WO2021017590A1 - 一种实现dci三层通信的方法、系统及第一gw - Google Patents

一种实现dci三层通信的方法、系统及第一gw Download PDF

Info

Publication number
WO2021017590A1
WO2021017590A1 PCT/CN2020/091374 CN2020091374W WO2021017590A1 WO 2021017590 A1 WO2021017590 A1 WO 2021017590A1 CN 2020091374 W CN2020091374 W CN 2020091374W WO 2021017590 A1 WO2021017590 A1 WO 2021017590A1
Authority
WO
WIPO (PCT)
Prior art keywords
host
leaf
domain
vxlan tunnel
route
Prior art date
Application number
PCT/CN2020/091374
Other languages
English (en)
French (fr)
Inventor
赵子慧
Original Assignee
中兴通讯股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 中兴通讯股份有限公司 filed Critical 中兴通讯股份有限公司
Publication of WO2021017590A1 publication Critical patent/WO2021017590A1/zh

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00Data switching networks
    • H04L12/28Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/46Interconnection of networks
    • H04L12/4641Virtual LANs, VLANs, e.g. virtual private networks [VPN]
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00Data switching networks
    • H04L12/28Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/46Interconnection of networks
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00Data switching networks
    • H04L12/28Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/46Interconnection of networks
    • H04L12/4633Interconnection of networks using encapsulation techniques, e.g. tunneling
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00Data switching networks
    • H04L12/66Arrangements for connecting between networks having differing types of switching systems, e.g. gateways

Definitions

  • the embodiment of the present invention relates to, but is not limited to, the DCI (Data Center Interconnection, data center interconnection) technology, and more specifically relates to a method and system for realizing data center interconnection DCI three-layer communication, and a first edge device gateway GW.
  • DCI Data Center Interconnection, data center interconnection
  • VXLAN Virtual eXtensible Local Area Network, Scalable Virtual Local Area Network
  • IP Internet Protocol, Internet Protocol
  • MAC Media Access Control in User Datagram Protocol
  • VPN virtual private network, virtual private network
  • VXLAN can provide interconnection functions for scattered physical sites based on existing service providers or enterprise IP networks. It is mainly used in data center networks.
  • the original VXLAN solution did not define the control plane, but manually configure the VXLAN tunnel. This method is relatively simple to implement, but it will make network expansion difficult.
  • EVPN Ethernet Virtual Private Network, Ethernet Virtual Private Network
  • the control plane of EVPN uses BGP (Border Gateway Protocol) technology, and the data forwarding plane uses VXLAN technology.
  • EVPN refers to the mechanism of BGP/MPLS IP VPN (Multi-Protocol Label Switching Internet Protocol virtual private network, Multi-Protocol Label Switching Internet Protocol Virtual Private Network), and defines several new BGP EVPN routes by extending the BGP protocol. Publish routes to realize automatic discovery and host address learning of VTEP (VXLAN Tunnel End Point, scalable virtual local area network tunnel endpoint).
  • VTEP VXLAN Tunnel End Point, scalable virtual local area network tunnel endpoint
  • the embodiment of the present invention provides a method for realizing data center interconnection DCI three-layer communication, which is applied to a scalable virtual local area network (VXLAN) composed of a first data center and a second data center.
  • the first data center includes The first edge device gateway GW and the first branch Leaf, the first GW and the first Leaf are connected through a first scalable virtual local area network VXLAN tunnel established based on the Ethernet virtual private network EVPN, the first Leaf The first host is also connected;
  • the second data center includes a second edge device gateway GW and a second Leaf, and the second GW and the second Leaf are connected through a second VXLAN tunnel established based on EVPN, the The second Leaf is also connected to a second host; the first GW and the second GW are connected through a VXLAN tunnel X established based on EVPN; the method includes:
  • the first GW receives the second packet in the second data center from the second GW through the VXLAN tunnel X; the destination address of the second packet is the address of the first host;
  • the first GW sends to the first Leaf through the first VXLAN tunnel, so that the first Leaf sends the second packet to the first host.
  • the embodiment of the present invention also provides a first edge device gateway GW, which is applied to a first data center.
  • the first data center includes a first edge device gateway GW and a first branch Leaf.
  • the first GW and the The first leaves are connected through a first scalable virtual local area network VXLAN tunnel established based on an Ethernet virtual private network EVPN, and the first leaves are also connected to a first host;
  • the first GW includes:
  • the establishment unit is configured to establish a first scalable virtual local area network VXLAN tunnel based on EVPN with the first Leaf, and establish a VXLAN tunnel X based on EVPN with the second edge device gateway GW of the second data center.
  • the embodiment of the present invention also provides a system for realizing data center interconnection DCI three-layer communication, which is applied to a scalable virtual local area network (VXLAN) composed of a first data center and a second data center.
  • VXLAN virtual local area network
  • the first data center includes a first edge
  • the first GW and the first Leaf are connected through a first scalable virtual local area network VXLAN tunnel established based on the Ethernet virtual private network EVPN.
  • the first Leaf is also connected to the first leaf.
  • the second data center includes a second edge device gateway GW and a second Leaf, the second GW and the second Leaf are connected through a second VXLAN tunnel established based on EVPN, the second Leaf A second host is also connected; the first GW and the second GW are connected through a VXLAN tunnel X established based on EVPN; the system includes:
  • the first GW is configured to establish the first VXLAN tunnel with the first Leaf based on EVPN;
  • the second GW is configured to establish the second VXLAN tunnel with the second Leaf based on EVPN;
  • the first GW and the second GW are also set to establish the VXLAN tunnel X based on EVPN.
  • the embodiment of the present invention provides a solution for the three-layer mutual communication between different data centers, which solves the problem that it is difficult to realize the three-layer intercommunication between the data centers.
  • FIG. 1 is a schematic flowchart of a method for implementing three-layer communication of data center interconnection DCI according to an embodiment of the present invention
  • FIG. 2 is a schematic diagram of the networking of a DCI three-layer interworking system provided by an embodiment of the present invention
  • Figure 3 is a schematic diagram of EVPN configuration information on Leaf1, Leaf2, Leaf3, and Leaf4 in an embodiment of the present invention
  • FIG. 4 is a schematic diagram of EVPN configuration information on GW1 and GW2 in an embodiment of the present invention
  • FIG. 5 is a schematic diagram of routing policy configuration information of GW1 in an embodiment of the present invention.
  • FIG. 6 is a schematic diagram of routing policy configuration information of GW2 in an embodiment of the present invention.
  • FIG. 7 is a schematic structural diagram of RT2 dual-label host routing advertisement for host 1 of data center A according to an embodiment of the present invention
  • FIG. 8 is a schematic flowchart of RT2 dual-label host route advertisement for host 1 of data center A according to an embodiment of the present invention
  • FIG. 9 is a schematic diagram of the RT2 dual-label host routing advertisement architecture of the host 3 of the data center B according to an embodiment of the present invention.
  • FIG. 10 is a schematic flowchart of RT2 dual-label host routing advertisement for host 3 of data center B according to an embodiment of the present invention
  • FIG. 11 is a schematic diagram of the RT5 network segment route advertisement architecture of data center A according to an embodiment of the present invention.
  • FIG. 12 is a schematic diagram of a flow chart of RT5 network segment route advertisement of data center A according to an embodiment of the present invention
  • FIG. 13 is a schematic diagram of the RT5 network segment route advertisement architecture of data center B according to an embodiment of the present invention.
  • FIG. 14 is a schematic diagram of a flow chart of RT5 network segment route advertisement of data center B according to an embodiment of the present invention.
  • 15 is a schematic diagram of the structure of the host 1 of the data center A forwarded to the host 3 of the data center B according to an embodiment of the present invention
  • 16 is a schematic diagram of the process of forwarding a message from the host 1 of the data center A to the host 3 of the data center B according to an embodiment of the present invention
  • FIG. 17 is a schematic diagram of the architecture of forwarding packets of the host 3 of the data center B to the host 1 of the data center A according to an embodiment of the present invention
  • FIG. 18 is a schematic diagram of the process of forwarding a message from the host 3 of the data center B to the host 1 of the data center A according to an embodiment of the present invention
  • FIG. 19 is a schematic structural diagram of a first edge device gateway GW provided by this embodiment.
  • Fig. 20 is a schematic structural diagram of a system for realizing three-layer communication of data center interconnection DCI provided by an embodiment.
  • EVPN can simultaneously publish Layer 2 MAC and Layer 3 routing information
  • the embodiment of the present invention establishes VXLAN tunnels inside and between the two data centers based on EVPN to form a distributed gateway to realize communication between VMs (Virtual Machines) in the data centers and between VMs in different data centers.
  • VMs Virtual Machines
  • Fig. 1 is a schematic flow chart of a method for implementing data center interconnection DCI three-layer communication provided by an embodiment of the present invention.
  • the method is applied to a scalable virtual local area network (VXLAN) composed of a first data center and a second data center.
  • the first data center includes a first edge device gateway GW and a first branch Leaf.
  • the first GW and the first Leaf are connected through a first scalable virtual local area network VXLAN tunnel established based on the Ethernet virtual private network EVPN,
  • the first Leaf is also connected to the first host;
  • the second data center includes a second edge device gateway GW and a second Leaf, and a second VXLAN established based on EVPN is used between the second GW and the second Leaf.
  • Tunnel connection the second Leaf is also connected to a second host; the first GW and the second GW are connected through a VXLAN tunnel X established based on EVPN;
  • the method includes:
  • Step 101 The first GW receives a second packet in the second data center from the second GW through the VXLAN tunnel X; the destination address of the second packet is that of the first host address;
  • Step 102 The first GW sends to the first Leaf through the first VXLAN tunnel, so that the first Leaf sends the second packet to the first host.
  • the second GW receives the first packet in the first data center from the first GW through the VXLAN tunnel X; the destination address of the first packet is the address of the second host ;
  • the second GW sends to the second Leaf through the second VXLAN tunnel, so that the second Leaf sends the first packet to the second host.
  • the method further includes:
  • a VXLAN tunnel X is established between the first GW and the second GW based on EVPN.
  • the method further includes:
  • Configuring EVPN on the first leaf and the second leaf includes:
  • the first Border Gateway Protocol BGP configuration information is used to establish intra-domain BGP EVPN neighbors between Leaf and GW, automatically establish the first VXLAN tunnel and the second VXLAN tunnel, and publish EVPN routes;
  • the first VPLS configuration information is used to create a virtual private LAN service VPLS instance, create an access controller AC interface, map the integrated routing and bridge IRB interface, and configure the Layer 2 VXLAN in the domain Network identifier label L2 vni-label and intra-domain L2 routing table RT;
  • the first VRF configuration information is used to configure the Layer 3 VXLAN network identifier label L3 vni-label and L3 RT in the domain
  • Configuring EVPN on the first GW and the second GW includes:
  • Second BGP configuration information is used to establish inter-domain BGP EVPN neighbors between the first GW and the second GW, automatically establish a VXLAN tunnel X, and EVPN route distribution;
  • the second VPLS configuration information is used to create a VPLS instance, map an IRB interface, configure the intra-domain L2 vni-label and intra-domain L2 RT;
  • the second VRF configuration information is used to configure intra-domain L3 vni-label, inter-domain L3 vni-label, intra-domain L3 RT, inter-domain L3 RT, and configure routing policies;
  • configuring a routing policy on the first GW includes:
  • Configure the access control list ACL configuration information including: defining the ACL within the domain, matching the first leaf of the BGP neighbor in the domain; defining the inter-domain ACL, matching the second GW2 of the inter-domain BGP neighbor;
  • Create the first routing policy rule including: match inter-domain ACL, match RT5 route, modify L3 RT to inter-domain L3 RT, and modify L3 vni-label to inter-domain L3 vni-label;
  • Create a second routing policy rule including: matching ACL within the domain, matching RT5 routing, and modifying L3 RT to L3 RT within the domain;
  • Configuring the routing policy on the second GW includes:
  • Configure the access control list ACL configuration information including: define the ACL within the domain to match the second leaf of the BGP neighbor in the domain; define the inter-domain ACL to match the first GW2 of the inter-domain BGP neighbor;
  • Create the first routing policy rule including: match inter-domain ACL, match RT5 route, modify L3 RT to inter-domain L3 RT, and modify L3 vni-label to inter-domain L3 vni-label;
  • Create a second routing policy rule including: matching the ACL within the domain, matching RT5 routing, and modifying L3 RT to L3 RT within the domain.
  • the method further includes:
  • the first GW advertises the first host route RT2 to the second GW so that the second GW learns the host route of the first host; the first RT2 is received by the first Leaf The host route of the first host generated after the first address resolution protocol ARP request sent by the first host;
  • the first GW advertises the first integrated routing and bridging IRB direct network segment route to the second GW through the first RT5 route, so that the second GW learns the first RT5 route and sends the first RT5 route to the second GW.
  • RT5 notifies the second Leaf.
  • the method further includes:
  • the second GW advertises the second RT2 route to the first GW so that the first GW learns the host route of the second host; the second RT2 is received by the second Leaf The host route of the second host generated after the second ARP request sent by the host;
  • the second GW advertises the second IRB directly connected network segment route to the first GW through the second RT5 route, so that the first GW learns the second RT5 route and advertises the second RT5 route to the The first Leaf.
  • the first GW receives the second packet inside the second data center from the second GW through the VXLAN tunnel X established based on EVPN with the second GW, and communicates with the first Leaf And sending the first VXLAN tunnel established based on EVPN to the first Leaf, so that the first Leaf sends the second packet to the first host, including:
  • the second leaf receives the second message sent by the second host, finds the route of the first RT5 network segment after decapsulation, and sends it to the second GW through the second VXLAN tunnel after re-encapsulation;
  • the destination address carried in the second packet is the address of the first host, and the source address is the address of the second host;
  • the destination address of the second packet after the second Leaf re-encapsulation is the second VXLAN
  • the destination address of the tunnel, the source address is the source address of the second VXLAN tunnel, the vni-label is the L3 vni-label in the domain, and the payload is the original message of the second message;
  • the second GW After receiving the first message, the second GW decapsulates, finds the first RT2 host route, and then re-encapsulates the message and sends it to the first GW through the VXLAN tunnel X;
  • the destination address of the second packet re-encapsulated by the second GW is the destination address of the VXLAN tunnel X
  • the source address is the source address of the VXLAN tunnel X
  • the vni-label is the L3 vni-label between the domains.
  • the charge is the original message of the second message
  • the first GW After receiving the second packet, the first GW decapsulates, finds the first RT2 host route, and sends the reencapsulated packet to the first Leaf through the first VXLAN tunnel;
  • the destination address of the second packet re-encapsulated by the first GW is the destination address of the first VXLAN tunnel
  • the source address is the source address of the first VXLAN tunnel
  • the vni-label is the L3 vni-label in the domain.
  • the charge is the original message of the second message
  • the first leaf After receiving the first message, the first leaf decapsulates, finds the ARP table entry of the first host according to the destination address of the original message of the second message, and sends the original message to the first host with the destination address Is the address of the first host, and the source address is the address of the second host.
  • the second GW receives the first packet in the first data center from the first GW through the VXLAN tunnel X; through the second VXLAN tunnel established with the second Leaf based on EVPN Sending to the second leaf so that the second leaf can send the first message to the second host includes:
  • the first Leaf receives the first message sent by the first host, finds the second RT5 network segment route after decapsulation, and then re-encapsulates it and sends it to the first GW through the first VXLAN tunnel,
  • the destination address carried in the first packet is the address of the second host, and the source address is the address of the first host;
  • the destination address of the first packet after the first Leaf re-encapsulation is the first VXLAN
  • the destination address of the tunnel, the source address is the source address of the first VXLAN tunnel, the vni-label is the L3 vni-label in the domain, and the payload is the original message of the first message;
  • the first GW After receiving the first message, the first GW decapsulates, finds the second RT2 host route, and then re-encapsulates the message and sends it to the second GW through the VXLAN tunnel X,
  • the destination address of the first packet re-encapsulated by the first GW is the destination address of the VXLAN tunnel X
  • the source address is the source address of the VXLAN tunnel X
  • the vni-label is the L3 vni-label between the domains.
  • the second GW After receiving the first message, the second GW decapsulates, finds the second RT2 host route, and sends the re-encapsulated message to the second Leaf through the second VXLAN tunnel,
  • the destination address of the first packet after the second GW re-encapsulation is the destination address of the second VXLAN tunnel
  • the source address is the source address of the second VXLAN tunnel
  • the vni-label is the L3 vni-label in the domain.
  • Lotus is the original message of the first message
  • the second leaf After receiving the first message, the second leaf decapsulates, finds the ARP table entry of the second host according to the destination address of the original message of the first message, and sends the original message to the second host with the destination address Is the address of the second host, and the source address is the address of the first host.
  • FIG 2 is a schematic diagram of the networking of a DCI three-layer interworking system provided by an embodiment of the present invention. As shown in Figure 2,
  • VXLAN tunnels are established in the two data centers through EVPN to form a distributed gateway to realize the communication between VMs in the data centers.
  • GW1 GateWay, gateway
  • Leaf1 Branch 1
  • GW1 and Leaf2 establish VXLAN tunnel 2
  • Leaf1 as the gateway of host 1
  • Leaf2 as the gateway of host 2
  • GW2 and Leaf3 establish VXLAN tunnel 3
  • GW2 and Leaf4 establish VXLAN tunnel 4
  • Leaf3 acts as the gateway of host 3
  • Leaf4 acts as the gateway of host 4 to realize the communication between hosts in data center B.
  • a VXLAN tunnel is established between the two data centers to realize the interconnection of different data centers.
  • GW1 and GW2 are edge devices of data center A and data center B, respectively, and VXLAN tunnel X is created by configuring EVPN on GW1 and GW2.
  • GW1 receives the VXLAN message inside data center B from GW2 through VXLAN tunnel X. GW1 decapsulates the VXLAN message first, then re-encapsulates it and sends it to Leaf1 through VXLAN tunnel 1, and sends it to Leaf2 through VXLAN tunnel 2.
  • GW2 receives the VXLAN message in data center A from GW1 through VXLAN tunnel X. GW2 decapsulates the VXLAN message first, then re-encapsulates it and sends it to Leaf3 through VXLAN tunnel 3, and sends it to Leaf4 through VXLAN tunnel 4 to achieve End-to-end VXLAN message bearer for messages across data centers.
  • configuring EVPN on Leaf1, Leaf2, Leaf3, and Leaf4, as shown in Figure 3 includes configuring the following EVPN configuration information:
  • First BGP (Border Gateway Protocol, Border Gateway Protocol) configuration information the first BGP configuration information is used for:
  • Leaf and GW establish intra-domain BGP EVPN neighbors
  • Second VRF (Virtual Routing Forwarding) configuration information where the first VRF configuration information is used for:
  • configuring EVPN on GW1 and GW2, as shown in Figure 4 includes configuring the following EVPN configuration information:
  • the second BGP configuration information where the second BGP configuration information is used for:
  • GW1 and GW2 establish inter-domain BGP EVPN neighbors
  • the routing strategy in the export direction is configured on GW1 and GW2.
  • configuring the routing policy on GW1 includes:
  • the routing policy configuration on GW2 includes:
  • EVPN defines a new sub-address family—EVPN address family under the L2VPN address family of BGP, and adds a new type of NLRI (Network Layer Reachability Information), namely EVPN NLRI.
  • EVPN NLRI defines BGP EVPN routing types. By advertising these routes between EVPN peers, the automatic establishment of VXLAN tunnels and the learning of host addresses can be realized.
  • RT2 Route Type 2, Type 2 routing
  • routes carry host MAC and host IP information.
  • RT2 routing can be used to publish the host MAC and also the host IP address.
  • RT5 (Route Type 5, Type 5 routing) routing-IP prefix routing.
  • RT5 routing carries routing information and is mainly used to advertise routes. It can advertise 32-bit host routes or network segment routes.
  • host 1 sends an arp (Address Resolution Protocol) request
  • Leaf1 generates an arp entry after receiving the arp request from host 1, and generates RT2 dual-label host route Notify to GW1.
  • GW1 advertises this RT2 route to GW2, and GW2 learns the 32-bit host route 100.10.10.1/32 of host 1.
  • the RT2 route received on GW2 is inconsistent with its own L2 RT, and GW2 will not advertise the RT2 route to Leaf3 and Leaf4.
  • both GW1 and GW2 can learn the 32-bit host route of RT2 of host 1, host 2, host 3, and host 4.
  • Leaf1 and Leaf2 cannot learn the RT2 route of host 3 and host 4.
  • Leaf3 and Leaf4 cannot learn the RT2 route of host 1 and host 2.
  • GW1 advertises the IRB directly connected network segment route 100.10.10.0/24 to GW2 through RT5 route.
  • GW2 learns the network segment route of 100.10.10.0/24, and advertises this network segment route to Leaf3 and Leaf4, both Leaf3 and Leaf4 learn The route to the 100.10.10.0/24 network segment.
  • GW1, Leaf1, and Leaf2 also learned the RT5 route of 200.20.20.0/24.
  • FIG. 7 is a schematic diagram of the RT2 dual-label host routing advertisement architecture of the host 1 of the data center A provided in this embodiment.
  • FIG. 8 is a schematic flow chart of the RT2 dual-label host route advertisement of the host 1 of the data center A provided by this embodiment.
  • RT2 dual-label host route advertisement of host 1 includes:
  • Step 801 the host 1 sends an arp request
  • Step 802 After Leaf1 receives the arp request from host 1, it generates RT2 dual-label host route notification to GW1;
  • the RT2 dual-label host routing advertisement carries intra-domain L3 vni-label 1000, intra-domain L3 RT 1000:1, intra-domain L2 vni-label 100, intra-domain L2 RT 100:1, and the next hop is Leaf1.
  • GW1 receives the RT2 route, compares the RT of this route with its own local L3 RT 1000:1, crosses this route to the local corresponding VRF instance, and compares the RT of this route with its own local
  • the L2 RT 100:1 in the domain is also consistent, and the dual-label RT2 route is advertised to GW2;
  • GW1 can learn the host route 100.10.10.1/32 of host 1.
  • step 804 when GW1 advertises the RT2 route to GW2, it modifies the next hop of the RT2 route to itself, and applies the routing strategy to replace L3 vni-label with inter-domain L3 vni-label 888, and replace RT with inter-domain L3 RT 888 :1;
  • GW2 receives the RT2 route, compares the RT of this route with its own local inter-domain L3 RT 888:1, crosses this route to the local corresponding VRF instance, and compares the RT of this route with its own local
  • the L2 RT 200:1 in the domain is inconsistent, and this dual-label RT2 route will not be advertised to Leaf3 and Leaf4.
  • Leaf3 and Leaf4 cannot learn the host route 100.10.10.1/32 of host 1.
  • FIG. 9 is a schematic diagram of the RT2 dual-label host route advertisement architecture of the host 3 of the data center B provided in this embodiment.
  • FIG. 10 is a schematic flow chart of the RT2 dual-label host route advertisement of the host 3 of the data center B according to this embodiment.
  • RT2 dual-label host route advertisement of host 3 includes:
  • Step 1001 the host 3 sends an arp request
  • Step 1002 After Leaf3 receives the arp request from host 3, it generates RT2 dual-label host route notification to GW2;
  • the RT2 dual-label host route carries intra-domain L3 vni-label 2000, intra-domain L3 RT 2000:1, intra-domain L2 vni-label 200, intra-domain L2 RT 200:1, and the next hop is Leaf3.
  • GW2 receives the RT2 route, compares the RT of this route with its own local L3 RT 2000:1, crosses this route to the local corresponding VRF instance, and compares the RT of this route with its own local
  • the L2 RT 200:1 within the domain is also consistent, and the dual-label RT2 route is advertised to GW1;
  • GW2 can learn the host route 200.20.20.1/32 of host 3.
  • Step 1004 When GW2 advertises the RT2 route to GW1, it modifies the next hop of the RT2 route to itself, and applies the routing strategy to replace L3 vni-label with inter-domain L3 vni-label 888, and replace RT with inter-domain L3 RT 888 :1;
  • Step 1005 GW1 receives the RT2 route, compares the RT of this route, and its own local inter-domain L3 RT 888:1, crosses this route to the local corresponding VRF instance, and compares the RT of this route with its own local
  • the L2 RT 100:1 in the domain is inconsistent, and this dual-label RT2 route will not be advertised to Leaf1 and Leaf2.
  • Leaf1 and Leaf2 cannot learn the host route 200.20.20.1/32 of host 3.
  • FIG. 11 is a schematic diagram of the RT5 network segment route advertisement architecture of the data center A provided in this embodiment.
  • FIG. 12 is a schematic diagram of the flow chart of the RT5 network segment route advertisement of the data center A provided in this embodiment.
  • the specific steps of the RT5 network segment route advertisement of data center A include:
  • Step 1201 GW1 advertises the IRB directly connected network segment route 100.10.10.0/24 to GW2 through the RT5 route, changes the next hop of the RT5 route to itself, and applies the routing policy to replace L3 vni-label with inter-domain L3 vni-label 888, replace RT with inter-domain L3 RT 888:1;
  • Step 1202 GW2 receives the RT5 route, compares the RT of this route, and is consistent with its own local inter-domain L3 RT 888:1, and crosses this route to the local corresponding VRF instance;
  • GW2 can learn the network segment route 100.10.10.0/24 of data center A.
  • Step 1203 When GW2 advertises the RT5 route to Leaf3 and Leaf4, it modifies the next hop of the RT5 route to itself, and applies the routing strategy to replace L3 vni-label with intra-domain L3 vni-label 2000, and RT with intra-domain L3 RT 2000 :1.
  • FIG. 13 is a schematic diagram of the RT5 network segment route advertisement architecture of the data center B provided in this embodiment.
  • FIG. 14 is a schematic diagram of the flow of the RT5 network segment route advertisement of the data center B provided by this embodiment.
  • the RT5 network segment route advertisement of data center B includes:
  • Step 1401 GW2 advertises the IRB directly connected network segment route 200.20.20.0/24 to GW1 through RT5 route, changes the next hop of RT5 route to itself, and applies routing policy to replace L3 vni-label with inter-domain L3 vni-label 888, replace RT with inter-domain L3 RT 888:1;
  • Step 1402 GW1 receives the RT5 route, compares the RT of this route, and is consistent with its own local inter-domain L3 RT 888:1, and crosses this route to the local corresponding VRF instance;
  • GW1 can learn the network segment route 200.20.20.0/24 of data center A.
  • step 1403 when GW1 advertises the RT5 route to Leaf1 and Leaf2, it modifies the next hop of the RT5 route to itself, and applies the routing policy to replace L3 vni-label with intra-domain L3 vni-label 1000, and replace RT with intra-domain L3 RT 1000 :1.
  • FIG. 16 is a schematic diagram of the process of forwarding a message from the host 1 of the data center A to the host 3 of the data center B according to this embodiment.
  • the specific steps of forwarding the message of the host 1 of the data center A to the host 3 of the data center B include:
  • step 1601 host 1 sends the original message to the gateway Leaf1, the destination address of the message is the address of host 3 200.20.20.1, and the source address is itself 100.10.10.1;
  • Step 1602 After Leaf1 receives the packet, it finds the RT5 network segment route 200.20.20.0, re-encapsulates the packet and sends it to GW1.
  • the destination address of the packet is the destination address of the VXLAN tunnel in the domain 8.8.8.8, and the source address is the VXLAN tunnel.
  • the source address is 1.1.1.1
  • the vni-label is L3 vni-label 1000 in the domain
  • the payload is the original message sent by host 1.
  • Step 1603 After GW1 receives the VXLAN packet, it decapsulates and finds RT2 host route 200.20.20.1, re-encapsulates the packet and sends it to GW2.
  • the destination address of the packet is the destination address of the inter-domain VXLAN tunnel 9.9.9.9 and the source address. Is the source address of the inter-domain VXLAN tunnel 8.8.8.8, vni-label is the inter-domain L3 vni-label 888, and the payload is the original message sent by host 1;
  • Step 1604 After GW2 receives the VXLAN packet, it decapsulates it, finds RT2 host route 200.20.20.1, re-encapsulates the packet and sends it to Leaf3.
  • the destination address of the packet is the destination address of the VXLAN tunnel in the domain 3.3.3.3
  • the source address is The source address of the VXLAN tunnel in the domain is 9.9.9.9
  • the vni-label is L3 vni-label 2000 in the domain
  • the payload is the original message sent by host 1;
  • Step 1605 After Leaf3 receives the VXLAN packet, it decapsulates it, finds the arp entry of host 3 according to the destination address of the original packet 200.20.20.1, and sends the original packet to host 3, with the destination address being host 3’s address 200.20 .20.1, the source address is the address 100.10.10.1 of host 1.
  • FIG. 18 is a schematic diagram of the flow of forwarding a message from the host 3 of the data center B to the host 1 of the data center A provided in this embodiment.
  • the specific steps for forwarding the message of the host 3 of the data center B to the host 1 of the data center A include:
  • step 1801 the host 3 sends the original message to the gateway Leaf3, the destination address of the message is the address of host 1 100.10.10.1, and the source address is 200.20.20.1;
  • Step 1802 After Leaf3 receives the packet, it finds the RT5 network segment route 100.10.10.0, re-encapsulates the packet and sends it to GW2.
  • the destination address of the packet is the destination address of the VXLAN tunnel in the domain 9.9.9.9, and the source address is the VXLAN tunnel.
  • the source address is 3.3.3.3
  • the vni-label is L3 vni-label 2000 in the domain
  • the payload is the original message sent by host 3.
  • step 1803 after GW2 receives the VXLAN packet, it decapsulates, finds the RT2 host route 100.10.10.1, re-encapsulates the packet and sends it to GW1.
  • the destination address of the packet is the destination address of the inter-domain VXLAN tunnel 8.8.8.8, the source address Is the source address of the inter-domain VXLAN tunnel 9.9.9.9, vni-label is the inter-domain L3 vni-label 888, and the payload is the original message sent by host 3;
  • Step 1804 After GW1 receives the VXLAN packet, it decapsulates, finds the RT2 host route 100.10.10.1, re-encapsulates the packet and sends it to Leaf1.
  • the destination address of the packet is the destination address of the VXLAN tunnel in the domain 1.1.1.1
  • the source address is The source address of the VXLAN tunnel in the domain is 8.8.8.8, the vni-label is the L3 vni-label 1000 in the domain, and the payload is the original message sent by host 3.
  • Step 1805 After Leaf1 receives the VXLAN packet, it decapsulates it, finds the arp entry of host 1 based on the destination address of the original packet 100.10.10.1, and sends the original packet to host 1, with the destination address being the address 100.10 of host 1. .10.1, the source address is the address 200.20.20.1 of host 3.
  • An embodiment of the present invention provides a first edge device gateway GW, which is applied to a first data center, and the first data center includes a first edge device gateway GW and a first branch Leaf connected to a first host;
  • FIG. 19 is a schematic structural diagram of the first edge device gateway GW provided by this embodiment. As shown in Figure 19, the first GW includes:
  • the establishment unit is configured to establish a first scalable virtual local area network VXLAN tunnel based on the Ethernet virtual private network EVPN with the first Leaf, and establish a VXLAN tunnel X based on EVPN with the second edge device gateway GW of the second data center.
  • the first GW also includes:
  • a receiving unit configured to receive a second packet in the second data center from the second GW through the VXLAN tunnel X; the destination address of the second packet is the address of the first host;
  • the sending unit is configured to send to the first Leaf through the first VXLAN tunnel, so that the first Leaf sends the second message to the first host.
  • the first GW also includes:
  • the configuration unit configured to configure EVPN on the first GW, includes:
  • the first BGP configuration information is used to establish inter-domain BGP EVPN neighbors between the first GW and the second GW, automatic establishment of VXLAN tunnel X, and EVPN route distribution;
  • the first VPLS configuration information is used to create a VPLS instance, map an IRB interface, configure an intra-domain L2 vni-label, and configure an intra-domain L2 RT;
  • the first VRF configuration information is used to: configure intra-domain L3 vni-label, inter-domain L3 vni-label, intra-domain L3 RT, inter-domain L3 RT, and configure routing policies;
  • configuring a routing policy on the first GW includes:
  • Configure the access control list ACL configuration information including: defining the ACL within the domain, matching the first leaf of the BGP neighbor in the domain; defining the inter-domain ACL, matching the second GW2 of the inter-domain BGP neighbor;
  • Create the first routing policy rule including: match inter-domain ACL, match RT5 route, modify L3 RT to inter-domain L3 RT, and modify L3 vni-label to inter-domain L3 vni-label;
  • Create a second routing policy rule including: matching the ACL within the domain, matching RT5 routing, and modifying L3 RT to L3 RT within the domain.
  • the first GW also includes:
  • the route announcement unit is configured to receive the first host route RT2 advertised by the first Leaf, and advertise the first RT2 route to the second GW, so that the second GW can learn from the first host Host routing
  • An embodiment of the present invention provides a system for realizing data center interconnection DCI three-layer communication, which is applied to a scalable virtual local area network VXLAN composed of a first data center and a second data center.
  • the first data center includes a first edge
  • the first GW and the first Leaf are connected through a first scalable virtual local area network VXLAN tunnel established based on the Ethernet virtual private network EVPN.
  • the first Leaf is also connected to the first leaf.
  • the second data center includes a second edge device gateway GW and a second Leaf, the second GW and the second Leaf are connected through a second VXLAN tunnel established based on EVPN, the second Leaf A second host is also connected; the first GW and the second GW are connected through a VXLAN tunnel X established based on EVPN.
  • FIG. 20 is a schematic structural diagram of a system for implementing three-layer communication of data center interconnection DCI provided by an embodiment. As shown in Figure 20, the system includes:
  • the first GW is configured to establish a first VXLAN tunnel with the first Leaf based on EVPN;
  • the second GW is set to establish a second VXLAN tunnel based on EVPN with the second Leaf;
  • the first GW and the second GW are also set to establish a VXLAN tunnel X based on EVPN.
  • configuring EVPN on the first leaf and the second leaf includes:
  • the first Border Gateway Protocol BGP configuration information is used to include: establishing intra-domain BGP EVPN neighbors between Leaf and GW, automatically establishing the first VXLAN tunnel and the second VXLAN tunnel, and EVPN route distribution;
  • the first VPLS configuration information is used to: create a virtual private LAN service VPLS instance, create an access controller AC interface, map integrated routing and bridging IRB interfaces, and configure Layer 2 in the domain VXLAN network identifier label L2 vni-label, configure the L2 routing table RT in the domain;
  • the first VRF configuration information is used to configure the Layer 3 VXLAN network identifier label L3 vni-label and L3 RT within the domain
  • Configuring EVPN on the first GW and the second GW includes:
  • Second BGP configuration information is used for: establishing inter-domain BGP EVPN neighbors between the first GW and the second GW, automatic establishment of VXLAN tunnel X, and EVPN route publishing;
  • the second VPLS configuration information is used to: create a VPLS instance, map an IRB interface, configure an intra-domain L2 vni-label, and configure an intra-domain L2 RT;
  • the second VRF configuration information is used to: configure intra-domain L3 vni-label, inter-domain L3 vni-label, intra-domain L3 RT, inter-domain L3 RT, and configure routing policies;
  • configuring a routing policy on the first GW includes:
  • Configure the access control list ACL configuration information including: defining the ACL within the domain, matching the first leaf of the BGP neighbor in the domain; defining the inter-domain ACL, matching the second GW2 of the inter-domain BGP neighbor;
  • Create the first routing policy rule including: match inter-domain ACL, match RT5 route, modify L3 RT to inter-domain L3 RT, and modify L3 vni-label to inter-domain L3 vni-label;
  • Create a second routing policy rule including: matching ACL within the domain, matching RT5 routing, and modifying L3 RT to L3 RT within the domain;
  • Configuring the routing policy on the second GW includes:
  • Configure the access control list ACL configuration information including: define the ACL within the domain to match the second leaf of the BGP neighbor in the domain; define the inter-domain ACL to match the first GW2 of the inter-domain BGP neighbor;
  • Create the first routing policy rule including: match inter-domain ACL, match RT5 route, modify L3 RT to inter-domain L3 RT, and modify L3 vni-label to inter-domain L3 vni-label;
  • Create a second routing policy rule including: matching the ACL within the domain, matching RT5 routing, and modifying L3 RT to L3 RT within the domain.
  • the first GW is also configured to advertise the first host route RT2 to the second GW so that the second GW can learn the host route of the first host;
  • the first RT2 is The host route of the first host generated after the first Leaf receives the first address resolution protocol ARP request sent by the first host;
  • the first GW is further configured to advertise the first integrated routing and bridging IRB directly connected network segment route to the second GW through the first RT5 route, so that the second GW learns the first RT5 route and sends The first RT5 is notified to the second Leaf.
  • the second GW is further configured to advertise the second host route RT2 to the first GW, so that the first GW learns the host route of the second host; the second RT2 is used by the second host 2.
  • the host route of the second host generated after Leaf receives the second ARP request sent by the second host;
  • the second GW is further configured to advertise the route of the second IRB directly connected network segment to the first GW through the second RT5 route, so that the first GW learns the second RT5 route and sends the second RT5 route to the first GW. Announce to the first Leaf.
  • the first GW is further configured to receive the internal data center from the second GW through the scalable virtual local area network VXLAN tunnel X established with the second GW based on the Ethernet virtual private network EVPN
  • the second message; the destination address of the second message is the address of the first host;
  • the second GW is further configured to receive the first packet in the first data center from the first GW through the VXLAN tunnel X; the destination address of the first packet is the first packet 2. The address of the host;
  • the second leaf is specifically set to receive the second message sent by the second host, find the route of the first RT5 network segment after decapsulation, and then send it to the second message through the second VXLAN tunnel after re-encapsulation.
  • the destination address carried in the second packet is the address of the first host, and the source address is the address of the second host;
  • the destination address of the second packet after the second Leaf re-encapsulation is the second VXLAN
  • the destination address of the tunnel, the source address is the source address of the second VXLAN tunnel, the vni-label is the L3 vni-label in the domain, and the payload is the original message of the second message;
  • the second GW is specifically set to decapsulate after receiving the first message, find the first RT2 host route, and then re-encapsulate the message to send to the first GW through the VXLAN tunnel X;
  • the destination address of the second packet re-encapsulated by the second GW is the destination address of the VXLAN tunnel X
  • the source address is the source address of the VXLAN tunnel X
  • the vni-label is the L3 vni-label between the domains.
  • the charge is the original message of the second message
  • the first GW is specifically set to decapsulate after receiving the second message, find the first RT2 host route, and send the reencapsulated message to the first Leaf through the first VXLAN tunnel;
  • the destination address of the second packet re-encapsulated by the first GW is the destination address of the first VXLAN tunnel
  • the source address is the source address of the first VXLAN tunnel
  • the vni-label is the L3 vni-label in the domain.
  • the charge is the original message of the second message
  • the first leaf is specifically set to decapsulate after receiving the first message, find the ARP entry of the first host according to the destination address of the original message of the second message, and send the original message to the first message.
  • the destination address is the address of the first host
  • the source address is the address of the second host.
  • the first leaf is specifically set to receive the first message sent by the first host, find the second RT5 network segment route after decapsulation, and then re-encapsulate it and send it to the first message through the first VXLAN tunnel.
  • One GW is specifically set to receive the first message sent by the first host, find the second RT5 network segment route after decapsulation, and then re-encapsulate it and send it to the first message through the first VXLAN tunnel.
  • the destination address carried in the first packet is the address of the second host, and the source address is the address of the first host;
  • the destination address of the first packet after the first Leaf re-encapsulation is the first VXLAN
  • the destination address of the tunnel, the source address is the source address of the first VXLAN tunnel, the vni-label is the L3 vni-label in the domain, and the payload is the original message of the first message;
  • the first GW is specifically set to decapsulate after receiving the first message, find the second RT2 host route, and then re-encapsulate the message to send to the second GW through the VXLAN tunnel X,
  • the destination address of the first packet re-encapsulated by the first GW is the destination address of the VXLAN tunnel X
  • the source address is the source address of the VXLAN tunnel X
  • the vni-label is the L3 vni-label between the domains.
  • the second GW is specifically set to decapsulate after receiving the first message, find the second RT2 host route, and send the reencapsulated message to the second Leaf through the second VXLAN tunnel,
  • the destination address of the first packet re-encapsulated by the second GW is the destination address of the second VXLAN tunnel
  • the source address is the source address of the second VXLAN tunnel
  • the vni-label is the L3 vni-label in the domain.
  • Lotus is the original message of the first message
  • the second leaf is specifically set to decapsulate after receiving the first message, find the ARP entry of the second host according to the destination address of the original message of the first message, and send the original message to the second For the host, the destination address is the address of the second host, and the source address is the address of the first host.
  • the technical solution provided by the embodiment of the present invention provides a solution for the three-layer communication between different data centers, and solves the problem that it is difficult to realize the three-layer intercommunication between data centers.
  • Such software may be distributed on a computer-readable medium, and the computer-readable medium may include a computer storage medium (or a non-transitory medium) and a communication medium (or a transitory medium).
  • the term computer storage medium includes volatile and non-volatile memory implemented in any method or technology for storing information (such as computer-readable instructions, data structures, program modules, or other data). Sexual, removable and non-removable media.
  • Computer storage media include but are not limited to RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, digital versatile disk (DVD) or other optical disk storage, magnetic cassette, tape, magnetic disk storage or other magnetic storage device, or Any other medium used to store desired information and that can be accessed by a computer.
  • communication media usually contain computer-readable instructions, data structures, program modules, or other data in a modulated data signal such as carrier waves or other transmission mechanisms, and may include any information delivery media .

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

本发明实施例公开了一种实现数据中心互联DCI三层通信的方法、系统及第一GW,其中,该方法应用于第一数据中心和第二数据中心组成的VXLAN,该方法包括:所述第一数据中心的第一边缘设备网关GW通过与所述第二数据中心的第二边缘设备网关GW之间基于EVPN建立的VXLAN隧道X从所述第二GW接收所述第二数据中心内部的第二报文;所述第二报文的目的地址为所述第一主机的地址;通过与连接第一主机的第一Leaf之间基于EVPN建立的第一VXLAN隧道发送给所述第一Leaf,以便所述第一Leaf将所述第二报文发送给所述第一主机。如此,解决了在数据中心之间实现三层互通难度大的问题。

Description

一种实现DCI三层通信的方法、系统及第一GW 技术领域
本发明实施例涉及但不限于DCI(Data Center Interconnection,数据中心互联)技术,更具体地涉及一种实现数据中心互联DCI三层通信的方法、系统及第一边缘设备网关GW。
背景技术
VXLAN(Virtual eXtensible Local Area Network,可扩展虚拟局域网络)是基于IP(Internet Protocol,互联网协议)网络、采用“MAC in UDP”(Media Access Control in User Datagram Protocol用户数据报协议中的介质访问控制)封装形式的VPN(virtual private network,虚拟专用网)技术。VXLAN可以基于已有的服务提供商或企业IP网络,为分散的物理站点提供互联功能,其主要应用于数据中心网络。
最初的VXLAN方案中没有定义控制平面,是手工配置VXLAN隧道,这种方式实现上较为简单,但是会导致网络扩展难度大。
为了解决上述问题,EVPN(Ethernet Virtual Private Network,以太虚拟专用网络)技术应运而生。EVPN的控制平面使用BGP(边界网关协议,Border Gateway Protocol)技术,数据转发平面使用VXLAN技术。EVPN参考了BGP/MPLS IP VPN(Multi-Protocol Label Switching Internet Protocol virtual private network,多协议标签交换互联网协议虚拟专用网)的机制,通过扩展BGP协议新定义了几种BGP EVPN路由,通过在网络中发布路由来实现VTEP(VXLAN Tunnel End Point,可扩展虚拟局域网络隧道端点)的自动发现、主机地址学习。
但是,现有在不同的数据中心之间实现三层互相通信的难度较大。
发明内容
有鉴于此,本发明实施例提供了一种实现数据中心互联DCI三层通信的方法,应用于第一数据中心和第二数据中心组成的可扩展虚拟局域网络VXLAN,所述第一数据中心包括第一边缘设备网关GW和第一分支Leaf,所述第一GW和所述第一Leaf之间通过基于以太虚拟专用网络EVPN建立的第一可扩展虚拟局域网络VXLAN隧道连接,所述第一Leaf还连接第一主机;所述第二数据中心包括第二边缘设备网关GW和第二Leaf,所述第二GW和所述第二Leaf之间通过基于EVPN建立的第二VXLAN隧道连接,所述第二Leaf还连接第二主机;所述第一GW与所述第二GW通过基于EVPN建立的VXLAN隧道X连接;该方法包括:
所述第一GW通过所述VXLAN隧道X从所述第二GW接收所述第二数据中心内部的第二报文;所述第二报文的目的地址为所述第一主机的地址;
所述第一GW通过所述第一VXLAN隧道发送给所述第一Leaf,以便所述第一Leaf将所述第二报文发送给所述第一主机。
本发明实施例还提供了一种第一边缘设备网关GW,应用于第一数据中心,所述第一数据中心包括第一边缘设备网关GW和第一分支Leaf,所述第一GW和所述第一Leaf之间通过基于以太虚拟专用网络EVPN建立的第一可扩展虚拟局域网络VXLAN隧道连接,所述第一Leaf还连接第一主机;
该第一GW包括:
建立单元,设置为和所述第一Leaf基于EVPN建立第一可扩展虚拟局域网络VXLAN隧道,和第二数据中心的第二边缘设备网关GW基于EVPN建立VXLAN隧道X。
本发明实施例还提供了一种实现数据中心互联DCI三层通信的系统,应用于第一数据中心和第二数据中心组成的可扩展虚拟局域网络VXLAN,所述第一数据中心包括第一边缘设备网关GW和第一分支Leaf,所述第一GW和所述第一Leaf之间通过基于以太虚拟专用网络EVPN建立的第一可扩展虚拟局域网络VXLAN隧道连接,所述第一Leaf还连接第一主机;所述第二数据中心包括第二边缘设备网关GW和第二Leaf,所述第二GW和所述第二Leaf 之间通过基于EVPN建立的第二VXLAN隧道连接,所述第二Leaf还连接第二主机;所述第一GW与所述第二GW通过基于EVPN建立的VXLAN隧道X连接;该系统包括:
所述第一GW,设置为和所述第一Leaf基于EVPN建立所述第一VXLAN隧道;
所述第二GW,设置为和所述第二Leaf基于EVPN建立所述第二VXLAN隧道;
所述第一GW和所述第二GW,还设置为基于EVPN建立所述VXLAN隧道X。
本发明实施例提供了一种不同的数据中心三层互相通信的解决方案,解决了在数据中心之间实现三层互通难度大的问题。
本发明的其它特征和优点将在随后的说明书中阐述,并且,部分地从说明书中变得显而易见,或者通过实施本发明而了解。本发明的目的和其他优点可通过在说明书、权利要求书以及附图中所特别指出的结构来实现和获得。
附图说明
附图用来提供对本发明技术方案的进一步理解,并且构成说明书的一部分,与本申请的实施例一起用于解释本发明的技术方案,并不构成对本发明技术方案的限制。
图1为本发明一实施例提供的一种实现数据中心互联DCI三层通信的方法的流程示意图;
图2为本发明一实施例提供的一种DCI三层互通系统的组网示意图;
图3为本发明一实施例中Leaf1、Leaf2、Leaf3、Leaf4上的EVPN配置信息示意图;
图4为本发明一实施例中GW1、GW2上的EVPN配置信息示意图;
图5为本发明一实施例中GW1的路由策略配置信息示意图;
图6为本发明一实施例中GW2的路由策略配置信息示意图;
图7为本发明一实施例提供的数据中心A的主机1的RT2双标签主机路由通告的架构示意图;
图8为本发明一实施例提供的数据中心A的主机1的RT2双标签主机路由通告的流程示意图;
图9为本发明一实施例提供的数据中心B的主机3的RT2双标签主机路由通告架构示意图;
图10为本发明一实施例提供的数据中心B的主机3的RT2双标签主机路由通告的流程示意图;
图11为本发明一实施例提供的数据中心A的RT5网段路由通告架构示意图;
图12为本发明一实施例提供的数据中心A的RT5网段路由通告的流程示意图;
图13为本发明一实施例提供的数据中心B的RT5网段路由通告架构示意图;
图14为本发明一实施例提供的数据中心B的RT5网段路由通告的流程示意图;
图15为本发明一实施例提供的数据中心A的主机1的报文转发到数据中心B的主机3的架构示意图;
图16为本发明一实施例提供的数据中心A的主机1的报文转发到数据中心B的主机3的流程示意图;
图17为本发明一实施例提供的数据中心B的主机3的报文转发到数据中心A的主机1的架构示意图;
图18为本发明一实施例提供的数据中心B的主机3的报文转发到数据中心A的主机1的流程示意图;
图19为本实施例提供的第一边缘设备网关GW的结构示意图;
图20为实施例提供的一种实现数据中心互联DCI三层通信的系统的结构 示意图。
具体实施方式
为使本发明的目的、技术方案和优点更加清楚明白,下文中将结合附图对本发明的实施例进行详细说明。需要说明的是,在不冲突的情况下,本申请中的实施例及实施例中的特征可以相互任意组合。
在附图的流程图示出的步骤可以在诸如一组计算机可执行指令的计算机系统中执行。并且,虽然在流程图中示出了逻辑顺序,但是在某些情况下,可以以不同于此处的顺序执行所示出或描述的步骤。
EVPN技术具有以下一些优势:
1,可实现VTEP自动发现、VXLAN隧道自动建立,从而降低网络部署、扩展的难度;
2,EVPN可以同时发布二层MAC和三层路由信息;
3,可以减少网络中泛洪流量。
本发明实施例基于EVPN在两个数据中心内部和之间分别建立VXLAN隧道,形成分布式网关,实现数据中心内部VM(虚拟机,Virtual Machine)之间以及不同数据中心VM之间的通信。
图1为本发明一实施例提供的一种实现数据中心互联DCI三层通信的方法的流程示意图,该方法应用于第一数据中心和第二数据中心组成的可扩展虚拟局域网络VXLAN,所述第一数据中心包括第一边缘设备网关GW和第一分支Leaf,所述第一GW和所述第一Leaf之间通过基于以太虚拟专用网络EVPN建立的第一可扩展虚拟局域网络VXLAN隧道连接,所述第一Leaf还连接第一主机;所述第二数据中心包括第二边缘设备网关GW和第二Leaf,所述第二GW和所述第二Leaf之间通过基于EVPN建立的第二VXLAN隧道连接,所述第二Leaf还连接第二主机;所述第一GW与所述第二GW通过基于EVPN建立的VXLAN隧道X连接;
如图1所示,该方法包括:
步骤101,所述第一GW通过所述VXLAN隧道X从所述第二GW接收所述第二数据中心内部的第二报文;所述第二报文的目的地址为所述第一主机的地址;
步骤102,所述第一GW通过所述第一VXLAN隧道发送给所述第一Leaf,以便所述第一Leaf将所述第二报文发送给所述第一主机。
其中,所述第二GW通过所述VXLAN隧道X从所述第一GW接收所述第一数据中心内部的第一报文;所述第一报文的目的地址为所述第二主机的地址;
所述第二GW通过所述第二VXLAN隧道发送给所述第二Leaf,以便所述第二Leaf将所述第一报文发送给所述第二主机。
其中,在所述第一GW以及所述第二GW接收报文之前,该方法还包括:
所述第一GW和所述第一Leaf之间基于EVPN建立第一VXLAN隧道;
所述第二GW和所述第二Leaf之间基于EVPN建立第二VXLAN隧道;
所述第一GW和所述第二GW之间基于EVPN建立VXLAN隧道X。
其中,在建立VXLAN隧道之前,该方法还包括:
在所述第一Leaf和第二Leaf上配置EVPN,包括:
配置第一边界网关协议BGP配置信息,所述第一BGP配置信息用于在Leaf和GW之间建立域内BGP EVPN邻居,自动建立第一VXLAN隧道和第二VXLAN隧道和EVPN路由发布;
配置第一虚拟专用局域网业务VPLS配置信息,所述第一VPLS配置信息用于创建虚拟专用局域网业务VPLS实例,创建接入控制器AC接口,映射集成的路由与桥接IRB接口,配置域内二层VXLAN网络标识符标签L2 vni-label和域内L2路由表RT;
配置第一虚拟路由转发VRF配置信息,所述第一VRF配置信息用于配置域内三层VXLAN网络标识符标签L3 vni-label和域内L3 RT
在所述第一GW和第二GW上配置EVPN,包括:
配置第二BGP配置信息,所述第二BGP配置信息用于在第一GW和第二GW之间建立域间BGP EVPN邻居、自动建立VXLAN隧道X和EVPN路由发布;
配置第二VPLS配置信息,所述第二VPLS配置信息用于创建VPLS实例,映射IRB接口,配置域内L2 vni-label和域内L2 RT;
配置第二VRF配置信息,所述第二VRF配置信息用于配置域内L3 vni-label,域间L3 vni-label,域内L3 RT,域间L3 RT,以及配置路由策略;
其中,在所述第一GW上配置路由策略包括:
配置访问控制列表ACL配置信息,包括:定义域内ACL,匹配域内BGP邻居第一Leaf;定义域间ACL,匹配域间BGP邻居第二GW2;
创建第一路由策略规则,包括:匹配域间ACL、匹配RT5路由,修改L3 RT为域间的L3 RT,修改L3 vni-label为域间的L3 vni-label;
创建第二路由策略规则,包括:匹配域内ACL、匹配RT5路由,修改L3 RT为域内的L3 RT;
在所述第二GW上配置路由策略包括:
配置访问控制列表ACL配置信息,包括:定义域内ACL,匹配域内BGP邻居第二Leaf;定义域间ACL,匹配域间BGP邻居第一GW2;
创建第一路由策略规则,包括:匹配域间ACL、匹配RT5路由,修改L3 RT为域间的L3 RT,修改L3 vni-label为域间的L3 vni-label;
创建第二路由策略规则,包括:匹配域内ACL、匹配RT5路由,修改L3 RT为域内的L3 RT。
其中,在建立VXLAN隧道之后,所述第一GW接收第二报文之前,该方法还包括:
所述第一GW将第一主机路由RT2通告给所述第二GW,以便所述第二GW学习到所述第一主机的主机路由;所述第一RT2是由所述第一Leaf接收 所述第一主机发送的第一地址解析协议ARP请求后产生的第一主机的主机路由;
所述第一GW将第一集成的路由与桥接IRB直连网段路由通过第一RT5路由通告给第二GW,以便所述第二GW学习到所述第一RT5路由并将所述第一RT5通告给所述第二Leaf。
其中,在建立VXLAN隧道之后,所述第二GW接收第一报文之前,该方法还包括:
所述第二GW将第二RT2路由通告给第一GW,以便所述第一GW学习到所述第二主机的主机路由;所述第二RT2是由所述第二Leaf接收所述第二主机发送的第二ARP请求后产生的第二主机的主机路由;
所述第二GW将第二IRB直连网段路由通过第二RT5路由通告给第一GW,以便所述第一GW学习到所述第二RT5路由并将所述第二RT5通告给所述第一Leaf。
其中,所述第一GW通过与所述第二GW之间基于EVPN建立的VXLAN隧道X从所述第二GW接收所述第二数据中心内部的第二报文,通过与所述第一Leaf之间基于EVPN建立的第一VXLAN隧道发送给所述第一Leaf,以便所述第一Leaf将所述第二报文发送给所述第一主机,包括:
所述第二Leaf接收第二主机发送的第二报文,解封装后查找到所述第一RT5网段路由,再重新封装后通过所述第二VXLAN隧道发送给第二GW;
其中,所述第二报文携带的目的地址是第一主机的地址,源地址是所述第二主机的地址;所述第二Leaf重新封装后的第二报文的目的地址是第二VXLAN隧道的目的地址,源地址是第二VXLAN隧道的源地址,vni-label是域内的L3 vni-label,净荷是第二报文的原始报文;
所述第二GW收到第一报文后,解封装,查找到第一RT2主机路由,再重新封装报文通过所述VXLAN隧道X发送给第一GW;
其中,所述第二GW再重新封装后的第二报文的目的地址是VXLAN隧道X的目的地址,源地址是VXLAN隧道X的源地址,vni-label是域间的L3  vni-label,净荷是第二报文的原始报文;
所述第一GW收到第二报文后,解封装,查找到第一RT2主机路由,重新封装报文通过所述第一VXLAN隧道发送给第一Leaf;
其中,所述第一GW重新封装后的第二报文的目的地址是第一VXLAN隧道的目的地址,源地址是第一VXLAN隧道的源地址,vni-label是域内的L3 vni-label,净荷是第二报文的原始报文;
所述第一Leaf收到第一报文后,解封装,根据第二报文的原始报文的目的地址查找到第一主机的ARP表项,将原始报文发送给第一主机,目的地址是第一主机的地址,源地址是第二主机的地址。
其中,所述第二GW通过所述VXLAN隧道X从所述第一GW接收所述第一数据中心内部的第一报文;通过与所述第二Leaf之间基于EVPN建立的第二VXLAN隧道发送给所述第二Leaf,以便所述第二Leaf将所述第一报文发送给所述第二主机,包括:
所述第一Leaf接收第一主机发送的第一报文,解封装后查找到所述第二RT5网段路由,再重新封装后通过所述第一VXLAN隧道发送给第一GW,
其中,所述第一报文携带的目的地址是第二主机的地址,源地址是所述第一主机的地址;所述第一Leaf重新封装后的第一报文的目的地址是第一VXLAN隧道的目的地址,源地址是第一VXLAN隧道的源地址,vni-label是域内的L3 vni-label,净荷是第一报文的原始报文;
所述第一GW收到第一报文后,解封装,查找到第二RT2主机路由,再重新封装报文通过所述VXLAN隧道X发送给第二GW,
其中,所述第一GW再重新封装后的第一报文的目的地址是VXLAN隧道X的目的地址,源地址是VXLAN隧道X的源地址,vni-label是域间的L3 vni-label,净荷是第一报文的原始报文;
所述第二GW收到第一报文后,解封装,查找到第二RT2主机路由,重新封装报文通过所述第二VXLAN隧道发送给第二Leaf,
其中,所述第二GW重新封装后的第一报文的目的地址是第二VXLAN 隧道的目的地址,源地址是第二VXLAN隧道的源地址,vni-label是域内的L3 vni-label,净荷是第一报文的原始报文;
所述第二Leaf收到第一报文后,解封装,根据第一报文的原始报文的目的地址查找到第二主机的ARP表项,将原始报文发送给第二主机,目的地址是第二主机的地址,源地址是第一主机的地址。
图2为本发明一实施例提供的一种DCI三层互通系统的组网示意图;如图2所示,
通过EVPN在两个数据中心内部建立VXLAN隧道,形成分布式网关,实现数据中心内部VM之间的通信。
具体而言,GW1(GateWay,网关)和Leaf1(分支1)建立VXLAN隧道1,GW1和Leaf2建立VXLAN隧道2,Leaf1作为主机1的网关,Leaf2作为主机2的网关,实现数据中心A内部主机之间的通信。
GW2和Leaf3建立VXLAN隧道3,GW2和Leaf4建立VXLAN隧道4,Leaf3作为主机3的网关,Leaf4作为主机4的网关,实现数据中心B内部主机之间的通信。
两个数据中心之间再建立一段VXLAN隧道,可以实现不同数据中心互联。
具体而言,GW1和GW2分别是数据中心A和数据中心B的边缘设备,通过在GW1和GW2上配置EVPN创建VXLAN隧道X。
GW1通过VXLAN隧道X从GW2接收到数据中心B内部的VXLAN报文,GW1对VXLAN报文先解封装,然后再重新封装后通过VXLAN隧道1发送给Leaf1,通过VXLAN隧道2发送给Leaf2。
GW2通过VXLAN隧道X从GW1接收到数据中心A内部的VXLAN报文,GW2对VXLAN报文先解封装,然后再重新封装后通过VXLAN隧道3发送给Leaf3,通过VXLAN隧道4发送给Leaf4,实现对跨数据中心的报文端到端的VXLAN报文承载。
其中,在Leaf1、Leaf2、Leaf3、Leaf4上配置EVPN,如图3所示,包括配置以下EVPN配置信息:
(1)第一BGP(边界网关协议,Border Gateway Protocol)配置信息,所述第一BGP配置信息用于:
1、Leaf和GW建立域内BGP EVPN邻居;
2、动态VXLAN隧道自动创建;
3、EVPN路由发布。
(2)第一VPLS(Virtual Private LAN Service,虚拟专用局域网业务)配置信息,所述第一VPLS信息用于:
1、创建VPLS实例;
2、创建AC(Access Point Controller,接入控制器)接口;
3、映射IRB(集成的路由与桥接,Integrated Routing and Bridging)接口;
4、配置域内L2 vni-label(Layer 2 VXLAN Network Identifier label,二层VXLAN网络标识符标签);
5、配置域内L2 RT(Routing Tables,路由表)。
(3)第一VRF(虚拟路由转发,Virtual Routing Forwarding)配置信息,所述第一VRF配置信息用于:
1、配置域内L3 vni-label(Layer 3 VXLAN Network Identifier label,三层VXLAN网络标识符标签);
2、配置域内L3 RT。
其中,在GW1、GW2上配置EVPN,如图4所示,包括配置以下EVPN配置信息:
(1)第二BGP配置信息,所述第二BGP配置信息用于:
1、GW1和GW2建立域间BGP EVPN邻居;
2、域间动态VXLAN隧道自动创建;
3、EVPN路由发布。
(2)第二VPLS配置信息,所述第二VPLS配置信息用于:
1、创建VPLS实例;
2、映射IRB接口;
3、配置域内L2 vni-label;
4、配置域内L2 RT。
(3)第二VRF配置信息,所述第二VRF配置信息用于:
1、配置域内L3 vni-label;
2、配置域间L3 vni-label;
3、配置域内L3 RT;
4、配置域间L3 RT。
其中,在GW1、GW2上配置export(出口)方向的路由策略。
如图5所示,在GW1上配置路由策略包括:
(1)配置ACL(访问控制列表,Access Control List)配置信息:
1、定义域内ACL,匹配域内BGP邻居(Leaf1和Leaf2);
2、定义域间ACL,匹配域间BGP邻居(GW2)。
(2)创建路由策略规则1:
1、匹配域间ACL;
2、匹配RT5路由;
3、修改L3 RT为域间的L3 RT;
4、修改L3 vni-label为域间的L3 vni-label。
(3)创建路由策略规则2:
1、匹配域内ACL;
2、匹配RT5路由;
3、修改L3 RT为域内的L3 RT。
如图6所示,在GW2上配置路由策略包括:
(1)配置ACL配置信息:
1、定义域内ACL,匹配域内BGP邻居(Leaf3和Leaf4);
2、定义域间ACL,匹配域间BGP邻居(GW1)。
(2)创建路由策略规则1:
1、匹配域间ACL;
2、匹配RT5路由;
3、修改L3 RT为域间的RT;
4、修改L3 vni-label为域间的L3 vni-label。
(2)创建路由策略规则2:
1、匹配域内ACL;
2、匹配RT5路由;
3、修改L3 RT为域内的L3 RT。
EVPN在BGP的L2VPN地址族下定义了新的子地址族--EVPN地址族,并新增了一种NLRI(Network Layer Reachability Information,网络层可达性信息),即EVPN NLRI。EVPN NLRI定义了BGP EVPN路由类型,通过在EVPN对等体之间发布这些路由,就可以实现VXLAN隧道的自动建立、主机地址的学习。
其中,RT2(Route Type 2,2类路由)路由中携带有主机MAC、主机IP信息。RT2路由可以用于发布主机MAC,还可以发布主机IP地址。
RT5(Route Type 5,5类路由)路由--IP前缀路由。RT5路由携带路由信息,主要用于发布路由,既可以发布32位主机路由,也可以发布网段路由。
本实施例中,基于如图2所示的架构,主机1发出arp(地址解析协议,Address Resolution Protocol)请求,Leaf1收到主机1的arp请求后生成arp表项,并产生RT2双标签主机路由通告给GW1。GW1将此RT2路由通告给GW2, GW2上学习到主机1的32位主机路由100.10.10.1/32。GW2上收到的此RT2路由和自己的L2 RT不一致,GW2不会将RT2路由通告给Leaf3和Leaf4。
同理,GW1和GW2上都能学习到主机1、主机2、主机3、主机4的RT2的32位主机路由。Leaf1和Leaf2不能学到主机3和主机4的RT2路由。Leaf3和Leaf4不能学到主机1和主机2的RT2路由。
GW1把IRB直连网段路由100.10.10.0/24通过RT5路由通告给GW2,GW2学习到100.10.10.0/24的网段路由,并且把此网段路由通告给Leaf3和Leaf4,Leaf3和Leaf4都学到了100.10.10.0/24的网段路由。
同理,GW1、Leaf1、Leaf2也学到了200.20.20.0/24的RT5路由。
本发明另一实施例与上一实施例的系统组网和配置相同,不再赘述。基于图2所示的组网以及图3-6的配置,图7为本实施例提供的数据中心A的主机1的RT2双标签主机路由通告的架构示意图。图8为本实施例提供的数据中心A的主机1的RT2双标签主机路由通告的流程示意图。
基于图7所示的架构,如图8所示,主机1的RT2双标签主机路由通告具体步骤包括:
步骤801,主机1发出arp请求;
步骤802,Leaf1收到主机1的arp请求后产生RT2双标签主机路由通告给GW1;
其中,所述RT2双标签主机路由通告携带域内L3 vni-label 1000,域内L3 RT 1000:1,域内L2 vni-label 100,域内L2 RT 100:1,下一跳是Leaf1。
步骤803,GW1接收到RT2路由,比较此路由的RT,和自己本地的域内L3 RT 1000:1一致,将此路由交叉到本地对应的VRF实例中,同时比较此路由的RT,和自己本地的域内L2 RT 100:1也一致,将此双标签RT2路由通告给GW2;
于是,GW1能学到主机1的主机路由100.10.10.1/32
步骤804,GW1将RT2路由通告给GW2时,将RT2路由的下一跳修改 为自己,应用路由策略将L3 vni-label替换为域间L3 vni-label 888,将RT替换为域间L3 RT 888:1;
步骤805,GW2收到RT2路由,比较此路由的RT,和自己本地的域间L3 RT 888:1一致,将此路由交叉到本地对应的VRF实例中,同时比较此路由的RT,和自己本地的域内L2 RT 200:1不一致,不会将此双标签RT2路由通告给Leaf3和Leaf4。
于是,Leaf3和Leaf4不能学到主机1的主机路由100.10.10.1/32。
本发明另一实施例与上一实施例的系统组网和配置相同,不再赘述。基于图2所示的组网以及图3-6的配置,图9为本实施例提供的数据中心B的主机3的RT2双标签主机路由通告架构示意图。图10为本实施例提供的数据中心B的主机3的RT2双标签主机路由通告的流程示意图。
基于图9所示的架构,如图10所示,主机3的RT2双标签主机路由通告具体步骤包括:
步骤1001,主机3发出arp请求;
步骤1002,Leaf3收到主机3的arp请求后产生RT2双标签主机路由通告给GW2;
其中,所述RT2双标签主机路由携带域内L3 vni-label 2000,域内L3 RT 2000:1,域内L2 vni-label 200,域内L2 RT 200:1,下一跳是Leaf3。
步骤1003,GW2接收到RT2路由,比较此路由的RT,和自己本地的域内L3 RT 2000:1一致,将此路由交叉到本地对应的VRF实例中,同时比较此路由的RT,和自己本地的域内L2 RT 200:1也一致,将此双标签RT2路由通告给GW1;
因此,GW2能学到主机3的主机路由200.20.20.1/32。
步骤1004,GW2将RT2路由通告给GW1时,将RT2路由的下一跳修改为自己,应用路由策略将L3 vni-label替换为域间L3 vni-label 888,将RT替换为域间L3 RT 888:1;
步骤1005,GW1收到RT2路由,比较此路由的RT,和自己本地的域间L3 RT 888:1一致,将此路由交叉到本地对应的VRF实例中,同时比较此路由的RT,和自己本地的域内L2 RT 100:1不一致,不会将此双标签RT2路由通告给Leaf1和Leaf2。
因此Leaf1和Leaf2不能学到主机3的主机路由200.20.20.1/32。
本发明另一实施例与上一实施例的系统组网和配置相同,不再赘述。基于图2所示的组网以及图3-6的配置,图11为本实施例提供的数据中心A的RT5网段路由通告架构示意图。图12为本实施例提供的数据中心A的RT5网段路由通告的流程示意图。
基于图11所示的架构,如图12所示,数据中心A的RT5网段路由通告具体步骤包括:
步骤1201,GW1把IRB直连网段路由100.10.10.0/24通过RT5路由通告给GW2,将RT5路由的下一跳修改为自己,应用路由策略将L3 vni-label替换为域间L3 vni-label 888,将RT替换为域间L3 RT 888:1;
步骤1202,GW2收到RT5路由,比较此路由的RT,和自己本地的域间L3 RT 888:1一致,将此路由交叉到本地对应的VRF实例中;
因此,GW2能学到数据中心A的网段路由100.10.10.0/24。
步骤1203,GW2将RT5路由通告给Leaf3和Leaf4时,将RT5路由的下一跳修改为自己,应用路由策略将L3 vni-label替换为域内L3 vni-label 2000,将RT替换为域内L3 RT 2000:1。
本发明另一实施例与上一实施例的系统组网和配置相同,不再赘述。基于图2所示的组网以及图3-6的配置,图13为本实施例提供的数据中心B的RT5网段路由通告架构示意图。图14为本实施例提供的数据中心B的RT5网段路由通告的流程示意图。
基于图13所示的架构,如图14所示,数据中心B的RT5网段路由通告 具体步骤包括:
步骤1401,GW2把IRB直连网段路由200.20.20.0/24通过RT5路由通告给GW1,将RT5路由的下一跳修改为自己,应用路由策略将L3 vni-label替换为域间L3 vni-label 888,将RT替换为域间L3 RT 888:1;
步骤1402,GW1收到RT5路由,比较此路由的RT,和自己本地的域间L3 RT 888:1一致,将此路由交叉到本地对应的VRF实例中;
因此,GW1能学到数据中心A的网段路由200.20.20.0/24。
步骤1403,GW1将RT5路由通告给Leaf1和Leaf2时,将RT5路由的下一跳修改为自己,应用路由策略将L3 vni-label替换为域内L3 vni-label 1000,将RT替换为域内L3 RT 1000:1。
本发明另一实施例与上一实施例的系统组网和配置相同,不再赘述。基于图2所示的组网以及图3-6的配置,以及图7-14的路由通告,图15为本实施例提供的数据中心A的主机1的报文转发到数据中心B的主机3的架构示意图。图16为本实施例提供的数据中心A的主机1的报文转发到数据中心B的主机3的流程示意图。
基于图15所示的架构,如图16所示,数据中心A的主机1的报文转发到数据中心B的主机3的具体步骤包括:
步骤1601,主机1把原始报文发给网关Leaf1,报文的目的地址是主机3的地址200.20.20.1,源地址是自己100.10.10.1;
步骤1602,Leaf1收到报文后,查找到RT5网段路由200.20.20.0,重新封装报文发送给GW1,报文的目的地址是域内VXLAN隧道的目的地址8.8.8.8,源地址是VXLAN隧道的源地址1.1.1.1,vni-label是域内的L3 vni-label 1000,净荷是主机1发出的原始报文;
步骤1603,GW1收到VXLAN报文后,解封装,查找到RT2主机路由200.20.20.1,重新封装报文发送给GW2,报文的目的地址是域间VXLAN隧道的目的地址9.9.9.9,源地址是域间VXLAN隧道的源地址8.8.8.8,vni-label 是域间的L3 vni-label 888,净荷是主机1发出的原始报文;
步骤1604,GW2收到VXLAN报文后,解封装,查找到RT2主机路由200.20.20.1,重新封装报文发送给Leaf3,报文的目的地址是域内VXLAN隧道的目的地址3.3.3.3,源地址是域内VXLAN隧道的源地址9.9.9.9,vni-label是域内的L3 vni-label 2000,净荷是主机1发出的原始报文;
步骤1605,Leaf3收到VXLAN报文后,解封装,根据原始报文的目的地址200.20.20.1查找到主机3的arp表项,将原始报文发送给主机3,目的地址是主机3的地址200.20.20.1,源地址是主机1的地址100.10.10.1。
本发明另一实施例与上一实施例的系统组网和配置相同,不再赘述。基于图2所示的组网以及图3-6的配置,以及图7-14的路由通告,图17为本实施例提供的数据中心B的主机3的报文转发到数据中心A的主机1的架构示意图。图18为本实施例提供的数据中心B的主机3的报文转发到数据中心A的主机1的流程示意图。
基于图17所示的架构,如图18所示,数据中心B的主机3的报文转发到数据中心A的主机1的具体步骤包括:
步骤1801,主机3把原始报文发给网关Leaf3,报文的目的地址是主机1的地址100.10.10.1,源地址是自己200.20.20.1;
步骤1802,Leaf3收到报文后,查找到RT5网段路由100.10.10.0,重新封装报文发送给GW2,报文的目的地址是域内VXLAN隧道的目的地址9.9.9.9,源地址是VXLAN隧道的源地址3.3.3.3,vni-label是域内的L3 vni-label 2000,净荷是主机3发出的原始报文;
步骤1803,GW2收到VXLAN报文后,解封装,查找到RT2主机路由100.10.10.1,重新封装报文发送给GW1,报文的目的地址是域间VXLAN隧道的目的地址8.8.8.8,源地址是域间VXLAN隧道的源地址9.9.9.9,vni-label是域间的L3 vni-label 888,净荷是主机3发出的原始报文;
步骤1804,GW1收到VXLAN报文后,解封装,查找到RT2主机路由 100.10.10.1,重新封装报文发送给Leaf1,报文的目的地址是域内VXLAN隧道的目的地址1.1.1.1,源地址是域内VXLAN隧道的源地址8.8.8.8,vni-label是域内的L3 vni-label 1000,净荷是主机3发出的原始报文;
步骤1805,Leaf1收到VXLAN报文后,解封装,根据原始报文的目的地址100.10.10.1查找到主机1的arp表项,将原始报文发送给主机1,目的地址是主机1的地址100.10.10.1,源地址是主机3的地址200.20.20.1。
本发明一实施例提供了一种第一边缘设备网关GW,应用于第一数据中心,所述第一数据中心包括第一边缘设备网关GW和连接第一主机的第一分支Leaf;
图19为本实施例提供的第一边缘设备网关GW的结构示意图。如图19所示,该第一GW包括:
建立单元,设置为和所述第一Leaf基于以太虚拟专用网络EVPN建立第一可扩展虚拟局域网络VXLAN隧道,和第二数据中心的第二边缘设备网关GW基于EVPN建立VXLAN隧道X。
其中,该第一GW还包括:
接收单元,设置为通过所述VXLAN隧道X从所述第二GW接收所述第二数据中心内部的第二报文;所述第二报文的目的地址为所述第一主机的地址;
发送单元,设置为通过所述第一VXLAN隧道发送给所述第一Leaf,以便所述第一Leaf将所述第二报文发送给所述第一主机。
其中,该第一GW还包括:
配置单元,设置为在所述第一GW上配置EVPN,包括:
配置第一BGP配置信息,所述第一BGP配置信息用于:在第一GW和第二GW之间建立域间BGP EVPN邻居、VXLAN隧道X的自动建立和EVPN路由发布;
配置第一VPLS配置信息,所述第一VPLS配置信息用于创建VPLS实例, 映射IRB接口,配置域内L2 vni-label,配置域内L2 RT;
配置第一VRF配置信息,所述第一VRF配置信息用于:配置域内L3 vni-label,域间L3 vni-label,域内L3 RT,域间L3 RT,配置路由策略;
其中,在所述第一GW上配置路由策略包括:
配置访问控制列表ACL配置信息,包括:定义域内ACL,匹配域内BGP邻居第一Leaf;定义域间ACL,匹配域间BGP邻居第二GW2;
创建第一路由策略规则,包括:匹配域间ACL、匹配RT5路由,修改L3 RT为域间的L3 RT,修改L3 vni-label为域间的L3 vni-label;
创建第二路由策略规则,包括:匹配域内ACL、匹配RT5路由,修改L3 RT为域内的L3 RT。
其中,该第一GW还包括:
路由通告单元,设置为接收所述第一Leaf通告的第一主机路由RT2,并将所述第一RT2路由通告给所述第二GW,以便所述第二GW学习到所述第一主机的主机路由;
还设置为将第一集成的路由与桥接IRB直连网段路由通过第一RT5路由通告给第二GW,以便所述第二GW学习到所述第一RT5路由并将所述第一RT5通告给所述第二Leaf。
本发明一实施例提供了一种实现数据中心互联DCI三层通信的系统,应用于第一数据中心和第二数据中心组成的可扩展虚拟局域网络VXLAN,所述第一数据中心包括第一边缘设备网关GW和第一分支Leaf,所述第一GW和所述第一Leaf之间通过基于以太虚拟专用网络EVPN建立的第一可扩展虚拟局域网络VXLAN隧道连接,所述第一Leaf还连接第一主机;所述第二数据中心包括第二边缘设备网关GW和第二Leaf,所述第二GW和所述第二Leaf之间通过基于EVPN建立的第二VXLAN隧道连接,所述第二Leaf还连接第二主机;所述第一GW与所述第二GW通过基于EVPN建立的VXLAN隧道X连接。
图20为实施例提供的一种实现数据中心互联DCI三层通信的系统的结构示意图。如图20所示,该系统包括:
所述第一GW,设置为和所述第一Leaf基于EVPN建立第一VXLAN隧道;
所述第二GW,设置为和所述第二Leaf基于EVPN建立第二VXLAN隧道;
所述第一GW和所述第二GW,还设置为基于EVPN建立VXLAN隧道X。
其中,在所述第一Leaf和第二Leaf上配置EVPN,包括:
配置第一边界网关协议BGP配置信息,所述第一BGP配置信息用于包括:在Leaf和GW之间建立域内BGP EVPN邻居,自动建立第一VXLAN隧道和第二VXLAN隧道和EVPN路由发布;
配置第一虚拟专用局域网业务VPLS配置信息,所述第一VPLS配置信息用于:创建虚拟专用局域网业务VPLS实例,创建接入控制器AC接口,映射集成的路由与桥接IRB接口,配置域内二层VXLAN网络标识符标签L2 vni-label,配置域内L2路由表RT;
配置第一虚拟路由转发VRF配置信息,所述第一VRF配置信息用于:配置域内三层VXLAN网络标识符标签L3 vni-label和域内L3 RT
在所述第一GW和第二GW上配置EVPN,包括:
配置第二BGP配置信息,所述第二BGP配置信息用于:在第一GW和第二GW之间建立域间BGP EVPN邻居、VXLAN隧道X的自动建立和EVPN路由发布;
配置第二VPLS配置信息,所述第二VPLS配置信息用于:创建VPLS实例,映射IRB接口,配置域内L2 vni-label,配置域内L2 RT;
配置第二VRF配置信息,所述第二VRF配置信息用于:配置域内L3 vni-label,域间L3 vni-label,域内L3 RT,域间L3 RT,配置路由策略;
其中,在所述第一GW上配置路由策略包括:
配置访问控制列表ACL配置信息,包括:定义域内ACL,匹配域内BGP邻居第一Leaf;定义域间ACL,匹配域间BGP邻居第二GW2;
创建第一路由策略规则,包括:匹配域间ACL、匹配RT5路由,修改L3 RT为域间的L3 RT,修改L3 vni-label为域间的L3 vni-label;
创建第二路由策略规则,包括:匹配域内ACL、匹配RT5路由,修改L3 RT为域内的L3 RT;
在所述第二GW上配置路由策略包括:
配置访问控制列表ACL配置信息,包括:定义域内ACL,匹配域内BGP邻居第二Leaf;定义域间ACL,匹配域间BGP邻居第一GW2;
创建第一路由策略规则,包括:匹配域间ACL、匹配RT5路由,修改L3 RT为域间的L3 RT,修改L3 vni-label为域间的L3 vni-label;
创建第二路由策略规则,包括:匹配域内ACL、匹配RT5路由,修改L3 RT为域内的L3 RT。
其中,所述第一GW,还设置为将第一主机路由RT2通告给所述第二GW,以便所述第二GW学习到所述第一主机的主机路由;所述第一RT2是由所述第一Leaf接收所述第一主机发送的第一地址解析协议ARP请求后产生的第一主机的主机路由;
所述第一GW,还设置为将第一集成的路由与桥接IRB直连网段路由通过第一RT5路由通告给第二GW,以便所述第二GW学习到所述第一RT5路由并将所述第一RT5通告给所述第二Leaf。
其中,所述第二GW,还设置为将第二主机路由RT2通告给第一GW,以便所述第一GW学习到所述第二主机的主机路由;所述第二RT2是由所述第二Leaf接收所述第二主机发送的第二ARP请求后产生的第二主机的主机路由;
所述第二GW,还设置为将第二IRB直连网段路由通过第二RT5路由通告给第一GW,以便所述第一GW学习到所述第二RT5路由并将所述第二RT5通告给所述第一Leaf。
其中,所述第一GW,还设置为通过与所述第二GW之间基于以太虚拟专用网络EVPN建立的可扩展虚拟局域网络VXLAN隧道X从所述第二GW接收所述第二数据中心内部的第二报文;所述第二报文的目的地址为所述第一主机的地址;
通过与所述第一Leaf之间基于EVPN建立的第一VXLAN隧道发送给所述第一Leaf,以便所述第一Leaf将所述第二报文发送给所述第一主机。
其中,所述第二GW,还设置为通过所述VXLAN隧道X从所述第一GW接收所述第一数据中心内部的第一报文;所述第一报文的目的地址为所述第二主机的地址;
通过与所述第二Leaf之间基于EVPN建立的第二VXLAN隧道发送给所述第二Leaf,以便所述第二Leaf将所述第一报文发送给所述第二主机。
其中,所述第二Leaf,具体设置为接收第二主机发送的第二报文,解封装后查找到所述第一RT5网段路由,再重新封装后通过所述第二VXLAN隧道发送给第二GW;
其中,所述第二报文携带的目的地址是第一主机的地址,源地址是所述第二主机的地址;所述第二Leaf重新封装后的第二报文的目的地址是第二VXLAN隧道的目的地址,源地址是第二VXLAN隧道的源地址,vni-label是域内的L3 vni-label,净荷是第二报文的原始报文;
所述第二GW,具体设置为收到第一报文后,解封装,查找到第一RT2主机路由,再重新封装报文通过所述VXLAN隧道X发送给第一GW;
其中,所述第二GW再重新封装后的第二报文的目的地址是VXLAN隧道X的目的地址,源地址是VXLAN隧道X的源地址,vni-label是域间的L3 vni-label,净荷是第二报文的原始报文;
所述第一GW,具体设置为收到第二报文后,解封装,查找到第一RT2主机路由,重新封装报文通过所述第一VXLAN隧道发送给第一Leaf;
其中,所述第一GW重新封装后的第二报文的目的地址是第一VXLAN隧道的目的地址,源地址是第一VXLAN隧道的源地址,vni-label是域内的 L3 vni-label,净荷是第二报文的原始报文;
所述第一Leaf,具体设置为收到第一报文后,解封装,根据第二报文的原始报文的目的地址查找到第一主机的ARP表项,将原始报文发送给第一主机,目的地址是第一主机的地址,源地址是第二主机的地址。
其中,所述第一Leaf,具体设置为接收第一主机发送的第一报文,解封装后查找到所述第二RT5网段路由,再重新封装后通过所述第一VXLAN隧道发送给第一GW,
其中,所述第一报文携带的目的地址是第二主机的地址,源地址是所述第一主机的地址;所述第一Leaf重新封装后的第一报文的目的地址是第一VXLAN隧道的目的地址,源地址是第一VXLAN隧道的源地址,vni-label是域内的L3 vni-label,净荷是第一报文的原始报文;
所述第一GW,具体设置为收到第一报文后,解封装,查找到第二RT2主机路由,再重新封装报文通过所述VXLAN隧道X发送给第二GW,
其中,所述第一GW再重新封装后的第一报文的目的地址是VXLAN隧道X的目的地址,源地址是VXLAN隧道X的源地址,vni-label是域间的L3 vni-label,净荷是第一报文的原始报文;
所述第二GW,具体设置为收到第一报文后,解封装,查找到第二RT2主机路由,重新封装报文通过所述第二VXLAN隧道发送给第二Leaf,
其中,所述第二GW重新封装后的第一报文的目的地址是第二VXLAN隧道的目的地址,源地址是第二VXLAN隧道的源地址,vni-label是域内的L3 vni-label,净荷是第一报文的原始报文;
所述第二Leaf,具体设置为收到第一报文后,解封装,根据第一报文的原始报文的目的地址查找到第二主机的ARP表项,将原始报文发送给第二主机,目的地址是第二主机的地址,源地址是第一主机的地址。
本发明实施例提供的技术方案,提供了一种不同的数据中心三层互相通信的解决方案,解决了在数据中心之间实现三层互通难度大的问题。
本领域普通技术人员可以理解,上文中所公开方法中的全部或某些步骤、系统、装置中的功能模块/单元可以被实施为软件、固件、硬件及其适当的组合。在硬件实施方式中,在以上描述中提及的功能模块/单元之间的划分不一定对应于物理组件的划分;例如,一个物理组件可以具有多个功能,或者一个功能或步骤可以由若干物理组件合作执行。某些组件或所有组件可以被实施为由处理器,如数字信号处理器或微处理器执行的软件,或者被实施为硬件,或者被实施为集成电路,如专用集成电路。这样的软件可以分布在计算机可读介质上,计算机可读介质可以包括计算机存储介质(或非暂时性介质)和通信介质(或暂时性介质)。如本领域普通技术人员公知的,术语计算机存储介质包括在用于存储信息(诸如计算机可读指令、数据结构、程序模块或其他数据)的任何方法或技术中实施的易失性和非易失性、可移除和不可移除介质。计算机存储介质包括但不限于RAM、ROM、EEPROM、闪存或其他存储器技术、CD-ROM、数字多功能盘(DVD)或其他光盘存储、磁盒、磁带、磁盘存储或其他磁存储装置、或者可以用于存储期望的信息并且可以被计算机访问的任何其他的介质。此外,本领域普通技术人员公知的是,通信介质通常包含计算机可读指令、数据结构、程序模块或者诸如载波或其他传输机制之类的调制数据信号中的其他数据,并且可包括任何信息递送介质。

Claims (11)

  1. 一种实现数据中心互联DCI三层通信的方法,应用于第一数据中心和第二数据中心组成的可扩展虚拟局域网络VXLAN,所述第一数据中心包括第一边缘设备网关GW和第一分支Leaf,所述第一GW和所述第一Leaf之间通过基于以太虚拟专用网络EVPN建立的第一可扩展虚拟局域网络VXLAN隧道连接,所述第一Leaf还连接第一主机;所述第二数据中心包括第二边缘设备网关GW和第二Leaf,所述第二GW和所述第二Leaf之间通过基于EVPN建立的第二VXLAN隧道连接,所述第二Leaf还连接第二主机;所述第一GW与所述第二GW通过基于EVPN建立的VXLAN隧道X连接;该方法包括:
    所述第一GW通过所述VXLAN隧道X从所述第二GW接收所述第二数据中心内部的第二报文;所述第二报文的目的地址为所述第一主机的地址;
    所述第一GW通过所述第一VXLAN隧道发送给所述第一Leaf,以便所述第一Leaf将所述第二报文发送给所述第一主机。
  2. 根据权利要求1所述的方法,其中,该方法还包括:
    所述第二GW通过所述VXLAN隧道X从所述第一GW接收所述第一数据中心内部的第一报文;所述第一报文的目的地址为所述第二主机的地址;
    所述第二GW通过所述第二VXLAN隧道发送给所述第二Leaf,以便所述第二Leaf将所述第一报文发送给所述第二主机。
  3. 根据权利要求2所述的方法,其中,在所述第一GW以及所述第二GW接收报文之前,该方法还包括:
    所述第一GW和所述第一Leaf之间基于EVPN建立第一VXLAN隧道;
    所述第二GW和所述第二Leaf之间基于EVPN建立第二VXLAN隧道;
    所述第一GW和所述第二GW之间基于EVPN建立VXLAN隧道X。
  4. 根据权利要求3所述的方法,其中,在建立VXLAN隧道之前,该方法还包括:
    在所述第一Leaf和第二Leaf上配置EVPN,包括:
    配置第一边界网关协议BGP配置信息,所述第一BGP配置信息用于在Leaf和GW之间建立域内BGP EVPN邻居,自动建立第一VXLAN隧道和第二VXLAN隧道和EVPN路由发布;
    配置第一虚拟专用局域网业务VPLS配置信息,所述第一VPLS配置信息用于创建虚拟专用局域网业务VPLS实例,创建接入控制器AC接口,映射集成的路由与桥接IRB接口,配置域内二层VXLAN网络标识符标签L2 vni-label和域内L2路由表RT;
    配置第一虚拟路由转发VRF配置信息,所述第一VRF配置信息用于配置域内三层VXLAN网络标识符标签L3 vni-label和域内L3 RT
    在所述第一GW和第二GW上配置EVPN,包括:
    配置第二BGP配置信息,所述第二BGP配置信息用于在第一GW和第二GW之间建立域间BGP EVPN邻居、自动建立VXLAN隧道X和EVPN路由发布;
    配置第二VPLS配置信息,所述第二VPLS配置信息用于创建VPLS实例,映射IRB接口,配置域内L2 vni-label和域内L2 RT;
    配置第二VRF配置信息,所述第二VRF配置信息用于配置域内L3 vni-label,域间L3 vni-label,域内L3 RT,域间L3 RT,以及配置路由策略。
  5. 根据权利要求4所述的方法,其中,
    在所述第一GW上配置路由策略包括:
    配置访问控制列表ACL配置信息,包括:定义域内ACL,匹配域内BGP邻居第一Leaf;定义域间ACL,匹配域间BGP邻居第二GW2;
    创建第一路由策略规则,包括:匹配域间ACL、匹配RT5路由,修改L3 RT为域间的L3 RT,修改L3 vni-label为域间的L3 vni-label;
    创建第二路由策略规则,包括:匹配域内ACL、匹配RT5路由,修改L3 RT为域内的L3 RT;
    在所述第二GW上配置路由策略包括:
    配置访问控制列表ACL配置信息,包括:定义域内ACL,匹配域内BGP邻居第二Leaf;定义域间ACL,匹配域间BGP邻居第一GW2;
    创建第一路由策略规则,包括:匹配域间ACL、匹配RT5路由,修改L3 RT为域间的L3 RT,修改L3 vni-label为域间的L3 vni-label;
    创建第二路由策略规则,包括:匹配域内ACL、匹配RT5路由,修改L3 RT为域内的L3 RT。
  6. 根据权利要求4所述的方法,其中,在建立VXLAN隧道之后,所述第一GW接收第二报文之前,该方法还包括:
    所述第一GW将第一主机路由RT2通告给所述第二GW,以便所述第二GW学习到所述第一主机的主机路由;所述第一RT2是由所述第一Leaf接收所述第一主机发送的第一地址解析协议ARP请求后产生的第一主机的主机路由;
    所述第一GW将第一集成的路由与桥接IRB直连网段路由通过第一RT5路由通告给第二GW,以便所述第二GW学习到所述第一RT5路由并将所述第一RT5通告给所述第二Leaf。
  7. 根据权利要求4所述的方法,其中,在建立VXLAN隧道之后,所述第二GW接收第一报文之前,该方法还包括:
    所述第二GW将第二RT2通告给第一GW,以便所述第一GW学习到所述第二主机的主机路由;所述第二RT2是由所述第二Leaf接收所述第二主机发送的第二ARP请求后产生的第二主机的主机路由;
    所述第二GW将第二IRB直连网段路由通过第二RT5路由通告给第一GW,以便所述第一GW学习到所述第二RT5路由并将所述第二RT5通告给所述第一Leaf。
  8. 根据权利要求6所述的方法,其中,所述第一GW通过与所述第二GW之间基于EVPN建立的VXLAN隧道X从所述第二GW接收所述第二数据中心内部的第二报文,通过与所述第一Leaf之间基于EVPN建立的第一VXLAN隧道发送给所述第一Leaf,以便所述第一Leaf将所述第二报文发送 给所述第一主机,包括:
    所述第二Leaf接收第二主机发送的第二报文,解封装后查找到所述第一RT5网段路由,再重新封装后通过所述第二VXLAN隧道发送给第二GW;
    其中,所述第二报文携带的目的地址是第一主机的地址,源地址是所述第二主机的地址;所述第二Leaf重新封装后的第二报文的目的地址是第二VXLAN隧道的目的地址,源地址是第二VXLAN隧道的源地址,vni-label是域内的L3 vni-label,净荷是第二报文的原始报文;
    所述第二GW收到第一报文后,解封装,查找到第一RT2主机路由,再重新封装报文通过所述VXLAN隧道X发送给第一GW;
    其中,所述第二GW再重新封装后的第二报文的目的地址是VXLAN隧道X的目的地址,源地址是VXLAN隧道X的源地址,vni-label是域间的L3 vni-label,净荷是第二报文的原始报文;
    所述第一GW收到第二报文后,解封装,查找到第一RT2主机路由,重新封装报文通过所述第一VXLAN隧道发送给第一Leaf;
    其中,所述第一GW重新封装后的第二报文的目的地址是第一VXLAN隧道的目的地址,源地址是第一VXLAN隧道的源地址,vni-label是域内的L3 vni-label,净荷是第二报文的原始报文;
    所述第一Leaf收到第一报文后,解封装,根据第二报文的原始报文的目的地址查找到第一主机的ARP表项,将原始报文发送给第一主机,目的地址是第一主机的地址,源地址是第二主机的地址。
  9. 根据权利要求7所述的方法,其中,所述第二GW通过所述VXLAN隧道X从所述第一GW接收所述第一数据中心内部的第一报文;通过与所述第二Leaf之间基于EVPN建立的第二VXLAN隧道发送给所述第二Leaf,以便所述第二Leaf将所述第一报文发送给所述第二主机,包括:
    所述第一Leaf接收第一主机发送的第一报文,解封装后查找到所述第二RT5网段路由,再重新封装后通过所述第一VXLAN隧道发送给第一GW,
    其中,所述第一报文携带的目的地址是第二主机的地址,源地址是所述 第一主机的地址;所述第一Leaf重新封装后的第一报文的目的地址是第一VXLAN隧道的目的地址,源地址是第一VXLAN隧道的源地址,vni-label是域内的L3 vni-label,净荷是第一报文的原始报文;
    所述第一GW收到第一报文后,解封装,查找到第二RT2主机路由,再重新封装报文通过所述VXLAN隧道X发送给第二GW,
    其中,所述第一GW再重新封装后的第一报文的目的地址是VXLAN隧道X的目的地址,源地址是VXLAN隧道X的源地址,vni-label是域间的L3 vni-label,净荷是第一报文的原始报文;
    所述第二GW收到第一报文后,解封装,查找到第二RT2主机路由,重新封装报文通过所述第二VXLAN隧道发送给第二Leaf,
    其中,所述第二GW重新封装后的第一报文的目的地址是第二VXLAN隧道的目的地址,源地址是第二VXLAN隧道的源地址,vni-label是域内的L3 vni-label,净荷是第一报文的原始报文;
    所述第二Leaf收到第一报文后,解封装,根据第一报文的原始报文的目的地址查找到第二主机的ARP表项,将原始报文发送给第二主机,目的地址是第二主机的地址,源地址是第一主机的地址。
  10. 一种第一边缘设备网关GW,应用于第一数据中心,所述第一数据中心包括第一边缘设备网关GW和第一分支Leaf,所述第一GW和所述第一Leaf之间通过基于以太虚拟专用网络EVPN建立的第一可扩展虚拟局域网络VXLAN隧道连接,所述第一Leaf还连接第一主机;
    该第一GW包括:
    建立单元,设置为和所述第一Leaf基于EVPN建立第一可扩展虚拟局域网络VXLAN隧道,和第二数据中心的第二边缘设备网关GW基于EVPN建立VXLAN隧道X。
  11. 一种实现数据中心互联DCI三层通信的系统,应用于第一数据中心和第二数据中心组成的可扩展虚拟局域网络VXLAN,所述第一数据中心包括第一边缘设备网关GW和第一分支Leaf,所述第一GW和所述第一Leaf之间 通过基于以太虚拟专用网络EVPN建立的第一可扩展虚拟局域网络VXLAN隧道连接,所述第一Leaf还连接第一主机;所述第二数据中心包括第二边缘设备网关GW和第二Leaf,所述第二GW和所述第二Leaf之间通过基于EVPN建立的第二VXLAN隧道连接,所述第二Leaf还连接第二主机;所述第一GW与所述第二GW通过基于EVPN建立的VXLAN隧道X连接;该系统包括:
    所述第一GW,设置为和所述第一Leaf基于EVPN建立所述第一VXLAN隧道;
    所述第二GW,设置为和所述第二Leaf基于EVPN建立所述第二VXLAN隧道;
    所述第一GW和所述第二GW,还设置为基于EVPN建立所述VXLAN隧道X。
PCT/CN2020/091374 2019-07-31 2020-05-20 一种实现dci三层通信的方法、系统及第一gw WO2021017590A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201910719485.2A CN112311645A (zh) 2019-07-31 2019-07-31 一种实现dci三层通信的方法、系统及第一gw
CN201910719485.2 2019-07-31

Publications (1)

Publication Number Publication Date
WO2021017590A1 true WO2021017590A1 (zh) 2021-02-04

Family

ID=74230155

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2020/091374 WO2021017590A1 (zh) 2019-07-31 2020-05-20 一种实现dci三层通信的方法、系统及第一gw

Country Status (2)

Country Link
CN (1) CN112311645A (zh)
WO (1) WO2021017590A1 (zh)

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN115701052A (zh) * 2021-07-14 2023-02-07 中兴通讯股份有限公司 转发表的查找方法及装置、存储介质及电子装置
CN116436729B (zh) * 2023-06-08 2023-09-08 武汉绿色网络信息服务有限责任公司 报文传输方法、组网系统及接入云网关

Citations (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20150003450A1 (en) * 2013-06-28 2015-01-01 Cisco Technology, Inc. Flow-based load-balancing of layer 2 multicast over multi-protocol label switching label switched multicast
CN105553848A (zh) * 2014-10-22 2016-05-04 瞻博网络公司 针对数据中心互联的协议独立多播稀疏模式(pim-sm)的支持
CN106992917A (zh) * 2017-03-03 2017-07-28 新华三技术有限公司 报文转发方法和装置
CN108471374A (zh) * 2018-05-24 2018-08-31 新华三技术有限公司 数据报文的转发方法及装置
US10243834B1 (en) * 2015-01-22 2019-03-26 Juniper Networks, Inc. Interconnecting virtual networks using an ethernet virtual private network (EVPN) and virtual extensible local area network (VXLAN) based overlay network
CN109962846A (zh) * 2017-12-25 2019-07-02 华为技术有限公司 路由协议报文的处理方法及装置
CN111064659A (zh) * 2018-10-17 2020-04-24 丛林网络公司 多宿主节点故障的bum流量的节点保护

Family Cites Families (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106209643B (zh) * 2016-07-14 2019-08-06 新华三技术有限公司 报文转发方法及装置
US10425325B2 (en) * 2017-10-30 2019-09-24 Dell Products Lp Optimizing traffic paths to orphaned hosts in VXLAN networks using virtual link trunking-based multi-homing
CN109412926B (zh) * 2018-11-16 2021-04-27 新华三技术有限公司 一种隧道建立方法和装置

Patent Citations (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20150003450A1 (en) * 2013-06-28 2015-01-01 Cisco Technology, Inc. Flow-based load-balancing of layer 2 multicast over multi-protocol label switching label switched multicast
CN105553848A (zh) * 2014-10-22 2016-05-04 瞻博网络公司 针对数据中心互联的协议独立多播稀疏模式(pim-sm)的支持
US10243834B1 (en) * 2015-01-22 2019-03-26 Juniper Networks, Inc. Interconnecting virtual networks using an ethernet virtual private network (EVPN) and virtual extensible local area network (VXLAN) based overlay network
CN106992917A (zh) * 2017-03-03 2017-07-28 新华三技术有限公司 报文转发方法和装置
CN109962846A (zh) * 2017-12-25 2019-07-02 华为技术有限公司 路由协议报文的处理方法及装置
CN108471374A (zh) * 2018-05-24 2018-08-31 新华三技术有限公司 数据报文的转发方法及装置
CN111064659A (zh) * 2018-10-17 2020-04-24 丛林网络公司 多宿主节点故障的bum流量的节点保护

Non-Patent Citations (2)

* Cited by examiner, † Cited by third party
Title
ANONYMOUS: "EVPN Technical White Paper", H3C TECHNICAL WHITE PAPER, 12 June 2017 (2017-06-12), pages 1 - 17, XP009525811 *
R. AGGARWAL ET AL.: "BGP MPLS-Based Ethernet VPN", INTERNET ENGINEERING TASK FORCE (IETF) REQUEST FOR COMMENTS: 7432, 7 March 2015 (2015-03-07), XP055777185 *

Also Published As

Publication number Publication date
CN112311645A (zh) 2021-02-02

Similar Documents

Publication Publication Date Title
EP3836490B1 (en) Vpn cross-domain implementation method, device, and border node
US10484203B2 (en) Method for implementing communication between NVO3 network and MPLS network, and apparatus
US10237163B2 (en) Static route advertisement
US9992154B2 (en) Layer 3 convergence for EVPN link failure
EP3264694A1 (en) Signaling ip address mobility in ethernet virtual private networks
US7733876B2 (en) Inter-autonomous-system virtual private network with autodiscovery and connection signaling
US9621378B2 (en) Methods and routers for connectivity setup between provider edge routers
US20170171057A1 (en) Optimizing evpn for data centers with redundant top-of-rack deployments
WO2015184852A1 (zh) Sr信息获取方法及建立sr网络的方法
US20140086253A1 (en) Overlay Virtual Gateway for Overlay Networks
CN106572021B (zh) 一种实现网络虚拟化叠加的方法与网络虚拟化边缘节点
WO2021196717A1 (zh) 组播流量传输方法、装置、通信节点及存储介质
US20130343175A1 (en) Internetworking and ip address management in unified mpls and ip networks
US20180309594A1 (en) Systems and Methods for Creating an Integrated Layer 2-Layer 3 Hybrid VPN Network
WO2021017590A1 (zh) 一种实现dci三层通信的方法、系统及第一gw
EP3890262B1 (en) Routing distributing method, device and system
WO2011147341A1 (zh) 一种分配mpls标签的方法和网络装置
WO2021109763A1 (zh) 连接建立方法、装置、设备和存储介质
Joseph et al. Network convergence: Ethernet applications and next generation packet transport architectures
WO2024001553A1 (zh) 路由发布方法、电子设备和计算机可读存储介质
Rabadan et al. Usage and Applicability of BGP MPLS-Based Ethernet VPN
Sajassi et al. Internet Engineering Task Force (IETF) J. Rabadan, Ed. Request for Comments: 8388 S. Palislamovic Category: Informational W. Henderickx
Singh BGP MPLS based EVPN And its implementation and use cases
Uttaro et al. BESS Workgroup J. Rabadan, Ed. Internet Draft S. Palislamovic W. Henderickx Intended status: Informational Nokia

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 20845918

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 20845918

Country of ref document: EP

Kind code of ref document: A1

122 Ep: pct application non-entry in european phase

Ref document number: 20845918

Country of ref document: EP

Kind code of ref document: A1

32PN Ep: public notification in the ep bulletin as address of the adressee cannot be established

Free format text: NOTING OF LOSS OF RIGHTS PURSUANT TO RULE 112(1) EPC (EPO FORM 1205A DATED 21/09/2022)

122 Ep: pct application non-entry in european phase

Ref document number: 20845918

Country of ref document: EP

Kind code of ref document: A1