on the first computing node, the computing node comprises a processor, a communication interface, a memory and a bus, and the processor, the communication interface and the memory complete communication with each other through the bus;
the memory stores executable program code;
the processor is configured to call executable program code in the memory to perform the method as described in any of claims 1 to 5.
18. A control node is characterized in that a Network management module Network Manager and a virtual machine management module VMmanager are deployed in the control node, the control node comprises a processor, a communication interface, a memory and a bus, and the processor, the communication interface and the memory complete mutual communication through the bus;
the memory stores executable program code;
the processor is configured to call executable program code in the memory to perform the method as described in any one of claims 6 to 8.
19. A cloud computing system comprising a first computing node as claimed in claim 17 and a control node as claimed in claim 18.
20. A computer-readable storage medium, characterized in that,
the computer-readable storage medium stores a computer program which, when executed by hardware, is capable of implementing the method of any one of claims 1 to 5.
21. A computer-readable storage medium, characterized in that,
the computer-readable storage medium stores a computer program which, when executed by hardware, is capable of implementing the method of any one of claims 6 to 8.
CN201680091420.2A 2016-12-08 2016-12-08 Message processing method and device in cloud computing system Active CN110063045B (en)

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
PCT/CN2016/109044 WO2018103043A1 (en) 2016-12-08 2016-12-08 Message processing method and device in a cloud computing system

Publications (2)

Publication Number Publication Date
CN110063045A CN110063045A (en) 2019-07-26
CN110063045B true CN110063045B (en) 2020-09-08

Family

ID=62490641

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201680091420.2A Active CN110063045B (en) 2016-12-08 2016-12-08 Message processing method and device in cloud computing system

Country Status (2)

Country Link
CN (1) CN110063045B (en)
WO (1) WO2018103043A1 (en)

Families Citing this family (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN111190685B (en) * 2018-11-15 2023-07-21 中国移动通信有限公司研究院 Virtual machine quantity testing system, method and device, electronic equipment and storage medium
CN111510310B (en) * 2019-01-30 2023-05-23 顺丰科技有限公司 Network mode implementation method and device under public cloud architecture
CN111163187B (en) * 2019-12-31 2022-08-16 奇安信科技集团股份有限公司 MAC address generation method and device for virtual machine network port
CN112839072B (en) * 2020-10-19 2023-06-30 南京中兴新软件有限责任公司 Data processing method, device, system, computer equipment and readable medium
CN114448815B (en) * 2021-12-27 2023-11-03 天翼云科技有限公司 CDN node data generation method and device based on network topology and computer equipment

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102075591A (en) * 2010-12-21 2011-05-25 华为技术有限公司 Method, device and system for acquiring media access control address
CN102457439A (en) * 2011-12-07 2012-05-16 中标软件有限公司 Virtual switching system and method of cloud computing system
CN102710814A (en) * 2012-06-21 2012-10-03 奇智软件（北京）有限公司 Method and device for controlling Internet protocol (IP) address of virtual machine
CN103718527A (en) * 2013-03-30 2014-04-09 华为技术有限公司 Communication security processing method, apparatus and system

Family Cites Families (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP5585219B2 (en) * 2010-06-03 2014-09-10 富士通株式会社 Switching device and virtual LAN construction method
US8929377B2 (en) * 2011-03-15 2015-01-06 Futurewei Technologies, Inc. Systems and methods for automatic rack detection
WO2011113393A2 (en) * 2011-04-27 2011-09-22 华为技术有限公司 Virtual local area network identity transformation method and apparatus
US8923149B2 (en) * 2012-04-09 2014-12-30 Futurewei Technologies, Inc. L3 gateway for VXLAN
US8964735B2 (en) * 2012-05-18 2015-02-24 Rackspace Us, Inc. Translating media access control (MAC) addresses in a network hierarchy
CN106034060A (en) * 2015-03-09 2016-10-19 中兴通讯股份有限公司 Method and system for realizing virtual network

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102075591A (en) * 2010-12-21 2011-05-25 华为技术有限公司 Method, device and system for acquiring media access control address
CN102457439A (en) * 2011-12-07 2012-05-16 中标软件有限公司 Virtual switching system and method of cloud computing system
CN102710814A (en) * 2012-06-21 2012-10-03 奇智软件（北京）有限公司 Method and device for controlling Internet protocol (IP) address of virtual machine
CN103718527A (en) * 2013-03-30 2014-04-09 华为技术有限公司 Communication security processing method, apparatus and system

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
《云计算访问控制技术研究综述》;王于丁等;《软件学报》;20150515;第26卷(第5期);第1129-1150页 *

Also Published As

Publication number Publication date
WO2018103043A1 (en) 2018-06-14
CN110063045A (en) 2019-07-26

Similar Documents

Publication Publication Date Title
US11190375B2 (en) Data packet processing method, host, and system
CN110063045B (en) Message processing method and device in cloud computing system
JP6605713B2 (en) Packet processing method, host and system in cloud computing system
CN110099014B (en) Message processing method and host in cloud computing system
CN107924383B (en) System and method for network function virtualized resource management
CN106533890B (en) Message processing method, device and system
CN108924268B (en) Container cloud service system and pod creation method and device
CN108347493B (en) Hybrid cloud management method and device and computing equipment
WO2016034014A1 (en) Gateway control method, device and system based on virtual machine migration
WO2015149253A1 (en) Data center system and virtual network management method of data center
WO2016028927A1 (en) Methods and system for allocating an ip address for an instance in a network function virtualization (nfv) system
US20130024553A1 (en) Location independent dynamic IP address assignment
WO2018019092A1 (en) Method for allocating vlan id in network, and controller
EP3125504B1 (en) Resource allocation method, packet communication method and device
CN109981493B (en) Method and device for configuring virtual machine network
WO2017113300A1 (en) Route determining method, network configuration method and related device
CN109617816B (en) Data message transmission method and device
CN114338397B (en) Cloud platform network configuration method, device, server, storage medium and system
CN114338606B (en) Public cloud network configuration method and related equipment
WO2016183832A1 (en) Network service instantiation method and device
CN111294268B (en) Method and device for avoiding IP address conflict
WO2014101145A1 (en) Method and apparatus for transmitting network information
CN107547247B (en) IP address allocation method and device for three-layer management network in intelligent elastic architecture
CN112583655A (en) Data transmission method and device, electronic equipment and readable storage medium
CN111262771B (en) Virtual private cloud communication system, system configuration method and controller

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant
TR01 Transfer of patent right
TR01 Transfer of patent right

Effective date of registration: 20220207

Address after: 550025 Huawei cloud data center, jiaoxinggong Road, Qianzhong Avenue, Gui'an New District, Guiyang City, Guizhou Province

Patentee after: Huawei Cloud Computing Technology Co.,Ltd.

Address before: 518129 Bantian HUAWEI headquarters office building, Longgang District, Guangdong, Shenzhen

Patentee before: HUAWEI TECHNOLOGIES Co.,Ltd.