CN112866410B - Forwarding control method, forwarding control device, forwarding control medium and electronic equipment of data message - Google Patents
Forwarding control method, forwarding control device, forwarding control medium and electronic equipment of data message Download PDFInfo
- Publication number
- CN112866410B CN112866410B CN202110184969.9A CN202110184969A CN112866410B CN 112866410 B CN112866410 B CN 112866410B CN 202110184969 A CN202110184969 A CN 202110184969A CN 112866410 B CN112866410 B CN 112866410B
- Authority
- CN
- China
- Prior art keywords
- virtual machine
- target
- forwarding rule
- source
- host
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/01—Protocols
- H04L67/10—Protocols in which an application is distributed across nodes in the network
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/44—Arrangements for executing specific programs
- G06F9/455—Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
- G06F9/45533—Hypervisors; Virtual machine monitors
- G06F9/45558—Hypervisor-specific management and integration aspects
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L12/00—Data switching networks
- H04L12/66—Arrangements for connecting between networks having differing types of switching systems, e.g. gateways
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L45/00—Routing or path finding of packets in data switching networks
- H04L45/74—Address processing for routing
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/44—Arrangements for executing specific programs
- G06F9/455—Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
- G06F9/45533—Hypervisors; Virtual machine monitors
- G06F9/45558—Hypervisor-specific management and integration aspects
- G06F2009/45595—Network integration; Enabling network access in virtual machine instances
Abstract
The disclosure relates to a forwarding control method, a forwarding control device, a forwarding control medium and electronic equipment of a data message. The method is applied to a gateway in a cloud network, wherein the cloud network is deployed with a virtual machine, forwarding rules are stored in the gateway, and the forwarding rules are used for associating the virtual machine with a host machine where the virtual machine is located, and the method comprises the following steps: receiving a target data message to be forwarded, wherein the target data message is initiated by a source virtual machine and is to be sent to a target virtual machine, and the target data message carries virtual machine information used for indicating the source virtual machine and the target virtual machine; in response to receiving the target data message, determining whether a first forwarding rule corresponding to the target virtual machine exists in the stored forwarding rules; if the first forwarding rule exists, sending a second forwarding rule corresponding to the source virtual machine to a target host machine where the target virtual machine is located, and sending the first forwarding rule to a source host machine where the source virtual machine is located.
Description
Technical Field
The present disclosure relates to the field of computer technologies, and in particular, to a method, an apparatus, a medium, and an electronic device for controlling forwarding of a data packet.
Background
At present, a conventional cloud network is physically composed of a host (host), a physical network and a controller (controller), wherein a Virtual Machine (VM) is established on the host, a virtual switch (vswitch) is further operated on the host to form a virtual network on the physical network, and the controller implements interconnection and interworking between the virtual machines by installing forwarding rules (forwarding-rule) in the virtual switches of the respective hosts. Generally, the number of forwarding rules in the cloud network is proportional to the square of the number of virtual machines, and therefore, in the initialization stage, the controller needs to spend a lot of time to install the forwarding rules, which limits the scalability of the cloud network. In the related art, in a cloud network deployment process, a Gateway (GW) is generally introduced, and a default rule pointing to the gateway is created on a virtual switch in an initialization stage, however, in such a manner, a controller is still required to manage forwarding rules in a cloud network one by one, the controller has a large burden, and the above scalability problem of the cloud network still exists.
Disclosure of Invention
This summary is provided to introduce a selection of concepts in a simplified form that are further described below in the detailed description. This summary is not intended to identify key features or essential features of the claimed subject matter, nor is it intended to be used to limit the scope of the claimed subject matter.
In a first aspect, the present disclosure provides a forwarding control method for a data packet, where the forwarding control method is applied to a gateway in a cloud network, where the cloud network is deployed with a virtual machine, a forwarding rule is stored in the gateway, and the forwarding rule is used to associate the virtual machine with a host in which the virtual machine is located, and the method includes:
receiving a target data message to be forwarded, wherein the target data message is initiated by a source virtual machine and is to be sent to a target virtual machine, and the target data message carries virtual machine information used for indicating the source virtual machine and the target virtual machine;
in response to receiving the target data message, determining whether a first forwarding rule corresponding to the target virtual machine exists in the stored forwarding rules;
if the first forwarding rule exists, sending a second forwarding rule corresponding to the source virtual machine to a target host machine where the target virtual machine is located, and sending the first forwarding rule to the source host machine where the source virtual machine is located.
In a second aspect, a forwarding control device for a data packet is provided, and is applied to a gateway in a cloud network, where a virtual machine is deployed in the cloud network, a forwarding rule is stored in the gateway, and the forwarding rule is used to associate the virtual machine with a host in which the virtual machine is located, and the device includes:
a receiving module, configured to receive a target data packet to be forwarded, where the target data packet is initiated by a source virtual machine and is to be sent to a target virtual machine, and the target data packet carries virtual machine information used for indicating the source virtual machine and the target virtual machine;
a determining module, configured to determine, in response to receiving the target data packet, whether a first forwarding rule corresponding to the target virtual machine exists in the stored forwarding rules;
the first sending module is configured to send a second forwarding rule corresponding to the source virtual machine to a target host where the target virtual machine is located if the first forwarding rule exists, and send the first forwarding rule to the source host where the source virtual machine is located.
In a third aspect, a computer-readable medium is provided, on which a computer program is stored, which program, when being executed by a processing device, carries out the steps of the method according to the first aspect of the disclosure.
In a fourth aspect, an electronic device is provided, comprising:
a storage device having a computer program stored thereon;
processing means for executing the computer program in the storage means to implement the steps of the method of the first aspect of the present disclosure.
According to the technical scheme, a target data message to be forwarded is received, the target data message is initiated by a source virtual machine and is to be sent to a target virtual machine, the target data message carries virtual machine information used for indicating the source virtual machine and the target virtual machine, whether a first forwarding rule corresponding to the target virtual machine exists or not is determined in stored forwarding rules in response to the target data message being received, if the first forwarding rule exists, a second forwarding rule corresponding to the source virtual machine is sent to a target host machine where the target virtual machine is located, and the first forwarding rule is sent to a source host machine where the source virtual machine is located. Therefore, the forwarding rules in the cloud network can be created, deleted and updated as required, meanwhile, the processing logic of the gateway is greatly simplified, the complexity of the controller and the gateway is simplified, and hardware implementation is facilitated.
Additional features and advantages of the disclosure will be set forth in the detailed description which follows.
Drawings
The above and other features, advantages and aspects of various embodiments of the present disclosure will become more apparent by referring to the following detailed description when taken in conjunction with the accompanying drawings. Throughout the drawings, the same or similar reference numbers refer to the same or similar elements. It should be understood that the drawings are schematic and that elements and features are not necessarily drawn to scale. In the drawings:
fig. 1 is a flowchart of a method for controlling forwarding of data packets according to an embodiment of the present disclosure;
FIG. 2 is a schematic diagram of an exemplary cloud network;
fig. 3 is a flowchart of a method for controlling forwarding of data packets according to another embodiment of the present disclosure;
fig. 4 is a block diagram of a forwarding control apparatus for data packets according to an embodiment of the present disclosure;
FIG. 5 illustrates an electronic device suitable for use to implement embodiments of the present disclosure.
Detailed Description
Embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. While certain embodiments of the present disclosure are shown in the drawings, it is to be understood that the present disclosure may be embodied in various forms and should not be construed as limited to the embodiments set forth herein, but rather are provided for a more thorough and complete understanding of the present disclosure. It should be understood that the drawings and embodiments of the disclosure are for illustration purposes only and are not intended to limit the scope of the disclosure.
It should be understood that the various steps recited in the method embodiments of the present disclosure may be performed in a different order, and/or performed in parallel. Moreover, method embodiments may include additional steps and/or omit performing the illustrated steps. The scope of the present disclosure is not limited in this respect.
The term "including" and variations thereof as used herein is intended to be open-ended, i.e., "including but not limited to". The term "based on" is "based, at least in part, on". The term "one embodiment" means "at least one embodiment"; the term "another embodiment" means "at least one additional embodiment"; the term "some embodiments" means "at least some embodiments". Relevant definitions for other terms will be given in the following description.
It should be noted that the terms "first", "second", and the like in the present disclosure are only used for distinguishing different devices, modules or units, and are not used for limiting the order or interdependence of the functions performed by the devices, modules or units.
It is noted that references to "a", "an", and "the" modifications in this disclosure are intended to be illustrative rather than limiting, and that those skilled in the art will recognize that "one or more" may be used unless the context clearly dictates otherwise.
The names of messages or information exchanged between devices in the embodiments of the present disclosure are for illustrative purposes only, and are not intended to limit the scope of the messages or information.
As described in the background art, currently, in the cloud network deployment process, a gateway is introduced, and only a default rule pointing to the gateway is created on a virtual switch in an initialization stage, and an actual forwarding rule is created according to requirements in a use process, which generally includes two modes.
The first method is that the controller tracks the flow statistics on all the virtual switches to identify the elephant flow, and the forwarding rule of the elephant flow is installed to the corresponding virtual switch, so that the elephant flow can directly flow between the source virtual switch and the target virtual switch without passing through a gateway. However, in this manner, the controller is required to collect traffic information from all the virtual switches in real time to manage the forwarding rules of each virtual switch, and the load of the controller is heavy, which cannot really improve the scalability of the cloud network.
The second is that the first communication of the two virtual machines passes through the gateway, the gateway receives the data packet and forwards the data packet to the destination virtual switch, and sends a signaling to the source virtual switch to inform the source virtual switch of the position of the destination virtual machine, the source virtual switch creates a forwarding rule for the destination virtual machine after receiving the signaling, and subsequent messages do not directly flow between the source virtual switch and the destination virtual switch through the gateway any more. However, in this manner, when a virtual machine location changes (migrates or deletes), forwarding rules previously installed on the virtual switch become invalid rules, and the controller should immediately delete these rules in order to avoid the flow interruption. In addition, even if the forwarding rules can be deleted instead by the gateway, the gateway needs to maintain the information of which virtual switch each forwarding rule is installed in, which also increases the complexity of the gateway, and thus, the implementation is difficult.
In order to solve the above problems, the present disclosure provides a method, an apparatus, a medium, and an electronic device for controlling forwarding of a data packet, so as to implement creation, deletion, and update of a forwarding rule in a cloud network as needed, and simplify the complexity of a controller and a gateway.
Fig. 1 is a flowchart of a method for controlling forwarding of data packets according to an embodiment of the present disclosure. The method provided by the present disclosure may be applied to a gateway in a cloud network, and as described above, the cloud network may be composed of a controller, a gateway, and a host. The cloud network is provided with a virtual machine, and the virtual machine is established on a host machine.
Forwarding rules are stored in the gateway, the gateway comprises the forwarding rules of all the virtual machines in the cloud network, and the forwarding rules are synchronously updated to the gateway by the controller based on the real-time positions of the virtual machines. The forwarding rule is used for associating the virtual machine with the host machine where the virtual machine is located, that is, the forwarding rule is used for describing the virtual machine and the host machine where the virtual machine is located. For example, a forwarding rule may describe address information of a host machine where a certain virtual machine is located. Hereinafter, for convenience of description, a description will be given in terms of { VM: host describes that the virtual machine VM exists in the host. Optionally, the forwarding rule is provided with an overtime duration, and if one rule is not used within the overtime duration, the forwarding rule is deleted, so that the real-time property of data transmission can be effectively ensured.
In addition, each host also includes a default rule for pointing to a gateway, which may be denoted as { VM-x: GW, wherein VM-x represents any virtual machine and GW represents a gateway. The default rule always exists, that is, when the forwarding rule of a certain virtual machine does not exist in the host, the relevant data will be forwarded to the gateway according to the default rule, and the gateway forwards the relevant data to the correct virtual machine. And, the priority of the default rule is lower than the forwarding rule, i.e. the default rule is used when there is no forwarding rule of a certain virtual machine.
Fig. 2 is a schematic diagram of an exemplary cloud network, and a subsequent description of the method provided by the present disclosure will be developed on the basis of fig. 2. It should be noted that although fig. 2 includes the network element roles in the cloud network related to the method, the scenario in which the method is applied does not require the cloud network to have the structure shown in fig. 2. The contents of fig. 2 are explained in more detail below.
As shown in fig. 2, the controller is a controller in a cloud network, GW is a gateway, host a, host b, and host c are different hosts, VM-1 is a virtual machine established on host a, and VM-2 is a virtual machine established on host b. The gateway GW includes a forwarding rule { VM-1: host a }, { VM-2: host b, wherein the first forwarding rule represents that the virtual machine VM-1 is installed on the host a. Each host contains default rules { VM-x: GW, and also, for example, { VM-1: host a }, { VM-2: host b } such forwarding rules.
Returning to fig. 1, as shown in fig. 1, the method provided by the present disclosure may include the steps of:
in step 11, receiving a target data packet to be forwarded;
in step 12, in response to receiving the target data packet, determining whether a first forwarding rule corresponding to the target virtual machine exists in the stored forwarding rules;
in step 13, if the first forwarding rule exists, the second forwarding rule corresponding to the source virtual machine is sent to the target host machine where the target virtual machine is located, and the first forwarding rule is sent to the source host machine where the source virtual machine is located.
The target data message is initiated by the source virtual machine and is to be sent to the target virtual machine, and the target data message carries virtual machine information used for indicating the source virtual machine and the target virtual machine.
It should be noted that, in the data transmission process of the cloud network, when the first virtual machine sends a data packet to the second virtual machine, the first virtual machine is a source virtual machine of the data transmission, and the second virtual machine is a target virtual machine of the data transmission. If the source Virtual machine sends a data packet to the target Virtual machine, the Virtual switch (i.e., the source Virtual switch) of the host (i.e., the source host) where the source Virtual machine is located encapsulates the data packet into a tunnel according to a stored forwarding rule (or a default rule) and sends the data packet to another host (or a gateway), where the usable tunnel includes, but is not limited to, a VxLAN (Virtual eXtensible Local Area Network).
Referring to the above, if the source host stores the forwarding rule corresponding to the target virtual machine, the source host encapsulates the data packet using the default rule and sends the data packet to the gateway, and at this time, the gateway receives the data packet to be forwarded, that is, the target data packet. Therefore, when the gateway receives such a target data packet, which indicates that the correct forwarding rule corresponding to the target virtual machine is absent in the source host, the gateway needs to create, delete, or update the forwarding rule as required.
In step 12, in response to receiving the target data packet, it is determined whether a first forwarding rule corresponding to the target virtual machine exists in the stored forwarding rules.
As described above, forwarding rules related to all current virtual machines of the cloud network are stored in the gateway in real time. Therefore, after receiving the target data packet, in response thereto, the gateway determines whether or not there is a forwarding rule (first forwarding rule) corresponding to the target virtual machine among the forwarding rules stored thereon. For example, the gateway stores a forwarding rule { VM-k1: host-k1 and { VM-k12: host-k2, if the target virtual machine is VM-k1, it may be determined that a first forwarding rule { VM-k1: host-k1}.
In step 13, if the first forwarding rule exists, the second forwarding rule corresponding to the source virtual machine is sent to the target host where the target virtual machine is located, and the first forwarding rule is sent to the source host where the source virtual machine is located.
The second forwarding rule corresponding to the source virtual machine is sent to the target host machine where the target virtual machine is located, so that the target host machine can store the second forwarding rule, and the target host machine can directly communicate with the source host machine in a subsequent data transmission process conveniently. And sending the first forwarding rule to the source host where the source virtual machine is located, so that the source host can store the first forwarding rule, and the source host can directly communicate with the target host in a subsequent data transmission process. Therefore, the rules can be created in the source host and the target host at the same time as required through one-time processing, and the efficiency of creating the forwarding rules as required is effectively accelerated.
In a possible implementation manner, sending the second forwarding rule corresponding to the source virtual machine to the target host where the target virtual machine is located may include the following steps:
determining first address information of a target host according to a first forwarding rule;
generating a first signaling message containing a second forwarding rule;
and sending the first signaling message to an address indicated by the first address information.
As described above, the forwarding rule may include address information of the host where the virtual machine is located. Therefore, according to the first forwarding rule, the first address information of the target host can be directly determined, so that the first signaling message is generated and sent to the address where the target host is located, and the target host stores the second forwarding rule.
In another possible embodiment, sending the first forwarding rule to the source host where the source virtual machine is located may include the following steps:
determining second address information of the source host according to the target data message;
generating a second signaling message containing the first forwarding rule;
and sending the second signaling message to the address indicated by the second address information.
In a possible embodiment, if the forwarding rule includes address information of a host where the virtual machine is located, the second address information may be determined as follows:
and determining the address information corresponding to the second forwarding rule as second address information.
Since the virtual machine information carried by the target data packet includes the source virtual machine that sends the packet, and the forwarding rule of the source virtual machine is necessarily stored in the gateway, the address information of the source host and the address information of the destination host can be determined based on the source virtual machine and the stored forwarding rule corresponding to the source virtual machine, and the determined address information is used as the second address information. By the method, the address information of the source host can be accurately determined.
In another possible embodiment, the target data packet may also carry message source address information, where the message source address information is used to indicate an address of a host that originally sent the target data packet. For example, when a target data packet is encapsulated by tunneling, a tunnel source address may be directly encapsulated in the packet as packet source address information used to represent an address of a source host that sends the packet. In this embodiment, the second address information may be determined by:
and determining message source address information corresponding to the target data message as second address information.
Because the message source address information carried by the target data message can represent the address of the source host, the second address information can be determined by reading the message source address information corresponding to the target data message. In this process, the step of finding the forwarding rule in the previous embodiment may be omitted.
Optionally, if the first forwarding rule exists, the method provided by the present disclosure may further include the following steps:
and forwarding the target data message to a target host machine where the target virtual machine is located.
The step is a process that the gateway assists the source virtual machine in forwarding the target data packet, that is, after the gateway receives the target data packet, if it is determined that the first forwarding rule exists, the gateway forwards the target data packet to the target host, and also sends the second forwarding rule to the target host.
Optionally, the method provided by the present disclosure may further include the following steps, as shown in fig. 3.
In step 31, if the first forwarding rule does not exist, a third signaling message used for representing that the target virtual machine does not exist in the cloud network is generated.
In step 32, the third signaling packet is sent to the source host where the source virtual machine is located, so that the source host deletes the forwarding rule corresponding to the target virtual machine stored in the source host.
If the first forwarding rule does not exist, it is indicated that the current gateway does not have the forwarding rule related to the target virtual machine, and it may be that the target virtual machine is not currently deployed in the cloud network, or the forwarding rule of the original target virtual machine is deleted. Therefore, a third signaling message for characterizing that the target virtual machine does not exist in the cloud network may be generated. Further, the gateway may send a third signaling packet to the source host where the source virtual machine is located, so that the source host deletes the forwarding rule corresponding to the target virtual machine stored in the source host. In this way, on-demand deletion of forwarding rules in the cloud network is achieved.
The method of the present solution will be exemplarily described below with reference to fig. 2 for on-demand creation, on-demand deletion, and on-demand update of the forwarding rule, respectively.
In one embodiment, the method is used to implement on-demand creation of forwarding rules, and the process is described as follows:
1) VM-1 on host a sends a data message to VM-2, a virtual switch of host a encapsulates the data message into a tunnel according to a default rule and sends the data message to GW, and the usable tunnel comprises but is not limited to VxLAN;
2) After receiving the target data message, the GW data plane sends the message to a host machine (host machine b) where VM-2 (target virtual machine) is located according to a first forwarding rule; the GW learns the address of the source host, that is, host a, constructs a second signaling message and sends the second signaling message to host a, where the second signaling message includes a forwarding rule { VM-2: host b, after receiving the second signaling message, host a creates the forwarding rule in its vswitch, so that the subsequent data message sent from VM-1 to VM-2 is sent to host b directly through the tunnel by the virtual switch of host a without passing through GW; the GW data plane acquires a host machine, namely a host machine b, where the target virtual machine VM-2 is located according to the forwarding rule, constructs a first signaling message and sends the first signaling message to the host machine b, wherein the first signaling message comprises the forwarding rule { VM-1: host a, host b receives the first signaling message and then creates the forwarding rule in the virtual switch thereof, so that the subsequent data message sent by VM-2 to VM-1 is directly sent to host a by the virtual switch of host b through the tunnel without passing through GW.
Through the process, the host machine a creates a { VM-2: host b, and the host b creates a virtual machine (VM-1: host a }.
In another embodiment, the method is used to implement on-demand deletion of forwarding rules, and the process is described as follows:
1) VM-2 is deleted from host b, and { VM-2: host b rules are deleted by controller;
2) Host a { VM-2: host b) becomes an invalid rule and needs to be deleted, if the rule is not used within the overtime duration, the host a deletes the rule by itself, otherwise, the host enters 3);
3) The VM-1 on the host machine a sends a data message to the VM-2, and the virtual switch of the host machine a transmits the data message according to a forwarding rule { VM-2: host b, encapsulating the data message into a tunnel and sending the data message to host b;
4) After receiving the tunnel message in 3), the virtual switch on the host b performs the following steps according to a default rule { VM-x: GW sends the data message to GW through the tunnel;
5) After receiving the message, the GW data plane uses the source virtual machine VM-1 to find a forwarding rule { VM-1: host a }, to obtain the host where the source virtual machine is located, that is, host a, and construct a third signaling message to be sent to host a, so as to indicate that the target virtual machine VM-2 does not exist on any host, and may be recorded as { VM-2: NULL, after host a receives the signaling message, deleting invalid rule { VM-2: host b }.
Thus, through the above process, the host a deletes the invalidation rule { VM-2: host b }.
Meanwhile, the process of updating the forwarding rule is equivalent to deleting and then creating, and the process can refer to the process description about deleting as needed and creating as needed, which is not described herein again.
By the method provided by the disclosure, after receiving the message to be forwarded, the gateway does not need to distinguish whether the message is sent to the gateway because the message is matched with the default rule or the invalid rule on the host machine where the source virtual machine is located, and can execute the consistent operation, that is, send the signaling message containing the position where the destination virtual machine is located to the source virtual machine (the destination virtual machine does not exist or can be regarded as position information), and complete the creation, deletion and update of the forwarding rule on the host machine where the source virtual machine is located as required.
According to the technical scheme, a target data message to be forwarded is received, the target data message is initiated by a source virtual machine and is to be sent to a target virtual machine, the target data message carries virtual machine information used for indicating the source virtual machine and the target virtual machine, whether a first forwarding rule corresponding to the target virtual machine exists or not is determined in stored forwarding rules in response to the target data message being received, if the first forwarding rule exists, a second forwarding rule corresponding to the source virtual machine is sent to a target host machine where the target virtual machine is located, and the first forwarding rule is sent to a source host machine where the source virtual machine is located. Therefore, the forwarding rules in the cloud network can be created, deleted and updated as required, meanwhile, the processing logic of the gateway is greatly simplified, the complexity of the controller and the gateway is simplified, and hardware implementation is facilitated.
Fig. 4 is a block diagram of a forwarding control apparatus for data packets according to an embodiment of the present disclosure. The apparatus 40 may be applied to a gateway in a cloud network, where the cloud network is deployed with a virtual machine, and the gateway stores a forwarding rule, where the forwarding rule is used to associate the virtual machine with a host where the virtual machine is located, as shown in fig. 4, the apparatus 40 may include:
a receiving module 41, configured to receive a target data packet to be forwarded, where the target data packet is initiated by a source virtual machine and is to be sent to a target virtual machine, and the target data packet carries virtual machine information used for indicating the source virtual machine and the target virtual machine;
a determining module 42, configured to determine, in response to receiving the target data packet, whether a first forwarding rule corresponding to the target virtual machine exists in the stored forwarding rules;
a first sending module 43, configured to send, if the first forwarding rule exists, a second forwarding rule corresponding to the source virtual machine to a target host where the target virtual machine is located, and send the first forwarding rule to a source host where the source virtual machine is located.
Optionally, the forwarding rule includes address information of a host where the virtual machine is located;
the first sending module 43 includes:
the first determining submodule is used for determining first address information of the target host machine according to the first forwarding rule;
the first generation submodule is used for generating a first signaling message containing the second forwarding rule;
and the first sending submodule is used for sending the first signaling message to the address indicated by the first address information.
Optionally, the first sending module 43 includes:
a second determining submodule, configured to determine second address information of the source host according to the target data packet;
a second generation submodule, configured to generate a second signaling message including the first forwarding rule;
and the second sending submodule is used for sending the second signaling message to the address indicated by the second address information.
Optionally, the forwarding rule includes address information of a host where the virtual machine is located;
the second determining submodule is configured to determine address information corresponding to the second forwarding rule as the second address information.
Optionally, the target data packet further carries packet source address information, where the packet source address information is used to indicate an address of a host that initially sends the target data packet;
the second determining submodule is configured to determine, as the second address information, message source address information corresponding to the target data message.
Optionally, the apparatus 40 further comprises:
and the message forwarding module is used for forwarding the target data message to a target host machine where the target virtual machine is located if the first forwarding rule exists.
Optionally, the apparatus 40 further comprises:
a generating module, configured to generate a third signaling message for representing that the target virtual machine does not exist in the cloud network if the first forwarding rule does not exist;
a second sending module, configured to send the third signaling packet to a source host where the source virtual machine is located, so that the source host deletes a forwarding rule corresponding to the target virtual machine, where the forwarding rule is stored in the source host.
Referring now to FIG. 5, a block diagram of an electronic device 600 suitable for use in implementing embodiments of the present disclosure is shown. The terminal device in the embodiments of the present disclosure may include, but is not limited to, a mobile terminal such as a mobile phone, a notebook computer, a digital broadcast receiver, a PDA (personal digital assistant), a PAD (tablet computer), a PMP (portable multimedia player), a vehicle terminal (e.g., a car navigation terminal), and the like, and a fixed terminal such as a digital TV, a desktop computer, and the like. The electronic device shown in fig. 5 is only an example, and should not bring any limitation to the functions and the scope of use of the embodiments of the present disclosure.
As shown in fig. 5, the electronic device 600 may include a processing means (e.g., central processing unit, graphics processor, etc.) 601 that may perform various appropriate actions and processes in accordance with a program stored in a Read Only Memory (ROM) 602 or a program loaded from a storage means 608 into a Random Access Memory (RAM) 603. In the RAM 603, various programs and data necessary for the operation of the electronic apparatus 600 are also stored. The processing device 601, the ROM 602, and the RAM 603 are connected to each other via a bus 604. An input/output (I/O) interface 605 is also connected to bus 604.
Generally, the following devices may be connected to the I/O interface 605: input devices 606 including, for example, a touch screen, touch pad, keyboard, mouse, camera, microphone, accelerometer, gyroscope, etc.; output devices 607 including, for example, a Liquid Crystal Display (LCD), a speaker, a vibrator, and the like; storage 608 including, for example, magnetic tape, hard disk, etc.; and a communication device 609. The communication means 609 may allow the electronic device 600 to communicate with other devices wirelessly or by wire to exchange data. While fig. 5 illustrates an electronic device 600 having various means, it is to be understood that not all illustrated means are required to be implemented or provided. More or fewer devices may alternatively be implemented or provided.
In particular, according to an embodiment of the present disclosure, the processes described above with reference to the flowcharts may be implemented as computer software programs. For example, embodiments of the present disclosure include a computer program product comprising a computer program carried on a non-transitory computer readable medium, the computer program containing program code for performing the method illustrated by the flow chart. In such an embodiment, the computer program may be downloaded and installed from a network via the communication means 609, or may be installed from the storage means 608, or may be installed from the ROM 602. The computer program, when executed by the processing device 601, performs the above-described functions defined in the methods of the embodiments of the present disclosure.
It should be noted that the computer readable medium in the present disclosure can be a computer readable signal medium or a computer readable storage medium or any combination of the two. A computer readable storage medium may be, for example, but not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination of the foregoing. More specific examples of the computer readable storage medium may include, but are not limited to: an electrical connection having one or more wires, a portable computer diskette, a hard disk, a Random Access Memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing. In the present disclosure, a computer readable storage medium may be any tangible medium that can contain, or store a program for use by or in connection with an instruction execution system, apparatus, or device. In contrast, in the present disclosure, a computer readable signal medium may comprise a propagated data signal with computer readable program code embodied therein, either in baseband or as part of a carrier wave. Such a propagated data signal may take any of a variety of forms, including, but not limited to, electro-magnetic, optical, or any suitable combination thereof. A computer readable signal medium may be any computer readable medium that is not a computer readable storage medium and that can communicate, propagate, or transport a program for use by or in connection with an instruction execution system, apparatus, or device. Program code embodied on a computer readable medium may be transmitted using any appropriate medium, including but not limited to: electrical wires, optical cables, RF (radio frequency), etc., or any suitable combination of the foregoing.
In some embodiments, the servers may communicate using any currently known or future developed network Protocol, such as HTTP (HyperText Transfer Protocol), and may be interconnected with any form or medium of digital data communication (e.g., a communications network). Examples of communication networks include a local area network ("LAN"), a wide area network ("WAN"), the Internet (e.g., the Internet), and peer-to-peer networks (e.g., ad hoc peer-to-peer networks), as well as any currently known or future developed network.
The computer readable medium may be embodied in the electronic device; or may exist separately without being assembled into the electronic device.
The computer readable medium carries one or more programs which, when executed by the electronic device, cause the electronic device to: receiving a target data message to be forwarded, wherein the target data message is initiated by a source virtual machine and is to be sent to a target virtual machine, and the target data message carries virtual machine information used for indicating the source virtual machine and the target virtual machine; in response to receiving the target data message, determining whether a first forwarding rule corresponding to the target virtual machine exists in the stored forwarding rules; if the first forwarding rule exists, sending a second forwarding rule corresponding to the source virtual machine to a target host machine where the target virtual machine is located, and sending the first forwarding rule to the source host machine where the source virtual machine is located.
Computer program code for carrying out operations for the present disclosure may be written in any combination of one or more programming languages, including but not limited to an object oriented programming language such as Java, smalltalk, C + +, and conventional procedural programming languages, such as the "C" programming language or similar programming languages. The program code may execute entirely on the user's computer, partly on the user's computer, as a stand-alone software package, partly on the user's computer and partly on a remote computer or entirely on the remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer through any type of network, including a Local Area Network (LAN) or a Wide Area Network (WAN), or the connection may be made to an external computer (for example, through the Internet using an Internet service provider).
The flowchart and block diagrams in the figures illustrate the architecture, functionality, and operation of possible implementations of systems, methods and computer program products according to various embodiments of the present disclosure. In this regard, each block in the flowchart or block diagrams may represent a module, segment, or portion of code, which comprises one or more executable instructions for implementing the specified logical function(s). It should also be noted that, in some alternative implementations, the functions noted in the block may occur out of the order noted in the figures. For example, two blocks shown in succession may, in fact, be executed substantially concurrently, or the blocks may sometimes be executed in the reverse order, depending upon the functionality involved. It will also be noted that each block of the block diagrams and/or flowchart illustration, and combinations of blocks in the block diagrams and/or flowchart illustration, can be implemented by special purpose hardware-based systems which perform the specified functions or acts, or combinations of special purpose hardware and computer instructions.
The modules described in the embodiments of the present disclosure may be implemented by software or hardware. The name of a module does not in some cases form a limitation on the module itself, and for example, a receiving module may also be described as a "module that receives a target data packet to be forwarded".
The functions described herein above may be performed, at least in part, by one or more hardware logic components. For example, without limitation, exemplary types of hardware logic components that may be used include: field Programmable Gate Arrays (FPGAs), application Specific Integrated Circuits (ASICs), application Specific Standard Products (ASSPs), system on a chip (SOCs), complex Programmable Logic Devices (CPLDs), and the like.
In the context of this disclosure, a machine-readable medium may be a tangible medium that can contain, or store a program for use by or in connection with an instruction execution system, apparatus, or device. The machine-readable medium may be a machine-readable signal medium or a machine-readable storage medium. A machine-readable medium may include, but is not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any suitable combination of the foregoing. More specific examples of a machine-readable storage medium would include an electrical connection based on one or more wires, a portable computer diskette, a hard disk, a Random Access Memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.
According to one or more embodiments of the present disclosure, a forwarding control method for a data packet is provided, which is applied to a gateway in a cloud network, where the cloud network is deployed with a virtual machine, a forwarding rule is stored in the gateway, and the forwarding rule is used for associating the virtual machine with a host where the virtual machine is located, and the method includes:
receiving a target data message to be forwarded, wherein the target data message is initiated by a source virtual machine and is to be sent to a target virtual machine, and the target data message carries virtual machine information used for indicating the source virtual machine and the target virtual machine;
in response to receiving the target data message, determining whether a first forwarding rule corresponding to the target virtual machine exists in the stored forwarding rules;
if the first forwarding rule exists, sending a second forwarding rule corresponding to the source virtual machine to a target host machine where the target virtual machine is located, and sending the first forwarding rule to a source host machine where the source virtual machine is located.
According to one or more embodiments of the present disclosure, a forwarding control method for a data packet is provided, where the forwarding rule includes address information of a host where a virtual machine is located;
the sending the second forwarding rule corresponding to the source virtual machine to the target host where the target virtual machine is located includes:
determining first address information of the target host according to the first forwarding rule;
generating a first signaling message containing the second forwarding rule;
and sending the first signaling message to an address indicated by the first address information.
According to one or more embodiments of the present disclosure, a method for controlling forwarding of a data packet is provided, where sending the first forwarding rule to a source host where the source virtual machine is located includes:
determining second address information of the source host machine according to the target data message;
generating a second signaling message containing the first forwarding rule;
and sending the second signaling message to the address indicated by the second address information.
According to one or more embodiments of the present disclosure, a forwarding control method for a data packet is provided, where the forwarding rule includes address information of a host where a virtual machine is located;
the determining second address information of the source host according to the target data packet includes:
and determining the address information corresponding to the second forwarding rule as the second address information.
According to one or more embodiments of the present disclosure, a method for controlling forwarding of a data packet is provided, where the target data packet further carries packet source address information, and the packet source address information is used to indicate an address of a host that initially sends the target data packet;
the determining second address information of the source host according to the target data packet includes:
and determining message source address information corresponding to the target data message as the second address information.
According to one or more embodiments of the present disclosure, a method for controlling forwarding of a data packet is provided, where if the first forwarding rule exists, the method further includes:
and forwarding the target data message to a target host machine where the target virtual machine is located.
According to one or more embodiments of the present disclosure, a method for controlling forwarding of a data packet is provided, where the method further includes:
if the first forwarding rule does not exist, generating a third signaling message for representing that the target virtual machine does not exist in the cloud network;
and sending the third signaling message to the source host machine where the source virtual machine is located, so that the source host machine deletes the forwarding rule corresponding to the target virtual machine, which is stored in the source host machine.
According to one or more embodiments of the present disclosure, a forwarding control device for a data packet is provided, where the forwarding control device is applied to a gateway in a cloud network, where a virtual machine is deployed in the cloud network, a forwarding rule is stored in the gateway, and the forwarding rule is used to associate the virtual machine with a host where the virtual machine is located, and the device includes:
a receiving module, configured to receive a target data packet to be forwarded, where the target data packet is initiated by a source virtual machine and is to be sent to a target virtual machine, and the target data packet carries virtual machine information used for indicating the source virtual machine and the target virtual machine;
a determining module, configured to determine, in response to receiving the target data packet, whether a first forwarding rule corresponding to the target virtual machine exists in the stored forwarding rules;
and the first sending module is used for sending a second forwarding rule corresponding to the source virtual machine to a target host machine where the target virtual machine is located and sending the first forwarding rule to a source host machine where the source virtual machine is located if the first forwarding rule exists.
According to one or more embodiments of the present disclosure, there is provided a computer readable medium, on which a computer program is stored, which when executed by a processing device, performs the steps of the method of any of the embodiments of the present disclosure.
According to one or more embodiments of the present disclosure, there is provided an electronic device including:
a storage device having a computer program stored thereon;
processing means for executing the computer program in the storage means to implement the steps of the method of any embodiment of the present disclosure.
The foregoing description is only exemplary of the preferred embodiments of the disclosure and is illustrative of the principles of the technology employed. It will be appreciated by those skilled in the art that the scope of the disclosure herein is not limited to the particular combination of features described above, but also encompasses other embodiments in which any combination of the features described above or their equivalents does not depart from the spirit of the disclosure. For example, the above features and the technical features disclosed in the present disclosure (but not limited to) having similar functions are replaced with each other to form the technical solution.
Further, while operations are depicted in a particular order, this should not be understood as requiring that such operations be performed in the particular order shown or in sequential order. Under certain circumstances, multitasking and parallel processing may be advantageous. Likewise, while several specific implementation details are included in the above discussion, these should not be construed as limitations on the scope of the disclosure. Certain features that are described in the context of separate embodiments can also be implemented in combination in a single embodiment. Conversely, various features that are described in the context of a single embodiment can also be implemented in multiple embodiments separately or in any suitable subcombination.
Although the subject matter has been described in language specific to structural features and/or methodological acts, it is to be understood that the subject matter defined in the appended claims is not necessarily limited to the specific features or acts described above. Rather, the specific features and acts described above are disclosed as example forms of implementing the claims. With regard to the apparatus in the above-described embodiment, the specific manner in which each module performs the operation has been described in detail in the embodiment related to the method, and will not be elaborated here.
Claims (9)
1. A forwarding control method of a data message is characterized in that the forwarding control method is applied to a gateway in a cloud network, wherein a virtual machine is deployed in the cloud network, a forwarding rule is stored in the gateway, and the forwarding rule is used for associating the virtual machine with a host machine where the virtual machine is located, and the method comprises the following steps:
receiving a target data message to be forwarded, wherein the target data message is initiated by a source virtual machine and is to be sent to a target virtual machine, and the target data message carries virtual machine information used for indicating the source virtual machine and the target virtual machine;
in response to receiving the target data message, determining whether a first forwarding rule corresponding to the target virtual machine exists in the stored forwarding rules;
if the first forwarding rule exists, sending a second forwarding rule corresponding to the source virtual machine to a target host machine where the target virtual machine is located, and sending the first forwarding rule to a source host machine where the source virtual machine is located;
the method further comprises the following steps:
if the first forwarding rule does not exist, generating a third signaling message for representing that the target virtual machine does not exist in the cloud network;
and sending the third signaling message to the source host machine where the source virtual machine is located, so that the source host machine deletes the forwarding rule corresponding to the target virtual machine, which is stored in the source host machine.
2. The method according to claim 1, wherein the forwarding rule includes address information of a host machine where the virtual machine is located;
the sending the second forwarding rule corresponding to the source virtual machine to the target host machine where the target virtual machine is located includes:
determining first address information of the target host according to the first forwarding rule;
generating a first signaling message containing the second forwarding rule;
and sending the first signaling message to an address indicated by the first address information.
3. The method according to claim 1, wherein the sending the first forwarding rule to a source host where the source virtual machine is located comprises:
determining second address information of the source host machine according to the target data message;
generating a second signaling message containing the first forwarding rule;
and sending the second signaling message to the address indicated by the second address information.
4. The method according to claim 3, wherein the forwarding rule includes address information of a host machine where the virtual machine is located;
the determining second address information of the source host according to the target data packet includes:
and determining the address information corresponding to the second forwarding rule as the second address information.
5. The method of claim 3, wherein the target data packet further carries packet source address information, wherein the packet source address information is used to indicate an address of a host that originally sent the target data packet;
the determining second address information of the source host according to the target data packet includes:
and determining message source address information corresponding to the target data message as the second address information.
6. The method of claim 1, wherein if the first forwarding rule exists, the method further comprises:
and forwarding the target data message to a target host machine where the target virtual machine is located.
7. The forwarding control device of a data packet is applied to a gateway in a cloud network, wherein a virtual machine is deployed in the cloud network, a forwarding rule is stored in the gateway, and the forwarding rule is used for associating the virtual machine with a host machine where the virtual machine is located, and the device includes:
a receiving module, configured to receive a target data packet to be forwarded, where the target data packet is initiated by a source virtual machine and is to be sent to a target virtual machine, and the target data packet carries virtual machine information used for indicating the source virtual machine and the target virtual machine;
a determining module, configured to determine, in response to receiving the target data packet, whether a first forwarding rule corresponding to the target virtual machine exists in the stored forwarding rules;
the first sending module is used for sending a second forwarding rule corresponding to the source virtual machine to a target host machine where the target virtual machine is located and sending the first forwarding rule to a source host machine where the source virtual machine is located if the first forwarding rule exists;
the device further comprises:
a generating module, configured to generate a third signaling message for representing that the target virtual machine does not exist in the cloud network if the first forwarding rule does not exist;
a second sending module, configured to send the third signaling packet to a source host where the source virtual machine is located, so that the source host deletes a forwarding rule corresponding to the target virtual machine, where the forwarding rule is stored in the source host.
8. A computer-readable medium, on which a computer program is stored, characterized in that the program, when being executed by processing means, carries out the steps of the method of any one of claims 1 to 6.
9. An electronic device, comprising:
a storage device having a computer program stored thereon;
processing means for executing the computer program in the storage means to carry out the steps of the method according to any one of claims 1 to 6.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110184969.9A CN112866410B (en) | 2021-02-10 | 2021-02-10 | Forwarding control method, forwarding control device, forwarding control medium and electronic equipment of data message |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110184969.9A CN112866410B (en) | 2021-02-10 | 2021-02-10 | Forwarding control method, forwarding control device, forwarding control medium and electronic equipment of data message |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN112866410A CN112866410A (en) | 2021-05-28 |
| CN112866410B true CN112866410B (en) | 2023-04-07 |
Family
ID=75987979
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202110184969.9A Active CN112866410B (en) | 2021-02-10 | 2021-02-10 | Forwarding control method, forwarding control device, forwarding control medium and electronic equipment of data message |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN112866410B (en) |
Families Citing this family (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN113824772B (en) * | 2021-08-30 | 2023-04-18 | 济南浪潮数据技术有限公司 | Data acquisition method, system and device based on cloud network and readable storage medium |
| CN113938533B (en) * | 2021-10-15 | 2024-02-02 | 京东科技信息技术有限公司 | Inter-application communication method and device, electronic equipment and computer readable medium |
| CN114785714B (en) * | 2022-03-01 | 2023-08-22 | 阿里巴巴（中国）有限公司 | Message transmission delay detection method, storage medium and equipment |
| CN115118654B (en) * | 2022-06-17 | 2023-08-18 | 北京百度网讯科技有限公司 | Data forwarding method, system, device and program product under virtual network |
Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN105245428A (en) * | 2014-07-07 | 2016-01-13 | 北京东土科技股份有限公司 | Method and device for configuring message processing rule |
| CN106464579A (en) * | 2014-06-20 | 2017-02-22 | 谷歌公司 | System and method for live migration of a virtualized networking stack |
Family Cites Families (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20160323245A1 (en) * | 2012-04-11 | 2016-11-03 | Varmour Networks, Inc. | Security session forwarding following virtual machine migration |
| CN104811382B (en) * | 2014-01-28 | 2018-05-29 | 华为技术有限公司 | The processing method and device of data packet |
-
2021
- 2021-02-10 CN CN202110184969.9A patent/CN112866410B/en active Active
Patent Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106464579A (en) * | 2014-06-20 | 2017-02-22 | 谷歌公司 | System and method for live migration of a virtualized networking stack |
| CN105245428A (en) * | 2014-07-07 | 2016-01-13 | 北京东土科技股份有限公司 | Method and device for configuring message processing rule |
Also Published As
| Publication number | Publication date |
|---|---|
| CN112866410A (en) | 2021-05-28 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN112866410B (en) | Forwarding control method, forwarding control device, forwarding control medium and electronic equipment of data message | |
| CN110708393B (en) | Method, device and system for transmitting data | |
| CN111581563A (en) | Page response method and device, storage medium and electronic equipment | |
| CN110378743B (en) | Application invitation method, terminal device, server and medium | |
| CN112019898A (en) | Screen projection method and device, electronic equipment and computer readable medium | |
| CN111596991A (en) | Interactive operation execution method and device and electronic equipment | |
| CN113286280A (en) | Audio data processing method and device, electronic equipment and computer readable medium | |
| CN113050643A (en) | Unmanned vehicle path planning method and device, electronic equipment and computer readable medium | |
| CN110879729B (en) | Channel configuration method and device for live broadcast room, readable medium and electronic equipment | |
| CN114637703B (en) | Data access device, method, readable medium and electronic equipment | |
| CN110413367B (en) | Task creation method and device, storage medium and electronic equipment | |
| CN110768903A (en) | Method, device, terminal and storage medium for optimizing network connection | |
| CN112748962B (en) | Application loading method, device, electronic equipment and computer readable medium | |
| CN112968871B (en) | Login method and device of application program, readable medium and electronic equipment | |
| CN111400068B (en) | Interface control method and device, readable medium and electronic equipment | |
| CN113381938B (en) | Data packet sending method and device, storage medium and electronic equipment | |
| CN113162836B (en) | Virtual local area network communication method and device, cloud server, medium and electronic equipment | |
| CN114726838B (en) | System and method for remote secure interaction of multiple signal sources | |
| CN112995005B (en) | Virtual network data exchange method and device | |
| CN114428925A (en) | Page rendering method and device, electronic equipment and computer readable medium | |
| CN114726904A (en) | System and method for remote secure interaction of signal sources | |
| CN114979128A (en) | Cross-region communication method and device and electronic equipment | |
| JP2023527174A (en) | Video special effect arrangement method, video special effect arrangement device, device and storage medium | |
| CN111399973B (en) | FPGA remote mounting structure, network management and control method and device and electronic equipment | |
| CN112230986A (en) | Project file generation method and device, electronic equipment and computer readable medium |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |