WO2017215483A1

WO2017215483A1 - Networking system, and network sharing method and system

Info

Publication number: WO2017215483A1
Application number: PCT/CN2017/087179
Authority: WO
Inventors: 徐昊; 蒋天超; 刘波; 杨开印
Original assignee: 中兴通讯股份有限公司
Priority date: 2016-06-14
Filing date: 2017-06-05
Publication date: 2017-12-21
Also published as: CN107508845B; CN107508845A

Abstract

A networking system, and a network sharing method and system. The method comprises: each tenant end establishing one of a network address translation (NAT) mode network and a non-NAT mode network (S101); a management end establishing at least one network of the two networks (S102); and the tenant end providing a network of the tenant end for at least one virtual machine in the tenant end, and the management end providing a network different from that of the tenant end for the at least one virtual machine in the tenant end (S103).

Description

Networking system, network sharing method and system

Technical field

This document relates to, but is not limited to, the field of cloud virtual network communication, and in particular, to a networking system, a network sharing method and system.

Background technique

With the development of cloud computing technology, in a network virtualization scenario in cloud computing virtual operation, a tenant's limitation on the network topology cannot meet the current requirements. In the existing network virtual architecture, a tenant creates a route and binds it. To set the external gateway, choose whether to go through NAT mode (Network Address Translation) or non-NAT mode. In the current hardware environment, a tenant can only create a network mode route. In actual operation, due to various factors such as security, some tenants need to implement different virtual machines according to different applications. The routing mode, that is, NAT and non-NAT compatibility, cannot meet the requirements under the traditional virtualized network architecture.

Summary of the invention

The following is an overview of the topics detailed in this document. This Summary is not intended to limit the scope of the claims.

The embodiments of the present invention provide a networking system, a network sharing method, and a system, which are compatible with two networks in one tenant.

An embodiment of the present invention provides a networking system, including a management end and at least one tenant end, where the tenant end includes at least one virtual machine.

Each of the tenants includes one of a NAT mode network and a non-NAT mode network, and the management end includes at least one of the two networks, and the tenant is set to be at least one of the tenant terminals. A virtual machine provides a network of the tenant, and the management end is configured to provide a network different from the tenant for at least one of the tenants.

Optionally, the embodiment of the present invention further provides a network sharing system, including a management end and at least one tenant end, each tenant includes at least one virtual machine; each tenant establishes a NAT mode network and a non-NAT mode network. a network in which the management terminal establishes at least one of the two networks; the tenant is configured to provide the network of the tenant at least one virtual machine in the tenant, and the management terminal is set to At least one of the tenant terminals provides a network different from the tenant.

Optionally, the embodiment of the present invention further provides a network sharing method, including:

Each tenant establishes one of a NAT mode network and a non-NAT mode network;

The management terminal establishes at least one of the above two networks;

The tenant provides a network of the tenant at least one virtual machine in the tenant, and the management provides a network different from the tenant in at least one virtual machine in the tenant.

Advantageous effects of embodiments of the present invention:

The embodiment of the present invention provides a networking system, a network sharing method, and a system, where each tenant includes one of a NAT mode network and a non-NAT mode network, and the management end includes at least one of the foregoing two networks. The tenant provides the network of the tenant at least one virtual machine in the tenant, and the management side provides the network different from the tenant for at least one virtual machine in the tenant. Through the implementation of the present invention, the tenant has its own network and the network provided by the management terminal, which realizes compatibility between the two networks in one tenant, and improves the flexible application of the system.

Other aspects will be apparent upon reading and understanding the drawings and detailed description.

BRIEF abstract

FIG. 1 is a flowchart of a network sharing method according to an embodiment of the present invention;

2 is a schematic diagram of a network sharing system according to an embodiment of the present invention;

FIG. 3 is a flowchart of a method for establishing a NAT network in a tenant end according to an embodiment of the present invention;

4 is a method for creating a non-NAT network in a tenant end according to an embodiment of the present invention. flow chart;

FIG. 5 is a flowchart of a method for establishing a non-NAT network on a management end according to an embodiment of the present invention;

FIG. 6 is a flowchart of a method for a management terminal to share a non-NAT network established to a tenant by using a management terminal according to an embodiment of the present invention;

FIG. 7 is a flowchart of a method for establishing a NAT mode network on a tenant side according to an embodiment of the present invention;

FIG. 8 is a schematic diagram of a network sharing system according to an embodiment of the present invention.

Embodiments of the invention

Embodiments of the present invention consider that in a network system, each tenant can only create one network in a NAT and non-NAT mode network; by creating a respective network on each tenant, creating at least one network on the management end, Then, each tenant provides the network of the tenant to the virtual machine in the tenant, and the management end provides the virtual machine in the tenant with a network different from the tenant, so that the virtual machine in the tenant can be implemented. The network of the tenant interacts with the external network, or the network of the management end interacts with the external network, and the network of the tenant and the network of the management end are different, thereby achieving the purpose of compatibility between the two network modes and improving the flexible application of the system.

The specific implementation of the present invention will be further described below in conjunction with the accompanying drawings.

First embodiment

This embodiment provides a networking system, including a management end and at least one tenant end, where the tenant end includes at least one virtual machine.

Each tenant includes one of a NAT mode network and a non-NAT mode network. The management end includes at least one of the two types of networks. The tenant provides the tenant network for at least one virtual machine in the tenant. The management terminal provides a network different from the tenant at least one virtual machine in the tenant.

In a networking system, a network system includes a management terminal and a tenant terminal; a tenant end corresponds to an independent hardware structure in which multiple virtual machines can be simulated, and A tenant includes a virtual machine. There can only be one mode in the network of this tenant, that is, only one of the NAT mode network and the non-NAT mode network.

A network in the NAT mode refers to a host that has been assigned a local IP (Internet Protocol) protocol in the private network. When you want to interact with the external network, you can use source address translation. Convert the host's local IP address to a public IP address to connect to the Internet.

In a non-NAT mode network, unlike NAT, the local IP address of the host in non-NAT mode can directly interact with the external network without source address translation. Of course, the hosts in the NAT mode network and the non-NAT mode network have different local IP addresses, and the IP number segments of various uses in each area are related internationally.

A tenant includes any one of the above two modes. The tenant can provide the network to the virtual machine in the tenant. The virtual machine can interact with the external network in the network mode of the tenant.

On the other hand, the network mode of the management side includes at least one of a NAT mode and a non-NAT mode. The management terminal selectively shares the network different from the tenant to the tenant according to the network of each tenant, so that the virtual machine in the tenant can interact with the external network through the network provided by the management terminal. When the tenant includes the NAT mode network, the management terminal can share the non-NAT mode network to the tenant; correspondingly, when the tenant includes the non-NAT mode network, the management terminal can share the NAT mode network to the tenant. .

In this embodiment, the virtual machine in the tenant can interact with the external network through the network of the tenant, or interact with the external network through a network different from the tenant shared by the management terminal. Optionally, the network of each tenant in the embodiment is the same network. When the network of each tenant is the same type of network, the management end may only include a network different from the tenant. When each tenant includes a NAT network, the management terminal may only include a non-NAT mode network; when each tenant includes a non-NAT mode network, the management terminal may include only the NAT mode network.

In addition, the network of each tenant may include any one of two networks, that is, in the network of each tenant, there is a NAT mode network or a non-NAT mode network. The network of the management side may also include two types of networks, including a NAT mode network and a non-NAT mode network.

Each virtual machine in the tenant can be provided through the network and/or management provided by the tenant. The network different from this tenant interacts with the external network. Here and/or three solutions are provided: In the first solution, the virtual machine in the tenant can interact with the external network through the network of the tenant; in the second solution, the virtual machine in the tenant can pass through the network provided by the management terminal. The external network interacts. In the third solution, the virtual machine in the tenant can interact with the external network through the network provided by the tenant and the network provided by the management terminal. The solution 1 is a virtual machine in the tenant, and interacts with the external network according to the local IP address assigned by the tenant and the network mode of the tenant. If the mode is NAT, the source address is translated and the local IP address is converted. For the public network IP that can interact with the Internet, and then interact with the external network; if it is in the non-NAT mode, it directly interacts with the external network according to the local IP address provided by the tenant. Solution 2: The virtual machine in the tenant side interacts with the external network according to the IP address provided by the management terminal and the network mode of the management end. At this time, the tenant does not need to allocate a local IP address for the virtual machine; the third solution is the tenant. The virtual machine in the end can interact with the external network through the local IP allocated by the tenant and the network mode of the tenant, or interact with the external network through the IP address provided by the management terminal and the network mode of the management end. Because the network mode of the tenant is different from the network mode provided by the management terminal, the virtual machine that can interact with the external network through the network of the tenant and the management end has at least the local IP provided by the tenant and the IP provided by the management end. Two different IPs interact with the external network according to different IP addresses and corresponding networks when interacting with the external network.

Each tenant includes its own virtual machine. Similarly, the management terminal can also include a virtual machine. The management terminal can be a tenant. It has the same hardware structure as the tenant. The management terminal can also include virtual machines. These virtual machines can interact with the external network through the management network. The management terminal shares its own network different from the tenant to the tenant. The tenant can also share the network of the tenant to other tenants or management terminals. The management terminal is configured to provide a shared network for each tenant. For management purposes, the management terminal can provide different interfaces, and each of the tenants provides a network for the management end. The management terminal can also have multiple, respectively. Provide different tenants with different networks than the tenant.

The embodiment provides a networking system, including a management terminal and at least one tenant. The tenant includes at least one virtual machine. The tenant has its own network and a network different from the tenant provided by the management terminal. The tenant is compatible with both networks, which improves the flexible application of the system.

Second embodiment

This embodiment provides a network sharing method. Referring to FIG. 1, the method includes:

S101. Establish a network in a NAT mode network and a non-NAT mode network for each tenant.

S102. Establish, by the management terminal, at least one of the foregoing two networks.

S103. The tenant provides a network of the tenant at least one virtual machine in the tenant, and the management end provides a network different from the tenant in the virtual machine of the tenant.

A network system includes a management terminal and a tenant; a tenant corresponds to an independent hardware structure in which multiple virtual machines can be simulated, and one tenant includes a virtual machine. When a tenant establishes a network, it can only select one of the NAT mode and the non-NAT mode. That is, one tenant has only one network.

After a tenant establishes a network of any mode, the tenant provides the tenant network to at least one virtual machine in the tenant. That is, the virtual machine in the tenant can use the network mode of the tenant. The network interacts.

On the other hand, the management side also establishes at least one of a network of a NAT mode and a non-NAT mode. After the network is set up by the management terminal, the management terminal selectively shares the network different from the tenant to the tenant according to the network of each tenant, so that the virtual machine in the tenant can pass the network provided by the management terminal. Interact with the external network. For example, when the tenant establishes a NAT mode network, the management terminal can share the non-NAT mode network to the tenant; correspondingly, when the tenant establishes a non-NAT mode network, the management terminal can set the NAT mode. The network is shared with the tenant. The timing between the establishment of the network between the tenant and the management terminal is not limited in this embodiment. The network may be established on the tenant side, then the network may be established on the management end, or the network may be established on the management end first, and then established on the tenant side. The network, or both, is possible in this embodiment.

After the establishment of the network on each tenant and the management end, the virtual machine in the tenant can interact with the external network through the network established by the tenant, and can also share the network different from the tenant through the management terminal. The network interacts. Optionally, the networks established for each tenant in this embodiment are the same network, that is, the network in the NAT mode, or the network in the non-NAT mode. In this case, since the network modes of all tenants are the same, it is only necessary to establish another network different from the tenant for the management. NAT is established on each tenant side. In the network, the management terminal can only establish a non-NAT mode network; when each tenant establishes a non-NAT network, the management terminal can only establish a NAT mode network. It should be noted that although the network established here is different from the tenant in terms of the management end, it does not mean that the tenant establishes the network before the management establishes the network, nor can it be said that the tenant establishes the network after the network is established on the management side; The order in which the tenant and the management end establishes the network may be arbitrary, as long as the management terminal can provide the tenant with a different network from the tenant after the network is established, and establish the network sequence with the tenant and the management end. There is no necessary connection.

In addition, the network established for each tenant may include any of the two networks, that is, in the network established by the tenant, there is a NAT mode network or a non-NAT mode network. In this case, the network established for the management terminal may also include two types of networks, including a NAT mode network and a non-NAT mode network. Similar to the above situation, although the description is made here that the network is established for the tenant, and the management establishes the network, this does not limit the timing between the establishment of the network by the tenant and the establishment of the network by the management. The timing between the parties can be arbitrary.

After the network on the tenant side and the network on the management end are established, each virtual machine in the tenant can interact with the external network through the network provided by the tenant and/or the network provided by the management terminal different from the tenant. Here and/or three solutions are provided: In the first solution, the virtual machine in the tenant can interact with the external network through the network of the tenant; in the second solution, the virtual machine in the tenant can pass through the network provided by the management terminal. The external network interacts. In the third solution, the virtual machine in the tenant can interact with the external network through the network provided by the tenant and the network provided by the management terminal. The solution 1 is a virtual machine in the tenant side, and interacts with the external network according to the local IP address assigned by the tenant and the network mode of the tenant. If the mode is NAT, the source address translation can be performed, and the local IP address is used. It is converted to a public network IP that can interact with the Internet, and then interacts with the external network; if it is in a non-NAT mode, it directly interacts with the external network according to the local IP address provided by the tenant. Solution 2: The virtual machine in the tenant side interacts with the external network according to the IP address provided by the management terminal and the network mode of the management end. At this time, the tenant does not need to allocate a local IP address for the virtual machine; the third solution is the tenant. The virtual machine in the end can interact with the external network through the local IP allocated by the tenant and the network mode of the tenant, or interact with the external network through the IP address provided by the management terminal and the network mode of the management end. Because the network mode of the tenant is different from the network mode provided by the management terminal, the virtual machine that can interact with the external network through the network of the tenant and the management end has at least the local IP provided by the tenant. And the IP provided by the management terminal, two different IPs, interact with the external network according to different IP addresses and corresponding networks when interacting with the external network.

Each tenant includes its own virtual machine. Similarly, the management terminal can also include a virtual machine. The management terminal can be a tenant. It has the same hardware structure as the tenant. The management terminal can also include virtual machines. These virtual machines can interact with the external network through the management network. The management terminal shares its own network different from the tenant to the tenant. The tenant can also share the network established by the tenant to other tenants or management terminals. The management terminal is configured to provide a shared network for each tenant. For management purposes, the management terminal can provide different interfaces, and each of the tenants provides a network established by the management terminal. The management terminal can also have multiple Provide different tenants with different networks than the tenant.

The embodiment provides a network sharing method, in which a network in a NAT and a non-NAT is established on the tenant, and at least one of a NAT and a non-NAT is established on the management end, and the tenant is in the tenant. The virtual machine provides the network of the tenant, and the management side provides a network different from the tenant in the virtual machine in the tenant, thereby implementing compatibility between the NAT mode network and the non-NAT mode network on the tenant, thereby improving the flexibility of the system. Application. Under the current openstack (OpenStack cloud computing management platform) technology, a hardware device (a tenant can only create a network mode route), so that its virtual machine can have a network of NAT and non-NAT coexistence, thereby reaching a tenant, two Network modes coexist.

Third embodiment

This embodiment provides a network sharing system. Referring to FIG. 2, the method includes:

The management terminal 10 and the at least one tenant 20, each of the tenants 20 includes at least one virtual machine 202; each tenant 20 establishes one of a NAT mode network and a non-NAT mode network, and the management terminal 10 establishes the above two networks. At least one of the networks; the tenant 20 provides the network of the tenant 20 to the at least one virtual machine 202 of the tenant 20, and the management 10 provides the non-virtual machine 202 of the tenant 20 for the tenant. 20 networks.

A network system includes a management terminal 10 and a tenant terminal 20; a tenant terminal 20 corresponds to an independent hardware structure in which a plurality of virtual machines 202 can be simulated, and a tenant terminal 20 includes a virtual machine. 202. A tenant 20 can only be in NAT mode when establishing a network. Select one of the non-NAT modes to create, that is, one tenant 20 has only one type of network.

After a tenant 20 establishes a network of any mode, the tenant 20 provides the network of the tenant 20 to at least one virtual machine 202 of the tenant 20, that is, the virtual machine 202 in the tenant 20 can The network mode of the tenant 20 interacts with the external network.

On the other hand, the management terminal 10 can also establish at least one of a network of a NAT mode and a non-NAT mode. After the management terminal 10 establishes the network, the management terminal 10 selectively shares the network different from the tenant 20 to the tenant 20 according to the network of each tenant 20, so that the virtual machine in the tenant 20 202 can interact with the external network through the network provided by the management terminal 10. For example, when the tenant 20 establishes a NAT mode network, the management terminal 10 can share the non-NAT mode network to the tenant 20; correspondingly, when the tenant 20 establishes a non-NAT mode network, the management terminal 10 The NAT mode network can be shared to the tenant 20 .

After the network establishment of each tenant 20 and the management terminal 10 is completed, the virtual machine 202 in the tenant 20 can interact with the external network through the network established by the tenant 20, and can also be shared by the management terminal 10. The network at the tenant 20 interacts with the external network. Optionally, the network established by each tenant 20 in this embodiment is the same network. In this case, since the network modes of all the tenants 20 are the same, the tenant is established and tenant for the management terminal 10. The other end of the network 20 can be another network.

In addition, the network established by each tenant 20 may include any one of two networks, that is, in the network established by the tenant 20, there is a NAT mode network or a non-NAT mode network. In this case, the network established by the management terminal 10 may also include two types of networks, that is, both a NAT mode network and a non-NAT mode network.

The network establishment of the tenant 20 and the management 10 may be arbitrary in any of the above manners, and the order of execution is not limited in this embodiment.

After the network of the tenant 20 and the network of the management terminal 10 are both established, each virtual machine 202 in the tenant 20 can be different from the tenant 20 provided by the network and/or the management terminal 10 provided by the tenant 20 The network interacts with the external network. Herein, and/or three solutions are provided: In the first solution, the virtual machine 202 in the tenant 20 can interact with the external network through the network of the tenant; in the second solution, the virtual machine 202 in the tenant 20 can pass through the management terminal. 10 provides a network to interact with the external network; scheme 3, the virtual machine 202 in the tenant 20 can be provided by the network provided by the tenant and the management terminal 10 The network interacts with the external network.

Each tenant 20 includes a respective virtual machine 202, and similarly, the management 10 may also include a virtual machine 202. The management terminal 10 can be the tenant 20 and has the same hardware interface as the tenant 20, and the management terminal 10 can also include the virtual machine 202. The virtual machine 202 can interact with the external network through the network of the management terminal 10. The management terminal 10 shares its own network different from the tenant 20 to the tenant 20, and the tenant 20 can also share the network established by the tenant 20 to the other tenant 20 or the management terminal 10. The management terminal 10 is configured to provide a shared network for each tenant 20. For the convenience of management, the management terminal 10 can provide different interfaces, and each of the tenant terminals 20 is provided with a network established by the management terminal 10; There may also be more than 10, respectively providing different tenant terminals 20 with a different network than the tenant 20 .

The embodiment provides a network sharing system, including a management terminal and at least one tenant. The tenant includes at least one virtual machine, and establishes at least one of NAT and non-NAT on the tenant, and establishes at least one on the management end. A network in which the tenant provides the network in the tenant of the virtual machine in the tenant, and the management end provides a network different from the tenant in the virtual machine in the tenant, thereby implementing the NAT mode network on the tenant. Compatible with non-NAT mode networks, improving the flexible application of the system.

Fourth embodiment

This embodiment provides a method for establishing a NAT network in a tenant. Referring to FIG. 3, the method includes:

S301. Create a NAT internal network and a NAT external network in a tenant.

The NAT external network can interact with the Internet; the NAT internal network is a local area network, and cannot connect to the Internet without going through the NAT external network, but can only interact between nodes inside the NAT.

S302: Create a route in the tenant, connect the NAT internal network to the route, and bind the routed external gateway to the NAT external network.

The so-called routing is the path selection. Routers connect to multiple networks, so they must be gateways to multiple networks. After the external gateway of the route is bound to the external network of the NAT, the route can interact with the Internet; since the network of the tenant is a NAT network, the local IP cannot be The Internet interacts, so you can set SNAT (source address translation) to true, that is, source address translation.

S303. Create a virtual machine in the tenant, and configure a local IP for the virtual machine.

After the virtual machine is created in the tenant, the local IP address of the virtual machine can be manually set or automatically configured. The local IP of each virtual machine in a tenant should be different. If the local IP addresses of all virtual machines are the same, An IP address conflict will occur and the network will not connect properly.

S304. Apply for an external public network IP for the virtual machine.

Because the network in the NAT mode is established in the tenant, the local IP address of the virtual machine cannot directly interact with the Internet. You can configure the corresponding public IP address for the virtual machine. Therefore, apply for the external public IP address for the virtual machine. The local IP of the virtual machine is converted into a public network IP that can interact with the Internet through SNAT.

After the above steps are completed, the NAT mode network of the tenant is established, and the interaction between the virtual machine and the Internet can be further implemented.

The way to create a NAT network on the management side is similar to that created on the tenant side. It is worth mentioning that you do not need to create a virtual machine on the management side. The virtual machine can be created only in the tenant.

This embodiment also provides a method for creating a non-NAT network in the tenant. Referring to FIG. 4, the method includes:

S401. Create a non-NAT internal network and a non-NAT external network in a tenant.

S402. Create a route in the tenant, access the non-NAT network to the route, and bind the routed external gateway to a non-NAT external network.

After the external gateway of the route is bound to the non-NAT external network, the route can interact with the Internet; since the network of the tenant is a non-NAT network, the local IP can directly interact with the Internet, so SNAT can be set as False, that is, source address translation is prohibited.

S403. Create a virtual machine in the tenant, and configure an IP for the virtual machine.

Because the tenant establishes a non-NAT mode network, the IP address of the virtual machine can directly interact with the external network. No source address translation is required, and no additional public IP address is required.

After the above steps are completed, the non-NAT mode network of the tenant is established, and Further realize the interaction between the virtual machine and the Internet.

The way to create a non-NAT network on the management side is similar to that created on the tenant side. It is worth mentioning that you do not need to create a virtual machine on the management side. The virtual machine can be created only in the tenant.

Fifth embodiment

This embodiment provides a network sharing method. The management terminal establishes a non-NAT mode network, and the tenant establishes a NAT mode network. For example, refer to FIG. 5. FIG. 5 shows a flow chart of establishing a non-NAT network on the management end. include:

S501. Create a non-NAT external network on the management end.

Non-NAT external networks can interact with the Internet.

S502. Create a route, and bind the non-NAT external network to an external gateway of the route.

After the external gateway of the route is bound to the non-NAT external network, the route can interact with the Internet; since the network of the management terminal is a non-NAT network, the local IP can directly interact with the Internet, so SNAT can be set as False, that is, source address translation is prohibited.

S503. Create a non-NAT internal network.

S504. Associate the non-NAT internal network with the route.

After the non-NAT internal network is associated with the route, a non-NAT internal network is established with the non-NAT external network, and the non-NAT internal network can interact with the Internet through the non-NAT external network.

Please refer to FIG. 6. FIG. 6 is a flowchart of a method for the management terminal to share the established non-NAT network to the tenant, including:

S601. Select a non-NAT internal network in the management terminal.

S602. Determine a tenant that needs to share the non-NAT internal network.

Since the tenant does not necessarily have a NAT mode, only the non-NAT network in the management terminal needs to be shared with the tenant.

S603. Create a virtual machine in the corresponding tenant, and bind the virtual machine to an IP address in the non-NAT internal network.

After the IP address in the non-NAT internal network is bound, the virtual machine can directly interact with the Internet through the non-NAT network of the management terminal. In addition, if the virtual machine already exists in the tenant, the virtual machine can be further To provide a non-NAT internal network for selection, you do not need to create a virtual machine, but only bind the IP address under the non-NAT internal network to the existing virtual machine.

Please refer to FIG. 7. FIG. 7 shows a flow chart of establishing a NAT mode network on the tenant side, including:

S701. Create a NAT external network on the tenant side.

The NAT external network can interact with the Internet.

S702. Create a route, and bind the NAT external network to an external gateway of the route.

After the external gateway of the route is bound to the external network of the NAT, the route can interact with the Internet. Since the network of the tenant is a NAT network, the local IP cannot directly interact with the Internet. Therefore, SNAT can be set to True, that is, source address translation.

S703. Create a NAT internal network.

S704. Select a NAT internal network in the tenant end, and associate with the route.

After the NAT internal network is associated with the route, a connection is established between the NAT internal network and the NAT external network, and the NAT internal network can interact with the Internet through the NAT external network.

S705: Create a virtual machine in the tenant, and bind the local IP address to the virtual machine.

S706. Apply for a public network IP address for the virtual machine.

This embodiment provides a network sharing method. The tenant provides a NAT network for the virtual machine in the tenant by using the NAT network on the tenant side and the non-NAT network on the management end. The management end is the virtual network in the tenant. The machine provides a non-NAT network to implement the NAT mode on the tenant. The compatibility of the network and the non-NAT mode network improves the flexible application of the system.

Sixth embodiment

The specific implementation of the present invention will be further described below by taking the tenant side of the NAT mode and the management end of the non-NAT mode as an example.

As shown in FIG. 8, the network sharing system in this embodiment includes a tenant 20 and a management terminal 10. The tenant 20 includes multiple virtual machines. The tenant 20 establishes a NAT mode network, and the management terminal 10 establishes a non-NAT mode. The internet;

The process of establishing a NAT mode network by the tenant 20 is as follows:

A NAT external network is created on the tenant side 20; the NAT external network of the tenant 20 is connected to the Internet to implement interaction with the Internet, and the interaction here includes any operations that need to be completed by networking.

The tenant route 201 is created on the tenant side 20, and the NAT external network is bound to the external gateway of the tenant route 201. After the external gateway of the tenant route 201 is bound to the NAT external network, the tenant route 201 can be implemented with the Internet. Inter-exchange; since the network of the tenant 20 is a NAT network, the local IP cannot interact with the Internet. Therefore, SNAT (Source Address Translation) can be set to true, that is, source address translation is performed.

Create a NAT intranet; a NAT intranet is a local area network. It cannot connect to the Internet without going through a NAT external network, but can only interact between nodes inside the NAT.

The intranet of the NAT is associated with the tenant route 201. After the intranet of the NAT is associated with the tenant route 201, a connection is established between the intranet and the extranet of the NAT, and the intranet can interact with the Internet through the NAT intranet. At this point, the NAT network in the tenant 20 has been created, and each virtual machine in the tenant 20 can interact with the Internet through the NAT network.

The process of the management terminal 10 establishing a non-NAT mode network is as follows:

A non-NAT external network is created on the management terminal 10; the non-NAT external network is connected to the Internet to implement interaction with the Internet, and the interaction here includes any operations that need to be completed by networking.

Creating a management route 101 on the management terminal 10, and binding the non-NAT external network as an external gateway managing the route 101;

After the external gateway managing the route 101 is bound to the non-NAT external network, the management route 101 can implement interaction with the Internet; since the network of the management terminal 10 is a non-NAT network, the local IP can directly interact with the Internet. Therefore, you can set SNAT to false, that is, source address translation is prohibited.

Create a non-NAT intranet and associate the non-NAT intranet with the management route 101.

After the non-NAT intranet is associated with the management route 101, a non-NAT intranet and a non-NAT extranet are established to communicate with each other through the non-NAT intranet through the non-NAT external network. So far, the non-NAT network in the management terminal 10 has been created, and the management terminal 10 can share the non-NAT network to other tenant terminals 20.

The tenant 20 provides a NAT mode network for the virtual machine in the tenant 20; the virtual machine interacts with the Internet through the NAT network, and the local IP of the virtual machine cannot be used; the virtual machine can convert the local IP through SNAT. Convert IP to a public IP that the Internet can recognize.

The management terminal 10 provides a non-NAT mode network for the virtual machine in the tenant 20; the virtual machine interacts with the Internet through a non-NAT network, and the IP address in the non-NAT mode is available, and the IP address in the non-NAT mode Can interact directly with the Internet.

After both the network of the tenant 20 and the network of the management terminal 10 are established, each virtual machine in the tenant 20 can be performed by the NAT network provided by the tenant 20 and/or the non-NAT network provided by the management terminal 10 and the Internet. Interaction. The virtual machine in the tenant terminal 20 includes: a first virtual machine 2021, a second virtual machine 2022, and a third virtual machine 2023. The first virtual machine 2021 is configured to interact with the Internet through the tenant's NAT network; The machine 2022 is configured to interact with the Internet through a non-NAT network provided by the management terminal 10; the third virtual machine 2023 is configured to interact with the Internet through a NAT network provided by the tenant and a non-NAT network provided by the management terminal 10. The first virtual machine 2021 is configured to convert to the public network IP through the SNAT of the tenant route 201 according to the local IP address allocated by the tenant 20, and then implement interaction with the Internet; the second virtual machine 2022 is set to follow the management terminal 10 The provided IP address can be exchanged with the Internet through the non-NAT mode network of the management terminal 10 without converting the IP address; the third virtual machine 2023 has both the local IP provided by the tenant 20 and the non-administrator 10 The IP address provided by the NAT network, the third virtual machine 2023 is set to be converted by the local IP, and then interacts with the Internet through the NAT network of the tenant 20, and the IP address provided by the non-NAT network directly passes through the non-NAT network of the management terminal 10. versus Internet interaction. Because the NAT and non-NAT modes are different, the IP addresses provided by the local IP and the non-NAT network in the third virtual machine 2023 are different, and the two IPs can be used to implement interaction in a corresponding manner.

The embodiment provides a network sharing system, including a management terminal and a tenant. The tenant includes multiple virtual machines, and establishes at least one network in the NAT and non-NAT on the tenant. The tenant is configured to provide the network in the tenant to the virtual machine in the tenant, and the management end is configured to provide a network different from the tenant in the virtual machine in the tenant, thereby implementing NAT on the tenant. The compatibility of the mode network and the non-NAT mode network improves the flexible application of the system.

The embodiment of the invention further provides a computer readable storage medium storing computer executable instructions, which are implemented by the processor to implement the method described in the foregoing embodiments.

Those of ordinary skill in the art will appreciate that all or some of the steps, systems, and functional blocks/units of the methods disclosed above may be implemented as software, firmware, hardware, and suitable combinations thereof. In a hardware implementation, the division between functional modules/units mentioned in the above description does not necessarily correspond to the division of physical units; for example, one physical component may have multiple functions, or one function or step may be composed of several physical The components work together. Some or all of the components may be implemented as software executed by a processor, such as a digital signal processor or microprocessor, or as hardware, or as an integrated circuit, such as an application specific integrated circuit. Such software may be distributed on a computer readable medium, which may include computer storage media (or non-transitory media) and communication media (or transitory media). As is well known to those of ordinary skill in the art, the term computer storage medium includes volatile and nonvolatile implemented in any method or technique for storing information, such as computer readable instructions, data structures, program modules or other data. Sex, removable and non-removable media. Computer storage media includes, but is not limited to, RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, digital versatile disc (DVD) or other optical disc storage, magnetic cartridge, magnetic tape, magnetic disk storage or other magnetic storage device, or may Any other medium used to store the desired information and that can be accessed by the computer. This In addition, it is well known to those skilled in the art that communication media typically includes computer readable instructions, data structures, program modules or other data in a modulated data signal, such as a carrier wave or other transport mechanism, and can include any information delivery media.

The above is a further detailed description of the present invention in connection with the specific embodiments, and the specific embodiments of the present invention are not limited to the description. It will be apparent to those skilled in the art that the present invention may be made without departing from the spirit and scope of the invention.

Industrial applicability

The above technical solution can enable the tenant to have a network established by itself and a network provided by the management end, thereby implementing compatibility between the two networks in one tenant, thereby improving the flexible application of the system.

Claims

A networking system includes a management terminal (10) and at least one tenant (20), the tenant (20) including at least one virtual machine (202);

Each of the tenant terminals (20) includes one of a network address translation NAT mode network and a non-NAT mode network, and the management terminal (10) includes at least one of the above two networks, the tenant end (20) being configured to provide a network of the tenant (20) to at least one virtual machine (202) in the tenant (20), where the management end (10) is set to be in the tenant (20) At least one virtual machine (202) provides a different network than the tenant (20).
The networking system according to claim 1, wherein

Each of the networks of the tenant (20) is the same type of network;

The network of the management terminal (10) is another network different from the tenant (20).
The networking system according to claim 1, wherein

Each of the networks of the tenant (20) includes any one of a NAT mode network and a non-NAT mode network;

The network of the management terminal (10) includes a NAT mode network and a non-NAT mode network.
The networking system according to any one of claims 1 to 3, wherein

Each virtual machine (202) in the tenant (20) is configured to interact with the external network through a network provided by the tenant (20);

Alternatively, each virtual machine (202) in the tenant (20) is configured to interact with the external network through a network different from the tenant (20) provided by the management terminal (10);

Alternatively, each virtual machine (202) in the tenant (20) is set to be provided by the network provided by the tenant (20) and the management terminal (10) is different from the tenant (20). The network interacts with the external network.
The networking system according to any one of claims 1 to 3, wherein

The management terminal (10) includes at least one virtual machine;

The virtual machine in the management terminal (10) interacts with the external network through the network of the management terminal (10).
A network sharing system includes a management terminal (10) and at least one tenant (20), each tenant (20) including at least one virtual machine (202); each tenant (20) establishes a network address translation NAT mode a network in a network and a non-NAT mode network, wherein the management terminal (10) establishes at least one of the two networks; the tenant (20) is set to be at least one of the tenant terminals (20) A virtual machine (202) provides a network of the tenant (20), and the management terminal (10) is configured to provide at least one virtual machine (202) in the tenant (20) different from the tenant ( 20) The network.
A network sharing system according to claim 6, wherein

Each of the networks established by the tenant (20) is the same type of network, and the management terminal (10) establishes another network different from the tenant (20).
A network sharing system according to claim 6, wherein

The network established by each tenant (20) includes any one of a NAT mode network and a non-NAT mode network, and the network established by the management terminal (10) includes a NAT mode network and a non-NAT mode network, and the management end (10) A network different from the tenant (20) is provided for each virtual machine (202) in each tenant (20).
A network sharing system according to any one of claims 6-8, wherein

Each virtual machine (202) in the tenant (20) is configured to interact with the external network through a network provided by the tenant (20);

Alternatively, each virtual machine (202) in the tenant (20) is configured to interact with the external network through a network different from the tenant (20) provided by the management terminal (10);

Alternatively, each virtual machine (202) in the tenant (20) is set to be provided by the network provided by the tenant (20) and the management terminal (10) is different from the tenant (20). The network interacts with the external network.
A network sharing system according to any one of claims 6-8, wherein

The management terminal (10) includes at least one virtual machine; the virtual machine in the management terminal (10) interacts with the external network through a network of the management terminal (10).
A network sharing method includes:

Each tenant establishes one of a network address translation NAT mode network and a non-NAT mode network. Kind of network (S101);

The management terminal establishes at least one of the above two networks (S102);

The tenant provides a network of the tenant at least one virtual machine in the tenant, and the management end provides a network different from the tenant in at least one virtual machine in the tenant (S103).
The network sharing method of claim 11, the method further comprising:

Each virtual machine in the tenant interacts with the external network through the network provided by the tenant;

Or, each virtual machine in the tenant interacts with the external network by using a network different from the tenant provided by the management terminal;

Or, each virtual machine in the tenant interacts with the external network through a network provided by the tenant and a network different from the tenant provided by the management terminal.
A computer readable storage medium storing computer executable instructions that, when executed by a processor, implement the method of claim 11 or 12.