WO2016091186A1

WO2016091186A1 - Method and system for preventing conflict from occurring in resources occupied by logical switch

Info

Publication number: WO2016091186A1
Application number: PCT/CN2015/097012
Authority: WO
Inventors: 肖敏; 张君辉; 焦欣文
Original assignee: 中兴通讯股份有限公司
Priority date: 2014-12-12
Filing date: 2015-12-10
Publication date: 2016-06-16
Also published as: CN105743821B; CN105743821A

Abstract

A method and system for preventing a conflict from occurring in resources occupied by a logical switch. The method comprises the following steps: for the type of resources that need to be isolated, separately configuring, for different logical switches on a same OpenFlow switch, a non-overlapping range of resources that can be occupied and that belong to the resource type; after the logical switch and an OpenFlow controller to which the logical switch belongs establish a control connection, querying the logical switch, and determining the type of resources that have resource isolation limitation; and when the OpenFlow controller needs to allocate, to the corresponding logical switch, the type of the resources that have resource isolation limitation, querying the logical switch the range of resources that can be occupied and that belong to the resource type, and selecting resources from the range of resources that can be occupied and allocating the resources to the logical switch. The technical solution of the present invention prevents a conflict from occurring when different OpenFlow controllers that control different logical switches on the same OpenFlow switch allocate resources to the corresponding logical switches controlled by the OpenFlow controllers.

Description

Method and system for preventing conflicts of resources occupied by logical switches

Technical field

This document relates to Software Defined Network (SDN) technology, and in particular to a method and system for preventing conflicts of resources occupied by logical switches.

Background technique

The OpenFlow network is a software-defined network that uses an architecture in which the control plane is separated from the forwarding plane. 1 is a schematic diagram of an OpenFlow network component architecture in accordance with the related art. As shown in Figure 1, the management plane of the OpenFlow network is implemented by the OpenFlow configuration point. The control plane of the OpenFlow network is implemented by the OpenFlow controller. The network application (App) calls the OpenFlow controller through an application programming interface (API). For the control of the OpenFlow network, the forwarding plane of the OpenFlow network is implemented by an OpenFlow switch. The interface between the OpenFlow configuration point and the OpenFlow switch runs the OpenFlow Management and Configuration (OF-Config) protocol. The interface between the OpenFlow controller and the OpenFlow switch runs the OpenFlow protocol. Both of these protocols are provided by the International Standards Organization Open Network Foundation. The Open Networking Foundation (referred to as ONF) is responsible for the development and revision. The OpenFlow configuration point manages and configures the OpenFlow switch through the OF-Config channel. The OpenFlow controller controls the forwarding behavior of the OpenFlow switch through the OpenFlow channel to implement separation of data forwarding and routing control.

Currently, an OpenFlow configuration point can divide multiple logical switches according to ports on the same OpenFlow switch. Different logical switches occupy different OpenFlow port resources and are controlled by different OpenFlow controllers. 2 is a diagram showing an example of dividing a plurality of OpenFlow logical switches on an OpenFlow switch according to the related art. As shown in Figure 2, the OpenFlow configuration point configures two logical switches, OpenFlow logical switch 1 and OpenFlow logical switch 2, on the OpenFlow switch. The OpenFlow logical switch 1 occupies part of the OpenFlow port resources and is controlled by the OpenFlow controller 1. OpenFlow logical switch 2 occupies another part of OpenFlow port resources and is controlled by OpenFlow controller 2.

Multiple logical switches on the same OpenFlow switch due to hardware implementation limitations The resources occupied by the switches are not completely isolated, that is, there are potential conflicts when certain resources of the OpenFlow switch are dynamically allocated between different logical switches. For example, an OpenFlow switch may have only one virtual local area network (VLAN) forwarding table shared by multiple logical switches. Since different logical switches are controlled by different OpenFlow controllers, different OpenFlow controllers may appear. Adding different ports of multiple logical switches to the same VLAN, which is usually undesirable for network operators. However, there is currently no effective solution to the problem that the resources allocated by one OpenFlow controller to the one OpenFlow logical switch in the related art conflict with the resources allocated by another OpenFlow controller to another OpenFlow logical switch.

Summary of the invention

In view of the above, the technical problem to be solved by the present invention is to provide a method and system for preventing conflicts of resources occupied by logical switches, so that different OpenFlow controllers controlling different logical switches on the same OpenFlow switch are given to respective controlled logical switches. Conflicts do not occur when resources are allocated.

In order to solve the above problems, the following technical solutions are adopted:

A method for preventing conflicts between resources occupied by a logical switch includes the following steps:

Configuring a resource range of the resource type that does not overlap for different logical switches on the same OpenFlow switch.

After the logical switch establishes a control connection with the associated OpenFlow controller, querying the logical switch to determine a resource type with a resource isolation restriction;

When the OpenFlow controller needs to allocate the resource type with the resource isolation restriction to the corresponding logical switch, query the logical switch for the available resource range of the resource type, and select, from the range of the occupied resources Resources are allocated to the logical switch.

Optionally, the resource type includes one or more of the following resources:

Virtual local area network (VLAN) resources, virtual route forwarding (VRF) resources, and multi-protocol label switching (MPLS) label resources.

Optionally, the establishing, by the logical switch, a control connection with an associated OpenFlow controller After the querying the logical switch, determining the resource type with the resource isolation restriction includes:

After each logical switch automatically establishes a control connection with the associated OpenFlow controller and runs the OpenFlow protocol on the control connection, the OpenFlow controller immediately sends a query message to the logical switch and receives a reply message of the logical switch. Know the resource type with resource isolation restrictions.

Optionally, the step of querying, by the logical switch, the suffixable resource range of the resource type, and selecting the resource to be allocated to the logical switch from the sufficable resource range, the method includes:

The OpenFlow controller sends a query message to the logical switch and receives a reply message of the logical switch to learn the available resource range of the resource type on the logical switch, and the OpenFlow controller learns from the available A resource is selected from the resource range to be allocated to the logical switch.

Optionally, the resource type is determined according to a resource isolation restriction condition of the OpenFlow switch.

Optionally, the step of separately configuring, by the different logical switches on the same OpenFlow switch, the non-overlapping resource range of the resource type includes:

For the same type of resources, the available resource ranges configured for different logical switches on the same OpenFlow switch are not overlapping.

A system for preventing conflicts between resources occupied by a logical switch, comprising: a configuration module, a determining module, and an allocation module, wherein

The configuration module is configured to: configure, for different resource switches on the same OpenFlow switch, non-overlapping resource ranges of the resource types for resource types that need to implement resource isolation;

The determining module is configured to: after the logical switch establishes a control connection with the associated OpenFlow controller, query the logical switch to determine a resource type with a resource isolation restriction;

The allocation module is configured to: when the OpenFlow controller needs to allocate the resource type with the resource isolation restriction to the corresponding logical switch, query the logical switch for the available resource range of the resource type, and A resource selected from the range of available resources is allocated to the logical switch.

Optionally, the resource type includes one or more of the following resources:

VLAN resources, VRF resources, and MPLS label resources.

Optionally, the determining module is configured to query the logical switch to determine a resource type with a resource isolation restriction after the logical switch establishes a control connection with the associated OpenFlow controller according to the following manner:

After the logical switch automatically establishes a control connection with the associated OpenFlow controller and runs the OpenFlow protocol on the control connection, the determining module is configured to send a query message to the logical switch and receive a reply message of the logical switch. To know the type of resource that has resource isolation restrictions.

Optionally, the allocating module is configured to query the logical switch for an occupant resource range of the resource type according to the following manner, and select a resource to be allocated to the logical switch from the occupable resource range:

Sending a query message to the logical switch and receiving a reply message of the logical switch, to learn an available resource range of the resource type on the logical switch, and selecting a resource allocation from the learned available resource range to the Logical switch.

Optionally, the configuration module is configured to separately configure, for different logical switches on the same OpenFlow switch, an occupant resource range of the resource type that does not overlap:

The technical solution of the present invention utilizes the OpenFlow configuration point, and according to the resource isolation limitation of the OpenFlow switch, different logical switches on the same OpenFlow switch are configured to allocate non-overlapping resources of the same type of resources, and implement OpenFlow by extending the related technology OpenFlow protocol. The controller obtains the resource type of the resource switch and the available resource range of the configuration.

BRIEF abstract

1 is a schematic diagram of an OpenFlow network component architecture according to the related art;

2 is a diagram showing an example of dividing a plurality of OpenFlow logical switches on an OpenFlow switch according to the related art;

3 is a flowchart of a method for preventing a resource conflict of a logical switch from colliding according to a preferred embodiment of the present invention;

4 is a flowchart of a method for preventing a resource conflict of a logical switch from colliding according to the first embodiment of the present invention;

5 is a flowchart of a method for preventing a resource conflict of a logical switch from colliding according to Embodiment 2 of the present invention;

6 is a flowchart of a method for preventing a resource conflict of a logical switch from colliding according to Embodiment 3 of the present invention;

FIG. 7 is a schematic diagram of a system for preventing conflicts of resources occupied by a logical switch according to a preferred embodiment of the present invention.

Preferred embodiment of the invention

The following is an overview of the topics detailed in this document. This Summary is not intended to limit the scope of the claims.

The detailed description will be made below in conjunction with the accompanying drawings and specific embodiments.

The embodiment of the invention provides a method for preventing conflicts of resources occupied by a logical switch. The flowchart of the method is as shown in FIG. 3, and includes the following steps.

In step S302, for the resource types that need to implement resource isolation, the different logical switches on the same OpenFlow switch are respectively configured with non-overlapping resource types of the resource types.

Specifically, the specific software and hardware implementation methods used by different OpenFlow switches may be different, and the resource isolation restrictions of different OpenFlow switches may also be different. For example, a virtual local area network (VLAN) resource with an OpenFlow switch is shared between different logical switches created on the OpenFlow switch, that is, ports that are assigned the same VLAN on different logical switches are interworking. The isolation of VLAN resources between logical switches; at the same time, the VLAN resources of OpenFlow switches are isolated between different logical switches created on the OpenFlow switch, that is, even if the same VLAN is assigned on different logical switches. The ports are also not interoperable. Therefore, according to the resource isolation limitation of the OpenFlow switch, it is determined which resource types need to be manually configured to implement isolation, and then the OpenFlow configuration point separately configures the logical switch to occupy the resource range for each determined resource type. The different logical switches on the same OpenFlow switch do not overlap in the available resource ranges configured for the same type of resources.

Step S304, after the logical switch establishes a control connection with the associated OpenFlow controller, query the logical switch to determine the resource type with the resource isolation restriction.

Specifically, after multiple logical switches are created on the OpenFlow switch and the available resource ranges are configured, each logical switch automatically establishes a control connection with its own OpenFlow controller and runs OpenFlow on the control connection. protocol. The OpenFlow controller then sends a query message to the logical switch and receives a reply message from the logical switch to learn the resource type (eg, VLAN resource) with resource isolation restrictions. In this case, the OpenFlow controller immediately queries the logical switch for the resource type with the resource isolation restriction after the control connection is successfully established, so that the OpenFlow controller can know the resource type with the resource isolation restriction at the first time.

Step S306, when the OpenFlow controller needs to allocate the resource type with the resource isolation restriction to the corresponding logical switch, query the logical switch for the available resource range of the resource type, and use the occupied resource from the resource. A resource is selected in the range to be assigned to the logical switch.

Specifically, OpenFlow controllers that accept web application calls allocate resources to the logical switches they need to control. Since the OpenFlow controller knows in advance the resource type of the resource isolation restriction on the logical switch, when the OpenFlow controller needs to allocate the resource type with the resource isolation restriction to the logical switch, first, the OpenFlow controller sends a query message to the logical switch. Receiving a reply message of the logical switch to determine a range of available resources of the resource type on the logical switch, and then the OpenFlow controller selects a resource to be allocated to the logical switch from the learned range of available resources. The above-mentioned OpenFlow controller queries the configurable resource range on the logical switch as needed, and on the other hand, can prevent the problem of long-term occupation control connection and error-prone by querying the resource range of all resource types at one time, and on the other hand, The query process for the usable resource range of the resource type that does not need to be allocated is omitted, and the efficiency of the query is improved.

It can be seen from the foregoing process that the protection of the logical switch is provided by the preferred embodiment of the present invention. The method for conflicting resources is simple and practical. The OpenFlow controller initiates a query for resource types with resource isolation restrictions on the logical switch and the resource range of each resource type, so that the method has good compatibility and scalability. It can be applied to various OpenFlow switches produced by different software and hardware solutions, which better solves the technical problem of conflicts of resources occupied by logical switches.

Embodiment 1

4 is a flowchart of a method for preventing a resource conflict of a logical switch from colliding according to the first embodiment of the present invention. As shown in FIG. 4, in this embodiment, two OpenFlow logical switches on the same OpenFlow switch are respectively controlled by two OpenFlow controllers, that is, OpenFlow logical switch 1 is controlled by OpenFlow controller 1, and OpenFlow logical switch 2 is controlled by OpenFlow controller 2 control. Two OpenFlow logical switches share the VLAN resources of the same OpenFlow switch and there is a potential for conflict.

In this embodiment, the OpenFlow configuration point, the OpenFlow controller, and the OpenFlow logical switch in the OpenFlow network perform the following steps:

Step 402: The OpenFlow configuration point creates an OpenFlow logical switch 1 and an OpenFlow logical switch 2 on the OpenFlow switch, and configures the OpenFlow logical switch 1 with a VLAN occupiable range [1-2000], and configures the OpenFlow logical switch 2 with a VLAN occupiable range. 2001-4094]. The VLAN occupies of the OpenFlow logical switch 1 [1-2000] and the VLAN occupies of the OpenFlow logical switch 2 [2001-4094] do not overlap, which can avoid the two logical switches being separated into two. Potential VLAN assignment conflicts that may be caused by OpenFlow controllers.

Step 404: After the control connection between the OpenFlow logical switch 1 and the OpenFlow controller 1 is successfully established, the OpenFlow controller 1 immediately sends a query message to the OpenFlow logical switch 1 to query which resource types on the OpenFlow logical switch 1 have resource isolation restrictions. After receiving the query message sent by the OpenFlow controller 1, the OpenFlow logical switch 1 sends a reply message to the OpenFlow controller 1 to feedback the resource isolation restriction of the VLAN resource on the logical switch.

According to the OpenFlow protocol, the OpenFlow configuration point will configure the OpenFlow logical switch 1 with the address of the OpenFlow controller 1, and then the OpenFlow logical switch 1 will automatically send it. And establish a control connection with the OpenFlow controller 1.

Step 406: The network application invokes the OpenFlow controller 1 to allocate VLAN resources, and the OpenFlow controller 1 sends an inquiry message to the OpenFlow logical switch 1 to query the occupiable range of the configured VLAN resources on the OpenFlow logical switch 1. After receiving the query message sent by the OpenFlow controller 1, the OpenFlow logical switch 1 sends a reply message to the OpenFlow controller 1 to feed back the occupied range of the configured VLAN resources on the logical switch [1-2000]. After receiving the reply message of the OpenFlow logical switch 1, the OpenFlow controller 1 selects a VLAN to be assigned to the port on the OpenFlow logical switch 1 from the learned VLAN resource occupiable range [1-2000].

Steps 408-410 are performed in the same manner as steps 404-406. When the network application invokes the OpenFlow controller 2 to perform VLAN allocation on the OpenFlow logical switch 2, between steps 408-410 and steps 404-406. It is parallel and independent of each other.

Embodiment 2

FIG. 5 is a flowchart of a method for preventing conflicts of resources occupied by a logical switch according to Embodiment 2 of the present invention. As shown in FIG. 5, in this embodiment, two OpenFlow logical switches on the same OpenFlow switch are respectively controlled by two OpenFlow controllers, that is, OpenFlow logical switch 1 is controlled by OpenFlow controller 1, and OpenFlow logical switch 2 is controlled by OpenFlow controller 2 control. Two OpenFlow logical switches share the VLAN resources and virtual route forwarding (VRF) resources of the same OpenFlow switch and have potential conflicts. VRF is a virtual private network instance defined in the Virtual Private Network (VPN) technology defined by the Internet Engineering Task Force (IETF). Similar to a VLAN, multiple VRFs can be enabled on the same port of an OpenFlow switch, but on the same OpenFlow switch. Different logical switch ports belonging to different OpenFlow controllers may cause conflicts due to the same VRF being enabled.

Step 502: The OpenFlow configuration point creates an OpenFlow logical switch 1 and an OpenFlow logical switch 2 on the OpenFlow switch, and configures the OpenFlow logical switch 1 with a VLAN occupiable range [1-2000] and a VRF occupiable range [1-1000]. OpenFlow Logical Switch 2 is configured with a VLAN occupiable range [2001-4094] and a VRF occupiable range [1001-2000].

The VLAN occupies of the OpenFlow logical switch 1 [1-2000] and the VLAN occupies of the OpenFlow logical switch 2 [2001-4094] do not overlap, which can avoid the two logical switches being separated into two. Potential VLAN assignment conflicts that may be caused by OpenFlow controllers. The VRF occupiable range of the OpenFlow Logical Switch 1 [1-1000] and the VRF occupiable range [1001-2000] of the OpenFlow Logical Switch 2 are also non-overlapping, which avoids the fact that the two logical switches belong to two OpenFlow controls. Potential VRF allocation conflicts that may be caused by the device.

Step 504: After the control connection between the OpenFlow logical switch 1 and the OpenFlow controller 1 is successfully established, the OpenFlow controller 1 immediately sends a query message to the OpenFlow logical switch 1 to query which types of resources on the OpenFlow logical switch 1 have resource isolation restrictions. . After receiving the query message sent by the OpenFlow controller 1, the OpenFlow logical switch 1 sends a reply message to the OpenFlow controller 1 to feedback the resource isolation limit of the VLAN resource and the VRF resource on the logical switch.

Step 506: The network application invokes the OpenFlow controller 1 to allocate VLAN resources, and the OpenFlow controller 1 sends an inquiry message to the OpenFlow logical switch 1 to query the occupiable range of the configured VLAN resources on the OpenFlow logical switch 1. After receiving the query message sent by the OpenFlow controller 1, the OpenFlow logical switch 1 sends a reply message to the OpenFlow controller 1 to feed back the occupied range of the configured VLAN resources on the logical switch [1-2000]. After receiving the reply message of the OpenFlow logical switch 1, the OpenFlow controller 1 selects a VLAN to be assigned to the port on the OpenFlow logical switch 1 from the learned VLAN resource occupiable range [1-2000].

Step 508, the network application calls the OpenFlow controller 1 to allocate the VRF resources, and the OpenFlow controller 1 sends a query message to the OpenFlow logical switch 1 to query the vacable range of the configured VRF resources on the OpenFlow logical switch 1. After receiving the query message sent by the OpenFlow controller 1, the OpenFlow logical switch 1 sends a reply message to the OpenFlow controller 1 to feed back the vacant range of the configured VRF resources on the logical switch [1-1000]. After receiving the reply message of the OpenFlow logical switch 1, the OpenFlow controller 1 selects the VRF allocated to the port on the OpenFlow logical switch 1 from the learned VRF resource occupiable range [1-1000].

Embodiment 3

FIG. 6 is a flowchart of a method for preventing conflicts of resources occupied by a logical switch according to Embodiment 3 of the present invention. As shown in FIG. 6, in this embodiment, two OpenFlow logical switches on the same OpenFlow switch are respectively controlled by two OpenFlow controllers, that is, OpenFlow logical switch 1 is controlled by OpenFlow controller 1, and OpenFlow logical switch 2 is controlled by OpenFlow controller 2 control. Two OpenFlow logical switches share the VLAN resources, VRF resources, and Per-Platform-based Multiprotocol Label Switching (MPLS) label resources of the same OpenFlow switch and have potential conflicts. MPLS is a communication forwarding protocol developed by the IETF. The platform-based MPLS label on the same OpenFlow switch is used to uniformly allocate packets belonging to the same forwarding equivalence class (FEC) entering the OpenFlow switch.

Step 602: OpenFlow configuration points respectively create OpenFlow logical switch 1 and OpenFlow logical switch 2 on the OpenFlow switch, and configure OpenFlow logical switch 1 with a VLAN occupiable range [1-2000], a VRF occupiable range [1-1000], and based on The MPLS label of the platform can occupy the range [16-2 ¹⁹ ], configure the OpenFlow logical switch 2 with the VLAN occupiable range [2001-4094], the VRF occupiable range [1001-2000], and the platform-based MPLS label occupies the range [2] ¹⁹ +1-2 ²⁰ ].

The VLAN occupies of the OpenFlow logical switch 1 [1-2000] and the VLAN occupiable range [2001-4094] of the OpenFlow logical switch 2 do not overlap, which can be avoided because the two OpenFlow logical switches belong to the two Potential VLAN assignment conflicts that may be caused by OpenFlow controllers. The VRF occupiable range of the OpenFlow Logical Switch 1 [1-1000] and the VRF occupiable range [1001-2000] of the OpenFlow Logical Switch 2 are also non-overlapping, which avoids the fact that the two OpenFlow logical switches belong to two OpenFlows. Potential VRF allocation conflicts that may be caused by the controller. The platform-based MPLS label of OpenFlow Logical Switch 1 can occupy a range [16-2 ¹⁹ ] and the platform-based MPLS label of OpenFlow Logical Switch 2 can occupy a range [2 ¹⁹ +1-2 ²⁰ ] and it does not overlap. Avoid potential platform-based MPLS label conflicts that may result from the two OpenFlow logical switches being separated into two OpenFlow controllers.

Step 604, after the control connection between the OpenFlow logical switch 1 and the OpenFlow controller 1 is successfully established, the OpenFlow controller 1 immediately sends a query message to the OpenFlow logical switch 1 to query which types of resources on the OpenFlow logical switch 1 have resource isolation restrictions. . After receiving the query message sent by the OpenFlow controller 1, the OpenFlow logical switch 1 sends a reply message to the OpenFlow controller 1 to feedback the resource isolation limitation of the VLAN resource, the VRF resource, and the platform-based MPLS label resource on the logical switch. .

Step 606: The network application invokes the OpenFlow controller 1 to perform allocation of the platform-based MPLS label resource, and the OpenFlow controller 1 sends a query message to the OpenFlow logical switch 1 to query the configured platform-based MPLS label resource on the OpenFlow logical switch 1. Can occupy the range. After receiving the query message sent by the OpenFlow controller 1, the OpenFlow logical switch 1 sends a reply message to the OpenFlow controller 1 to feed back the available range of the platform-based MPLS label resource configured on the logical switch. [16- 2 ¹⁹ ]. After receiving the reply message of the OpenFlow logical switch 1, the OpenFlow controller 1 selects the platform-based MPLS label from the learned platform-based MPLS label resource occupiable range [16-2 ¹⁹ ] to the FEC entering the OpenFlow logical switch 1. .

Step 608: The network application invokes the OpenFlow controller 1 to allocate VLAN resources, and the OpenFlow controller 1 sends an inquiry message to the OpenFlow logical switch 1 to query the occupable range of the configured VLAN resources on the OpenFlow logical switch 1. After receiving the query message sent by the OpenFlow controller 1, the OpenFlow logical switch 1 sends a reply message to the OpenFlow controller 1 to feed back the occupied range of the configured VLAN resources on the logical switch [1-2000]. After receiving the reply message of the OpenFlow logical switch 1, the OpenFlow controller 1 selects a VLAN to be assigned to the port on the OpenFlow logical switch 1 from the learned VLAN resource occupiable range [1-2000].

As shown in FIG. 7, the preferred embodiment of the present invention further provides a system for preventing conflicts between resources occupied by a logical switch, including: a configuration module 10, a determining module 12, and an allocating module 14.

The configuration module 10 (for example, an OpenFlow configuration point) is configured to: for different resource switches on the same OpenFlow switch, different non-overlapping resource types of the resource types are configured for resource types that need to implement resource isolation;

The determining module 12 is configured to: establish the logical switch and the associated OpenFlow controller After controlling the connection, query the logical switch to determine the resource type with resource isolation restrictions;

The allocating module 14 is configured to: when the OpenFlow controller needs to allocate the resource type with the resource isolation restriction to the corresponding logical switch, query the logical switch for the available resource range of the resource type, and from the A resource selected from the range of available resources is allocated to the logical switch. Specifically, after each logical switch automatically establishes a control connection with the associated OpenFlow controller and runs the OpenFlow protocol on the control connection, the determining module 12 is configured to send a query message to the logical switch and receive a reply message of the logical switch. To know the type of resource that has resource isolation restrictions.

Optionally, the configuration module 10 is configured to separately configure, for different logical switches on the same OpenFlow switch, the vacant resource ranges of the resource types that are not overlapped: for the same type of resources, different on the same OpenFlow switch. The range of available resources configured by the logical switch is not overlapping.

Optionally, the determining module 12 is configured to query the logical switch to determine a resource type with resource isolation restrictions after the logical switch establishes a control connection with the associated OpenFlow controller in the following manner: at each logical switch After the control connection is automatically established with the associated OpenFlow controller and the OpenFlow protocol is run on the control connection, the determining module is configured to send a query message to the logical switch and receive a reply message of the logical switch to learn that there is resource isolation. Restricted resource type.

Optionally, the allocating module 14 is configured to query the logical switch for an occupant resource range of the resource type, and select a resource from the occupable resource range to the logical switch: to the logic The switch sends a query message and receives a reply message of the logical switch to learn the available resource range of the resource type on the logical switch, and selects a resource to be allocated to the logical switch from the learned available resource range.

In this embodiment, the determining module 12 and the assigning module 14 are included, for example, in an OpenFlow controller. However, the present invention is not limited thereto. In other embodiments, the determination module 12 and the distribution module 14 are, for example, modules that are separate from the OpenFlow controller. The specific content of the system is the same as that described above, and thus will not be described herein.

The basic principles and main features of the present invention and the advantages of the present invention are shown and described above. The present invention is not limited by the above embodiments, and the above embodiments and descriptions are merely illustrative of the present invention. The present invention is subject to various modifications and improvements without departing from the spirit and scope of the invention.

The embodiment of the invention further discloses a computer program, comprising program instructions, when the program instruction is executed by the terminal, so that the terminal can perform any of the above methods for detecting wireless network access security.

The embodiment of the invention also discloses a carrier carrying the computer program.

Other aspects will be apparent upon reading and understanding the drawings and detailed description.

Industrial applicability

The technical solution of the present invention utilizes the OpenFlow configuration point, and according to the resource isolation limitation of the OpenFlow switch, different logical switches on the same OpenFlow switch are configured to allocate non-overlapping resources of the same type of resources, and implement OpenFlow control by extending the existing OpenFlow protocol. The resource type of the logical switch that has resource isolation restrictions and the acquired resource range of the configuration. Therefore, the present invention has strong industrial applicability.

Claims

A method for preventing conflicts between resources occupied by a logical switch includes the following steps:

Configuring a resource range of the resource type that does not overlap for different logical switches on the same OpenFlow switch.

After the logical switch establishes a control connection with the associated OpenFlow controller, querying the logical switch to determine a resource type with a resource isolation restriction;

When the OpenFlow controller needs to allocate the resource type with the resource isolation restriction to the corresponding logical switch, query the logical switch for the available resource range of the resource type, and select, from the range of the occupied resources Resources are allocated to the logical switch.
The method of claim 1, wherein the resource type comprises one or more of the following resources:

Virtual local area network (VLAN) resources, virtual route forwarding (VRF) resources, and multi-protocol label switching (MPLS) label resources.
The method for preventing conflicts of resources occupied by a logical switch according to claim 1, wherein after the logical switch establishes a control connection with an associated OpenFlow controller, the logical switch is queried to determine that there is a resource isolation restriction. The steps for the resource type include:

After each logical switch automatically establishes a control connection with the associated OpenFlow controller and runs the OpenFlow protocol on the control connection, the OpenFlow controller immediately sends a query message to the logical switch and receives a reply message of the logical switch. Know the resource type with resource isolation restrictions.
The method for preventing conflicts of resources occupied by a logical switch according to claim 1, wherein the querying the logical switch for an occupable resource range of the resource type, and selecting a resource allocation from the sufficiency resource range The steps for the logical switch include:

The OpenFlow controller sends a query message to the logical switch and receives the logic The reply message of the switch is used to learn the range of available resources of the resource type on the logical switch, and the OpenFlow controller selects a resource to be allocated to the logical switch from the learned range of available resources.
The method for preventing conflicts of resources occupied by a logical switch according to claim 1, wherein the resource type is determined according to a resource isolation restriction condition of the OpenFlow switch.
The method for preventing conflicts of resources occupied by a logical switch according to claim 1, wherein the step of configuring the resource ranges of the resource types that are not overlapped for different logical switches on the same OpenFlow switch respectively includes:

For the same type of resources, the available resource ranges configured for different logical switches on the same OpenFlow switch are not overlapping.
A system for preventing conflicts between resources occupied by a logical switch, comprising: a configuration module, a determining module, and an allocation module, wherein

The configuration module is configured to: configure, for different resource switches on the same OpenFlow switch, non-overlapping resource ranges of the resource types for resource types that need to implement resource isolation;

The determining module is configured to: after the logical switch establishes a control connection with the associated OpenFlow controller, query the logical switch to determine a resource type with a resource isolation restriction;

The allocation module is configured to: when the OpenFlow controller needs to allocate the resource type with the resource isolation restriction to the corresponding logical switch, query the logical switch for the available resource range of the resource type, and A resource selected from the range of available resources is allocated to the logical switch.
The system of claim 7, wherein the resource type comprises one or more of the following resources:

VLAN resources, VRF resources, and MPLS label resources.
The system for preventing conflicts of resources occupied by a logical switch according to claim 7, wherein the determining module is configured to query the logical switch after establishing a control connection between the logical switch and an associated OpenFlow controller according to the following manner: To determine the resource type with resource isolation restrictions:

After the logical switch automatically establishes a control connection with the associated OpenFlow controller and runs the OpenFlow protocol on the control connection, the determining module is configured to send a query message to the logical switch and receive a reply message of the logical switch. To know the type of resource that has resource isolation restrictions.
The system for preventing conflicts of resources occupied by a logical switch according to claim 7, wherein the allocating module is configured to query the logical switch for an occupation resource range of the resource type according to the following manner, and Selecting a resource allocation to the logical switch in the occupied resource range:

Sending a query message to the logical switch and receiving a reply message of the logical switch, to learn an available resource range of the resource type on the logical switch, and selecting a resource allocation from the learned available resource range to the Logical switch.
The system for preventing conflicts of resources occupied by a logical switch according to claim 7, wherein: the resource type is determined according to a resource isolation restriction condition of the OpenFlow switch.
The system of claim 7, wherein the configuration module is configured to configure, for different logical switches on the same OpenFlow switch, non-overlapping resources of the resource type as follows: Resource range:

For the same type of resources, the available resource ranges configured for different logical switches on the same OpenFlow switch are not overlapping.