WO2020125320A1 - 基于vdc的路由配置方法、装置、设备及可读存储介质 - Google Patents

基于vdc的路由配置方法、装置、设备及可读存储介质 Download PDF

Info

Publication number
WO2020125320A1
WO2020125320A1 PCT/CN2019/120285 CN2019120285W WO2020125320A1 WO 2020125320 A1 WO2020125320 A1 WO 2020125320A1 CN 2019120285 W CN2019120285 W CN 2019120285W WO 2020125320 A1 WO2020125320 A1 WO 2020125320A1
Authority
WO
WIPO (PCT)
Prior art keywords
vdc
network
public network
routing
virtual
Prior art date
Application number
PCT/CN2019/120285
Other languages
English (en)
French (fr)
Inventor
沈世元
袁俊
蒋天超
何俊蕾
张丹丹
Original Assignee
中兴通讯股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 中兴通讯股份有限公司 filed Critical 中兴通讯股份有限公司
Publication of WO2020125320A1 publication Critical patent/WO2020125320A1/zh

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00—Routing or path finding of packets in data switching networks
    • H04L45/74—Address processing for routing
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00—Routing or path finding of packets in data switching networks
    • H04L45/74—Address processing for routing
    • H04L45/745—Address table lookup; Address filtering
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00—Network arrangements, protocols or services for addressing or naming
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00—Network arrangements, protocols or services for addressing or naming
    • H04L61/09—Mapping addresses
    • H04L61/25—Mapping addresses of the same type
    • H04L61/2503—Translation of Internet protocol [IP] addresses
    • H04L61/2521—Translation architectures other than single NAT servers
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00—Network arrangements, protocols or services for addressing or naming
    • H04L61/09—Mapping addresses
    • H04L61/25—Mapping addresses of the same type
    • H04L61/2503—Translation of Internet protocol [IP] addresses
    • H04L61/2557—Translation policies or rules

Definitions

  • the present disclosure mainly relates to the technical field of routing configuration, and in particular, to a VDC-based routing configuration method, device, device, and readable storage medium.
  • Virtual data center (Virtual Data Center, VDC) is a new form of data center that applies cloud computing concepts to IDC (Internet Data Center, Internet Data Center).
  • IDC Internet Data Center
  • the virtual machine needs to manually configure routing when it goes out of the public network and the private network. The entire routing process is extremely complicated, and a slight error will cause the network Paralyzed and not easy to maintain uniformly.
  • the main purpose of the present disclosure is to provide a VDC-based routing configuration method, device, equipment and readable storage medium, which aims to solve the situation that in some cases, the virtual machine needs to manually configure routing when it leaves the public network and the private network.
  • the problem is not easy to maintain uniformly.
  • the VDC-based routing configuration method includes the following steps: creating a public network and a virtual route through a virtual platform on an operation management interface, and adding a subnet to be connected To the virtual route; obtain the public network strategy through the NAT plug-in of the virtual platform, and automatically log in to the gateway device, and deliver the public network strategy to the gateway device; obtain the special configuration on the operation interface through the NAT plug-in Network routing information, generate a private network routing strategy based on the private network routing information, and deliver the private network strategy to the gateway device; send the public network strategy and the private network strategy to the SDN controller, based on The public network strategy and the private network strategy deliver a routing flow table to the gateway device through the SDN controller, so that the gateway device selects a routing line to enter the public network or the private network according to the routing flow table.
  • the processing device for routing configuration based on VDC includes: a creation module for creating a public network and a virtual network on an operation management interface through a virtual platform and Virtual routing, adding the subnet to be connected to the virtual routing; the first policy issuing module is used to obtain the public network strategy through the NAT plug-in of the virtual platform, and automatically log in to the gateway device to download the public network strategy Sent to the gateway device; a second policy delivery module, used to obtain the private network routing information configured on the operation interface through the NAT plug-in, generate a private network routing strategy based on the private network routing information, and transfer the private network
  • the policy is delivered to the gateway device; the flow table delivery module is used to send the public network strategy and the private network strategy to the SDN controller, and control the SDN based on the public network strategy and the private network strategy
  • the router delivers the routing flow table to the gateway device, so that the gateway device selects a routing line to enter the
  • the present disclosure also provides a VDC-based routing configuration device, the VDC-based routing configuration device includes a processor, a memory, and a memory stored on the memory and executable by the processor A VDC-based routing configuration program, wherein when the VDC-based routing configuration program is executed by the processor, the steps of the above-described VDC-based routing configuration method are implemented.
  • the present disclosure also provides a readable storage medium that stores a VDC-based routing configuration program, where the VDC-based routing configuration program is implemented when executed by a processor The steps of the above VDC-based routing configuration method.
  • FIG. 1 is a schematic diagram of the hardware structure of a VDC-based routing configuration device according to various embodiments of the present disclosure
  • FIG. 2 is a schematic flowchart of a first embodiment of a VDC-based routing configuration method of the present disclosure
  • FIG. 3 is a schematic diagram of functional modules of the first embodiment of the VDC-based routing configuration device of the present disclosure.
  • FIG. 1 is a schematic diagram of a hardware structure of a VDC-based routing configuration device involved in an embodiment of the present disclosure.
  • the VDC-based routing configuration device may include a processor 1001 (eg, Central Processing Unit, CPU), a communication bus 1002, a user interface 1003, a network interface 1004, and a memory 1005.
  • the communication bus 1002 is used to realize the connection communication between these components;
  • the user interface 1003 may include a display (Display), an input unit such as a keyboard (Keyboard);
  • the network interface 1004 may optionally include a standard wired interface, a wireless interface (Such as WI-FI interface);
  • the memory 1005 can be a high-speed RAM memory or a non-volatile memory (non-volatile memory), such as a disk memory, and the memory 1005 can optionally be a storage device independent of the foregoing processor 1001 .
  • the hardware structure shown in FIG. 1 does not constitute a limitation on the present disclosure, and may include more or less components than those illustrated, or combine certain components, or arrange different components.
  • the memory 1005 in FIG. 1 as a storage medium may include an operating system, a network communication module, and a routing configuration program based on VDC.
  • the network communication module is mainly used to connect to a server and perform data communication with the server; and the processor 1001 can call the VDC-based routing configuration program stored in the memory 1005 and execute the VDC-based routing provided by the embodiments of the present disclosure Configuration method.
  • An embodiment of the present disclosure provides a route configuration method based on VDC.
  • FIG. 2 is a schematic flowchart of a first embodiment of a route configuration method based on VDC of the present disclosure.
  • the execution subject of the VDC-based routing configuration method is a routing configuration system (hereinafter referred to as a system), which includes an SDN submodule, a NAT plug-in, a VDC operation management system submodule, a VTEP gateway device, etc.
  • the sub-module is used to separate the control rights on the network devices and managed by a centralized controller, without relying on the underlying network devices (routers, switches, firewalls), shielding the differences from the underlying network devices.
  • the control is completely open, and users can customize any network routing and transmission rules and strategies they want to achieve, which makes them more flexible and intelligent.
  • the NAT plug-in is used to realize the communication of the Layer 2 and Layer 3 networks in the virtual data.
  • the VDC management system management portal sub-module is used to provide centralized, flexible and highly reliable computing, storage, network and other resources for VDC, unified management, distribution on demand, and rental services.
  • the VTEP gateway device used to support the OF protocol.
  • the device gateway must be able to handle all traffic from the access layer device and provide uplink to the core layer. It is mainly a three-layer switch and works at the network layer. The switch is more high-end and the function is more strengthened. Because it works at the network layer of the OSI/RM model, it has a routing function. It provides IP address information to the network path selection.
  • the northbound interface of the gateway device should be opened to the SDN controller to facilitate It delivers the routing flow table.
  • VDC Virtual Data Center
  • IDC Internet Data Center, Internet Data Center
  • VDC virtualized torus
  • IDC infrastructure-to-things
  • physical resources are abstractly integrated through virtualization technology to enhance service capabilities, and resource utilization and service reliability are improved through dynamic resource allocation and scheduling; Automated service provisioning capabilities, reduce operation and maintenance costs, and provide a convenient user experience; provide more security mechanisms and reliability mechanisms to meet the security standards of enterprise-level applications.
  • the VDC-based routing configuration method includes the following steps:
  • Step S10 Create a public network and a virtual route through the virtual platform on the operation management interface, and add the subnet to be connected to the virtual route;
  • the user triggers a creation request on the operation management interface.
  • the operation management interface will create an API (Application Programming Interface) interface and send the creation request to the virtual platform.
  • the virtual platform creates the public request by calling the RESTful interface. Network and virtual routing, and add the subnets that need to be connected to the virtual routing, where REST (Representational State Transfer) refers to a set of architectural constraints and principles that meet the application of these constraints and principles
  • the program or design is RESTful.
  • the step of creating a public network and a virtual route through the virtual platform on the operation management interface, and adding the subnet to be connected to the virtual route includes:
  • Step S11 Create a public network and a virtual route through a virtual platform on the operation management interface, obtain key attributes of the virtual route, and determine whether the key attribute is correct;
  • Step S12 If the key attribute is correct, add the subnet to be connected to the virtual route.
  • the key attribute includes the interface address and gateway address in the virtual route
  • determining whether the key attribute is correct through the NAT plug-in includes determining whether the interface address in the virtual route is duplicated and determining whether the gateway address in the virtual route is correct.
  • key attributes such as the gateway address and interface address need to be judged, for example, to determine the current virtual route Whether the interface address of the IP address is duplicated. If it is duplicated, a new interface address needs to be reconfigured. If it is not duplicated, the interface address is determined to be correct, and the subnet to be connected is added to the virtual route.
  • Step S20 Obtain the public network strategy through the NAT plug-in of the virtual platform, and automatically log in to the gateway device to deliver the public network strategy to the gateway device;
  • the virtual platform runs the NAT plug-in, and the RPC (RemoteProcedureCalling remote procedure call) service is used to monitor and obtain the message delivery of the virtual platform.
  • the NAT plug-in starts a thread to process each message in the MQ (MessageQueen message queue) using a preset function A vRouter (virtual routing) action to obtain the network address, name, ID and other network information of the public network, virtual routing and subnet, so as to automatically log in to the VTEP gateway device for SNAT and DNAT policy delivery.
  • the routing strategy is based on some Rules, using a certain strategy to change the parameters in the rules that affect route advertisement, reception, or route selection to change the results of route discovery. What ultimately changes is the content of the routing table. It comes into play during route discovery.
  • the step of obtaining the public network policy through the NAT plug-in of the virtual platform and automatically logging in to the gateway device includes:
  • step S21 the preset function is called by the NAT plug-in to obtain the network information in the message queue, and the network information is saved in the sub-module of the NAT plug-in, and a public network strategy is generated based on the network information;
  • a NAT plug-in running on a virtualization platform.
  • MQ Message Queen Message Queue
  • the NAT plug-in will also start a loop thread to get the sub-module to obtain the network information.
  • _process_routers_loop loop function
  • the network information includes a public network, subnet, virtual route network address, name, ID, gateway address of the gateway device, etc., and a public network strategy is generated based on the network information.
  • Step S22 Obtain an operation instruction of a user related operation on the operation management interface, obtain the network information in the submodule, and call a driver corresponding to the operation instruction based on the network information to perform the operation corresponding to the operation instruction ;
  • related operations include creating a route, editing a route, deleting a route, etc. If a user detects a related operation on an operation management interface, an operation instruction of the related operation is obtained, and network information is obtained from a submodule of the NAT plug-in according to the operation instruction , And call the driver corresponding to the operation instruction according to the network information to complete the corresponding operation. For example, the driver corresponding to the operation instruction completes operations such as creating a route, editing a route, and deleting a route.
  • Step S23 Obtain the gateway address in the network information, and log in to the gateway device through the NAT plug-in based on the gateway address.
  • the gateway address is the address corresponding to the gateway device
  • the NAT plug-in obtains the gateway address in the network information, and automatically logs in to the gateway device according to the gateway address to issue SNAT and DNAT policies.
  • step S20 it also includes:
  • Step S30 Obtain the private network routing information configured on the operation interface through the NAT plug-in, generate a private network routing strategy based on the private network routing information, and deliver the private network strategy to the gateway device;
  • the private network routing information of the private network includes the private network address information
  • the private network routing information configured in the operation management interface is obtained through the monitoring sub-module of the NAT plug-in, a private network strategy is generated, and based on the gateway device
  • the gateway address of the gateway is used to log in to the gateway device, and the private network policy is delivered to the gateway device.
  • the step of obtaining the private network routing information configured on the operation interface through the NAT plug-in includes:
  • Step S31 Receive a setting request for setting up a private network sent by the operation management interface through the NAT plug-in, and detect whether there is an update operation for the virtual route according to the setting request;
  • Step S32 if it is detected that there is an update operation on the virtual route, the route update interface is called to obtain private network routing information.
  • the NAT plug-in After the NAT plug-in receives the setting request for setting the private network route in the operation management interface, the NAT plug-in will start another thread to detect whether there is an update operation on the virtual route. If a related update operation is detected on the virtual route, Then call the update router interface to get the private network routing information in MQ, and log in to the gateway device again automatically through the NAT plug-in. Configure and issue the private network routing strategy to the gateway under the same VRF (Virtual RoutingForwarding routing forwarding table) equipment.
  • VRF Virtual RoutingForwarding routing forwarding table
  • step S30 it also includes:
  • Step S40 Obtain a routing flow table of the public network and the private network, and deliver the routing flow table to the gateway device through the SDN controller, so that the gateway device selects a routing line to enter the public network or the private network according to the routing flow table .
  • the NAT plug-in After the NAT plug-in obtains the relevant routing data from MQ (including the routing address and route name of the virtual route), it sends the relevant routing data to the SDN submodule and formulates relevant protocols, such as OpenFlow, OVSDB, or OF -Config, if the SDN sub-module receives the restful request, it will deliver the relevant routing flow table to the gateway device.
  • the flow table includes the public network egress flow table and the private network egress flow table.
  • the routing flow table includes the flow table priority and source Address, destination address, next hop address and other information.
  • the gateway device selects the public network or private network route out according to the corresponding flow table, so as to realize the scenario where the public network and the private network route coexist on the gateway device. From the above steps, from the VDC management system interface The routing information of the public network and the private network can be directly delivered to the gateway device without manual login to the gateway device to configure, which simplifies the management and maintenance system of the VDC, and greatly simplifies the process of subsequent network maintenance operations of the entire VDC.
  • the VDC-based routing configuration method proposed in this embodiment creates a public network and a virtual route through a virtual platform on the operation management interface, adds the subnet to be connected to the virtual route, and then logs in to the gateway through the NAT plug-in of the virtual platform Device, and generate a public network strategy, deliver the public network strategy to the gateway device, then log in to the gateway device through the NAT plug-in, obtain private network routing information of the private network, and generate based on the private network routing information Private network strategy, deliver the private network strategy to the gateway device, and finally obtain the routing flow tables of the public network and the private network, and deliver the routing flow table to the gateway device through the SDN controller for the gateway
  • the device selects a routing line to enter the public network or private network according to the routing flow table; it realizes that the public and private network routing information is directly delivered to the gateway device through the operation management interface without manual login to the gateway device to configure, and the configuration process is simple To facilitate unified maintenance.
  • step S20 the method further includes:
  • Step S50 Generate RT and RD based on the preset rules of the NAT plug-in and the gateway device, and send the RT and RD to the gateway device.
  • the NAT plug-in automatically logs in to the gateway device to issue the public network exit policy.
  • the NAT plug-in generates RD (Route-Distinguisher) according to the preset rules with the gateway device. RD is used to indicate The main role of different tenants on the gateway device is to realize address reuse between tenants.
  • the NAT plug-in will create another important attribute RT (Route-Target routing target) on the gateway device. RT determines the sending or receiving of different tenant routes. To ensure the isolation of routes between tenants, the gateway device relies on the RT attribute to distinguish the NAT strategy of different tenants.
  • the routing configuration method based on VDC proposed in this embodiment generates RT and RD based on the preset rules of the NAT plug-in and the gateway device, and sends the RT and RD to the gateway device; Send policy to the gateway device of the corresponding tenant.
  • step S10 a third embodiment of the VDC-based route configuration method of the present disclosure is proposed.
  • step S10 it further includes:
  • Step S60 Obtain the network data of the public network, the virtual route, and the subnet, and store the network data in a database in association;
  • Step S70 Create a remote procedure call service, and pass the network data to the NAT plug-in through the remote procedure call service.
  • the operation management interface architecture creation request is sent to the virtual platform through an API (Application Programming Interface) programming interface, requesting the virtual platform to create a public network, subnet, and virtual route, and creating a public network and subnet on the virtual platform.
  • API Application Programming Interface
  • Network, virtual routing, access to public network, subnet, virtual routing network data, the network data includes the public network, subnet and virtual routing network address, name, ID, etc., when the network data is obtained, the network data is associated Store to database, create RPC (Remote Procedure Calling)-server, and pass the network data to NAT plug-in through RPC-server.
  • RPC Remote Procedure Calling
  • the VDC-based routing configuration method proposed in this embodiment obtains the network data of the public network, the virtual route, and the subnet, stores the network data in a database, and then creates a remote procedure call service. Call the service to transfer the network data to the NAT plug-in; realize the transfer of the network data to the NAT plug-in, so that the NAT plug-in can log in to the gateway device according to the network data and deliver the public network policy.
  • step S70 it further includes:
  • Step S80 Receive the user's binding request on the operation management interface through the NAT plug-in, and obtain the IP of the public network and the IP of the newly created virtual machine in the network data according to the binding request;
  • Step S90 Bind the IP of the newly created virtual machine with the IP of the public network.
  • the user creates a new virtual machine on the operation management interface, binds the virtual machine to the public network, triggers a binding instruction, receives the user's binding request on the operation management interface through the NAT plug-in, and obtains the new creation according to the binding request
  • the IP of the virtual machine and the IP of the public network bind the newly created virtual opportunity public network.
  • the NAT plug-in When the NAT plug-in receives the RESTful request for binding the public network IP of the operation management interface, it first calls the loop function to obtain the interface network in MQ Interface address, gateway address, and save the obtained data, and record and save the relevant information (network address, log information), and instruct the relevant driver to perform routing operations, such as: creating a route, editing a route, Delete route etc.
  • the VDC-based routing configuration method proposed in this embodiment receives the user's binding request on the operation management interface through the NAT plug-in, and obtains the public network IP and the IP of the newly created virtual machine in the network data according to the binding request, Then the IP of the newly created virtual machine is bound to the IP of the public network; the implementation of the public network routing strategy based on the IP of the public network is realized.
  • embodiments of the present disclosure also provide a routing configuration device based on VDC.
  • FIG. 3 is a schematic diagram of functional modules of a first embodiment of a VDC-based routing configuration device of the present disclosure.
  • the VDC-based routing configuration device of the present disclosure is a virtual device, which is stored in the memory 1005 of the VDC-based routing configuration device shown in FIG. 1 and is used to implement all functions of the VDC-based routing configuration program: created through a virtual platform on the operation management interface Public network and virtual routing, add the subnet to be connected to the virtual routing; obtain the public network strategy through the NAT plug-in of the virtual platform, and automatically log in to the gateway device to deliver the public network strategy to the gateway device Obtaining the private network routing information configured on the operation interface through the NAT plug-in, generating a private network routing strategy based on the private network routing information, and delivering the private network strategy to the gateway device; transmitting the public network strategy And the private network strategy is sent to the SDN controller, and based on the public network strategy and the private network strategy, the routing flow table is delivered to the gateway device through the SDN controller for the gateway device to select according to the routing flow table The routing line enters the public network or private network.
  • the VDC-based routing configuration device includes: a creation module for creating a public network and a virtual route through a virtual platform on an operation management interface, and adding a subnet to be connected to the virtual route Medium; a first policy distribution module, used to obtain a public network policy through the NAT plug-in of the virtual platform, and automatically log in to the gateway device to deliver the public network policy to the gateway device; a second policy distribution module For obtaining the private network routing information configured on the operation interface through the NAT plug-in, generating a private network routing strategy based on the private network routing information, and delivering the private network strategy to the gateway device; the module under the flow table , Used to send the public network strategy and the private network strategy to the SDN controller, and based on the public network strategy and the private network strategy, deliver a routing flow table to the gateway device through the SDN controller, for The gateway device selects a routing line to enter the public network or the private network according to the routing flow table.
  • the creation module 101 is further used to: create a public network and a virtual route through the virtual platform on the operation management interface, obtain the key attributes of the virtual route, and determine whether the key attribute is correct; if the key If the attributes are correct, add the subnet to be connected to the virtual route.
  • the first policy delivery module 102 is further configured to: use a NAT plug-in to call a preset function to obtain network information in the message queue, and save the network information to a sub-module of the NAT plug-in, And generate a public network strategy based on the network information; obtain an operation instruction of a user related operation on an operation management interface, obtain the network information in the submodule, and call a driver corresponding to the operation instruction based on the network information Perform the operation corresponding to the operation instruction; obtain the gateway address in the network information, log in to the gateway device through a NAT plug-in based on the gateway address, and send the public network policy to the gateway device.
  • the first policy issuing module 102 is further configured to: receive a setting request for setting up a private network sent by an operation management interface through a NAT plug-in, and detect whether an update operation exists in the virtual route according to the setting request; if After detecting that there is an update operation on the virtual route, the route update interface is called to obtain the private network routing information.
  • the second policy 103 delivery module is further used to generate RT and RD based on the preset rules of the NAT plug-in and the gateway device, and send the RT and RD to the gateway device.
  • the VDC-based routing configuration device further includes: an acquisition module for acquiring network data of the public network, the virtual route, and the subnet, and associatively storing the network data to a database; a delivery module , For creating a remote procedure call service, and passing the network data to the NAT plug-in through the remote procedure call service.
  • the VDC-based routing configuration device further includes a binding module, configured to: receive a user's binding request on the operation management interface through a NAT plug-in, and obtain the public data in the network data according to the binding request The IP of the network and the IP of the newly created virtual machine; bind the IP of the newly created virtual machine with the IP of the public network.
  • a binding module configured to: receive a user's binding request on the operation management interface through a NAT plug-in, and obtain the public data in the network data according to the binding request The IP of the network and the IP of the newly created virtual machine; bind the IP of the newly created virtual machine with the IP of the public network.
  • each module in the processing device based on the VDC-based routing configuration corresponds to the steps in the embodiment of the above-mentioned VDC-based routing configuration method, and its functions and implementation processes will not be repeated here one by one.
  • embodiments of the present disclosure also provide a readable storage medium.
  • a VDC-based routing configuration program is stored on a readable storage medium of the present disclosure, where the VDC-based routing configuration program is executed by a processor to implement the steps of the VDC-based routing configuration method as described above.
  • the method implemented when the processing program of the VDC-based routing configuration is executed can refer to various embodiments of the processing method of the VDC-based routing configuration of the present disclosure, and details are not described herein again.
  • the present disclosure provides a readable storage medium that stores one or more programs, and the one or more programs may also be executed by one or more processors for implementing the above-described VDC-based The steps in each embodiment of the routing configuration method.
  • the present disclosure provides a VDC-based routing configuration method, device, equipment, and readable storage medium.
  • the present disclosure adds a subnet to be connected to a virtual route by creating a public network and a virtual route through a virtual platform on an operation management interface.
  • the methods in the above embodiments can be implemented by means of software plus a necessary general hardware platform, and of course, can also be implemented by hardware, but in many cases the former is better Implementation.
  • the technical solution of the present disclosure can be embodied in the form of a software product in essence or part that contributes to some situations, and the computer software product is stored in a readable storage medium (such as ROM/ RAM, magnetic disks, and optical disks include several instructions to enable a terminal device (which may be a mobile phone, computer, server, or network device, etc.) to perform the methods described in various embodiments of the present disclosure.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

本公开公开一种基于VDC的路由配置方法、装置、设备及可读存储介质，所述方法包括：在运营管理界面通过虚拟平台创建公网及虚拟路由，将待联通的子网加入到虚拟路由中；通过虚拟平台的NAT插件获取公网策略，并自动登录网关设备，将公网策略下发至所述网关设备；通过NAT插件获取在运营界面配置的专网路由信息，基于所述专网路由信息生成专网路由策略，将所述专网策略下发至所述网关设备；将所述公网策略及所述专网策略发送至SDN控制器，基于所述公网策略及所述专网策略通过SDN控制器下发路由流表至所述网关设备，以供网关设备根据所述路由流表选择路由线路进入公网或者专网。

Description

基于VDC的路由配置方法、装置、设备及可读存储介质
本公开要求享有2018年12月17日提交的名称为“基于VDC的路由配置方法、装置、设备及可读存储介质”的中国专利申请CN201811546880.7的优先权，其全部内容通过引用并入本文中。
技术领域
本公开主要涉及路由配置技术领域，具体地说，涉及一种基于VDC的路由配置方法、装置、设备及可读存储介质。
背景技术
虚拟数据中心(Virtual Data Center，VDC)是将云计算概念运用于IDC(互联网数据中心，Internet Data Center)的一种新型的数据中心形态，目前，在虚拟数据中心中，由于涉及的网元众多，如云管平台、SDN网元、虚拟化平台、VTEP网关设备等网元，虚拟机出公网和出专网时需要人工进行配置路由，配置整个路由流程异常复杂，稍有失误会导致网络瘫痪且还不便于统一维护。
发明内容
本公开的主要目的是提供一种基于VDC的路由配置方法、装置、设备及可读存储介质，旨在解决一些情况中虚拟机出公网和出专网时需要人工进行配置路由，流程复杂、不便于统一维护的问题。
为实现上述目的，本公开提供一种基于VDC的路由配置方法，所述基于VDC的路由配置方法包括以下步骤：在运营管理界面通过虚拟平台创建公网及虚拟路由，将待联通的子网加入到虚拟路由中；通过所述虚拟平台的NAT插件获取公网策略，并自动登录网关设备，将所述公网策略下发至所述网关设备；通过所述NAT插件获取在运营界面配置的专网路由信息，基于所述专网路由信息生成专网路由策略，将所述专网策略下发至所述网关设备；将所述公网策略及所述专网策略发送至SDN控制器，基于所述公网策略及所述专网策略通过SDN控制器下发路由流表至所述网关设备，以供网关设备根据所述路由流表选择路由线路进入公网或者专网。
此外，为实现上述目的，本公开还提供一种基于VDC的路由配置的处理装置，所述基 于VDC的路由配置的处理装置包括：创建模块，用于在运营管理界面通过虚拟平台创建公网及虚拟路由，将待联通的子网加入到虚拟路由中；第一策略下发模块，用于通过所述虚拟平台的NAT插件获取公网策略，并自动登录网关设备，将所述公网策略下发至所述网关设备；第二策略下发模块，用于通过所述NAT插件获取在运营界面配置的专网路由信息，基于所述专网路由信息生成专网路由策略，将所述专网策略下发至所述网关设备；流表下发模块，用于将所述公网策略及所述专网策略发送至SDN控制器，基于所述公网策略及所述专网策略通过SDN控制器下发路由流表至所述网关设备，以供网关设备根据所述路由流表选择路由线路进入公网或者专网。
此外，为实现上述目的，本公开还提供一种基于VDC的路由配置设备，所述基于VDC的路由配置设备包括处理器、存储器、以及存储在所述存储器上并可被所述处理器执行的基于VDC的路由配置程序，其中所述基于VDC的路由配置程序被所述处理器执行时，实现如上述的基于VDC的路由配置方法的步骤。
此外，为实现上述目的，本公开还提供一种可读存储介质，所述可读存储介质上存储有基于VDC的路由配置程序，其中所述基于VDC的路由配置程序被处理器执行时，实现如上述的基于VDC的路由配置方法的步骤。
附图说明
图1为本公开各实施例涉及的基于VDC的路由配置设备的硬件结构示意图；
图2为本公开基于VDC的路由配置方法第一实施例的流程示意图；
图3为本公开基于VDC的路由配置装置第一实施例的功能模块示意图。
本公开目的的实现、功能特点及优点将结合实施例，参照附图做进一步说明。
具体实施方式
应当理解，此处所描述的实施例仅仅用以解释本公开，并不用于限定本公开。
参照图1，图1为本公开实施例方案中涉及的基于VDC的路由配置设备的硬件结构示意图。本公开实施例中，基于VDC的路由配置设备可以包括处理器1001(例如中央处理器Central Processing Unit、CPU)，通信总线1002，用户接口1003，网络接口1004，存储器1005。其中，通信总线1002用于实现这些组件之间的连接通信；用户接口1003可以包括显示屏(Display)、输入单元比如键盘(Keyboard)；网络接口1004可选的可以包 括标准的有线接口、无线接口(如WI-FI接口)；存储器1005可以是高速RAM存储器，也可以是稳定的存储器(non-volatile memory)，例如磁盘存储器，存储器1005可选的还可以是独立于前述处理器1001的存储装置。本领域技术人员可以理解，图1中示出的硬件结构并不构成对本公开的限定，可以包括比图示更多或更少的部件，或者组合某些部件，或者不同的部件布置。
继续参照图1，图1中作为一种存储介质的存储器1005可以包括操作系统、网络通信模块以及基于VDC的路由配置程序。在图1中，网络通信模块主要用于连接服务器，与服务器进行数据通信；而处理器1001可以调用存储器1005中存储的基于VDC的路由配置程序，并执行本公开实施例提供的基于VDC的路由配置方法。
本公开实施例提供了一种基于VDC的路由配置方法。
参照图2，图2为本公开基于VDC的路由配置方法第一实施例的流程示意图。
在本实施例中，该基于VDC的路由配置方法的执行主体为路由配置系统(以下简称系统)，该系统包括SDN子模块、NAT插件、VDC的运营管理系统子模块、VTEP网关设备等，SDN子模块用于将网络设备上的控制权分离出来，由集中的控制器管理，无须依赖底层网络设备(路由器、交换机、防火墙)，屏蔽了来自底层网络设备的差异。而控制权是完全开放的，用户可以自定义任何想实现的网络路由和传输规则策略，从而更加灵活和智能。NAT插件用于实现虚拟数据中二层、三层网络的通信，同时即作为运营管理界面和VTEP的中间件，实现公网和专网路由的策略下发，又作为SDN和VTEP网关的中间件，实现公网和专网路由的相关流表下发。VDC的管理系统管理门户子模块用于对VDC主要提供集中的、弹性的、高可靠性的计算、存储、网络等资源，统一管理、按需分配、出租服务。VTEP网关设备用于支持OF协议的设备网关必须能够处理来自接入层设备的所有通信量，并提供到核心层的上行链路，主要是三层交换机，工作在网络层，它比第二层交换机更加高档，功能更加强，因为工作于OSI/RM模型的网络层，所以它具有路由功能，它是将IP地址信息提供给网络路径选择，网关设备的北向接口要开放给SDN控制器，便于其下发路由流表。
其中，VDC(Virtual Data Center，虚拟数据中心)是将云计算概念运用于IDC(互联网数据中心，Internet Data Center)的一种新型的数据中心形态。通过传统IDC业务与云计算技术相结合，建设统一创新型VDC运营管理系统，应用虚拟化、自动化部署等技术，构建可伸缩的虚拟化基础架构，采用集中管理、分布服务模式，向用户提供一点受理、全网服务的基础IT设施方案与服务。VDC与传统IDC的主要区别在于，通过技术手段把基础设施作为服务提供；通过虚拟化技术将物理资源抽象整合，增强服务能力，通过动态资源分配和调度，提高资源利用能力和服务可靠性；提供自动化的服务开通能力、降低运维成 本，并提供便捷用户体验；提供更多的安全机制和可靠性机制，满足企业级应用的安全标准。
该基于VDC的路由配置方法包括以下步骤：
步骤S10，在运营管理界面通过虚拟平台创建公网及虚拟路由，将待联通的子网加入到虚拟路由中；
在本实施例中，用户在运营管理界面触发创建请求，运营管理界面将创建通过API(Application Programming Interface，应用程序编程接口)接口，将创建请求发送至虚拟平台，虚拟平台通过调用RESTful接口创建公网网络和虚拟路由，并将需要联通的子网加入到虚拟路由中，其中，REST(Representational State Transfer表述性状态转移)指的是一组架构约束条件和原则，满足这些约束条件和原则的应用程序或设计就是RESTful。
其中，所述在运营管理界面通过虚拟平台创建公网及虚拟路由，将待联通的子网加入到虚拟路由中的步骤包括：
步骤S11，在运营管理界面通过虚拟平台创建公网及虚拟路由，获取所述虚拟路由的关健属性，确定所述关键属性是否正确；
步骤S12，若所述关键属性正确，则将待联通的子网加入到虚拟路由中。
在本实施例中，该关键属性包括虚拟路由中接口地址、网关地址，通过NAT插件确定关键属性是否正确包括确定虚拟路由中的接口地址是否重复、确定虚拟路由中的网关地址是否正确，在运营界面通过虚拟平台创建公网及虚拟路由时，虚拟路由中的接口地址可能存在重复，网关地址可能存在错误，所以，需要对网关地址、接口地址等关键属性进行判断，例如，确定当前虚拟路由中的接口地址是否重复，若重复，则需要重新配置新的接口地址，若不重复，则确定接口地址正确，则将待联通的子网加入到虚拟路由中。
步骤S20，通过所述虚拟平台的NAT插件获取公网策略，并自动登录网关设备，将所述公网策略下发至所述网关设备；
在本实施例中，虚拟平台运行NAT插件，通过RPC(Remote Procedure Calling远程过程调用)服务监听获取虚拟平台的消息传递，NAT插件启动一个线程利用预设函数处理MQ(Message Queen消息队列)中每一个vRouter(虚拟路由)的action，获取公网、虚拟路由及子网的网络地址、名称、ID等网络信息，从而自动登录到VTEP网关设备进行SNAT和DNAT的策略下发，路由策略是根据一些规则，使用某种策略改变规则中影响路由发布、接收或路由选择的参数而改变路由发现的结果，最终改变的是路由表的内容。是在路由发现的时候产生作用。
在一个实施例中，所述通过所述虚拟平台的NAT插件获取公网策略，并自动登录网关设备的步骤包括：
步骤S21，通过NAT插件调用预设函数获取消息队列中的网络信息，并将所述网络信息保存至所述NAT插件的子模块中，并基于所述网络信息生成公网策略；
在本实施例中，运行在虚拟化平台的NAT插件，NAT插件启动时有若干个Workers去MQ(Message Queen消息队列)中获取网络信息，然后将网络信息放进一个NAT插件的子模块中，同时NAT插件还会启动一个循环线程去子模块获取该网络信息，当发现有router(路由器)相关的操作发生后，即调用_process_routers_loop(循环函数)去处理获取到的网络信息。其中，该网络信息包括公网、子网、虚拟路由的网络地址、名称、ID、网关设备的网关地址等，并根据所述网络信息生成公网策略。
步骤S22，获取用户在运营管理界面的相关操作的操作指令，在所述子模块中获取所述网络信息，并基于所述网络信息调用所述操作指令对应的驱动执行所述操作指令对应的操作；
在本实施例中，相关操作包括创建路由、编辑路由、删除路由等，若检测用户在运营管理界面的相关操作，则获取相关操作的操作指令，根据操作指令在NAT插件的子模块获取网络信息，并根据网络信息调用操作指令对应的驱动完成对应操作，例如，根据操作指令对应的驱动完成创建路由、编辑路由、删除路由等操作。
步骤S23，获取网络信息中的网关地址，基于所述网关地址通过NAT插件登录所述网关设备。
在本实施例中，该网关地址为网关设备对应的地址，NAT插件获取网络信息中的网关地址，根据网关地址自动登录网关设备，进行SNAT和DNAT的策略下发。
步骤S20之后，还包括：
步骤S30，通过所述NAT插件获取在运营界面配置的专网路由信息，基于所述专网路由信息生成专网路由策略，将所述专网策略下发至所述网关设备；
在本实施例中，该专网的专网路由信息包括专网的地址信息，通过NAT插件的监听子模块获取到运营管理界面所配置的专网路由信息，生成专网策略，并根据网关设备的网关地址登录网关设备，将专网策略下发至网关设备，所述通过所述NAT插件获取在运营界面配置的专网路由信息的步骤包括：
步骤S31，通过NAT插件接收运营管理界面发送的设置专网的设置请求，根据所述设置请求检测所述虚拟路由是否存在更新操作；
步骤S32，若检测到所述虚拟路由存在更新操作，则调用路由更新接口获取专网路由信息。
在本实施例中，NAT插件接收到运营管理界面设置专网路由的设置请求后，NAT插件会再启动一个线程，检测虚拟路由是否存在更新操作，若检测到虚拟路由存在相关的更新操作时，则调用update router(更新路由)接口去MQ中获取专网路由信息，并通过NAT 插件再次自动登录到网关设备在同一个VRF(Virtual Routing Forwarding路由转发表)下配置下发专网路由策略至网关设备。
步骤S30之后，还包括：
步骤S40，获取公网及专网的路由流表，通过SDN控制器下发所述路由流表至所述网关设备，以供网关设备根据所述路由流表选择路由线路进入公网或者专网。
在本实施例中，NAT插件从MQ中获取相关路由数据(包括虚拟路由的路由地址、路由名称等)后，将相关路由数据发送至SDN子模块，并制定相关协议，如OpenFlow，OVSDB或者OF-Config，SDN子模块若接收restful请求，对网关设备下发相关的路由流表，流表中包括公网出口流表和专网出口流表，该路由流表中包括流表优先级、源地址、目的地址、下一跳地址等信息。在虚拟机实现南北向功能时网关设备根据相应的流表来选择公网或者专网路由出局，从而实现在网关设备上公网和专网路由共存的场景，通过以上步骤从VDC的管理系统界面直接可以下发公网和专网的路由信息至网关设备，无需人工登录到网关设备上去配置，即简化VDC的管理维护系统，又对后续整个VDC的网络维护操作大大简化流程。
本实施例提出的基于VDC的路由配置方法，通过在运营管理界面通过虚拟平台创建公网及虚拟路由，将待联通的子网加入到虚拟路由中，然后通过所述虚拟平台的NAT插件登录网关设备，并生成公网策略，将所述公网策略下发至所述网关设备，接着通过所述NAT插件登录网关设备，获取专网的专网路由信息，并基于所述专网路由信息生成专网策略，将所述专网策略下发至所述网关设备，最后获取公网及专网的路由流表，通过SDN控制器下发所述路由流表至所述网关设备，以供网关设备根据所述路由流表选择路由线路进入公网或者专网；实现了通过运营管理界面直接下发公网和专网路由信息至网关设备，无需人工登录到网关设备上去配置，且配置流程简单，方便统一维护。
基于第一实施例，提出本公开基于VDC的路由配置方法的第二实施例，本实施例中，步骤S20之后，还包括：
步骤S50，基于所述NAT插件与网关设备的预设规则生成RT及RD，并将RT及RD发送至所述网关设备。
在本实施例中，通过NAT插件自动登录到网关设备进行公网出口的策略下发，NAT插件根据和网关设备之间预设的规则生成RD(Route-Distinguisher路由区分符)，RD用于标示网关设备上不同租户，其主要作用也就是实现租户之间地址复用，同时NAT插件会在网关设备上创建另外一个重要属性RT(Route-Target路由目标)，RT决定不同租户路由的发送或接收，保证租户间路由的隔离，网关设备依靠RT属性区分不同租户的NAT策略。
本实施例提出的基于VDC的路由配置方法，通过基于所述NAT插件与网关设备的预设 规则生成RT及RD，并将RT及RD发送至所述网关设备；实现了能够根据RD及RT下发策略至对应租户的网关设备。
基于第一实施例，提出本公开基于VDC的路由配置方法的第三实施例，本实施例中，步骤S10之后，还包括：
步骤S60，获取所述公网、虚拟路由及所述子网的网络数据，将所述网络数据关联存储至数据库；
步骤S70，创建远程过程调用服务，通过远程过程调用服务将所述网络数据传递至NAT插件。
在本实施例中，运营管理界面架构创建请求通过API(Application Programming Interface应用程序编程接口)接口发送至虚拟平台，请求虚拟平台创建公网、子网、虚拟路由，在虚拟平台创建公网、子网、虚拟路由，获取公网、子网、虚拟路由的网络数据，该网络数据包括公网、子网及虚拟路由的网络地址、名称、ID等，获取到这些网络数据时，将网络数据关联存储至数据库，创建RPC(Remote Procedure Calling远程过程调用)-server，通过RPC-server将该网络数据传递至NAT插件。
本实施例提出的基于VDC的路由配置方法，通过获取所述公网、虚拟路由及所述子网的网络数据，将所述网络数据关联存储至数据库，然后创建远程过程调用服务，通过远程过程调用服务将所述网络数据传递至NAT插件；实现了将网络数据传递至NAT插件，从而NAT插件能够根据网络数据登录网关设备下发公网策略。
基于第一实施例，提出本公开基于VDC的路由配置方法的第四实施例，本实施例中，步骤S70之后，还包括：
步骤S80，通过NAT插件接收用户在运营管理界面的绑定请求，根据所述绑定请求获取所述网络数据中的公网的IP及新建虚拟机的IP；
步骤S90，将新建虚拟机的IP与所述公网的IP的绑定。
在本实施例中，用户在运营管理界面新建虚拟机，将虚拟机与公网进行绑定，触发绑定指令，通过NAT插件接收用户在运营管理界面的绑定请求，根据绑定请求获取新建虚拟机的IP及公网的IP，将新建虚拟机遇公网进行绑定，在NAT插件接收到运营管理界面的绑定公网的IP的RESTful请求时，首先调用循环函数去MQ中获取接口网络的接口地址、网关地址，并将获取到的数据进行保存，并记录保存好相关信息(网络地址、日志信息)，同时指示相关driver(驱动)去执行路由操作，如：创建路由、编辑路由、删除路由等
本实施例提出的基于VDC的路由配置方法，通过NAT插件接收用户在运营管理界面的绑定请求，根据所述绑定请求获取所述网络数据中的公网的IP及新建虚拟机的IP，然后将新 建虚拟机的IP与所述公网的IP的绑定；实现了能够根据公网的IP下发公网路由策略。
此外，本公开实施例还提供一种基于VDC的路由配置装置。
参照图3，图3为本公开基于VDC的路由配置装置第一实施例的功能模块示意图。
本公开基于VDC的路由配置装置为虚拟装置，存储于图1所示基于VDC的路由配置设备的存储器1005中，用于实现基于VDC的路由配置程序的所有功能：在运营管理界面通过虚拟平台创建公网及虚拟路由，将待联通的子网加入到虚拟路由中；通过所述虚拟平台的NAT插件获取公网策略，并自动登录网关设备，将所述公网策略下发至所述网关设备；通过所述NAT插件获取在运营界面配置的专网路由信息，基于所述专网路由信息生成专网路由策略，将所述专网策略下发至所述网关设备；将所述公网策略及所述专网策略发送至SDN控制器，基于所述公网策略及所述专网策略通过SDN控制器下发路由流表至所述网关设备，以供网关设备根据所述路由流表选择路由线路进入公网或者专网。
在一个实施例中，本实施例中，所述基于VDC的路由配置装置包括：创建模块，用于在运营管理界面通过虚拟平台创建公网及虚拟路由，将待联通的子网加入到虚拟路由中；第一策略下发模块，用于通过所述虚拟平台的NAT插件获取公网策略，并自动登录网关设备，将所述公网策略下发至所述网关设备；第二策略下发模块，用于通过所述NAT插件获取在运营界面配置的专网路由信息，基于所述专网路由信息生成专网路由策略，将所述专网策略下发至所述网关设备；流表下模块，用于将所述公网策略及所述专网策略发送至SDN控制器，基于所述公网策略及所述专网策略通过SDN控制器下发路由流表至所述网关设备，以供网关设备根据所述路由流表选择路由线路进入公网或者专网。
在一个实施例中，该创建模块101还用于：在运营管理界面通过虚拟平台创建公网及虚拟路由，获取所述虚拟路由的关健属性，确定所述关键属性是否正确；若所述关键属性正确，则将待联通的子网加入到虚拟路由中。
在一个实施例中，该第一策略下发模块102还用于：通过NAT插件调用预设函数获取消息队列中的网络信息，并将所述网络信息保存至所述NAT插件的子模块中，并基于所述网络信息生成公网策略；获取用户在运营管理界面的相关操作的操作指令，在所述子模块中获取所述网络信息，并基于所述网络信息调用所述操作指令对应的驱动执行所述操作指令对应的操作；获取网络信息中的网关地址，基于所述网关地址通过NAT插件登录所述网关设备，将所述公网策略发送至所述网关设备。
在一个实施例中，该第一策略下发模块102还用于：通过NAT插件接收运营管理界面发送的设置专网的设置请求，根据所述设置请求检测所述虚拟路由是否存在更新操作；若检测到所述虚拟路由存在更新操作，则调用路由更新接口获取所述专网路由信息。
在一个实施例中，该第二策略103下发模块还用于：生成基于所述NAT插件与网关设备的预设规则生成RT及RD，并将RT及RD发送至所述网关设备。
在一个实施例中，该基于VDC的路由配置装置还包括：获取模块，用于获取所述公网、虚拟路由及所述子网的网络数据，将所述网络数据关联存储至数据库；传递模块，用于创建远程过程调用服务，通过远程过程调用服务将所述网络数据传递至NAT插件。
在一个实施例中，该基于VDC的路由配置装置还包括绑定模块，用于：通过NAT插件接收用户在运营管理界面的绑定请求，根据所述绑定请求获取所述网络数据中的公网的IP及新建虚拟机的IP；将新建虚拟机的IP与所述公网的IP的绑定。
其中，上述基于VDC的路由配置的处理装置中各个模块的功能实现与上述基于VDC的路由配置方法实施例中各步骤相对应，其功能和实现过程在此处不再一一赘述。
此外，本公开实施例还提供一种可读存储介质。
本公开可读存储介质上存储有基于VDC的路由配置程序，其中所述基于VDC的路由配置程序被处理器执行时，实现如上述的基于VDC的路由配置方法的步骤。
其中，基于VDC的路由配置的处理程序被执行时所实现的方法可参照本公开基于VDC的路由配置的处理方法的各个实施例，此处不再赘述。
本公开提供了一种可读存储介质，所述可读存储介质存储有一个或者一个以上程序，所述一个或者一个以上程序还可被一个或者一个以上的处理器执行以用于实现上述基于VDC的路由配置方法各实施例中的步骤。
本方案无需人工登录到网关设备上去配置，且配置流程简单，方便统一维护。本公开提供一种基于VDC的路由配置方法、装置、设备及可读存储介质，本公开通过在运营管理界面通过虚拟平台创建公网及虚拟路由，将待联通的子网加入到虚拟路由中，然后通过所述虚拟平台的NAT插件获取公网策略，并自动登录网关设备，将所述公网策略下发至所述网关设备，接着通过所述NAT插件获取在运营界面配置的专网路由信息，基于所述专网路 由信息生成专网路由策略，将所述专网策略下发至所述网关设备，最后将所述公网策略及所述专网策略发送至SDN控制器，基于所述公网策略及所述专网策略通过SDN控制器下发路由流表至所述网关设备，以供网关设备根据所述路由流表选择路由线路进入公网或者专网；实现了通过运营管理界面直接下发公网和专网路由信息至网关设备，无需人工登录到网关设备上去配置，且配置流程简单，方便统一维护。
还需要说明的是，在本文中，术语“包括”、“包含”或者其任何其他变体意在涵盖非排他性的包含，从而使得包括一系列要素的过程、方法、物品或者装置不仅包括那些要素，而且还包括没有明确列出的其他要素，或者是还包括为这种过程、方法、物品或者装置所固有的要素。在没有更多限制的情况下，由语句“包括一个……”限定的要素，并不排除在包括该要素的过程、方法、物品或者装置中还存在另外的相同要素。
上述本公开实施例序号仅仅为了描述，不代表实施例的优劣。
通过以上的实施方式的描述，本领域的技术人员可以清楚地了解到上述实施例方法可借助软件加必需的通用硬件平台的方式来实现，当然也可以通过硬件，但很多情况下前者是更佳的实施方式。基于这样的理解，本公开的技术方案本质上或者说对一些情况做出贡献的部分可以以软件产品的形式体现出来，该计算机软件产品存储在如上所述的一个可读存储介质(如ROM/RAM、磁碟、光盘)中，包括若干指令用以使得一台终端设备(可以是手机，计算机，服务器，或者网络设备等)执行本公开各个实施例所述的方法。
以上所述仅为本公开的优选实施例，并非因此限制本公开的专利范围，凡是在本公开的构思下，利用本公开说明书及附图内容所作的等效结构变换，或直接/间接运用在其他相关的技术领域均包括在本公开的专利保护范围内。

Claims (10)

  1. 一种基于VDC虚拟数据中心的路由配置方法，其中，所述基于VDC的路由配置方法包括以下步骤：
    在运营管理界面通过虚拟平台创建公网及虚拟路由，将待联通的子网加入到虚拟路由中；
    通过所述虚拟平台的NAT插件获取公网策略，并自动登录网关设备，将所述公网策略下发至所述网关设备；
    通过所述NAT插件获取在运营界面配置的专网路由信息，基于所述专网路由信息生成专网路由策略，将所述专网策略下发至所述网关设备；
    将所述公网策略及所述专网策略发送至SDN控制器，基于所述公网策略及所述专网策略通过SDN控制器下发路由流表至所述网关设备，以供网关设备根据所述路由流表选择路由线路进入公网或者专网。
  2. 如权利要求1所述的基于VDC的路由配置方法，其中，所述在运营管理界面通过虚拟平台创建公网及虚拟路由，将待联通的子网加入到虚拟路由中的步骤包括：
    在运营管理界面通过虚拟平台创建公网及虚拟路由，获取所述虚拟路由的关健属性，确定所述关键属性是否正确；
    若所述关键属性正确，则将待联通的子网加入到虚拟路由中。
  3. 如权利要求1所述的基于VDC的路由配置方法，其中，所述通过所述虚拟平台的NAT插件获取公网策略，并自动登录网关设备的步骤包括：
    通过NAT插件调用预设函数获取消息队列中的网络信息，并将所述网络信息保存至所述NAT插件的子模块中，并基于所述网络信息生成公网策略；
    获取用户在运营管理界面的相关操作的操作指令，在所述子模块中获取所述网络信息，并基于所述网络信息调用所述操作指令对应的驱动执行所述操作指令对应的操作；
    获取网络信息中的网关地址，基于所述网关地址通过NAT插件登录所述网关设备。
  4. 如权利要求1所述的基于VDC的路由配置方法，其中，所述通过所述NAT插件获取在运营界面配置的专网路由信息的步骤包括：
    通过NAT插件接收运营管理界面发送的设置专网的设置请求，根据所述设置请求检测所述虚拟路由是否存在更新操作；
    若检测到所述虚拟路由存在更新操作，则调用路由更新接口获取所述专网路由信息。
  5. 如权利要求1所述的基于VDC的路由配置方法，其中，所述通过所述虚拟平台的NAT插件获取公网策略，并自动登录网关设备，将所述公网策略下发至所述网关设备的步骤之后，所述基于VDC的路由配置方法还包括：
    基于所述NAT插件与网关设备的预设规则生成RT及RD，并将RT及RD发送至所述网关设备。
  6. 如权利要求1所述的基于VDC的路由配置方法，其中，所述在运营管理界面通过虚拟平台创建公网及虚拟路由，将待联通的子网加入到虚拟路由中的步骤之后，所述基于VDC的路由配置方法还包括：
    获取所述公网、虚拟路由及所述子网的网络数据，将所述网络数据关联存储至数据库；
    创建远程过程调用服务，通过远程过程调用服务将所述网络数据传递至NAT插件。
  7. 如权利要求6所述的基于VDC的路由配置方法，其中，所述创建RPC，通过RPC将所述网络数据传递至NAT插件的步骤之后，所述基于VDC的路由配置方法还包括：
    通过NAT插件接收用户在运营管理界面的绑定请求，根据所述绑定请求获取所述网络数据中的公网的IP及新建虚拟机的IP；
    将新建虚拟机的IP与所述公网的IP的绑定。
  8. 一种基于VDC的路由配置装置，其中，所述基于VDC的路由配置装置包括：
    创建模块，用于在运营管理界面通过虚拟平台创建公网及虚拟路由，将待联通的子网加入到虚拟路由中；
    第一策略下发模块，用于通过所述虚拟平台的NAT插件获取公网策略，并自动登录网关设备，将所述公网策略下发至所述网关设备；
    第二策略下发模块，用于通过所述NAT插件获取在运营界面配置的专网路由信息，基于所述专网路由信息生成专网路由策略，将所述专网策略下发至所述网关设备
    Figure PCTCN2019120285-appb-100001
    流表下发模块，用于将所述公网策略及所述专网策略发送至SDN控制器，基于所述公网策略及所述专网策略通过SDN控制器下发路由流表至所述网关设备，以供网关设备根据所述路由流表选择路由线路进入公网或者专网。
  9. 一种基于VDC的路由配置设备，其中，所述基于VDC的路由配置设备包括处理器、存储器、以及存储在所述存储器上并可被所述处理器执行的基于VDC的路由配置程序，其 中所述基于VDC的路由配置程序被所述处理器执行时，实现如权利要求1至7中任一项所述的基于VDC的路由配置方法的步骤。
  10. 一种可读存储介质，其中，所述可读存储介质上存储有基于VDC的路由配置程序，其中所述基于VDC的路由配置程序被处理器执行时，实现如权利要求1至7中任一项所述的基于VDC的路由配置方法的步骤。
PCT/CN2019/120285 2018-12-17 2019-11-22 基于vdc的路由配置方法、装置、设备及可读存储介质 WO2020125320A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201811546880.7A CN111327531B (zh) 2018-12-17 2018-12-17 基于vdc的路由配置方法、装置、设备及可读存储介质
CN201811546880.7 2018-12-17

Publications (1)

Publication Number Publication Date
WO2020125320A1 true WO2020125320A1 (zh) 2020-06-25

Family

ID=71100191

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2019/120285 WO2020125320A1 (zh) 2018-12-17 2019-11-22 基于vdc的路由配置方法、装置、设备及可读存储介质

Country Status (2)

Country Link
CN (1) CN111327531B (zh)
WO (1) WO2020125320A1 (zh)

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113328942A (zh) * 2021-04-14 2021-08-31 新华三大数据技术有限公司 一种配置下发方法及装置、计算机设备
CN114301665A (zh) * 2021-12-27 2022-04-08 山石网科通信技术股份有限公司 数据处理方法及装置
CN114301838A (zh) * 2021-12-31 2022-04-08 锐捷网络股份有限公司 一种流表优化、报文转发的方法、网络、设备及存储介质
CN114844855A (zh) * 2022-04-24 2022-08-02 京东科技信息技术有限公司 一种网络互通访问策略的生成方法和装置

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN112929210B (zh) * 2021-01-25 2023-04-18 城云科技（中国）有限公司 在WebFlux框架搭建的网关路由应用插件的方法、系统及其应用
CN114039813B (zh) * 2021-11-08 2023-07-04 北京天融信网络安全技术有限公司 一种虚拟路由配置方法及装置

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106411735A (zh) * 2016-10-18 2017-02-15 杭州华三通信技术有限公司 一种路由配置方法及装置
CN107104871A (zh) * 2016-02-22 2017-08-29 中兴通讯股份有限公司 子网互通方法和装置
CN108737272A (zh) * 2017-04-19 2018-11-02 江南大学 一种云计算中高性能路由转发方法
CN108880844A (zh) * 2017-05-12 2018-11-23 中兴通讯股份有限公司 一种网络拓扑建构的方法和装置

Family Cites Families (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7631086B2 (en) * 2003-09-30 2009-12-08 Onlex Technologies, Inc. Virtual dedicated connection system and method
CN100518138C (zh) * 2005-04-12 2009-07-22 华为技术有限公司 实现虚拟专用网的方法
CN103746997A (zh) * 2014-01-10 2014-04-23 浪潮电子信息产业股份有限公司 一种云计算中心网络安全解决方案
CN106487695B (zh) * 2015-08-25 2019-10-01 华为技术有限公司 一种数据传输方法、虚拟网络管理装置及数据传输系统
CN105610675B (zh) * 2016-01-28 2019-05-10 浪潮(北京)电子信息产业有限公司 一种虚拟vpn网关的创建方法及装置

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN107104871A (zh) * 2016-02-22 2017-08-29 中兴通讯股份有限公司 子网互通方法和装置
CN106411735A (zh) * 2016-10-18 2017-02-15 杭州华三通信技术有限公司 一种路由配置方法及装置
CN108737272A (zh) * 2017-04-19 2018-11-02 江南大学 一种云计算中高性能路由转发方法
CN108880844A (zh) * 2017-05-12 2018-11-23 中兴通讯股份有限公司 一种网络拓扑建构的方法和装置

Cited By (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113328942A (zh) * 2021-04-14 2021-08-31 新华三大数据技术有限公司 一种配置下发方法及装置、计算机设备
CN113328942B (zh) * 2021-04-14 2022-04-01 新华三大数据技术有限公司 一种配置下发方法及装置、计算机设备
CN114301665A (zh) * 2021-12-27 2022-04-08 山石网科通信技术股份有限公司 数据处理方法及装置
CN114301838A (zh) * 2021-12-31 2022-04-08 锐捷网络股份有限公司 一种流表优化、报文转发的方法、网络、设备及存储介质
CN114844855A (zh) * 2022-04-24 2022-08-02 京东科技信息技术有限公司 一种网络互通访问策略的生成方法和装置
CN114844855B (zh) * 2022-04-24 2024-05-17 京东科技信息技术有限公司 一种网络互通访问策略的生成方法和装置

Also Published As

Publication number Publication date
CN111327531A (zh) 2020-06-23
CN111327531B (zh) 2022-08-02

Similar Documents

Publication Publication Date Title
WO2020125320A1 (zh) 基于vdc的路由配置方法、装置、设备及可读存储介质
US10862852B1 (en) Resolution of domain name requests in heterogeneous network environments
US9900263B2 (en) Non-overlay resource access in datacenters using overlay networks
CN115918139A (zh) 网络切片的主动保证
US10320666B2 (en) Method and device for processing routing status and/or policy information
WO2018006704A1 (zh) 公网ip分配方法、装置以及虚拟化数据中心系统
CN109831548B (zh) 虚拟内容分发网络vCDN节点建立方法及服务器
WO2016180181A1 (zh) 业务功能的部署方法及装置
US11595393B2 (en) Role-based access control policy auto generation
US9590853B1 (en) Configuration of applications for distributed computing systems
CN111371664B (zh) 一种虚拟专用网络接入方法及设备
EP3142306B1 (en) Openflow communication method, system, controller, and service gateway
WO2017143695A1 (zh) 一种子网互通方法和装置
CN108063761A (zh) 网络处理方法、云平台和软件定义网络sdn控制器
CN116633775B (zh) 一种多容器网络接口的容器通信方法及系统
US20230061080A1 (en) Creating roles and controlling access within a computer network
US11075792B2 (en) Scalable and robust network management for cloud-based NAT environments
WO2021031465A1 (zh) 一种基于sd-wan的设备认证方法及系统
WO2020029793A1 (zh) 一种上网行为管理系统、设备及方法
US7805733B2 (en) Software implementation of hardware platform interface
US11784874B2 (en) Bulk discovery of devices behind a network address translation device
US20230094033A1 (en) Decentralized software upgrade image distribution for network device upgrades
US11968269B1 (en) Hybrid tag based virtual private network with scalable next hop convergence
US11916775B1 (en) Multi-tenant cloud native control plane system
US11258720B2 (en) Flow-based isolation in a service network implemented over a software-defined network

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 19898760

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

32PN Ep: public notification in the ep bulletin as address of the adressee cannot be established

Free format text: NOTING OF LOSS OF RIGHTS PURSUANT TO RULE 112(1) EPC (EPO FORM 1205A DATED 17/11/2021)

122 Ep: pct application non-entry in european phase

Ref document number: 19898760

Country of ref document: EP

Kind code of ref document: A1