CN114765589A - Network testing method, device and storage medium - Google Patents

Abstract

The embodiment of the application discloses a network testing method, a network testing device and a storage medium, and belongs to the technical field of networks. In this embodiment of the present application, a test response message that responds to a test request message sent by a second gateway device carries forwarding indication information, and after receiving the test response message, a first gateway device continues to forward the test response message under the instruction of the forwarding indication information even if a destination IP address of the test response message is the same as a gateway IP address of the first gateway device. Therefore, the test response message will not be terminated on the gateway device with the same gateway address as the second gateway device, so that the second gateway device can receive the test response message, and a network test result can be successfully obtained according to the test response message. Therefore, the method provided by the embodiment of the application can meet the network test requirement of the distributed VXLAN gateway.

Description

Network testing method, device and storage medium

Technical Field

The present disclosure relates to the field of network technologies, and in particular, to a network testing method, device and storage medium.

Background

In a virtual extensible local area network (VXLAN), gateways may be classified into a centralized VXLAN gateway and a distributed VXLAN gateway according to different deployment modes. The distributed VXLAN gateway refers to that, under a typical spine-leaf networking structure, leaf nodes are used as end points of a VXLAN tunnel, and each leaf node can be used as a VXLAN gateway. Thus, different leaf nodes may have the same gateway Internet Protocol (IP) address.

For two leaf nodes with the same gateway IP address, when a first leaf node needs to test a network between Virtual Machines (VMs) connected from the first leaf node to a second leaf node, the first leaf node sends a test request message such as a ping request message or a tracert request message to the second leaf node. The source IP address carried in the test request message is a gateway IP address of the first leaf node, and the destination IP address is an IP address of a VM connected to the second leaf node. After receiving the test request message, the second leaf node forwards the test request message to the VM connected to the second leaf node according to the destination IP address. After receiving the test request message, the VM returns a test response message to the second leaf node, where the destination IP address of the test response message is the gateway IP address of the first leaf node. However, since the gateway IP addresses of the second leaf node and the first leaf node are the same, after receiving the test response packet, the second leaf node considers itself to be the end point of the test response packet, and stops forwarding the test response packet. Thus, the first leaf node cannot receive the test response message, thereby causing network test failure.

Disclosure of Invention

The embodiment of the application provides a network testing method, a network testing device and a storage medium, which can solve the problem of network testing failure in a distributed VXLAN gateway scene. The technical scheme is as follows:

in a first aspect, a network testing method is provided, where the method includes: the method comprises the steps that a first gateway device receives a test response message, wherein the test response message is a message for responding to a test request message sent by a second gateway device, the target Internet Protocol (IP) address of the test response message is the gateway IP address of the second gateway device, and the test response message carries forwarding indication information; and when the destination IP address of the test response message is the same as the gateway IP address of the first gateway device, the first gateway device forwards the test response message to the second gateway device under the instruction of the forwarding instruction information, so that the second gateway device determines a network test result according to the test response message.

In this embodiment of the present application, a test response message that responds to a test request message sent by a second gateway device carries forwarding indication information, and after receiving the test response message, a first gateway device continues to forward the test response message under the indication of the forwarding indication information even if a destination IP address of the test response message is the same as a gateway IP address of the first gateway device. Therefore, the test response message will not be terminated on the gateway device with the same gateway address as the second gateway device, so that the second gateway device can receive the test response message, and a network test result can be successfully obtained according to the test response message. Therefore, the method provided by the embodiment of the application can meet the network test requirement in the scene of the distributed VXLAN gateway.

Optionally, the method further comprises: the first gateway device receives the test request message sent by the second gateway device through a VXLAN tunnel, where the test request message is a ping request message, and the ping request message carries the forwarding indication information, a network virtual interface (NVE) IP address of the second gateway device, an IP address of a destination host, and a virtual extensible local area network identifier (VXLAN network identifier, VNI) corresponding to the destination host; and the first gateway equipment sends the test request message to the target host according to the IP address of the target host.

The ping request message may be used to detect whether the destination host is reachable, that is, whether a transmission path from the second gateway device to the destination host fails by sending the ping request message through the second gateway device.

In addition, in the embodiment of the application, an extension field is added to the payload data of the ping request message to carry the forwarding indication information, the NVE IP address of the second gateway device, and the VNI of the destination host. Therefore, subsequently, when the target host generates the test response message, the contents are carried in the test response message and fed back to the first gateway device. Thus, the first gateway device can perform VXLAN encapsulation on the test response packet according to the NVE IP address of the second gateway device and the VNI of the destination host under the instruction of the forwarding instruction information, and further forward the encapsulated packet to the second gateway device.

Optionally, the test response packet carries the NVE IP address of the second gateway device and the VNI corresponding to the destination host.

Optionally, forwarding, by the first gateway device, the test response packet to the second gateway device under the instruction of the forwarding instruction information, where the forwarding instruction information includes: the first gateway device performs VXLAN packaging on the test response message according to the NVE IP address of the second gateway device and the VNI corresponding to the target host under the indication of the forwarding indication information to obtain a VXLAN message; and the first gateway equipment sends the VXLAN message to the second gateway equipment.

Optionally, the method further comprises: the first gateway equipment receives the test request message sent by the second gateway equipment through a VXLAN tunnel, the test request message is a tracert request message, the source port number of a user data packet protocol (UDP) of the tracert request message is a first port number, the destination port number of the UDP is a second port number, and the tracert request message carries a Time To Live (TTL) value and an IP address of a destination host; and when the difference between the TTL and the TTL is not 0, the first gateway equipment sends the test request message to the target host according to the IP address of the target host.

The tracert request message may be used to detect whether the destination host is reachable, and may also be used to detect whether each node on a transmission path from the second gateway device to the destination host fails, so as to locate a failed node.

Optionally, the forwarding indication information is a UDP source port number of the tracert request packet; the forwarding, by the first gateway device, the test response packet to the second gateway device under the instruction of the forwarding instruction information includes: and the first gateway device broadcasts the test response message in a specified broadcast domain under the indication of the forwarding indication information, wherein the specified broadcast domain refers to the broadcast domain in which the first gateway device and the second gateway device are located.

In addition, in a tracert test scenario, in this embodiment, a UDP source port number included in a UDP header in a tracert request message may be set as a first port number, which is used as the forwarding indication information. Subsequently, the test response message fed back to the first gateway device by the destination host carries the UDP header, so that even if the destination IP addresses of the first gateway device and the test response message are the same, the test response message can be continuously forwarded under the instruction of the forwarding instruction information.

It should be noted that, in order to prevent the other gateway devices in the specified broadcast domain from broadcasting the test response message again after the first gateway device broadcasts the test response message in the specified broadcast domain, before the first gateway device broadcasts the test response message, the first gateway device may modify the forwarding indication information in the test response message into other values.

In a second aspect, a network test apparatus is provided, where the network test apparatus has a function of implementing the behavior of the network test method in the first aspect. The network testing device comprises at least one module, and the at least one module is used for realizing the network testing method provided by the first aspect.

In a third aspect, a network device is provided, where the structure of the network device includes a processor and a memory, where the memory is used to store a program that supports the network device to execute the network testing method provided in the first aspect, and store data used to implement the network testing method provided in the first aspect. The processor is configured to execute programs stored in the memory. The network device may further comprise a communication bus for establishing a connection between the processor and the memory.

In a fourth aspect, there is provided a computer readable storage medium having stored therein instructions, which when run on a computer, cause the computer to perform the network testing method of the first aspect described above.

In a fifth aspect, there is provided a computer program product containing instructions which, when run on a computer, cause the computer to perform the network testing method of the first aspect described above.

The technical effects obtained by the above second, third, fourth and fifth aspects are similar to the technical effects obtained by the corresponding technical means in the first aspect, and are not described herein again.

The beneficial effects brought by the technical scheme provided by the embodiment of the application at least comprise:

in this embodiment of the present application, a test response message that responds to a test request message sent by a second gateway device carries forwarding indication information, and after receiving the test response message, a first gateway device continues to forward the test response message under the instruction of the forwarding indication information even if a destination IP address of the test response message is the same as a gateway IP address of the first gateway device. In this way, the test response packet will not terminate on the gateway device with the same gateway address as the second gateway device, so that the second gateway device can receive the test response packet, thereby successfully obtaining the network test result according to the test response packet. Therefore, the method provided by the embodiment of the application can meet the network test requirement of the distributed VXLAN gateway.

Drawings

Fig. 1 is a system architecture diagram of VXLAN provided in an embodiment of the present application;

fig. 2 is a schematic structural diagram of a network device according to an embodiment of the present application;

fig. 3 is a flowchart of a network testing method provided in an embodiment of the present application;

fig. 4 is a schematic diagram of a message format of a ping request message according to an embodiment of the present application;

fig. 5 is a flowchart of a network testing method in a ping testing scenario according to an embodiment of the present application;

fig. 6 is a flowchart of a network testing method in a tracert testing scenario according to an embodiment of the present application;

fig. 7 is a schematic structural diagram of a network test apparatus according to an embodiment of the present application.

Detailed Description

To make the objects, technical solutions and advantages of the embodiments of the present application more clear, the embodiments of the present application will be further described in detail with reference to the accompanying drawings.

Before explaining the embodiments of the present application in detail, a system architecture related to the embodiments of the present application will be described.

Fig. 1 is a system architecture diagram of a VXLAN according to a network testing method provided in an embodiment of the present application. As shown in fig. 1, the system includes a first leaf node 101, a second leaf node 102, a spine node 103, a first VM104, and a second VM 105. A communication connection is established between the first leaf node 101 and the first VM104, a connection is established between the second leaf node 102 and the second VM105, and a VXLAN tunnel is established between the first leaf node 101 and the second leaf node 102 through the spine node 103. It should be noted that the first leaf node 101 and the second leaf node 102 are both VXLAN gateways, and the gateway IP addresses of the first leaf node 101 and the second leaf node 102 may be the same or different, which is not limited in this embodiment of the present application.

In this embodiment, when the second VM105 wants to send a data packet to the first VM104, the second VM105 first sends the data packet to the second leaf node 102. After receiving the data message sent by the second VM105, the second leaf node 102 performs VXLAN encapsulation on the data message, thereby obtaining a VXLAN message. Then, the second leaf node 102 sends the VXLAN message to the first leaf node 101 through the VXLAN tunnel with the first leaf node 101 via the spine node 103. After receiving the VXLAN message, the first leaf node 101 removes VXLAN encapsulation to obtain a data message, and then sends the data message to the first VM 104.

In some scenarios, the second leaf node 102 may need to test whether the first VM104 fails, or the second leaf node 102 may need to test whether each node on a transmission path from itself to the first VM104 fails and whether the first VM104 fails, in which case, the second leaf node 102 may send a test request packet to the first leaf node 101 through the VXLAN tunnel, where the test request packet carries forwarding indication information. After receiving the test request packet, the first leaf node 101 forwards the test request packet to the first VM 104. After receiving the test request message, the first VM104 feeds back a test response message to the first leaf node 101, where the test response message carries forwarding indication information carried in the test request message. After receiving the test response packet, the first leaf node 101 may forward the test response packet to the second leaf node 102 according to the forwarding indication information carried in the test response packet by using the network test method provided in the embodiment of the present application. Thus, the second leaf node 102 can obtain the network test result through the test response message.

It should be noted that the first leaf node 101 and the second leaf node 102 are both switches supporting the distributed VXLAN characteristic, the spine node 103 is an intermediate forwarding device having a forwarding function, such as a router and a switch, and the first VM104 and the second VM105 are both servers.

It should be noted that the above system architecture only uses two VXLAN gateways as an example, but does not limit the number of VXLAN gateways. In some possible cases, other VXLAN gateways may be included in the system architecture, such as the third leaf node 106 and the fourth leaf node 107, where the gateway IP addresses of the third leaf node 106 and the fourth leaf node 107 may be the same as or different from the gateway IP address of the second leaf node.

Fig. 2 is a schematic structural diagram of a network device according to an embodiment of the present application. Each leaf node in the system architecture shown in fig. 1 may be implemented by the network device shown in fig. 2. Referring to fig. 2, the network device includes one or more processors 201, a communication bus 202, a memory 203, and one or more communication interfaces 204.

The processor 201 may be a general-purpose Central Processing Unit (CPU), a Network Processor (NP), a microprocessor, or one or more integrated circuits such as an application-specific integrated circuit (ASIC), a Programmable Logic Device (PLD), or a combination thereof for implementing the disclosed aspects. The PLD may be a Complex Programmable Logic Device (CPLD), a field-programmable gate array (FPGA), a General Array Logic (GAL), or any combination thereof.

A communication bus 202 is used to transfer information between the above components. The communication bus 202 may be divided into an address bus, a data bus, a control bus, etc. For ease of illustration, only one thick line is shown, but this does not mean that there is only one bus or one type of bus.

The memory 203 may be, but is not limited to, a read-only memory (ROM), a Random Access Memory (RAM), an electrically erasable programmable read-only memory (EEPROM), an optical disk (including a compact disk-read-only memory (CD-ROM), a compact disk, a laser disk, a digital versatile disk, a blu-ray disk, etc.), a magnetic disk storage medium or other magnetic storage device, or any other medium that can be used to carry or store desired program code in the form of instructions or data structures and that can be accessed by a computer. The memory 203 may be self-contained and coupled to the processor 201 through the communication bus 202. The memory 203 may also be integrated with the processor 201.

The communication interface 204 uses any transceiver or the like for communicating with other devices or communication networks. The communication interface 204 includes a wired communication interface, and may also include a wireless communication interface. The wired communication interface may be an ethernet interface, for example. The ethernet interface may be an optical interface, an electrical interface, or a combination thereof. The wireless communication interface may be a Wireless Local Area Network (WLAN) interface, a cellular network communication interface, or a combination thereof.

In some embodiments, the network device may include multiple processors, such as processor 201 and processor 205 shown in fig. 3. Each of these processors may be a single core processor or a multi-core processor. A processor herein may refer to one or more devices, circuits, and/or processing cores that process data, such as computer program instructions.

In one embodiment, the network device may further include an output device 206 and an input device 207. The output device 206 is in communication with the processor 201 and may display information in a variety of ways. For example, the output device 206 may be a Liquid Crystal Display (LCD), a Light Emitting Diode (LED) display device, a Cathode Ray Tube (CRT) display device, a projector (projector), or the like. The input device 207 is in communication with the processor 201 and may receive user input in a variety of ways. For example, the input device 207 may be a mouse, a keyboard, a touch screen device, or a sensing device, among others.

In some embodiments, the memory 203 is used to store program code 208 for performing aspects of the present application, and the processor 201 may execute the program code 208 stored in the memory 203. The program code may include one or more software modules, and the network device may implement the network testing method provided in the embodiment of fig. 3 below through the processor 201 and the program code 208 in the memory 203.

Next, a network testing method provided in the embodiment of the present application is described.

Fig. 3 is a flowchart of a network testing method according to an embodiment of the present application. The method may be applied to a first gateway device, where the first gateway device may be implemented by the first leaf node 101 of the system architecture shown in fig. 1, and the method includes the following steps:

step 301: the first gateway device receives a test response message, wherein the test response message is a message for responding to a test request message sent by the second gateway device, the destination IP address of the test response message is the gateway IP address of the second gateway device, and the test response message carries forwarding indication information.

In this embodiment, the first gateway device is a VXLAN gateway device to which a destination host is connected, and the destination host is a VM in the system architecture shown in fig. 1. When the second gateway device needs to perform fault testing or fault positioning on a path from the second gateway device to a target host, the second gateway device generates a test request message and sends the test request message to the first gateway device through a VXLAN tunnel between the second gateway device and the first gateway device, and the first gateway device sends the test request message to the target host after receiving the test request message.

In a possible implementation manner, the test request message generated by the second gateway device is a ping request message. In this case, the source IP address of the test request packet is the gateway IP address of the second gateway device, the destination IP address is the IP address of the destination host, and the payload (payload) data of the test request packet includes an extension field, where the extension field carries forwarding indication information, the NVE IP address of the second gateway device, and the VNI corresponding to the destination host.

Fig. 4 is a schematic message format diagram of a ping request message according to an embodiment of the present application. As shown in fig. 4, the message includes an IP header of 20 bytes, an Internet Control Message Protocol (ICMP) header of 8 bytes, and a padding (padding) portion greater than 20 bytes. In addition, between the ICMP header and padding, the message may also include a 12-byte extension field. The first 5 bytes in the extension field are a relay tag field, and are used to carry forwarding indication information, where the forwarding indication information may be an ASCII code of VXLAN: 0x56584C414E may be configured to have other values, which is not limited in the embodiments of the present application. The 3 bytes after the relay tag field may be a field for carrying a VNI corresponding to the destination host, and the last 4 bytes are for carrying an NVE IP address of the second gateway device.

When sending the test request message to the first gateway device, the second gateway device may perform VXLAN encapsulation on the test request message to obtain a first VXLAN message including the test request message. And then, the second gateway equipment sends the first VXLAN message to the first gateway equipment through a VXLAN tunnel between the second gateway equipment and the first gateway equipment.

And after receiving the first VXLAN message through the VXLAN tunnel, the first gateway device removes the VXLAN encapsulation of the first VXLAN message, thereby obtaining a test request message. Then, the first gateway device obtains an MAC address and an outgoing interface corresponding to the destination IP address from a stored Address Resolution Protocol (ARP) table according to the destination IP address of the test request packet, and then performs two-layer encapsulation on the test request packet according to the obtained MAC address, and forwards the encapsulated test request packet to the destination host through the outgoing interface.

After receiving the test request message, the destination host generates a test response message according to the payload data of the test request message, where the payload data of the test response message includes the payload data of the test request message, that is, the payload data of the test response message includes the extension field in the test request message. In addition, the source IP address of the test response packet is the IP address of the destination host, and the destination IP address is the gateway IP address of the second gateway device.

After generating the test response message, the destination host sends the test response message to the first gateway device. Accordingly, the first gateway device receives the test response message.

Optionally, in another possible implementation manner, the test request message generated by the second gateway device is a tracert request message. In this case, the test request message is a User Datagram Protocol (UDP) message. The source IP address in the IP header of the test request packet is the gateway IP address of the second gateway device, the destination IP address is the IP address of the destination host, and the IP header of the tracert request packet carries a Time To Live (TTL). In the process of one-time testing, for the first tracert request message to be sent, the TTL in the message is 1, and each time a tracert request message is sent subsequently, the TTL value in the message is incremented by 1. In addition, the UDP source port number in the UDP header of the test request packet is the first port number, and the UDP destination port number is the second port number.

It should be noted that, in this embodiment of the application, the first port number in the UDP header may be a preset port number, and is used as forwarding indication information in a subsequent test response message for the test request message, so as to indicate that the gateway device that receives the test response message forwards the test response message. The first port number may be 0x5658, but may be configured to other values, which is not limited in this embodiment of the present application. In addition, in general, in the embodiment of the present application, the second port number may be any value between 30000 and 65535, which is not limited in the embodiment of the present application.

And after generating the tracert request message, the second gateway device sends the tracert request message to the first gateway device through a VXLAN tunnel between the second gateway device and the first gateway device. Exemplarily, the second gateway device performs VXLAN encapsulation on the tracert request message to obtain a second VXLAN message. Wherein, the source IP address in the encapsulated outer VXLAN header is the NVE IP address of the second gateway device, and the destination IP address in the VXLAN header is the NVE IP address of the first gateway device.

After the second VXLAN message is obtained by encapsulation, the second gateway device composes a session identifier corresponding to the tracert test from the second port number and the destination IP address in the IP header of the test request message, that is, the IP address of the destination host, and stores the session identifier. And then, the second gateway equipment sends the second VXLAN message to the first gateway equipment through a VXLAN tunnel between the second gateway equipment and the first gateway equipment.

And after the first gateway equipment receives the second VXLAN message sent by the second gateway equipment through the VXLAN tunnel, removing VXLAN encapsulation of the second VXLAN message to obtain the test request message. And then, the first gateway equipment acquires the TTL value in the IP header of the test request message and calculates the difference value between the TTL value and 1. When the difference between TTL and 1 is not 0, the first gateway device obtains the MAC address and the outgoing interface corresponding to the target IP address from the stored ARP table according to the target IP address of the test request packet, that is, the IP address of the target host, and then the first gateway device performs two-layer encapsulation on the test request packet according to the obtained MAC address and forwards the encapsulated test request packet to the target host through the outgoing interface.

After receiving the test request message forwarded by the first gateway device, the destination host determines that the UDP destination port number is an unreachable port number according to the UDP destination port number in the UDP header of the test request message, and at this time, the destination host generates a test response message according to the UDP header for notifying the second gateway device that the test request message has arrived at the destination host. The test response message includes the UDP header of the test request message, that is, includes a first port number and a second port number, where the first port number is the forwarding indication information. And the source IP address of the test response message is the IP address of the destination host, and the destination IP address is the gateway IP address of the second gateway device.

After generating the test response message, the destination host sends the test response message to the first gateway device. Accordingly, the first gateway device receives the test response message.

Optionally, in some possible cases, when the difference between TTL and 1 is 0, the first gateway device terminates forwarding the test request packet, in which case, the first gateway device generates a timeout response packet and feeds back the timeout response packet to the second gateway device through the VXLAN tunnel with the second gateway device. The source IP address of the overtime response message is the gateway IP address of the first gateway device, and the destination IP address is the gateway IP address of the second gateway device. In this way, the second gateway device can obtain the IP address of the first gateway device after receiving the timeout response message.

Step 302: when the destination IP address of the test response message is the same as the gateway IP address of the first gateway device, the first gateway device forwards the test response message to the second gateway device under the instruction of the forwarding instruction information, so that the second gateway device determines a network test result according to the test response message.

After receiving the test response message from the destination host, the first gateway device first obtains the destination IP address in the test response message. If the destination IP address is the same as the gateway IP address of the first gateway device, the first gateway device forwards the test response packet to the second gateway device under the instruction of the forwarding instruction information because the test response packet also carries the forwarding instruction information, without terminating the forwarding of the test response packet.

As can be seen from the introduction in step 301, the test response packet in the embodiment of the present application may have different implementation manners, and accordingly, the first gateway device has different implementation manners for forwarding the test response packet under the instruction of the forwarding instruction information.

When the test response packet is a response packet for the ping request packet, as can be seen from the introduction in step 301, the test response packet carries an extension field, and the extension field carries forwarding indication information, an NVE IP address of the second gateway device, and a VNI of the destination host. Based on this, in this step, the first gateway device determines that the test response packet needs to be continuously forwarded according to the forwarding indication information carried in the extension field when determining that the destination IP address of the test response packet is the same as the gateway IP address of the first gateway device. In this case, the first gateway device obtains the NVE IP address of the second gateway device and the VNI of the destination host carried in the extension field, then performs VXLAN encapsulation on the test response packet according to the NVE IP address and the VNI of the destination host to obtain a third VXLAN packet, and then forwards the third VXLAN packet to the second gateway device through a VXLAN tunnel with the second gateway device. Therefore, after the second gateway device receives the test response message, the test response message can be displayed, and the test function is realized.

Optionally, when the test response packet is a response packet for a tracert request packet, as can be seen from the introduction in the foregoing step 301, the test response packet includes a UDP header in the test request packet, that is, includes a first port number and a second port number, where the first port number is forwarding indication information for indicating that the test response packet is to be forwarded continuously. Based on this, in this step, the first gateway device determines that the test response packet needs to be continuously forwarded under the instruction of the forwarding instruction information carried in the test response packet when determining that the destination IP address of the test response packet is the same as the gateway IP address of the first gateway device, so as to broadcast the test response packet in an assigned broadcast domain, where the assigned broadcast domain is a broadcast domain where the first gateway device and the second gateway device are located.

It should be noted that, in order to prevent the gateway device in the specified broadcast domain from continuing to broadcast according to the forwarding indication information in the test response message after receiving the test response message, the first gateway device may modify the forwarding indication information, that is, the first port number, carried in the test response message to another value before broadcasting the test response message in the specified broadcast domain. For example, the first port number is 0x5658, which the first gateway device may modify to 0x 5659. And then, the first gateway equipment broadcasts the test response message in the appointed broadcast domain.

In addition, it should be noted that, after the first gateway device broadcasts the test response packet in the designated broadcast domain, since the designated broadcast domain is the broadcast domain in which the first gateway device and the second gateway device are located, the second gateway device will receive the test response packet. After receiving the test response message, the second gateway device modifies the forwarding indication information in the test response message to other values, so that although the destination IP address of the test response message is the same as its own IP address, the second gateway device does not broadcast the forwarding indication information again in the designated broadcast domain. In this case, the second gateway device may determine whether the test response packet is a response packet of a tracert request packet initiated by the second gateway device, so as to determine whether to determine a network test result according to the test response packet.

As can be seen from the introduction of step 301, when the second gateway device sends the test request packet, the session identifier for identifying the tracert test is generated and stored according to the second port number and the IP address of the destination host. Based on this, when the second gateway device determines whether the test response message is a response message of a tracert request message initiated by the second gateway device, the second gateway device may obtain a second port number in a UDP header of the test request message carried in the test response message and a source IP address of the test response message, and then generate a target session identifier according to the second port number and the source IP address. Then, the second gateway device compares the target session identifier with the session identifier stored in the second gateway device, and if the target session identifier and the session identifier stored in the second gateway device are the same, it indicates that the test response packet is a response packet of a tracert test procedure initiated by the second gateway device, and at this time, the second gateway device may determine a network test result according to the test response packet. Certainly, if the second gateway device finds that the generated target session identifier is different from the session identifier stored in the second gateway device, that is, the second gateway device does not store the target session identifier, it may be determined that the test response packet is not a response packet of a tracert test procedure initiated by the second gateway device itself, and in this case, the second gateway device may discard the test response packet.

Optionally, in some possible cases, when the destination IP address of the test response packet is different from the gateway IP address of the first gateway device, the first gateway device may directly forward the test response packet according to the destination IP address in the test response packet, which is not described in detail herein.

Therefore, in the embodiment of the application, by adding the forwarding indication information in the test response message, after receiving the test response message, the first gateway device can continue to forward the test response message under the indication of the forwarding indication information even if its own gateway IP address is the same as the IP address of the gateway device initiating the test request, without terminating the forwarding of the test response message. Therefore, the gateway equipment initiating the test request can receive the test response message, and further realize the network test according to the test response message.

The network testing method is illustrated by taking two testing scenarios of ping testing and tracert testing as examples.

Fig. 5 is a flowchart of a network testing method in a ping testing scenario according to an embodiment of the present application. As shown in fig. 5, the method comprises the steps of:

step 501: and the second gateway equipment sends a ping request message to the first gateway equipment through the VXLAN tunnel, wherein the ping request message carries forwarding indication information.

It should be noted that the payload data of the ping request packet includes an extension field, and the extension field carries forwarding indication information, an NVE IP address of the second gateway device, and a VNI corresponding to a bridge domain to which the destination host belongs. The ping request message described in step 301 may be referred to in an implementation manner of the ping request message, which is not described in this embodiment again.

And the second gateway equipment carries out VXLAN packaging on the ping request message and sends the packaged ping request message to the first gateway equipment.

Step 502: and the first gateway equipment sends the ping request message to the destination host after receiving the ping request message.

And the first gateway equipment removes the VXLAN encapsulation after receiving the encapsulated ping request message. And then, according to the destination IP address of the ping request message, forwarding the ping request message to a destination host. The implementation process of the first gateway device sending the ping request message to the destination host may refer to the implementation manner of step 301 in the foregoing embodiment, and this embodiment is not described herein again.

Step 503: after receiving the ping request message, the destination host generates a ping response message according to the ping request message, wherein the ping response message carries forwarding indication information.

The target host acquires the effective load data in the ping request message, the effective load data is used as the effective load data of the ping response message, the IP address of the target host is used as the source IP address of the ping response message, and the gateway IP address of the second gateway device is used as the target IP address of the ping response message, so that the ping response message is obtained.

Step 504: the destination host sends the ping response message to the first gateway device.

Step 505: after receiving the ping response message, if the destination IP address of the ping response message is the same as the gateway IP address of the first gateway device, the first gateway device forwards the ping test response message to the second gateway device under the indication of the forwarding indication information in the ping response message.

After finding the forwarding indication information in the ping response message, the first gateway device performs VXLAN encapsulation on the ping response message, and further forwards the encapsulated ping response message to the second gateway device.

Because the ping response message carries payload data of the ping request message, that is, an extension field in the ping request message, and the extension field includes the NVE IP address of the second gateway device and the VNI corresponding to the destination host, the first gateway device may perform VXLAN encapsulation on the ping response message according to the NVE IP address of the second gateway device in the extension field and the VNI corresponding to the destination host, thereby sending the encapsulated message to the second gateway device.

In this embodiment of the present application, the payload data of the ping response packet carries the forwarding indication information in the request packet, so that even though the destination IP address of the ping response packet is the same as the gateway IP address of the first gateway device, the first gateway device can still forward the ping response packet to the second gateway device under the indication of the forwarding indication information according to the NVE IP address of the second gateway device and the VNI of the destination host in the response packet, thereby implementing the ping test function.

Fig. 6 is a flowchart of a network testing method in a tracert testing scenario according to an embodiment of the present application. As shown in fig. 6, the method comprises the steps of:

step 601: and the second gateway equipment sends a tracert request message to the first gateway equipment through the VXLAN tunnel, wherein the tracert request message carries forwarding indication information.

The message format of the tracert request message is a UDP message, the source IP address of the tracert request message is the gateway IP address of the second gateway device, the destination IP address is the IP address of the destination host, and the tracert request message carries TTL. Besides, the UDP source port number is the first port number, and the UDP destination port number is the second port number, where the UDP source port number is the forwarding indication information. Illustratively, the first port number is a preset port number, such as 0x5658, but of course, other values may be configured, and the second port number is any port number between 30000-65535, which is not limited in this embodiment of the present application.

And the second gateway equipment encapsulates the tracert request message by VXLAN, wherein the source IP address of the head part of the encapsulated VXLAN is the NVE IP address of the second gateway equipment, and the destination IP address is the NVE IP address of the first gateway equipment. And then, the second gateway device sends the encapsulated tracert request message to the first gateway device, generates a session identifier of the tracert test according to the UDP destination port number and the destination IP address of the tracert request message, namely the second port number and the IP address of the destination host, and stores the session identifier.

Step 602: and if the difference value between the TTL and 1 in the tracert request message is not equal to 0, the first gateway equipment forwards the tracert request message to the target host.

After receiving the tracert request packet, the first gateway device obtains TTL in the tracert request packet, and calculates a difference between the TTL and 1, and if the difference is not equal to 0, the first gateway device forwards the packet to the destination host according to the destination IP address of the tracert request packet.

Step 603: and the target host generates a tracert response message according to the tracert request message, wherein the tracert response message carries forwarding indication information.

After receiving the tracert request message, the destination host determines that there is no monitoring on the destination port according to the UDP destination port number of the tracert request message, that is, the destination port number cannot be used. At this time, the destination host generates a tracert response message for notifying the second gateway device that the tracert request message has arrived at the destination host. The destination IP address of the tracert response packet is the gateway IP address of the second gateway device, the source IP address is the IP address of the destination host, and the tracert response packet carries the UDP header of the tracert request packet, that is, the first port number serving as the forwarding indication information.

Step 604: and the destination host sends the tracert response message to the first gateway equipment.

Step 605: when the gateway IP address of the first gateway device is different from the destination IP address of the tracert response message, the first gateway device forwards the tracert response message to any third gateway device with the same destination IP address as the tracert response message.

When the gateway IP address of the first gateway device is different from the destination IP address of the tracert response message, the first gateway device sends the tracert response message to any third gateway device in the appointed broadcast domain, wherein the third gateway device is the same as the IP address of the tracert response message, and the destination IP address of the tracert response message is the same as the IP address of the tracert response message. The designated broadcast domain is a broadcast domain in which the first gateway device and the second gateway device are located. There may be one or more gateway devices within the specified broadcast domain that have the same gateway IP address as the second gateway device, in which case the third gateway device may be any of the devices that have the same gateway IP address as the second gateway device.

Step 606: and the third gateway device broadcasts the tracert response message in a specified broadcast domain under the indication of the forwarding indication information of the tracert response message, wherein the specified broadcast domain refers to the broadcast domain in which the first gateway device, the second gateway device and the third gateway device are located.

After receiving the tracert response packet, the third gateway device finds that the tracert response packet carries forwarding indication information although its own gateway IP address is the same as the destination IP address of the tracert response packet, and in this case, the third gateway device broadcasts the tracert response packet in a specified broadcast domain under the indication of the forwarding indication information.

It should be noted that, in order to prevent other gateway devices whose gateway IP addresses in the designated broadcast domain are the same as the destination IP address of the tracert response packet from broadcasting again after receiving the broadcasted tracert response packet, the third gateway device may modify the forwarding indication information, that is, the first port number, to other values before broadcasting the tracert response packet.

After receiving the broadcasted tracert response message, the second gateway device modifies the forwarding indication information in the tracert response message, so that although the gateway IP address of the second gateway device is the same as the destination IP address of the tracert response message, the second gateway device does not rebroadcast the tracert response message.

Meanwhile, the second gateway device may verify whether the tracert response packet is a response packet to the tracert request packet sent by the second gateway device. As can be seen from the foregoing description, when the destination host generates a tracert response message, the destination host carries the UDP header of the tracert request message in the tracert response message. Based on this, the second gateway device obtains the destination port number in the UDP header carried in the tracert response packet, and generates the target session identifier according to the destination port number and the source IP address of the tracert response packet. If the second gateway device stores the target session identifier, it indicates that the tracert response message is the response message of the tracert request message sent by the second gateway device, and at this time, the second gateway device determines that the response of the target host is received. If the target session identifier is not stored in the second gateway device, it indicates that the tracert response packet is not a response packet of a tracert request packet sent by the second gateway device, and at this time, the second gateway device discards the tracert response packet.

In this embodiment of the present application, the tracert response message carries a UDP header of the tracert request message, where a UDP source port number in the UDP header is a preset port number and may be used as the forwarding indication information. In this way, after receiving the tracert response message, the other gateway device having the same gateway IP address as the second gateway device broadcasts the tracert response message in the specified broadcast domain under the instruction of the forwarding indication information in the UDP header. In this way, the second gateway device can receive the tracert response message, thereby implementing the tracert test.

Next, a network test apparatus provided in the embodiment of the present application will be described.

Fig. 7 is a schematic structural diagram of a network test apparatus 700 according to an embodiment of the present disclosure. As shown in fig. 7, the network test apparatus 700 is applied to the first network device, and includes:

a receiving module 701, configured to perform step 301 in the foregoing embodiment;

a sending module 702, configured to execute step 302 in the foregoing embodiment.

The receiving module 701 and the sending module 702 may be implemented by the processor control communication interface in the network device shown in fig. 2.

Optionally, the receiving module 701 is further configured to receive a test request message sent by the second gateway device through a virtual extensible local area network VXLAN tunnel, where the test request message is a ping request message, and the ping request message carries forwarding indication information, a network virtualization interface NVE IP address of the second gateway device, an IP address of the destination host, and a virtual extensible local area network identifier VNI corresponding to the destination host; the sending module 702 is further configured to send a test request message to the destination host according to the IP address of the destination host.

Optionally, the test response message carries the NVE IP address of the second gateway device and the VNI corresponding to the destination host.

Optionally, the sending module 702 is configured to:

under the instruction of forwarding the indication information, carrying out VXLAN packaging on the test response message according to the NVE IP address of the second gateway device and the VNI corresponding to the target host to obtain a VXLAN message;

and sending the VXLAN message to the second gateway equipment.

Optionally, the receiving module 701 is further configured to receive a test request packet sent by the second gateway device through the VXLAN tunnel, where the test request packet is a tracert request packet, a user data packet protocol UDP source port number of the tracert request packet is a first port number, a UDP destination port number is a second port number, and the tracert request packet carries a time to live value TTL and an IP address of the destination host; the sending module 702 is further configured to send a test request packet to the destination host according to the IP address of the destination host when the difference between the TTL and 1 is not 0.

Optionally, the forwarding indication information is a UDP source port number of the tracert request packet;

the sending module 702 is configured to:

and under the indication of the forwarding indication information, broadcasting the test response message in a specified broadcast domain, wherein the specified broadcast domain refers to the broadcast domain in which the first gateway equipment and the second gateway equipment are located.

In summary, in the embodiment of the present application, the test response message responding to the test request message sent by the second gateway device carries the forwarding indication information, and after receiving the test response message, the first gateway device continues to forward the test response message under the indication of the forwarding indication information even if the destination IP address of the test response message is the same as the gateway IP address of the first gateway device. In this way, the test response packet will not terminate on the gateway device with the same gateway address as the second gateway device, so that the second gateway device can receive the test response packet, thereby successfully obtaining the network test result according to the test response packet. Therefore, the method provided by the embodiment of the application can meet the network test requirement of the distributed VXLAN gateway.

It should be noted that: in the network testing apparatus provided in the foregoing embodiment, when performing a network test, only the division of each functional module is illustrated, and in practical applications, the function distribution may be completed by different functional modules as needed, that is, the internal structure of the device is divided into different functional modules to complete all or part of the functions described above. In addition, the network testing apparatus and the network testing method provided by the above embodiments belong to the same concept, and specific implementation processes thereof are described in the method embodiments, and are not described herein again.

In the above embodiments, the implementation may be wholly or partly realized by software, hardware, firmware, or any combination thereof. When implemented in software, may be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When loaded and executed on a computer, cause the processes or functions described in accordance with the embodiments of the application to occur, in whole or in part. The computer may be a general purpose computer, a special purpose computer, a network of computers, or other programmable device. The computer instructions may be stored on a computer readable storage medium or transmitted from one computer readable storage medium to another, for example, from one website, computer, server, or data center to another website, computer, server, or data center via wire (e.g., coaxial cable, fiber optic, Digital Subscriber Line (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.). The computer-readable storage medium can be any available medium that can be accessed by a computer or a data storage device, such as a server, a data center, etc., that includes one or more available media. The usable medium may be a magnetic medium (e.g., floppy Disk, hard Disk, magnetic tape), an optical medium (e.g., Digital Versatile Disk (DVD)), or a semiconductor medium (e.g., Solid State Disk (SSD)), among others.

It will be understood by those skilled in the art that all or part of the steps for implementing the above embodiments may be implemented by hardware, or may be implemented by a program instructing relevant hardware, where the program may be stored in a computer-readable storage medium, and the above-mentioned storage medium may be a read-only memory, a magnetic disk or an optical disk, etc.

It is to be understood that reference herein to "at least one" means one or more and "a plurality" means two or more. In the description herein, "/" indicates an inclusive meaning unless otherwise noted, e.g., a/B may indicate a or B; "and/or" herein is merely an association describing an associated object, and means that there may be three relationships, e.g., a and/or B, which may mean: a exists alone, A and B exist simultaneously, and B exists alone. In addition, in order to facilitate clear description of technical solutions of the embodiments of the present application, in the embodiments of the present application, terms such as "first" and "second" are used to distinguish the same items or similar items having substantially the same functions and actions. Those skilled in the art will appreciate that the terms "first," "second," and the like do not denote any order or importance, but rather the terms "first," "second," and the like do not denote any order or importance.

The above description should not be taken as limiting the embodiments of the present application, and any modifications, equivalents, improvements, etc. made within the spirit and principle of the embodiments of the present application should be included in the scope of the embodiments of the present application.

Claims (13)

1. A method for network testing, the method comprising:

the method comprises the steps that a first gateway device receives a test response message, wherein the test response message is a message for responding to a test request message sent by a second gateway device, the target Internet Protocol (IP) address of the test response message is the gateway IP address of the second gateway device, and the test response message carries forwarding indication information;

when the destination IP address of the test response packet is the same as the gateway IP address of the first gateway device, the first gateway device forwards the test response packet to the second gateway device under the instruction of the forwarding instruction information, so that the second gateway device determines a network test result according to the test response packet.

2. The method of claim 1, further comprising:

the first gateway device receives the test request message sent by the second gateway device through a virtual extensible local area network (VXLAN) tunnel, wherein the test request message is a ping request message, and the ping request message carries the forwarding indication information, a network virtualization interface (NVE) IP address of the second gateway device, an IP address of a destination host and a virtual extensible local area network (VNI) network identifier corresponding to the destination host;

and the first gateway equipment sends the test request message to the target host according to the IP address of the target host.

3. The method according to claim 2, wherein the test response packet carries the NVE IP address of the second gateway device and the VNI corresponding to the destination host.

4. The method according to claim 3, wherein the forwarding the test response packet to the second gateway device by the first gateway device under the indication of the forwarding indication information includes:

the first gateway device performs VXLAN packaging on the test response message according to the NVE IP address of the second gateway device and the VNI corresponding to the target host under the indication of the forwarding indication information to obtain a VXLAN message;

and the first gateway equipment sends the VXLAN message to the second gateway equipment.

5. The method of claim 1, further comprising:

the first gateway equipment receives the test request message sent by the second gateway equipment through a VXLAN tunnel, the test request message is a tracert request message, the source port number of a user data packet protocol (UDP) of the tracert request message is a first port number, the destination port number of the UDP is a second port number, and the tracert request message carries a Time To Live (TTL) value and an IP address of a destination host;

and when the difference between the TTL and the TTL is not 0, the first gateway equipment sends the test request message to the target host according to the IP address of the target host.

6. The method of claim 5, wherein the forwarding indication information is a UDP source port number of the tracert request packet;

the forwarding, by the first gateway device, the test response packet to the second gateway device under the instruction of the forwarding instruction information includes:

and the first gateway device broadcasts the test response message in a specified broadcast domain under the indication of the forwarding indication information, wherein the specified broadcast domain refers to the broadcast domain in which the first gateway device and the second gateway device are located.

7. A network test apparatus, applied in a first gateway device, the apparatus comprising:

a receiving module, configured to receive a test response packet, where the test response packet is a packet that responds to a test request packet sent by a second gateway device, a destination internet protocol IP address of the test response packet is a gateway IP address of the second gateway device, and the test response packet carries forwarding indication information;

and the sending module is configured to forward the test response packet to the second gateway device under the instruction of the forwarding instruction information when the destination IP address of the test response packet is the same as the gateway IP address of the first gateway device, so that the second gateway device determines a network test result according to the test response packet.

8. The apparatus of claim 7,

the receiving module is further configured to receive the test request message sent by the second gateway device through a virtual extensible local area network VXLAN tunnel, where the test request message is a ping request message, and the ping request message carries the forwarding indication information, a network virtualization interface NVE IP address of the second gateway device, an IP address of a destination host, and a virtual extensible local area network identifier VNI corresponding to the destination host;

the sending module is further configured to send the test request packet to the destination host according to the IP address of the destination host.

9. The apparatus according to claim 8, wherein the test response packet carries the NVE IP address of the second gateway device and the VNI corresponding to the destination host.

10. The apparatus of claim 9, wherein the sending module is configured to:

under the instruction of the forwarding instruction information, carrying out VXLAN packaging on the test response message according to the NVE IP address of the second gateway device and the VNI corresponding to the target host to obtain a VXLAN message;

and sending the VXLAN message to the second gateway equipment.

11. The apparatus of claim 7,

the receiving module is further configured to receive the test request packet sent by the second gateway device through a VXLAN tunnel, where the test request packet is a tracert request packet, a UDP source port number of the tracert request packet is a first port number, a UDP destination port number is a second port number, and the tracert request packet carries a time to live value, TTL, and an IP address of a destination host;

and the sending module is further configured to send the test request packet to the destination host according to the IP address of the destination host when the difference between the TTL and 1 is not 0.

12. The apparatus of claim 11, wherein the forwarding indication information is a UDP source port number of the tracert request packet;

the sending module is used for:

and under the indication of the forwarding indication information, broadcasting the test response message in a specified broadcast domain, wherein the specified broadcast domain refers to the broadcast domain in which the first gateway device and the second gateway device are located.

13. A computer-readable storage medium having stored therein instructions which, when run on a computer, cause the computer to perform the network testing method of any of claims 1-6.

Images