WO2019047740A1 - 区域互联控制器、区域互联控制方法以及计算机存储介质 - Google Patents

区域互联控制器、区域互联控制方法以及计算机存储介质 Download PDF

Info

Publication number
WO2019047740A1
WO2019047740A1 PCT/CN2018/102534 CN2018102534W WO2019047740A1 WO 2019047740 A1 WO2019047740 A1 WO 2019047740A1 CN 2018102534 W CN2018102534 W CN 2018102534W WO 2019047740 A1 WO2019047740 A1 WO 2019047740A1
Authority
WO
WIPO (PCT)
Prior art keywords
virtual
network
tenant
area
routing
Prior art date
Application number
PCT/CN2018/102534
Other languages
English (en)
French (fr)
Inventor
祖立军
袁航
周雍恺
何朔
魏志君
Original Assignee
中国银联股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 中国银联股份有限公司 filed Critical 中国银联股份有限公司
Priority to SG11202001459TA priority Critical patent/SG11202001459TA/en
Priority to US16/641,006 priority patent/US11343168B2/en
Priority to EP18853142.0A priority patent/EP3681110B1/en
Priority to CA3072731A priority patent/CA3072731C/en
Publication of WO2019047740A1 publication Critical patent/WO2019047740A1/zh

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00Routing or path finding of packets in data switching networks
    • H04L45/02Topology update or discovery
    • H04L45/04Interdomain routing, e.g. hierarchical routing
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00Data switching networks
    • H04L12/28Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/46Interconnection of networks
    • H04L12/4641Virtual LANs, VLANs, e.g. virtual private networks [VPN]
    • H04L12/4645Details on frame tagging
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00Routing or path finding of packets in data switching networks
    • H04L45/38Flow based routing
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00Routing or path finding of packets in data switching networks
    • H04L45/54Organization of routing tables
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00Routing or path finding of packets in data switching networks
    • H04L45/58Association of routers
    • H04L45/586Association of routers of virtual routers
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00Routing or path finding of packets in data switching networks
    • H04L45/64Routing or path finding of packets in data switching networks using an overlay routing layer
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L47/00Traffic control in data switching networks
    • H04L47/10Flow control; Congestion control
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L47/00Traffic control in data switching networks
    • H04L47/10Flow control; Congestion control
    • H04L47/24Traffic characterised by specific attributes, e.g. priority or QoS
    • H04L47/2483Traffic characterised by specific attributes, e.g. priority or QoS involving identification of individual flows
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L47/00Traffic control in data switching networks
    • H04L47/10Flow control; Congestion control
    • H04L47/31Flow control; Congestion control by tagging of packets, e.g. using discard eligibility [DE] bits

Definitions

  • the present invention relates to automated management of a data center core network, and more particularly to a regional interconnect controller, a regional interconnect control method between a plurality of independent network partitions and a core switching network, and a computer storage medium.
  • the financial data center switching network architecture generally consists of multiple independent network partitions (such as fortress areas, service areas, etc.), and different network partitions carry different security levels and types of services.
  • network partitions can be roughly divided into three categories: service area, quarantine area, and specific function area.
  • the service area is used to carry various system application servers and database servers, and the application system is divided into different service areas according to specific principles.
  • the quarantine area also known as the DMZ area, is used to carry various types of front-end machines and provide services to the Internet or third-party organizations.
  • a specific functional area such as a management area, carries a monitoring system, a process system, an operation terminal, and the like, and is used for data center maintenance, and the user data center of the WAN area is connected to the backbone network.
  • a network partition is often composed of SDN devices of the same brand.
  • the Vxlan is used to separate the physical link (Underlay) and the logical link (Overlay) network to decouple the network physical architecture and the logical architecture.
  • the underlying architecture based on hardware SDN technology (such as Cisco's ACI, Huawei's AC, etc.) adopts the physical structure of Spine+Leaf, in which the calculation of Leaf access provides the computing server resources of the virtual machine, and the network function Leaf accesses the load balancing and firewall.
  • the Border Leaf is responsible for interconnecting the core switching devices of the data center.
  • the Spine device is responsible for traffic communication between the Leafs in the cloud network partition.
  • Each cloud network partition is managed and controlled by its own controller.
  • the data center core switching network is networked by independent switching devices.
  • Different cloud network partitions may use different SDN solutions, protocols, and technologies.
  • the Vxlan tags inside the cloud network partition are stripped after the data packet exit area. Therefore, the interconnection between cloud network partitions cannot be achieved at the Overlay level.
  • the present invention provides a Region Interconnect RI controller scheme for a heterogeneous SDN network based on VRF (Virtual Routing Forwarding Table) technology.
  • VRF Virtual Routing Forwarding Table
  • a regional interconnect controller is provided, the regional interconnect controller being disposed between a plurality of independent network partitions and a core switching network
  • the area interconnect controller in the context of the present invention Also known as the RI controller
  • the RI controller includes a zone interconnect routing module (also referred to as RI router in the context of the present invention) set at the time of tenant creation, the zone interconnect routing module configured to: allocate for the tenant a first identifier that identifies the traffic of the tenant; in the core switching network, creating a virtual routing forwarding instance for the tenant, and binding the first identifier to the virtual routing forwarding instance; And the dynamic routing protocol is started in the core switching network, and the dynamic routing protocol instance is bound to the virtual routing forwarding instance, where the tenant corresponding to the tenant is distributed in the multiple independent network partitions.
  • Each virtual router is associated with the regional interconnect routing module.
  • the label carried by the virtual network will be stripped, but at the same time, the first identifier (that is, VLAN TAG) assigned by the RI router to the tenant will be sent to the core switching network.
  • the virtual router is a logical switch that performs data exchange between the internal network of the network partition and the external network.
  • the area interconnection routing module is configured to start a dynamic routing protocol on all routers or switches in the core switching network by using a netconf protocol, so that the tenant is in the core switching network.
  • a separate dynamic routing protocol domain can be run, and through the dynamic routing protocol, the route advertised by the network partition will be synchronized to other network partitions where the tenant's virtual resource is located.
  • the dynamic routing protocol is an OSPF routing protocol.
  • the OSPF protocol is enabled on all the routers or switches in the core switching network, and the OSPF instance is bound to the virtual router forwarding instance of the tenant. This is equivalent to each tenant running an independent OSPF domain in the core switching network. Do not interfere.
  • the area interconnection controller establishes an association relationship between the virtual routers and the area interconnection routing module by writing in a database, that is, the same relationship Virtual routers distributed within the tenant's network partitions are mounted on the RI router.
  • the area interconnect routing module is further configured to: enable a timer to start dynamic detection of the associated virtual router resource change status of the virtual router, and invoke the virtual router in the network partition An application programming interface of the SDN controller to obtain an association relationship between the virtual router and the virtual network.
  • the router/switch that accesses the core switching network in the area automatically sends static routes, and the next hop address points to the inside of the area.
  • the static route will be redistributed to the dynamic routing (such as OSPF routing) and synchronized to other dynamic routing protocol peer instances in the virtual routing forwarding instance corresponding to the tenant.
  • the newly created virtual resource of the tenant is bound to a network partition where the virtual resource is located, and is associated with the regional interconnection routing module. On the virtual router.
  • a method for controlling area interconnection between a plurality of independent network partitions and a core switching network comprising: setting a regional interconnect routing module when the tenant is created (RI router
  • the area interconnect routing module is configured to: allocate, to the tenant, a first identifier for identifying traffic of the tenant, in the core switching network, create a virtual routing forwarding instance for the tenant, and Binding the first identifier to the virtual routing forwarding instance, starting a dynamic routing protocol in the core switching network, and binding the dynamic routing protocol instance to the virtual routing forwarding instance;
  • Each virtual router corresponding to the tenant and distributed in the plurality of independent network partitions is associated with the regional interconnect routing module.
  • a computer storage medium comprising one or more instructions that, when executed, cause the computer to perform the following steps: at the time of tenant creation a regional interconnect routing module (RI router), the regional interconnect routing module configured to: allocate, to the tenant, a first identifier for identifying traffic of the tenant, in the core switching network, create a tenant for the tenant Virtual routing forwarding instance, and binding the first identifier to the virtual routing forwarding instance, starting a dynamic routing protocol in the core switching network, and forwarding the dynamic routing protocol instance and the virtual routing forwarding instance Binding is performed; and each virtual router corresponding to the tenant and distributed in a plurality of independent network partitions is associated with the regional interconnect routing module.
  • RI router regional interconnect routing module
  • the Region Interconnect RI control scheme proposed by the present invention solves the problem that the independent SDN network cannot be identified due to different technical systems, the independent network cannot communicate, and the logical layer cannot be uniformly managed.
  • the area interconnect controller solution of the present invention implements abstraction, isolation, scheduling, and unified management of the underlying physical network resources.
  • the area interconnect controller solution of the present invention exposes a standardized API to the upper layer service, shielding the underlying differences, thereby enabling better scheduling of the upper layer cloud platform.
  • Figure 1 is a schematic diagram of a financial industry network partition
  • FIG. 2 schematically shows a networking manner of an existing solution and a plurality of problems thereof
  • Figure 3 is a regional interconnect controller showing an embodiment of the present invention
  • FIG. 4 is a diagram showing a method for controlling a region interconnection according to an embodiment of the present invention.
  • Figure 5 is a block diagram showing an area interconnect controller of an embodiment of the present invention.
  • FIG. 6 is a block diagram showing a regional interconnect routing module at a logical level, showing an embodiment of the present invention.
  • regional interconnect controller means the same meaning and refer to a controller disposed between a heterogeneous SDN network partition and a core switching network.
  • FIG. 3 is a regional interconnect controller 1000 showing an embodiment of the present invention.
  • the regional interconnect controller 1000 is disposed between a plurality of independent network partitions 2100, 2200 and the core switching network 3000.
  • the area interconnect controller 1000 includes a plurality of area interconnect routing modules 110, 120, wherein each area interconnect routing module is set at the time of the corresponding tenant creation.
  • the regional interconnect routing module 110 is configured to assign a first identifier (not shown) for identifying the tenant's traffic to its corresponding tenant; in the core switching network 3000, create a tenant for the tenant The first virtual route forwards the instance, and binds the first identifier to the first virtual routing forwarding instance; and starts a dynamic routing protocol (such as OSPF protocol) in the core switching network 3000, and the dynamic routing protocol instance is first The virtual route forwarding instance is bound.
  • a first identifier (not shown) for identifying the tenant's traffic to its corresponding tenant
  • the first virtual route forwards the instance, and binds the first identifier to the first virtual routing forwarding instance; and starts a dynamic routing protocol (such as OSPF protocol) in the core switching network 3000, and the dynamic routing protocol instance is first
  • the virtual route forwarding instance is bound.
  • Each virtual router corresponding to the tenant and distributed among the plurality of independent network partitions 2100, 2200 is associated with the regional interconnect routing module 110.
  • the regional interconnect routing module 120 is configured to assign a second identifier (not shown) for identifying the tenant's traffic to its corresponding tenant; in the core switching network 3000, create a tenant for the tenant The second virtual routing forwarding instance, and binding the second identifier to the second virtual routing forwarding instance; and initiating a dynamic routing protocol (such as OSPF protocol) in the core switching network 3000, and the dynamic routing protocol instance and the The second virtual route forwarding instance is bound.
  • a dynamic routing protocol such as OSPF protocol
  • FIG. 4 is a diagram showing a region interconnection control method 4000 according to an embodiment of the present invention.
  • an area interconnect routing module is configured at the time of tenant creation, and the area interconnect routing module is configured to: allocate a first identifier for identifying the tenant's traffic for the tenant; In the network, create a virtual routing forwarding instance for the tenant, and bind the first identifier to the virtual routing forwarding instance; and start a dynamic routing protocol in the core switching network, and forward the dynamic routing protocol instance and the virtual routing forwarding instance. Bind.
  • each virtual router corresponding to the tenant and distributed in a plurality of independent network partitions is associated with the regional interconnect routing module.
  • FIG. 5 shows a block diagram of an area interconnect controller of one embodiment of the present invention.
  • the dynamic routing protocol network is set up in the core switching network by the RI controller, and the virtual network resources in different SDN network areas are synchronized to other SDN network areas, so that the service traffic routing in the network partition is reachable.
  • the RI controller integrates the virtual network resources of different network partitions, and sends the configuration information to the core switching network through the Netconf standard protocol to implement interconnection between different network partitions in the same data center.
  • the RI controller can be divided into a control logic unit and a configuration delivery logic unit.
  • the control logic unit monitors the change of the virtual resources of the tenant in different SDN network areas, and configures the sending logic unit to update the configuration information and the routing table.
  • the RI controller abstracts the routing/switching devices of different vendors, and provides different drivers for devices of different vendors to manage the devices in a unified manner.
  • the resources of different tenants are independent of each other, and the IP addresses overlap.
  • the RI controller can identify the tenant's virtual resources and re-establish tenant information for traffic outside the network partition so that traffic is correctly forwarded on the core switching network.
  • the RI controller uses the VRF technology to isolate the tenant routes.
  • the RI router virtualizes the corresponding RI router resources and maps the VRF to the RI router.
  • the RI Router assigns a TAG to each tenant to indicate the traffic of different tenants. The information is sent to the corresponding VRF to complete the forwarding.
  • the RI controller performs the following specific operational flow:
  • the RI Router is configured at the same time as the tenant is created.
  • the RI Router assigns a VLAN TAG to the tenant to identify the tenant traffic, and the created RI Router is written into the database.
  • the VLAN TAG carried by the virtual network is stripped, and the VLAN TAG assigned by the RI router to the tenant is sent to the core switching network.
  • the RI router creates a VRF resource for the tenant on all the routers/switches in the core switching network through the netconf protocol, and binds the RI router to the VLAN TAG and VRF used by the tenant to bind the tenant to the core switching network. Create a separate route forwarding domain.
  • the RI Router initiates a dynamic routing protocol on all routers/switches in the core switching network through the netconf protocol, and binds the dynamic routing protocol instance to the tenant's VRF, which is equivalent to each tenant running independent in the core switching network. Dynamic routing protocol domains do not interfere with each other. Through the dynamic routing protocol, the routes advertised by the network partition will be synchronized to other network partitions where the tenant virtual resources are located.
  • the virtual router is a logical switch for data exchange between the internal network of the cloud network partition and the external network of the partition. As shown in Figure 6, the solution is to mount the virtual router distributed in each cloud network partition on the RI Router through the same tenant. A mapping relationship between the virtual router and the RI Router is established in the database.
  • the tenant can dynamically create virtual network resources and virtual router resources.
  • the virtual network For services that need to communicate across the cloud network, the virtual network only needs to be bound to the RI router.
  • the virtual router is fine.
  • RI Router dynamically detects virtual network resource changes and synchronizes
  • the RI Router After the RI router is associated with the virtual router, the RI Router will enable the timer to dynamically detect the virtual network resource change of the associated virtual router, and invoke the API of the SDN controller in the cloud network partition where the virtual router is located to obtain the virtual router and the virtual network. Relationship. If a virtual network resource is created in the tenant and bound to the virtual router, the router/switch that accesses the core switching network in the area automatically sends static routes. The next hop address points to the inside of the area. The static route will be redistributed into the dynamic route and synchronized to other dynamic routing protocols (PEER) in the VRF corresponding to the tenant.
  • PEER dynamic routing protocols
  • the solution includes the creation of a virtual RI router, the binding of the tenant virtual route and the RI router, the automatic delivery of the RI Router route, and the automatic configuration of the core switching network.
  • the term "dynamic routing protocol" may include protocols such as OSPF, BGP, etc., unless otherwise specifically indicated.
  • the control solution solves the problem that the independent SDN network cannot be identified due to different technical systems, the independent network cannot communicate, and the logical layer cannot be uniformly managed.
  • the area interconnect controller solution of the present invention implements abstraction, isolation, scheduling, and unified management of the underlying physical network resources.
  • the area interconnect controller solution of the present invention exposes a standardized API to the upper layer service, shielding the underlying differences, thereby enabling better scheduling of the upper layer cloud platform.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

本发明提供一种区域互联控制器,该区域互联控制器包括在租户创建时设定的一区域互联路由模块,该区域互联路由模块配置为:为所述租户分配用于标识所述租户的流量的第一标识符;在所述核心交换网络中,创建针对所述租户的虚拟路由转发实例,并将所述第一标识符与所述虚拟路由转发实例进行绑定;以及在所述核心交换网络中启动动态路由协议,并将动态路由协议实例与所述虚拟路由转发实例进行绑定,其中,与所述租户对应的、分布在所述多个独立的网络分区内的各个虚拟路由器与所述区域互联路由模块关联。本发明还提供了一种区域互联控制方法以及计算机存储介质。本发明的技术方案能实现异构SDN网络区域内网直通。

Description

区域互联控制器、区域互联控制方法以及计算机存储介质 【技术领域】
本发明涉及数据中心核心网络的自动化管理,特别涉及一种区域互联控制器、在多个独立的网络分区与核心交换网络之间的区域互联控制方法以及计算机存储介质。
【背景技术】
由于金融行业监管的特殊性,金融数据中心交换网架构一般采用多个独立的网络分区(如堡垒区、业务区等)组成,不同网络分区承载不同安全等级和类型的业务。如图1所示,网络分区大致可划分为三大类:业务区、隔离区、特定功能区。业务区用于承载各类系统应用服务器及数据库服务器,应用系统根据特定原则划分至不同业务区。隔离区也称DMZ区,用于承载各类前置机,面向互联网或第三方机构提供服务。特定功能区如管理区承载监控系统、流程系统、操作终端等,用于数据中心维护,广域网区用户数据中心至骨干网的连通。
SDN技术也越来越多的被采用到金融云中来。一个网络分区往往由同一品牌的SDN设备组成,内部采用Vxlan分离物理链路(Underlay)、逻辑链路(Overlay)网络,实现网络物理架构与逻辑架构的解耦。一般基于硬件SDN技术(如思科的ACI、华为的AC等)的底层架构都采用Spine+Leaf的物理结构,其中计算Leaf接入提供虚拟机的计算服务器资源,网络功能Leaf接入负载均衡、防火墙等网元服务设备资源,Border Leaf负责与数据中心核心交换设备互联。云网分区内由Spine设备负责各Leaf之间的流量互通,每个云网分区由其自有的控制器进行管理和控制。
在实践中,数据中心核心交换网络则是由独立交换设备组网。不同云网分区可能使用不同的SDN解决方案、协议与技术,云网分区内部的Vxlan标签在数据包出区域后被剥离。因此,云网分区之间在Overlay层面无法实现互通。
在如图2所示的现有方案中,没有技术实现对数据中心核心网络的自动化管理,也没有方案去协调控制不同厂商的SDN控制器。
以上公开于本发明背景部分的信息仅仅旨在增加对本发明的总体背景的理解,而不应当被视为承认或以任何形式暗示该信息构成已为本领域一般技术人员所公知的现有技术。
【发明内容】
为了解决现有方案存在的多个问题中的至少一个,本发明提出一种基于VRF(虚拟路由转发表)技术的跨异构SDN网络的区域互联(Region Interconnect)RI控制器方案。该方案解决了异构SDN网络区域的互联互通,通过VRF技术隔离租户的路由,解决了同一个数据中心内不同租户在跨异构SDN网络区域通信地址重叠问题,实现异构SDN网络区域内网直通。
根据本发明的一个方面,提供了一种区域互联控制器,所述区域互联控制器设置在多个独立的网络分区与核心交换网络之间,所述区域互联控制器(在本发明的上下文中也称为RI控制器)包括在租户创建时设定的一区域互联路由模块(在本发明的上下文中也称为RI router),所述区域互联路由模块配置为:为所述租户分配用于标识所述租户的流量的第一标识符;在所述核心交换网络中,创建针对所述租户的虚拟路由转发实例,并将所述第一标识符与所述虚拟路由转发实例进行绑定;以及在所述核心交换网络中启动动态路由协议,并将动态路由协议实例与所述虚拟路由转发实例进行绑定,其中,与所述租户对应的、分布在所述多个独立的网络分区内的各个虚拟路由器与所述区域互联路由模块关联。
对于租户需要流出网络分区的流量,虚拟网络所携带的标签会被剥离,但同时会打上RI router为该租户分配的第一标识符(即VLAN TAG)送到核心交换网络。通过该方案,解决了独立SDN网络由于技术体系不同造成的流量无法识别、独立网络无法互通的问题。
优选地,在上述区域互联控制器中,所述虚拟路由器是逻辑交换 器,其在所述网络分区的内部网络和外部网络进行数据交换。
优选地,在上述区域互联控制器中,所述区域互联路由模块配置为通过netconf协议在所述核心交换网络中的所有路由器或交换机上启动动态路由协议,使得所述租户在所述核心交换网络中能够运行独立的动态路由协议域,并且通过所述动态路由协议,所述网络分区所发布的路由将会同步到所述租户的虚拟资源所在的其他网络分区上。
在一个实施例中,所述动态路由协议为OSPF路由协议。通过在核心交换网络中的所有路由器或交换机上启动OSPF协议,并将OSPF实例和该租户的虚拟路由转发实例进行绑定,这相当于每个租户在核心交换网络中运行独立的OSPF域,互不干扰。
优选地,在上述区域互联控制器中,所述区域互联控制器通过在数据库中写入所述各个虚拟路由器和所述区域互联路由模块的绑定关系而建立它们之间的关联关系,即将同一租户内分布在各个网络分区内的虚拟路由器挂载到RI router上。
优选地,在上述区域互联控制器中,所述区域互联路由模块还配置为:启用定时器开始动态探测关联的所述虚拟路由器的虚拟网络资源变更情况,以及调用所述虚拟路由器所在网络分区内的SDN控制器的应用程序编程接口以便获取所述虚拟路由器和虚拟网络的关联关系。
如果租户内创建的虚拟网络资源被绑定到了该虚拟路由器上,就会自动在该区域接入到核心交换网络的路由器/交换机上下发静态路由,下一跳地址指向该区域内部。这条静态路由将会重分布到动态路由(例如OSPF路由)中,在该租户对应的虚拟路由转发实例内,同步到其他动态路由协议对等实例中。
优选地,在上述区域互联控制器中,在所述多个独立的网络分区中,所述租户新创建的虚拟资源被绑定到该虚拟资源所在网络分区内、与所述区域互联路由模块关联的虚拟路由器上。
根据本发明的另一个方面,提供了一种在多个独立的网络分区与核心交换网络之间的区域互联控制方法,所述方法包括:在租户创建 时设定一区域互联路由模块(RI router),所述区域互联路由模块配置为:为所述租户分配用于标识所述租户的流量的第一标识符,在所述核心交换网络中,创建针对所述租户的虚拟路由转发实例,并将所述第一标识符与所述虚拟路由转发实例进行绑定,在所述核心交换网络中启动动态路由协议,并将动态路由协议实例与所述虚拟路由转发实例进行绑定;以及将与所述租户对应的、分布在所述多个独立的网络分区内的各个虚拟路由器与所述区域互联路由模块进行关联。
根据本发明的又一个方面,提供了一种计算机存储介质,所述存储介质包括一个或多个指令,所述一个或多个指令在执行时使所述计算机执行下列步骤:在租户创建时设定一区域互联路由模块(RI router),所述区域互联路由模块配置为:为所述租户分配用于标识所述租户的流量的第一标识符,在核心交换网络中,创建针对所述租户的虚拟路由转发实例,并将所述第一标识符与所述虚拟路由转发实例进行绑定,在所述核心交换网络中启动动态路由协议,并将动态路由协议实例与所述虚拟路由转发实例进行绑定;以及将与所述租户对应的、分布在多个独立的网络分区内的各个虚拟路由器与所述区域互联路由模块进行关联。
本发明所提出的区域互联(Region Interconnect)RI控制方案解决了独立SDN网络由于技术体系不同造成的流量无法识别、独立网络无法互通、逻辑层面无法统一管理的问题。另外,本发明的区域互联控制器方案实现了对下层物理网络资源的抽象、隔离、调度和统一管理。再者,本发明的区域互联控制器方案向上层服务暴露标准化的API,屏蔽了底层差异,从而能够更好和上层云平台的调度。
通过纳入本文的附图以及随后与附图一起用于说明本发明的某些原理的具体实施方式,本发明的方法和装置所具有的其它特征和优点将更为具体地变得清楚或得以阐明。
【附图说明】
图1是金融行业网络分区的示意图;
图2示意性地示出了现有方案的组网方式以及其存在的多个问题;
图3是表示本发明的一个实施例的区域互联控制器;
图4是表示本发明的一个实施例的区域互联控制方法;以及
图5是表示本发明的一个实施例的区域互联控制器架构图;以及
图6是表示本发明的一个实施例的、在逻辑层面的区域互联路由模块架构图。
【具体实施例】
以下说明描述了本发明的特定实施方式以教导本领域技术人员如何制造和使用本发明的最佳模式。为了教导发明原理,已简化或省略了一些常规方面。本领域技术人员应该理解源自这些实施方式的变型将落在本发明的范围内。本领域技术人员应该理解下述特征能够以各种方式接合以形成本发明的多个变型。由此,本发明并不局限于下述特定实施方式,而仅由权利要求和它们的等同物限定。
在本发明的上下文中,术语“区域互联控制器”、“RI控制器”以及“RI controller”表示相同的含义,指代设置在异构SDN网络分区与核心交换网络之间的控制器。另外,在本发明的上下文中,除非另外指明,“RI router”和“区域互联路由模块”也具有相同的含义。
图3是表示本发明的一个实施例的区域互联控制器1000。区域互联控制器1000设置在多个独立的网络分区2100,2200与核心交换网络3000之间。区域互联控制器1000包括多个区域互联路由模块110,120,其中各个区域互联路由模块在对应的租户创建时设定。
在一个实施例中,区域互联路由模块110配置为:为其对应的租户分配用于标识该租户的流量的第一标识符(未示出);在核心交换网络3000中,创建针对该租户的第一虚拟路由转发实例,并将第一标识符与第一虚拟路由转发实例进行绑定;以及在核心交换网络3000中启动动态路由协议(例如OSPF协议),并将动态路由协议实例与第一虚拟路由转发实例进行绑定。与该租户对应的、分布在多个独立的网络分区2100,2200内的各个虚拟路由器与区域互联路由模块110 关联。
在另一个实施例中,区域互联路由模块120配置为:为其对应的租户分配用于标识该租户的流量的第二标识符(未示出);在核心交换网络3000中,创建针对该租户的第二虚拟路由转发实例,并将第二标识符与第二虚拟路由转发实例进行绑定;以及在核心交换网络3000中启动动态路由协议(例如OSPF协议),并将动态路由协议实例与第二虚拟路由转发实例进行绑定。与该租户对应的、分布在多个独立的网络分区2100,2200内的各个虚拟路由器与区域互联路由模块120关联。
图4是表示本发明的一个实施例的区域互联控制方法4000。
如图4所示,在步骤410,在租户创建时设定一区域互联路由模块,该区域互联路由模块配置为:为该租户分配用于标识该租户的流量的第一标识符;在核心交换网络中,创建针对该租户的虚拟路由转发实例,并将第一标识符与虚拟路由转发实例进行绑定;以及在核心交换网络中启动动态路由协议,并将动态路由协议实例与虚拟路由转发实例进行绑定。
在步骤420中,将与该租户对应的、分布在多个独立的网络分区内的各个虚拟路由器与区域互联路由模块进行关联。
通过图3和图4所示的区域互联控制方案,现有技术中各个独立网络之间无法互通的问题得以解决。
进一步参考图5,图5示出了本发明的一个实施例的区域互联控制器架构图。在该实施例中,通过RI控制器在核心交换网络搭建动态路由协议网络,将不同SDN网络区域内虚拟网络资源同步到其他SDN网络区域内,使得网络分区内业务流量路由可达。RI控制器将不同网络分区的虚拟网络资源进行整合,通过Netconf标准协议把配置信息下发到核心交换网络,实现同一数据中心内,不同网络分区之间的互联。
在逻辑层面,如图5所示,RI控制器可分为控制逻辑单元和配置下发逻辑单元。控制逻辑单元监控租户在不同SDN网络区域内虚拟 资源的变动情况,配置下发逻辑单元更新配置信息和路由表。RI控制器对于不同厂商的路由/交换设备进行抽象,对于不同厂商的设备,提供不同的驱动,即可对设备进行统一管理。
对于多租户的场景,不同租户之间资源相互独立,并且出现IP地址重叠的情况,由于业务流量流出网络分区后租户信息被剥离,导致无法识别不同租户的流量。RI控制器能够识别租户的虚拟资源,并在网络分区外部对流量重建租户信息,使流量在核心交换网络被正确的转发。RI控制器通过VRF技术实现租户路由的隔离,同时为每个租户虚拟出对应的RI Router资源,将VRF和RI Router进行映射,RI Router为每个租户分配一个TAG,用来标注不同租户的流量信息,并将其送到对应的VRF内,完成转发。
在一个实施例中,RI控制器执行如下具体操作流程:
1.RI Router逻辑创建与VLAN TAG标识别分配
在租户创建的同时设定RI Router,RI Router为该租户分配VLAN TAG用于标识该租户流量,创建的RI Router被写入数据库。对于租户需要流出网络分区的流量,虚拟网络所携带的VLAN TAG会被剥离,同时打上RI Router为该租户分配的VLAN TAG送到核心交换网络。
2.核心交换网络配置下发(VRF创建)
RI Router通过netconf协议,在核心交换网络中所有的路由器/交换机上创建针对该租户的VRF资源,同时将RI Router分配给租户使用的VLAN TAG和VRF进行绑定,使该租户在核心交换网络中创建独立的路由转发域。
3.核心交换网络配置下发(动态路由协议配置)
RI Router通过netconf协议,在核心交换网络中所有的路由器/交换机上启动动态路由协议,并将动态路由协议实例和该租户的VRF进行绑定,相当于每个租户在核心交换网络中运行独立的动态路由协议域,互不干扰。通过动态路由协议,网络分区所发布的路由将会同步到该租户虚拟资源所在的其他网络分区上去。
4.各云网分区内的租户虚拟路由器创建
虚拟路由器是云网分区内部网络和分区外部网络数据交换的逻辑交换器,如图6所示,本方案通过将同一租户内分布在各云网分区内的虚拟路由器挂载到RI Router上,通过在数据库中写入虚拟路由器和RI Router的绑定关系建立映射关系。
5.各云网分区内的租户虚拟网络资源弹性变更
进一步参考图6,各云网分区内,租户可以动态的创建虚拟网络资源,虚拟路由器资源,对于需要进行跨云网分区通信的业务,只需要将虚拟网络绑定到和RI Router建立映射关系的虚拟路由器即可。
6.RI Router动态探测虚拟网络资源变更并同步
在RI router与虚拟路由器关联之后,RI Router将会启用定时器开始动态探测关联虚拟路由器的虚拟网络资源变更情况,调用该虚拟路由器所在云网分区内的SDN控制器的API获取虚拟路由器和虚拟网络的关联关系。如果租户内创建的虚拟网络资源,并且绑定到了该虚拟路由器上,就会自动在该区域接入到核心交换网络的路由器/交换机上下发静态路由,下一跳地址指向该区域内部。这条静态路由将会重分布到动态路由中,在该租户对应的VRF内,同步到其他动态路由协议PEER当中。
综上,提出了一种基于VRF(虚拟路由转发表)技术的跨异构SDN网络的区域互联(Region Interconnect)RI控制方案。在一个具体实现中,该方案包括虚拟RI Router的创建,租户虚拟路由和RI Router的绑定,RI Router路由自动下发,核心交换网络的自动化配置四个过程。在本发明的上下文中,除非另外特别指明,术语“动态路由协议”可以包括OSPF、BGP等协议。
与现有技术相比,该控制方案解决了独立SDN网络由于技术体系不同造成的流量无法识别、独立网络无法互通、逻辑层面无法统一管理的问题。另外,本发明的区域互联控制器方案实现了对下层物理网络资源的抽象、隔离、调度和统一管理。再者,本发明的区域互联控制器方案向上层服务暴露标准化的API,屏蔽了底层差异,从而能 够更好和上层云平台的调度。
以上例子主要说明了本发明的一个或多个实施例。尽管只对其中一些本发明的具体实施方式进行了描述,但是本领域普通技术人员应当了解,本发明可以在不偏离其主旨与范围内以许多其他的形式实施。因此,所展示的例子与实施方式被视为示意性的而非限制性的,在不脱离如所附各权利要求所定义的本发明精神及范围的情况下,本发明可能涵盖各种的修改与替换。

Claims (13)

  1. 一种区域互联控制器,其特征在于,所述区域互联控制器设置在多个独立的网络分区与核心交换网络之间,所述区域互联控制器(RI controller)包括在租户创建时设定的一区域互联路由模块(RI router),所述区域互联路由模块配置为:
    为所述租户分配用于标识所述租户的流量的第一标识符;
    在所述核心交换网络中,创建针对所述租户的虚拟路由转发实例,并将所述第一标识符与所述虚拟路由转发实例进行绑定;以及
    在所述核心交换网络中启动动态路由协议,并将动态路由协议实例与所述虚拟路由转发实例进行绑定,
    其中,与所述租户对应的、分布在所述多个独立的网络分区内的各个虚拟路由器与所述区域互联路由模块关联。
  2. 如权利要求1所述的区域互联控制器,其中,所述虚拟路由器是逻辑交换器,其在所述网络分区的内部网络和外部网络进行数据交换。
  3. 如权利要求1所述的区域互联控制器,其中,所述区域互联路由模块配置为通过netconf协议在所述核心交换网络中的所有路由器或交换机上启动动态路由协议,使得所述租户在所述核心交换网络中能够运行独立的动态路由协议域,并且通过所述动态路由协议,所述网络分区所发布的路由将会同步到所述租户的虚拟资源所在的其他网络分区上。
  4. 如权利要求1所述的区域互联控制器,其中,所述区域互联控制器通过在数据库中写入所述各个虚拟路由器和所述区域互联路由模块的绑定关系而建立它们之间的关联关系。
  5. 如权利要求1所述的区域互联控制器,其中,所述区域互联路由模块还配置为:
    启用定时器开始动态探测关联的所述虚拟路由器的虚拟网络资源变更情况,以及
    调用所述虚拟路由器所在网络分区内的SDN控制器的应用程序编程接口以便获取所述虚拟路由器和虚拟网络的关联关系。
  6. 如权利要求1所述的区域互联控制器,其中,在所述多个独立的网络分区中,所述租户新创建的虚拟资源被绑定到该虚拟资源所在网络分区内、与所述区域互联路由模块关联的虚拟路由器上。
  7. 一种在多个独立的网络分区与核心交换网络之间的区域互联控制方法,其特征在于,所述方法包括:
    在租户创建时设定一区域互联路由模块(RI router),所述区域互联路由模块配置为:为所述租户分配用于标识所述租户的流量的第一标识符;在所述核心交换网络中,创建针对所述租户的虚拟路由转发实例,并将所述第一标识符与所述虚拟路由转发实例进行绑定;以及在所述核心交换网络中启动动态路由协议,并将动态路由协议实例与所述虚拟路由转发实例进行绑定,
    将与所述租户对应的、分布在所述多个独立的网络分区内的各个虚拟路由器与所述区域互联路由模块进行关联。
  8. 如权利要求7所述的区域互联控制方法,其中,所述虚拟路由器是逻辑交换器,其在所述网络分区的内部网络和外部网络进行数据交换。
  9. 如权利要求7所述的区域互联控制方法,其中,所述区域互联路由模块配置为通过netconf协议在所述核心交换网络中的所有路由器或交换机上启动动态路由协议,使得所述租户在所述核心交换网络中能够运行独立的动态路由协议域,并且通过所述动态路由协议,所述网络分区所发布的路由将会同步到所述租户的虚拟资源所在的其他网络分区上。
  10. 如权利要求7所述的区域互联控制方法,其中,通过在数据库中写入所述各个虚拟路由器和所述区域互联路由模块的绑定关系而建立它们之间的关联关系。
  11. 如权利要求7所述的区域互联控制方法,其中,所述区域互联路由模块还配置为:
    启用定时器开始动态探测关联的所述虚拟路由器的虚拟网络资源变更情况,以及
    调用所述虚拟路由器所在网络分区内的SDN控制器的应用程序编程接口以便获取所述虚拟路由器和虚拟网络的关联关系。
  12. 如权利要求7所述的区域互联控制方法,其中,在所述多个独立的网络分区中,所述租户新创建的虚拟资源被绑定到该虚拟资源所在网络分区内、与所述区域互联路由模块关联的虚拟路由器上。
  13. 一种计算机存储介质,所述存储介质包括一个或多个指令,所述一个或多个指令在执行时使所述计算机执行下列步骤:
    在租户创建时设定一区域互联路由模块(RI router),所述区域互联路由模块配置为:为所述租户分配用于标识所述租户的流量的第一标识符;在核心交换网络中,创建针对所述租户的虚拟路由转发实例,并将所述第一标识符与所述虚拟路由转发实例进行绑定;以及在所述核心交换网络中启动动态路由协议,并将动态路由协议实例与所述虚拟路由转发实例进行绑定,以及
    将与所述租户对应的、分布在多个独立的网络分区内的各个虚拟路由器与所述区域互联路由模块进行关联。
PCT/CN2018/102534 2017-09-06 2018-08-27 区域互联控制器、区域互联控制方法以及计算机存储介质 WO2019047740A1 (zh)

Priority Applications (4)

Application Number Priority Date Filing Date Title
SG11202001459TA SG11202001459TA (en) 2017-09-06 2018-08-27 Interconnected region controller, interconnected region control method, and computer storage medium
US16/641,006 US11343168B2 (en) 2017-09-06 2018-08-27 Interconnected region controller, interconnected region control method, and computer storage medium
EP18853142.0A EP3681110B1 (en) 2017-09-06 2018-08-27 A region interconnect control using vrf tables across heterogeneous networks
CA3072731A CA3072731C (en) 2017-09-06 2018-08-27 Interconnected region controller, interconnected region control method, and computer storage medium

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201710794656.9A CN109462534B (zh) 2017-09-06 2017-09-06 区域互联控制器、区域互联控制方法以及计算机存储介质
CN201710794656.9 2017-09-06

Publications (1)

Publication Number Publication Date
WO2019047740A1 true WO2019047740A1 (zh) 2019-03-14

Family

ID=65605881

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2018/102534 WO2019047740A1 (zh) 2017-09-06 2018-08-27 区域互联控制器、区域互联控制方法以及计算机存储介质

Country Status (7)

Country Link
US (1) US11343168B2 (zh)
EP (1) EP3681110B1 (zh)
CN (1) CN109462534B (zh)
CA (1) CA3072731C (zh)
SG (1) SG11202001459TA (zh)
TW (1) TWI687073B (zh)
WO (1) WO2019047740A1 (zh)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110430114A (zh) * 2019-07-24 2019-11-08 中国电子科技集团公司第七研究所 一种虚拟路由器及实现sdn网络与传统ip网络互联的方法
CN111447101A (zh) * 2020-02-27 2020-07-24 平安科技(深圳)有限公司 链路检测方法、装置、计算机设备及存储介质

Families Citing this family (14)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US11153194B2 (en) * 2019-04-26 2021-10-19 Juniper Networks, Inc. Control plane isolation for software defined network routing services
WO2021211949A1 (en) * 2020-04-16 2021-10-21 Juniper Networks, Inc. Tenant-based mapping for virtual routing and forwarding
US11469998B2 (en) * 2020-05-27 2022-10-11 Juniper Networks, Inc. Data center tenant network isolation using logical router interconnects for virtual network route leaking
CN112187638A (zh) * 2020-09-22 2021-01-05 杭州迪普科技股份有限公司 网络访问方法、装置、设备及计算机可读存储介质
CN112532516A (zh) * 2020-11-27 2021-03-19 杭州迪普科技股份有限公司 流量转发方法、装置、设备及计算机可读存储介质
WO2023096811A1 (en) * 2021-11-24 2023-06-01 Amazon Technologies, Inc. Tag-based cross-region segment management
US11855893B2 (en) 2021-11-24 2023-12-26 Amazon Technologies, Inc. Tag-based cross-region segment management
US11799755B2 (en) 2021-11-24 2023-10-24 Amazon Technologies, Inc. Metadata-based cross-region segment routing
US11991211B1 (en) 2021-12-10 2024-05-21 Amazon Technologies, Inc. Symmetric cross-region network data flow management
US11936558B1 (en) 2021-12-10 2024-03-19 Amazon Technologies, Inc. Dynamic evaluation and implementation of network mutations
CN114095432B (zh) * 2021-12-22 2024-03-19 上海理想信息产业(集团)有限公司 应用流量分区调度的方法、系统及存储介质
CN114938318B (zh) * 2022-05-11 2024-03-26 浪潮云信息技术股份公司 基于弹性公网ip的跨区域对等连接实现方法
CN114866467A (zh) * 2022-05-27 2022-08-05 济南浪潮数据技术有限公司 一种集群通信方法、装置、系统、设备及可读存储介质
CN115514692A (zh) * 2022-09-20 2022-12-23 深信服科技股份有限公司 一种资源池内网络交互方法、系统、存储介质和终端

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1878115A (zh) * 2005-06-07 2006-12-13 中兴通讯股份有限公司 一种虚拟专用网络的实现方法
CN102047245A (zh) * 2008-03-31 2011-05-04 亚马逊技术有限公司 配置计算机节点之间的通信
CN103095606A (zh) * 2011-10-28 2013-05-08 中兴通讯股份有限公司 一种基于策略控制的缓存方法和系统
CN103607432A (zh) * 2013-10-30 2014-02-26 中兴通讯股份有限公司 一种网络创建的方法和系统及网络控制中心
US9338094B2 (en) * 2014-03-31 2016-05-10 Dell Products, L.P. System and method for context aware network

Family Cites Families (11)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7688829B2 (en) 2005-09-14 2010-03-30 Cisco Technology, Inc. System and methods for network segmentation
JP5707239B2 (ja) * 2011-06-02 2015-04-22 株式会社日立製作所 マルチテナント型情報処理システム、管理サーバ及び構成管理方法
EP3407547B1 (en) * 2011-08-17 2020-01-22 Nicira, Inc. Hierarchical controller clusters for interconnecting different logical domains
JP5941703B2 (ja) * 2012-02-27 2016-06-29 株式会社日立製作所 管理サーバ及び管理方法
US9331938B2 (en) * 2012-04-13 2016-05-03 Nicira, Inc. Extension of logical networks across layer 3 virtual private networks
US9584445B2 (en) * 2013-05-07 2017-02-28 Equinix, Inc. Direct connect virtual private interface for a one to many connection with multiple virtual private clouds
TWI531908B (zh) * 2014-04-24 2016-05-01 A method of supporting virtual machine migration with Software Defined Network (SDN)
EP3175590B1 (en) * 2014-05-12 2021-08-11 NetApp, Inc. Bridging clouds
US10050876B2 (en) * 2014-11-12 2018-08-14 Cisco Technology, Inc. Optimized inter-VRF (virtual routing and forwarding) route leaking in network overlay based environments
US9948552B2 (en) * 2015-04-17 2018-04-17 Equinix, Inc. Cloud-based services exchange
CN104901836B (zh) * 2015-06-18 2019-01-25 新华三技术有限公司 一种跨区域sdn控制器与转发设备的连接方法和装置

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1878115A (zh) * 2005-06-07 2006-12-13 中兴通讯股份有限公司 一种虚拟专用网络的实现方法
CN102047245A (zh) * 2008-03-31 2011-05-04 亚马逊技术有限公司 配置计算机节点之间的通信
CN103095606A (zh) * 2011-10-28 2013-05-08 中兴通讯股份有限公司 一种基于策略控制的缓存方法和系统
CN103607432A (zh) * 2013-10-30 2014-02-26 中兴通讯股份有限公司 一种网络创建的方法和系统及网络控制中心
US9338094B2 (en) * 2014-03-31 2016-05-10 Dell Products, L.P. System and method for context aware network

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
See also references of EP3681110A4 *

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110430114A (zh) * 2019-07-24 2019-11-08 中国电子科技集团公司第七研究所 一种虚拟路由器及实现sdn网络与传统ip网络互联的方法
CN111447101A (zh) * 2020-02-27 2020-07-24 平安科技(深圳)有限公司 链路检测方法、装置、计算机设备及存储介质
CN111447101B (zh) * 2020-02-27 2023-05-02 平安科技(深圳)有限公司 链路检测方法、装置、计算机设备及存储介质

Also Published As

Publication number Publication date
CN109462534A (zh) 2019-03-12
CA3072731C (en) 2022-09-06
EP3681110A1 (en) 2020-07-15
TWI687073B (zh) 2020-03-01
CA3072731A1 (en) 2019-03-14
EP3681110A4 (en) 2020-09-23
CN109462534B (zh) 2021-04-16
US11343168B2 (en) 2022-05-24
SG11202001459TA (en) 2020-03-30
US20210377149A1 (en) 2021-12-02
EP3681110B1 (en) 2022-03-02
TW201914271A (zh) 2019-04-01

Similar Documents

Publication Publication Date Title
WO2019047740A1 (zh) 区域互联控制器、区域互联控制方法以及计算机存储介质
US20230261937A1 (en) Initializing network device and server configurations in a data center
EP2491684B1 (en) Method and apparatus for transparent cloud computing with a virtualized network infrastructure
US9294351B2 (en) Dynamic policy based interface configuration for virtualized environments
CN112235122B (zh) 用于网络设备的软件图像的自动选择
CN111478852B (zh) 受管理网关的路由通告
US9363207B2 (en) Private virtual local area network isolation
US20220038365A1 (en) Control plane isolation for software defined network routing services
US20160234091A1 (en) Systems and methods for controlling switches to capture and monitor network traffic
US20130185446A1 (en) Method and device for connecting to virtual private network across domains
US20160094650A1 (en) Non-overlay resource access in datacenters using overlay networks
WO2018157299A1 (zh) 一种光线路终端olt设备虚拟方法及相关设备
WO2014000292A1 (zh) 跨数据中心的虚拟机迁移方法、服务控制网关及系统
CN111464454B (zh) 一种数据中心内虚拟bras设备负载分担方法及系统
CN109587286A (zh) 一种设备接入控制方法及装置
US11258661B2 (en) Initializing server configurations in a data center
CN111638957A (zh) 一种集群共享式公有云负载均衡的实现方法
US11582102B2 (en) Systems and methods for integrating network switch management with computing resource management
US11522754B2 (en) Systems and methods for Zero-Touch Provisioning of a switch in intermediate distribution frames and main distribution frames
CN110519402B (zh) 实体家庭网关接入虚拟家庭网关方法、设备及系统
CN112929206A (zh) 一种云网环境下云物理机配置的方法与装置
US11582067B2 (en) Systems and methods for providing network connectors
US10931565B2 (en) Multi-VRF and multi-service insertion on edge gateway virtual machines
WO2016091186A1 (zh) 一种防止逻辑交换机所占用资源发生冲突的方法及系统
CN114301833A (zh) 路由通告方法、路由通告装置、设备以及存储介质

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 18853142

Country of ref document: EP

Kind code of ref document: A1

ENP Entry into the national phase

Ref document number: 3072731

Country of ref document: CA

NENP Non-entry into the national phase

Ref country code: DE

ENP Entry into the national phase

Ref document number: 2018853142

Country of ref document: EP

Effective date: 20200406