WO2018228302A1

WO2018228302A1 - Virtual network link detection method and device

Info

Publication number: WO2018228302A1
Application number: PCT/CN2018/090562
Authority: WO
Inventors: 袁航; 周雍恺
Original assignee: 中国银联股份有限公司
Priority date: 2017-06-13
Filing date: 2018-06-11
Publication date: 2018-12-20
Also published as: CN107566152A; TWI732125B; TW201904234A; CN107566152B

Abstract

Provided is a virtual network link detection method, wherein a virtual network comprises a virtual switch implemented within the same physical machine and one or more virtual machines in communicative connection with the virtual switch. The method comprises: acquiring network information about each of the one or more virtual machines; creating a namespace within the physical machine; establishing a communicative connection between the namespace and the virtual switch; setting network information about the namespace according to the network information about the virtual machine to be detected in the one or more virtual machines; sending, by means of the virtual switch, a detection signal from the namespace to the virtual machine to be detected; and determining, according to the feedback on the detection signal from the virtual machine to be detected, whether a link between the virtual machine to be detected and the virtual switch is normal. In addition, further provided are a corresponding detection device and a physical machine where the virtual network link detection solution is applied.

Description

Method and device for virtual network link detection

Technical field

The present invention relates generally to virtual network technologies and, in particular, to a scheme for virtual network link detection.

Background technique

An important concept in virtualization technology is the virtual machine (VM: Virtual Machine), which is simply a virtual computer that is simulated, or a logical computer. Virtual machines derived through software simulation typically have complete hardware system functionality and a complete computer system running in a fully isolated environment.

Virtual machines can be implemented on physically existing computers. A physical computer may be referred to as a physical machine with respect to a virtual machine. These physical machines provide a hardware environment for virtual machines and are therefore sometimes referred to as "hosts" or "hosts." Multiple virtual machines can be implemented simultaneously on a single physical machine, or virtual machines can be implemented across physical machines. In addition, virtual switches can be provided to connect virtual networks on the same physical machine and/or different physical machines. Such virtual networks can be used to build cloud platforms in practical applications.

Most current data center monitoring systems monitor traffic for business systems. In a traditional data center, a business system is deployed in a physical machine, and only physical links affect current business data. However, in a virtualized environment, the network will penetrate inside the physical machine. When a service data interruption is detected, it cannot be determined whether the problem occurs on a physical link outside the physical machine or on a virtual link inside the physical machine.

Currently, there are monitoring and detection methods for physical switches and related physical links, but the detection of virtual switches and related virtual network links is still lacking. Therefore, it is desirable to design a monitoring and detection scheme for virtual network links.

Summary of the invention

In view of this, the present invention provides a scheme for virtual network link detection that can improve the above problems.

In one aspect, the present invention provides a method for virtual network link detection, the virtual network comprising a virtual switch implemented within the same physical machine and one or more virtual machines communicatively coupled to the virtual switch, The method includes: (a) acquiring network information of each of the one or more virtual machines; (b) creating a namespace within the physical machine; (c) creating the namespace in the namespace Establishing a communication connection between the virtual switches; (d) setting network information of the namespace according to network information of the virtual machine to be detected in the one or more virtual machines; (e) passing the virtual space from the namespace The switch sends a detection signal to the virtual machine to be detected; and (f) determining a chain between the virtual machine to be detected and the virtual switch according to the feedback of the detection signal by the virtual machine to be detected. Is the road normal?

The method as described above, wherein the step (a) comprises obtaining an IP address of each virtual machine, a virtual local area network identifier, and a switch port identifier corresponding to the virtual machine on the virtual switch.

The method as described above, wherein the step (d) comprises setting an IP address of the namespace to be in the same network segment as the virtual machine to be detected and causing the namespace to be recognized by the virtual switch as The virtual machines that are to be detected have the same virtual local area network identifier.

The method as described above, wherein step (c) comprises assigning a switch port to the namespace on the virtual switch.

The method as described above, wherein the step (d) comprises setting a virtual local area network identifier identical to the virtual machine to be detected in a switch port allocated for the namespace.

The method as described above, wherein the detection signal is a PING signal.

The method as described above, further comprising performing steps (d)-(f) for each of the one or more virtual machines.

The method as described above, wherein the virtual network constitutes a cloud platform, and step (a) comprises obtaining network information of each virtual machine from a database of the cloud platform.

In another aspect, the present invention provides an apparatus for virtual network link detection, comprising a memory, a processor, and a computer program stored on the memory, wherein the computer program is executed on the processor The apparatus is caused to perform the method as described above.

Moreover, the present invention also provides a physical machine including a virtual switch and one or more virtual machines communicatively coupled to the virtual switch, wherein the physical machine further includes virtual A device for network link detection.

Moreover, the present invention also provides a computer readable storage medium having stored thereon a computer program executable by a processor to perform the steps of the method of any of the above.

DRAWINGS

The foregoing and other objects, features, and advantages of the invention will be apparent from

1 is an implementation scenario of a method for virtual network link detection in accordance with one embodiment of the present invention.

2 is a flow diagram of a method for virtual network link detection in accordance with one embodiment of the present invention.

detailed description

BRIEF DESCRIPTION OF THE DRAWINGS Exemplary embodiments of the present invention will now be described with reference to the drawings, wherein like reference numerals refer to the like. The examples described below are provided to enable those skilled in the art to understand the invention, and the examples are intended to be illustrative and not limiting. The illustrations of the various elements, components, modules, devices and device bodies in the figures are only illustrative of the existence of such elements, components, modules, devices, and device bodies, and also indicate the relative relationship between them, but are not intended to limit their specificity. Shape; the relationship of the steps in the flowchart is not limited to the order given, and can be adjusted according to the actual application without departing from the scope of protection of the present application.

As described in the background, the present invention is directed to the detection of virtual network links, which may be generally understood by those skilled in the art for transmission of network data within one or more physical machines. The concept of the link. The virtual network to which the present invention is directed generally includes a virtual switch implemented within the same physical machine and one or more virtual machines communicatively coupled to the virtual switch.

A virtual switch can be a multi-layer virtual switch running on a virtualization platform such as Open vSwitch (OVS), providing the same functions as other physical switches, such as network isolation, QoS configuration, and traffic, for the virtual machines on its physical machines. Monitoring, packet analysis. This type of virtual switch can be extended to automate the configuration, management, and maintenance of large-scale networks and support existing standard management interfaces and protocols. Those skilled in the art can understand that the virtual switch involved in the present invention can be implemented in any form as long as it can provide a network connection for a virtual machine on a physical machine with the same function as the physical switch.

An important application form of virtual networks is to provide a cloud platform. Thus, the present invention can be applied to detecting virtual network links on a cloud platform. The implementation of the present invention will be described in detail below in conjunction with the application of the cloud platform. However, those skilled in the art will appreciate that the present invention can be applied to any scenario in which a virtual network can be applied.

1 is an implementation scenario of a method for virtual network link detection in accordance with one embodiment of the present invention. System 100 can be a cloud platform implemented by a virtual machine on which the methods provided by the present invention can be applied. The method provided by the present invention can be applied to the system 100 shown in FIG. In general, system 100 can include a physical switching network 10, which can be a distributed core network of a "spine-leaf" architecture, which can include a spine node 102 and a leaf node 101.

Typically, the spine node 102 can be used to connect to a physical switch, while the leaf node 101 can be used to connect servers and network devices. The solution provided by the present invention will be further described below with leaf node 101 as the physical machine in which the virtual machine is implemented. However, those skilled in the art will appreciate that the "spine-leaf" architecture shown in Figure 1 is not limiting. The invention can be applied to any other network architecture including physical machines.

The host node 20 is illustrated with the leaf node 101 as a general configuration of the physical machine. As used herein, "host" and "physical machine" may be used interchangeably, each of which refers to a body in which a virtual machine can be implemented. As shown in FIG. 1, virtual machine 203 can be implemented within host 20 and data exchange between virtual machines 203 can be provided by virtual switch 202.

Detection means 201 may be further provided in host 20 to perform the various methods provided by the present invention to detect virtual network link status between virtual machines 203. In some examples, detection device 201 can include a memory, a processor, and a computer program stored on the memory. The detection means can be caused to perform the various methods provided by the present invention when these computer programs are executed on a processor.

In the embodiment shown in Figure 1, the detection device 201 is integrated in a physical machine. Accordingly, the detecting means 201 can be implemented by sharing a processor and a memory in the physical machine. In particular, in some examples, detection device 201 can be implemented in a mechanism such as an agent. In other examples, detection device 201 may also be implemented separately, such as a device that is configured to be independent of a physical machine, or implemented in a processing system that is independent of the physical machine.

The operation of the detecting device 201 will be described below with reference to FIG. 2 is a flow diagram of a method for virtual network link detection in accordance with one embodiment of the present invention.

In step 11, the network information of each virtual machine 203 is obtained. For example, the network information of the virtual machine 203 may include an IP address, a virtual local area network identifier vlanID, and a corresponding switch port identifier on the virtual machine and the virtual switch.

In the context of system 100 being a cloud platform, virtual machine information within each physical machine can be obtained, for example, from cloud platform database 30. In practice, the cloud platform database 30 may include information related to all virtual machines on the physical switching network 10, such as which virtual machines are included in each physical machine, network information of each virtual machine (such as an IP address, a vlan ID, and The network port letter corresponding to it, the port mapping relationship between the virtual machine and the virtual switch, and the like).

Similar to a general physical switch, in a virtual network build inside a physical machine, each virtual machine is connected to the bridge through a port on the virtual switch. In order to implement the virtual network detection method provided by the present invention, it is necessary to obtain a port mapping relationship between the virtual machine and the virtual switch. In some examples, this information can be stored in a database, such as cloud platform database 30, as well as network information for other virtual machines.

In other examples, obtaining the corresponding switch port identification on the virtual machine and the virtual switch may include two aspects. In one aspect, the network port ID of the virtual machine can be obtained from the cloud platform database, and on the other hand, for example, by calling the control interface of the virtual switch to get all of its ports connected to the virtual machine. The detecting device 201 can further associate the network port data of the virtual machine with the port data of the virtual switch to obtain a mapping relationship between the two for later detection. For example, in order to manage effectively, some virtual switches follow certain rules when port naming. For example, the Openstack cloud platform names the network ports of the virtual switch by using a fixed prefix plus the ID interception information of the virtual machine network port. For example, the port IDf467189c-341f-42fc-8056-065255e14530 of the virtual machine is named qvo-f467189c-34. After obtaining the information of the two aspects, the detecting device 201 can construct a mapping relationship table for subsequent query use.

In some examples, the detecting device 201 can acquire network information of the virtual machine by directly accessing the cloud platform database 30, especially if the detection for the virtual network is less frequent.

In other examples, in addition to implementing the detection device 201 internal to the physical machine, an additional virtual network detection platform 40 implemented external to the virtual machine may be provided. The network information of the virtual machine may be collected centrally from the cloud platform database by the virtual network detection platform 40 and stored in its local database. Further, the detection device 201 retrieves the required information from the modified virtual network detection platform 40. Such an implementation would be particularly advantageous for high frequency virtual machine detection (e.g., in the order of seconds or even milliseconds) as this avoids the detection device 201 from accessing the cloud platform database at excessive frequencies.

In order to prevent the virtual machine information from changing, the data collection module on the virtual network detection platform 40 can be configured to update the data in real time, for example, periodically to the cloud platform database for information synchronization. Since the frequency of occurrence of virtual machine network information changes is not too high, the period of information synchronization can be set longer. Since the amount of data of the virtual machine network information is not very large, and the above mentioned period of information synchronization is also long, it does not impose an excessive burden on the network.

In step 12, the detection device 201 will create a namespace within the physical machine in which it resides. The namespace may be the concept of a virtual network body used to isolate network related resources on a virtual machine as understood by those skilled in the art. Each network namespace can have its own network device, IP address, IP routing table, /proc/net directory, port number, and so on. Those skilled in the art will be able to implement such a namespace in any technology known or to be developed in the future. An example of a namespace is the Linux Network Names.

In step 13, the detecting means 201 can be configured to establish a communication connection between the established namespace and the virtual switch. In some examples, this may include assigning a switch port to a namespace on a virtual switch in a physical machine such that the namespace can access the bridge as other virtual machines. Specifically, a network port can be created within the namespace and connected to the virtual switch.

In step 14, the detecting device 201 can further set the network information of the namespace according to the network information of the specific virtual machine 203 to be detected. In some examples, the IP address of the namespace can be set to be in the same network segment as the virtual machine to be detected and the namespace is identified by the virtual switch as having the same virtual local area network identity as the virtual machine to be detected. For example, the same virtual local area network identifier vlanID as the virtual machine to be detected can be set in the switch port allocated for the namespace.

In step 15, the detecting means 201 can send a detection signal from the established namespace to the virtual machine to be detected through the virtual switch. For example, the transmitted detection signal can be a PING signal. PING (Packet Internet Groper) is a program that is often used to test the amount of network connections. It uses the uniqueness of the IP address of the machine on the network to send a packet to the destination IP address, and then asks the other party to return the same size. The data packet determines if the two network machines are connected and the delay is. Therefore, you can use the PING command to check whether the network is smooth or the network connection speed. However, those skilled in the art will appreciate that the present invention is not limited to the use of PING signals, and any other mechanism that can be used to determine if two network machines are connected can be employed in the context of the present invention.

In step 16, the detecting device 201 can determine whether the link between the virtual machine and the virtual switch is normal according to the feedback of the virtual machine to the detection signal. For example, if the PING is used to communicate with the virtual machine, if the connection is available, the link of the virtual switch is normal, and if the PING is unreachable, the virtual link is faulty.

In practice, the detecting device 201 can record information of the link, such as a bridge, a port, a virtual machine, and the like, and send the detection result to the detection result processing module in the virtual network detecting platform 40. Since there are usually more than one virtual machine on the physical machine, each virtual machine can be detected by a round robin policy to ensure that the detection range covers each link inside the physical machine. For the detection of each virtual machine, the namespace is reset, such as resetting the IP address and vlanID. The detecting device 201 can feed back the detection result back to the virtual network detecting platform 40 after the loop detection is completed.

In some examples, detection device 201 can also be configured to detect and feed back the detection results for the virtual network in accordance with steps 11-16 in response to the detection instructions of virtual network detection platform 40.

In some cases, after receiving the detection result sent from the detecting device 201, the virtual network detecting platform 40 may further normalize the detection result and then send the data to the network monitoring system 50, as shown in FIG. Thereby, the detection of the virtual network can be effectively integrated into the entire network monitoring system, thereby providing more complete and conclusive network detection results, which will include both physical networks and virtual networks.

The invention provides a fault detection scheme for a virtual network link inside a physical machine, which solves the problem that the internal software switch and the virtual network of the physical machine cannot be monitored. The method and device provided by the invention can effectively extend the scope of the network monitoring, and extend the monitoring strength from the outside of the physical machine to the inside of the physical machine, so that the monitoring system is more suitable for an environment such as a cloud network. The method and the device of the invention can also greatly enhance the accuracy of the network problem location, thereby improving the automation capability and operation and maintenance efficiency of the operation and maintenance.

It should be noted that the above specific embodiments are merely illustrative of the technical solutions of the present invention and are not limited thereto. While the invention has been described in detail herein with reference to the preferred embodiments of the embodiments of the invention All are covered by the scope of the claimed invention.

Claims

A method for virtual network link detection, the virtual network comprising a virtual switch implemented in the same physical machine and one or more virtual machines communicatively coupled to the virtual switch, the method comprising:

(a) acquiring network information of each of the one or more virtual machines;

(b) creating a namespace within the physical machine;

(c) establishing a communication connection between the namespace and the virtual switch;

(d) setting network information of the namespace according to network information of the virtual machine to be detected in the one or more virtual machines;

(e) transmitting a detection signal from the namespace to the virtual machine to be detected through the virtual switch;

(f) determining, according to the feedback of the detection signal by the virtual machine to be detected, whether the link between the virtual machine to be detected and the virtual switch is normal.
The method of claim 1 wherein step (a) comprises obtaining an IP address of each virtual machine, a virtual local area network identification, and a switch port identification on the virtual switch corresponding to the virtual machine.
The method of claim 2, wherein step (d) comprises setting an IP address of the namespace to be in the same network segment as the virtual machine to be detected and causing the namespace to be recognized by the virtual switch The virtual local area network identifier is the same as the virtual machine to be detected.
The method of claim 3 wherein step (c) comprises assigning a switch port to said namespace on said virtual switch.
The method of claim 4 wherein step (d) comprises setting a virtual local area network identity identical to said virtual machine to be detected in a switch port assigned to said namespace.
The method of claim 1 wherein said detection signal is a PING signal.
The method of claim 1 further comprising performing steps (d)-(f) for each of said one or more virtual machines.
The method of claim 1, wherein the virtual network constitutes a cloud platform, and step (a) comprises obtaining network information for each virtual machine from a database of the cloud platform.
An apparatus for virtual network link detection, comprising a memory, a processor, and a computer program stored on the memory, wherein the apparatus is caused to perform as claimed in the execution of the computer program on the processor The method of any of 1-8.
A physical machine comprising a virtual switch and one or more virtual machines communicatively coupled to the virtual switch, wherein the physical machine further comprises the virtual network link detection of claim 9. s installation.
A computer readable storage medium having stored thereon a computer program, the program being executable by a processor to implement the steps of the method of any of claims 1-8.