WO2015003295A1

WO2015003295A1 - Communication method, device and system in virtual domain

Info

Publication number: WO2015003295A1
Application number: PCT/CN2013/078986
Authority: WO
Inventors: 王工艺; 常胜; 李涛
Original assignee: 华为技术有限公司
Priority date: 2013-07-08
Filing date: 2013-07-08
Publication date: 2015-01-15
Also published as: CN103931144B; CN103931144A

Abstract

Disclosed are a communication method, device and system in a virtual domain, which can improve the communication security in a peripheral component interconnect express (PCIE) network. The method comprises: a PCIE switch receiving a PCIE message, the PCIE message carrying a virtual domain identifier; acquiring a destination PCIE endpoint device corresponding to the virtual domain identifier; and sending the PCIE message to the destination PCIE endpoint device.

Description

Method, device and system for communicating in virtual domain

Technical field

Embodiments of the present invention relate to the field of computers, and in particular, to a method, device, and system for communicating in a virtual domain (Virtual Domain, VD). Background technique

With the development of the Peripheral Component Interconnect Express (PCIE) bus technology, the PCIE bus is no longer just a data transmission bus between the host and peripheral devices, and is further extended to data between the two hosts. Communication bus. Currently, the mainstream communication method between hosts is to rely on the Transmission Control Protocol (TCP) / Internet Protocol (IP) stack. In order to better compatible with existing TCP/IP-based applications, the industry has proposed the concept of TCP/IP running on PCIE bus (TCP/IP over PCIE, IPoPCIE), that is, TCP/IP protocol runs on PCIE network. The PCIE network here refers to a network in which devices communicate with each other using the PCIE bus. A PCIE virtual network interface card (VNIC) is virtualized on the host. The PCIE vNIC provides a link layer interface for data transmission and reception on the TCP/IP stack. For upper-layer applications, there is no difference between the PCIE vNIC and the Ethernet network device. The application-down interface is also the TCP/IP stack. You don't care if the link layer is an Ethernet or PCIE link, you can transparently use the PCIE link for communication. .

However, while improving performance, IPoPCIE also faces serious problems: There is no security isolation function in PCIE hardware, and there are serious problems in network security: such as network viruses, network loops, network storms caused by hacker software, causing the entire network瘫痪People in different departments access information to each other, leading to information leakage and other issues. Summary of the invention

In view of this, embodiments of the present invention provide a method, device, and system for communicating in a virtual domain. It can improve the security of communication in PCIE networks.

In a first aspect, an embodiment of the present invention provides a method for communicating in a virtual domain, including: a high-speed peripheral component interconnecting a PCIE switch to receive a PCIE packet, where the PCIE packet carries a virtual i or an identifier;

Obtaining a destination PCIE endpoint device corresponding to the virtual domain identifier;

Sending the PCIE message to the destination PCIE endpoint device.

In a first possible implementation manner of the first aspect, the acquiring the target PCIE endpoint device corresponding to the virtual domain identifier specifically includes:

Obtaining port information corresponding to the virtual domain identifier, and determining the destination PCIE endpoint device according to the port information.

With reference to the first possible implementation manner of the first aspect, in a second possible implementation, the mapping between the virtual domain identifier and the port information is preset on the PC I E switch;

The obtaining the port information corresponding to the virtual domain identifier includes: searching the corresponding relationship between the virtual domain identifier and the port information according to the virtual domain identifier, and acquiring the port information corresponding to the virtual domain identifier.

With reference to the second possible implementation manner of the first aspect, in a third possible implementation, the mapping between the virtual domain identifier and the port information is from a virtual domain management server, and is established by the virtual domain management server. And maintenance.

In a fourth possible implementation manner of the first aspect, the acquiring the PCIE endpoint device corresponding to the virtual domain identifier specifically includes:

According to the virtual domain identifier, the mapping between the virtual domain identifier and the PCIE endpoint device information is performed, and the destination PCIE endpoint device corresponding to the virtual domain identifier is obtained.

With reference to the fourth possible implementation of the first aspect, in a fifth possible implementation, the PCIE endpoint device information includes a node number of a PCIE endpoint device, and a node number of the PCIE endpoint device is the virtual domain The node number of the corresponding physical PCIE endpoint device or the node number of the physical PCIE endpoint device where the virtual machine corresponding to the virtual domain identifier is located. In a second aspect, an embodiment of the present invention provides a method for communicating in a virtual domain, including: a high-speed peripheral component interconnecting a PC IE endpoint device adds a virtual domain identifier to a PCIE packet; The PCIE packet is sent to the PCIE switch.

In a first possible implementation manner of the second aspect, a message class is added to the PCIE message, and the virtual domain identifier is carried by the message class.

In a second possible implementation manner of the second aspect, a routing manner is added to the PCIE packet, and the virtual domain identifier is carried by the routing manner.

In a third aspect, an embodiment of the present invention provides a high-speed peripheral component interconnection PCIE switch, including:

a receiving unit, configured to receive a PCIE packet, where the PCIE packet carries a virtual domain identifier, an acquiring unit, configured to acquire a destination PCIE endpoint device corresponding to the virtual domain identifier, and a sending unit, configured to send to the destination PCIE endpoint The device sends the PCIE packet.

In a first possible implementation manner of the third aspect, the acquiring unit is specifically configured to obtain port information corresponding to the virtual domain identifier, and determine the destination PCIE endpoint device according to the port information.

With reference to the first possible implementation manner of the third aspect, in a second possible implementation, the method further includes a storage unit, where the storage unit is configured to save a correspondence between the virtual domain identifier and the port information; The obtaining the port information corresponding to the virtual domain identifier includes: searching the corresponding relationship between the virtual domain identifier and the port information according to the virtual domain identifier, and acquiring the port information corresponding to the virtual domain identifier.

In a third possible implementation manner of the third aspect, the acquiring unit is specifically configured to: search a corresponding relationship between the virtual domain identifier and the PCIE endpoint device information according to the virtual domain identifier, and obtain the corresponding corresponding to the virtual domain identifier. Purpose PCIE endpoint device.

With reference to the third possible implementation of the third aspect, in a fourth possible implementation, the PCIE endpoint device information includes a node number of a PCIE endpoint device, and a node number of the PCIE endpoint device is the virtual domain Identify the node number or the virtual number of the corresponding physical PCIE endpoint device The domain ID identifies the node number of the physical PCIE endpoint device where the corresponding virtual machine resides.

In a fourth aspect, an embodiment of the present invention provides a high-speed peripheral component interconnection PCIE endpoint device, including:

a processing unit, configured to add a virtual domain identifier in the PCIE file;

And a sending unit, configured to send the PCIE packet carrying the virtual domain identifier to the PCIE switch.

In a first possible implementation manner of the fourth aspect, the processing unit is configured to add a message class to the PCIE packet, where the virtual domain identifier is carried by the message class.

In a second possible implementation manner of the fourth aspect, the processing unit is specifically configured to add a routing manner to the PCIE packet, where the virtual domain identifier is carried by using the routing manner.

In a fifth aspect, an embodiment of the present invention provides a controller, including:

a processor, a memory, a system bus, and a communication interface, wherein the processor, the memory, and the communication interface are connected by the system bus and complete communication with each other;

The communication interface is configured to communicate with a high speed peripheral component interconnect PCIE endpoint device;

The memory is configured to store a computer execution instruction;

The processor, configured to execute the computer to execute an instruction, to perform the method of any of the first aspects.

In a sixth aspect, an embodiment of the present invention provides a computer program product, comprising: a computer readable storage medium storing program code, the program code comprising instructions for performing the method of any of the first aspects.

The seventh aspect of the present invention provides a PCIE system, including the PCIE switch according to any one of the third aspects, and the PCIE endpoint device according to any one of the fourth aspects. With the above solution, the method, device, and system for communicating in a virtual domain are provided by the embodiment of the present invention. The PCIE switch receives the PCIE packet carrying the virtual domain identifier, and sends the PCIE endpoint device only to the destination PCIE endpoint device corresponding to the virtual domain identifier. PCIE packets enable data transmission between PCIE endpoint devices in the same virtual domain, which improves communication security in PCIE networks. BRIEF DESCRIPTION OF THE DRAWINGS In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings used in the description of the embodiments will be briefly described below. Obviously, the drawings in the following description are only It is a certain embodiment of the present invention, and other drawings can be obtained from those skilled in the art without any creative work.

1 is a schematic diagram of a PCIE system according to Embodiment 1 of the present invention;

2 is a schematic diagram of VD division in Embodiment 1 of the present invention;

3 is a flowchart of a method for communicating in a virtual domain according to Embodiment 2 of the present invention;

Figure 4 is a schematic diagram of PCIE message extension;

Figure 5 is another schematic diagram of PCIE message extension;

FIG. 6 is a schematic diagram of PCIE packet transmission according to an embodiment of the present invention;

7 is a structural diagram of a PCIE endpoint device according to Embodiment 3 of the present invention;

FIG. 8 is a structural diagram of a PCIE switch according to Embodiment 4 of the present invention.

FIG. 9 is a schematic structural diagram of a controller according to an embodiment of the present invention. The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present invention. It is obvious that the described embodiments are a part of the embodiments of the present invention, but not all embodiments. . All other embodiments obtained by a person of ordinary skill in the art based on the embodiments of the present invention without making creative labor are within the scope of the present invention.

System architecture of an embodiment of the present invention

1 is a system diagram of a Periphera Component Interconnect Expres s (PCIE) system according to Embodiment 1 of the present invention. As shown in FIG. 1, at least two PCIE endpoint devices 10 and one PCIE switch 20 are included. (PCIE Swi tch) and a virtual domain management server 30; the PCIE switch 20 is connected to all PCIE endpoint devices 10 to implement data forwarding between the PCIE endpoint devices 10. The virtual domain management server 30 is connected to the PCIE switch 20 for managing the correspondence between the maintenance virtual domain identifier and the port information, or managing and maintaining the virtual domain identifier and the PCIE endpoint device letter. Correspondence relationship.

The virtual domain management server 30 in the embodiment of the present invention may be a general PCIE endpoint device in the system, or may be a dedicated PCIE endpoint device, which is not specifically limited in the present invention.

The PCIE endpoint device 10 in the embodiment of the present invention includes but is not limited to a Root Complex (RC), an Endpoint (EP), and a Host (HOST). The root complex consists of a central processing unit (CPU). The endpoint consists of an interface network card, serial card, memory card, or graphics card. The host may be a general computer, a mobile terminal, a workstation or a server, a dedicated server, or the like.

When the PCIE endpoint device 10 is a host, an operating system (OS) is running on each host, and at least one virtual machine (VM) can be run in a virtualized scenario.

The PCIE endpoint devices in the same physical network are divided into multiple logically separated networks. These separated logical networks are called Virtual Domains (VDs). The virtual domain is proposed to understand the security of the network, similar to the Virtual Local Area Network (VLAN) in Ethernet. Taking Figure 2 as an example, EP0, EP1, EP2, H0ST3, and HOST 4 form VDO, and EP3, EP4, EP5, HOST0, HOST 1, and HOST 2 form VD1.

The embodiment of the present invention extends the PCIE protocol, and the broadcast and unicast data streams in the same VD are not forwarded to other VDs through the virtual domain identifier (VD ID), and only members in the same VD can receive it. The details are described below.

Method of communication in virtual domain

As shown in FIG. 3, Embodiment 2 of the present invention provides a method for communicating in a virtual domain, which may be implemented in the PCIE system shown in FIG. 1 and FIG. 2, but is not limited to FIG. 1 and FIG. The structure of the system shown. The method includes:

The S20 PCIE endpoint device adds a virtual domain identifier to the high-speed peripheral component interconnect PCIE. Specifically, if the upper layer application running on the PCIE endpoint device has a data packet to be sent in the virtual domain (VD), the upper layer application needs to add the data packet sent in the VD to the TCP/IP protocol stack, that is, the upper layer application is called. The kernel mode and user mode interface of the operating system will add TCP/IP packets sent in the VD to the TCP/IP stack. The VLAN of the operating system in the PCIE endpoint device The module obtains the TCP/IP packet that needs to be sent in the VD from the TCP/IP protocol stack, and adds the VLAN ID to the TCP/IP packet. The VLAN module of the operating system in the PCIE endpoint device passes the TCP/IP packet with the added VLAN ID to the PCIE vNIC driver module. Then the PCIE vNIC driver module of the operating system in the PCIE endpoint device obtains the TCP/IP data packet, and the PCIE vNIC driver module is the interface of the TCP/IP stack of the operating system and the link layer of the PCIE network. Specifically, for convenience of description, the PCIE endpoint device that obtains the TCP/IP packet that needs to be sent in the VD may also be referred to as a source PCIE endpoint device.

The PCIE vNIC driver module encapsulates the TCP/IP packet into a PCIE message, extracts the VLAN ID of the TCP/IP, and then maps the VLAN ID to the VD ID of the PCIE. The VD ID is the ID of the virtual domain that the TCP/IP packet needs to send.

Preferably, the PCIE vNIC driver module maintains a table: the correspondence between the TCP/IP VLAN and the PCIE VD.

In the embodiment of the present invention, the TCP/IP protocol runs on the PCIE bus (TCP/IP over PCIE, referred to as IPoPCIE) as an example, but is not limited to IPoPCIE, and other protocols may also run on the PCIE bus.

Specifically, the PCIE protocol needs to be extended to carry the VD ID.

In one mode, as shown in FIG. 4, a message class may be added to the PCIE message, for example, the message code may be added to carry the VD ID.

Alternatively, as shown in FIG. 5, a routing manner may be added to the PCIE packet, and the VD ID is carried by the routing manner. For example, it can be added in Type[2: 0]. In Figure 5, the VD field is 64 bits, which can support 64 VD IDs. Each bit represents 1 VD ID. Of course, it is not limited to this type of portability. It can also represent 1 VD ID by 2 or more bits.

The meaning of other fields in the PCIE 艮 text can refer to the description of the PCIE protocol.

In order to be compatible with early peripheral component interconnections ( Peripheral Component

An embodiment of the present invention can extend only the extended space of the PCIE, and does not modify the configuration space word used by the legacy device, for example, in order to be compatible with the legacy device. Paragraph. Specifically, the VD ID may be represented by a capability ID of the extended space. Accordingly, you can find out which devices support VD functionality by looking up the expansion space.

S202. The PCIE endpoint device sends the PCIE packet carrying the virtual domain identifier to the PCIE switch.

S203. The PCIE switch receives the PCIE message.

The PCIE packet carries a virtual domain identifier.

S204. The PCIE switch acquires a destination PCIE endpoint device corresponding to the virtual domain identifier. An implementation manner is: presetting a correspondence between a virtual domain identifier and a port (port) information on a PCIE switch, and searching for a corresponding relationship between the virtual domain identifier and the port information according to the virtual domain identifier, and acquiring the virtual domain identifier. Corresponding port information, and then determining the destination PCIE endpoint device according to the port information. Port information, used to distinguish endpoints, indicating which endpoints.

When it is a broadcast or multicast (Multicast, MC for short) message, the destination PCIE endpoint device can be represented by MC.Receive.

For example ^ below:

4) MC_Receive = 00011110b corresponding to the portO configured in the PCIe Switch, that is, the ID of the supported VD is 1, 2, 3, 4; MC_Receive = 00001110b corresponding to portl, that is, the ID of the supported VD is 1, 2, 3; The MC_Receive = 00010100b corresponding to port2, that is, the ID of the supported VD is 2, 4; the MC_Receive = 00010000b corresponding to port3, that is, the ID of the supported VD is 4. Then the correspondence between the virtual domain identifier and the port information is as shown in Table 1:

Table 1 Virtual Network Identification (VD ID) Port Information

0 NULL

1 0, 1

2 0, 1, 2

3 0, 1

4 0, 2, 3 where MC_Receive is defined as defined in the PCIe Mul ticas t standard.

4叚3⁄4口^Port diagram 6 shows that ortO is connected to RC; portl is connected to endpointl, referred to as EP1; port2 is connected to EP2; port3 is connected to EP3.

By looking up Table 1, if the PCIE endpoint device that is the sender is the RC, the RC sends the PCIE packet carrying the VD ID to the PCIE switch through the portO of the PCIE switch, where the VD ID carried is 00000010b, that is, the VD ID. If 1, the destination PCIE endpoint device of this packet is EP1.

If the PCIE endpoint device that is the sender is the RC, the RC sends the PCIE packet carrying the VD ID to the PCIE switch through the portO of the PCIE switch, where the VD ID is 00000100b, that is, the VD ID is 2. The destination PCIE endpoint devices are EP1 and EP2.

If the PCIE endpoint device is the sender, the PCIE packet carrying the VD ID is sent to the PCIE switch through the port1 of the PCIE switch. The VD ID is 00010000b, that is, the VD ID is 4. The destination PCIE endpoint devices are EP2 and EP3.

Preferably, the correspondence between the virtual domain identifier and the port information comes from the virtual domain management server, which is established by the virtual domain management server and is updated according to the change of the PCIE endpoint device in the virtual domain (for example, the addition/deletion of the PCIE endpoint device). of.

In another implementation manner, the mapping between the virtual domain identifier and the PCIE endpoint device information is preset on the PCIE switch, and the mapping between the virtual domain identifier and the PCIE endpoint device information is obtained according to the virtual domain identifier, and the virtual domain identifier is obtained. Corresponding purpose PCIE endpoint device. In general, this The correspondence can be in the form of a table.

Specifically, the PCIE endpoint device information includes a node number of the PCIE endpoint device.

Preferably, the correspondence between the virtual domain identifier and the PCIE endpoint device information comes from the virtual domain management server, which is established by the virtual domain management server and is changed according to the PCIE endpoint device in the virtual domain (for example, the addition/deletion of the PCIE endpoint device). Updated for maintenance. The virtual domain management server can be a dedicated PCIE endpoint device in the network, or any PCIE endpoint device in the network can be used as the virtual domain management server to establish and maintain the correspondence between the virtual domain identifier and the PCIE endpoint device information.

In the embodiment of the present invention, the correspondence between the virtual domain identifier and the node number of the PCIE endpoint device included in the virtual domain is recorded in the correspondence between the virtual domain identifier and the PCIE endpoint device information. Table 2 illustrates: The virtual domain with a VD ID of 20 shown in the table includes 2 PCIE endpoint devices with node numbers 1 and 5 respectively; the virtual domain with VD ID 49 shown in the table includes 5 PCIE endpoint device, node numbers are 2, 3, 4, 5, and 7, respectively.

Table 2

If a PCIE packet sent by a PCIE endpoint device with a node number of 2 is broadcasted in a VD with a VD ID of 49, the node numbers of the destination PCIE endpoint device are 3, 4, 5, and 7.

S205. The PCIE switch sends the PCIE message to the destination PCIE endpoint device.

As shown in Fig. 6, por t O is connected to RC; por t l is connected to endpo int l, referred to as EP1; por t2 is connected to EP2; por t 3 is connected to EP3.

It should be noted that in the prior art, for each PCI Expres s switch, there is a unique uplink port and several downlink ports, and each port of the switch has a virtual P2P bridge inside (PCI to PCI Br Idge ). One or more PCIEs can be connected under each P2P bridge Endpoint device, such as EP or RC. Each P2P bridge interacts through a virtual PCI bus (Virtual PCI Bus).

Take the implementation of Table 1 as an example. If the RC passes through the portO of the PCIE switch, the RC carries the PCIE packet carrying the VD ID to the PCIE switch, where the VD ID is 00000010b, that is, the VD ID is 1, then the ^艮 text is finally routed to EP1 through portl.

If the RC passes the port 0 of the PCIE switch, the PCIE packet carrying the VD ID is sent to the PCIE switch, and the VD ID is 00000100b, that is, the VD ID is 2, and the packet is finally routed to the EP1 through the ortl. Route to EP2 via ort2.

If EP1 passes the port of the PCIE switch, the PCIE packet carrying the VD ID is sent to the PCIE switch, and the VD ID is 00010000b, that is, the VD ID is 4. Then the packet is finally routed to the EP2 through port 2. , routed to EP3 through port 3.

If the MC.Receive in the virtual domain receives the PCIE packet, the VD ID carried in the packet is matched with the VD ID of the MC_Receive. If it belongs to a VD domain, it is received. If it is not a VD domain, it is discarded or Reported an error.

Specifically, the MC_Receive may add the data packet with the same virtual domain identifier to the TCP/IP stack through the network device interface, so as to deliver the data packet to the corresponding upper layer application.

The virtual domain in the embodiment of the present invention may include a physical PCIE endpoint device or a virtual machine. That is, the method described in the embodiment of the present invention can be applied to security isolation between physical machines. Each physical PCIE endpoint device is in the same PCIE network, and the user divides the PCIE endpoint devices into different VDs according to service requirements. Only PCIE endpoint devices in the same VD can communicate with each other. For example, when a PCIE endpoint device in a VD sends a broadcast packet, its transmission range limit is the PCIE endpoint device in the VD, and the message is not sent to PCIE endpoint device other than this VD. Similarly, the method in the embodiment of the present invention is also applicable to a security isolation service scenario between a virtual machine and a virtual machine and a physical machine. The user divides the virtual machine and the physical machine into different VDs, and the communication in the VD is only in the The physical machine and the virtual machine in the VD are not sent to the virtual machine or physical machine outside the VD.

Of course, for the virtual machine, the virtual domain identifier is recorded in the correspondence relationship with the PCIE endpoint device information. It is also the correspondence between the virtual domain and the physical PCIE endpoint device. The physical PCIE endpoint device here is the physical PCIE endpoint device where the virtual machine is located, that is, the virtual domain identifier recorded in the correspondence between the virtual domain identifier and the PCIE endpoint device information. The correspondence between the node numbers of the PCIE endpoint devices included in the virtual domain. The node number of the PCIE endpoint device here may be the physical content contained in the virtual domain.

The node number of the endpoint device.

In the embodiment of the present invention, the PCIE switch receives the PCIE packet carrying the virtual domain identifier, and sends the PCIE packet only to the destination PCIE endpoint device corresponding to the virtual domain identifier, so that only the PCIE in the same virtual domain is allowed. Data transmission between endpoint devices can improve the security of communication in the PCIE network and avoid network storms. Moreover, the data transmission in the VD is realized based on the virtual domain identifier, and the implementation manner is more flexible and more efficient. Device of embodiment of the invention

The high-speed peripheral component interconnection provided by Embodiment 3 of the present invention is as shown in the figure of the PCIE endpoint device 10

Figure 7, including:

The processing unit 101 is configured to add a virtual domain identifier to the PCIE certificate, and the sending unit 102 is configured to send the PCIE packet carrying the virtual domain identifier to the PCIE switch.

Preferably, the processing unit 101 is configured to add a message class to the MME to carry the virtual domain identifier by using the message class. For details, refer to the description of the embodiment of FIG. 2 and FIG. 4, and details are not described herein again.

Preferably, the processing unit 101 is configured to add a routing manner to the PCIE, and carry the virtual domain identifier by using the routing manner. For details, refer to the description of the embodiment of FIG. 2 and FIG. 5, and details are not described herein again.

The high-speed peripheral component interconnection provided by the embodiment 4 of the present invention has the structure shown in FIG. 8 and includes:

The receiving unit 201 is configured to receive a PCIE packet, where the PCIE packet carries a virtual domain identifier. The obtaining unit 202 is configured to acquire the destination PCIE endpoint device corresponding to the virtual domain identifier, and the sending unit 203 is configured to send the PCIE packet to the destination PC IE endpoint device. In an optional implementation manner, the obtaining unit 202 is specifically configured to obtain port information corresponding to the virtual domain identifier, and determine the destination PCIE endpoint device according to the port information.

Optionally, the PC IE switch 20 further includes a storage unit 204, configured to save a correspondence between the virtual domain identifier and the port information.

The obtaining, by the obtaining unit 202, the port information corresponding to the virtual domain identifier, the method includes: searching, according to the virtual domain identifier, a correspondence between the virtual domain identifier and the port information saved by the storage unit 204, and acquiring the virtual domain identifier corresponding to the virtual domain identifier Port information.

In another optional implementation manner, the obtaining unit 202 is specifically configured to: search the corresponding relationship between the virtual domain identifier and the PCIE endpoint device information according to the virtual domain identifier, and obtain the destination PCIE endpoint device corresponding to the virtual domain identifier. .

Preferably, the PCIE endpoint device information includes a node number of the PCIE endpoint device, and the node number of the PCIE endpoint device is a node number of the physical PCIE endpoint device corresponding to the virtual domain identifier, and may refer to the method embodiment. description of.

As shown in FIG. 9, a controller 300 according to an embodiment of the present invention includes: at least one processor 301, a memory 305, at least one communication interface 304, and at least one system bus 302.

The processor 301, the memory 305, and the communication interface 304 are connected by the system bus 302 and complete communication with each other;

A communication interface 304 is configured to communicate with the high speed peripheral component interconnect PCIE endpoint device.

The memory 305 stores computer execution instructions, such as a storage operating system 306. When the controller 300 is running, the processor 301 is in communication with the memory 305, and the processor 301 executes the computer to execute the instructions such that the controller 300 executes the embodiment described in the first embodiment of the present invention. The implementation principle and the technical effect of the method are similar to those of the previous embodiment 2, and are not described herein again. The operating system 306 includes various programs for implementing various basic services and processing hardware-based tasks. The controller 300 optionally includes a user interface 303 such as a display, keyboard or other pointing device.

In addition, the embodiment of the present invention further provides a computer readable medium, which includes a computer-executed instruction, and the computer-executable instruction enables the controller 300 to perform the method described in Embodiment 2 of the present invention. The implementation principle and technical effects thereof are compared with the previous embodiment. 2 is similar and will not be described here.

The embodiment of the present invention further provides a PCIE system, including a PCIE endpoint device as shown in FIG. 7 and a PCIE switch as shown in FIG. Reference is specifically made to the description of the previous embodiments.

In the embodiment of the present invention, the PCIE endpoint device sends the PCIE packet carrying the virtual domain identifier to the PCIE switch, so that the PCIE switch sends the PCIE packet only to the destination PCIE endpoint device corresponding to the virtual domain identifier, which is only allowed in the PCIE switch. Data transmission between PCIE endpoint devices in the same virtual domain can improve the security of communication in the PCIE network and avoid network storms. Moreover, the data transmission in the VD is realized based on the virtual domain identifier, and the implementation manner is more flexible and more efficient.

Through the description of the above embodiments, it will be apparent to those skilled in the art that the present invention can be implemented in hardware, firmware implementation, or a combination thereof. When implemented in software, the functions described above may be stored in or transmitted as one or more instructions or code on a computer readable medium. Computer readable media includes both computer storage media and communication media including any medium that facilitates transfer of a computer program from one location to another. A storage medium may be any available media that can be accessed by a computer. By way of example and not limitation, the computer readable medium can comprise RAM, ROM, EEPROM, CD-ROM or other optical disk storage, disk storage media or other magnetic storage device, or can be used to carry or store an instruction or data structure. The desired program code and any other medium that can be accessed by the computer. This evening. Any connection may suitably be a computer readable medium. For example, if the software is transmitted from a website, server, or other remote source using coaxial cable, fiber optic cable, twisted pair, digital subscriber line (DSL), or wireless technologies such as infrared, radio, and microwave, then the coaxial cable , fiber optic cable, twisted pair, DSL, or wireless technologies such as infrared, wireless, and microwaves are included in the fixing of the associated media. As used in the present invention, the disc (Di sk ) and the disc (di sc ) include pressure Compact discs (CDs), laser discs, optical discs, digital versatile discs (DVDs), floppy discs, and Blu-ray discs, where discs are usually magnetically replicated, while discs use lasers to optically replicate data. Combinations of the above should also be included within the scope of the computer readable media.

In summary, the above description is only a preferred embodiment of the technical solution of the present invention, and is not intended to limit the scope of the present invention. Any modifications, equivalents, improvements, etc. made within the spirit and scope of the present invention are intended to be included within the scope of the present invention.

Claims

Rights request

1. A method of communicating in a virtual domain, characterized by including:

The high-speed peripheral component interconnection PCIE switch receives the PCIE message, and the PCIE message carries the virtual i or identifier;

Obtain the destination PCIE endpoint device corresponding to the virtual domain identifier;

Send the PCIE message to the destination PCIE endpoint device.

2. The method according to claim 1, wherein obtaining the destination PCIE endpoint device corresponding to the virtual domain identifier specifically includes:

Obtain the port information corresponding to the virtual domain identifier, and determine the destination PCIE endpoint device according to the port information.

3. The method according to claim 2, characterized in that the corresponding relationship between the virtual domain identifier and the port information is preset on the PCIE switch;

Obtaining the port information corresponding to the virtual domain identifier specifically includes: searching for the corresponding relationship between the virtual domain identifier and the port information according to the virtual domain identifier, and obtaining the port information corresponding to the virtual domain identifier.

4. The method according to claim 3, characterized in that the corresponding relationship between the virtual domain identifier and the port information comes from the virtual domain management server, and is established and maintained by the virtual domain management server.

5. The method according to claim 1, wherein obtaining the destination PCIE endpoint device corresponding to the virtual domain identifier specifically includes:

According to the virtual domain identifier, the corresponding relationship between the virtual domain identifier and the PCIE endpoint device information is searched, and the destination PCIE endpoint device corresponding to the virtual domain identifier is obtained.

6. The method of claim 5, wherein the PCIE endpoint device information includes a node number of the PCIE endpoint device, and the node number of the PCIE endpoint device is the physical PCIE endpoint device corresponding to the virtual domain identifier. The node number or the node number of the physical PCIE endpoint device where the virtual machine is located corresponding to the virtual domain identifier.

7. A method of communicating in a virtual domain, characterized by including:

High-speed peripheral component interconnection PC IE endpoint device adds a virtual domain identifier to the PCIE message; sends the PCIE message carrying the virtual domain identifier to the PCIE switch.

8. The method according to claim 7, characterized in that a message class is added to the PCIE message, and the virtual domain identifier is carried through the message class.

9. The method according to claim 7, characterized in that a routing mode is added to the PCIE message to carry the virtual domain identifier through the routing mode.

10. A high-speed peripheral component interconnection PCIE switch, characterized in that it includes: a receiving unit, used to receive PCIE messages, where the PCIE messages carry a virtual domain identifier; an acquisition unit, used to obtain the virtual domain identifier The corresponding destination PCIE endpoint device; a sending unit, configured to send the PCIE message to the destination PCIE endpoint device.

11. The switch according to claim 10, wherein the obtaining unit is specifically configured to obtain the port information corresponding to the virtual domain identifier, and determine the destination PCIE endpoint device according to the port information.

12. The switch according to claim 11, further comprising a storage unit, the storage unit being used to save the corresponding relationship between the virtual domain identifier and the port information;

The acquisition unit is configured to obtain the port information corresponding to the virtual domain identifier, which specifically includes: searching the corresponding relationship between the virtual domain identifier and the port information according to the virtual domain identifier, and obtaining the port information corresponding to the virtual domain identifier.

13. The switch according to claim 10, wherein the obtaining unit is specifically configured to: according to the virtual domain identification, find the correspondence between the virtual domain identification and the PCIE endpoint device information, and obtain the correspondence between the virtual domain identification and the PCIE endpoint device information. The destination PCIE endpoint device.

14. The switch according to claim 13, wherein the PCIE endpoint device information includes a node number of the PCIE endpoint device, and the node number of the PCIE endpoint device is the physical PCIE endpoint device corresponding to the virtual domain identifier. The node number or the node number of the physical PCIE endpoint device where the virtual machine is located corresponding to the virtual domain identifier.

15. A high-speed peripheral component interconnection PCIE endpoint device, characterized by including: a processing unit for adding a virtual domain identifier to the PCIE context;

A sending unit, configured to send the PCIE message carrying the virtual domain identifier to the PCIE switch.

16. The device according to claim 15, wherein the processing unit is specifically configured to add a message class to the PCIE message, and carry the virtual domain identifier through the message class.

17. The device according to claim 15, wherein the processing unit is specifically configured to add a routing mode to the PCIE message, and carry the virtual domain identifier through the routing mode.

18. A controller, characterized in that it includes:

A processor, a memory, a system bus and a communication interface. The processor, the memory and the communication interface are connected through the system bus and communicate with each other;

The communication interface is used to communicate with PCIE endpoint devices interconnected with high-speed peripheral components;

The memory is used to store computer execution instructions;

The processor is used to run the computer execution instructions to perform the method described in claims 1-6.

19. A computer program product, comprising a computer-readable storage medium storing program code, the program code including instructions for executing the method according to any one of claims 1-6.

20. A high-speed peripheral component interconnection PCIE system, including a PCIE switch as claimed in claims 10-14 and a PCIE endpoint device as claimed in claims 15-17.