WO2016141749A1

WO2016141749A1 - Port mapping implementation method and system for virtual machine, server and storage medium

Info

Publication number: WO2016141749A1
Application number: PCT/CN2015/098201
Authority: WO
Inventors: 刘磊; 刘亮
Original assignee: 中兴通讯股份有限公司
Priority date: 2015-03-06
Filing date: 2015-12-22
Publication date: 2016-09-15
Also published as: CN105991789A

Abstract

Disclosed is a port mapping implementation method for a virtual machine, comprising: a first server, when determining that an associated default security group exists in a virtual machine for port mapping, selects a mapping port corresponding to an open port of the virtual machine, and adds open port information and mapping port information of the virtual machine to the default security group; and send a port mapping request of the virtual machine to a second server, the port mapping request being used for instructing the second server to perform port mapping on the virtual machine according to a pre-set port mapping rule. Also disclosed are a port mapping implementation system for a virtual machine, a server and a storage medium.

Description

Method, server, system and storage medium for implementing virtual machine port mapping

Technical field

The present invention relates to a related art for port mapping of a virtual machine in an Openstack cloud computing management platform, and in particular, to a method, a server, a system, and a storage medium for implementing virtual machine port mapping.

Background technique

Openstack is an open source cloud platform management project jointly developed by NASA and Rackspace. It has been widely used in the construction of public and private clouds. Enterprises and individuals can quickly and easily deploy their own cloud computing environment using Openstack. .

In the cloud platform, multiple virtual hosts are virtualized on the basis of physical hosts through virtualization technology, and the resources are integrated and utilized through virtualization, and the private Internet protocol (IP, Internet Protocol) of the hosts in the local area network can be obtained through port mapping. The address and the port are mapped to the public IP address of the NAT gateway and a free port of the Network Address Translation (NAT) gateway. The NAT gateway records the port mapping rule, so that the host and the public network can communicate with each other.

When creating a virtual machine, the virtual machine is assigned a fixed IP and a floating IP. The fixed IP is used for communication between the virtual machines, the floating IP is used for communication with the public network, and when the public network user wants to access the service of the virtual machine, If you assign a public network IP address to each virtual machine, the IP address will be wasted. In addition, when port mapping is performed on the VM, you need to manually add the port to the security group to open the port. However, this complicates the port mapping process of the virtual machine, resulting in waste of human resources.

Summary of the invention

In view of this, embodiments of the present invention are expected to provide a method for implementing virtual machine port mapping. The server, the system, and the storage medium can effectively save IP address resources, simplify the operation of virtual machine port mapping, and enhance the user experience.

To achieve the above objective, the technical solution of the embodiment of the present invention is implemented as follows:

The embodiment of the invention provides a method for implementing virtual machine port mapping, and the method includes:

When the first server determines that the virtual machine that performs port mapping has an associated default security group, the mapping port corresponding to the virtual machine open port is selected, and the open port information of the virtual machine and the mapping port information are added to the Default security group;

Sending a port mapping request of the virtual machine to the second server; the port mapping request is used to instruct the second server to perform port mapping on the virtual machine according to a preset port mapping rule.

In the above solution, the method further includes:

When the first server determines that the virtual machine does not have an associated default security group, the default security group of the virtual machine is created, and the created default security group is associated with the virtual machine.

In the above solution, the default security group is named after the floating Internet Protocol IP of the virtual machine and the name of the virtual machine, and the first server determines that the default security group associated with the virtual machine that performs port mapping includes:

The first server searches for a security group named with the floating IP of the virtual machine and the virtual machine name in the security group associated with the virtual machine, and if yes, determines that the virtual machine has an associated default security group. .

In the above solution, the method further includes:

When the first server deletes the port mapping of the virtual machine, the corresponding open port information in the default security group associated with the virtual machine is deleted at the same time;

When the first server deletes the virtual machine, the default security group associated with the virtual machine is deleted, and the second server is notified to delete related information of the virtual machine.

In the above solution, the port mapping of the virtual machine by using the preset port mapping rule includes:

The second server maps the floating IP address of the virtual machine to its own IP address according to a preset port mapping rule, maps the open port to the mapped port, and configures the virtual machine in its own firewall. Port mapping rules.

In the foregoing solution, the mapping port corresponding to the open port of the virtual machine is selected:

The first server sets the port of the second server to be PORT_1 to PORT_n, and reads the maximum value PORT_max of the port number used by the second server stored in the database, and determines that the value of max is less than n, and selects the virtual machine. The mapping port corresponding to the open port is PORT_(max+1); when it is determined that the value of max is not less than n, traverse all the ports of the second server, and determine that there is a port not included in the database, select one not The port included in the database is a mapping port corresponding to the open port of the virtual machine; wherein the n and max are positive integers.

The embodiment of the present invention further provides a server, where the server includes: a processing module and a sending module;

The processing module is configured to determine a mapping port corresponding to the open port of the virtual machine when the virtual machine that performs the port mapping has an associated default security group, and the open port information of the virtual machine and the mapping port information Add to the default security group;

The sending module is configured to send a port mapping request of the virtual machine to the second server; the port mapping request is used to instruct the second server to perform port mapping on the virtual machine according to a preset port mapping rule.

In the above solution, the processing module is further configured to: when the virtual machine does not have an associated default security group, create a default security group of the virtual machine, and associate the created default security group to the virtual machine.

In the above solution, the default security group is named after the floating IP of the virtual machine plus the name of the virtual machine;

Correspondingly, the processing module is configured to search for a security group associated with the virtual machine. There is a security group named with the floating IP of the virtual machine plus the virtual machine name, and if so, it is determined that the virtual machine has an associated default security group.

In the above solution, the server further includes a deletion module configured to delete the port mapping of the virtual machine, and simultaneously delete the corresponding open port information in the default security group associated with the virtual machine; and when deleting the virtual machine, The default security group associated with the virtual machine is deleted, and the second server is notified to delete related information of the virtual machine.

In the above solution, the processing module is configured to set the port of the second server to be PORT_1 to PORT_n, and read the maximum value PORT_max of the port number used by the second server stored in the database, and determine that the value of max is smaller than n, the mapping port corresponding to the open port of the virtual machine is selected as PORT_(max+1); when the value of max is determined to be not less than n, all the ports of the second server are traversed, and it is determined that the existence is not included in the database. A port that is not included in the database is selected as a mapping port corresponding to the open port of the virtual machine; wherein n and max are positive integers.

An embodiment of the present invention further provides a system for implementing virtual machine port mapping, where the system includes: a first server and a second server;

The first server is configured to determine a mapping port corresponding to the open port of the virtual machine when the virtual machine that performs the port mapping has an associated default security group, and the open port information of the virtual machine and the mapping port Adding information to the default security group, and sending a port mapping request of the virtual machine to the second server;

The second server is configured to receive a port mapping request of the virtual machine sent by the first server, and perform port mapping on the virtual machine according to a preset port mapping rule.

In the above solution, the second server is configured to map the floating IP address of the virtual machine to its own IP address according to a preset port mapping rule, and map the open port to the mapping port, and The port mapping rules of the virtual machine are configured in the firewall.

The embodiment of the invention further provides a computer storage medium, wherein the computer storage medium is stored There is stored a computer program configured to perform the above-described implementation of the virtual machine port mapping of the embodiment of the present invention.

The method for implementing the virtual machine port mapping, the server, the system, and the storage medium provided by the embodiment of the present invention. When the first server determines that the virtual machine associated with the port mapping has an associated default security group, the mapping corresponding to the open port of the virtual machine is selected. a port, and adding the open port information of the virtual machine and the mapping port information to the default security group; sending a port mapping request of the virtual machine to the second server; and the port mapping request is used to indicate the second The server performs port mapping on the virtual machine according to a preset port mapping rule. In this way, the first server can automatically add the open port information of the virtual machine and the mapping port information to the default security group, which saves the trouble caused by manual addition in the prior art, and simplifies the operation of performing virtual machine port mapping. Improves the user experience.

DRAWINGS

1 is a schematic flowchart of a method for implementing virtual machine port mapping according to an embodiment of the present invention;

2 is a schematic flowchart of a method for implementing virtual machine port mapping according to Embodiment 2 of the present invention;

3 is a schematic structural diagram of a server according to an embodiment of the present invention;

FIG. 4 is a schematic structural diagram of a system for implementing a virtual machine port mapping according to an embodiment of the present invention.

detailed description

In the embodiment of the present invention, when the first server determines that the virtual machine that performs port mapping has an associated default security group, the mapping port corresponding to the open port of the virtual machine is selected, and the open port information of the virtual machine and the The mapping port information is added to the default security group, and the port mapping request of the virtual machine is sent to the second server; the second server receives the port mapping request sent by the first server, and the virtual port is configured according to a preset port mapping rule. The machine performs port mapping.

FIG. 1 is a schematic flowchart of a method for implementing virtual machine port mapping according to an embodiment of the present invention. As shown in FIG. 1 , a method for implementing virtual machine port mapping according to an embodiment of the present invention includes:

Step 101: When the first server determines that the virtual machine that performs the port mapping has an associated default security group, the mapping port corresponding to the virtual machine open port is selected, and the open port information and the mapping port information of the virtual machine are added. To the default security group;

Here, the first server is a server for managing the virtual machine, and may be a WEB server;

Adding the open port information of the virtual machine and the mapping port information to the default security group, the first server further includes all the port mapping information about the virtual machine, such as a protocol name of the virtual machine. Add to the default security group.

In an embodiment, when the first server determines that the virtual machine does not have an associated default security group, the default security group of the virtual machine is created, and the floating IP of the virtual machine is added with the name of the virtual machine. Determining a default security group and associating the created default security group to the virtual machine; thus, naming the default security group with the floating IP of the virtual machine plus the name of the virtual machine, ensuring the default security group The uniqueness of the name; the default security group of the virtual machine is generated by the first server, and when the virtual machine is port mapped, the open port information of the virtual machine and the mapping port information and the like are automatically added to the default security. Group to implement the function of opening the virtual machine port.

In an embodiment, the first server determines that the default security group associated with the virtual machine that performs port mapping includes:

In an embodiment, the selecting a mapping port corresponding to the open port of the virtual machine includes:

The first server selects an idle port of the second server as the mapping port corresponding to the virtual machine open port; the operation includes: the first server sets the port of the second server to be PORT_1 to PORT_n, and reads the database. The stored second server has been used The maximum value of the port number PORT_max, when the value of max is less than n, the mapping port corresponding to the open port of the virtual machine is selected as PORT_(max+1); when the value of max is determined to be not less than n, the second server is traversed. All ports are determined to have a port that is not included in the database, and a port that is not included in the database is selected as a mapping port corresponding to the virtual machine open port; wherein the n and max are positive An integer; here, when the first server reads the port number of the second server that has been stored in the database, if the port number included in the database is not found, PORT_1 is selected as the virtual machine. The mapped port corresponding to the open port;

In an embodiment, when the first server traverses all ports of the second server and determines that all ports of the second server are already included in the database, an error message is sent to inform that the port mapping cannot be completed.

Here, after the step, the method further includes: adding, by the first server, mapping port information corresponding to the open port of the virtual machine to the database; correspondingly, the database is configured to store the added by the first server The port on which the second server has been used, that is, the mapping port information corresponding to all the open ports of the virtual machine port mapped by the second server; the database may be stored on the second server or on other servers. .

In an embodiment, the first server reads the maximum value PORT_max of the port number used by the second server stored in the database, and locks the database to prevent the database from being accessed by multiple users at the same time. Cause conflicts.

In an embodiment, the method further includes: when the first server deletes the port mapping of the virtual machine, deleting the corresponding open port information in the default security group associated with the virtual machine;

When the first server deletes the virtual machine, the default security group associated with the virtual machine is deleted, and the second server is notified to delete related information of the virtual machine, where the related information of the virtual machine includes the Port mapping rules of the virtual machine configured by the second server, and the like.

Step 102: Send a port mapping request of the virtual machine to the second server.

Here, the port mapping request includes: open port information of the virtual machine, mapping port information corresponding to the open port, a floating IP address of the virtual machine, and the like;

The second server is a server dedicated to port mapping the virtual machine, that is, IP address and port translation.

In an embodiment, the port mapping request is used to instruct the second server to perform port mapping on the virtual machine according to a preset port mapping rule;

The port mapping of the virtual machine by the second server according to the preset port mapping rule includes:

The second server maps the floating IP address of the virtual machine corresponding to the open port to its own IP address according to a preset port mapping rule, maps the open port to the mapped port, and configures the virtual The port mapping rule of the machine; the second server can map the floating IP addresses of the multiple virtual machines to their own IP addresses, thereby avoiding the allocation of a public network IP address for each virtual machine in the prior art. The IP address is wasted.

In an embodiment, the second server includes three rules when configuring the port mapping rule of the virtual machine in the firewall: input (INPUT), network address translation (NAT), and source address translation (SNAT, Source). Network Address Translation, and the fault-tolerant processing is performed when the port mapping rule of the VM is configured. If any of the above three rules is added with an error, the remaining related rules are also deleted.

2 is a schematic flowchart of a method for implementing virtual machine port mapping according to Embodiment 2 of the present invention; as shown in FIG. 2, the method for implementing virtual machine port mapping in the embodiment of the present invention includes:

Step 201: The first server determines whether there is an associated default security group for the port mapping virtual machine, if there is an execution step 202; if not, step 203;

Here, the default security group is named after the floating IP of the virtual machine plus the name of the virtual machine, thus ensuring the uniqueness of the default security group name;

Determining, by the first server, that the virtual machine that performs port mapping has an associated default security package include:

Step 202: The first server selects the mapping port corresponding to the virtual machine open port, and adds the open port information of the virtual machine and the mapping port information to the default security group, and step 204 is performed;

Here, the selecting the mapping port corresponding to the open port of the virtual machine includes:

The first server selects an idle port of the second server as the mapping port corresponding to the virtual machine open port; the operation includes: the first server sets the port of the second server to be PORT_1 to PORT_n, and reads the database. The stored maximum value of the port number of the second server is PORT_max, and when the value of max is determined to be less than n, the mapping port corresponding to the open port of the virtual machine is selected as PORT_(max+1); the value of max is determined. When not less than n, traversing all ports of the second server, determining that there is a port not included in the database, selecting a port not included in the database as a mapping port corresponding to the open port of the virtual machine Wherein, n and max are both positive integers; here, when the first server reads the port number of the second server stored in the database that has been used, it is not found to be included in the database. When the port number is selected, PORT_1 is selected as the mapping port corresponding to the open port of the virtual machine;

Adding the open port information of the virtual machine and the mapping port information to the default security group, the first server further includes all the port mapping information about the virtual machine, such as a protocol name of the virtual machine. Add to the default security group, thus implementing the open virtual The function of the machine port;

While the first server reads the maximum value PORT_max of the port number used by the second server stored in the database, the database is locked to prevent the database from being conflicted by multiple users at the same time.

Step 203: The first server creates a default security group of the virtual machine, and associates the created default security group to the virtual machine, and performs step 206;

Here, after the first server creates the default security group of the virtual machine, the default security group is named by the floating IP of the virtual machine plus the name of the virtual machine;

The default security group of the virtual machine is generated by the first server, and the port information of the virtual machine is automatically added to the default security group to implement the function of opening the virtual machine port. .

Step 204: The first server sends a port mapping request of the virtual machine to the second server.

Here, the port mapping request includes: open port information of the virtual machine, mapping port information corresponding to an open port of the virtual machine, a floating IP address of the virtual machine, and the like;

In an embodiment, the port mapping request is used to instruct the second server to perform port mapping on the virtual machine according to a preset port mapping rule.

Step 205: The second server receives the port mapping request, and performs port mapping on the virtual machine according to a preset port mapping rule.

The method includes: mapping, by the second server, the floating IP address of the virtual machine corresponding to the open port to its own IP address according to a preset port mapping rule, mapping the open port to the mapping port, and in the firewall The port mapping rule of the virtual machine is configured. In this manner, the second server can map the floating IP addresses of the multiple virtual machines to their own IP addresses, thereby avoiding assigning a public network to each virtual machine in the prior art. The IP address caused by the IP address is wasted.

Step 206: End this process flow.

3 is a schematic structural diagram of a server according to an embodiment of the present invention; as shown in FIG. 3, the present invention The composition of the embodiment server includes: a processing module 31 and a sending module 32;

The processing module 31 is configured to: when the virtual machine that performs the port mapping has an associated default security group, select a mapping port corresponding to the virtual machine open port, and open the port information of the virtual machine and the mapping port. Information is added to the default security group;

The sending module 32 is configured to send a port mapping request of the virtual machine to the second server; the port mapping request is used to instruct the second server to perform port mapping on the virtual machine according to a preset port mapping rule.

In an embodiment, the processing module 31 is further configured to add information such as a protocol name of the virtual machine to the default security group.

In an embodiment, the processing module 31 is further configured to: when determining that the virtual machine does not have an associated default security group, create a default security group of the virtual machine, and add the floating IP of the virtual machine. The name of the virtual machine names the default security group and associates the created default security group to the virtual machine.

In an embodiment, the default security group is named after the floating IP of the virtual machine plus the name of the virtual machine;

Correspondingly, the processing module 31 determines that the virtual machine that performs port mapping has an associated default security group, including:

The processing module 31 searches for a security group named with the floating IP of the virtual machine and the virtual machine name in the security group associated with the virtual machine, and if yes, determines that the virtual machine has an associated default security group. .

In an embodiment, the server further includes a deletion module 33 configured to delete the port mapping of the virtual machine, delete the corresponding open port information in the default security group associated with the virtual machine, and delete the virtual At the same time, the default security group associated with the virtual machine is deleted, and the second server is notified to delete related information of the virtual machine. Here, the related information includes: the virtual machine configured by the second server Port mapping rules, etc.

In an embodiment, the port mapping request includes: open port information of the virtual machine, mapping port information corresponding to the open port, a floating IP address of the virtual machine, and the like.

In an embodiment, the port mapping of the virtual machine by the second server according to the preset port mapping rule includes:

In an embodiment, the processing module 31 selects a mapping port corresponding to the open port of the virtual machine, and includes:

The processing module 31 sets the port of the second server to be PORT_1 to PORT_n, reads the maximum value PORT_max of the port number used by the second server stored in the database, and determines that the value of max is less than n, and selects The mapping port corresponding to the open port of the virtual machine is PORT_(max+1); when it is determined that the value of max is not less than n, traversing all the ports of the second server, determining that there is a port not included in the database And selecting a port that is not included in the database as a mapping port corresponding to the open port of the virtual machine; where n and max are positive integers;

In an embodiment, when the processing module 31 traverses all ports of the second server and determines that there is no port not included in the database, an error message is sent to inform that the port mapping cannot be completed;

Here, the processing module 31 is further configured to add the selected mapping port to the database; the database is configured to store a port number of a port used by the second server, and may be stored in the second On the server, it can also be located on other servers.

In an embodiment, the processing module 31 reads the second server stored in the database. At the same time as the maximum value of the port number PORT_max that has been used, the database is locked, preventing the database from being simultaneously accessed by multiple users to cause a collision.

4 is a schematic structural diagram of a system for implementing a port mapping of a virtual machine according to an embodiment of the present invention; as shown in FIG. 4, the component of the system for implementing virtual port port mapping in the embodiment of the present invention includes: a first server 41 and a second server 42. ;among them,

The first server 41 is configured to determine a mapping port corresponding to the open port of the virtual machine when the virtual machine that performs port mapping has an associated default security group, and the open port information of the virtual machine and the mapping Port information is added to the default security group, and the port mapping request of the virtual machine is sent to the second server 42;

The second server 42 is configured to receive the port mapping request sent by the first server 41, and perform port mapping on the virtual machine according to a preset port mapping rule.

Here, the default security group is named after the floating internet protocol IP of the virtual machine plus the name of the virtual machine;

The first server 41 determines that the default security group associated with the virtual machine that performs port mapping includes:

The first server 41 searches for a security group named with the floating IP of the virtual machine and the virtual machine name in the security group associated with the virtual machine, and if yes, determines that the virtual machine has an associated default security. group.

In an embodiment, when the first server 41 determines that the virtual machine does not have an associated default security group, the default security group of the virtual machine is created, and the floating IP of the virtual machine is added with the name of the virtual machine. The default security group and associates the created default security group to the virtual machine.

In an embodiment, the first server 41 selects a mapping port corresponding to the open port of the virtual machine, including:

The first server 41 sets the port of the second server 42 to be PORT_1 to PORT_n, and reads the maximum value of the port number used by the second server 42 stored in the database. PORT_max, when it is determined that the value of max is less than n, the mapping port corresponding to the open port of the virtual machine is selected as PORT_(max+1); when the value of max is determined to be not less than n, all ports of the second server 42 are traversed. When it is determined that there is a port that is not included in the database, a port that is not included in the database is selected as a mapping port corresponding to the open port of the virtual machine; wherein, n and max are positive integers.

When the first server 41 traverses all the ports of the second server 42 and determines that there is no port not included in the database, an error message is sent to inform that the port mapping cannot be completed;

Here, the first server is further configured to add the mapping port information to the database; correspondingly, the database is used to store a port number of a port that the second server 42 has been used, and may be stored. On the second server, it can also be located on other servers.

In an embodiment, the first server 41 reads the maximum value PORT_max of the port number used by the second server 42 stored in the database, and locks the database to prevent the database from being simultaneously multiple. User access creates a conflict.

In an embodiment, when the first server 41 deletes the port mapping of the virtual machine, the corresponding open port information in the default security group associated with the virtual machine is deleted at the same time;

When the first server 41 deletes the virtual machine, the default security group associated with the virtual machine is deleted, and the second server is notified to delete related information of the virtual machine.

In an embodiment, the port mapping of the virtual machine by the second server 42 according to the preset port mapping rule includes:

The second server 42 maps the floating IP address of the virtual machine to its own IP address according to a preset port mapping rule, maps the open port to the mapped port, and configures the virtual machine in its own firewall. Port mapping rules.

The processing module 31, the sending module 32, and the deleting module 33 proposed in the embodiments of the present invention may all be implemented by a processor, and may also be implemented by a specific logic circuit; In use, the processor can be a central processing unit (CPU), a microprocessor (MPU), or a field programmable gate array (FPGA).

In the embodiment of the present invention, if the implementation method of the virtual machine port mapping described above is implemented in the form of a software function module, and is sold or used as an independent product, it may also be stored in a computer readable storage medium. Based on such understanding, the technical solution of the embodiments of the present invention may be embodied in the form of a software product in essence or in the form of a software product stored in a storage medium, including a plurality of instructions. A computer device (which may be a personal computer, server, or network device, etc.) is caused to perform all or part of the methods described in various embodiments of the present invention. The foregoing storage medium includes various media that can store program codes, such as a USB flash drive, a mobile hard disk, a read only memory (ROM), a magnetic disk, or an optical disk. Thus, embodiments of the invention are not limited to any specific combination of hardware and software.

Correspondingly, the embodiment of the present invention further provides a computer storage medium, where the computer storage medium stores a computer program, and the computer program is used to implement the virtual machine port mapping implementation method of the embodiment of the present invention.

The above is only the preferred embodiment of the present invention and is not intended to limit the scope of the present invention.

Industrial applicability

In the embodiment of the present invention, when the first server determines that the port-mapped virtual machine has an associated default security group, the mapping port corresponding to the virtual machine open port is selected, and the open port information of the virtual machine and the mapping port are The information is added to the default security group; the port mapping request of the virtual machine is sent to the second server; the port mapping request is configured to instruct the second server to perform port mapping on the virtual machine according to a preset port mapping rule. In this way, the first server can automatically add the open port information of the virtual machine and the mapping port information to the default security group, which saves the trouble caused by manual addition in the prior art, and simplifies the operation of performing virtual machine port mapping. Improves the user experience.

Claims

A method for implementing virtual machine port mapping, the method comprising:

When the first server determines that the virtual machine that performs port mapping has an associated default security group, the mapping port corresponding to the virtual machine open port is selected, and the open port information of the virtual machine and the mapping port information are added to the Default security group;

Sending a port mapping request of the virtual machine to the second server; the port mapping request is used to instruct the second server to perform port mapping on the virtual machine according to a preset port mapping rule.
The method of claim 1 wherein said method further comprises:

When the first server determines that the virtual machine does not have an associated default security group, the default security group of the virtual machine is created, and the created default security group is associated with the virtual machine.
The method according to claim 1 or 2, wherein the default security group is named after a floating internet protocol IP of the virtual machine plus a name of the virtual machine;

The first server determines that the default security group associated with the virtual machine that performs port mapping includes:

The first server searches for a security group named with the floating IP of the virtual machine and the virtual machine name in the security group associated with the virtual machine, and if yes, determines that the virtual machine has an associated default security group. .
The method of claim 1 or 2, wherein the method further comprises:

When the first server deletes the port mapping of the virtual machine, the corresponding open port information in the default security group associated with the virtual machine is deleted at the same time;

When the first server deletes the virtual machine, the default security group associated with the virtual machine is deleted, and the second server is notified to delete related information of the virtual machine.
The method of claim 1 or 2, wherein the selecting a mapping port corresponding to the virtual machine open port comprises:

The first server sets the port of the second server to PORT_1 to PORT_n, and reads the database. The maximum value of the port number used by the second server is PORT_max, and when the value of max is determined to be less than n, the mapping port corresponding to the open port of the virtual machine is selected as PORT_(max+1); When the value is not less than n, traversing all ports of the second server, determining that there is a port not included in the database, selecting a port not included in the database as a mapping corresponding to the open port of the virtual machine a port; wherein the n and max are positive integers.
The method according to claim 1 or 2, wherein the port mapping of the virtual machine by the second server according to a preset port mapping rule comprises:

The second server maps the floating IP address of the virtual machine to its own IP address according to a preset port mapping rule, maps the open port to the mapped port, and configures the virtual machine in its own firewall. Port mapping rules.
A server, the server comprising: a processing module and a sending module; wherein

The processing module is configured to determine a mapping port corresponding to the open port of the virtual machine when the virtual machine that performs the port mapping has an associated default security group, and the open port information of the virtual machine and the mapping port information Add to the default security group;

The sending module is configured to send a port mapping request of the virtual machine to the second server; the port mapping request is used to instruct the second server to perform port mapping on the virtual machine according to a preset port mapping rule.
The server according to claim 7, wherein the processing module is further configured to: when the virtual machine does not have an associated default security group, create a default security group of the virtual machine, and associate the created default security group. To the virtual machine.
The server according to claim 7 or 8, wherein the default security group is named after a floating IP of the virtual machine plus a name of the virtual machine;

Correspondingly, the processing module is configured to: search for a security group named with the floating IP of the virtual machine and the virtual machine name in the security group associated with the virtual machine, if yes, Determine that the virtual machine has an associated default security group.
The server according to claim 7 or 8, wherein the server further includes a deletion module configured to delete the port mapping of the virtual machine, and simultaneously delete the corresponding open port information in the default security group associated with the virtual machine; And deleting the virtual machine, deleting the default security group associated with the virtual machine, and notifying the second server to delete related information of the virtual machine.
The server according to claim 7 or 8, wherein the processing module is configured to set the port of the second server to be PORT_1 to PORT_n, and read the maximum port number of the second server stored in the database. The value PORT_max, when it is determined that the value of max is less than n, the mapping port corresponding to the open port of the virtual machine is selected as PORT_(max+1); when the value of max is determined to be not less than n, all ports of the second server are traversed. When it is determined that there is a port that is not included in the database, a port that is not included in the database is selected as a mapping port corresponding to the open port of the virtual machine; wherein, n and max are positive integers.
An implementation system of a virtual machine port mapping, the system comprising: a first server and a second server; wherein

The first server is configured to determine a mapping port corresponding to the open port of the virtual machine when the virtual machine that performs the port mapping has an associated default security group, and the open port information of the virtual machine and the mapping port Adding information to the default security group, and sending a port mapping request of the virtual machine to the second server;

The second server is configured to receive a port mapping request of the virtual machine sent by the first server, and perform port mapping on the virtual machine according to a preset port mapping rule.
The system of claim 12, wherein the second server is configured to map the floating IP address of the virtual machine to its own IP address according to a preset port mapping rule, and map the open port to the Map the port and configure the port mapping rules for the virtual machine in its own firewall.
A computer storage medium storing computer executable instructions for performing the method of implementing virtual machine port mapping according to any one of claims 1 to 6.