WO2014075527A1

WO2014075527A1 - Method, device and system for performing redundancy backup among network virtualization edge devices

Info

Publication number: WO2014075527A1
Application number: PCT/CN2013/085263
Authority: WO
Inventors: 胡方伟
Original assignee: 中兴通讯股份有限公司
Priority date: 2012-11-16
Filing date: 2013-10-15
Publication date: 2014-05-22
Also published as: CN103825815A; CN103825815B

Abstract

Provided are a method, system and content server for performing redundancy backup among network virtualization edge devices, and a network virtualization edge device. The system comprises one or more network virtualization edge redundancy groups of the network virtualization edge device. The method comprises: a content server receiving a registration message sent by the network virtualization edge device, the registration message carrying an inner layer address, an outer layer address, and a group ID of the network virtualization edge device and tenant information about the network virtualization edge device; and the content server notifying other network virtualization edge devices in the network virtualization edge redundancy group to which the network virtualization edge device belongs, of the information carried in the registration message according to the group ID. The system can achieve the performance of redundancy backup among network virtualization edge devices, thereby being beneficial to the load balance of a cloud computing data centre network, and improving the system reliability and stability.

Description

Method, device and system for redundant backup between network virtual border devices

The present invention relates to the field of communications technologies, and in particular, to a method, device, and system for performing redundancy backup between network virtual border (NVE) devices. Background technique

The cloud computing data center network is very different from the traditional data center network. The cloud computing data center network is first larger than the traditional data center network, so the traditional two-layer technology has scalability in the cloud computing data center network. In addition, cloud computing will use a large number of virtualization technologies. For a cloud computing data center, one server can virtualize multiple virtual machines, and each virtual machine is assigned a virtual media access control (MAC). Addresses, and because of the requirements for disaster recovery backups and traffic load balancing between data centers, virtual machines may migrate between one data center and even across data centers.

Figure 1 is a network structure diagram of a cloud computing data center network virtualization overlay network. In the figure, NVE is a network virtual boundary. User data encapsulates the original data on the device or function block, and the encapsulated data depends on the intermediate overlay network. Data transmission, on the NVE device, you need to save the mapping relationship between the partial or global outer address and the inner address. For example, the overlay network can be superimposed with two layers (1^^ 2 0¥61" 1^^3 ) on the three layers. The inner layer encapsulates the packet as an Ethernet packet, and the inner layer packet address is the MAC address. The outer layer is the network layer packet header, and the outer address is the IP address. In order to realize the identification of the protocol stack, the user data is encapsulated between the outer network layer and the inner layer Ethernet layer (User Datagram Protocol, UDP). The header of the packet can also be encapsulated in the form of a TCP packet header. The data is transmitted in the overlay network depending on the IP address for routing. The implementation of the overlay network solves the scalability problem of the traditional Layer 2 data center network and implements Network interoperability across data centers, rapid migration of VMs, and more. In the structural design of this network, the reliable operation of NVE is very important for the reliability of the network. Based on the existing technology, it is not feasible to implement redundant backup between network virtual border devices, which is not conducive to the realization of cloud computing data center network. The load is balanced, and if an NVE device fails, users accessing the NVE device will not be able to continue communicating with other terminals, which will affect system reliability and stability. Summary of the invention

In view of this, the main purpose of the embodiments of the present invention is to provide a method, a device, and a system for performing redundancy backup between network virtual border devices, which can implement redundancy backup between network virtual border devices, thereby facilitating cloud computing data centers. Load balancing of the network, as well as improved system reliability and stability.

To achieve the above objective, the technical solution of the embodiment of the present invention is implemented as follows:

A method for performing redundancy backup between network virtual border devices, where one or more network virtual border devices form a network virtual boundary redundancy group, and each network virtual boundary redundancy group corresponds to a group ID, and the method includes:

The directory server receives the message sent by the network virtual border device, where the message carries the address of the network virtual border device, the group ID, and the tenant information of the network virtual border device; the directory server according to the group ID, The information carried by the message is notified to other network virtual border devices in the network virtual boundary redundancy group to which the network virtual border device belongs.

The tenant information includes one or more of the following: a tenant ID, a tenant status.

The method further includes: configuring a virtual address for the network virtual border device, and the network virtual border device performs packet processing according to the virtual address.

The virtual address configured for the network virtual border device is: manually configured or automatically assigned by the directory server.

In the scenario of manually configuring a virtual address, the registration message also carries the virtual address of the network virtual border device. The virtual address is an anycast address.

The method also includes:

When the tenant information of the network virtual border device changes, the changed tenant information is notified by the directory server to other network virtual border devices in the network virtual boundary redundancy group to which the network virtual border device belongs.

The group ID is a virtual address.

A directory server, comprising: a receiving module and a notification module; wherein

The receiving module is configured to receive a message sent by the network virtual border device, where the message carries an address, a group ID, and tenant information of the network virtual border device;

The notification module is configured to notify, according to the group ID, the message carrying information to other network virtual border devices in the network virtual boundary redundancy group to which the network virtual border device belongs.

The directory server also includes a configuration module.

The configuration module is configured to configure a virtual address for the network virtual border device.

The receiving module is further configured to receive the changed tenant information sent by the network virtual border device;

The notification module is further configured to notify the changed tenant information to other network virtual border devices in the network virtual boundary redundancy group to which the network virtual border device belongs.

A network virtual border device, including a sending module and a receiving module, where the sending module is configured to send a message to a directory server, where the message carries an address, a group ID, and the network virtual boundary of the network virtual border device Tenant information of the device;

The receiving module is configured to receive information about other network virtual border devices notified by the directory server.

The network virtual border device further includes a message processing module, where

The packet processing module is configured to perform packet processing according to the configured virtual address.

The sending module is further configured to send a change to the directory server when the tenant information changes. After-time tenant information;

The receiving module is further configured to receive the changed tenant information of other network virtual border devices notified by the directory server.

A system for performing redundancy backup between network virtual border devices, comprising a directory server and one or more network virtual border devices; wherein the directory server is the directory server; the network virtual border device is the network virtual border device .

The method, device and system for performing redundancy backup between network virtual border devices in the embodiment of the present invention, one or more network virtual border devices form a network virtual boundary redundancy group, and each network virtual boundary redundancy group corresponds to a group ID The directory server receives the message sent by the network virtual border device, where the message carries the address of the network virtual border device, the group ID, and the tenant information of the network virtual border device; the directory server according to the group ID The information carried in the message is notified to other network virtual border devices in the network virtual boundary redundancy group to which the network virtual border device belongs. Through the solution of the invention, redundancy backup between network virtual border devices can be realized, thereby facilitating load balancing of the cloud computing data center network, and improving system reliability and stability. DRAWINGS

Figure 1 is a network structure diagram of a cloud computing data center network virtualization overlay network;

2 is a schematic flowchart of a method for performing redundancy backup between network virtual border devices according to an embodiment of the present invention;

3 is a schematic structural diagram of a directory server according to an embodiment of the present invention;

4 is a schematic structural diagram of a network virtual border device according to an embodiment of the present invention;

FIG. 5 is a schematic diagram of a network structure of network virtual border protection according to Embodiment 1 of the present invention; FIG. 6 is a schematic diagram of a network structure of network virtual border protection according to Embodiment 2 of the present invention. detailed description

The basic idea of the embodiment of the present invention is: one or more network virtual border devices form a network virtual boundary redundancy group, each network virtual boundary redundancy group corresponds to a group ID, and the directory server receives the message sent by the network virtual border device. The message carries the address of the network virtual border device, the group ID, and the tenant information of the network virtual border device. The directory server notifies the network virtual information according to the group ID. Other network virtual border devices in the network virtual boundary redundancy group to which the border device belongs.

The embodiment of the invention provides a method for performing redundancy backup between network virtual border devices. As shown in FIG. 2, the method includes:

Step 201: The directory server receives a message sent by the network virtual border device, where the message carries the address of the network virtual border device, the group ID, and the tenant information of the network virtual border device.

In order to implement the present invention, a network virtual boundary redundancy group needs to be set, and each network virtual boundary redundancy group includes one or more network virtual border devices, and each network virtual boundary redundancy group corresponds to one group ID.

In addition, a virtual address is assigned to the network virtual border redundancy group to identify the network virtual border redundancy group. Correspondingly, the network virtual border device in the network virtual boundary redundancy group performs the message processing according to the virtual address. It should be noted that the virtual address and the group ID can also be unified, that is, the virtual network address distinguishes different network virtual boundary redundancy groups.

Here, the virtual address configured for the network virtual border device is: manually configured or automatically allocated by the directory server.

In the scenario of manually configuring a virtual address, the message further carries a virtual address of the network virtual border device.

The virtual address may be anycast IP address (anycast address) or other globally unique IP address. Optionally, the tenant information includes one or more of the following: a tenant ID, a tenant status. Step 202: The directory server notifies the information carried by the message to other network virtual border devices in the network virtual boundary redundancy group to which the network virtual border device belongs according to the group ID.

Optionally, the method further includes: when the tenant information of the network virtual border device changes, notifying, by the directory server, the changed tenant information to other network virtual boundaries in the network virtual boundary redundancy group to which the network virtual border device belongs device.

In the embodiment of the present invention, members in the network virtual boundary redundancy group synchronize the user information in the network virtual border device group by using information exchange with the directory server, for example, when members in the group find new user address information (tenants) ID), the directory server is used to realize the notification of the user address to other members in the group, and the information sharing of the user address information in the network virtual boundary redundancy group is realized. In this way, when a member of the virtual boundary group fails, because other members in the group have saved the user address and status information, the traffic can be quickly switched to other members in the group, thereby facilitating load balancing of the cloud computing data center network, and Increased system reliability and stability.

The embodiment of the present invention further provides a directory server. As shown in FIG. 3, the directory server includes: a receiving module and a notification module;

The notification module is configured to notify, according to the group ID, the information carried by the message to other network virtual border devices in the network virtual boundary redundancy group to which the network virtual border device belongs.

Optionally, the directory server further includes a configuration module.

Optionally, the receiving module is further configured to receive the changed tenant information sent by the network virtual border device; The notification module is further configured to notify the changed tenant information to other network virtual border devices in the network virtual boundary redundancy group to which the network virtual border device belongs.

In addition, the receiving module and the notification module may be implemented by hardware having a communication function in the directory server; the configuration module may be a central processor in the directory server.

(CPU, Central Processing Unit), processor (MPU, Micro Processing Unit), digital signal processor (DSP), or Field-Programmable Gate Array (FPGA).

The embodiment of the present invention further provides a network virtual border device. As shown in FIG. 4, the network virtual border device includes a sending module and a receiving module.

The sending module is configured to send a message to the directory server, where the message carries an address, a group ID, and tenant information of the network virtual border device of the network virtual border device;

And the receiving module is configured to receive information about other network virtual border devices in the network virtual boundary redundancy group of the network virtual border device that is notified by the directory server.

Optionally, the network virtual border device further includes a packet processing module, where

Optionally, the sending module is further configured to send the changed tenant information to the directory server when the tenant information changes;

The receiving module is further configured to receive the tenant information of the other network virtual border device in the network virtual boundary redundancy group to which the network virtual border device belongs, which is notified by the directory server.

In addition, the sending module and the notification module may be implemented by hardware having a communication function in the directory server; the message processing module may be configured by a central processing unit (CPU) in the directory server.敫 Processor (MPU, Micro Processing Unit), Digital Signal Processor (DSP) or Field-Programmable Gate Array (FPGA).

The embodiment of the present invention further provides a system for performing redundancy backup between network virtual border devices, where the system includes a directory server and one or more network virtual border devices; The directory server is the above directory server;

The network virtual border device is the network virtual border device described above.

The technical solutions of the embodiments of the present invention are further described in detail below through specific embodiments. Example 1

FIG. 5 is a schematic diagram of a network structure of a network virtual border protection according to Embodiment 1 of the present invention. In the figure, a directory server stores a mapping relationship between a network MAC address and an IP address.

NVE1 and NVE2 form a network virtual boundary redundancy group to implement active-active load balancing. That is, the information sent by VM1 can be encapsulated by the NVE1 device or encapsulated by the NVE2 device. This network design can improve the reliability of network virtual border devices.

In this embodiment, the network virtual border member devices NVE1 and NVE2 both send their own address information and status information to the directory server. After receiving the address information and status information advertised by the member, the directory server advertises to other members in the group to implement the user address. Synchronization and sharing of information within a network virtual boundary redundancy group.

When NVE1 fails, RT1 quickly switches traffic to the virtual boundary member NVE2 through fast reroute (FRR). Because the address encapsulated by the packet is the virtual address of the group, NVE2 can superimpose the packet. Decapsulation is performed and sent to the intended user.

In this embodiment, the network virtual boundary redundancy group is constructed according to the link of the access side network device. When different VMs access the NVE through the same uplink, they can be built in the same virtual group, but for different VMs. When accessing the NVE through different uplinks, different virtual groups need to be constructed to implement separate protection for different links. Example 2

FIG. 6 is a schematic diagram of a network structure of a network virtual border protection according to Embodiment 2 of the present invention. In this embodiment, when the NVE1 learns a new user MAC address, including the MAC address of the terminal attached to the local end and the MAC address information of the remote end, Register the address information with the directory server. Directory service After receiving the registration information, the device needs to send the registration information to other devices in the virtual border redundancy group of the network to implement information sharing of the user address information in the network virtual boundary redundancy group. When there is a device failure in the network virtual boundary redundancy group, data traffic can be switched quickly.

In this embodiment, the process of automatically allocating virtual addresses includes:

1) In Figure 6, NVE1 and NVE2 are the same network virtual boundary redundancy group. After NVE1 is configured as the network virtual boundary redundancy group, the NVE1 registration message is sent to the Directory server. The registration message includes the NVE1 address information and status information. For example, the IP address, group, and tenant ID of the NVE1. If the virtual address of the network virtual boundary redundancy group is manually assigned, the registration information also needs to include the virtual address information. Similarly, NVE2 does the same thing;

2) For the automatic allocation mode, the Directory server generates a virtual address for the network virtual boundary redundancy group;

3 The directory server encapsulates the virtual address in the reply packet and sends it to each network virtual boundary redundancy group member.

4) After the network virtual border device receives the reply packet, the virtual address will be flooded and advertised through the routing protocol in the network.

For the manual configuration of virtual addresses, each virtual boundary of the network advertises and floods the virtual address as a common routing address in the network.

In this embodiment, a specific implementation method for performing network virtual boundary protection includes:

For the transmission of the local data, the data packet sent by the VM1 can be sent to the NVE1 or the NVE2. By mapping the virtual group address, the load balancing of the local data is achieved, and the terminal of the remote VM1 is solved. A jump to an address map entry.

In Figure 6, when a new user is attached to the network virtual boundary, the network virtual boundary registers the MAC address information with the directory server. After receiving the registration information, the directory server needs to diffuse the other members of the network virtual boundary redundancy group. The address information is used to share the address and status information of the members of the same network virtual border redundancy group. When a member of the group fails, the other member devices can save the data traffic quickly. In Figure 6, NVE1 and NVE2 are the same network virtual boundary redundancy group. The user MAC address sharing between NVE1 and NVE2 is realized by registering with the directory server, and IP FRR is configured on Router 1. Assume that NVE1 is faulty. For the data sent by the remote data, Router 1 quickly switches the data traffic from NVE1 to NVE2 through the FRR technology. Since the destination address of the encapsulated overlay network packet is a virtual address, NVE2 can be directly decapsulated. The message, and NVE2 has saved the user address information on all NVE1s, and NVE2 can quickly forward the decapsulated message to the destination user.

The above is only the preferred embodiment of the present invention and is not intended to limit the scope of the present invention.

Claims

claims

1. A method for redundant backup between network virtual border devices. One or more network virtual border devices form a network virtual border redundancy group. Each network virtual border redundancy group corresponds to a group ID. The method includes :

The directory server receives a registration message sent by a network virtual border device, where the registration message carries the address, group ID, and tenant information of the network virtual border device;

The directory server notifies other network virtual border devices in the network virtual border redundancy group to which the network virtual border device belongs, based on the group ID, of the information carried in the registration message.

2. The method according to claim 1, wherein the tenant information includes one or more of the following: tenant ID, tenant status.

3. The method according to claim 1, wherein the method further comprises: configuring a virtual address for the network virtual border device, and the network virtual border device performs text processing according to the virtual address.

4. The method according to claim 3, wherein the configuring the virtual address for the network virtual border device is: manual configuration or automatic allocation by the directory server.

5. The method according to claim 4, wherein in the scenario of manual configuration of the virtual address, the registration message also carries the virtual address of the network virtual border device.

6. The method according to any one of claims 3 to 5, wherein the virtual address is an anycast address.

7. The method according to any one of claims 1 to 5, wherein the method further includes: when the tenant information of the network virtual boundary device changes, notifying the changed tenant information to the network virtual boundary through the directory server Other network virtual border devices in the network virtual border redundancy group to which the device belongs.

8. The method according to any one of claims 3 to 5, wherein the group ID is a virtual address.

9. A directory server, which includes: a receiving module and a notification module; wherein,

The receiving module is configured to receive a registration message sent by a network virtual border device, where the registration message carries the address, group ID, and tenant information of the network virtual border device;

The notification module is configured to notify other network virtual border devices in the network virtual border redundancy group to which the network virtual border device belongs, based on the group ID, of the information carried in the registration message.

10. The directory server according to claim 9, wherein the directory server further includes a configuration module,

The configuration module is used to configure a virtual address for a network virtual border device.

11. The directory server according to claim 9 or 10, wherein,

The receiving module is also used to receive the changed tenant information sent by the network virtual border device;

The notification module is also configured to notify other network virtual edge devices in the network virtual edge redundancy group to which the network virtual edge device belongs of the changed tenant information.

12. A network virtual border device, which includes a sending module and a receiving module; wherein,

The sending module is configured to send a registration message to the directory server, where the registration message carries the address of the network virtual border device, the group ID and the tenant information of the network virtual border device;

The receiving module is configured to receive information carried by registration messages corresponding to other network virtual border devices in the network virtual border redundancy group to which the network virtual border device belongs, notified by the directory server.

13. The network virtual border device according to claim 12, wherein the network virtual border device further includes a message processing module; wherein,

The message processing module is used to process messages according to the configured virtual address.

14. The network virtual border device according to claim 12 or 13, wherein the sending module is further configured to send the changed tenant information to the directory server when the tenant information changes;

The receiving module is also configured to receive the changed tenant information of other network virtual border devices in the network virtual border redundancy group to which the network virtual border device belongs, notified by the directory server.

15. A system for redundant backup between network virtual edge devices. The system includes a directory server and more than one network virtual edge device; wherein, the directory server is the directory server according to any one of claims 9 to 11; The network virtual border device is the network virtual border device according to any one of claims 12 to 14.