CN117608746A

CN117608746A - Virtual machine network equipment creation method, device, equipment and storage medium

Info

Publication number: CN117608746A
Application number: CN202311576543.3A
Authority: CN
Inventors: 李玮; 郭利军
Original assignee: Yusur Technology Co ltd
Current assignee: Yusur Technology Co ltd
Priority date: 2023-11-23
Filing date: 2023-11-23
Publication date: 2024-02-27

Abstract

The embodiment of the application provides a virtual machine network device creation method, device, equipment and storage medium, comprising the following steps: invoking a first container network interface vdpa cni, wherein the first container network interface comprises a virtual network port vf; creating first file information fd corresponding to the virtual network port according to the virtual network port, and writing the first file information into the configuration of a first container crd; and creating the network equipment of the virtual machine according to the first file information. By the method of the embodiment of the application, the first container network interface vdpa cni takes over the management work of the virtual network port vf and the first file fd, so that the third party cni does not perceive vdpa, and is convenient to replace different cni. The dpdk-vdpa is changed into a globally unique process, so that host system resources are reduced; cni does not require management of the dpdk-vdpa process.

Description

Virtual machine network equipment creation method, device, equipment and storage medium

Technical Field

The embodiment of the application relates to the technical field of communication networks, in particular to a virtual machine network device creation method, a device, equipment and a storage medium.

Background

With the continuous development of information technology, the increase of communication service diversity puts higher demands on the network performance of the virtual communication network device, so that more and more technologies are applied to the virtual network in practical application, and the performance of the virtual network is close to the network performance of the physical device.

In the open source project KubeVirt, which runs a virtual machine in a container manner, VDPA can be used as a network device acceleration scheme for the virtual machine. Network performance close to that of a physical device can be obtained by assigning VDPA devices directly to virtual machines and bypassing the network layer of the virtual machine monitor (e.g., KVM). And the process of configuring and creating the VDPA device is complex, which consumes large amounts of host system resources.

Disclosure of Invention

The embodiment of the application provides a virtual network device creation method, which can reduce the use of system resources and flexibly replace different container network interfaces.

In a first aspect, an embodiment of the present application provides a virtual network device creation method, including:

invoking a first container network interface, wherein the first container network interface comprises a virtual network port;

creating first file information corresponding to the virtual network port according to the virtual network port, and writing the first file information into the configuration of a first container;

and creating the network equipment of the virtual machine according to the first file information.

In this embodiment of the present application, the first container network interface is vdpa cni, the virtual network port is vf, the first file information is fd, and the first container is crd. By the method of the embodiment of the application, the first container network interface vdpa cni takes over the management work of the virtual network port vf and the first file fd, so that the third party cni does not perceive vdpa, and is convenient to replace different cni. The dpdk-vdpa is changed into a globally unique process, so that host system resources are reduced; cni does not require management of the dpdk-vdpa process.

In one possible implementation, the method includes: the first container network interface is one or more.

In one possible implementation, before invoking the first container network interface, the method further comprises: and acquiring the virtual network port from the second container network interface.

In one possible implementation, the method further includes: and configuring the virtual network port through the PCI address.

In one possible implementation manner, the configuring the virtual portal through the PCI address includes any one of the following operations:

adding a virtual function through the PCI address; or alternatively, the first and second heat exchangers may be,

deleting a virtual function through the PCI address; or alternatively, the first and second heat exchangers may be,

acquiring information of the virtual network port; or alternatively, the first and second heat exchangers may be,

creating the first file information corresponding to the virtual network port; or alternatively, the first and second heat exchangers may be,

deleting the first file information corresponding to the virtual network port; or alternatively, the first and second heat exchangers may be,

and acquiring first file information corresponding to the virtual network port.

In a second aspect, an embodiment of the present application provides a virtual network device creation management apparatus, including: the system comprises a calling module, a first creating module and a second creating module. Wherein,

the calling module is used for calling a first container network interface, and the first container network interface comprises a virtual network port;

the first creation module is used for creating first file information corresponding to the virtual network port according to the virtual network port and writing the first file information into the configuration of a first container;

and the second creating module is used for creating the network equipment of the virtual machine according to the first file information.

In one possible implementation, the apparatus includes: the first container network interface is one or more.

In one possible implementation, before invoking the first container network interface, the invoking module is further configured to: and acquiring the virtual network port from the second container network interface.

In one possible implementation manner, the device further includes a configuration module, where the configuration module is configured to configure the virtual portal through a PCI address.

In a possible implementation manner, the configuration module is configured to perform any one of the following operations:

and acquiring first file information corresponding to the virtual network port.

In a third aspect, embodiments of the present application further provide an electronic device, including:

at least one processor;

and a memory communicatively coupled to the at least one processor;

the memory stores instructions executable by the at least one processor to cause the electronic device to perform a method according to any one of the embodiments of the first aspect of the present application.

In a fourth aspect, embodiments of the present application further provide a computer-readable storage medium having stored therein computer-executable instructions that, when executed by a processor, are configured to implement any of the methods according to the first aspect of the embodiments of the present application.

In a fifth aspect, embodiments of the present application further provide a computer program product, which contains computer-executable instructions for implementing the method according to any of the embodiments corresponding to the first aspect of the embodiments of the present application when the computer-executable instructions are executed by a processor.

Drawings

The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the disclosure and together with the description, serve to explain the principles of the disclosure.

In order to more clearly illustrate the embodiments of the present disclosure or the solutions in the prior art, the drawings that are required for the description of the embodiments or the prior art will be briefly described below, and it will be obvious to those skilled in the art that other drawings can be obtained from these drawings without inventive effort.

Fig. 1 is a schematic diagram of a virtual machine network device creation architecture according to an embodiment of the present application;

fig. 2 is a schematic diagram of virtual machine network device creation architecture interaction provided in an embodiment of the present application;

fig. 3 is a schematic diagram of a virtual machine network device creation method according to an embodiment of the present application;

fig. 4 is a schematic diagram of a virtual machine network device creation apparatus provided in an embodiment of the present application;

fig. 5 is a schematic diagram of creating an electronic device by using a virtual machine network device according to an embodiment of the present application;

Detailed Description

When the following description refers to the accompanying drawings, the same numbers in different drawings refer to the same or similar elements, unless otherwise indicated. The implementations described in the following exemplary embodiments are merely examples of apparatus and methods consistent with aspects of embodiments of the present application as detailed in the accompanying claims.

The following embodiments may be combined with each other, and the same or similar concepts or processes may not be described in detail in some embodiments. Embodiments of the present application will be described below with reference to the accompanying drawings.

It should be noted that in this document, relational terms such as "first" and "second" and the like are used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. Moreover, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising one … …" does not exclude the presence of other like elements in a process, method, article, or apparatus that comprises the element.

Terms related to embodiments of the present application are explained as follows.

DPDK: is an abbreviation for data plane development suite Data Plane Development Kit, which can be understood as an open-source, cross-platform data plane development kit for accelerating the development of data plane applications. The method provides a group of optimized libraries and drivers, utilizes the data surface library provided by the driver to transmit and receive packets, bypasses the Linux kernel mode protocol stack, and improves the message processing efficiency. Enabling developers to build high-performance, low-latency web applications.

VDPA: generally virtio data path acceleration, represents a class of devices whose data plane processing is strictly compliant with the virtio protocol specification, which aims to provide high performance virtual network device acceleration. VDPA allows Virtual Machines (VMs) to directly access the data plane of a physical network adapter (NIC), bypassing the processing of Virtual Machine Monitors (VMMs) and virtual switches, thereby providing low latency and high throughput network performance.

K8S: its full name is kubernetes, K8S is its abbreviation, and the 8 characters "ubernete" are replaced with the "8" word. Is a container-based cluster management platform, also referred to as an open-source container orchestration platform, for automating the deployment, expansion, and management of containerized applications. It provides a flexible and extensible way to manage containerized applications and provides a series of functions to simplify the deployment, scheduling, self-healing, and extension of applications.

CNI/CNI: container Network Interface, which is a generic term for container network interfaces, is a network model for implementing multi-container communications, responsible for creating and managing network interfaces for containers, including assigning IP addresses, configuring routes, setting network policies, etc. The CNI plug-in may implement these functions according to different network implementations, for example using Linux bridging, VLAN, overlay networks, etc.

CNI chain: refers to a series of operations that the container network interface (Container Network Interface, CNI) plug-in performs sequentially during container runtime. Each CNI plug-in can perform a series of operations as needed to complete the network configuration of the container, which are performed sequentially in a specified order, forming a CNI chain. In an embodiment of the present application, the first container network interface and the second container network interface are CNI plugins.

Kubevirt: to run open source projects of virtual machines in a container manner, the Kubernetes is provided with the ability to run and manage Virtual Machines (VMs). It allows users to deploy and manage virtual machine workloads in a containerized manner in a Kubernetes cluster, combining the advantages of containers and virtual machines.

Kubelet: is a proxy component on kubernetes working nodes, running on each node.

pod: for the acronym Point of Delivery, kubernetes encapsulates one or more containers into the advanced structure of a pod. Any container in the same pod will share the same namespaces and local network. The containers can easily communicate with other containers in the same container as if they were on the same machine while maintaining some degree of isolation.

crd: the english abbreviation of customresource definition is used to manage the configuration of a pod resource. Illustratively, one pod corresponds to the configuration of one crd.

FD/FD: is an abbreviation for filescript, and the content represented is a file descriptor.

VF/VF: the Virtual function is abbreviated as Virtual function, is a virtualization technology, and can divide a physical network card (PF) into a plurality of Virtual network cards, each Virtual network card has its own MAC address and a set of virtualized resources. VFs may be assigned to virtual machines or containers so that they can directly access the physical network.

PF/PF: the abbreviation of Physical function refers to the actual function of the Physical network card, and can directly interact with the Physical network. The PF is responsible for managing and controlling resources associated with the VFs and handling communications between the VFs.

PCI: the acronym Peripheral Component Interconnect, chinese name peripheral component interconnect, is a computer hardware interface standard through which peripheral devices can be accessed.

It will be understood that in the embodiments of the present application, the abbreviations of Chinese and English are not case-specific, and may be used in the same sense. If the meanings of VF and VF are the same, the meanings of PF and PF are the same, and the meanings of DPDK-vddpa and DPDK-VDPA are the same, the embodiment of the present application is not limited to this.

As shown in fig. 1, an embodiment of the present application proposes a new architecture for creating a virtual network device, where in fig. 1, host is a host device, vm is a management virtual machine, and vf is a function of the virtual machine; kubelet is the primary service on the working node, periodically receives new or modified pod specifications from kube-apiserver components, and ensures that the pod and its container run under the desired specifications; the pod is a container, and can provide a lightweight virtual environment for running business. dpdk-vdpa is a globally unique process that manages all vfs and all vdpa fd. Using the vdpa cni to manage vf and the corresponding vdpa fd, the information is communicated with the channel of the cni chain and the third party cni, i.e., by using the cni chain, in a manner that the third party cni does not perceive vdpa.

In an embodiment of the present application, the dpdk-vdpa process involved in the architecture of fig. 1 includes an api module, a vdpa message module, and a dev message module. As shown in FIG. 2, a schematic diagram of the interaction of the vdpa cni module and the dpdk vdpa module is shown. The module functions involved in fig. 2 are exemplarily described as follows:

api module: is responsible for processing cni commands.

Vdpa message module: is responsible for creating and deleting the vdpa fd and maintaining the information of the vdpa fd.

Dev message module: is responsible for adding and deleting network vf or pf devices and maintaining information.

vpda cni plug-in: the various events of corresponding cni interact with the dpdk-vdpa api module according to the standard interface implementation of cni links.

In fig. 3, in the embodiment shown in fig. 3, the first container network interface is vdpa cni, the virtual network port is vf, the first file information is fd, and the first container is crd. The steps involved in the embodiment shown in fig. 3 are described in detail as follows.

Step 301, calling a first container network interface, wherein the first container network interface comprises a virtual network port.

Step 302, creating first file information corresponding to the virtual network port according to the virtual network port, and writing the first file information into the configuration of the first container.

It can be appreciated that in the embodiment of the present application, the pod is a container, and may provide a lightweight virtual environment for running services. In the application process, the pod needs to be created and deleted according to the actual situation, as will be described in detail below.

In one possible implementation, the process of creating the pod includes:

(1) The Kubelet informs cni that the chain created the pod and created the network runtime of the pod.

(2) Third party cni selects a vf to configure the vf to join the network.

(3) The vdpa cni receives the vf information, creates the corresponding vdpa fd, and writes fd to the pod crd.

(4) After cni chain returns, kubelet succeeds in creating the pod, kubelirt obtains vdpa fd from the pod crd, creating vm.

In one possible implementation, the process of deleting the pod includes:

(1) Kubelet notifies cni that the link deleted pod.

(2) Third party cni deletes vf from the network.

(3) The vdpa cni deletes the corresponding vdpa fd.

(4) After cni strand return kubelet deleted pod successfully.

Step 303, creating network equipment of the virtual machine according to the first file information.

and acquiring first file information corresponding to the virtual network port.

In one possible implementation, virtual functions are added through the PCI address, exemplary Add dev { PCI addr }: cni add a vf using the pci address.

In one possible implementation, the virtual function is deleted by the PCI address, illustratively Del dev { PCI addr }: cni delete one vf using the pci address.

In one possible implementation, the information of the virtual portal is obtained, and by way of example, get dev { pci addr }: cni obtains dev state, i.e. obtaining vf state after adding, and searches pairing information through vf state.

In one possible implementation manner, the first file information corresponding to the virtual portal is created, and an example is created vdpa { pci addr } { fd path }: under the specified path, a vdpa fd of the corresponding vf of the pci addr is created.

In one possible implementation manner, the first file information corresponding to the virtual portal is deleted, and the Delete vdpa { pci addr }, for example: and deleting vpda fd of vf corresponding to the pci addr.

In one possible implementation manner, the first file information corresponding to the virtual portal is obtained, and the Get vdpa { pci addr }, by way of example: and acquiring vpda fd information of the vf corresponding to the pci addr.

By the method of the embodiment of the application, the first container network interface vdpa cni takes over the management work of the virtual network port vf and the first file fd, so that the third party cni does not perceive vdpa, and is convenient to replace different cni. The dpdk-vdpa is changed into a globally unique process, so that host system resources are reduced; cni does not require management of the dpdk-vdpa process.

The embodiment of the application provides a virtual network device creation management device, which comprises: a calling module 401, a first creating module 402 and a second creating module 403. Wherein,

the calling module 401 is configured to call a first container network interface, where the first container network interface includes a virtual network port;

a first creating module 402, configured to create first file information corresponding to the virtual portal according to the virtual portal, and write the first file information into a configuration of a first container;

and a second creating module 403, configured to create a network device of the virtual machine according to the first file information.

and acquiring first file information corresponding to the virtual network port.

The description may be understood correspondingly with reference to the description and effects corresponding to the embodiments of the method in fig. 1 to 3, which are not repeated here.

Fig. 5 is a schematic structural diagram of an electronic device according to an embodiment of the present application, as shown in fig. 5, the electronic device 500 includes: a memory 510 and a processor 520.

Wherein the memory 510 stores a computer program executable by the at least one processor 520. The computer program is executed by the at least one processor 520 to cause the electronic device to implement the method as provided in any of the embodiments above.

Wherein the memory 510 and the processor 520 may be connected by a bus 530.

The relevant descriptions and effects corresponding to the relevant description and effects corresponding to the method embodiments may be understood, and are not repeated herein.

An embodiment of the present application provides a computer readable storage medium having stored thereon a computer program for execution by a processor to implement a method as provided in any of the embodiments corresponding to fig. 1-3.

The computer readable storage medium may be, among other things, ROM, random Access Memory (RAM), CD-ROM, magnetic tape, floppy disk, optical data storage device, etc.

An embodiment of the present application provides a computer program product containing computer-executable instructions for implementing the method as provided in any of the embodiments corresponding to fig. 1 to 3 when executed by a processor.

In the several embodiments provided in this application, it should be understood that the disclosed apparatus and method may be implemented in other ways. For example, the apparatus embodiments described above are merely illustrative, e.g., the division of modules is merely a logical function division, and there may be additional divisions of actual implementation, e.g., multiple modules or components may be combined or integrated into another system, or some features may be omitted, or not performed. Alternatively, the coupling or direct coupling or communication connection shown or discussed with each other may be an indirect coupling or communication connection via some interfaces, devices or modules, which may be in electrical, mechanical, or other forms.

Other embodiments of the present application will be apparent to those skilled in the art from consideration of the specification and practice of the disclosure disclosed herein. This application is intended to cover any variations, uses, or adaptations of the application following, in general, the principles of the application and including such departures from the present disclosure as come within known or customary practice within the art to which the application pertains. It is intended that the specification and examples be considered as exemplary only, with a true scope of the application being indicated by the following claims.

It is to be understood that the present application is not limited to the precise arrangements and instrumentalities shown in the drawings, which have been described above, and that various modifications and changes may be effected without departing from the scope thereof.

Claims

1. A virtual machine network device creation method, comprising:

2. The method according to claim 1, characterized in that it comprises: the first container network interface is one or more.

3. The method of claim 1, wherein prior to invoking the first container network interface, the method further comprises:

and acquiring the virtual network port from the second container network interface.

4. A method according to any one of claims 1-3, wherein the method further comprises: and configuring the virtual network port through the PCI address.

5. The method of claim 4, wherein configuring the virtual portal via a PCI address comprises any of:

and acquiring first file information corresponding to the virtual network port.

6. A virtual machine network device creation apparatus, comprising:

7. The apparatus according to claim 1, characterized by comprising: the first container network interface is one or more.

8. An electronic device, comprising:

at least one processor;

and a memory communicatively coupled to the at least one processor;

wherein the memory stores instructions executable by the at least one processor to cause the electronic device to perform the method of any one of claims 1 to 5.

9. A computer readable storage medium having stored therein computer executable instructions which when executed by a processor are adapted to carry out the method of any one of claims 1 to 5.

10. A computer program product comprising computer-executable instructions for performing the method of any one of claims 1 to 5 when the computer-executable instructions are executed by a processor.