CN112350918B

CN112350918B - Service traffic scheduling method, device, equipment and storage medium

Info

Publication number: CN112350918B
Application number: CN202011434105.XA
Authority: CN
Inventors: 薛秋宝; 黄华桥; 曾伟
Original assignee: Wuhan Greenet Information Service Co Ltd
Current assignee: Wuhan Greenet Information Service Co Ltd
Priority date: 2020-12-10
Filing date: 2020-12-10
Publication date: 2021-03-23
Anticipated expiration: 2040-12-10
Also published as: CN112350918A

Abstract

The application provides a method, a device, equipment and a storage medium for scheduling service traffic, which comprises the following steps: establishing a plurality of VXLAN tunnels between the virtual switch and the plurality of service gateways, wherein the service types of the service flows corresponding to the plurality of VXLAN tunnels are the same; if a faulty VXLAN tunnel exists in the VXLAN tunnels, determining at least one target VXLAN tunnel from the VXLAN tunnels except the faulty VXLAN tunnel; and distributing the service flow corresponding to the fault VXLAN tunnel to the at least one target VXLAN tunnel. The method and the device can realize flexible scheduling of the service flow, are favorable for finding out the fault reason in time, realize load balance of each VXLAN tunnel in the service control system, are favorable for benign operation of the system, and provide a good operation environment for processing the service flow.

Description

Service traffic scheduling method, device, equipment and storage medium

Technical Field

The present application relates to the field of communications technologies, and in particular, to a method and an apparatus for scheduling traffic, a computer device, and a storage medium.

Background

With the development of Network technology, the capacity of internet data center networks is continuously expanded, and Ethernet Virtual private Network (EVNP) technology using the Virtual eXtensible LAN (VXLAN) technology is increasingly applied. VXLAN is a network virtualization technology, can improve the expansion problem of large cloud computing when deploying, and is an expansion to VLAN. VXLAN is a powerful tool that can extend two layers across a three-layer network. It can address the portability limitation of VMS (virtual memory system) by encapsulating traffic and extending it to a third tier gateway, making it accessible to servers on external IP subnets.

VXLAN takes the encapsulation format of encapsulating the original ethernet packet in a UDP packet. The original two-layer data frame, together with the VXLAN header, is encapsulated in a UDP packet. The VXLAN header contains a VXLAN Identifier (i.e., VNI) that only enables communication between virtual machines on the same VXLAN. The VNI occupies 24 bits in the data packet, so that 1600 ten thousand VXLAN can be supported and exist simultaneously, which is far more than 4094 of VLANs, and thus, the VNI can adapt to the deployment of large-scale tenants. The VXLAN technology can support more service flows, and the large amount of service flows easily cause confusion.

Disclosure of Invention

The application provides a service traffic scheduling method, a service traffic scheduling device, a computer device and a storage medium, can realize flexible scheduling of service traffic, is favorable for finding out fault reasons in time, realizes load balancing of VXLAN tunnels in a service control system, is favorable for benign operation of the system, and provides a good operating environment for processing service traffic.

According to an aspect of the present application, a service traffic scheduling method is provided, which is applied to a service control system, where the service control system includes a plurality of service gateways, the service control system is a distributed system, and the method includes:

establishing a plurality of VXLAN tunnels between the virtual switch and the plurality of service gateways, wherein the service types of the service flows corresponding to the plurality of VXLAN tunnels are the same;

if a faulty VXLAN tunnel exists in the VXLAN tunnels, determining at least one target VXLAN tunnel from the VXLAN tunnels except the faulty VXLAN tunnel;

and distributing the service flow corresponding to the fault VXLAN tunnel to the at least one target VXLAN tunnel.

According to an aspect of the present application, there is provided a service traffic scheduling apparatus, which is applied to a service control system, where the service control system includes a plurality of service gateways, the service control system is a distributed system, and the apparatus includes:

the system comprises an establishing module, a service gateway and a service gateway, wherein the establishing module is used for establishing a plurality of VXLAN tunnels between a virtual switch and the plurality of service gateways, and the service types of the service flows corresponding to the plurality of VXLAN tunnels are the same;

a determining module, configured to determine at least one target VXLAN tunnel from other VXLAN tunnels of the plurality of VXLAN tunnels except the failed VXLAN tunnel if the failed VXLAN tunnel exists in the plurality of VXLAN tunnels;

and the distribution module is used for distributing the service flow corresponding to the fault VXLAN tunnel to the at least one target VXLAN tunnel.

According to an aspect of the present application, there is also provided a traffic flow scheduling device, where the computer device includes:

one or more processors;

a memory; and

one or more application programs, wherein the one or more application programs are stored in the memory and configured to be executed by the processor to perform the operations of any of the methods described above.

According to an aspect of the application, there is also provided a computer-readable storage medium having stored thereon a computer program, which is loaded by a processor to perform the operations of any of the methods described above.

According to the method and the device, the service flow in the VXLAN tunnel with the fault is controlled, the flexible scheduling of the service flow is realized, the fault reason can be found in time, the load balance of each VXLAN tunnel in a service control system can be realized, the benign operation of the system can be facilitated, and a good operation environment can be provided for the processing of the service flow.

Drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings needed to be used in the description of the embodiments are briefly introduced below, and it is obvious that the drawings in the following description are only some embodiments of the present invention, and it is obvious for those skilled in the art to obtain other drawings based on these drawings without creative efforts.

Fig. 1 illustrates a scene schematic diagram of service traffic scheduling provided in an embodiment of the present application;

fig. 2 is a flowchart illustrating a method of a service traffic scheduling method provided in an embodiment of the present application;

fig. 3 illustrates functional modules of a service traffic scheduling apparatus provided in an embodiment of the present application;

FIG. 4 illustrates an exemplary system that can be used to implement the various embodiments described in this application.

The same or similar reference numbers in the drawings identify the same or similar elements.

Detailed Description

The technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the drawings in the embodiments of the present application, and it is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all of the embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.

In the description of the present invention, it is to be understood that the terms "center", "longitudinal", "lateral", "length", "width", "thickness", "upper", "lower", "front", "rear", "left", "right", "vertical", "horizontal", "top", "bottom", "inner", "outer", etc. indicate orientations or positional relationships based on those shown in the drawings, and are only for convenience of description and simplicity of description, but do not indicate or imply that the device or element being referred to must have a particular orientation, be constructed and operated in a particular orientation, and thus, should not be considered as limiting the present invention. Furthermore, the terms "first", "second" and "first" are used for descriptive purposes only and are not to be construed as indicating or implying relative importance or implicitly indicating the number of technical features indicated. Thus, features defined as "first", "second", may explicitly or implicitly include one or more of the described features. In the description of the present invention, "a plurality" means two or more unless specifically defined otherwise.

In this application, the word "exemplary" is used to mean "serving as an example, instance, or illustration. Any embodiment described herein as "exemplary" is not necessarily to be construed as preferred or advantageous over other embodiments. The following description is presented to enable any person skilled in the art to make and use the invention. In the following description, details are set forth for the purpose of explanation. It will be apparent to one of ordinary skill in the art that the present invention may be practiced without these specific details. In other instances, well-known structures and processes are not shown in detail to avoid obscuring the description of the invention with unnecessary detail. Thus, the present invention is not intended to be limited to the embodiments shown, but is to be accorded the widest scope consistent with the principles and features disclosed herein.

It should be noted that, since the method in the embodiment of the present application is executed in the computing device, the processing objects of each computing device exist in the form of data or information, for example, time, which is substantially time information, it can be understood that, in the subsequent embodiments, if the size, the number, the position, and the like are mentioned, corresponding data exist, so that the electronic device performs processing, and details are not described herein.

In a typical configuration of the present application, a terminal or trusted party, etc. may include one or more processors (e.g., a Central Processing Unit (CPU), an input/output interface, a network interface, and a Memory.

Computer-readable media, including both non-transitory and non-transitory, removable and non-removable media, may implement information storage by any method or technology. The information may be computer readable instructions, data structures, modules of a program, or other data. Examples of computer storage media include, but are not limited to, Phase-Change Memory (PCM), Programmable Random Access Memory (PRAM), Static Random-Access Memory (SRAM), Dynamic Random Access Memory (DRAM), other types of Random Access Memory (RAM), Read-Only Memory (ROM), Electrically Erasable Programmable Read-Only Memory (EEPROM), flash Memory or other Memory technology, Compact Disc Read-Only Memory (CD-ROM), Digital Versatile Disc (DVD) or other optical storage, magnetic tape storage or other magnetic storage devices, or any other non-transmission medium, may be used to store information that may be accessed by the computing device.

The device referred to in the present application includes, but is not limited to, a terminal, a network device, or a device formed by integrating a terminal and a network device through a network. The terminal includes, but is not limited to, any mobile electronic product, such as a smart phone, a tablet computer, etc., capable of performing human-computer interaction with a user (e.g., human-computer interaction through a touch panel), and the mobile electronic product may employ any operating system, such as an Android operating system, an iOS operating system, etc. The network Device includes an electronic Device capable of automatically performing numerical calculation and information processing according to a preset or stored instruction, and the hardware includes, but is not limited to, a microprocessor, an Application Specific Integrated Circuit (ASIC), a Programmable Logic Device (PLD), a Field Programmable Gate Array (FPGA), a Digital Signal Processor (DSP), an embedded Device, and the like. The network device includes but is not limited to a computer, a network host, a single network server, a plurality of network server sets or a cloud of a plurality of servers; here, the Cloud is composed of a large number of computers or web servers based on Cloud Computing (Cloud Computing), which is a kind of distributed Computing, one virtual supercomputer consisting of a collection of loosely coupled computers. Including, but not limited to, the internet, a wide area network, a metropolitan area network, a local area network, a VPN network, a wireless Ad Hoc network (Ad Hoc network), etc. Preferably, the device may also be a program running on the terminal, the network device, or a device formed by integrating the terminal and the network device, the touch terminal, or the network device and the touch terminal through a network.

Of course, those skilled in the art will appreciate that the foregoing is by way of example only, and that other existing or future devices, which may be suitable for use in the present application, are also encompassed within the scope of the present application and are hereby incorporated by reference.

The application provides a service traffic scheduling method, which is applied to a control device, wherein the control device is included in a service control system, and the control device is used for realizing load balancing of service traffic when a user sends service traffic corresponding to the user, for example, the traffic of the user is balanced through each VXLAN tunnel. As shown in fig. 1, in the communication process between a terminal (User Equipment, UE) and a Content Provider (ICP), a corresponding Data Center Switch (DCSW) exists, the data center switch performs data exchange through a corresponding gateway, such as a virtual switch vSwitch and the like corresponding to the access gateway, a plurality of virtual Customer Premise Equipment (vCPE) exist in the access gateway, each virtual terminal establishes a corresponding VXLAN tunnel with a service gateway through the access gateway, each service gateway is connected with a corresponding cloud through mech, if the gateway corresponding to the storage service establishes the memory connection with the cloud NAS system after the gateway converts the IP Address through a Network Address Translation (NAT) technology, the gateway corresponding to the monitoring service establishes a media connection with the cloud monitoring system after converting the IP Address through a Network Address Translation (NAT) technology. In practical applications, NAT technology is mainly used to implement the function of private network accessing public network. Of course, the service types also include security services, and a corresponding Firewall (FW) and an Intrusion Detection System (IDS) are provided for a corresponding gateway. This way of representing more private network IP addresses by using a small number of public network IP addresses will help slow down the exhaustion of available public network IP addresses. The private network IP address refers to an IP address of an internal network or a host, and the public network IP address refers to an IP address that is globally unique on the internet. A Local Area Network (LAN) is a computer communication Network formed by connecting various computers, external devices, databases, etc. within a Local geographical Area (such as a school, a factory, and a institution), and the LAN is a private Network.

The service control system further comprises corresponding NAT conversion equipment, which is mainly used for acquiring the forward message sent by the terminal, forwarding the forward message to the service system after NAT conversion, receiving the reverse message sent by the service system, sending the reverse message to the terminal after NAT conversion, and realizing message transmission between the terminal and the service system.

It can be understood that, after the service system receives the forward message, the service system responds accordingly according to the received forward message, and sends the corresponding reverse message to the NAT conversion device, and after the NAT conversion device performs NAT conversion on the reverse message, the NAT conversion device forwards the converted reverse message to the corresponding terminal according to the destination address of the reverse message after NAT conversion.

The NAT function in the NAT translation device may be implemented by a router or a firewall or other NAT devices. From the perspective of implementing Translation mode, NAT can be divided into Port Address Translation (PAT) with Port and NO-Port Address Translation (NO-PAT). In the NO-PAT mode, a public network IP address can be only divided into a private network IP address at the same time for conversion; in the PAT mode, a public IP address can be simultaneously allocated to a plurality of private IP addresses for sharing. NAT, as it appears in this application, refers to PAT mode.

It should be noted that the service control system may be a distributed system architecture, where the distributed system architecture includes at least one interface board and multiple service boards, and in the distributed system architecture, a distributed processing manner is required to implement NAT, that is, multiple service boards perform NAT processing independently and concurrently.

Those skilled in the art can understand that the application environment shown in fig. 1 is only one application scenario of the present application, and does not constitute a limitation on the application scenario of the present application, and as a person skilled in the art knows, with the evolution of the service control system and the appearance of a new service scenario, the technical solution provided in the embodiment of the present application is also applicable to similar technical problems.

Fig. 2 shows a service traffic scheduling method according to an aspect of the present application, which is applied to a service control system, where the service control system includes a plurality of service gateways, the service control system is a distributed system, and the method includes step S101, step S102, and step S103. In step S101, a plurality of VXLAN tunnels are established between the virtual switch and the plurality of service gateways according to the resource file, and corresponding VXLAN tunnels are allocated from the plurality of VXLAN tunnels according to access information of each service traffic, wherein service types of the service traffic corresponding to the plurality of VXLAN tunnels are the same; in step S102, if there is a failed VXLAN tunnel among the plurality of VXLAN tunnels, determining at least one target VXLAN tunnel from other VXLAN tunnels of the plurality of VXLAN tunnels except the failed VXLAN tunnel; in step S103, the service traffic corresponding to the failed VXLAN tunnel is allocated to the at least one target VXLAN tunnel. The service gateways are divided into different types of service gateways according to different service types, wherein the service types include but are not limited to storage service, monitoring service, security service and the like.

In the distributed system, a group of independent computers are shown to a user as a unified whole, and the distributed system is just like a system. The system has various general physical and logical resources, can dynamically allocate tasks, and realizes information exchange by the dispersed physical and logical resources through a computer network. There is a distributed operating system in the system that manages computer resources in a global manner. The distributed system has high cohesiveness and transparency, wherein the cohesiveness means that each database distribution node is highly autonomous and has a local database management system. Transparency means that each database distribution node is transparent to the user's application, not seen locally or remotely. In a distributed database system, a user does not feel that data is distributed, i.e., the user does not have to know whether a relationship is split, whether there is a copy, where data is stored, and on which site a transaction is executed, etc.

Specifically, in step S101, a plurality of VXLAN tunnels are established between the virtual switch and the plurality of service gateways according to the resource file, and corresponding VXLAN tunnels are allocated from the plurality of VXLAN tunnels according to the access information of each service traffic, wherein the service types of the service traffic corresponding to the plurality of VXLAN tunnels are the same. For example, VXLAN (virtual Extensible lan) is a Network virtualization technology, and a large number of virtual Extensible local area networks are created on an existing Network architecture by establishing a VXLAN tunnel in the VXLAN technology, different virtual Extensible local area networks are identified by using a virtual Extensible local area Network Identifier (VNI), and when a packet is encapsulated by VXLAN, a packet extension field is added to a header of the packet, where the packet extension field includes a VNI Network Identifier for serving as an Identifier. The terminal is any one terminal in the corresponding local area network, and each local area network can comprise one or more terminals; the corresponding service flow comprises a forward message and a corresponding reverse message, wherein the forward message comprises any forward message sent by the terminal. When the forward message is subjected to VXLAN encapsulation, an additional message extension field is added in the head of the forward message, and the message extension field on the forward message is removed when the forward message is subjected to VXLAN decapsulation, so that the original data in the forward message sent by the terminal is sent to the corresponding server. The preset resource files comprise access address information of VXLAN tunnels and the like, such as ip address information of the VXLAN tunnels, the control equipment can receive the preset resource files imported by managers, establish corresponding VXLAN tunnels according to the resource files, a plurality of service gateways and access gateways, and establish corresponding VXLAN tunnel groups for the access gateways according to service traffic types of the access gateways. The control device may also allocate a corresponding VXLAN tunnel to the service traffic according to the access information of the service traffic, where the access information includes account password information of the user, and the control device may specify the corresponding VXLAN tunnel for the user according to the account password information of the user.

It can be understood that the quintuple is a communication term, the quintuple information of the forward packet refers to a source IP address, a source port, a destination IP address, a destination port, and a transport layer Protocol of the forward packet, the source IP address of the forward packet sent by the terminal refers to an IP address of a terminal sending the forward packet, the source port refers to a port sending the forward packet by the terminal, the destination IP address of the forward packet refers to an address of a terminal to which the forward packet needs to be accessed, the destination port of the forward packet refers to an access port of a terminal to which the forward packet needs to be accessed, and the transport layer Protocol refers to a communication Protocol such as a TCP/IP Protocol family (TCP/IP Protocol Suite, TCP/IP) or a User Datagram Protocol (UDP).

In some cases, the public network IP addresses assigned by different local area networks are all different; when two different terminals in the same local area network are allocated to the same public network IP address, the public network ports allocated to the two terminals are different; when two different terminals in the same local area network are respectively allocated to different public network IP addresses, the public network ports allocated to the two terminals can be the same or different. And establishing corresponding VXLAN tunnels according to the terminals corresponding to the virtual switch and the plurality of service gateways, wherein the service types of the service flows of the plurality of terminals are the same as the service types corresponding to the plurality of service gateways, so that the service types of the service flows corresponding to the plurality of established VXLAN tunnels are the same. Besides sending forward messages to the server through the corresponding VXLAN tunnel, the method can also receive reverse messages returned by the server. The reverse message is a reply message sent by the service system after receiving the forward message sent by the terminal, the service system needs to reply the message after performing necessary service processing, and the service system receiving the forward message replies the access request of the terminal according to the data in the forward message. The quintuple information of the reverse message refers to a source IP address, a source port, a destination IP address, a destination port and a transport layer protocol of the reverse message. The source IP address of a reverse message sent by a server refers to the IP address of the server sending the reverse message, the source port refers to a port of the server sending the reverse message, the target IP address of the reverse message is a public network IP address, the target port of the reverse message is a public network port, the first private network IP address refers to the IP address of a terminal sending a forward message, and the first private network port refers to a port of the terminal sending the forward message.

In some embodiments, in step S101, a plurality of service gateways are taken from the service control system according to the same service type; and establishing a plurality of VXLAN tunnels between the virtual switch and the plurality of service gateways so that the virtual switch sends the received terminal service traffic to each service gateway in the plurality of service gateways through the plurality of VXLAN tunnels. For example, through the virtual switch of the access gateway, VXLAN tunnels of a plurality of terminals and service gateways corresponding to a plurality of service types may be established, as shown in fig. 1, each service gateway and each terminal corresponding to the virtual switch establish a corresponding VXLAN tunnel for service traffic transmission, for example, the virtual switch has three corresponding virtual terminals vcpe1, vcpe2, and vcpe3, and the three terminals establish three VXLAN tunnels, namely VXLAN-305, VXLAN-306, VXLAN-307, and the like, with the virtual gateway at the uppermost layer in the service gateways corresponding to the storage services. Here, let us assume that there are N vcpes in the access gateway and M corresponding service gateways, then a total of N × M VXLAN tunnels can be established through the virtual switch to complete scheduling of service traffic according to service purposes.

In step S102, if there is a failed VXLAN tunnel among the plurality of VXLAN tunnels, at least one target VXLAN tunnel is determined from other VXLAN tunnels of the plurality of VXLAN tunnels except the failed VXLAN tunnel. For example, a global service traffic scheduling device is set in the entire service control system, and the service traffic scheduling device can obtain traffic distribution information of the entire network, such as that the service traffic scheduling device receives traffic load information, which is actively reported by other gateways, on each tunnel of each gateway, or the service traffic scheduling device sends a corresponding traffic distribution request to each gateway and receives traffic load information, which is returned by each gateway based on the traffic distribution request, on each tunnel of each gateway. The service flow scheduling device can also acquire real-time state information of each tunnel, and the real-time state information is used for representing whether the service state of each VXLAN tunnel is normal or not. If a VXLAN tunnel in the VXLAN tunnels fails, for example, a connection is dropped or a transmission link is in a problem in some scenarios, so that a failed VXLAN tunnel exists in the VXLAN tunnels, at least one target VXLAN tunnel is determined from other VXLAN tunnels except the failed VXLAN tunnel, and the traffic corresponding to the failed VXLAN tunnel is transferred to the at least one target VXLAN tunnel, so that the traffic corresponding to the failed VXLAN tunnel can be normally transmitted and processed. In some cases, the at least one target VXLAN tunnel may be selected randomly, or based on a specific rule, such as taking the closest or least loaded VXLAN tunnel as the corresponding target VXLAN tunnel, etc., wherein the remaining load of the least loaded VXLAN tunnel is greater than or equal to the traffic corresponding to the failed VXLAN; of course, multiple target VXLAN tunnels, etc. may also be determined based on multiple factors, such as priority, security level information, or current traffic load information, etc.

In step S103, the service traffic corresponding to the failed VXLAN tunnel is allocated to the at least one target VXLAN tunnel. For example, after determining that the VXLAN tunnel corresponds to at least one target VXLAN tunnel, the service traffic corresponding to the failed VXLAN tunnel is allocated to the at least one target VXLAN tunnel, and the service request of the failed VXLAN tunnel is transmitted and processed through the at least one target VXLAN tunnel. If only one target VXLAN tunnel exists, the residual load of the target VXLAN tunnel is larger than the service flow of the fault VXLAN tunnel, and the like, and if a plurality of target VXLAN tunnels exist, the residual load is distributed to the plurality of target VXLAN tunnels according to a certain proportion.

In some embodiments, in step S102, at least one target VXLAN tunnel is determined from the other VXLAN tunnels of the plurality of VXLAN tunnels except the failed VXLAN tunnel according to priority information of the other VXLAN tunnels, wherein the priority information of each target VXLAN tunnel is higher than or equal to the priority information of the failed VXLAN tunnel. For example, each VXLAN tunnel divides corresponding priority information, such as high priority, medium priority, or low priority, according to the total amount of traffic load or the performance of traffic processing. In the process of determining the target VXLAN tunnel, screening may be performed according to priority information of each VXLAN tunnel, for example, other VXLAN tunnels whose corresponding priority information is higher than that of the failed VXLAN tunnel are determined as corresponding target VXLAN tunnels, etc., of course, preliminary screening may also be performed according to priority information, and corresponding target VXLAN tunnels are further determined from a plurality of VXLAN tunnels determined by the preliminary screening, for example, randomly selected or determined according to current traffic load information, etc.

In some embodiments, in step S102, at least one target VXLAN tunnel is determined from other VXLAN tunnels of the plurality of VXLAN tunnels except the failed VXLAN tunnel according to security level information of the other VXLAN tunnels, wherein the security level information of each target VXLAN tunnel is greater than or equal to the security level information of the failed VXLAN tunnel. For example, different security level information is set according to different data security levels corresponding to service requests and the like, for example, data security levels such as account numbers and passwords are required to be high, data security levels such as common website access requests are low, and the like, and data with different security levels need to be configured with VXLAN tunnels with different security level information. In order to ensure the data security corresponding to the service traffic of the failed VXLAN tunnel, the security level information corresponding to the target VXLAN tunnel should be greater than or equal to the security level information of the failed VXLAN tunnel, and the like. Comparing the security level information of other VXLAN tunnels and the failure VXLAN tunnel, and using the VXLAN tunnel whose security level information is greater than or equal to that of the failure VXLAN tunnel as a target VXLAN tunnel, etc., it is a matter of course that in order to ensure reasonable use of resources, the VXLAN tunnel whose security level information is equal to that of the failure VXLAN tunnel is used as a target VXLAN tunnel, and if there is no VXLAN tunnel whose security level information is equal to that of the failure VXLAN tunnel, the VXLAN tunnels whose security level information is greater than that of the failure VXLAN tunnel are traversed in sequence, and a plurality of VXLAN tunnels whose corresponding security level information has the smallest level difference are used as target VXLAN tunnels, etc.

In some embodiments, the method further includes step S104 (not shown), in step S104, obtaining service traffic distribution information of the plurality of VXLAN tunnels, wherein the service traffic distribution information includes current traffic load information of each VXLAN tunnel of the plurality of VXLAN tunnels; in step S102, at least one target VXLAN tunnel is determined from other VXLAN tunnels except the failed VXLAN tunnel according to the traffic distribution information of other VXLAN tunnels in the plurality of VXLAN tunnels, wherein the current traffic load information of each target VXLAN tunnel satisfies a preset policy. For example, the service traffic scheduling apparatus may obtain service traffic distribution information in a service control system, where the service traffic distribution information includes current traffic load information of each service tunnel corresponding to each gateway in the service control system. Specifically, the traffic flow scheduling device receives traffic load information and the like of each tunnel of each gateway actively reported by other gateways, or the traffic flow scheduling device sends a corresponding traffic distribution request to each gateway and receives traffic load information and the like of each tunnel of each gateway returned by each gateway based on the traffic distribution request. In addition to the priority and security level information, a corresponding target VXLAN tunnel or the like may be determined according to the current traffic load information of each VXLAN tunnel, for example, a VXLAN tunnel with the smallest current traffic load is used as a corresponding target VXLAN tunnel, or a preset traffic load threshold is determined according to big data or input of a manager, a VXLAN tunnel with current traffic load information less than or equal to the preset traffic load threshold is determined as a low-load VXLAN tunnel, and a corresponding low-load VXLAN tunnel is used as a target VXLAN tunnel. As in some embodiments, the preset policy includes, but is not limited to: the current traffic load information of the target VXLAN tunnel is minimum; and the current traffic load information of the target VXLAN tunnel is less than or equal to a preset traffic load threshold value. For example, if the traffic load of the failed VXLAN tunnel is not large, the VXLAN tunnel with the minimum current traffic load information may be directly determined as the target VXLAN tunnel to load the traffic of the failed VXLAN tunnel, and of course, the remaining traffic load of the target VXLAN tunnel is greater than or equal to the traffic load of the failed VXLAN tunnel. In some cases, the service traffic load of the failed VXLAN tunnel is large, and the VXLAN tunnel whose current traffic load information is less than or equal to the preset traffic load threshold is determined as the target VXLAN tunnel according to the corresponding preset traffic load threshold, where the preset traffic load threshold may be set by system statistics big data or determined according to administrator input, or determined according to the service traffic load of the failed VXLAN tunnel, for example, directly using the service traffic load of the failed VXLAN tunnel as the preset traffic load threshold, or calculating the corresponding preset traffic load threshold according to the service traffic load of the failed VXLAN tunnel and the number of tunnels expected to be allocated, and the like.

Here, the present application describes an example of determining a target VXLAN tunnel based on priority information, security level information, traffic distribution information, and the like, and those skilled in the art may also determine the target VXLAN tunnel based on a combination factor of at least two of the priority information, the security level information, the traffic distribution information, and the like, and specifically perform a preliminary screening according to one of the factors and then further perform a screening according to other factors, where the screening process of each factor is the same as or similar to that in the above embodiment.

In some embodiments, in step S103, service traffic corresponding to the failed VXLAN tunnel is allocated to the at least one target VXLAN tunnel according to the current traffic load information of the at least one target VXLAN tunnel. For example, after acquiring the current traffic load information of each VXLAN tunnel in the plurality of VXLAN tunnels, the service traffic scheduling device may query to obtain the current traffic load information of at least one target VXLAN tunnel, and determine a corresponding allocation policy according to the current traffic load information of each target VXLAN tunnel to allocate the service traffic of the failed VXLAN tunnel. If the current traffic load information is assumed to be a value between 0 and 1 with respect to the total load of each VXLAN tunnel, and the total load traffic of each target VXLAN tunnel is the same, and if the current traffic load of each target VXLAN tunnel VXLAN1, VXLAN2, VXLAN3 is 0.3, 0.5, 0.4, etc., and the traffic flow size of the failed VXLAN tunnel is 0.9, the average traffic load information of each target VXLAN tunnel is (0.3 +0.5+0.4+ 0.9)/3 =0.7, calculated from the current traffic load of the target VXLAN tunnel and the traffic size of the failed VXLAN tunnel, the distributed traffic of each target VXLAN tunnel VXLAN1, VXLAN2, VXLAN3 is 0.4, 0.2, 0.3, etc., respectively. The service traffic can be flexibly scheduled by combining the current traffic load information of each target VXLAN tunnel.

In addition, the present application also provides a service scheduling apparatus capable of implementing the foregoing embodiments, which is described below with reference to fig. 3.

Fig. 3 shows a service traffic scheduling apparatus according to an aspect of the present application, which is applied to a service control system, where the service control system includes a plurality of service gateways, and the service control system is a distributed system, and the apparatus includes an establishing module 101, a determining module 102, and an allocating module 103. The establishing module 101 is configured to establish a plurality of VXLAN tunnels between the virtual switch and the plurality of service gateways according to a preset resource file, and allocate corresponding VXLAN tunnels from the plurality of VXLAN tunnels according to access information of each service traffic, where service types of the service traffic corresponding to the plurality of VXLAN tunnels are the same; a determining module 102, configured to determine at least one target VXLAN tunnel from VXLAN tunnels other than the failed VXLAN tunnel in the VXLAN tunnels if the failed VXLAN tunnel exists in the VXLAN tunnels; an allocating module 103, configured to allocate the service traffic corresponding to the failed VXLAN tunnel to the at least one target VXLAN tunnel. In some embodiments, the establishing module 101 is configured to obtain a plurality of service gateways from the service control system according to the same service type; and establishing a plurality of VXLAN tunnels between the virtual switch and the plurality of service gateways so that the virtual switch sends the received terminal service traffic to each service gateway in the plurality of service gateways through the plurality of VXLAN tunnels. In some embodiments, the determining module 102 is configured to determine at least one target VXLAN tunnel from other VXLAN tunnels of the plurality of VXLAN tunnels except the failed VXLAN tunnel according to priority information of the other VXLAN tunnels, wherein the priority information of each target VXLAN tunnel is higher than or equal to the priority information of the failed VXLAN tunnel. In some embodiments, the determining module 102 is configured to determine at least one target VXLAN tunnel from other VXLAN tunnels of the plurality of VXLAN tunnels except the failed VXLAN tunnel according to security level information of the other VXLAN tunnels, wherein the security level information of each target VXLAN tunnel is greater than or equal to the security level information of the failed VXLAN tunnel.

Here, the specific implementation of the establishing module 101, the determining module 102, and the allocating module 103 shown in fig. 3 is the same as or similar to the specific implementation of the step S101, the step S102, and the step S103 shown in fig. 2, and therefore, the description is omitted here, and the specific implementation is included herein by reference.

In some embodiments, the apparatus further comprises an obtaining module (not shown) configured to obtain traffic distribution information of the plurality of VXLAN tunnels, wherein the traffic distribution information includes current traffic load information of each VXLAN tunnel of the plurality of VXLAN tunnels; the determining module 102 is configured to determine at least one target VXLAN tunnel from the other VXLAN tunnels according to the service traffic distribution information of the other VXLAN tunnels except the failed VXLAN tunnel in the plurality of VXLAN tunnels, where current traffic load information of each target VXLAN tunnel satisfies a preset policy. As in some embodiments, the preset policy includes, but is not limited to: the current traffic load information of the target VXLAN tunnel is minimum; and the current traffic load information of the target VXLAN tunnel is less than or equal to a preset traffic load threshold value. In some embodiments, the allocating module 103 is configured to allocate, according to current traffic load information of the at least one target VXLAN tunnel, service traffic corresponding to the failed VXLAN tunnel to the at least one target VXLAN tunnel. Here, the specific implementation of the obtaining module is the same as or similar to the specific implementation of the step S104, and thus the obtaining module is not described again and is included herein by way of reference.

In addition to the methods and apparatus described in the embodiments above, the present application also provides a computer-readable storage medium storing computer code that, when executed, performs the method described in any of the preceding claims.

The present application also provides a computer program product, which when executed by a computer device, performs the method of any of the preceding claims.

The present application further provides a computer device, comprising:

one or more processors;

a memory for storing one or more computer programs;

the one or more computer programs, when executed by the one or more processors, cause the one or more processors to implement the method of any preceding claim.

FIG. 4 illustrates an exemplary system that can be used to implement the various embodiments described herein;

in some embodiments, as shown in FIG. 4, the system 400 can be implemented as any of the devices described above in the various described embodiments. In some embodiments, system 400 may include one or more computer-readable media (e.g., system Memory or non-volatile Memory (non-volatile Memory) NVM/storage 420) having instructions and one or more processors (e.g., processor(s) 405) coupled with the one or more computer-readable media and configured to execute the instructions to implement modules to perform the actions described herein.

For one embodiment, system control module 410 may include any suitable interface controllers to provide any suitable interface to at least one of the processor(s) 405 and/or any suitable device or component in communication with system control module 410.

The system control module 410 may include a memory controller module 430 to provide an interface to the system memory 415. The memory controller module 430 may be a hardware module, a software module, and/or a firmware module.

System memory 415 may be used, for example, to load and store data and/or instructions for system 400. For one embodiment, system memory 415 may include any suitable volatile memory, such as suitable DRAM. In some embodiments, system memory 415 may include a double data rate type four synchronous dynamic random access memory (DDR4 SDRAM).

For one embodiment, system control module 410 may include one or more input/output (I/O) controllers to provide an interface to NVM/storage 420 and communication interface(s) 425.

For example, NVM/storage 420 may be used to store data and/or instructions. NVM/storage 420 may include any suitable non-volatile memory (e.g., flash memory) and/or may include any suitable non-volatile storage device(s) (e.g., one or more Hard Disk Drive(s) (HDD (s)), one or more Compact Disc (CD) Drive(s), and/or one or more Digital Versatile Disc (DVD) Drive (s)).

NVM/storage 420 may include storage resources that are physically part of the device on which system 400 is installed or may be accessed by the device and not necessarily part of the device. For example, NVM/storage 420 may be accessed over a network via communication interface(s) 425.

Communication interface(s) 425 may provide an interface for system 400 to communicate over one or more networks and/or with any other suitable device. System 400 may wirelessly communicate with one or more components of a wireless network according to any of one or more wireless network standards and/or protocols.

For one embodiment, at least one of the processor(s) 405 may be packaged together with logic for one or more controller(s) of the system control module 410, such as memory controller module 430. For one embodiment, at least one of the processor(s) 405 may be packaged together with logic for one or more controller(s) of the System control module 410 to form a System in a Package (SiP). For one embodiment, at least one of the processor(s) 405 may be integrated on the same die with logic for one or more controller(s) of the system control module 410. For one embodiment, at least one of the processor(s) 405 may be integrated on the same die with logic for one or more controller(s) of the System control module 410 to form a System on Chip (SoC).

In various embodiments, system 400 may be, but is not limited to being: a server, a workstation, a desktop computing device, or a mobile computing device (e.g., a laptop computing device, a handheld computing device, a tablet, a netbook, etc.). In various embodiments, system 400 may have more or fewer components and/or different architectures. For example, in some embodiments, system 400 includes one or more cameras, a keyboard, a Liquid Crystal Display (LCD) screen (including a touch screen Display), a non-volatile memory port, a plurality of antennas, a graphics chip, an Application Specific Integrated Circuit (ASIC), and a speaker.

It should be noted that the present application may be implemented in software and/or a combination of software and hardware, for example, implemented using Application Specific Integrated Circuits (ASICs), general purpose computers or any other similar hardware devices. In one embodiment, the software programs of the present application may be executed by a processor to implement the steps or functions described above. Likewise, the software programs (including associated data structures) of the present application may be stored in a computer readable recording medium, such as RAM memory, magnetic or optical drive or diskette and the like. Additionally, some of the steps or functions of the present application may be implemented in hardware, for example, as circuitry that cooperates with the processor to perform various steps or functions.

In addition, some of the present application may be implemented as a computer program product, such as computer program instructions, which when executed by a computer, may invoke or provide methods and/or techniques in accordance with the present application through the operation of the computer. Those skilled in the art will appreciate that the form in which the computer program instructions reside on a computer-readable medium includes, but is not limited to, source files, executable files, installation package files, and the like, and that the manner in which the computer program instructions are executed by a computer includes, but is not limited to: the computer directly executes the instruction, or the computer compiles the instruction and then executes the corresponding compiled program, or the computer reads and executes the instruction, or the computer reads and installs the instruction and then executes the corresponding installed program. Computer-readable media herein can be any available computer-readable storage media or communication media that can be accessed by a computer.

Communication media includes media by which communication signals, including, for example, computer readable instructions, data structures, program modules, or other data, are transmitted from one system to another. Communication media may include conductive transmission media such as cables and wires (e.g., fiber optics, coaxial, etc.) and wireless (non-conductive transmission) media capable of propagating energy waves such as acoustic, electromagnetic, RF, microwave, and infrared. Computer readable instructions, data structures, program modules, or other data may be embodied in a modulated data signal, for example, in a wireless medium such as a carrier wave or similar mechanism such as is embodied as part of spread spectrum techniques. The term "modulated data signal" means a signal that has one or more of its characteristics set or changed in such a manner as to encode information in the signal. The modulation may be analog, digital or hybrid modulation techniques.

By way of example, and not limitation, computer-readable storage media may include volatile and nonvolatile, removable and non-removable media implemented in any method or technology for storage of information such as computer-readable instructions, data structures, program modules or other data. For example, computer-readable storage media include, but are not limited to, volatile memory such as random access memory (RAM, DRAM, SRAM); and nonvolatile memories such as flash memories, various read only memories (ROM, PROM, EPROM, EEPROM), magnetic and ferromagnetic (MRAM)/Ferroelectric memories ferro electric RAM, FeRAM); and magnetic and optical storage devices (hard disk, tape, CD, DVD); or other now known media or later developed that can store computer-readable information/data for use by a computer system.

An embodiment according to the present application comprises an apparatus comprising a memory for storing computer program instructions and a processor for executing the program instructions, wherein the computer program instructions, when executed by the processor, trigger the apparatus to perform a method and/or a solution according to the aforementioned embodiments of the present application.

It will be evident to those skilled in the art that the present application is not limited to the details of the foregoing illustrative embodiments, and that the present application may be embodied in other specific forms without departing from the spirit or essential attributes thereof. The present embodiments are therefore to be considered in all respects as illustrative and not restrictive, the scope of the application being indicated by the appended claims rather than by the foregoing description, and all changes which come within the meaning and range of equivalency of the claims are therefore intended to be embraced therein. Any reference sign in a claim should not be construed as limiting the claim concerned. Furthermore, it is obvious that the word "comprising" does not exclude other elements or steps, and the singular does not exclude the plural. A plurality of units or means recited in the apparatus claims may also be implemented by one unit or means in software or hardware.

The service traffic scheduling method, the service traffic scheduling device, the computer device, and the storage medium provided in the embodiments of the present application are introduced above, and a specific example is applied in this document to explain the principle and the implementation of the present invention, and the description of the above embodiments is only used to help understanding the method and the core idea of the present invention; meanwhile, for those skilled in the art, according to the idea of the present invention, there may be variations in the specific embodiments and the application scope, and in summary, the content of the present specification should not be construed as a limitation to the present invention.

Claims

1. A service flow scheduling method is applied to a control device, the control device is included in a service control system, the service control system further includes a plurality of service gateways, the service control system is a distributed system, and the method includes:

establishing a plurality of VXLAN tunnels between the virtual switch and the plurality of service gateways according to preset resource files, and distributing corresponding VXLAN tunnels from the plurality of VXLAN tunnels according to access information of each service flow, wherein the service types of the service flows corresponding to the plurality of VXLAN tunnels are the same;

acquiring service traffic distribution information of the VXLAN tunnels, wherein the service traffic distribution information comprises current traffic load information of each VXLAN tunnel in the VXLAN tunnels;

if a fault VXLAN tunnel exists in the VXLAN tunnels, determining at least one target VXLAN tunnel from the VXLAN tunnels except the fault VXLAN tunnel according to the service traffic distribution information of the VXLAN tunnels except the fault VXLAN tunnel, wherein the current traffic load information of each target VXLAN tunnel meets a preset strategy;

and distributing the service traffic corresponding to the fault VXLAN tunnel to the at least one target VXLAN tunnel according to the current traffic load information of the at least one target VXLAN tunnel.

2. The method of claim 1, wherein establishing a plurality of VXLAN tunnels between the virtual switch and the plurality of service gateways comprises:

a plurality of service gateways are taken from the service control system according to the same service type;

and establishing a plurality of VXLAN tunnels between the virtual switch and the plurality of service gateways so that the virtual switch sends the received terminal service traffic to each service gateway in the plurality of service gateways through the plurality of VXLAN tunnels.

3. The method of claim 1, wherein the determining at least one target VXLAN tunnel from among the other VXLAN tunnels in the plurality of VXLAN tunnels except the failed VXLAN tunnel comprises:

determining at least one target VXLAN tunnel from the other VXLAN tunnels in the plurality of VXLAN tunnels according to priority information of the other VXLAN tunnels except the failed VXLAN tunnel, wherein the priority information of each target VXLAN tunnel is higher than or equal to the priority information of the failed VXLAN tunnel.

4. The method of claim 1, wherein the determining at least one target VXLAN tunnel from among the other VXLAN tunnels in the plurality of VXLAN tunnels except the failed VXLAN tunnel comprises:

and determining at least one target VXLAN tunnel from the other VXLAN tunnels except the fault VXLAN tunnel according to the security level information of the other VXLAN tunnels except the fault VXLAN tunnel, wherein the security level information of each target VXLAN tunnel is greater than or equal to the security level information of the fault VXLAN tunnel.

5. The method of claim 1, wherein the preset policy comprises at least one of:

the current traffic load information of the target VXLAN tunnel is minimum;

and the current traffic load information of the target VXLAN tunnel is less than or equal to a preset traffic load threshold value.

6. A service flow scheduling device is applied to a control device, the control device is included in a service control system, the service control system further includes a plurality of service gateways, the service control system is a distributed system, and the device includes:

the system comprises an establishing module, a service gateway and a service switching module, wherein the establishing module is used for establishing a plurality of VXLAN tunnels between a virtual switch and a plurality of service gateways according to preset resource files and distributing corresponding VXLAN tunnels from the VXLAN tunnels according to access information of each service flow, and the service types of the service flows corresponding to the VXLAN tunnels are the same;

an obtaining module, configured to obtain service traffic distribution information of the multiple VXLAN tunnels, where the service traffic distribution information includes current traffic load information of each VXLAN tunnel in the multiple VXLAN tunnels;

a determining module, configured to determine, if a faulty VXLAN tunnel exists in the plurality of VXLAN tunnels, at least one target VXLAN tunnel from the VXLAN tunnels except the faulty VXLAN tunnel according to service traffic distribution information of the VXLAN tunnels except the faulty VXLAN tunnel, where current traffic load information of each target VXLAN tunnel satisfies a preset policy;

and the distribution module is used for distributing the service traffic corresponding to the fault VXLAN tunnel to the at least one target VXLAN tunnel according to the current traffic load information of the at least one target VXLAN tunnel.

7. A traffic flow scheduling apparatus, characterized in that the apparatus comprises:

one or more processors;

a memory; and

one or more application programs, wherein the one or more application programs are stored in the memory and configured to perform operations of the method of any of claims 1-5 by the processor.

8. A computer-readable storage medium, having stored thereon a computer program which is loaded by a processor to perform operations of the method according to any of claims 1 to 5.