WO2014059787A1

WO2014059787A1 - Communication connection method, communication device and communication system

Info

Publication number: WO2014059787A1
Application number: PCT/CN2013/075605
Authority: WO
Inventors: 周天然; 曾晴; 于德雷
Original assignee: 华为技术有限公司
Priority date: 2012-10-19
Filing date: 2013-05-14
Publication date: 2014-04-24
Also published as: CN103780467A; CN103780467B

Abstract

Disclosed are a communication connection method, a communication device and a communication system. The method comprises: receiving a first request message sent by a network station when the load thereof is higher than the first load, the first request message comprising a VPC creating request, an ID of the network station and attribute information about the first tunnel; creating a target VPC in accordance with the VPC creating request; connecting the target VPC with a first PE; and sending the ID of the network station and the attribute information about the first tunnel to the first PE, so as to enable the first PE to acquire the configuration information about a second VPN and the address of a second PE in accordance with the ID of the network station, determine the configuration information about a first VPN in accordance with the configuration information about the second VPN, and establish a VPN connection and a tunnel connection with the second PE in accordance with the configuration information about the first VPN, the address of the second PE and the attribute information about the first tunnel, thereby achieving the communication connection between the target VPC and the network station. By means of the embodiments of the present invention, a communication connection can be established in time in accordance with the demand of the network station, thereby improving the connection efficiency.

Description

Communication connection method, communication device and communication system

TECHNICAL FIELD The present invention relates to the field of communications, and in particular, to a communication connection method, a communication device, and a communication system. BACKGROUND OF THE INVENTION Cloud computing technology is a technology that applies cloud processing network sites (such as enterprise computer systems, etc.) to transmit processing results back to network sites.

When applying cloud computing technology, the network site leases devices in the cloud to form a virtual private cloud.

(Virtual Private Cloud, VPC). When the data processing capability of the network site cannot meet the demand, the network site is connected with the VPC, and the VPC is used for data processing; when the data processing capability of the network site can meet the demand, the network site is disconnected from the VPC, thereby minimizing the device. And maintenance costs.

However, the existing methods are usually manually controlled by the network management system to establish a connection between the network site and the VPC, and the connection efficiency needs to be improved. SUMMARY OF THE INVENTION Embodiments of the present invention provide a communication connection method, a communication device, and a communication system, which can improve connection efficiency.

The embodiment of the invention adopts the following technical solutions:

In a first aspect, a communication connection method is provided, including:

And receiving, by the network station, a first request message sent when the load of the network site is higher than the first load, where the first request message includes a request for creating a VPC, an identifier (IDentity, ID) of the network station, and a first tunnel. Attribute information; creating a target VPC according to the request to create a VPC; connecting the target VPC and a first operator edge device (PE); sending the ID of the network site to the first PE and the a tunnel attribute information, so that the first PE obtains a second virtual private network (VPN) configuration information and an address of the second PE according to the ID of the network station, and determines according to the second VPN configuration information. The first VPN configuration information that matches the second VPN configuration information, and according to the first VPN configuration information, the address of the second PE And establishing, by the first tunnel attribute information, a VPN connection and a tunnel connection with the second PE, so as to implement a communication connection between the target VPC and the network site, where the second VPN configuration information is The VPN configuration information of the second PE, where the second PE is an access device of the network site.

In a first possible implementation manner of the first aspect, the connecting the target VPC and the first carrier edge device (PE) includes: creating a virtual customer edge device corresponding to the target VPC (virtual customer edge, VCE); connecting the first PE through the VCE.

With reference to the first aspect, or the first possible implementation manner of the first aspect, in a second possible implementation manner of the first aspect, the method further includes: receiving, by the network station, a second a request message, the second request message includes a request for updating a communication connection, second tunnel attribute information, and an ID of the network station; determining, after the network station needs to update a communication connection, according to the request for updating the communication connection, The first PE sends the second tunnel attribute information and the ID of the network station, so that the first PE is configured according to the ID of the network station, the address of the second PE, and the second tunnel attribute information. Updating a tunnel attribute between the first PE and the second PE, thereby updating a communication connection attribute of the target VPC and the network site.

The second aspect provides another communication connection method, including: connecting a target VPC located in the cloud; receiving an ID of the network station and the first tunnel attribute information sent by the cloud, the ID of the network station, and the first tunnel The attribute information is sent by the network station when the load of the network site is higher than the first load; obtaining the second VPN configuration information and the address of the second PE according to the ID of the network station, where the second VPN configuration information is The VPN configuration information of the second PE, the second PE is an access device of the network station, and determining, according to the second VPN configuration information, first VPN configuration information that matches the second VPN configuration information. Establishing a VPN connection and a tunnel connection with the second PE according to the first VPN configuration information, the address of the second PE, and the first tunnel attribute information, thereby implementing the target VPC and the Communication connection between network sites.

In a first possible implementation manner of the second aspect, the obtaining the second VPN configuration information and the address of the second PE according to the ID of the network station includes: applying an ID of the network site, querying a database The second VPN configuration information and the address of the second PE, the database pre-storing the address of the second PE corresponding to the ID of the network site, and the second VPN configuration corresponding to the ID of the network site.

In conjunction with the second aspect, or the first possible implementation of the second aspect, in a second possible implementation of the second aspect, the method further includes: receiving an ID of the network site sent by the cloud And And updating the tunnel attribute between the first PE and the second PE according to the ID of the network station, the address of the second PE, and the second tunnel attribute information, so as to update the The communication connection attribute of the target VPC with the network site.

In a third possible implementation manner of the second aspect, the connecting the target VPC in the cloud includes: connecting the target VPC by using a VCE located in the cloud.

In a third aspect, a cloud device is provided, including: a first receiving module, configured to receive a first request message sent by a network site when a load of the network site is higher than a first load, where the first request message includes a request of the VPC, the ID of the network station, and the first tunnel attribute information; a creating module, configured to create a target VPC according to the request for creating the VPC; and a connection module, configured to connect the target VPC and the first PE; a sending module, configured to send the ID of the network station and the first tunnel attribute information to the first PE, so that the first PE acquires second VPN configuration information and a second PE according to the ID of the network station And determining, according to the second VPN configuration information, first VPN configuration information that matches the second VPN configuration information, and according to the first VPN configuration information, the address of the second PE, and the a first tunnel attribute information, establishing a VPN connection and a tunnel connection with the second PE, thereby implementing a communication connection between the target VPC and the network site, where the VPN configuration information to the VPN configuration information of the second PE, the second PE device to access the network site.

In a first possible implementation manner of the third aspect, the connecting module includes: a creating unit, configured to create a VCE corresponding to the target VPC, and a connecting unit, configured to connect the first PE by using the VCE .

With reference to the third aspect, or the first possible implementation manner of the foregoing third aspect, the second possible implementation manner of the third aspect, further includes: a second receiving module, configured to receive the network a second request message sent by the station, the second request message includes a request for updating a communication connection, a second tunnel attribute information, and an ID of the network station; and a second sending module, configured to determine, according to the request for updating the communication connection After the network station needs to update the communication connection, send the second tunnel attribute information and the ID of the network station to the first PE, so that the first PE is based on the ID of the network station, and the second Updating the tunnel attribute between the first PE and the second PE by using the address of the PE and the second tunnel attribute information, so as to update the communication connection attribute of the target VPC and the network station.

The fourth aspect provides a communication device, including: a first connection module, configured to connect to a target VPC located in the cloud; and a first receiving module, configured to receive an ID of the network station and the first tunnel sent by the cloud Channel attribute information, where the ID of the network station and the first tunnel attribute information are sent by the network station when the load of the network site is higher than the first load; and the acquiring module is configured to use the ID of the network station Acquiring the second VPN configuration information and the address of the second PE, where the second VPN configuration information is the VPN configuration information of the second PE, the second PE is an access device of the network site; Determining, according to the second VPN configuration information, first VPN configuration information that matches the second VPN configuration information, where the second connection module is configured to use, according to the first VPN configuration information, an address of the second PE And the first tunnel attribute information, establishing a VPN connection and a tunnel connection with the second PE, so as to implement a communication connection between the target VPC and the network site.

In a first possible implementation manner of the fourth aspect, the acquiring module is specifically configured to: apply an ID of the network site, and query the database for the second VPN configuration information and the address of the second PE, The database prestores the address of the second PE corresponding to the ID of the network site and the second VPN configuration information corresponding to the ID of the network site.

With reference to the fourth aspect, or the first possible implementation manner of the foregoing aspect, the second possible implementation manner of the fourth aspect, further includes: a second receiving module, configured to receive, sent by the cloud The ID of the network station and the second tunnel attribute information; the third connection module, configured to update the first PE according to the ID of the network station, the address of the second PE, and the second tunnel attribute information And a tunnel attribute between the second PE, thereby updating a communication connection attribute of the target VPC and the network site.

In a third possible implementation manner of the fourth aspect, the first connection module is specifically configured to connect the target VPC by using a virtual user edge device VCE located in the cloud.

The fifth aspect provides a communication system, including the cloud device provided in any one of the possible implementation manners of the third aspect, and the communication device provided in any one of the possible implementation manners of the fourth aspect.

The communication connection method, the communication device, and the communication system provided by the embodiment of the present invention, after receiving the request message including the request for creating a VPC, the ID of the network station, and the first tunnel attribute information, are automatically generated by the receiving network site, and are created according to the request for creating a VPC. The target VPC, connecting the target VPC and the first PE, sending the ID of the network station and the first tunnel attribute information to the first PE, so that the first PE obtains the second VPN configuration information and the address of the second PE according to the ID of the network station, and And obtaining a matching first VPN configuration information according to the second VPN configuration information, and establishing a VPN connection and a tunnel connection with the second PE according to the first VPN configuration information, the address of the second PE, and the first tunnel attribute information, to implement A communication connection between the target VPC and the network site. Since the request message is automatically sent by the network site, it can be implemented according to the network station. The point needs to establish a communication connection in time, thereby improving the connection efficiency. BRIEF DESCRIPTION OF THE DRAWINGS In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings used in the description of the embodiments will be briefly described below. Obviously, the drawings in the following description are only some of the present invention. For the embodiments, those skilled in the art can obtain other drawings according to the drawings without any creative work.

FIG. 1 is a flowchart of a communication connection method 100 according to an embodiment of the present invention;

FIG. 2 is a flowchart of another communication connection method 100 according to an embodiment of the present invention;

FIG. 3 is a flowchart of a communication connection method 200 according to an embodiment of the present invention;

FIG. 4 is a flowchart of another communication connection method 200 according to an embodiment of the present invention;

FIG. 5 is a schematic diagram of an application scenario of a data transmission method according to an embodiment of the present invention;

6 is a schematic flowchart of implementing a communication connection according to an embodiment of the present invention;

FIG. 7 is a schematic flowchart of implementing an update communication connection according to an embodiment of the present invention;

FIG. 8 is a schematic structural diagram of a cloud device according to an embodiment of the present disclosure;

FIG. 9 is a schematic structural diagram of another cloud device according to an embodiment of the present disclosure;

FIG. 10 is a schematic structural diagram of still another cloud device according to an embodiment of the present disclosure;

FIG. 1 is a schematic structural diagram of a communication apparatus according to an embodiment of the present invention;

FIG. 12 is a schematic structural diagram of another communication apparatus according to an embodiment of the present invention;

FIG. 13 is a schematic structural diagram of a communication system according to an embodiment of the present invention;

FIG. 14 is a schematic structural diagram of still another cloud device according to an embodiment of the present disclosure;

FIG. 15 is a schematic structural diagram of still another communication apparatus according to an embodiment of the present invention. DETAILED DESCRIPTION OF THE EMBODIMENTS In order to make the objects, technical solutions, and advantages of the present invention more comprehensible, the embodiments of the present invention will be further described in detail below.

In the embodiment of the present invention, the network site is a network site capable of performing data processing by using the cloud. For example, the network site may be a computer (such as a personal computer) or a computer system (such as an enterprise computer system).

An embodiment of the present invention provides a communication connection method 100. As shown in FIG. 1, the method 100 may include Includes:

110. The first request message sent by the receiving network station when the load of the network site is higher than the first load, the first request message includes a request for creating a VPC, an ID of the network station, and first tunnel attribute information.

The ID of the network site is used to identify the network site, and the request for creating a VPC may be identified by applying a data segment in the first request message.

Specifically, the network station can detect the load in real time, and when the load is higher than the first load, send the first request information to the cloud, that is, the network station autonomously controls the sending of the first request message. The first load can be changed according to different scenarios. In addition, according to different application scenarios, the network site may also send the first request message according to the sending instruction.

120. Create a target VPC according to the request to create a VPC.

The target VPC is a VPC corresponding to the network site.

130. Connect the target VPC and the first PE.

140. Send the ID of the network station and the first tunnel attribute information to the first PE, so that the first PE obtains the second VPN configuration information and the address of the second PE according to the ID of the network station, and according to the second The VPN configuration information determines the first VPN configuration information that matches the second VPN configuration information, and establishes a relationship with the second PE according to the first VPN configuration information, the address of the second PE, and the first tunnel attribute information. The VPN connection and the tunnel connection are used to implement a communication connection between the target VPC and the network site. The second VPN configuration information is VPN configuration information of the second PE, and the second PE is an access device of the network site.

The VPN configuration information is related to the type of VPN connection to be established. For example, when the VPN connection to be established is a layer 3 VPN, the second VPN configuration information may be information such as an input route target (RT) and an output RT of the second PE. When the type of the VPN connection to be established is a virtual leased line (VLL) in a Layer 2 VPN based layer 2 VPN, the second VPN configuration information may be a virtual circuit (Virtual Circuit, VC) ) ID and other information. The address of the second PE may be an IP address of the second PE.

In the embodiment of the present invention, a unidirectional tunnel or a bidirectional tunnel communication connection may be established between the target VPC and the network site.

The first PE and the second PE are divided into different PEs for convenience of presentation, and do not constitute a pair. A definition of an embodiment of the invention. The first VPN configuration information and the second VPN configuration information are divided into different VPN configuration information for convenience of presentation, and are not limited to the embodiments of the present invention.

The execution body of the above 110-140 may be a cloud device, and the cloud device may be located in the cloud. In addition, the cloud device can be divided into different modules distributed in multiple devices, or integrated into the same device, or can be used as a stand-alone device.

The communication connection method 100 of the embodiment of the present invention, by receiving the request for creating a VPC, the ID of the network station, and the first tunnel attribute information automatically sent by the network site, creates a target VPC according to the request for creating a VPC, and connects the target VPC and the first PE. Sending the ID of the network station and the first tunnel attribute information to the first PE, so that the first PE obtains the second VPN configuration information and the address of the second PE according to the ID of the network station, and obtains the matching according to the second VPN configuration information. a VPN configuration information, and establishing a VPN connection and a tunnel connection with the second PE according to the first VPN configuration information, the address of the second PE, and the first tunnel attribute information, so as to implement a communication connection between the target VPC and the network site. Since the request message is automatically sent by the network site, it is possible to establish a communication connection in time according to the needs of the network site, thereby improving the connection efficiency.

In the embodiment of the present invention, optionally, when the VPC and the first PE are connected to the foregoing 130, a VCE corresponding to the target VPC may be created, and the first PE is connected by using the VCE.

The VCE is connected to the first PE, and the VCE is configured to enable the VCE to communicate with the first PE. For example, when the communication between the VCE and the first PE is based on the Layer 3 routing protocol, the running routing protocol on the VCE is set, so that the route on the VCE can communicate with the route on the first PE. For example, when the routing protocol running on the VCE and the first PE is a Border Gateway Protocol (BGP), the BGP peer that sets the VCE is the first PE. For example, when the communication between the VCE and the first PE is based on a Layer 2 protocol, for example, in the case of a virtual local area network (VLAN), the VLAN ID on the VCE is set to be connected to the first PE. The VLAN ID of the interface that enters the VCE is the same, so that the VCE can be in the same VLAN as the interface that accesses the VCE on the first PE.

As shown in FIG. 2, in the embodiment of the present invention, optionally, after the foregoing 140, the method further includes: receiving a second request message sent by the network station, where the second request message includes a request for updating a communication connection, Two tunnel attribute information and the ID of the network site.

Specifically, the network station may autonomously control the sending of the second request message, and send a second request message when detecting that the current communication connection needs to be updated. In addition, according to different application scenarios, the network station The point may also send a second request message according to the send command.

After the network station needs to update the communication connection according to the request for the update communication connection, the second tunnel attribute information and the ID of the network station are sent to the first PE, so that the first PE is based on the ID of the network station. Updating the tunnel attribute between the first PE and the second PE by the address of the second PE and the second tunnel attribute information, so as to update the communication connection attribute of the target VPC and the network station.

In this way, the communication connection between the target VPC and the network site can be adjusted in real time as needed.

In the embodiment of the present invention, the first tunnel attribute information and the second tunnel attribute information may include a communication tunnel bandwidth value of the network site and the cloud.

The embodiment of the present invention receives the request for creating a VPC, the ID of the network station, and the first tunnel attribute information that are automatically sent by the network site, creates a target VPC according to the request for creating a VPC, connects the target VPC and the first PE, and sends the network to the first PE. The ID of the site and the first tunnel attribute information, so that the first PE obtains the second VPN configuration information and the address of the second PE according to the ID of the network station, and obtains the matched first VPN configuration information according to the second VPN configuration information, and And establishing a VPN connection and a tunnel connection with the second PE according to the first VPN configuration information, the address of the second PE, and the first tunnel attribute information, so as to implement a communication connection between the target VPC and the network site. Since the request message is automatically sent by the network site, it is possible to establish a communication connection in time according to the needs of the network site, thereby improving the connection efficiency.

Another communication connection method 200 provided by the embodiment of the present invention, as shown in FIG. 3, the method 200 may include:

210. Connect to the target VPC in the cloud.

The target VPC is created by the cloud.

220. Receive an ID of the network station sent by the cloud and first tunnel attribute information, where the ID of the network station and the first tunnel attribute information are sent by the network station when the load of the network station is higher than the first load.

The second VPN configuration information is the VPN configuration information of the second PE, and the second PE is the access device of the network station.

The access device may be a network device with a routing function, such as a router.

240. Determine, according to the second VPN configuration information, first VPN configuration information that matches the second VPN configuration information.

The VPN configuration information is related to the type of VPN connection to be established. For example, when you want to build When the VPN connection is a Layer 3 VPN based on Layer 3 VPN, the second VPN configuration information may be information such as an input route target (RT) and an output RT of the network site; when the VPN to be established When the type of the connection is a Virtual Leased Line (VLL) in the Layer 2 VPN, the second VPN configuration information may be a virtual circuit (VC) ID or the like. The address of the second PE may be an IP address of the second PE.

250. Establish a VPN connection and a tunnel connection with the second PE according to the first VPN configuration information, the address of the second PE, and the first tunnel attribute information, so as to implement communication between the target VPC and the network site. connection.

The first VPN configuration information and the second VPN configuration information are divided into different VPN configuration information, which is not limited to the embodiment of the present invention. The execution body of the above 210-250 may be a communication device, which is a network device having a routing function, such as a router or the like.

The communication connection method 200 of the embodiment of the present invention receives the ID of the network site and the first tunnel attribute information sent by the cloud by connecting the target VPC located in the cloud, and acquires the second VPN configuration information and the second PE according to the ID of the network site. And obtaining a matching first VPN configuration information according to the second VPN configuration information, and establishing a VPN connection with the second PE according to the first VPN configuration information, the address of the second PE, and the first tunnel attribute information, and Tunnel connection to achieve communication connection between the target VPC and the network site. Since the ID of the network site and the first tunnel attribute information are automatically sent by the network site, it is possible to establish a communication connection in time according to the needs of the network site, thereby improving the connection efficiency.

In the embodiment of the present invention, optionally, when the second VPN configuration information and the address of the second PE are obtained according to the ID of the network site, the ID of the network site may be applied to query the database for the second VPN configuration. The information and the address of the second PE, the database pre-stores the address of the second PE corresponding to the ID of the network station and the second VPN configuration information corresponding to the ID of the network station.

In this way, the second VPN configuration information and the address of the second PE are automatically obtained from the database according to the ID of the network site, and the connection with the second PE and the cloud is implemented, thereby improving connection efficiency.

In the embodiment of the present invention, the database may store the ID of the network site, the address of the second PE, and the second VPN configuration information in the format shown in Table 1.

Table 1

ID of the network site Second VPN configuration information Address of the second PE In Table 1, the ID of the network site, the second VPN configuration information, and the address of the second PE correspond to each other. The ID of the network site is used to identify the network site, the second VPN configuration information is the VPN configuration information of the second PE, and the address of the second PE may be the IP address of the second PE.

In the embodiment of the present invention, when the second VPN configuration information is the input RT and the output RT of the second PE, when the first VPN configuration information matching the second VPN configuration information is determined in the foregoing 240, the second The input RT of the network site in the VPN configuration information is used as the output RT of the first VPN configuration information, and the output RT of the network site in the second VPN configuration information is used as the input RT of the first VPN configuration information. When the second VPN configuration information is the VC ID, when the first VPN configuration information matching the second VPN configuration information is determined in the foregoing 240, the value of the VC ID in the first VPN configuration information and the second VPN configuration The value of the VC ID in the message is the same.

In the embodiment of the present invention, optionally, when the target VPC located in the cloud is connected, the target VPC may be connected through a VCE located in the cloud.

For example, when connecting to the target VPC through a VCE located in the cloud, local parameters can be set to connect with the VCE located in the cloud. The setting method of the local parameters is similar to the setting method of the VCE parameters in the above 130, please refer to.

As shown in FIG. 4, in the embodiment of the present invention, optionally, after the foregoing 250, the method may further include:

260. Receive an ID of the network station and second tunnel attribute information sent by the cloud.

270. Update a tunnel attribute between the first PE and the second PE according to the ID of the network station, the address of the second PE, and the second tunnel attribute information, so as to update a communication connection between the target VPC and the network station. Attributes.

Specifically, the second tunnel attribute information may include a bidirectional communication tunnel bandwidth value. Similarly, the communication connection herein may be a unidirectional tunnel or a bidirectional tunnel communication connection, or may be a bidirectional tunnel communication connection.

In the embodiment of the present invention, by connecting the target VPC located in the cloud, receiving the ID of the network station and the first tunnel attribute information sent by the cloud, acquiring the second VPN configuration information and the address of the second PE according to the ID of the network station, and according to the second The VPN configuration information is matched with the first VPN configuration information, and is established with the second PE according to the first VPN configuration information, the address of the second PE, and the first tunnel attribute information. The VPN connection and the tunnel connection realize the communication connection between the target VPC and the network site. Since the ID of the network site and the first tunnel attribute information are automatically sent by the network site, it is possible to establish a communication connection in time according to the needs of the network site, thereby improving connection efficiency.

FIG. 5 shows an application scenario of a communication connection method according to an embodiment of the present invention. In FIG. 5, a network site, a carrier network, and a cloud are included. The network site includes a network site management module and a customer site edge device (CE), wherein the network site management module is configured to detect a network site load and send a message to the cloud; the network site CE may be an outlet of the network site data center. The router is connected to the network site PE. The carrier network includes the network site PE, cloud PE and database. The network site PE (second PE) is provided by the operator network, and is used to access the network site to an access device (such as a router) of the operating network, and the network site PE maintains a format as shown in Table 2. Association table. The cloud PE (first PE) is an access device (such as a router) that is provided by the carrier network to connect the cloud to the carrier network. The cloud PE maintains an association table in the format shown in Table 3 (see below). The database is connected to the cloud PE, and the database stores an information table in the format shown in Table 1. The cloud includes a cloud management module, a cloud gateway router (CGR), and a public cloud. The CGR can be an egress router of the cloud and connected to the cloud PE.

The application scenario shown in FIG. 5 is taken as an example, and the specific implementation process of the communication connection method in the embodiment of the present invention is described in detail in conjunction with the interaction process shown in FIG. 6. It should be understood that FIG. 5 is only an application of the embodiment of the present invention. The simplification of the embodiments of the present invention is not to be construed as limiting the embodiments of the present invention. In addition, in FIG. 5, a VPN connection is used as a Layer 3 VPN connection, but the present invention is not limited thereto. For example, the VPN connection may also be a Layer 2 VPN connection.

In the scenario shown in Figure 5, before the network site and the cloud communication connection are implemented, the network site registers the ID of the network site with the operator, and the ID of the network site is used to distinguish different network sites. A VPN instance is set up on the network site PE. The input site RT and output RT (configuration information) are configured on the network site PE, and the ID of the network site and the configuration on the network site PE are saved in the database of the carrier network in the format shown in Table 1. Input RT and output RT (second VPN configuration information) and the address of the network site PE. Record the ID of the network site and the corresponding network site VPN ID in the association table maintained by the network site PE as shown in Table 2, and set the tunnel ID before the tunnel connection. The ID is empty. After the tunnel connection is established, the tunnel ID is recorded in the table. 2 (refer to the method of obtaining the tunnel ID of the reverse tunnel in 507 in FIG. 6 below).

Table 2

Network site ID Network site VPN ID Tunnel ID

In Table 2, the network site ID, network site VPN ID, and tunnel lD correspond to each other. The bidirectional tunnel mentioned in the embodiment of the present invention includes a forward tunnel and a reverse tunnel, and the tunnel of the cloud PE (first PE) to the network site PE (second PE) is a forward tunnel, and the tunnel of the network site PE to the cloud PE For the reverse tunnel.

FIG. 6 is a schematic diagram of information interaction for implementing a communication connection in the scenario of FIG. 5, including:

501. The cloud management module receives a connection request message (first request message) sent by the network site management module, where the connection request message includes a request for creating a VPC (target VPC), a network station ID, and a bidirectional tunnel bandwidth value (first tunnel attribute) Information), the cloud management module creates a VPC (target VPC) based on the request to create a VPC.

For example, an indication field may be added to the connection request message to identify a request to create a VPC, instructing the cloud to create a VPC.

The connection request message is automatically sent by the network site when the load of the network site is higher than the first load, and the bidirectional tunnel bandwidth value includes a forward tunnel bandwidth value and a reverse tunnel bandwidth value.

502. The cloud management module sends the ID of the network station and the bidirectional tunnel bandwidth value to the CGR.

503. The CGR creates a VCE corresponding to the VPC and connects to the cloud PE through the VCE.

At this time, the cloud PE is also connected to the VCE.

504. The CGR sends the ID of the network station and the bandwidth of the bidirectional tunnel to the cloud PE.

Specifically, the CGR may send the ID of the network site and the bidirectional tunnel bandwidth to the cloud PE in the Border Gateway Protocol (BGP) update signaling attribute.

505. The ID of the cloud PE application network site acquires the input RT and output RT of the PE configuration of the network site and the address of the PE of the network site to the database.

506. The input RT and the output RT configured by the PE of the cloud PE application network site (the first VPN configuration information) establishes a VPN instance, generates a cloud VPN ID, connects the VCE with the VPN instance, and maintains an association table in the cloud PE (such as a table). 3 shows the ID of the network site and the cloud VPN ID. In Table 3, the Tunnel ID column is vacant. After the 507 is determined, the tunnel ID is stored in the table.

table 3

Network site ID cloud VPN ID Tunnel ID

In Table 3, the network site ID, cloud VPN ID, and Tunne l ID correspond to each other.

507. The address of the PE of the cloud PE application network station initiates a bidirectional tunnel connection to the network site PE, and applies the bidirectional bandwidth value to determine the bidirectional bandwidth.

The bidirectional tunnel includes a forward tunnel (the cloud PE to the network site PE) and a reverse tunnel (the network site PE to the cloud PE), and correspondingly, the bidirectional tunnel bandwidth value includes the forward tunnel bandwidth value and the reverse direction. Tunnel bandwidth value. For example, the cloud PE creates a forward tunnel. After the forward tunnel is created, the tunnel ID of the forward tunnel is obtained. The entry in the association table (Table 3) maintained by the cloud PE is the entry corresponding to the ID of the network site. After the PE creates the forward tunnel information and reaches the network site PE, the network site PE is triggered to create a reverse tunnel. After the reverse tunnel is created, the network site PE obtains the tunnel ID of the reverse tunnel, and records the association table maintained by the network site PE. In Table 2), the ID of the network site corresponds to the entry.

508. The cloud PE binds the tunnel ID of the forward tunnel to the cloud VPN ID according to the ID of the network site in the association table maintained by the cloud PE (Table 3).

509. The network site PE binds the tunnel ID of the reverse tunnel to the network site VPN ID according to the ID of the network site in the association table maintained by the network site PE (Table 2).

It should be understood that the embodiment of the present invention may also initiate a unidirectional tunnel connection. For the specific implementation method, refer to the above bidirectional tunnel connection method, and details are not described herein.

At this point, the communication connection between the VPC and the data center of the network site is realized.

In addition, in the embodiment of the present invention, after the bidirectional tunnel connection is established between the cloud PE and the network site PE, the bidirectional tunnel connection may be updated according to the bandwidth value of the new bidirectional tunnel according to the request of the network site. Please refer to Figure 7, including:

601. The cloud management module receives an update request message (second request message) sent by the network site management module, where the update request message includes a request for updating the bidirectional tunnel (request to update the communication connection), a network station ID, and a bidirectional tunnel bandwidth value ( Second tunnel attribute information).

For example, an indication field may be added to the update request message to identify a request to update the bidirectional tunnel, instructing the cloud to update the bidirectional tunnel. The update request message is sent when the network station detects that the tunnel bandwidth needs to be changed, or is sent by the network station according to the instruction. The bidirectional tunnel bandwidth value may include a forward tunnel bandwidth value and a reverse tunnel bandwidth value.

After receiving the request for the bidirectional tunnel bandwidth, execute 602.

602. The cloud management module sends the ID of the network station and the bidirectional tunnel bandwidth value to the CGR.

603. The CGR sends the ID of the network station and the bandwidth of the bidirectional tunnel to the cloud PE.

Similarly, the CGR can carry the ID of the network station and the bidirectional tunnel bandwidth value in the extended BGP update signaling attribute to the cloud PE.

604. The cloud PE queries the tunnel ID of the forward tunnel corresponding to the ID of the network site according to the ID of the network site in the local maintenance association table (Table 3), and changes the forward tunnel bandwidth value in the bidirectional tunnel bandwidth value. The bandwidth of the forward tunnel. 605. The cloud PE sends the ID of the network station and the reverse tunnel bandwidth value to the network site PE. Specifically, the cloud PE may send the ID of the network station and the reverse tunnel bandwidth value to the network site PE by using the Resource Reservation Protocol (Traffic Engineering, RSVP-TE) signaling.

606. The network site PE queries the local tunnel maintenance association table (Table 2) through the ID of the network site to query the tunnel ID of the reverse tunnel corresponding to the ID of the stored network site, and changes the bandwidth of the reverse tunnel according to the reverse tunnel bandwidth value. .

So far, the two-way tunnel connection between the cloud PE and the network site PE is updated.

In the embodiment of the present invention, the network site automatically sends a request for creating a VPC, a network site ID, and a bidirectional tunnel bandwidth value to the cloud, and the cloud creates a target VPC according to the request for creating a VPC, connects the target VPC and the cloud PE, and sends the network site to the cloud PE. ID and first tunnel attribute information, the cloud PE obtains the input RT and the output RT of the network site PE and the address of the second PE according to the ID of the network site, and establishes a VPN according to the input RT and the output RT configured by the network site PE, and according to the The VPN, the address of the network site PE, and the bandwidth of the bidirectional tunnel establish a VPN connection and a tunnel connection with the network site PE to implement a communication connection between the target VPC and the network site. Since the request message is automatically sent by the network site, it is possible to establish a communication connection in time according to the needs of the network site, thereby improving the connection efficiency. In addition, the embodiment of the present invention can also adjust the communication connection between the target VPC and the network site in real time as needed.

As shown in FIG. 8, the embodiment of the present invention provides a cloud device, which may include: a first receiving module 810, a creating module 820, a connecting module 830, and a first sending module 840, where:

The first receiving module 810 is configured to receive a first request message sent by the network site when the load of the network site is higher than the first load, where the first request message includes a request for creating a VPC, an ID of the network station, and first tunnel attribute information.

A module 820 is created for creating a target VPC based on the request to create a VPC.

The connection module 830 is configured to connect the target VPC and the first PE.

The first sending module 840 is configured to send the ID of the network station and the first tunnel attribute information to the first PE, so that the first PE acquires the second VPN configuration information and the address of the second PE according to the ID of the network station, and according to the second The VPN configuration information obtains the matched first VPN configuration information, and establishes a VPN connection and a tunnel connection with the second PE according to the first VPN configuration information, the address of the second PE, and the first tunnel attribute information, thereby implementing the target VPC. The communication connection with the network site, the second VPN configuration information is the VPN configuration information of the second PE, and the second PE is the access device of the network site. Preferably, as shown in FIG. 9, the connection module 830 can include:

Creating a unit 831, configured to create a VCE corresponding to the target VPC;

The connecting unit 832 is configured to connect the first PE by using the VCE.

Preferably, as shown in FIG. 10, another cloud device in the embodiment of the present invention may further include: a second receiving module 850 and a second sending module 860, where:

The second receiving module 850 is configured to receive a second request message sent by the network station, where the second request message includes a request for updating the communication connection, the second tunnel attribute information, and an ID of the network station.

The second sending module 860 is configured to: after determining that the network station needs to update the communication connection according to the request for updating the communication connection, send the second tunnel attribute information and the ID of the network station to the first PE, so that the first PE is based on the ID of the network station, The address of the second PE and the second tunnel attribute information are used to update the tunnel attribute between the first PE and the second PE, thereby updating the communication connection attribute of the target VPC and the network station.

The components of the cloud device of the embodiment of the present invention may be distributed among different devices, or may be integrated into the same device, and multiple modules may be used in combination, and a single module may also be used separately or separately, and can implement respective functions. Just fine. For example, the first receiving module 810 and the creating module 820 can be combined into the cloud management module in FIG. 5 to implement corresponding functions. The functions of the modules in the cloud device are only described briefly. For a detailed description, refer to the embodiment of the communication connection method 100. The cloud device may perform the corresponding steps in the foregoing embodiment of the communication connection method 100.

The cloud device of the embodiment of the present invention receives a request message for automatically creating a VPC request, a network site ID, and a first tunnel attribute information, and creates a target VPC according to the request for creating a VPC, and connects the target VPC and the first PE. Sending the ID of the network station and the first tunnel attribute information to the first PE, so that the first PE obtains the second VPN configuration information and the address of the second PE according to the ID of the network station, and obtains the matching according to the second VPN configuration information. a VPN configuration information, and establishing a VPN connection and a tunnel connection with the second PE according to the first VPN configuration information, the address of the second PE, and the first tunnel attribute information, so as to implement a communication connection between the target VPC and the network site. Since the request message is automatically sent by the network site, it is possible to establish a communication connection in time according to the needs of the network site, thereby improving the connection efficiency.

As shown in FIG. 11, the embodiment of the present invention provides a communication device, which may include: a first connection module 910, a first receiving module 920, an obtaining module 930, a determining module 940, and a second connecting module 950, where: The first connection module 910 is configured to connect to the target VPC located in the cloud.

The first receiving module 920 is configured to receive an ID of the network station and the first tunnel attribute information sent by the cloud, where the ID of the network station and the first tunnel attribute information are when the load of the data center of the network site at the network site is higher than the first load. send.

The obtaining module 930 is configured to obtain the second VPN configuration information according to the ID of the network site, and the second

The address of the PE, the second VPN configuration information is the VPN configuration information of the second PE, and the second PE is the access device of the network site.

The determining module 940 is configured to determine, according to the second VPN configuration information, first VPN configuration information that matches the second VPN configuration information.

The second connection module 950 is configured to establish a VPN connection and a tunnel connection with the second PE according to the first VPN configuration information, the address of the second PE, and the first tunnel attribute information, so as to implement communication between the target VPC and the network site. connection.

Preferably, the obtaining module 930 is specifically configured to: query an ID of the application site, query the database for the second VPN configuration information and the address of the second PE, and the address of the second PE corresponding to the ID of the database pre-stored network site and the network site The second VPN configuration information corresponding to the ID.

Preferably, as shown in FIG. 12, another cloud device in the embodiment of the present invention may further include: a second receiving module 960 and a third connecting module 970, where:

The second receiving module 960 is configured to receive an ID of the network station and a second tunnel attribute information sent by the cloud.

The third connection module 970 is configured to update a tunnel attribute between the first PE and the second PE according to the ID of the network station, the address of the second PE, and the second tunnel attribute information, so as to update the communication connection attribute between the target VPC and the network site. .

Preferably, the first receiving module is connected to the target VPC through a VCE located in the cloud.

The communication device in the embodiment of the present invention may be a network device with a routing function, such as a router. In addition, the component modules of the communication device may be distributed among different devices, or may be integrated into the same device, and multiple modules may be used in combination, and a single module may also be used separately or separately, and the respective functions can be realized. .

The functions of the modules in the above communication device are only briefly described. For a detailed description, refer to the embodiment of the communication connection method 200 described above. In addition, the communication device may perform the corresponding steps in the embodiment of the communication connection method 200. The communication device of the embodiment of the present invention, by connecting the target VPC located in the cloud, receives the ID of the network site and the first tunnel attribute information sent by the cloud, and obtains the second VPN configuration information and the address of the second PE according to the ID of the network site, and And obtaining a matching first VPN configuration information according to the second VPN configuration information, and establishing a VPN connection and a tunnel connection with the second PE according to the first VPN configuration information, the address of the second PE, and the first tunnel attribute information, to implement A communication connection between the target VPC and the network site. Since the ID of the network site and the first tunnel attribute information are automatically sent by the network site, it is possible to establish a communication connection in time according to the needs of the network site, thereby improving connection efficiency. As shown in FIG. 13, an embodiment of the present invention provides a communication system, including: a cloud device S1 and a communication device S2, where:

The cloud device S1 may be configured to receive a first request message sent by the network site when the load of the network site is higher than the first load, where the first request message includes a request for creating a VPC, an identifier ID of the network station, and the first tunnel attribute information. The target VPC is created according to the request for creating the VPC; the target VPC and the first PE are connected; the ID of the network station and the first tunnel attribute information are sent to the first PE, so that the first PE obtains the second VPN configuration information according to the ID of the network station and An address of the second PE, and determining, according to the second VPN configuration information, the first VPN configuration information that matches the second VPN configuration information, and establishing, according to the first VPN configuration information, the address of the second PE, and the first tunnel attribute information. The VPN connection and the tunnel connection with the second PE, so as to realize the communication connection between the target VPC and the network site, the second VPN configuration information is the VPN configuration information of the second PE, and the second PE is the access device of the network site.

The communication device S2 may be configured to connect to a target VPC located in the cloud; receive an ID of the network station sent by the cloud, and first tunnel attribute information, where the ID of the network station and the first tunnel attribute information are used by the network station And sending, when the load of the network site is higher than the first load, obtaining the second VPN configuration information and the address of the second PE according to the ID of the network site, where the second VPN configuration information is the VPN configuration information of the second PE The second PE is an access device of the network site; determining, according to the second VPN configuration information, first VPN configuration information that matches the second VPN configuration information; according to the first VPN configuration information. The address of the second PE and the first tunnel attribute information establish a VPN connection and a tunnel connection with the second PE, so as to implement a communication connection between the target VPC and the network site.

Specifically, the component modules of the cloud device S1 and the specific functions of the modules are the same as those of the cloud device in the embodiment of the present invention. The component modules of the communication device S2, and the specifics of each module The function is the same as that of the above-described communication device of the embodiment of the present invention, please refer to it.

In the communication system of the embodiment of the present invention, the cloud device receives the request for creating a VPC, the ID of the network station, and the first tunnel attribute information that are automatically sent by the network station, and creates a target VPC according to the request for creating a VPC, and connects the target VPC with the first PE. The first PE sends the ID of the network station and the first tunnel attribute information, so that the first PE obtains the second VPN configuration information and the address of the second PE according to the ID of the network station, and obtains the first matching according to the second VPN configuration information. The VPN configuration information is used to establish a VPN connection and a tunnel connection with the second PE according to the first VPN configuration information, the address of the second PE, and the first tunnel attribute information, so as to implement a communication connection between the target VPC and the network site. Since the request message is automatically sent by the network site, it is possible to establish a communication connection in time according to the needs of the network site, thereby improving connection efficiency.

As shown in FIG. 14, an embodiment of the present invention further provides a cloud device, which may include: a bus 144 and an interface 141 connected to the bus 144, a processor 142, and a memory 143, where:

The interface 141 is configured to receive a first request message sent by the network site when the load of the network site is higher than the first load, where the first request message includes a request for creating a VPC, an ID of the network station, and first tunnel attribute information;

The memory 143 is used to store instructions, and the processor 142 executes instructions in the memory 143 for creating a target VPC according to the request to create a VPC; connecting the target VPC with the first PE; transmitting the ID of the network site and the first tunnel attribute information to the first PE The first PE obtains the second VPN configuration information and the address of the second PE according to the ID of the network site, and determines, according to the second VPN configuration information, the first VPN configuration information that matches the second VPN configuration information, and according to the first The VPN configuration information, the address of the second PE, and the first tunnel attribute information establish a VPN connection and a tunnel connection with the second PE, so as to implement a communication connection between the target VPC and the network site, and the second VPN configuration information is the second PE. VPN configuration information, the second PE is an access device of the network site.

Preferably, the processor 142 executes the instructions in the memory 143 for connecting to the VPC and the first PE, including: creating a VCE corresponding to the target VPC; and connecting the first PE by using the VCE.

Preferably, the processor 142 executes instructions in the memory 143 for receiving a second request message sent by the network station, where the second request message includes a request to update the communication connection, the second tunnel attribute information, and the ID of the network site; The request for the communication connection determines that the network station needs to update the communication connection, and sends the second tunnel attribute information and the ID of the network station to the first PE, so that the first PE is based on the ID of the network station, the address of the second PE, and the second tunnel attribute information. Updating the tunnel attribute between the first PE and the second PE, Thereby updating the communication connection attribute of the target VP c and the network site.

The cloud device of the embodiment of the present invention receives a request message for automatically creating a VPC request, a network site ID, and a first tunnel attribute information, and creates a target VPC according to the request for creating a VPC, and connects the target VPC and the first PE. Sending the ID of the network station and the first tunnel attribute information to the first PE, so that the first PE obtains the second VPN configuration information and the address of the second PE according to the ID of the network station, and obtains the matching according to the second VPN configuration information. a VPN configuration information, and establishing a VPN connection and a tunnel connection with the second PE according to the first VPN configuration information, the address of the second PE, and the first tunnel attribute information, so as to implement a communication connection between the target VPC and the network site. Since the request message is automatically sent by the network site, it is possible to establish a communication connection in time according to the needs of the network site, thereby improving the connection efficiency. As shown in FIG. 15, an embodiment of the present invention further provides a communication device, which may include: a bus 154 and an interface 151, a processor 152, and a memory 153 connected to the bus 154, where:

The interface 151 is configured to receive the ID of the network station and the first tunnel attribute information sent by the cloud, where the ID of the network station and the first tunnel attribute information are sent by the network station when the load of the network site is higher than the first load;

The memory 153 is used to store instructions, the processor 152 executes instructions in the memory 153 for connecting to the target VPC located in the cloud, and obtains the second VPN configuration information and the address of the second PE according to the ID of the network station. The second VPN configuration information is The VPN configuration information of the second PE, the second PE is an access device of the network site; determining, according to the second VPN configuration information, the first VPN configuration information that matches the second VPN configuration information; according to the first VPN configuration information, the second PE The address and the first tunnel attribute information establish a VPN connection and a tunnel connection with the second PE, thereby implementing a communication connection between the target VPC and the network site.

Preferably, the processor 152 executes the instruction in the memory 153 for acquiring the second VPN configuration information according to the ID of the network site and the address of the second PE, including: the ID of the application site, and querying the database for the second VPN configuration information and The address of the second PE, the address of the second PE corresponding to the ID of the database pre-stored network site, and the second VPN configuration information corresponding to the ID of the network site.

Preferably, the processor 152 executes the instruction in the memory 153 to receive the ID of the network station and the second tunnel attribute information sent by the cloud; and updates according to the ID of the network station, the address of the second PE, and the second tunnel attribute information. The tunnel attribute between the first PE and the second PE, thereby updating the target VPC and the network The communication connection properties of the site.

Preferably, the processor 152 executing the instructions in the memory 153 for connecting to the target VPC located in the cloud comprises: connecting the target VPC through the VCE located in the cloud.

The communication device of the embodiment of the present invention receives the ID of the network site and the first tunnel attribute information sent by the cloud by connecting the target VPC located in the cloud, and obtains the second VPN configuration information and the address of the second PE according to the ID of the network site, and And obtaining a matching first VPN configuration information according to the second VPN configuration information, and establishing a VPN connection and a tunnel connection with the second PE according to the first VPN configuration information, the address of the second PE, and the first tunnel attribute information, to implement A communication connection between the target VPC and the network site. Since the ID of the network site and the first tunnel attribute information are automatically sent by the network site, it is possible to establish a communication connection in time according to the needs of the network site, thereby improving the connection efficiency. It should be noted that, in the description, the data transmitting apparatus and the data receiving apparatus provided in the above embodiments are merely exemplified by the division of the above functional modules. In actual applications, the functions may be assigned different functions as needed. The module is completed, that is, the internal structure of the device is divided into function modules for dialing to complete all or part of the above functions. In addition, the device provided by the foregoing embodiment is the same as the corresponding method, and the specific implementation process is described in detail in the method embodiment, and details are not described herein again.

A person skilled in the art may understand that all or part of the steps of implementing the above embodiments may be completed by hardware, or may be instructed by a program to execute related hardware, and the program may be stored in a computer readable storage medium. The storage medium mentioned may be a read only memory, a magnetic disk or an optical disk or the like.

The various embodiments in the specification are described in a progressive manner, and the same or similar parts of the various embodiments may be referred to each other, and each embodiment focuses on the differences from the other embodiments. In particular, for the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the description of the method embodiment. The device embodiments described above are merely illustrative, wherein the units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, ie may be located One place, or it can be distributed to multiple network elements. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution of the embodiment. Those of ordinary skill in the art can understand and implement without any creative effort.

One of ordinary skill in the art will recognize the various aspects described in connection with the embodiments disclosed herein. The unit and algorithm steps of the example can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the solution. A person skilled in the art can use different methods to implement the described functions for each particular application, but such implementation should not be considered to be beyond the scope of the present invention.

A person skilled in the art can clearly understand that, for the convenience and brevity of the description, the specific working process of the system, the device and the unit described above can refer to the corresponding process in the foregoing method embodiment, and details are not described herein again.

In the several embodiments provided herein, it should be understood that the disclosed systems, devices, and methods may be implemented in other ways. For example, the device embodiments described above are merely illustrative. For example, the division of the unit is only a logical function division. In actual implementation, there may be another division manner, for example, multiple units or components may be combined or Can be integrated into another system, or some features can be ignored, or not executed. In addition, the mutual coupling or direct coupling or communication connection shown or discussed may be an indirect coupling or communication connection through some interface, device or unit, and may be electrical, mechanical or otherwise.

The units described as separate components may or may not be physically separate, and the components displayed as the units may or may not be physical units, that is, may be located in one place, or may be distributed to multiple network units. Some or all of the units may be selected according to actual needs to achieve the objectives of the solution of the embodiment.

In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

The functions may be stored in a computer readable storage medium if implemented in the form of a software functional unit and sold or used as a standalone product. Based on such understanding, the technical solution of the present invention, which is essential or contributes to the prior art, or a part of the technical solution, may be embodied in the form of a software product, which is stored in a storage medium, including The instructions are used to cause a computer device (which may be a personal computer, server, or network device, etc.) to perform all or part of the steps of the methods described in various embodiments of the present invention. The foregoing storage medium includes: a U disk, a removable hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, and the like, which can store program codes. . Through the description of the above embodiments, those skilled in the art can clearly understand that the present invention can be implemented by means of software plus necessary general hardware including general-purpose integrated circuits, general-purpose CPUs, general-purpose memories, general-purpose components, and the like. Of course, it can also be realized by dedicated hardware including an application specific integrated circuit, a dedicated CPU, a dedicated memory, a dedicated component, etc., but in many cases, the former is a better implementation. Based on such understanding, the technical solution of the present invention, which is essential or contributes to the prior art, may be embodied in the form of a software product stored in a readable storage medium, such as a floppy disk of a computer. A hard disk or optical disk, etc., includes instructions for causing a computer device (which may be a personal computer, server, or network device, etc.) to perform the methods of various embodiments of the present invention.

The above are only the preferred embodiments of the present invention, and are not intended to limit the present invention. Any modifications, equivalents, improvements, etc., which are within the spirit and scope of the present invention, should be included in the scope of the present invention. Inside.

Claims

A communication connection method, comprising:

Receiving, by the network site, a first request message sent when the load of the network site is higher than the first load, where the first request message includes a request for creating a virtual private cloud VPC, an identifier ID of the network site, and a first tunnel attribute. Information

Creating a target VPC according to the request to create a VPC;

Connecting the target VPC and the first carrier edge device PE;

Sending the ID of the network station and the first tunnel attribute information to the first PE, so that the first PE acquires the second virtual private network VPN configuration information and the address of the second PE according to the ID of the network station. Determining, according to the second VPN configuration information, first VPN configuration information that matches the second VPN configuration information, and according to the first VPN configuration information, the address of the second PE, and the first The tunnel attribute information is used to establish a VPN connection and a tunnel connection with the second PE, so as to implement a communication connection between the target VPC and the network site, where the second VPN configuration information is the VPN of the second PE. Configuration information, where the second PE is an access device of the network site.

2. The method according to claim 1, wherein the connecting the target VPC and the first carrier edge device PE comprises:

Creating a virtual user edge device VCE corresponding to the target VPC;

The first PE is connected through the VCE.

The method according to claim 1 or 2, further comprising:

Receiving a second request message sent by the network station, where the second request message includes a request for updating a communication connection, second tunnel attribute information, and an ID of the network station;

After determining, by the request for updating the communication connection, that the network station needs to update the communication connection, sending the second tunnel attribute information and the ID of the network station to the first PE, so that the first PE is configured according to the Updating the tunnel attribute between the first PE and the second PE by the ID of the network station, the address of the second PE, and the second tunnel attribute information, thereby updating the target VPC and the network site Communication connection properties.

4. A communication connection method, comprising:

Connecting a target virtual private cloud VPC located in the cloud;

Receiving an identifier ID of the network site sent by the cloud and first tunnel attribute information, where the ID of the network site and the first tunnel attribute information are higher than the first negative load of the network site at the network site Send time;

Obtaining the second virtual private network VPN configuration information and the address of the second carrier edge device PE according to the ID of the network site, where the second VPN configuration information is the VPN configuration information of the second PE, the second PE An access device for the network site;

Determining, according to the second VPN configuration information, first VPN configuration information that matches the second VPN configuration information;

Establishing a VPN connection and a tunnel connection with the second PE according to the first VPN configuration information, the address of the second PE, and the first tunnel attribute information, thereby implementing the target VPC and the network Communication connection between sites.

5. The method according to claim 4, wherein the according to the network site

The ID obtains the second VPN configuration information and the address of the second PE, including:

Applying the ID of the network site to query the database for the second VPN configuration information and the address of the second PE, where the database prestores the address of the second PE corresponding to the ID of the network site, and the The second VPN configuration information corresponding to the ID of the network site.

The method according to claim 4 or 5, further comprising:

Receiving the ID of the network station and the second tunnel attribute information sent by the cloud;

Updating a tunnel attribute between the first PE and the second PE according to the ID of the network station, the address of the second PE, and the second tunnel attribute information, thereby updating the target VPC and the The communication connection properties of the network site.

The method according to claim 4, wherein the connecting the target virtual private cloud VPC located in the cloud comprises:

The target VPC is connected through a virtual user edge device VCE located in the cloud.

8. A cloud device, comprising:

a first receiving module, configured to receive a first request message sent by the network site when the load of the network site is higher than the first load, where the first request message includes a request for creating a virtual private cloud VPC, and the network site Identification ID and first tunnel attribute information;

a creating module, configured to create a target VPC according to the request for creating a VPC;

a connection module, configured to connect the target VPC and the first carrier edge device PE;

a first sending module, configured to send the ID of the network station and the first tunnel attribute information to the first PE, so that the first PE acquires a second virtual private network VPN according to the ID of the network station Configuring the information and the address of the second PE, and determining the first VPN configuration information that matches the second VPN configuration information according to the second VPN configuration information, and according to the first VPN configuration information, the second Establishing a VPN connection and a tunnel connection with the second PE by using the address of the PE and the first tunnel attribute information, so as to implement a communication connection between the target VPC and the network site, where the second VPN configuration information is For the VPN configuration information of the second PE, the second PE is an access device of the network site.

The device according to claim 8, wherein the connection module comprises: a creating unit, configured to create a virtual user edge device VCE corresponding to the target VPC;

a connecting unit, configured to connect the first PE by using the VCE.

The device according to claim 8 or 9, further comprising:

a second receiving module, configured to receive a second request message sent by the network station, where the second request message includes a request for updating a communication connection, second tunnel attribute information, and an ID of the network station; After determining that the network station needs to update the communication connection according to the request for updating the communication connection, sending the second tunnel attribute information and the ID of the network station to the first PE, so that the first PE is configured according to the first PE Updating the tunnel attribute between the first PE and the second PE by the ID of the network station, the address of the second PE, and the second tunnel attribute information, thereby updating the target VPC and the network The communication connection properties of the site.

A communication device, comprising:

a first connection module, configured to connect to a target virtual private cloud VPC located in the cloud;

a first receiving module, configured to receive an identifier ID of the network site sent by the cloud, and first tunnel attribute information, where the ID of the network station and the first tunnel attribute information are used by the network site at the network site Send when the load is higher than the first load;

An obtaining module, configured to acquire, according to the ID of the network site, the second virtual private network VPN configuration information and the address of the second carrier edge device PE, where the second VPN configuration information is the VPN configuration information of the second PE, The second PE is an access device of the network site;

a determining module, configured to determine, according to the second VPN configuration information, first VPN configuration information that matches the second VPN configuration information;

a second connection module, configured to establish a VPN connection and a tunnel connection with the second PE according to the first VPN configuration information, the address of the second PE, and the first tunnel attribute information, so as to implement A communication connection between the target VPC and the network site. The device according to claim 11, wherein the acquiring module is specifically configured to: apply an ID of the network site, and query the database for the second VPN configuration information and the address of the second PE. And the database pre-stores the address of the second PE corresponding to the ID of the network station and the second VPN configuration information corresponding to the ID of the network station.

The device according to claim 11 or 12, further comprising:

a second receiving module, configured to receive the ID of the network station and the second tunnel attribute information sent by the cloud;

a third connection module, configured to update a tunnel attribute between the first PE and the second PE according to an ID of the network station, an address of the second PE, and the second tunnel attribute information, so as to update The communication connection attribute of the target VPC with the network site.

The device according to claim 11, wherein the first connection module is specifically configured to connect the target VPC through a virtual user edge device VCE located in the cloud.

A communication system, comprising: the cloud device according to any one of claims 8 to 10, and the communication device according to any one of claims 11-14.