WO2018227519A1

WO2018227519A1 - System, method and apparatus for implementing network interconnection

Info

Publication number: WO2018227519A1
Application number: PCT/CN2017/088553
Authority: WO
Inventors: 唐全德
Original assignee: 唐全德
Priority date: 2017-06-16
Filing date: 2017-06-16
Publication date: 2018-12-20
Also published as: CN107278360A; CN107278360B

Abstract

The present invention relates to the technical field of communications, and particularly, to a system, method and apparatus for implementing network interconnection, for use in resolving the problems in the prior art of poor transmission performance and low bandwidth utilization rate in the cross-wide area network interconnection of data centers. The method provided in an embodiment of the present application comprises: receiving a data packet, which is forwarded by a router and transmitted by a first server deployed in a first data center to a second server deployed in a second data center, a header of the data packet comprising a quintuple; modifying a source address of the quintuple of the data packet into an address of a first proxy server, and modifying a destination address of the quintuple of the data packet into an address of a second proxy server; and sending the modified data packet to the second proxy server deployed in the second data center, so that the second proxy server recovers the quintuple of the modified data packet into the quintuple before the modification and sends the recovered data packet to the second server, and the second server responds to the recovered data packet.

Description

System, method and device for realizing network interconnection

Technical field

The present application relates to the field of communications technologies, and in particular, to a system, method, and apparatus for implementing network interconnection.

Background technique

With the construction of distributed networks more and more, the network construction between enterprises and corporate headquarters is becoming more and more perfect. Most enterprises prefer to build centralized data centers, and each data center is across the wide area network (Wide Area Network, WAN) interconnection also faces many problems.

At present, the more popular cross-WAN interconnection methods are mainly private lines and virtual private networks (VPNs). The dedicated lines mainly include Digital Data Network (DDN) and Synchronous Digital Hierarchy (SDH). The advantages are mainly due to high transmission quality, short delay and high speed. However, due to the relatively high construction cost of large-scale cross-regional construction lines, it is not applicable to enterprises. VPN is mainly used to set up communication lines on the public network (Internet, referred to as public network) or on the special line. It does not need to invest a lot of manpower and material resources to install and maintain WAN equipment and remote access equipment, which can save construction costs, so it is widely used in enterprises. . Among them, the most important part of implementing the VPN is the tunnel mode, which mainly encrypts and transmits the data packet by encapsulating a layer of the packet as the tunnel header in the outer layer of the original data packet sent by the sender. The disadvantages of this tunnel mode are mainly as follows: Since the maximum transmission unit (MTU) agreed by the WAN is 1500, if the packet length of the inner layer packet is already the maximum MTU length, then the encapsulation continues and the tunnel header is added. The fragmentation of the data packet may be caused. Correspondingly, the receiving end needs to perform packet reassembly, which greatly reduces the transmission performance of the data packet. Moreover, the manner of encapsulating the original data packet to increase the tunnel header increases the length of the data packet, resulting in lower bandwidth utilization during transmission. Therefore, the use of VPN to achieve data center cross-WAN interconnection has the problems of poor transmission performance and low bandwidth utilization.

In summary, a new solution is needed to overcome the above problems to achieve data center cross-WAN interconnection.

Summary of the invention

The embodiments of the present invention provide a system, a method, and a device for implementing network interconnection, which are used to solve the problem of poor transmission performance and low bandwidth utilization in a scheme of data center cross-WAN interconnection in the prior art.

The system for implementing the network interconnection provided by the embodiment of the present application includes: a first server and a first proxy server both deployed in the first data center, and a second server and a second proxy server both deployed in the second data center; among them,

a first server, configured to send a data packet to the second server, where the packet header includes a five-tuple;

a first proxy server, configured to receive a data packet sent by the first server that is forwarded by the route to the second server; modify a source address in the quintuple of the data packet to an address and a destination address of the first proxy server, and modify The address of the second proxy server; sending the modified data packet to the second proxy server;

a second proxy server, configured to restore the quintuple of the modified data packet to a quintuple before modification; and send the restored data packet to the second server;

a second server, configured to receive and respond to the restored data packet.

A further embodiment of the present application provides a method for implementing network interconnection, including:

Receiving, by the first server deployed in the first data center, the route forwarding is sent to the second data center a data packet of the second server, the packet header of the data packet includes a five-tuple;

Modifying the source address in the quintuple of the data packet to the address of the first proxy server, and modifying the destination address to the address of the second proxy server;

Sending the modified data packet to a second proxy server deployed in the second data center, so that the second proxy server restores the quintuple of the modified data packet to the quintuple before modification The restored data packet is sent to the second server, and the second server responds to the restored data packet.

Optionally, modifying the source address in the quintuple of the data packet to the address of the first proxy server, and modifying the destination address to the address of the second proxy server, includes:

And searching, according to the received quintuple of the data packet sent by the first server that is forwarded by the route to the second server, the first sending session information that includes the address of the first server and the address of the second server;

Determining, according to the association relationship between the preset session information, the first receiving session information associated with the first sending session information, where the source address included in the first receiving session information is an address of the second proxy server, The destination address is the address of the first proxy server;

The destination address in the quintuple of the data packet sent by the first server to the second server is modified to be the source address in the first receiving session information, and the source address is modified to the destination address in the first receiving session information.

Optionally, the first sending session information and the first receiving session information are generated according to the following manner:

If the data packet sent by the first server that is forwarded by the route to the second server is received for the first time, according to the quintuple of the received data packet, an address including the address of the first server and the address of the second server is generated. First send session information; and,

Determining, according to the destination address in the quintuple of the received data packet, a server corresponding to the network segment that matches the destination address as a second proxy server;

Generating first receiving session information including an address whose source address is the address of the second proxy server and an address of the first proxy server; and

Establishing an association relationship between the first sending session information and the first receiving session information.

Optionally, if the data packet sent by the first server that is firstly received by the route forwarding to the second server is a data packet for requesting to establish a Transmission Control Protocol (TCP) connection, the data packet is The method further includes: before the source address in the quintuple is modified to the address of the first proxy server, and the destination address is modified to the address of the second proxy server, the method further includes:

A five-tuple of the header of the data packet for requesting establishment of a TCP connection before the modification is stored in the data packet.

Optionally, after receiving the data packet sent by the first server that is forwarded by the route to the second server for requesting to establish a TCP connection, the method further includes:

Returning, to the first server, a data packet for replying to the TCP connection establishment request;

Receiving and buffering a data packet carrying the user data information sent by the first server to the first server;

After receiving the data packet for replying to the TCP connection establishment request that is forwarded by the second server forwarded by the second proxy server, sending the buffered data packet carrying the user data information to the second server via the second proxy server .

Optionally, if the data packet sent by the first server that is received by the first route to the second server is a User Data Protocol (UDP)-based data packet, the five-way packet is used. Before the source address in the group is modified to the address of the first proxy server and the destination address is modified to the address of the second proxy server, the method further includes:

Receiving and buffering a UDP protocol-based data packet sent by the first server to the second server; and,

Generating a session request packet for requesting the second proxy server to create a session and sending it to the second proxy server;

After receiving the session response data packet sent by the second proxy server indicating that the session is successfully created, the source address modification in the quintuple of the UDP protocol-based data packet sent by the first server to the second server is received and cached. The address and destination address of the first proxy server are modified to the address of the second proxy server.

Receiving, by the first server forwarded by the first proxy server, a data packet sent by the first server to the second server; wherein, the source address in the quintuple of the packet header of the data packet is modified by the first proxy server to be the first proxy server The address and the destination address are modified by the first proxy server to be the address of the second proxy server;

Reverting the quintuple in the data packet modified by the first proxy server to the quintuple before modification;

Sending the restored data packet to the second server, so that the second server responds to the restored data packet; wherein the first proxy server and the first server are deployed in the first data center, and the second The server is deployed in the second data center.

Optionally, the quintuple in the data packet modified by the first proxy server is restored to the quintuple before the modification, including:

Searching, according to the quintuple in the data packet modified by the first proxy server, second receiving session information including an address whose source address is the first proxy server and whose destination address is the address of the second proxy server;

Determining, according to an association relationship between the preset session information, second sending session information associated with the second receiving session information, where the source address included in the second sending session information is an address of the second server The destination address is the address of the first server;

The destination address in the quintuple of the modified data packet is modified to the source address in the second sending session information, and the source address is modified to the destination address in the second sending session information.

Optionally, if the data packet forwarded by the first proxy server is a data packet for requesting to establish a TCP connection, the data packet forwarded by the first proxy server further includes the modification by the first proxy server. The quintuple of the data packet;

The second sending session information and the second receiving session information are generated according to the following manner:

Generating, according to the quintuple of the data packet before the modification by the first proxy server, second sending session information including an address whose active address is the second server and an address whose destination address is the first server;

Generating, according to the modified five-tuple in the data packet forwarded by the first proxy server, second receiving session information including an address whose active address is the first proxy server and whose destination address is the address of the second proxy server;

Establishing an association relationship between the second sending session information and the second receiving session information.

Optionally, if the data packet forwarded by the first proxy server is a UDP protocol-based data packet, the quintuple in the data packet modified by the first proxy server is restored to the quintuple before modification. Previously, the method further includes:

Receiving, by the first proxy server, a session request data packet for requesting to create a session; wherein the session request data packet includes two types of five-tuples, and the first one is sent to the second server for the first time. The quintuple in the server's data packet, the second is the quintuple with the source address being the first proxy server, the destination address being the second proxy server, and the transport layer protocol being the specified transport protocol;

And generating second sending session information including an address whose active address is the second server and the destination address is the address of the first server according to the first five-tuple; and

According to the second quintuple, generating second receiving session information including an address whose active address is the first proxy server and whose destination address is the address of the second proxy server; and

A further embodiment of the present application provides an apparatus for implementing network interconnection, including:

a receiving module, configured to receive a data packet sent by the first server deployed in the first data center and sent to the second server deployed in the second data center, where the packet header includes a quintuple;

a processing module, configured to modify a source address in the quintuple of the data packet to an address of the first proxy server, and modify the destination address to an address of the second proxy server;

And a sending module, configured to send the modified data packet to a second proxy server deployed in the second data center.

a receiving module, configured to receive a data packet sent by the first server that is forwarded by the first proxy server to the second server, where the source address in the quintuple of the packet header of the data packet is modified by the first proxy server to The address and destination address of the first proxy server are modified by the first proxy server to the address of the second proxy server;

a processing module, configured to restore the quintuple in the data packet modified by the first proxy server to the quintuple before modification;

a sending module, configured to send the restored data packet to the second server, so that the second server responds to the restored data packet; wherein the first proxy server and the first server are deployed in the first data center The second server is deployed in the second data center.

A further embodiment of the present application provides a computer device, the computer device comprising a processor, the processor is configured to perform the steps of the method for implementing network interconnection in any of the embodiments of the present application when executing the computer program instructions stored in the memory.

A further embodiment of the present application provides a computer readable storage medium having stored thereon computer program instructions that, when executed by a processor, implement the steps of any method of implementing network interconnection in an embodiment of the present application.

The beneficial effects of the embodiment of the present application are as follows: a data packet that is communicated between a first server deployed in a first data center and a second server deployed in a second data center can implement cross-data center based on a multi-level proxy manner. Transmission. The first proxy server deployed in the first data center and the second proxy server deployed in the second data center may modify or restore the header quintuple of the data packet to be forwarded to support the cross data center. Transfer. Compared with the prior art, only the address of the packet quintuple of the data packet is modified in the embodiment of the present application, and the modified data packet does not reach the maximum MTU length. Compared with the tunnel mode in the prior art, Effectively avoid fragmentation and reassembly of data packets, thereby improving data transmission performance between data centers across the WAN and improving bandwidth utilization.

DRAWINGS

FIG. 1 is a schematic diagram of networking of a system for implementing network interconnection according to Embodiment 1 of the present application;

2 is a flowchart of a method for implementing network interconnection according to Embodiment 2 of the present application;

3 is a schematic diagram of a scenario for implementing data center cross-region interconnection according to Embodiment 2 of the present application;

4 is a process of establishing a TCP connection between the server E and the server F through the proxy servers C and D according to the second embodiment of the present application;

5 is a data transmission process performed by the server E and the server F according to the TCP connection according to the second embodiment of the present application;

6 is a data transmission process performed by the server E according to the second embodiment of the present application by using the proxy server C and D and the server according to the UDP protocol;

FIG. 7 is a schematic structural diagram of an apparatus for implementing network interconnection according to Embodiment 3 of the present application;

FIG. 8 is a schematic structural diagram of an apparatus for implementing network interconnection according to Embodiment 4 of the present application;

9 is a schematic structural diagram of a computing device according to Embodiment 5 of the present application;

FIG. 10 is a schematic structural diagram of a computing device according to Embodiment 7 of the present application.

detailed description

To solve the problem of poor transmission performance and low bandwidth utilization in the solution of the data center across the WAN in the prior art, the present application provides a system, method and device for implementing network interconnection. The technical solutions in the embodiments of the present application are clearly and completely described in the following with reference to the drawings in the embodiments of the present application. It is obvious that the described embodiments are only a part of the embodiments of the present application, and not all of the embodiments. All other embodiments obtained by a person of ordinary skill in the art based on the embodiments of the present application without departing from the inventive scope are the scope of the present application.

The solution of the present application will be described in detail below through specific embodiments. Of course, the application is not limited to the following embodiments.

Embodiment 1

1 is a schematic diagram of networking of a system for implementing network interconnection according to Embodiment 1 of the present application. The system includes a first server and a first proxy server both deployed in the first data center, a second server and a second proxy server both deployed in the second data center.

The first server is configured to send a data packet to the second server.

The data packet sent by the first server to the second server may be a data packet based on the TCP protocol, or may be a data packet based on the UDP protocol. The TCP protocol is a connection-oriented protocol, so the first server may first send a data packet for requesting to establish a TCP connection to the second server, and after determining that the TCP connection is successfully established, send the carrying to the second server based on the established TCP connection. A data packet having user data information; the UDP protocol is a non-connection-oriented protocol, so the UDP protocol-based data packet sent by the first server to the second server can be directly a data packet carrying user data information.

Specifically, the packet header sent by the first server to the second server includes a five-tuple, where the source IP address is the IP address of the first server, the source port is the port of the first server, and the destination IP address is the first The IP address and destination port of the second server are the ports of the second server, and the transport layer protocol is TCP protocol or UDP protocol. The IP addresses of the first server and the second server are all addresses under the network segment where the corresponding data center is located, that is, the intranet address under the corresponding data center.

a first proxy server, configured to receive a data packet sent by the first server that is forwarded by the route to the second server; modify the source address in the quintuple of the data packet to be changed to the address and destination address of the first proxy server Second agent service The address of the server and send the modified packet to the second proxy server.

Here, the first proxy server may be deployed at the egress gateway of the first data center, and the second proxy server may be deployed at the egress gateway of the second data center.

The address of the first proxy server and the second proxy server modified may be preset by a transmission manner of the data packet between the first proxy server and the second proxy server in an actual application. The first proxy server may send the received data packet to the second proxy server via the public network. Then, the addresses of the first proxy server and the second proxy server correspond to the IP address of the public network. The first proxy server may also send the received data packet to the second proxy server via the leased line. Then, the addresses of the first proxy server and the second proxy server may also correspond to the IP address in the dedicated line.

In the embodiment of the present application, for convenience of description, the IP address and port number of the server or the proxy server are collectively referred to as an address. Therefore, the modification and restoration of the address in the present application is actually the modification and restoration of the IP address and the port number. Then, the source address in the quintuple of the data packet is modified to the address of the first proxy server, and the destination address is modified to the address of the second proxy server, that is, the source IP in the quintuple of the data packet. The address is modified to the IP address of the first proxy server, the source port number is modified to the port number of the first proxy server, the destination IP address is modified to the IP address of the second proxy server, and the destination port number is modified to the port number of the second proxy server.

a second proxy server, after receiving the modified data packet sent by the first proxy server, restoring the modified quintuple of the modified data packet to the quintuple before the modification, and the restored data packet Send to the second server.

Here, the second proxy server may restore the quintuple of the modified data packet to obtain a quintuple of the data packet sent by the original first server to the second server, for the first server and the second server, The information in the packet has not changed to achieve the effect of transparent forwarding.

a second server, configured to receive and respond to the restored data packet.

It can be seen that the data packet that is communicated between the first server deployed in the first data center and the second server deployed in the second data center can be transmitted across the data center based on a multi-level proxy. The first proxy server deployed in the first data center and the second proxy server deployed in the second data center may modify or restore the header quintuple of the data packet to be forwarded to support the cross data center. Transfer. Compared with the prior art, only the address of the packet quintuple of the data packet is modified in the embodiment of the present application, and the modified data packet does not reach the maximum MTU length. Compared with the tunnel mode in the prior art, Effectively avoid fragmentation and reassembly of data packets, thereby improving data transmission performance between data centers across the WAN and improving bandwidth utilization. .

Hereinafter, the processing procedure when the first proxy server and the second proxy server forward the data packet will be described in detail in conjunction with specific embodiments.

Specifically, the first proxy server may modify the packet quintuple of the data packet according to the pre-generated first sending session information and the first receiving session information. The first sending session information is used to identify the session information of the data packet sent by the first server via the first proxy server, that is, the session information indicating the outbound direction of the first data center, and the first receiving session information is used to identify the first The session information of the data packet received by the server via the first proxy server, that is, the session information characterizing the inbound direction for the first data center. Correspondingly, the second proxy server may also restore the modified quintuple information according to the pre-generated second sending information and the second receiving session information. The second sending session information is used to identify the session information of the data packet sent by the second server via the second proxy server, that is, the session information indicating the outbound direction of the second data center, and the second receiving session information is used to identify the The session information of the data packet received by the second server via the second proxy server, that is, the session information characterizing the inbound direction for the second data center.

Here, the session information may include a source address and a destination address of the transmitted or received data packet, where the source address includes a source IP address and a source port number, and the destination address includes a destination IP address and a destination port number, of course, the foregoing The session information may further include a transport layer protocol, and the transport layer protocol for the outbound session information is consistent with the transport layer protocol of the quintuple in the original data packet sent by the first server or the second server, and is in the inbound direction. The transport layer protocol in the session information is not necessarily consistent with the transport layer protocol of the quintuple in the original data packet, and may also be the protocol used in the transmission process of the data packet between the proxy servers.

The specific implementation manner of the first proxy server modifying the packet header quintuple of the data packet is as follows:

Determining, according to the association relationship between the preset session information, the first receiving session information associated with the first sending session information; wherein the source address included in the first receiving session information is an address and a destination address of the second proxy server Is the address of the first proxy server;

The specific implementation manner in which the second proxy server restores the modified quintuple of the modified data packet to the quintuple before modification is as follows:

And searching, according to the received quintuple of the modified data packet forwarded by the first proxy server, the second receiving session information including the address whose source address is the first proxy server and the destination address is the address of the second proxy server;

In the specific implementation, the first proxy server may not be modified for the transport layer protocol in the quintuple of the data packet. Of course, it may be modified according to actual requirements to be able to implement the data packet in the first proxy server and the first The transport layer protocol transmitted between the two proxy servers, such as the HTTP protocol, is not limited in this application. And if the first proxy server modifies the transport layer protocol of the data packet in the process of forwarding the data packet to the second proxy server, the transmission process of the data packet between the first proxy server and the second proxy server The adjustment may be based on the modified protocol, and is not limited to the transmission process described in the following embodiments of the present application. Correspondingly, after receiving the data packet, the second proxy server needs to restore the data packet quintuple according to the transport layer protocol in the second receiving session information, in addition to restoring the address in the data packet quintuple. Transport layer protocol.

Further, a process of generating session information by the first proxy server and the second proxy server is described:

The specific implementation manner of the first proxy server generating the first sending session information and the first receiving information includes:

Determining, according to the destination address in the quintuple of the received data packet, a server corresponding to the network segment matching the destination address as the second proxy server;

Generating first receiving session information including an address whose active address is the second proxy server and whose destination address is the address of the first proxy server; and

The data packet sent by the first server received by the first proxy server to the second server for the first time may have two cases, one is a data packet for requesting to establish a TCP connection, and the other is a UDP-based protocol. Packet. And, the process of generating the first sending session information and the first receiving information by the first proxy server is applicable to both cases.

It should be noted that, in the above two cases, the first proxy server needs to perform other processing procedures in addition to the processing of generating the first sending session information and the first receiving session information. Correspondingly, the manner in which the second proxy server generates the second sending session information and the second receiving session information in the two cases is different, specifically:

(1) Case 1: The first packet received by the first proxy server is a packet for requesting establishment of a TCP connection.

The first proxy server is also used to:

Saving the quintuple of the modified data packet in the data packet before modifying the source address in the quintuple of the data packet to the address of the first proxy server and modifying the destination address to the address of the second proxy server in.

In this case, since the TCP connection-based session has not been established between the first server, the first proxy server, the second proxy server, and the second server, the first proxy server will modify the five packets before the packet. The tuple, that is, the original quintuple information of the data packet, is stored in the data packet to inform the second proxy server of the quintuple information before the modification of the data packet.

Specifically, the quintuple of the data packet before the modification may be stored in a data area of the data packet for storing user data information, and the quintuple of the modified data packet may be placed in addition to the packet header of the data packet. Stored in this data area.

Accordingly, the second proxy server is also used to:

Generating, according to the modified quintuple stored in the received data packet, second sending session information including an address whose active address is the second server and whose destination address is the address of the first server;

Generating, according to the modified five-tuple in the received data packet, second receiving session information including an address whose active address is the first proxy server and whose destination address is the address of the second proxy server;

(2) The second case: the data packet sent by the first server that is firstly received by the first proxy server to the second server is a UDP protocol-based data packet.

The first proxy server is also used to:

Receiving and buffering the UDP protocol sent by the first server to the second server before modifying the source address in the quintuple of the data packet to the address of the first proxy server and modifying the destination address to the address of the second proxy server Packet; and,

The session request data packet includes two types of five-tuples, the first type is a quintuple in a data packet sent by the first server that is first received to the second server, and the second type is a source address being the first agent. The server and destination address are the second proxy server, and the transport layer protocol is a quintuple of the specified transport protocol. The two quintuples may be located in a data area of the session request data packet for storing user data information, or may store the first quintuple in the session. The data area of the request packet, the second five-tuple is stored in the header of the session request packet.

Accordingly, the second proxy server is also used to:

In addition, the embodiment of the present application further provides a preferred embodiment, that after the first proxy server receives the data packet sent by the first server that is forwarded by the route to the second server for requesting to establish a TCP connection, the first proxy server may further A server feeds back a data packet for replying to the TCP connection establishment request;

Based on the above preferred embodiment, the first proxy server may send a data packet for requesting to establish a TCP connection to the second proxy server, requesting to establish a TCP connection with the second proxy server and the second server, and locally and the first server Establish a TCP connection to cache all packets sent by the first server based on the TCP connection. In this way, the first server does not need to wait for the data packet forwarded by the second server via the multi-level proxy for replying to the TCP connection establishment request, and can also determine the TCP connection success locally in advance, and then the data required in the session based on the TCP connection. The packet is first sent to the first proxy server and cached by the first proxy server, and then the subsequent first proxy server can directly cache the data packet after responding to the TCP connection establishment request by the second server. The data packet is forwarded to the second server via the second proxy server, thereby effectively shortening the setup time of the TCP connection, and improving the forwarding efficiency of the data packet in the session process based on the TCP connection, and better satisfying the transmission acceleration in the network interconnection. demand.

Embodiment 2

With reference to the method for implementing network interconnection described in the foregoing first embodiment, the second embodiment of the present application provides a method for implementing network interconnection. For details, refer to the method flowchart shown in FIG. 2:

Step 201: The first proxy server receives the data packet sent by the first server deployed in the first data center to the second server deployed in the second data center, and the packet header of the data packet includes a quintuple.

Step 202: The first proxy server modifies the source address in the quintuple of the data packet to the address of the first proxy server, and the destination address is modified to the address of the second proxy server.

Step 203: The first proxy server sends the modified data packet to a second proxy server deployed in the second data center.

Step 204: The second proxy server restores the quintuple in the data packet modified by the first proxy server to the quintuple before modification.

Step 205: Send the restored data packet to the second server, so that the second server responds to the restored data packet.

In a specific implementation, if the first proxy server in step 201 receives the data packet sent to the second server via the forwarded first server for the first time, before performing step 202, the first sending session information and the first Receive session information:

Generating, according to the quintuple of the received data packet, first sending session information including an address whose active address is the first server and an address whose destination address is the second server; and

If the data packet sent by the first server that is received by the first route to the second server is the data packet for requesting to establish a TCP connection, before the step 202 is performed, the TCP for requesting to establish the TCP may be used before the modification. The five-tuple of the header of the connected packet is stored in the packet.

And, the data packet for replying to the TCP connection establishment request may be fed back to the first server, and the data packet carrying the user data information sent by the first server to the first server may be received and cached, and received After the second server forwarded by the second proxy server responds to the data packet for replying to the TCP connection establishment request, the cached data packet carrying the user data information is sent to the second server via the second proxy server.

The first proxy server may create a session with the second proxy server before performing step 202, if the data packet sent by the first server that is received by the first route to the second server is a UDP protocol-based data packet. Before the session is created, the UDP protocol-based data packet sent by the received first server to the second server is cached locally, and a session request packet for requesting the second proxy server to create a session is generated and sent to the first If the second proxy server receives the session response packet sent by the second proxy server to indicate that the session is successfully created, it is determined that the session is successfully created, and then step 202 is performed.

Further, in step 202, the quintuple of the data packet may be modified according to the first generated session information and the first received session information, which specifically includes:

Further, before performing step 203, the second proxy server may further establish second sending session information and second receiving session information based on the received quintuple carried in the data packet forwarded by the first proxy server.

If the data packet forwarded by the first proxy server is a data packet for requesting to establish a TCP connection, the data packet forwarded by the first proxy server further includes data modified by the first proxy server. The quintuple of the packet, and then the second proxy server, may generate the address including the address of the second server and the address of the first server according to the quintuple of the data packet before modification by the first proxy server. Transmitting the session information; generating, according to the modified five-tuple in the header of the data packet forwarded by the first proxy server, the second address including the address of the first proxy server and the address of the second proxy server Receiving session information; establishing an association relationship between the second sending session information and the second receiving session information.

If the data packet forwarded by the first proxy server is a UDP protocol-based data packet, before the quintuple in the data packet modified by the first proxy server is restored to the quintuple before the modification, The method also include:

Further, in step 203, the quintuple in the data packet modified by the first proxy server may be restored to the quintuple before modification according to the pre-generated second sending session information and the second receiving session information, specifically include:

In the following, the data center A and the data center B deployed in different areas are taken as an example to describe the method for implementing network interconnection between two data centers, in combination with the content described in the first embodiment and the second embodiment.

First, referring to FIG. 3, a schematic diagram of a scenario for interconnecting data centers across regions is implemented. Assume that the network segment corresponding to data center A is NET_A, and the network segment corresponding to data center B is NET_B; proxy server C and proxy server D are deployed at the egress gateways of data center A and data center B, respectively, and data center A routes NET_B. Point to the internal network IP address IP_C of the local proxy server C. The data center B points the route of the NET_A to the internal network IP address IP_D of the local proxy server D. The public network IP addresses of the two proxy servers are EIP_C and EIP_D, respectively. The internal network IP address of server E is IP_E, and the internal network IP address of server F of data center B is IP_F.

Specifically, the process of implementing network interconnection between the two data centers is introduced for the data packets of the TCP protocol and the data packets of the UDP protocol, respectively.

(1) IP packet for TCP protocol

First, referring to FIG. 4, a process of establishing a TCP connection between the server E of the data center A and the server F of the data center B through the proxy servers C and D, the specific process is as follows:

Step 401: The server E sends a synchronous packet (SYN packet) for requesting to establish a TCP connection to the server F, wherein the header of the SYN packet includes a five-tuple (IP_E, IP_F, PORT_E, PORT_F, PROTO_TCP).

Step 402: The proxy server C receives the SYN packet sent by the server E to the F, and searches for the route according to the destination IP address IP_F, matches the NET_B network segment corresponding to the data center B, and finds the egress gateway deployed in the data center B. Proxy server D.

Here, since the server E of the data center A has directed the route of the NET_B network segment to the local proxy server C, the SYN packet sent by the server E to the server F deployed on the NET_B network segment can be routed to the local proxy service. C.

Step 403: The proxy server C generates the first sending session information S1 according to the packet header 5-tuple of the received SYN packet, where the source IP address of the first sending session information S1 is IP_E, the destination IP address is IP_F, and the source port number is PORT_E, the destination port number is PORT_F, and the transport layer protocol is PROTO_TCP.

The first receiving session information S2 is generated according to the IP address of the remote proxy server D that is found as EIP_D, the remote proxy port PORT_D, and the local IP address EIP_C and the local proxy port PORT_C. The IP address is EIP_D, the destination IP address is EIP_C, the source port number is PORT_D, the destination port number is PORT_C, the transport layer protocol is PROTO_TCP, and the session information S1 and S2 are associated.

Step 404: The proxy server C finds the first sending session information S1 according to the packet header quintuple of the SYN packet, and then, according to the first receiving session information S2 associated with S1, the original packet header quintuple of the SYN packet (IP_E, IP_F, PORT_E, PORT_F, PROTO_TCP) is modified to (EIP_C, EIP_D, PORT_C, PORT_D, PROTO_TCP), and the original packet header quintuple (IP_E, IP_F, PORT_E, PORT_F, PROTO_TCP) is saved in the SYN packet, and the modified SYN is modified. The package is sent to the proxy server D.

Here, since the packet length of the SYN packet is small, the packet header of the SYN packet is modified in the present application, and the original quintuple quintuple is added to the data packet. Since the packet length occupied by the quintuple information is small, The modification of the data packet in the present application does not cause the modified data packet to reach the maximum MTU length, thereby effectively avoiding fragmentation and reassembly of the data packet.

It should be noted that after receiving the SYN packet for the first time, the proxy server C saves the original packet quintuple in the data area of the data packet, so that the peer proxy server D generates corresponding session information. After the subsequent TCP connection is successfully established, when the proxy server C forwards the data packet sent by the server E based on the TCP connection, the proxy server C may modify only the packet header of the data packet, and does not perform the action of saving the original packet header quintuple in the data packet. The data transmission process after the successful establishment of a specific TCP connection will be described in detail later.

In the specific implementation, the proxy server C may perform the encryption processing on the original packet quintuple stored in the SYN packet. The specific encryption process may refer to the existing process, which is not limited in this application.

Step 405: After receiving the SYN packet forwarded by the proxy server C, the proxy server D establishes the second sending session information S3 according to the original packet quintuple in the SYN packet, where the source IP address is IP_F and the destination IP address is IP_E. The source port number is PORT_F, the destination port number is PORT_E, and the transport layer protocol is PROTO_TCP.

According to the modified quintuple in the SYN packet, the second receiving session information S4 is established, wherein the source IP address in S4 is EIP_C, the destination IP address is EIP_D, the source port number is PORT_C, the destination port number is PORT_D, and the transport layer protocol is PROTO_TCP; and establishes an association relationship between session information S3, S4.

Here, if the SYN packet is encrypted, after receiving the SYN packet, the data packet may be decrypted first, and the legality and integrity of the data packet may be verified. The specific decryption and verification process may refer to the existing process. This is not limited.

Step 406: The proxy server D finds the second receiving information S4 according to the SYN packet header quintuple, and further sets the packet header quintuple of the SYN packet according to the second sending session information S3 associated with S4 (EIP_C, EIP_D, PORT_C , PORT_D, PROTO_TCP) is modified to (IP_E, IP_F, PORT_E, PORT_F, PROTO_TCP) and forwarded to server F via routing.

Step 407: The server F listens to and receives the SYN packet on the port PORT_F based on the TCP protocol, and after processing the SYN packet, sends a SYN-ACK packet for replying to the TCP connection establishment request, where the header of the SYN-ACK packet includes five The tuple is (IP_F, IP_E, PORT_F, PORT_E, PROTO_TCP).

Step 408: The proxy server D receives the route-forwarded SYN-ACK packet according to the packet header of the SYN-ACK packet. The quintuple finds the second sending session information S3, and determines the associated second receiving session information S4 according to S3, and modifies the packet header quintuple (IP_F, IP_E, PORT_F, PORT_E, PROTO_TCP) of the SYN-ACK packet to (EIP_D). , EIP_C, PORT_D, PORT_C, PROTO_TCP), and forward the modified SYN-ACK packet to the proxy server C.

Step 409: After receiving the SYN-ACK packet, the proxy server C searches for the first receiving session information S2 according to the packet header quintuple of the SYN-ACK packet, and determines the associated first sending session information S1 according to S2, and sets the SYN-ACK. The packet's packet header quintuple (EIP_D, EIP_C, PORT_D, PORT_C, PROTO_TCP) is modified to (IP_F, IP_E, PORT_F, PORT_E, PROTO_TCP) and forwarded to server E.

Step 410: The server E receives the SYN-ACK packet returned by the server F, and returns a LAST-ACK packet indicating that the TCP connection is successfully established to the server F.

Step 504 in the figure is a simplified process. Specifically, the forwarding process of the LAST-ACK packet can be forwarded by referring to the forwarding process of the above SYN packet (proxy server C → proxy server D → server E), and when the server F receives the server E. After the LAST-ACK packet, it is determined that the TCP connection with the server E is successfully established. Subsequently, the two servers can perform bidirectional transmission of the data packet based on the established TCP connection.

It should be noted that the process of establishing the TCP connection in steps 401 to 410 here is performed by the proxy server C in the working mode of the incomplete proxy.

Preferably, in the embodiment of the present application, the proxy server can also work in the working mode of the full proxy, wherein the working process of the full proxy works with respect to the establishment of the TCP connection in the working mode of the incomplete proxy has the following points: different:

First, after performing step 401, after receiving the SYN packet for requesting to establish a TCP connection, the proxy server C can immediately feed back to the server E a SYN-ACK packet for replying to the TCP connection establishment request, in the proxy server. D returns to the SYN-ACK packet sent by the server F, and further receives the LAST-ACK packet sent by the server E for routing forwarding and the subsequent ACK packet, and then temporarily caches until the proxy server is received. D returns the SYN-ACK packet sent by server F. It is determined that the TCP connection between the local proxy server C and the server E is successfully established. This process can be done in parallel with steps 402 through 408.

Second, after performing step 408 (steps 409-410 are not performed), the proxy server C forwards the LAST-ACK packet sent by the cached server E for indicating the successful establishment of the TCP connection and the subsequent ACK packet to be forwarded via the proxy server D. Give server F. For the specific forwarding process, refer to the above process.

After the server F receives the LAST-ACK packet sent by the server E, it determines that the TCP connection with the server E is successfully established. Subsequently, the two servers can perform bidirectional transmission of the data packet based on the established TCP connection.

Further, referring to FIG. 5, the process of data transmission based on the TCP connection between the server E of the data center A and the server F of the data center B is as follows:

Step 501: The server E sends a data packet carrying the user data information to the server F based on the TCP connection, where the packet header of the data packet is (IP_E, IP_F, PORT_E, PORT_F, PROTO_TCP).

Step 502: The proxy server C receives the route-transferred data packet sent by the server E to the F, searches for the pre-generated first transmission session information S1 according to the packet header quintuple of the data packet, and determines the first associated association according to S1. Receiving session information S2, modifying the packet header quintuple (IP_E, IP_F, PORT_E, PORT_F, PROTO_TCP) of the data packet to (EIP_C, EIP_D, PORT_C, PORT_D, PROTO_TCP), and forwarding the modified packet to the proxy Server D.

Specifically, if the proxy server C completes the TCP establishment process with the server E locally, the cached server E is cached. The data packet sent to the server F based on the TCP connection can directly modify the cached data packet and forward it to the proxy server D.

Step 503: After receiving the data packet forwarded by the proxy server C, the proxy server D searches for the pre-generated second receiving session information S4 according to the packet header quintuple (EIP_C, EIP_D, PORT_C, PORT_D, PROTO_TCP) of the data packet. And determining the associated second receiving session information S3 according to S4, modifying the packet header quintuple (EIP_C, EIP_D, PORT_C, PORT_D, PROTO_TCP) of the data packet to (IP_E, IP_F, PORT_E, PORT_F, PROTO_TCP), and modifying The subsequent packet is forwarded to server F.

Step 504: The server F receives and responds to the data packet sent by the server E based on the TCP connection.

Step 504 in the figure is a simplified process. Specifically, the process of forwarding the data packet of the server F by the proxy server D, C to the server E of the data center A may refer to the forwarding process of the data packet, and will not be described again. .

Based on the above process, the server E of the data center A and the server F of the data center can perform bidirectional transmission of the data packets based on the established TCP connection until the established TCP connection times out, or the TCP connection is actively disconnected by the server E or F.

(2) IP packet for UDP protocol

First, referring to FIG. 6, the server E of the data center A performs the data transmission process based on the UDP protocol through the proxy servers C and D and the server F of the data center B. The specific process is as follows:

Step 601: The server E sends a data packet (referred to as a UDP packet) based on the UDP protocol to the server F, where the header of the UDP packet is (IP_E, IP_F, PORT_E, PORT_F, PROTO_UDP).

Step 602: The proxy server C receives the UDP packet sent by the server E to the F, and searches for the route according to the destination IP address IP_F, matches the NET_B network segment corresponding to the data center B, and finds that it is deployed at the data center B exit gateway. Proxy server D.

Step 603: The proxy server C generates the first sending session information S1 according to the packet header 5 tuple of the received UDP packet, where the content included in the session information is as described in the foregoing embodiment, and is not described herein;

According to the found remote proxy server D, it is determined that the remote proxy IP address is EIP_D, and the remote proxy port is PORT_D, and then the first receiving session information S2 is generated according to the known local IP address EIP_C and the local proxy port PORT_C, and An association relationship is established between the session information S1 and S2.

Step 604: The proxy server C caches the UDP packet sent by the server E, and generates a session request data packet for requesting the proxy server D to create a session, and sends the session request data packet to the remote proxy server D.

The session request packet includes two types of five-tuples, the first being the original packet header quintuple of the UDP packet (IP_E, IP_F, PORT_E, PORT_F, PROTO_UDP), and the second being constructed by the proxy server C. The quintuple of the packet (EIP_C, EIP_D, PORT_C, PORT_D, PROTO_UDP), these two quintuple can be saved in the data area of the packet according to the protocol convention format. Moreover, the header of the session request packet can be encapsulated according to a determined transport layer protocol capable of realizing data transmission between the proxy server C and the proxy server E.

In a specific implementation, the proxy server C may cache the data packet related to the UDP session sent by the received routed forwarding server E before receiving the response data packet returned by the proxy server D for indicating successful session establishment. local. In addition, the proxy server C can encrypt the two quintuples stored in the data area of the data packet. The specific encryption process can refer to the existing process, which is not limited in this application.

Here, by saving the original UDP packet locally, a packet containing the quintuple constructed by the proxy server C and the header quintuple of the original UDP packet is regenerated, since the packet contains only two quintuples, The length of the message occupied by the quintuple information is very small, so the processing of the data packet in this application does not make the processed data packet reach the maximum. Large MTU length, which effectively avoids fragmentation and reassembly of data packets. And, through the two five-tuples in the generated data packet, the proxy server D can generate session information to implement forwarding of the data packet between the proxy servers C and D.

Step 605: After receiving the UDP packet forwarded by the proxy server C, the proxy server D generates the second sending session information S3 according to the original packet quintuple in the UDP packet.

The second receiving session information S4 is generated based on the quintuple of the data packet constructed by the proxy server C, and the relationship between the session information S3, S4 is established.

Step 606: The proxy server D sends a session response data packet indicating that the session creation is successful to the proxy server C.

Step 607: After receiving the response packet sent by the proxy server D, the proxy server C determines that the UDP session initiated for the server E has been successfully established in the proxy server D.

Step 608: The proxy server C forwards the UDP packet sent by the locally cached server E to the F to the proxy server D.

Specifically, first, according to the packet header quintuple of the UDP packet, the first sending session information S1 is searched, and then the first receiving session information S2 associated with S1 is determined, and the packet header quintuple of the UDP packet (IP_E, IP_F, PORT_E, PORT_F, UDP) is modified to (EIP_C, EIP_D, PORT_C, PORT_D, UDP), and the modified UDP packet is sent to the proxy server D.

Here, the information stored in the data area in the UDP packet can be encrypted and compressed. For details, refer to the existing process, and details are not described herein again.

Step 609: After receiving the UDP packet forwarded by the proxy server C, the proxy server D searches for the second receiving session information S4 according to the packet header quintuple of the UDP packet, and determines the associated second receiving session information S3 according to S4, and sets the UDP packet. The header quintuple (EIP_C, EIP_D, PORT_C, PORT_D, PROTO_UDP) is modified to (IP_E, IP_F, PORT_E, PORT_F, PROTO_UDP), and the modified UDP packet is forwarded to the server F.

Here, if the UDP packet is encrypted and compressed, after receiving the UDP packet, the data packet may be decrypted first, the validity and completeness of the data packet are verified, and the data information in the data packet is decompressed. The process of decoding and decompression can refer to the existing process, which is not limited in this application.

Step 610: The server F receives and responds to the UDP packet sent by the server E.

Here, the step 610 shown in the figure is a simplified process. Specifically, the data packet responded by the server F can also be sent to the server E via the proxy server D and the proxy server C. The forwarding process in the proxy server is similar to the above process. I will not repeat them one by one. Subsequently, the data packets exchanged between the server E and the server F can be forwarded through the proxy servers C and D until the UDP session established between the proxy server C and the proxy server D is timed out.

In addition, in this embodiment, the server E and the server F are only taken as an example. In specific implementation, multiple data packets sent by multiple servers in the data center A can simultaneously support forwarding to the corresponding server in the data center B via the proxy servers C and D. The proxy server C is configured to modify the intranet addresses in the plurality of data packet quintuples sent by the multiple servers to the public network address corresponding to the proxy server D. Accordingly, the proxy server D is configured to generate based on the pre-generation The session information restores the received plurality of data packet quintuaries to forward the received plurality of data packets to the corresponding servers in the data center B. For the specific forwarding process, refer to the above process, and details are not described herein.

In addition, in practical applications, in addition to deploying a proxy server at the edge of the data center, a proxy server may be deployed at an edge access point corresponding to two data centers in the public network, for example, in a public network corresponding data center. A's edge access point deploys proxy server M, corresponding to data center B's edge access point deploys proxy server N, then, data The data packet sent by the server of the center A to the server of the data center B can be forwarded to the server corresponding to the data center B via the agent C→agent M→agent N→agent D, and the forwarding process in the multi-level proxy server can be Refer to the above process, and will not be described here.

Based on the same application concept, the embodiment of the present application further provides a device for implementing network interconnection corresponding to a method for implementing network interconnection, and the method for solving the problem by the device and the method for implementing network interconnection in the embodiment of the present application Similarly, the implementation of the device can be referred to the implementation of the method, and the repeated description will not be repeated.

Embodiment 3

FIG. 7 is a schematic structural diagram of an apparatus for implementing network interconnection according to Embodiment 3 of the present application, including:

The receiving module 71 is configured to receive a data packet that is sent by the first server deployed in the first data center to the second server that is deployed in the second data center, and the packet header of the data packet includes a five-tuple.

The processing module 72 is configured to modify a source address in the quintuple of the data packet to an address of the first proxy server, and modify the destination address to an address of the second proxy server;

The sending module 73 is configured to send the modified data packet to a second proxy server deployed in the second data center.

Embodiment 4

FIG. 8 is a schematic structural diagram of an apparatus for implementing network interconnection according to Embodiment 4 of the present application, including:

The receiving module 81 is configured to receive a data packet sent by the first server that is forwarded by the first proxy server to the second server, where the source address in the quintuple of the packet header of the data packet is modified by the first proxy server The address and destination address of the first proxy server are modified by the first proxy server to the address of the second proxy server;

The processing module 82 is configured to restore the quintuple in the data packet modified by the first proxy server to the quintuple before modification;

a sending module 83, configured to send the restored data packet to the second server, so that the second server responds to the restored data packet, where the first proxy server and the first server are deployed in the first data Center, the second server is deployed in the second data center.

Embodiment 5

The fifth embodiment of the present application further provides a computing device, which may be a desktop computer, a portable computer, a smart phone, a tablet computer, a personal digital assistant (PDA), or the like. As shown in FIG. 9, the computing device may include a central processing unit (CPU) 901, a memory 902, an input device 903, an output device 904, etc., and the input device may include a keyboard, a mouse, a touch screen, etc., and the output device may include Display devices, such as liquid crystal displays (LCDs), cathode ray tubes (CRTs), and the like.

The memory can include read only memory (ROM) and random access memory (RAM) and provides the processor with program instructions and data stored in the memory. In an embodiment of the present application, the memory may be used to store program instructions for implementing a method of network interconnection.

The processor is configured to execute the program instructions stored by the processor, and the processor is configured to execute according to the obtained program instructions: receiving the data packet transmitted by the first server deployed in the first data center and being sent to the second server deployed in the second data center The packet header of the data packet includes a quintuple; the source address in the quintuple of the data packet is modified to the address of the first proxy server, and the destination address is modified to the address of the second proxy server; the modified data is to be modified. Sending the packet to a second proxy server deployed in the second data center, so that the second proxy server restores the quintuple of the modified data packet to the quintuple before modification and the restored data The package is sent to the second server by the second service The device responds to the restored data packet.

Embodiment 6

The sixth embodiment of the present application provides a computer storage medium for storing computer program instructions used by the computing device in the above fifth embodiment, which includes a program for executing the above method for implementing network interconnection.

The computer storage medium can be any available media or data storage device accessible by a computer, including but not limited to magnetic storage (eg, floppy disk, hard disk, magnetic tape, magneto-optical disk (MO), etc.), optical storage (eg, CD, DVD, BD, HVD, etc.), and semiconductor memories (for example, ROM, EPROM, EEPROM, non-volatile memory (NAND FLASH), solid-state hard disk (SSD)).

Example 7

The seventh embodiment of the present application further provides a computing device, which may be a desktop computer, a portable computer, a smart phone, a tablet computer, a personal digital assistant (PDA), or the like. As shown in FIG. 10, the computing device may include a central processing unit (CPU) 1001, a memory 1002, an input device 1003, an output device 1004, etc., and the input device may include a keyboard, a mouse, a touch screen, etc., and the output device may include Display devices, such as liquid crystal displays (LCDs), cathode ray tubes (CRTs), and the like.

The processor is configured to execute, according to the obtained program instruction, the processor, by the processor, to receive the data packet sent by the first server forwarded by the first proxy server to the second server; wherein the packet header of the data packet is five The source address in the tuple is modified by the first proxy server to be the address of the first proxy server, and the destination address is modified by the first proxy server to the address of the second proxy server; the content to be modified by the first proxy server The quintuple in the data packet is restored to the quintuple before modification; the restored data packet is sent to the second server, so that the second server responds to the restored data packet; wherein the first proxy server and The first server is deployed in a first data center, and the second server is deployed in a second data center.

Example eight

Embodiment 8 of the present application provides a computer storage medium for storing computer program instructions for use in the computing device of the above-described Embodiment 7, which includes a program for executing the above-described method for implementing network interconnection.

Finally, it should be noted that the above embodiments are only used to explain the technical solutions of the present application, and are not limited thereto; although the present application is described in detail with reference to the foregoing embodiments, those skilled in the art should understand that they can still The technical solutions described in the foregoing embodiments are modified, or the equivalents of the technical features are replaced by the equivalents. The modifications and substitutions do not depart from the spirit and scope of the technical solutions of the embodiments of the present application.

Claims

A system for implementing network interconnection, comprising: a first server and a first proxy server both deployed in a first data center; a second server and a second proxy server both deployed in a second data center; among them,

a first server, configured to send a data packet to the second server, where the packet header includes a five-tuple;

a first proxy server, configured to receive a data packet sent by the first server that is forwarded by the route to the second server; modify a source address in the quintuple of the data packet to an address and a destination address of the first proxy server, and modify The address of the second proxy server; sending the modified data packet to the second proxy server;

a second proxy server, configured to restore the quintuple of the modified data packet to a quintuple before modification; and send the restored data packet to the second server;

a second server, configured to receive and respond to the restored data packet.
The system of claim 1 wherein said first proxy server is specifically configured to:

And searching, according to the received quintuple of the data packet sent by the first server that is forwarded by the route to the second server, the first sending session information that includes the address of the first server and the address of the second server;

Determining, according to the association relationship between the preset session information, the first receiving session information associated with the first sending session information, where the source address included in the first receiving session information is an address of the second proxy server, The destination address is the address of the first proxy server;

The destination address in the quintuple of the data packet sent by the first server to the second server is modified to be the source address in the first receiving session information, and the source address is modified to the destination address in the first receiving session information.
The system of claim 1 wherein said second proxy server is specifically configured to:

And searching, according to the received quintuple of the modified data packet forwarded by the first proxy server, the second receiving session information including the address whose source address is the first proxy server and the destination address is the address of the second proxy server;

Determining, according to an association relationship between the preset session information, second sending session information associated with the second receiving session information, where the source address included in the second sending session information is an address of the second server The destination address is the address of the first server;

The destination address in the quintuple of the modified data packet is modified to the source address in the second sending session information, and the source address is modified to the destination address in the second sending session information.
The system of claim 2 wherein said first proxy server is further configured to:

If the data packet sent by the first server that is forwarded by the route to the second server is received for the first time, according to the quintuple of the received data packet, an address including the address of the first server and the address of the second server is generated. First send session information; and,

Determining, according to the destination address in the quintuple of the received data packet, a server corresponding to the network segment that matches the destination address as a second proxy server;

Generating first receiving session information including an address whose source address is the address of the second proxy server and an address of the first proxy server; and

Establishing an association relationship between the first sending session information and the first receiving session information.
The system according to claim 4, wherein the data packet sent by the first server that is first received by the first proxy server to the second server is used to request data for establishing a transmission control protocol TCP connection. Package, the first proxy server is also used to:

Before modifying the source address in the quintuple of the data packet to the address of the first proxy server and modifying the destination address to the address of the second proxy server, storing the quintuple of the modified data packet in the data in the bag;

The second proxy server is further configured to:

Generating, according to the modified quintuple stored in the received data packet, second sending session information including an address whose active address is the second server and whose destination address is the address of the first server;

Generating, according to the modified five-tuple in the received data packet, second receiving session information including an address whose active address is the first proxy server and whose destination address is the address of the second proxy server;

Establishing an association relationship between the second sending session information and the second receiving session information.
The system of claim 5 wherein said first proxy server is further configured to:

Receiving, after receiving the data packet sent by the first server that is forwarded by the route to the second server for requesting to establish a TCP connection, feeding back a data packet for replying to the TCP connection establishment request to the first server;

Receiving and buffering a data packet carrying the user data information sent by the first server to the first server;

After receiving the data packet for replying to the TCP connection establishment request that is forwarded by the second server forwarded by the second proxy server, sending the buffered data packet carrying the user data information to the second server via the second proxy server .
The system according to claim 4, wherein if the data packet sent by the first server that is first received by the first proxy server to the second server is a data packet based on the User Datagram Protocol (UDP) protocol, Then the first proxy server is further used to:

Receiving and buffering the UDP protocol sent by the first server to the second server before modifying the source address in the quintuple of the data packet to the address of the first proxy server and modifying the destination address to the address of the second proxy server Packet; and,

Generating a session request packet for requesting the second proxy server to create a session and sending it to the second proxy server;

After receiving the session response data packet sent by the second proxy server to indicate that the session creation is successful, the first proxy server is specifically configured to:

The source address in the quintuple of the UDP protocol-based data packet received and buffered by the first server and sent to the second server is modified to be the address of the first proxy server, and the destination address is modified to the address of the second proxy server.
The system according to claim 7, wherein said session request data packet includes two five-tuples, and the first one is a five-tuple in a data packet sent by the first server that is first received to the second server. The second type is a quintuple whose source address is the first proxy server, the destination address is the second proxy server, and the transport layer protocol is the specified transport protocol;

The second proxy server is further configured to:

And generating second sending session information including an address whose active address is the second server and the destination address is the address of the first server according to the first five-tuple; and

According to the second quintuple, generating second receiving session information including an address whose active address is the first proxy server and whose destination address is the address of the second proxy server; and

Establishing an association relationship between the second sending session information and the second receiving session information.
A method for implementing network interconnection, characterized in that the method comprises:

Receiving, by the first server deployed in the first data center, the data packet sent to the second server deployed in the second data center, the packet header of the data packet includes a quintuple;

Modifying the source address in the quintuple of the data packet to the address of the first proxy server, and modifying the destination address to The address of the second proxy server;

Sending the modified data packet to a second proxy server deployed in the second data center, so that the second proxy server restores the quintuple of the modified data packet to the quintuple before modification The restored data packet is sent to the second server, and the second server responds to the restored data packet.
The method of claim 9, wherein modifying the source address in the quintuple of the data packet to the address of the first proxy server and modifying the destination address to the address of the second proxy server comprises:

And searching, according to the received quintuple of the data packet sent by the first server that is forwarded by the route to the second server, the first sending session information that includes the address of the first server and the address of the second server;

Determining, according to the association relationship between the preset session information, the first receiving session information associated with the first sending session information, where the source address included in the first receiving session information is an address of the second proxy server, The destination address is the address of the first proxy server;

The destination address in the quintuple of the data packet sent by the first server to the second server is modified to be the source address in the first receiving session information, and the source address is modified to the destination address in the first receiving session information.
The method of claim 10, wherein the first transmission session information and the first reception session information are generated according to the following manner:

If the data packet sent by the first server that is forwarded by the route to the second server is received for the first time, according to the quintuple of the received data packet, an address including the address of the first server and the address of the second server is generated. First send session information; and,

Determining, according to the destination address in the quintuple of the received data packet, a server corresponding to the network segment that matches the destination address as a second proxy server;

Generating first receiving session information including an address whose source address is the address of the second proxy server and an address of the first proxy server; and

Establishing an association relationship between the first sending session information and the first receiving session information.
The method according to claim 11, wherein if the first received data packet sent by the first server that is forwarded by the route to the second server is a data packet for requesting to establish a TCP connection of the Transmission Control Protocol, The method further includes: before the source address in the quintuple of the data packet is modified to the address of the first proxy server, and the destination address is modified to the address of the second proxy server, the method further includes:

A five-tuple of the header of the data packet for requesting establishment of a TCP connection before the modification is stored in the data packet.
The method of claim 12, after receiving the data packet for requesting to establish a TCP connection sent by the first server that is forwarded by the route to the second server, the method further includes:

Returning, to the first server, a data packet for replying to the TCP connection establishment request;

Receiving and buffering a data packet carrying the user data information sent by the first server to the first server;

After receiving the data packet for replying to the TCP connection establishment request that is forwarded by the second server forwarded by the second proxy server, sending the buffered data packet carrying the user data information to the second server via the second proxy server .
The method according to claim 11, wherein if the data packet sent by the first server that is received by the first route to the second server is a data packet based on the User Datagram Protocol (UDP) protocol, the data is Before the source address in the quintuple of the packet is modified to the address of the first proxy server and the destination address is modified to the address of the second proxy server, the method further includes:

Receiving and buffering a UDP protocol-based data packet sent by the first server to the second server; and,

Generating a session request packet for requesting the second proxy server to create a session and sending it to the second proxy server;

After receiving the session response data packet sent by the second proxy server indicating that the session is successfully created, the source address modification in the quintuple of the UDP protocol-based data packet sent by the first server to the second server is received and cached. The address and destination address of the first proxy server are modified to the address of the second proxy server.
A method for implementing network interconnection, characterized in that the method comprises:

Receiving, by the first server forwarded by the first proxy server, a data packet sent by the first server to the second server; wherein, the source address in the quintuple of the packet header of the data packet is modified by the first proxy server to be the first proxy server The address and the destination address are modified by the first proxy server to be the address of the second proxy server;

Reverting the quintuple in the data packet modified by the first proxy server to the quintuple before modification;

Sending the restored data packet to the second server, so that the second server responds to the restored data packet; wherein the first proxy server and the first server are deployed in the first data center, and the second The server is deployed in the second data center.
The method according to claim 15, wherein the quintuple in the data packet modified by the first proxy server is restored to the quintuple before modification, including:

Searching, according to the quintuple in the data packet modified by the first proxy server, second receiving session information including an address whose source address is the first proxy server and whose destination address is the address of the second proxy server;

Determining, according to an association relationship between the preset session information, second sending session information associated with the second receiving session information, where the source address included in the second sending session information is an address of the second server The destination address is the address of the first server;

The destination address in the quintuple of the modified data packet is modified to the source address in the second sending session information, and the source address is modified to the destination address in the second sending session information.
The method according to claim 15, wherein if the data packet forwarded by the first proxy server is a data packet for requesting establishment of a Transmission Control Protocol TCP connection, the data packet forwarded by the first proxy server Also included in the quintuple of the data packet before being modified by the first proxy server;

The second sending session information and the second receiving session information are generated according to the following manner:

Generating, according to the quintuple of the data packet before the modification by the first proxy server, second sending session information including an address whose active address is the second server and an address whose destination address is the first server;

Generating, according to the modified five-tuple in the header of the data packet forwarded by the first proxy server, second receiving session information including an address whose active address is the first proxy server and whose destination address is the address of the second proxy server;

Establishing an association relationship between the second sending session information and the second receiving session information.
The method according to claim 15, wherein if the data packet forwarded by the first proxy server is a data packet based on the User Datagram Protocol UDP protocol, the data packet to be modified by the first proxy server Before the quintuple in the middle is restored to the quintuple before the modification, the method further includes:

Receiving, by the first proxy server, a session request data packet for requesting to create a session; wherein the session request data packet includes two types of five-tuples, and the first one is sent to the second server for the first time. The quintuple in the server's data packet, the second is the quintuple with the source address being the first proxy server, the destination address being the second proxy server, and the transport layer protocol being the specified transport protocol;

The second sending session information and the second receiving session information are generated according to the following manner:

According to the first type of quintuple, generating an address including the active address as the second server, and the destination address is the first service The second sending session information of the server's address; and,

According to the second quintuple, generating second receiving session information including an address whose active address is the first proxy server and whose destination address is the address of the second proxy server; and

Establishing an association relationship between the second sending session information and the second receiving session information.
An apparatus for implementing network interconnection, characterized in that the apparatus comprises:

a receiving module, configured to receive a data packet sent by the first server deployed in the first data center and sent to the second server deployed in the second data center, where the packet header includes a quintuple;

a processing module, configured to modify a source address in the quintuple of the data packet to an address of the first proxy server, and modify the destination address to an address of the second proxy server;

And a sending module, configured to send the modified data packet to a second proxy server deployed in the second data center.
An apparatus for implementing network interconnection, characterized in that the apparatus comprises:

a receiving module, configured to receive a data packet sent by the first server that is forwarded by the first proxy server to the second server, where the source address in the quintuple of the packet header of the data packet is modified by the first proxy server to The address and destination address of the first proxy server are modified by the first proxy server to the address of the second proxy server;

a processing module, configured to restore the quintuple in the data packet modified by the first proxy server to the quintuple before modification;

a sending module, configured to send the restored data packet to the second server, so that the second server responds to the restored data packet; wherein the first proxy server and the first server are deployed in the first data center The second server is deployed in the second data center.
A computer apparatus, comprising: a processor, the processor for performing the steps of the method of any one of claims 9-14 when executing computer program instructions stored in a memory.
A computer readable storage medium having stored thereon computer program instructions, wherein the computer program instructions, when executed by a processor, implement the steps of the method of any of claims 9-14.
A computer apparatus, comprising: a processor, the processor for performing the steps of the method of any one of claims 15-18 when executing computer program instructions stored in a memory.
A computer readable storage medium having stored thereon computer program instructions, wherein the computer program instructions, when executed by a processor, implement the steps of the method of any of claims 15-18.