CN114363259B

CN114363259B - Path detection system and path detection method for overlay network

Info

Publication number: CN114363259B
Application number: CN202111650212.0A
Authority: CN
Inventors: 邓鑫; 解培
Original assignee: China Everbright Bank Co Ltd
Current assignee: China Everbright Bank Co Ltd
Priority date: 2021-12-30
Filing date: 2021-12-30
Publication date: 2023-12-08
Anticipated expiration: 2041-12-30
Also published as: CN114363259A

Abstract

The embodiment of the invention discloses a path detection system and a path detection method for an overlay network. The overlay network is formed by erecting a virtual network of resource nodes in a cloud platform, and the system comprises: and the path detection module is connected with each resource node on the cloud platform in a communication way and is used for selecting a target node from the resource nodes to form a detected network transmission path according to the address information of the source and destination ends extracted from the current task to be executed and the set path searching strategy. According to the technical scheme, the path detection system connected with the cloud platform with the overlay network is additionally arranged, the path detection module can be combined with the path finding strategy, and the corresponding target node is selected in the cloud platform to form the network transmission path of the detected source-destination node.

Description

Path detection system and path detection method for overlay network

Technical Field

The embodiment of the invention relates to the field of communication, in particular to a path detection system and a path detection method for an overlay network.

Background

In the existing software defined network (Software Defined Network, SDN) system, an overlay network is mainly controlled by a centralized controller in a unified way, but the networking mode has strong dependence on the controller. At present, although the SDN system implementation mode can carry out overlay network self-organization through a network protocol, the intervention of a centralized controller is not needed, and the implementation mode is flexible, the detection of a data transmission path is also very difficult.

In the prior art, a data flow collector is added in a virtual network to collect flow and analyze the flow to obtain network topology data, the method belongs to in-band collection, has influence on network performance, has the accuracy related to a data processing algorithm, and has low accuracy.

Disclosure of Invention

The embodiment of the invention provides a path detection system and a path detection method for an overlay network, which are used for realizing path detection of an ad hoc overlay network.

In a first aspect, an embodiment of the present invention provides a path detection system for an overlay network, where the overlay network is configured by erecting a virtual network for a resource node in a cloud platform, and the system includes: the path-detecting module is configured to detect the path,

And the path detection module is connected with each resource node on the cloud platform in a communication way and is used for selecting a target node from the resource nodes to form a detected network transmission path according to the address information of the source and destination ends extracted from the current task to be executed and the set path searching strategy.

In a second aspect, an embodiment of the present invention further provides a path detection method for an overlay network, where the overlay network is configured by erecting a virtual network for a resource node in a cloud platform, and the method is executed by the system in the first aspect, and includes:

the path detection module establishes communication connection with each resource node on the cloud platform;

and the path detection module combines the set path-finding strategy according to the address information of the source and destination ends extracted from the current task to be executed, and selects a target node from the resource nodes to form a detected network transmission path.

In a third aspect, an embodiment of the present invention further provides a computer apparatus, including:

one or more processors;

storage means for storing one or more programs,

the one or more programs, when executed by the one or more processors, cause the one or more processors to implement the path detection method for an overlay network as described in the second aspect.

In a fourth aspect, an embodiment of the present invention further provides a computer readable storage medium having stored thereon a computer program which, when executed by a processor, implements a path detection method for an overlay network as described in the second aspect.

According to the technical scheme, communication connection is established between a path detection module in a path detection system for an overlay network and each resource node on the cloud platform, and a target node is selected from the resource nodes to form a detected network transmission path according to source-destination address information extracted from a currently to-be-executed task and a set path finding strategy. According to the technical scheme, the path detection system connected with the cloud platform with the overlay network is additionally arranged, the path detection module can be combined with the path finding strategy, and the corresponding target node is selected in the cloud platform to form the network transmission path of the detected source-destination node.

Drawings

Fig. 1 is a schematic diagram of a path detection system for an overlay network according to a first embodiment of the present invention;

FIG. 2 is a schematic diagram of another path probing system for an overlay network according to an embodiment of the present invention;

fig. 3 is a flowchart of a path detection method for an overlay network according to a second embodiment of the present invention;

fig. 4 is a flowchart of a path finding condition implementation in a path detection method for an overlay network according to an embodiment of the present invention;

fig. 5 is a schematic effect diagram of a path finding policy implementation in a path detection method for an overlay network according to an embodiment of the present invention;

fig. 6 is a schematic effect diagram of task state implementation in a path detection method for an overlay network according to an embodiment of the present invention;

fig. 7 is a schematic structural diagram of a computer device according to a third embodiment of the present invention.

Detailed Description

The invention is described in further detail below with reference to the drawings and examples. It is to be understood that the specific embodiments described herein are merely illustrative of the invention and are not limiting thereof. It should be further noted that, for convenience of description, only some, but not all of the structures related to the present invention are shown in the drawings.

Example 1

Fig. 1 is a schematic architecture diagram of a path detection system for an overlay network according to an embodiment of the present invention, and it should be noted that, the overlay network is formed by erecting a virtual network for resource nodes in a cloud platform, as shown in fig. 1, the system 10 includes: the path detection module 101 is configured to detect,

The path detection module 101 establishes communication connection with each resource node 103 on the cloud platform 102, and is configured to select a target node from the resource nodes 103 to form a detected network transmission path according to source-destination address information extracted from a task to be currently executed and a set path-finding strategy.

It should be noted that, the overlay network may be a virtualization technology overlaid on a conventional network architecture, and a virtual network (which cannot independently appear) built on another computer network may be considered to be formed by setting up a virtual network of the resource nodes 103 in the cloud platform 102. Specifically, under the overlay network, a corresponding resource node 103 may be selected from the cloud platform 102 based on a certain virtual network erection condition, so as to form a private virtual network VPC.

In the embodiment of the present invention, the path detection module 101 may establish communication connection with the cloud platform 102, which is equivalent to that the path detection module 101 may establish communication connection with each resource node 103 in the cloud platform 102, so that the corresponding resource node 103 may be conveniently found through detection information. The path detection module 101 may extract source node address information and destination node address information from the current task to be performed according to information in the current task to be performed, where the task to be performed may be considered as a task formed by acquiring a detection task input by a user, and of course, the source destination address information in the current task to be performed is legal, and there is a corresponding resource node 103 in the cloud platform 102, where the source destination address may include an IP address, a MAC address, and the like. After extracting the address information of the source and destination ends, a corresponding target node may be selected from the resource nodes 103 in combination with a set routing policy to form a network transmission path from the detected source node end to the intermediate node end (may include a plurality of resource nodes 103) to the destination node end. The routing policy may be that the corresponding policy is executed by judging the network to which the source destination address belongs and then by the network to which the source destination address belongs. For example, the source-destination addresses are in the same private virtual network VPC and in the same local area network, a two-layer routing policy may be correspondingly executed, where the two-layer routing policy may be that a corresponding source node is found in each resource node 103, then a second resource node 103 is found through routing information on a source point of the source node and is used as a bridge node, and then forwarding information on the bridge node queries a next hop port for forwarding the MAC address of the corresponding destination node, thereby finding a network transmission path from the source node to the bridge node to the destination node in each resource node 103.

In practice, the path detection system 10 may be understood as client software installed on a computer device, and may of course be considered as a plug-in the computer device that depends on a certain system. In order to improve the visual experience of the user, a visual interface may be provided for the user, so that the user may input detection task information in the interface of the front end, for example, the user may input source address information and destination address information in the interface, and then, by combining a set policy through the path detection module 101, a corresponding target resource node 103 may be selected from the resource nodes 103 in the cloud platform 102 as detection for implementing a network transmission path of the corresponding input information.

According to the technical scheme, communication connection is established between a path detection module in a path detection system for an overlay network and each resource node on a cloud platform, and a target node is selected from the resource nodes to form a detected network transmission path according to source-destination address information extracted from a currently to-be-executed task and a set path finding strategy. According to the technical scheme, the path detection system connected with the cloud platform with the overlay network is additionally arranged, the path detection module can be combined with the path finding strategy, and the corresponding target node is selected in the cloud platform to form the network transmission path of the detected source-destination node.

On the basis of the above embodiment, the embodiment of the present invention further optimizes the path detection system 10 for an overlay network, and fig. 2 is an exemplary schematic diagram of another architecture of the path detection system for an overlay network according to the first embodiment of the present invention.

As shown in fig. 2, further, the path detection module 101 includes:

an information obtaining unit 104, configured to analyze, through a network resource information table obtained in advance, a received task to be currently executed, obtain source-destination address information of a path to be detected, and determine a source node end and a destination node end to be subjected to path detection from each resource node 103 based on the source-destination address information;

a first searching unit 105, configured to, when the path decision performed by the source node end and the destination node end meets a first path-finding condition, select a target node from the resource nodes 103 according to a first path-finding policy to form a detected network transmission path;

and a second searching unit 106, configured to select a target node from the resource nodes 103 according to a second routing policy to form a detected network transmission path when the path determination performed based on the source-destination address information satisfies the second routing condition.

In the embodiment of the present invention, the information obtaining unit 104 may be configured to obtain the source address information and the destination address information of the path to be detected by obtaining the network resource information table in advance in the cloud platform 102, and find the resource node 103 corresponding to the source address information and the resource node 103 corresponding to the destination address information from the cloud platform 102, which is equivalent to determining the source node end and the destination node end of the path to be detected from the resource nodes 103 according to the source address information and the destination address information. The network resource information table includes all VPC private virtual networks, information of the resource nodes 103 included in each VPC private virtual network, and IP address information of each resource node 103, that is, all information constituting an overlay network.

In the embodiment of the present invention, after determining the source node end and the destination node end in each resource node 103, the first search unit 105 may be configured to select, according to the first routing policy, the destination node from each resource node 103 to form the detected network transmission path when the first routing condition is satisfied based on the path determination performed by the source node end and the destination node end. The first routing condition is considered to satisfy that the source node end and the destination node end are in the same VPC private virtual network, and the source node end and the destination node end are in the same local area network. The first routing policy may be considered as a routing policy to be executed corresponding to the first routing condition, where the policy may be that a corresponding source node end is found in each resource node 103, then a second resource node 103 is found through routing information on a source point of the source node end and is used as a bridge node, and then forwarding information on the bridge node queries a next hop port for forwarding the MAC address of the corresponding destination node end, thereby finding a network transmission path from the source node end to the bridge node to the destination node end in each resource node 103.

In the embodiment of the present invention, after determining the source node end and the destination node end in each resource node 103, the second search unit 106 may be configured to select, according to the second routing policy, the destination node from each resource node 103 to form the detected network transmission path when the path determination performed based on the source destination address information satisfies the second routing condition. The second routing condition is considered to satisfy that the source node end and the destination node end are not in the same VPC private virtual network, and the IP addresses of the source node end and the destination node end are not overlapped and are not in the same local area network. The second routing policy may be considered as a routing policy to be executed corresponding to the second routing condition. The policy may be that a corresponding source node end is found in each resource node 103, then a second resource node 103 is found through the routing information on the source node end and is used as a bridge node, then a corresponding third resource node 103 is found in the routing information table on the bridge node and is used as a gateway node, and then a next hop port for forwarding the MAC address of a corresponding destination node end is queried according to the forwarding information table on the gateway node, so that a network transmission path from the source node end to the bridge node to the gateway node to the destination node end is found in each resource node 103.

Further, on the basis of the above embodiment, the first search unit 105 is specifically configured to:

a1, when the source node end and the destination node end are judged to be in the same private virtual network VPC and in the same gateway, or when the source node end and the destination node end are in different private virtual networks VPC, the source IP address and the destination IP address are not overlapped and are in the same gateway, determining that the carried out path judgment meets the first path finding condition.

In the embodiment of the invention, whether the path judgment performed by the source node end and the destination node end meets the first path searching condition is judged by judging whether the source node end and the destination node end are in the same private virtual network VPC, whether the source and the destination IP addresses are overlapped and whether the source and the destination node ends are in the same gateway. Specifically, two cases can be distinguished, the first case: when the source node end and the destination node end belong to the same private virtual network VPC and belong to the same gateway at the same time, the path judgment performed by the source node end and the destination node end is considered to meet the first path searching condition. Second case: when the source node end and the destination node end belong to different private virtual networks (VPCs) and the source and destination IP addresses are not overlapped and belong to the same gateway, the path judgment performed by the source node end and the destination node end is considered to meet the first path searching condition. Wherein the same gateway can be considered to belong to the same local area network.

b1, taking a source node end as a starting resource node of a network transmission path, and determining a first bridge node of a next hop from the resource nodes according to a node routing information table on the starting resource node.

According to the embodiment of the invention, the source node end can be used as the initial resource node of the network transmission path, and then the source node end is transferred into the first bridge node from the initial resource node according to the node routing information table on the initial resource node. The node routing information table may be considered as storing path information of the current resource node to the first bridge node. Specifically, the first bridge node of the next hop corresponding to the node routing information table may be determined from the resource nodes according to the node routing information table on the starting resource node, so that a transmission path from the starting resource node to the first bridge node may be formed.

And c1, inquiring a first forwarding next hop port corresponding to the target node according to the forwarding information table on the first bridge node.

According to the embodiment of the invention, the first forwarding next hop port corresponding to the target node end can be queried according to the forwarding information table on the first network bridge node. The forwarding information table may be considered as a forwarding next hop port required for storing the first bridge node to other resource nodes. The destination node may be understood as a destination node. Specifically, the first bridge node may find the required first forwarding next hop port of the resource node corresponding to the destination node according to the forwarding information table of the node, so as to form a transmission path from the first bridge node to the destination node.

d1, determining a path formed by the source node end, the first bridge node, the first forwarding next hop port and the destination node end as a detected network transmission path.

In the embodiment of the invention, after the first bridge node and the first forwarding next hop port are determined, a path from the source node end to the first bridge node and then from the first forwarding next hop port to the destination node end can be formed, the path can be determined as the detected network transmission path, and the detection of the path is finished.

Further, based on the above embodiment, the second search unit 106 is specifically configured to:

a2, when the source node end and the destination node end are judged to be in different private virtual networks VPCs, the source and destination IP addresses are not overlapped and are in different gateways, or the source node end and the destination node end are in the same private virtual network VPC but are in different gateways, the fact that the conducted path judgment meets the second path searching condition is confirmed.

In the embodiment of the invention, whether the path judgment performed by the source node end and the destination node end meets the second path searching condition is judged by judging whether the source node end and the destination node end are in different private virtual networks VPCs, whether the source and the destination IP addresses are not overlapped and whether the source and the destination node ends are in different gateways. Specifically, two cases can be distinguished, the first case: when the source node end and the destination node end belong to the same private virtual network VPC but belong to different gateways, the path judgment performed by the source node end and the destination node end is considered to meet the second path searching condition. Second case: when the source node end and the destination node end belong to different private virtual networks (VPCs) and the source and destination IP addresses are not overlapped and belong to different gateways, the path judgment performed by the source node end and the destination node end is considered to meet the second path searching condition. Wherein different gateways may be considered to belong to different local area networks.

b2, taking the source node end as a starting resource node of the network transmission path, and determining a second bridge node of the next hop from the resource nodes according to a node routing information table on the starting resource node.

According to the embodiment of the invention, the source node end can be used as the initial resource node of the network transmission path, and then the source node end is transferred into the second bridge node from the initial resource node according to the node routing information table on the initial resource node. Specifically, the second bridge node of the next hop corresponding to the node routing information table may be determined from the resource nodes according to the node routing information table on the starting resource node, so that a transmission path from the starting resource node to the second bridge node may be formed.

And c2, determining network card information transmitted by the network according to the routing information table of the name space on the second network bridge node, and obtaining the gateway node.

According to the embodiment of the invention, the network card information transmitted by the network can be found according to the routing information table of the name space on the second network bridge node, and the corresponding gateway node is obtained. The routing information table of the namespaces can be understood as a routing information table distinguished by the namespaces on the same network bridge node, and through the use of the namespaces, a plurality of namespaces can be ensured to be independent of each other, and the information of each space is independent and does not affect each other. Of course, the routing information table of the namespace herein may be considered as network card information required to store descriptions of the second bridge node to the gateway node, and the MAC address may be obtained through the network card information, so that the gateway node may be obtained. Specifically, the second bridge node may find the corresponding network card information according to the routing information table of the node namespace, so that the gateway node corresponding to the routing information table of the node namespace may be determined from the resource nodes, and a transmission path from the second bridge node to the gateway node may be further formed.

d2, inquiring a second forwarding port corresponding to the second bridge node and the name of the destination node according to the next hop forwarding information table on the gateway node.

According to the embodiment of the invention, the second forwarding port corresponding to the second bridge node and the destination node name of the destination node end can be queried according to the next hop forwarding information table on the gateway node. The next hop forwarding information table may be considered as a destination node name that is needed to store a next hop port for forwarding from the second bridge node to other resource nodes and that is needed to be reached finally and corresponds to the second bridge node. Of course, the destination node name herein may be understood as a MAC address.

e2, if the name of the destination node is different from the destination node end, returning to the determining operation of the second network bridge node; otherwise, determining the path formed by the source node end, the second bridge node, the gateway node, the second forwarding port and the destination node end as the detected network transmission path.

It should be noted that, after the destination node name in the next hop forwarding information table is obtained, whether the operation of returning the gateway node to the second bridge node or the operation of continuing to the destination node after the gateway node is determined by judging whether the destination node name is the same as the destination node end name. Specifically, if the destination node name and the destination node end name are different, the gateway node returns to the second bridge node, if the destination node name and the destination node end name are the same, a path from the source node end to the second bridge node to the gateway node is formed, and then the path passes through the second forwarding port to the destination node end, the path can be determined as the detected network transmission path, and the detection of the path is finished.

As shown in fig. 2, further, the path detection module 101 further includes:

and the path information feedback unit 107 is configured to feed back the determined network transmission path to the user side that initiates the path detection task.

It should be noted that, the user may initiate a probing task through the user side to query which nodes the source node end to the destination node end pass through for path probing, and then after the path probing system 10 for an overlay network probes the node paths passed by the source node end and the destination node end, the path information feedback unit 107 may feed back the detected network transmission paths to the user side initiating the path probing task for feedback to the user.

As shown in fig. 2, further, the system 10 further includes: a user interface module 108, a task control module 109, and an information verification module 110;

the user interface module 108 is connected with the task control module 109 and is used for receiving the detection task submitted by at least one user in the interactive interface and uploading the detection task to the task control module 109;

the task control module 109 is connected with the third party database 111 and is used for distributing task unique identifiers for the received detection tasks to form a list to be verified; the system is further used for determining the task state of each detection task in real time through monitoring each detection task, and updating the task state in the database 111;

The information verification module 110 is connected to the task control module 109 and the node management end 112 on the cloud platform 102, and is configured to perform input verification on a current task to be verified based on the network resource information table obtained from the node management end 112, and add the current task to be verified to the list to be executed as the task to be executed when the verification is passed, where the current task to be verified is taken out from the list to be verified.

It should be noted that the path probing system 10 for an overlay network further includes a user interface module 108, and a user may submit a probing task through the user interface module 108, so that the user can interact with the system. In particular, to enhance the user experience, to facilitate user submission of probe tasks, the user interface module 108 may receive one or more user-submitted probe tasks, and may submit probe tasks in the provided interactive section. The information included in the detection task can be divided into three cases, and the information of each case can be submitted as the detection task, and first, the information can include node identifiers of the virtual network node to be detected, such as an identifier of a source node end and an identifier of a destination node end, wherein the node identifiers can be MAC addresses; second, two IP addresses of the virtual network to be probed, such as an IP address of the source node and an IP address of the destination node, may be included, and the user interface module 108 may also include identification of validity of the IP address; third, the network space to be probed may include an ID identifier of the network space to be probed and an IP address in the space, where the probed network space may refer to a private virtual network VPC, specifically, the information included in the probing task input by the user may include two different private virtual networks VPCs, where the two private virtual networks VPCs have different unique ID identifiers, and include the IP addresses in the two private virtual networks VPCs. In addition, the user interface module 108 may establish a communication connection with the task control module 109 and upload the acquired probe tasks to the task control module 109 included in the system.

In the embodiment of the invention, the task control module 109 receives each detection task uploaded by the user interface module 108, and assigns a task unique identifier for each detection task, and forms a list to be verified through the unique identifier so as to facilitate the verification of the detection task subsequently. In addition, the task control module 109 may monitor the execution of the information verification module 110 and monitor the execution of the path detection module 101 to realize monitoring of each detection task, so as to determine the task state of each detection task, where, of course, the task control module 109 is connected with the third party database 111, so as to store the task state of each detection task in the database 111, and meanwhile, it is convenient for the user to query the state of each detection task at any time. The task state may include a state to be verified, a state to be executed, a suspension state, an execution state, and an end state, which is not limited in the embodiment of the present invention.

In the embodiment of the present invention, the path detection system 10 for an overlay network further includes an information verification module 110, which establishes a communication connection with the task control module 109 to obtain a to-be-verified list in the task control module 109, so as to verify a to-be-verified task in the to-be-verified list. The node management end 112 may be considered as a node for managing each resource node 103 in the cloud platform 102, and may include a network resource information table. Specifically, the information verification module 110 further establishes communication connection with the node management end 112 on the cloud platform 102, and the node management end 112 can obtain a network resource information table, and input and verify the current task to be verified through the network resource information table to determine whether the current task to be verified can perform path detection in the cloud platform 102. For example, it may be determined whether the IP address of the source node and the IP address of the destination node input by the user exist in the cloud platform 102, or whether the MAC address of the source node and the MAC address of the destination node exist in the cloud platform 102. If the IP address of the source node and the IP address of the destination node exist in the cloud platform 102 or the MAC address of the source node and the MAC address of the destination node exist, it can be considered that the verification is passed; otherwise, the verification is not passed, and the subsequent path detection can not be performed. In addition, when the verification is passed, the task to be verified can be taken as a task to be executed and added to the list to be executed. The current task to be verified is obtained from the list to be verified. In addition, it should be noted that the task to be executed in the path detection module 101 may be obtained from the to-be-executed list in the information verification module 110.

Further, based on the above embodiment, the task control module 109 is specifically configured to:

and a3, distributing a task unique identifier to the initially received detection task, adding the task unique identifier to the list to be verified, and initially marking the task state as the state to be verified.

In the embodiment of the present invention, after the task control module 109 receives each detection task uploaded by the user interface module 108, a task unique identifier is allocated to each detection task, the detection task carrying the task unique identifier is added to the to-be-verified list, and the task state is initially recorded as the to-be-verified state, or the task state may be stored in the database 111 for storage.

b3, monitoring the execution of the information verification module 110, updating the task state of the task to be verified, which is verified through input verification, into a state to be executed, and deleting the task state from the list to be verified; and updating the task state of the task to be verified which does not pass the input verification into an end state, and deleting the task state from the list to be verified.

In the embodiment of the present invention, the task control module 109 may monitor the execution of the information verification module 110, and when it is monitored that the information verification module 110 performs input verification on a current task to be verified, and when the input verification is passed, update the task state of the task to be verified to a state to be executed, save the task state in the database 111, and delete the task to be verified from the list to be verified; if the input verification is not passed, the task state is updated to an end state and saved in the database 111 while being deleted from the list to be verified.

c3, monitoring the execution of the path detection module 101, and updating the task state of the executing task to be executed into an execution state; updating the task state of the task to be executed which is participated in executing and suspending to a suspending state; and updating the task state of the executed task to be executed to an end state, and deleting the task state from the list to be executed.

In the embodiment of the present invention, the task control module 109 may monitor the execution of the path detection module 101, and if it monitors that there is a task being executed, update the task state of the task being executed to be an execution state, and update and save the task state in the database 111; if the task which is participated in execution but has a suspended task is monitored, the task state of the task to be executed which is participated in execution and suspended is updated to be the suspended state, and the update and the storage are carried out in the database 111; if the task which is completed is monitored to be executed, the task state of the task to be executed which is completed is updated to be an end state, and the task is updated and stored in the database 111, and meanwhile, the task which is completed to be executed is deleted from the to-be-executed list.

d3, updating the task state determined relative to each detection task in the monitoring process to a task state table of the database 111 in real time, wherein the task state table comprises a unique identification of the detection task and a task state.

In the embodiment of the present invention, the task control module 109 may update the task states determined by each detection task in the listening process to the task state list of the database 111 in real time, so as to facilitate the user's query on the task states of the detection tasks. The task state list comprises a unique identification of the detection task and a task state. The unique identification of each detection task can distinguish various detection tasks, and each detection task also has a task state which corresponds to one and is updated in real time. Of course, in order to implement the user's query on the task state of the detected task, task state query logic information is also included in the task state table, that is, when the user wants to obtain the task state of a certain detected task, a query request may be sent out, and the task control module 109 may find, through the query logic information, for example, through the unique identifier of the detected task, the latest task state of the corresponding detected task in the database 111, and may feed back the latest task state as a query result to the user interface module 108, so that the user may view the query result.

Example two

Fig. 3 is a flowchart of a path detection method for an overlay network according to a second embodiment of the present invention. The embodiment of the present invention is executed by the path detection system for an overlay network according to any of the above embodiments, as shown in fig. 3, the method provided by the embodiment of the present invention specifically includes the following steps:

S310, the path detection module establishes communication connection with each resource node on the cloud platform.

It should be noted that, in order to realize the detection of the path, the path detection module needs to establish communication connection with each resource node in the cloud platform, so that the corresponding resource node can be conveniently found through the detection information.

S320, the path detection module combines the set path finding strategy according to the address information of the source and destination ends extracted from the current task to be executed, and selects a target node from all the resource nodes to form a detected network transmission path.

According to the embodiment of the invention, the source node end address information and the destination node end address information can be extracted from the current task to be executed through the path detection module according to the information in the current task to be executed, and certainly, the source end address information and the destination end address information in the current task to be executed are legal, and corresponding resource nodes exist in the cloud platform, and the source end address can comprise an IP address, an MAC address and the like. After the address information of the source and destination ends is extracted, a corresponding target node can be selected from all the resource nodes by combining with a set routing strategy to form a network transmission path from the detected source node end to an intermediate node end (which can comprise a plurality of resource nodes) to the destination node end. The routing policy may be that the corresponding policy is executed by judging the network to which the source destination address belongs and then by the network to which the source destination address belongs.

According to the technical scheme, communication connection is established between the path detection module and each resource node on the cloud platform, and the path detection module is used for selecting a target node from the resource nodes to form a detected network transmission path according to source-destination address information extracted from a current task to be executed and a set path searching strategy. According to the technical scheme, the path detection system connected with the cloud platform with the overlay network is additionally arranged, the path detection module can be combined with the path finding strategy, and the corresponding target node is selected in the cloud platform to form the network transmission path of the detected source-destination node.

Fig. 4 is a flowchart of a path finding condition implementation in a path detection method for an overlay network according to an embodiment of the present invention. The specific flow is as follows:

s401, inputting source and destination address information.

The embodiment of the invention can acquire the address information of the source node end and the destination node end input by the user.

S402, judging whether the same private virtual network VPC exists, if so, executing S403, and if not, executing S404.

In the embodiment of the invention, whether the source node end and the destination node end are in the same private virtual network VPC is judged.

S403, judging whether the gateway is in the same gateway, if so, executing S405, otherwise, executing S406.

In the embodiment of the invention, whether the source node end and the destination node end are positioned in the same gateway is judged.

S404, judging whether the IP addresses are overlapped between the source and destination address information, if so, ending the road searching condition judgment, and if not, executing S403.

S405, the first path finding strategy is executed according to the first path finding condition.

S406, the second path finding strategy is executed according to the second path finding condition.

Fig. 5 is a schematic effect diagram of a path finding policy implementation in a path detection method for an overlay network according to an embodiment of the present invention.

As shown in fig. 5, the 4 nodes in the figure are respectively resource nodes in the cloud platform, and a corresponding target node is selected from the resource nodes to form a detected network transmission path. The probe paths from the resource node 1 to the resource node 2 to the resource node 4 may correspond to the first routing policy. The probe paths of resource node 1 through resource node 2 through resource node 3 through resource node 4 may correspond to a second routing policy.

The resource node 1 can be used as an initial resource node, the resource node 2 can be used as a network bridge node, the resource node 3 can be used as a gateway node, and the resource node 4 can be used as a target resource node.

In the probe paths from the resource node 1 to the resource node 2 to the resource node 4, a in the resource node 1 to the resource node 2 indicates that the first bridge node of the next hop, i.e., the resource node 2, can be determined from the resource nodes according to the node routing information table on the resource node 1. D in the resource nodes 2 to 4 represents that according to the forwarding information table on the first bridge node, the first forwarding next hop port corresponding to the target node end is queried, after the target node end is found, the path from the source node end to the first bridge node is determined, and then the path from the source node end to the target node end is determined through the first forwarding next hop port, and the path can be determined as the detected network transmission path, and the path detection mode is ended.

In the detection paths from the resource node 1 to the resource node 2 to the resource node 3 to the resource node 4, a in the resource node 1 to the resource node 2 represents a second bridge node capable of determining the next hop from the resource nodes according to a node route information table on the resource node 1, b in the resource node 2 to the resource node 3 represents network card information capable of determining network transmission according to a route information table of a naming space on the second bridge node, a gateway node is obtained, c in the resource node 3 to the resource node 1 represents a second forwarding port and a target node name corresponding to the second bridge node capable of being queried according to the next hop forwarding information table on the gateway node, and the target node name is different from the target node; e in the resource nodes 3 to 4 refers to inquiring a second forwarding port corresponding to the second bridge node and a destination node name according to a next hop forwarding information table on the gateway node, and refers to that the destination node name is the same as the destination node, after finding the destination node, determining a path from the source node to the second bridge node to the gateway node, and then determining the path as a detected network transmission path through the second forwarding port to the destination node, and ending a path detection mode.

Fig. 6 is a schematic effect diagram of task status implementation in a path detection method for an overlay network according to an embodiment of the present invention.

It should be noted that, first, by assigning a task unique identifier to a received probe task, as shown in fig. 6, a task state may be initially marked as a state to be verified. And if the task to be verified passes the verification, updating the task state of the task to be verified to be the state to be executed, otherwise, updating the task state of the task to be verified to be the ending state. If the task to be executed is executing, the task state of the task to be executed is updated to the executing state, if the task to be executed is already participating in the execution and the task to be executed is updated to the suspending state, of course, if the task in the suspending state is executing, the task state of the suspending task to be executed is updated to the executing state; and when the executing task is completed, updating the task state of the completed task to be executed to an end state.

Example III

Fig. 7 is a schematic structural diagram of a computer device according to a third embodiment of the present invention. FIG. 7 illustrates a block diagram of a computer device 712 suitable for use in implementing embodiments of the present invention. The computer device 712 shown in fig. 7 is merely an example and should not be construed as limiting the functionality and scope of use of embodiments of the present invention. Device 712 is a typical computing device for path probing functions of an overlay network.

As shown in FIG. 7, computer device 712 is in the form of a general purpose computing device. Components of computer device 712 may include, but are not limited to: one or more processors 716, a memory 728, and a bus 718 that connects the different system components (including the memory 728 and the processor 716).

Bus 718 represents one or more of several types of bus structures, including a memory bus or memory controller, a peripheral bus, an accelerated graphics port, a processor, or a local bus using any of a variety of bus architectures. By way of example, and not limitation, such architectures include industry standard architecture (Industry Standard Architecture, ISA) bus, micro channel architecture (Micro Channel Architecture, MCA) bus, enhanced ISA bus, video electronics standards association (Video Electronics Standards Association, VESA) local bus, and peripheral component interconnect (Peripheral Component Interconnect, PCI) bus.

Computer device 712 typically includes a variety of computer system readable media. Such media can be any available media that is accessible by computer device 712 and includes both volatile and nonvolatile media, removable and non-removable media.

Memory 728 may include computer system readable media in the form of volatile memory, such as random access memory (Random Access Memory, RAM) 730 and/or cache memory 732. The computer device 712 may further include other removable/non-removable, volatile/nonvolatile computer system storage media. By way of example only, the storage system 734 may be used to read from and write to non-removable, nonvolatile magnetic media (not shown in FIG. 7, commonly referred to as a "hard disk drive"). Although not shown in fig. 7, a disk drive for reading from and writing to a removable nonvolatile magnetic disk (e.g., a "floppy disk"), and an optical disk drive for reading from and writing to a removable nonvolatile optical disk (e.g., a Compact Disc-Read Only Memory (CD-ROM), digital versatile Disc (Digital Video Disc-Read Only Memory, DVD-ROM), or other optical media) may be provided. In such cases, each drive may be coupled to bus 718 through one or more data media interfaces. Memory 728 may include at least one program product having a set (e.g., at least one) of program modules configured to carry out the functions of the embodiments of the invention.

Programs 736 having a set (at least one) of program modules 726 may be stored in, for example, storage 728, such program modules 726 including, but not limited to, an operating system, one or more application programs, other program modules, and program data, each or some combination of which may include an implementation of a network environment. Program modules 726 generally perform the functions and/or methodologies of the described embodiments of the invention.

The computer device 712 can also communicate with one or more external devices 714 (e.g., keyboard, pointing device, camera, display 724, etc.), one or more devices that enable a user to interact with the computer device 712, and/or any devices (e.g., network card, modem, etc.) that enable the computer device 712 to communicate with one or more other computing devices. Such communication may occur through an input/output (I/O) interface 722. Moreover, computer device 712 may also communicate with one or more networks such as a local area network (LocalAreaNetwork, LAN), a wide area network WideAreaNetwork, WAN), and/or a public network such as the internet via network adapter 720. As shown, the network adapter 720 communicates with other modules of the computer device 712 via the bus 718. It should be appreciated that although not shown, other hardware and/or software modules may be used in connection with computer device 712, including, but not limited to: microcode, device drivers, redundant processing units, external disk drive arrays, disk array (Redundant Arrays of Independent Disks, RAID) systems, tape drives, data backup storage systems, and the like.

The processor 716 executes various functional applications and data processing by running a program stored in the memory 728, for example, to implement the path probing method for an overlay network provided by the above-described embodiment of the present invention.

Example IV

A fourth embodiment of the present invention provides a computer-readable storage medium having stored thereon a computer program that, when executed by a processing device, implements a path detection method for an overlay network as in the embodiment of the present invention. The computer readable medium of the present invention described above may be a computer readable signal medium or a computer readable storage medium or any combination of the two. The computer readable storage medium can be, for example, but not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or a combination of any of the foregoing. More specific examples of the computer-readable storage medium may include, but are not limited to: an electrical connection having one or more wires, a portable computer diskette, a hard disk, a Random Access Memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing. In the context of this disclosure, a computer-readable storage medium may be any tangible medium that can contain, or store a program for use by or in connection with an instruction execution system, apparatus, or device. In the present disclosure, however, the computer-readable signal medium may include a data signal propagated in baseband or as part of a carrier wave, with the computer-readable program code embodied therein. Such a propagated data signal may take any of a variety of forms, including, but not limited to, electro-magnetic, optical, or any suitable combination of the foregoing. A computer readable signal medium may also be any computer readable medium that is not a computer readable storage medium and that can communicate, propagate, or transport a program for use by or in connection with an instruction execution system, apparatus, or device. Program code embodied on a computer readable medium may be transmitted using any appropriate medium, including but not limited to: electrical wires, fiber optic cables, RF (radio frequency), and the like, or any suitable combination of the foregoing.

In some implementations, the clients, servers may communicate using any currently known or future developed network protocol, such as HTTP (HyperText Transfer Protocol ), and may be interconnected with any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include a local area network ("LAN"), a wide area network ("WAN"), the internet (e.g., the internet), and peer-to-peer networks (e.g., ad hoc peer-to-peer networks), as well as any currently known or future developed networks.

The computer readable medium may be embodied in the computer device; or may exist alone without being assembled into the computer device.

The computer readable medium carries one or more programs which, when executed by the computer device, cause the computer device to: the path detection module is in communication connection with each resource node on the cloud platform;

and the path detection module combines the set path-finding strategy according to the address information of the source and destination ends extracted from the current task to be executed, and selects a target node from all the resource nodes to form a detected network transmission path.

Computer program code for carrying out operations of the present disclosure may be written in one or more programming languages, including, but not limited to, an object oriented programming language such as Java, smalltalk, C ++ and conventional procedural programming languages, such as the "C" programming language or similar programming languages. The program code may execute entirely on the user's computer, partly on the user's computer, as a stand-alone software package, partly on the user's computer and partly on a remote computer or entirely on the remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer through any kind of network, including a Local Area Network (LAN) or a Wide Area Network (WAN), or may be connected to an external computer (for example, through the Internet using an Internet service provider).

The flowcharts and block diagrams in the figures illustrate the architecture, functionality, and operation of possible implementations of systems, methods and computer program products according to various embodiments of the present disclosure. In this regard, each block in the flowchart or block diagrams may represent a module, segment, or portion of code, which comprises one or more executable instructions for implementing the specified logical function(s). It should also be noted that, in some alternative implementations, the functions noted in the block may occur out of the order noted in the figures. For example, two blocks shown in succession may, in fact, be executed substantially concurrently, or the blocks may sometimes be executed in the reverse order, depending upon the functionality involved. It will also be noted that each block of the block diagrams and/or flowchart illustration, and combinations of blocks in the block diagrams and/or flowchart illustration, can be implemented by special purpose hardware-based systems which perform the specified functions or acts, or combinations of special purpose hardware and computer instructions.

The units involved in the embodiments of the present disclosure may be implemented by means of software, or may be implemented by means of hardware. Wherein the names of the units do not constitute a limitation of the units themselves in some cases.

The functions described above herein may be performed, at least in part, by one or more hardware logic components. For example, without limitation, exemplary types of hardware logic components that may be used include: a Field Programmable Gate Array (FPGA), an Application Specific Integrated Circuit (ASIC), an Application Specific Standard Product (ASSP), a system on a chip (SOC), a Complex Programmable Logic Device (CPLD), and the like.

In the context of this disclosure, a machine-readable medium may be a tangible medium that can contain, or store a program for use by or in connection with an instruction execution system, apparatus, or device. The machine-readable medium may be a machine-readable signal medium or a machine-readable storage medium. The machine-readable medium may include, but is not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any suitable combination of the foregoing. More specific examples of a machine-readable storage medium would include an electrical connection based on one or more wires, a portable computer diskette, a hard disk, a Random Access Memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

Note that the above is only a preferred embodiment of the present invention and the technical principle applied. It will be understood by those skilled in the art that the present invention is not limited to the particular embodiments described herein, but is capable of various obvious changes, rearrangements and substitutions as will now become apparent to those skilled in the art without departing from the scope of the invention. Therefore, while the invention has been described in connection with the above embodiments, the invention is not limited to the embodiments, but may be embodied in many other equivalent forms without departing from the spirit or scope of the invention, which is set forth in the following claims.

Claims

1. A path exploration system for an overlay network, the overlay network being formed by virtual network erection of resource nodes in a cloud platform, the system comprising: the path-detecting module is configured to detect the path,

the path detection module establishes communication connection with each resource node on the cloud platform, and is used for selecting a target node from the resource nodes to form a detected network transmission path according to source-destination address information extracted from a current task to be executed and a set path searching strategy;

Wherein, the route detection module includes:

the information acquisition unit is used for analyzing the received current task to be executed through a network resource information table acquired in advance to acquire source-destination address information of a path to be detected, and determining a source node end and a destination node end of the path to be detected from the resource nodes based on the source-destination address information;

the first searching unit is used for selecting a target node from the resource nodes according to a first path searching strategy to form a detected network transmission path when the path judgment carried out by the source node end and the target node end meets a first path searching condition;

the first searching unit is specifically configured to:

when the source node end and the destination node end are judged to be in the same private virtual network VPC and in the same gateway, or when the source node end and the destination node end are in different private virtual networks VPC and the source-destination IP addresses are not overlapped and are in the same gateway, determining that the performed path judgment meets a first path finding condition;

the source node end is used as a starting resource node of a network transmission path, and a first bridge node of a next hop is determined from the resource nodes according to a node routing information table on the starting resource node;

Inquiring a first forwarding next hop port corresponding to a target node according to the forwarding information table on the first bridge node;

and determining a path formed by the source node, the first bridge node, the first forwarding next-hop port and the destination node as a detected network transmission path.

2. The system of claim 1, wherein the path detection module comprises:

and the second searching unit is used for selecting a target node from the resource nodes according to a second path searching strategy to form a detected network transmission path when the path judgment based on the source-destination address information meets a second path searching condition.

3. The system according to claim 2, wherein the second search unit is specifically configured to:

when the source node end and the destination node end are judged to be in different VPCs, the source IP address and the destination IP address are not overlapped and are in different gateways, or the source node end and the destination node end are in the same private virtual network VPC and are in different gateways, determining that the performed path judgment meets a second path finding condition;

the source node end is used as a starting resource node of a network transmission path, and a second bridge node of the next hop is determined from the resource nodes according to a node routing information table on the starting resource node;

Determining network card information transmitted by a network according to a routing information table of the name space on the second network bridge node to obtain a gateway node;

inquiring a second forwarding port corresponding to the second bridge node and a destination node name according to a next hop forwarding information table on the gateway node;

if the destination node name is different from the destination node end, returning to the determining operation of the second network bridge node; otherwise the first set of parameters is selected,

and determining a path formed by the source node end, the second bridge node, the gateway node, the second forwarding port and the destination node end as a detected network transmission path.

4. The system of claim 1, wherein the path detection module further comprises:

and the path information feedback unit is used for feeding back the determined network transmission path to the user side initiating the path detection task.

5. The system of any one of claims 1-4, further comprising: the system comprises a user interface module, a task control module and an information verification module;

the user interface module is connected with the task control module and is used for receiving detection tasks submitted by at least one user in the interactive interface and uploading the detection tasks to the task control module;

The task control module is connected with the third-party database and is used for distributing task unique identifiers for the received detection tasks to form a list to be verified; the method is also used for determining the task state of each detection task in real time through monitoring each detection task and updating the task state in a database;

the information verification module is connected with the task control module and the node management end on the cloud platform, and is used for carrying out input verification on a current task to be verified based on a network resource information table obtained from the node management end, and adding the current task to be verified to a list to be executed as the task to be executed when the current task passes the verification, wherein the current task to be verified is taken out from the list to be verified.

6. The system according to claim 5, wherein the task control module is specifically configured to:

assigning a task unique identifier to the initially received detection task, adding the task unique identifier to a list to be verified, and initially marking a task state as a state to be verified;

monitoring the execution of the information verification module, updating the task state of the task to be verified, which is verified through input verification, into a state to be executed, and deleting the task state from a list to be verified; updating the task state of the task to be verified which does not pass the input verification into an end state, and deleting the task state from the list to be verified;

Monitoring the execution of the path detection module, and updating the task state of the executing task to be executed into an execution state; updating the task state of the task to be executed which is participated in executing and suspending to a suspending state; updating the task state of the executed task to be executed to an end state, and deleting the task state from the list to be executed;

and updating the task state determined relative to each detection task in the monitoring process into a task state table of the database in real time, wherein the task state table comprises a unique identification of the detection task and a task state.

7. A path probing method for an overlay network, wherein the overlay network is formed by virtual network erection of resource nodes in a cloud platform, and the method is performed by the system of any one of claims 1-6, and comprises:

8. A computer device, the computer device comprising:

One or more processors;

storage means for storing one or more programs,

the one or more programs, when executed by the one or more processors, cause the one or more processors to implement the path detection method for an overlay network as recited in claim 7.

9. A computer-readable storage medium, on which a computer program is stored, characterized in that the program, when being executed by a processor, implements a path probing method for an overlay network as claimed in claim 7.