WO2021120899A1

WO2021120899A1 - Sd-wan service orchestration method, system and device, and storage medium

Info

Publication number: WO2021120899A1
Application number: PCT/CN2020/125933
Authority: WO
Inventors: 李晓琴
Original assignee: 中兴通讯股份有限公司
Priority date: 2019-12-16
Filing date: 2020-11-02
Publication date: 2021-06-24
Also published as: CN112994915B; CN112994915A

Abstract

An SD-WAN service orchestration method, system and device, and a storage medium. The method comprises: according to received first user resource configuration information, generating a corresponding batch configuration instruction; according to the batch configuration instruction, configuring wide area network (WAN) service configuration information and local area network (LAN) service configuration information in batches; and issuing the WAN service configuration information and the LAN service configuration information to a target device, wherein the WAN service configuration information and the LAN service configuration information are used for enabling the target device to carry out related service processing.

Description

SD-WAN service orchestration method, system, equipment and storage medium

Cross-references to related applications

This application is based on a Chinese patent application with an application number of 201911296546.5 and an application date of December 16, 2019, and claims the priority of the Chinese patent application. The entire content of the Chinese patent application is hereby incorporated into this application by reference.

Technical field

The embodiments of the present application relate to communication, and specifically relate to an SD-WAN service orchestration method, system, device, and storage medium.

Background technique

Software Define Wide Area Network (SD-WAN) enables enterprises to integrate WAN connections and functions, and virtualize them into a centralized strategy to simplify the complex deployment and management of WAN. SD-WAN can solve the following problems : A variety of access methods, such as the Internet, Long Term Evolution (LTE), etc., reduce or replace Multi-Protocol Label Switching (MPLS) private lines, reducing enterprise costs; Links are dynamically selected between various connections to achieve application-based traffic tuning to achieve load balancing; support the deployment of value-added services such as firewalls and Wide Area Network (WAN) optimizers in a virtualized manner to increase application selection flexibility; Unified portal operation and maintenance, simple WAN management interface, improve operation and maintenance efficiency.

The existing SD-WAN service orchestration has the following shortcomings: (1) The SD-WAN service configuration process is cumbersome. For example, to configure SD-WAN services, you need to import asset information, create tenants, configure general configurations, create sites, and go online to apply for configuration. Mail deployment, manual creation of NEs, configuration of WAN services, configuration of High Availability (HA), configuration of Local Area Network (LAN) services, and other processes, and each process has a separate configuration interface; (2) Configuration The process has a sequential relationship, and the user experience is poor. For example, before creating a site, you need to create tenants and configure general configurations; (3) Batch configuration of WAN and LAN services is not supported. It takes at least 1 minute to configure a WAN/LAN service. There are two sites under the tenant, and there are 10 WAN and LAN services between the two sites. It takes at least 22 minutes.

Summary of the invention

In view of this, the embodiments of the present application provide an SD-WAN service orchestration method, system, device, and storage medium.

The embodiment of the application provides an SD-WAN service orchestration method, which includes: generating corresponding batch configuration instructions according to received first user resource configuration information; and batching WAN service configuration information and local area network LAN services according to the batch configuration instructions Configuration information; the WAN service configuration information and the LAN service configuration information are delivered to a target device, and the WAN service configuration information and the LAN service configuration information are used to enable the target device to perform related service processing.

The embodiment of the application provides an SD-WAN service orchestration system, including: an SD-WAN portal website, an SD-WAN front-end interface, and an SD-WAN back-end server; the SD-WAN front-end interface includes: a first user management module, The asset management module, the first user resource configuration module, and the SD-WAN service configuration module; the SD-WAN portal website is set to integrate the functions supported by the SD-WAN system into the same web interface; the first user management module , Set to create, modify, delete and query the first user; the asset management module is set to import and export asset information; the first user resource configuration module is set to preset attribute configuration, site automatic creation, network element Automatically create and go online to apply for configuration; the SD-WAN service configuration module is set to automatically create and delete WAN services, LAN services, and HA; the SD-WAN back-end server is set to interface with the SD-WAN front-end The corresponding back-end processing module.

An embodiment of the present application provides a device, including: a memory, and one or more processors; wherein the memory is configured to store one or more programs; when the one or more programs are used by the one or more The processor executes, so that the one or more processors implement the method described in any of the foregoing embodiments.

An embodiment of the present application provides a storage medium that stores a computer program, and when the computer program is executed by a processor, the method described in any of the foregoing embodiments is implemented.

Description of the drawings

Figure 1 is a flowchart of an SD-WAN service orchestration method provided by an embodiment of the present application;

FIG. 2 is a flowchart of another SD-WAN service orchestration method provided by an embodiment of the present application;

FIG. 3 is a configuration flowchart of first user resource configuration information provided by an embodiment of the present application;

FIG. 4 is a configuration flowchart of WAN service configuration information provided by an embodiment of the present application;

FIG. 5 is a configuration flowchart of LAN service configuration information provided by an embodiment of the present application;

Fig. 6 is a structural block diagram of an SD-WAN service orchestration system provided by an embodiment of the present application;

FIG. 7 is a structural block diagram of another SD-WAN service orchestration system provided by an embodiment of the present application;

FIG. 8 is a structural block diagram of an SD-WAN front-end interface provided by an embodiment of the present application;

FIG. 9 is a structural block diagram of an SD-WAN service orchestration device provided by an embodiment of the present application;

FIG. 10 is a schematic structural diagram of a device provided by an embodiment of the present application.

Detailed ways

Hereinafter, the embodiments of the present application will be described with reference to the drawings. In the case of no conflict, the embodiments in the application and the features in the embodiments can be combined with each other arbitrarily.

In view of this, an SD-WAN service orchestration method is proposed in the embodiments of this application, which at least solves one of the related problems to a certain extent, including the cumbersome service configuration process, the lack of support for batch service configuration, and the slow service activation speed. Realize business batch configuration and automatic orchestration, and improve operation and maintenance efficiency.

In an implementation manner, FIG. 1 is a flowchart of an SD-WAN service orchestration method provided by an embodiment of the present application. This embodiment is applied to the case of batch and automated scheduling of services. This embodiment can be executed by an SD-WAN service orchestration system.

As shown in Figure 1, the method in this embodiment includes S110-S130.

S110: Generate a corresponding batch configuration instruction according to the received first user resource configuration information.

In the embodiment, the first user resource configuration information refers to related resource information of the configured tenant. In the embodiment, the first user refers to a tenant, which may be an enterprise tenant or an operator tenant. In an embodiment, the first user resource configuration information includes at least one of the following: pre-configured attribute information, network element attribute information, online application attribute information, and site attribute information. In an embodiment, the pre-configured attribute information includes at least the following items: topology type, tunnel type, network name, and network type; the network element attribute information includes at least the following items: device SN list and site name associated with the device SN ;Online application attribute information includes at least one of the following: device SN, device type, port type, wide area port, and site name associated with the device SN; site attribute information includes at least one of the following: site name, site role, site List of locations and interconnected sites.

In an embodiment, the first user can configure the first user resource configuration information on the interface of the resource configuration information according to his own needs. After the device receives the first user resource configuration information, it is configured according to the received first user resource configuration. The information generates corresponding batch configuration instructions. In the embodiment, the batch configuration instruction refers to a trigger instruction that can perform batch configuration of WAN services and LAN services. The batch configuration instruction may be a submission instruction triggered after completing the related configuration of the first user resource configuration information. That is, the batch configuration instruction may be a submission instruction on the interface of the first user resource configuration information.

S120. Configure WAN service configuration information and LAN service configuration information in batches according to the batch configuration instruction.

In the embodiment, the batch configuration instruction can be understood as a submission instruction triggered after the configuration of the mandatory items of the first user resource configuration information is completed. That is, after the configuration of the mandatory items of the first user resource configuration information is not completed, even if the submit instruction is clicked, the WAN service configuration information and the LAN service configuration information cannot be configured in batches.

S130. The WAN service configuration information and the LAN service configuration information are delivered to the target device, and the WAN service configuration information and the LAN service configuration information are used to enable the target device to perform related service processing.

In the embodiment, after completing the configuration of the WAN service configuration information and the LAN service configuration information, the WAN service configuration information and the LAN service configuration information are delivered to the target device, so that the target device is based on the WAN service configuration information and the LAN service configuration information Perform business processing. In the embodiment, the target device refers to a terminal device that can perform WAN services and LAN services. For example, the target device may be a router or a switch, and so on.

In one embodiment, after the WAN service configuration information and the LAN service configuration information are delivered to the target device, it further includes: in the case of receiving the response success instruction fed back by the target device, sending the WAN service configuration information and the LAN service configuration information Store to the preset database.

In the embodiment, after the target device receives the WAN service configuration information and the LAN service configuration information, if the WAN service configuration information and the LAN service configuration information are valid, the target device returns a response success instruction, and the SD-WAN service orchestration system passes The preset interface stores the WAN service configuration information and the LAN service configuration information in the preset database. In one embodiment, the SD-WAN service orchestration system can access the preset database to obtain related configuration information in the preset database, and deliver the obtained related configuration information to the target device. Exemplarily, the preset database may be a PG database, and the preset interface may be a restful interface.

In an embodiment, before generating the corresponding batch configuration instructions according to the received first user resource configuration information, the method further includes: importing an asset information file into the asset management interface corresponding to the second user created in advance; and importing the asset information file into the asset information file Store all asset information of the first user in the preset database; configure the first user information on the user management interface corresponding to the first user created in advance; store the first user information in the preset database.

In the embodiment, the second user includes one of the following: an enterprise, an operator, that is, the second user refers to an operator or an enterprise user; the first user is a tenant of the second user, that is, the first user may be an enterprise user A tenant can also be a tenant of an operator. In an embodiment, an operator or enterprise user can be created on the front-end interface of the SD-WAN business orchestration system, and asset information files can be imported into the asset management interface of the second user. The SD-WAN business orchestration system will All imported asset information is saved to the preset database. In an embodiment, the asset information file may be an Excel file, and the asset information file contains all asset information of the second user. In an embodiment, the asset information includes at least one of the following: device SN, IP address, subnet mask, device type, whether it is manually online, port type, and WAN port. In one embodiment, after all imported asset information is stored in the preset database, the first user is created, and the first user information is configured on the user management interface of the first user, and the SD-WAN business orchestration system passes the preset The interface stores the first user information in the preset database. In an embodiment, the first user information includes at least one of the following: the first user name, description information, and superior escrow status. The upper-level escrow situation refers to the information about whether the first user is managed by the upper-level.

In one embodiment, the configuration process of the first user resource configuration information includes: generating corresponding site information and virtual routing and forwarding VRF information according to site attribute information; in the case that the site information and VRF information are successfully created, according to the network element attributes Information and part of the asset information generate corresponding online application information; when the online application information is configured successfully, the corresponding network element information is generated according to the network element attribute information and part of the asset information.

In the embodiment, the SD-WAN service orchestration system calls the site attribute information stored in the preset database through the preset interface, and generates the corresponding configuration information according to the site name, site role, and site location related configuration information in the site attribute information. Site information and VRF information, then the SD-WAN business orchestration system calls the preset interface to create the site and VRF information, and stores the site and VRF information in the preset database; the SD-WAN business orchestration system checks whether the site and VRF information are created successfully If the creation is successful, it will be generated based on the device SN list in the network element attribute information and the site name associated with the device SN, as well as the device type, device SN, whether it is manually online, the port type, and the related attribute information of the WAN port in the asset information. Corresponding online application information; SD-WAN business orchestration system calls the preset interface to store the online application information in the preset database, and checks whether the online application information is configured successfully. If the configuration is successful, it will be based on the device SN in the network element attribute information List the site name associated with the device SN, as well as the device SN, device type, IP address, subnet mask, manual online and other related attribute information in the asset information to generate the corresponding network element information; SD-WAN business orchestration system call The preset interface stores the network element information in the preset database, and checks whether the network element information is created successfully. If the creation is successful, the configuration process of the first user resource configuration information is ended, thereby realizing the use of the SD-WAN service orchestration system to Automated orchestration of business.

In an embodiment, before generating the corresponding site information and VRF information according to the site attribute information, the method further includes: storing the pre-configured attribute information in a preset database. In an embodiment, the SD-WAN service orchestration system calls a preset interface to save the pre-configured attribute information in a preset database, so as to facilitate subsequent information calls.

In an embodiment, the WAN service information includes at least one of the following: site name, WAN interface information, bandwidth attribute information, network name, local Internet access support status.

In one embodiment, configuring WAN service configuration information in batches includes: determining tunnel information for all sites based on part of the pre-configured attribute information and site name, WAN interface information, and network name; in the case of successful tunnel information configuration, based on bandwidth attributes The information determines the bandwidth information of all sites; when the bandwidth information is configured successfully, the static route of all sites is determined according to the WAN interface information and tunnel type; when the static route is configured successfully, it is generated based on the WAN interface information and local Internet support Corresponding carrier-level NAT information.

In the embodiment, the WAN service information is stored in the preset database through the preset interface, and the pre-generated VRF information is delivered to the target devices of all sites, and the VRF information is checked whether the configuration is successful. If the configuration is successful, please download , According to the topology type and tunnel type in the pre-configured attribute information, as well as the site name, WAN interface and network name on the WAN service configuration interface, the tunnel information of all stations is calculated; in the case that the tunnel information is successfully configured, it is configured according to the WAN service The bandwidth attribute information on the interface configures the bandwidth information of all sites, and sends the bandwidth information to the target device under the corresponding site, and uses the SD-WAN service orchestration system to check whether the bandwidth information is configured successfully. In this case, calculate the static routes of all sites according to the WAN interface and the tunnel type in the pre-configured information, and deliver the static route related information to the target device under the corresponding site, and use the SD-WAN business orchestration system to check whether the static route is The configuration is successful. If the related information of the static route is configured successfully, the corresponding carrier-grade NAT (CGN) information is generated according to the WAN interface and local Internet access support, and the CGN information is sent to the corresponding site The target device, and use the SD-WAN service orchestration system to check whether the CGN information is configured successfully. If the configuration is successful, the batch configuration process of the WAN service configuration information is ended.

In an embodiment, the LAN service information includes at least one of the following: site name, access mode, IP address, subnet mask, and bound port.

In one embodiment, configuring LAN service configuration information in batches includes: generating corresponding Layer 3 interfaces according to the access mode and bound ports; in the case of successful Layer 3 interface configuration, binding the Layer 3 interface to the generated VRF information; when the VRF information is successfully configured, the operator-level NAT information is generated based on the Layer 3 interface, access mode, and bound port; when the carrier-level NAT information is configured successfully, it is based on the bound port and access The corresponding Virtual Router Redundancy Protocol (VRRP) information is generated from the corresponding virtual router redundancy protocol (VRRP) information with the pre-determined HA heartbeat configuration information, Layer 3 interface; in the case of successful configuration of VRRP information, according to the binding port, access mode and The Layer 3 interface generates static routes.

In the embodiment, the LAN service information is stored in the preset database through the preset interface, the three-layer interface is generated according to the access mode and the related attribute information of the bound interface, and the three-layer interface is delivered to the target under the corresponding site Equipment, and use the SD-WAN business orchestration system to check whether the Layer 3 interface is successfully configured. When the Layer 3 interface is successfully configured, bind the Layer 3 interface to the pre-generated VRF information, and send the VRF information to the corresponding The target device under the site, and use the SD-WAN business orchestration system to check whether the VRF information is configured successfully. When the VRF information is configured successfully, the corresponding attribute information is generated according to the three-layer interface, access mode and binding port. Carrier-level NAT information, and deliver the carrier-level NAT information to the relevant target devices under the corresponding site, and use the SD-WAN business orchestration system to check whether the carrier-level NAT information is configured successfully, and the carrier-level NAT information is configured successfully In the case of, the corresponding VRRP information is generated according to the bound port, access mode, Layer 3 interface and predetermined HA heartbeat configuration information, and the VRRP information is delivered to the relevant target device under the corresponding site, and the SD- The WAN service orchestration system checks whether the VRRP information is successfully configured. If the VRRP information is configured successfully, it generates static routes based on the bound port, access mode, and Layer 3 interface, and sends the relevant information of the static route to the relevant site under the corresponding site. The target device, and check whether the static route is successfully configured, and if the static route is successfully configured, the batch configuration process of the LAN service configuration information is ended.

In an implementation manner, FIG. 2 is a flowchart of another SD-WAN service orchestration method provided by an embodiment of the present application. In this embodiment, the first user is a tenant and the second user is an operator or an enterprise user as an example to illustrate the process of the SD-WAN service orchestration method. As shown in Figure 2, this embodiment includes S210-S260.

S210. Create an operator or enterprise user, and import an asset information file on the asset management interface.

In the embodiment, the asset information file includes attribute information such as device SN, IP address, subnet mask, device type, remarks, and whether it is manually online or not. In one embodiment, the values of "whether to go online manually" are "yes" and "no", and the SD-WAN business orchestration system saves the imported asset information into the PG database through the restful interface. In addition, the "equipment SN list" in the resource information in step S03 is required to be in the "equipment SN preparation" of the asset information.

S220. Create a tenant.

In the embodiment, attribute information such as tenant name, description, and whether it is managed by a superior is configured on the tenant management interface, and the SD-WAN business orchestration system saves the tenant information configured by the user into the PG database through the restful interface.

S230. Configure resource information of the tenant.

In the embodiment, select the tenant’s tunnel type, topology type, network name, network type, device SN list, site name, site role, site location, and resource information associated with the device SN on the resource interface corresponding to the first user resource configuration information The SD-WAN business orchestration system saves the resource information configured by the user in the PG database through the restful interface, creates site and network element information, and configures the online application information.

S240. Configure WAN services of all sites in batches.

In the embodiment, attribute information such as site name, WAN interface, bandwidth, network name, and whether to surf the Internet locally is configured on the WAN service configuration interface, and the system delivers the WAN service configured by the user to the relevant target device. After the target device responds successfully, The SD-WAN service orchestration system saves WAN services into the PG database through the restful interface.

S250. Configure HA for all sites in batches.

In the embodiment, HA heartbeat lines of all sites are configured on the HA configuration interface, and the SD-WAN service orchestration system saves the HA information configured by the user into the PG database through the restful interface.

S260. Configure the LAN services of all sites in batches.

In the embodiment, the site name, access mode, IP address, subnet mask, binding port and other attribute information are configured on the LAN service configuration interface, and the system sends the LAN service configured by the user to the relevant target device. After the device responds successfully, the SD-WAN service orchestration system saves the LAN service into the PG database through the restful interface.

In an implementation manner, FIG. 3 is a configuration flowchart of first user resource configuration information provided by an embodiment of the present application. As shown in Figure 3, this embodiment includes: S301-S314.

S301. The pre-configured attribute information is stored in the database.

In the embodiment, the SD-WAN service orchestration system is used to call the restful interface to save the tunnel type, topology type, network name, network type and other information in the pre-configured attribute information in the PG database.

S302. Create site attribute information and VRF information.

In the embodiment, site attribute information and VRF information are generated according to attribute information such as site name, site role, and site location in the site attribute information.

S303. Configure site attribute information and VRF information.

In the embodiment, the SD-WAN service orchestration system calls the restful interface to configure site attribute information and VRF information, and saves the site information and VRF information obtained by the configuration in the PG database.

S304. Whether the configuration of the site information and the VRF information is successful, if not, execute S305; if yes, execute S306.

In the embodiment, the SD-WAN service orchestration system checks whether the site information and the VRF information are configured successfully, if the configuration fails, S305 is executed, otherwise, S306 is executed.

S305. Delete the pre-configured attribute information.

In the embodiment, the SD-WAN service orchestration system calls the restful interface to delete the pre-configured attribute information in the PG database, and exits the processing flow.

S306. Create online application attribute information.

In the embodiment, according to the device SN list, the site name associated with the device SN, and attribute information such as the device type, the device SN, whether it is manually online (the value is No), the port type, and the WAN port in the asset information, the online application is generated Property information.

S307. Configure online application attribute information to obtain online application information.

In the embodiment, the SD-WAN service orchestration system calls the restful interface to configure the online application attribute information, and saves the configured online application information in the PG database.

S308. Whether the online application information is configured successfully, if not, execute S309; if yes, execute S310.

In the embodiment, the SD-WAN service orchestration system checks whether the online application information is configured successfully, and if the configuration fails, S309 is executed, otherwise, S310 is executed.

S309. Delete the pre-configured attribute information and site information.

In the embodiment, the SD-WAN service orchestration system calls the restful interface to delete the pre-configured attribute information and site information in the PG database, and exits the processing flow.

S310. Create network element attribute information.

In the embodiment, the corresponding network element attribute information is generated according to the device SN list, the site name associated with the device SN, and the device SN, device type, IP address, subnet mask, and whether it is manually online or not in the asset information. .

S311. Configure network element attribute information to obtain network element information.

In the embodiment, the SD-WAN service orchestration system calls the restful interface to configure the network element attribute information, and saves the configured network element information in the PG database.

S312. Whether the configuration of the network element information is successful, if not, execute S313; if yes, execute S314.

In the embodiment, the SD-WAN service orchestration system checks whether the configuration of the network element information is successful, and if the configuration fails, S313 is executed; otherwise, S314 is executed.

S313. Delete the pre-configured attribute information, site information, and online application information.

In the embodiment, the SD-WAN service orchestration system calls the restful interface to delete the pre-configured attribute information, site information, and online application information in the PG database, and ends the processing flow.

S314. End.

In an implementation manner, FIG. 4 is a configuration flowchart of WAN service configuration information provided by an embodiment of the present application. As shown in Figure 4, this embodiment includes S401-S417.

S401, WAN business information is stored in the database.

In the embodiment, the WAN service information is saved in the PG database through the restful interface.

S402. Configure VRF information.

In the embodiment, the pre-generated VRF information is distributed to the target devices of all sites.

S403. Whether the configuration of the VRF information is successful, if not, execute S403; if yes, execute S405.

In the embodiment, it is checked whether the configuration of the VRF information is successful, if the configuration fails, S404 is executed, otherwise, S405 is executed.

S404. Delete the WAN service information in the PG database.

In the embodiment, the WAN service in the PG database is deleted through the restful interface, and the processing flow is exited.

S405. Configure tunnel information.

In the embodiment, the tunnel information of all sites is calculated according to the topology type, the tunnel type, and the site name, WAN interface, network name and other attribute information of the WAN service configuration interface in the pre-configured attribute information. In one embodiment, the calculation rules for the tunnel information are as follows: if the topology type is HUB-SPOKE and the tunnel type is IPSec or VxLAN, the corresponding site role is obtained from the site attribute information according to the site name. If the current site role is HUB , Find other WAN services with the same network name and the site role of SPOKE, and generate an IPSec or VxLAN tunnel; if the current site role is SPOKE, find other WAN services with the same network name and the site role of HUB, and generate an IPSec or VxLAN tunnel. If the topology type is ANY-TO-ANY and the tunnel type is IPSec or VxLAN, obtain the corresponding interconnected site list from the site attribute information according to the site name, find other WAN services with the same network name and the site name in the interconnected site list, Generate an IPSec or VxLAN tunnel, and finally deliver the tunnel information to the devices at the corresponding site.

S406. Whether the tunnel information is configured successfully, if not, execute S407; if yes, execute S408.

In the embodiment, the SD-WAN service orchestration system is used to check whether the tunnel information is configured successfully, if the configuration fails, S407 is executed, otherwise, S408 is executed.

S407. Delete the VRF information and the WAN service information.

In the embodiment, the VRF information and the WAN service information in the PG database are deleted through the restful interface, and the processing flow is exited.

S408. Configure bandwidth information.

In the embodiment, according to the bandwidth attribute information of the WAN configuration interface, the configured bandwidth information is delivered to the target device under the corresponding site.

S409. Whether the bandwidth information is configured successfully, if not, execute S410; if yes, execute S411.

In the embodiment, it is checked whether the bandwidth configuration is successful, if the configuration fails, S410 is executed, otherwise, S411 is executed.

S410. Delete tunnel information, VRF information, and WAN service information.

In the embodiment, the tunnel information, VRF information, and WAN service information in the PG database are deleted through the restful interface, and the processing flow is exited.

S411. Configure a static route.

In the embodiment, the static routes of all sites are calculated according to the WAN interface and the tunnel type in the pre-configured attribute information, and the static route information is delivered to the devices under the sites.

S412. Whether the static route is configured successfully, if not, execute S413; if yes, execute S414.

In the embodiment, it is checked whether the configuration of the static route is successful, if the configuration fails, S413 is executed, otherwise, S414 is executed.

S413. Delete bandwidth information, tunnel information, VRF information, and WAN service information.

In the embodiment, the bandwidth, tunnel information, VRF information, and WAN services in the PG database are deleted through the restful interface, and the processing flow is exited.

S414. Configure CGN information.

In the embodiment, the CGN information is generated according to the WAN interface and whether the local Internet access is attributed, and the CGN information is delivered to the equipment under the corresponding site.

S415. Whether the configuration of the CGN information is successful, if not, execute S416; if yes, execute S417.

In the embodiment, it is checked whether the configuration of the CGN information is successful, if the configuration fails, S416 is executed, otherwise, S417 is executed.

S416. Delete the static route, bandwidth information, tunnel information, VRF information, and WAN service information.

In the embodiment, the static route, bandwidth information, tunnel information, VRF information, and WAN service information in the PG database are deleted through the restful interface, and the processing flow is exited.

S417. End.

In an implementation manner, FIG. 5 is a configuration flowchart of LAN service configuration information provided by an embodiment of the present application. As shown in Figure 5, this embodiment includes S501-S517.

S501, LAN business information is stored in the database.

In the embodiment, the related configuration information of the LAN service information is saved in the PG database through the restful interface.

S502. Configure a Layer 3 interface.

In the embodiment, the Layer 3 interface is configured according to the access mode and the binding port attribute, and then the Layer 3 interface is delivered to the relevant target device under the corresponding site.

S503. Whether the Layer 3 interface is configured successfully, if not, execute S504; if yes, execute S505.

In an embodiment, it is checked whether the configuration of the Layer 3 interface is successful, and if the configuration fails, S504 is executed; otherwise, S505 is executed.

S504. Delete the LAN service information.

In the embodiment, the LAN service information in the PG database is deleted through the restful interface, and the processing flow is exited.

S505. Configure VRF information.

In the embodiment, the Layer 3 interface generated in S502 is bound to the pre-generated VRF information, and then the configured VRF information is delivered to the target device under the corresponding site.

S506. Whether the configuration of the VRF information is successful, if not, execute S507; if yes, execute S508.

In the embodiment, it is checked whether the configuration of the VRF information is successful, if the configuration fails, S507 is executed, otherwise, S508 is executed.

S507. Delete the Layer 3 interface and LAN service information.

In the embodiment, the LAN service information in the Layer 3 interface and the PG database is deleted through the restful interface, and the processing flow is exited.

S508. Configure CGN information.

In the embodiment, the CGN information is configured according to the Layer 3 interface, access mode, and binding interface attributes, and then the CGN information is delivered to the target device under the corresponding site.

S509. Whether the configuration of the CGN information is successful, if not, execute S510; if yes, execute S511.

In an embodiment, it is checked whether the configuration of the CGN information is successful, and if the configuration fails, step S510 is performed, otherwise, step S511 is performed.

S510. Delete VRF information, Layer 3 interface and LAN service information.

In the embodiment, the VRF information, the Layer 3 interface, and the LAN service information in the PG database are deleted through the restful interface, and the processing flow is exited.

S511. Configure VRRP information.

In the embodiment, the VRRP information is generated according to the bound port, access mode, Layer 3 interface, and pre-configured HA heartbeat information, and then the VRRP information is delivered to the target device under the corresponding site.

S512. Whether the VRRP information is configured successfully, if not, execute S513; if not, execute S514.

In the embodiment, it is checked whether the configuration of the VRRP information is successful, if the configuration fails, step S513 is executed, otherwise, S514 is executed.

S513. Delete VRF information, CGN information, Layer 3 interface and LAN service information.

In the embodiment, the LAN service information in the three-layer interface, CGN information, VRF and PG database is deleted through the restful interface, and the processing flow is exited.

S514. Configure a static route.

In the embodiment, the static route is generated according to the bound port, the access mode, and the Layer 3 interface, and then the static route is delivered to the target device under the corresponding site.

S515. Whether the static route configuration is successful, if not, execute S516; if yes, execute S517.

In the embodiment, it is checked whether the static route configuration is successful, if the configuration fails, S516 is executed, otherwise the processing flow is ended.

S516. Delete VRRP information, VRF information, CGN information, Layer 3 interface and LAN service information.

In the embodiment, the LAN service in the VRRP information, CGN information, VRF and PG database is deleted through the restful interface, and the processing flow is exited.

S517. End.

Fig. 6 is a structural block diagram of an SD-WAN service orchestration system provided by an embodiment of the present application. This embodiment is suitable for the case of batch configuration and automatic orchestration of services. As shown in Figure 6, the system in this embodiment includes: SD-WAN portal 610, SD-WAN front-end interface 620, and SD-WAN back-end server 630; SD-WAN front-end interface 620 includes: first user management module 6201 , Asset management module 6202, first user resource configuration module 6203, SD-WAN service configuration module 6204;

Among them, the SD-WAN portal website 610 is set to integrate the functions supported by the SD-WAN system into the same web interface;

The first user management module 6201 is set to create, modify, delete and query the first user; the asset management module 6202 is set to import and export asset information; the first user resource configuration module 6203 is set to preset attribute configuration, site automatic Create and automatically create network elements and apply for configuration when going online; SD-WAN service configuration module 6204 is set to automatically create and delete WAN services, LAN services, and HA;

The SD-WAN back-end server 630 is set as a back-end processing module corresponding to the SD-WAN front-end interface.

In an implementation manner, FIG. 7 is a structural block diagram of another SD-WAN service orchestration system provided by an embodiment of the present application. As shown in FIG. 7, the SD-WAN service orchestration system in this embodiment includes: an SD-WAN portal website 710, an SD-WAN front-end interface 720, and an SD-WAN back-end server 730. In the embodiment, the SD-WAN portal website 710 refers to the portal website of the SD-WAN system, which integrates the functions supported by the SD-WAN system into the same web interface.

In an implementation manner, FIG. 8 is a structural block diagram of an SD-WAN front-end interface provided by an embodiment of the present application. As shown in FIG. 8, the SD-WAN front-end interface in this embodiment includes: a first user management module 8201, an asset management module 8202, a first user resource configuration module 8203, and an SD-WAN service configuration module 8204.

Fig. 9 is a structural block diagram of an SD-WAN service orchestration device provided by an embodiment of the present application. This embodiment is suitable for the case where services are configured in batches and automated orchestrated. As shown in FIG. 9, the device in this embodiment includes: a generating module 910, a first configuration module 920, and a sending module 930.

Wherein, the generating module 910 is configured to generate corresponding batch configuration instructions according to the received first user resource configuration information;

The first configuration module 920 is configured to configure the wide area network WAN service configuration information and the local area network LAN service configuration information in batches according to the batch configuration instruction;

The sending module 930 is configured to deliver the WAN service configuration information and the LAN service configuration information to the target device, and the WAN service configuration information and the LAN service configuration information are used to enable the target device to perform related service processing.

The SD-WAN service orchestration apparatus provided in this embodiment is configured to implement the SD-WAN service orchestration method of the embodiment shown in FIG. 1. The implementation principles and technical effects of the SD-WAN service orchestration apparatus provided in this embodiment are similar and will not be repeated here. Go into details.

In an embodiment, the SD-WAN service orchestration apparatus further includes: a first storage module, configured to deliver the WAN service configuration information and the LAN service configuration information to the target device, and receive the response success instruction fed back by the target device In the case of WAN service configuration information and LAN service configuration information are stored in the preset database.

In an embodiment, the SD-WAN service orchestration device further includes:

The import module is configured to import the asset information file in the asset management interface corresponding to the second user created in advance before generating the corresponding batch configuration instructions according to the received resource configuration information of the first user. The first user includes the following: Enterprises, operators;

The second storage module is configured to store all asset information in the asset information file to a preset database;

The second configuration module is configured to configure the first user information on the user management interface corresponding to the first user created in advance, and the first user is the tenant of the second user;

The third storage module is configured to store the first user information in a preset database.

In an embodiment, the first user resource configuration information includes at least one of the following: pre-configured attribute information, network element attribute information, online application attribute information, and site attribute information.

In an embodiment, the pre-configured attribute information includes at least one of the following: topology type, tunnel type, network name, and network type;

The network element attribute information includes at least one of the following: the device SN list and the site name associated with the device SN;

The online application attribute information includes at least one of the following: device SN, device type, port type, wide area port, and site name associated with the device SN;

The site attribute information includes at least the following items: site name, site role, site location, and list of interconnected sites.

In an embodiment, the configuration process of the first user resource configuration information further includes: before generating the corresponding site information and VRF information according to the site attribute information, storing the pre-configured attribute information in a preset database.

In an embodiment, the asset information includes at least one of the following: device SN, IP address, subnet mask, device type, whether it is manually online, port type, and WAN port.

In one embodiment, configuring LAN service configuration information in batches includes: generating corresponding Layer 3 interfaces according to the access mode and bound ports; in the case of successful Layer 3 interface configuration, binding the Layer 3 interface to the generated VRF information; when the VRF information is successfully configured, the operator-level NAT information is generated based on the Layer 3 interface, access mode, and bound port; when the carrier-level NAT information is configured successfully, it is based on the bound port and access The corresponding virtual router redundancy protocol VRRP information is generated by the method, the three-layer interface and the predetermined HA heartbeat configuration information; when the VRRP information is successfully configured, the static route is generated according to the bound port, the access mode and the three-layer interface.

In an embodiment, the first user information includes at least one of the following: the first user name, description information, and superior escrow status.

FIG. 10 is a schematic structural diagram of a device provided by an embodiment of the present application. As shown in Figure 10, the device provided by the present application includes a processor 1010 and a memory 1020. The number of processors 1010 in the device may be one or more. One processor 1010 is taken as an example in FIG. 10. The number of memories 1020 in the device may be one or more, and one memory 1020 is taken as an example in FIG. 10. The processor 1010 and the memory 1020 of the device are connected by a bus or in other ways. In FIG. 10, the connection by a bus is taken as an example. Illustratively, the device may be a personal computer.

The memory 1020, as a computer-readable storage medium, can be configured to store software programs, computer-executable programs, and modules, such as program instructions/modules corresponding to the equipment of any embodiment of the present application (for example, the SD-WAN service orchestration device The generation module 910, the first configuration module 920, and the sending module 930). The memory 1020 may include a program storage area and a data storage area, where the program storage area may store an operating system and an application program required by at least one function; the data storage area may store data created according to the use of the device, and the like. In addition, the memory 1020 may include a high-speed random access memory, and may also include a non-volatile memory, such as at least one magnetic disk storage device, a flash memory device, or other non-volatile solid-state storage devices. In some examples, the memory 1020 may further include a memory remotely provided with respect to the processor 1010, and these remote memories may be connected to the device through a network. Examples of the aforementioned networks include, but are not limited to, the Internet, corporate intranets, local area networks, mobile communication networks, and combinations thereof.

The device provided above can be configured to execute the SD-WAN service orchestration method provided by any of the above embodiments, and has corresponding functions and effects.

The embodiment of the present application also provides a storage medium containing computer-executable instructions. When the computer-executable instructions are executed by a computer processor, they are used to execute an SD-WAN service orchestration method. The method includes: according to the received first User resource configuration information generates corresponding batch configuration instructions; configures WAN service configuration information and local area network LAN service configuration information in batches according to the batch configuration instructions; sends WAN service configuration information and LAN service configuration information to the target device, and WAN service configuration information and The LAN service configuration information is used to enable the target device to perform related service processing.

The embodiments of the present application provide an SD-WAN service orchestration method, system, equipment, and storage medium, which realize batch configuration and automatic orchestration of services, and improve operation and maintenance efficiency.

Those skilled in the art should understand that the term user equipment encompasses any suitable type of wireless user equipment, such as a mobile phone, a portable data processing device, a portable web browser, or a vehicle-mounted mobile station.

In general, the various embodiments of the present application can be implemented in hardware or dedicated circuits, software, logic or any combination thereof. For example, some aspects may be implemented in hardware, while other aspects may be implemented in firmware or software that may be executed by a controller, microprocessor, or other computing device, although the present application is not limited thereto.

The embodiments of the present application may be implemented by executing computer program instructions by a data processor of a mobile device, for example, in a processor entity, or by hardware, or by a combination of software and hardware. Computer program instructions can be assembly instructions, Instruction Set Architecture (ISA) instructions, machine instructions, machine-related instructions, microcode, firmware instructions, state setting data, or written in any combination of one or more programming languages Source code or object code.

The block diagram of any logic flow in the drawings of the present application may represent program steps, or may represent interconnected logic circuits, modules, and functions, or may represent a combination of program steps and logic circuits, modules, and functions. The computer program can be stored on the memory. The memory can be of any type suitable for the local technical environment and can be implemented using any suitable data storage technology, such as but not limited to read-only memory (Read-Only Memory, ROM), random access memory (Random Access Memory, RAM), optical Memory devices and systems (Digital Video Disc (DVD) or Compact Disk (CD)), etc. Computer-readable media may include non-transitory storage media. The data processor can be any type suitable for the local technical environment, such as but not limited to general-purpose computers, special-purpose computers, microprocessors, digital signal processors (Digital Signal Processing, DSP), application specific integrated circuits (ASICs) ), programmable logic devices (Field-Programmable Gate Array, FGPA), and processors based on multi-core processor architecture.

Claims

An SD-WAN service orchestration method, including:

Generate corresponding batch configuration instructions according to the received first user resource configuration information;

Configure the wide area network WAN service configuration information and the local area network LAN service configuration information in batches according to the batch configuration instruction;

The WAN service configuration information and the LAN service configuration information are delivered to a target device, and the WAN service configuration information and the LAN service configuration information are used to enable the target device to perform related service processing.
The method according to claim 1, after the step of delivering the WAN service configuration information and the LAN service configuration information to a target device, the method further comprises:

In the case of receiving the response success instruction fed back by the target device, the WAN service configuration information and the LAN service configuration information are stored in a preset database.
The method according to claim 1, before the step of generating corresponding batch configuration instructions according to the received first user resource configuration information, further comprising:

Import the asset information file into the asset management interface corresponding to the second user created in advance. The second user includes one of the following: an enterprise and an operator;

Store all asset information in the asset information file in a preset database;

Configuring first user information on the user management interface corresponding to the first user created in advance, where the first user is a tenant of the second user;

The first user information is stored in a preset database.
The method according to claim 1, wherein the first user resource configuration information includes at least one of the following: pre-configured attribute information, network element attribute information, online application attribute information, and site attribute information;

The pre-configured attribute information includes at least one of the following: topology type, tunnel type, network name, and network type;

The network element attribute information includes at least one of the following: a device SN list and the name of a site associated with the device SN;

The online application attribute information includes at least one of the following: device SN, device type, port type, wide area port, and site name associated with the device SN;

The site attribute information includes at least one of the following: site name, site role, site location, and list of interconnected sites.
The method according to claim 4, wherein the configuration process of the first user resource configuration information comprises:

Generate corresponding site information and virtual routing and forwarding VRF information according to the site attribute information;

In the case where the site information and the VRF information are successfully created, corresponding online application information is generated according to the network element attribute information and part of the asset information; the asset information includes at least one of the following: device SN, IP address , Subnet mask, device type, whether to manually go online, port type and WAN port;

In the case that the online application information is successfully configured, corresponding network element information is generated according to the network element attribute information and part of the asset information.
The method according to claim 4, wherein the WAN service information includes at least one of the following: site name, WAN interface information, bandwidth attribute information, network name, local Internet access support status;

Correspondingly, the batch configuration of WAN service configuration information includes:

Determine the tunnel information of all sites according to part of the pre-configured attribute information and the site name, the WAN interface information, and the network name;

In the case that the tunnel information is successfully configured, determine the bandwidth information of all stations according to the bandwidth attribute information;

In the case that the bandwidth information is successfully configured, determine static routes for all sites according to the WAN interface information and the tunnel type;

In the case that the static route configuration is successful, corresponding carrier-level NAT information is generated according to the WAN interface information and the local Internet access support situation.
The method according to claim 4, wherein the LAN service information includes at least one of the following: site name, access mode, IP address, subnet mask, and bound port;

Correspondingly, the batch configuration of LAN service configuration information includes:

Generate a corresponding Layer 3 interface according to the access mode and the bound port;

In the case that the layer 3 interface is successfully configured, binding the layer 3 interface to the generated VRF information;

In the case where the VRF information is successfully configured, generating operator-level NAT information according to the Layer 3 interface, the access mode, and the bound port;

In the case that the carrier-level NAT information is successfully configured, the corresponding virtual router redundancy protocol VRRP is generated according to the bound port, the access mode, the three-layer interface and the predetermined HA heartbeat configuration information information;

In the case that the VRRP information is successfully configured, a static route is generated according to the bound port, the access mode, and the layer 3 interface.
An SD-WAN service orchestration system, including: SD-WAN portal website, SD-WAN front-end interface, and SD-WAN back-end server; the SD-WAN front-end interface includes: a first user management module, an asset management module, and a second One user resource configuration module, SD-WAN service configuration module;

The SD-WAN portal website is set to integrate the functions supported by the SD-WAN system into the same web interface;

The first user management module is set to create, modify, delete and query the first user; the asset management module is set to import and export asset information; the first user resource configuration module is set to preset attribute configuration , Automatic site creation, automatic creation of network elements, and online application configuration; The SD-WAN service configuration module is set to automatically create and delete WAN services, LAN services, and HA;

The SD-WAN back-end server is set as a back-end processing module corresponding to the SD-WAN front-end interface.
A device, including: a memory, and, one or more processors; wherein,

Memory, set to store one or more programs;

When the one or more programs are executed by the one or more processors, the one or more processors implement the method according to any one of claims 1-7.
A storage medium storing a computer program, wherein when the computer program is executed by a processor, the method according to any one of claims 1-7 is implemented.