WO2021139269A1

WO2021139269A1 - Distributed routing method and apparatus based on open vswitch kernel state flow tables in overlay network

Info

Publication number: WO2021139269A1
Application number: PCT/CN2020/118912
Authority: WO
Inventors: 覃华伟
Original assignee: 平安科技（深圳）有限公司
Priority date: 2020-08-06
Filing date: 2020-09-29
Publication date: 2021-07-15
Also published as: CN111817961A; CN111817961B

Abstract

The present application relates to the field of artificial intelligence and discloses a distributed routing method and apparatus based on open vSwitch kernel state flow tables in an overlay network. The method comprises: when establishing virtual machines in a virtual private cloud of an overlay network, synchronously configuring flow tables separately for four different intercommunication types in the virtual private cloud; maintaining the flow tables in a host kernel during the life cycles of the virtual machines; the four intercommunication types include the type of intercommunication between different virtual machines in a same virtual private cloud, the type of intercommunication between virtual machines in different virtual private clouds, the type of Internet access by virtual machines in a virtual private cloud, and the type of data center common installation access by virtual machines in a virtual private cloud; the flow tables are Open vSwitch kernel state flow tables. The present application configures flow tables separately for four intercommunication types, and the configured flow tables all use kernel state flow tables, thereby avoiding performance degradation due to a large number of upcalls. The configured flow tables accompany the virtual machines for the whole life cycle, thereby providing stable and reliable flow table-based statistics.

Description

Distributed routing method and device based on Open vSwitch kernel state flow table in Overlay network

This application is required to be submitted to the Chinese Patent Office on August 6, 2020, the application number is 202010785582.4, and the title of the invention is "Overlay network based on Open The priority of the Chinese patent application of "vSwitch kernel state flow table distributed routing method and device", the entire content of which is incorporated in this application by reference.

Technical field

This application relates to the field of artificial intelligence technology, and specifically to an overlay network based on Open Distributed routing method and device for vSwitch kernel state flow table.

Background technique

Overlay refers to the virtualization technology mode superimposed on a network architecture in the field of computer network technology. Its general framework is to realize the bearer application on the network without large-scale modification of the basic network, and can be compatible with Separation of other network services, and based on IP-based basic network technology. Open vSwitch (OvS for short) is an open source virtual switching software widely used in the cloud computing industry to provide network administrators with visibility and control of traffic between and within virtual cloud hosts. In short, Open vSwitch is an open OpenFlow switch.

technical problem

In the prior art, the control structure of Open vSwitch+ovsDB and openflow is commonly used, which relies on Open The vSwitch calculates the flow table in the user space and then sends it to the kernel state, or sends an instruction to the kernel state to delete the flow table after the flow table ages. The inventor realized that this technical solution can achieve API compatibility and the process is universal. But there are the following shortcomings:

1. For any newly created flow, the first packet needs to be forwarded to the user mode for flow table calculation, and the processing of the first packet will be delayed.

2. For the establishment of a large number of new connections, a large number of packets will be copied from the kernel mode to the user mode. After calculating the flow table, copying from the user mode to the kernel mode will cause a lot of waste of computing resources. In extreme cases, a large number of short connections may even cause all computing power to be processed upcall process.

3. In a VPC (Virtual Private Cloud, VPC for short) network, unnecessary and frequent flow table creation and aging processes consume too much resources.

4. Once the flow table is aging and deleted, its corresponding statistical items will disappear, which is not friendly to operation and maintenance and problem tracking.

Technical solutions

The purpose of this application is to provide a distributed routing method and device based on the Open vSwitch kernel state flow table in an overlay network. In order to have a basic understanding of some aspects of the disclosed embodiments, a brief summary is given below. This summary is not a general review, nor is it intended to identify key/important elements or describe the scope of protection of these embodiments. Its sole purpose is to present some concepts in a simple form as a prelude to the detailed description that follows.

According to an aspect of the embodiments of the present application, a distributed routing method based on an Open vSwitch kernel state flow table in an Overlay network is provided, including:

When establishing a virtual machine in the virtual private cloud of the Overlay network, synchronously configure flow tables for the four interworking types in the virtual private cloud;

Maintaining the flow table in the host kernel during the life cycle of the virtual machine;

Among them, the four types of intercommunication include the type of intercommunication between virtual machines in the same virtual private cloud, the type of intercommunication between virtual machines of different virtual private clouds, the type of virtual machines in the virtual private cloud accessing the Internet, and the type of virtual machines in the virtual private cloud. The type of the virtual machine in the private cloud accessing the public facilities of the data center; the flow table is Open vSwitch kernel state flow table.

According to another aspect of the embodiments of the present application, a distributed routing device based on an Open vSwitch kernel state flow table in an Overlay network is provided, including:

The first module is used to configure flow tables for four types of intercommunication in the virtual private cloud synchronously when establishing a virtual machine in the virtual private cloud of the overlay network;

The second module is used to keep the flow table in the host kernel during the life cycle of the virtual machine;

According to another aspect of the embodiments of the present application, there is provided an electronic device including a memory, a processor, and a computer program stored on the memory and running on the processor, and the processor executes the program, In order to realize an Overlay network based on Open The distributed routing method of the vSwitch kernel state flow table, wherein the distributed routing method based on the Open vSwitch kernel state flow table in the Overlay network includes the following steps:

According to another aspect of the embodiments of the present application, a computer-readable storage medium is provided with a computer program stored thereon, and the program is executed by a processor to implement an Overlay network based on Open The distributed routing method of the vSwitch kernel state flow table, wherein the distributed routing method based on the Open vSwitch kernel state flow table in the Overlay network includes the following steps:

Beneficial effect

The distributed routing method based on the Open vSwitch kernel state flow table in the Overlay network provided by the embodiment of the application is to configure the flow tables for the four intercommunication types. All the configured flow tables adopt the kernel state flow table, which avoids the performance caused by a large number of upcalls. Decrease; the configured flow table accompanies the entire life cycle of the virtual machine and can provide stable and reliable statistics based on the flow table.

Other features and advantages of this application will be described in the following specification, and partly become obvious from the specification, or part of the features and advantages can be inferred from the specification or determined without doubt, or implemented by implementing this application Example to understand. The purpose and other advantages of the present application can be realized and obtained through the structures specifically pointed out in the written description, claims, and drawings.

Description of the drawings

In order to more clearly describe the technical solutions in the embodiments of the present application or the prior art, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art. Obviously, the drawings in the following description are only These are some embodiments described in this application. For those of ordinary skill in the art, other drawings can be obtained based on these drawings without creative work.

FIG. 1 shows a flow chart of a distributed routing method based on an Open vSwitch kernel state flow table in an Overlay network according to an embodiment of the present application;

FIG. 2 shows a flow chart of the steps of configuring a flow table in a virtual private cloud for the types of intercommunication between virtual machines in the same virtual private cloud in an embodiment of the present application;

FIG. 3 shows a flow chart of the steps of configuring a flow table for the intercommunication types between virtual machines of different virtual private clouds in a virtual private cloud according to an embodiment of the present application;

Fig. 4 shows a structural block diagram of a distributed routing device based on an Open vSwitch kernel state flow table in an Overlay network according to an embodiment of the present application.

The best mode of the present invention

In order to make the objectives, technical solutions, and advantages of this application clearer, the following further describes this application with reference to the accompanying drawings and specific embodiments. It should be understood that the specific embodiments described here are only used to explain the application, and are not used to limit the application. Based on the embodiments in this application, all other embodiments obtained by those of ordinary skill in the art without creative work shall fall within the protection scope of this application.

Those skilled in the art can understand that, unless otherwise defined, all terms (including technical terms and scientific terms) used herein have the same meanings as commonly understood by those of ordinary skill in the art to which this application belongs. It should also be understood that terms such as those defined in general dictionaries should be understood to have a meaning consistent with the meaning in the context of the prior art, and unless specifically defined as here, they will not be idealized or overly Explain the formal meaning.

In the overlay network, the intercommunication types of virtual machines in a virtual private cloud (VPC) can be divided into four categories:

1. The type of intercommunication between virtual machines in the same virtual private cloud;

2. The type of intercommunication between virtual machines of different virtual private clouds;

3. The type of virtual machine accessing the Internet in the virtual private cloud;

4. The type of virtual machines in the virtual private cloud that access the public facilities of the data center.

As shown in Figure 1, an embodiment of the present application provides a distributed routing method based on the Open vSwitch kernel state flow table in an Overlay network, including:

S10. When establishing a virtual machine in the virtual private cloud of the Overlay network, synchronously configure flow tables for the four interworking types in the virtual private cloud;

S20. Keep the flow table in the host kernel during the life cycle of the virtual machine;

Among them, the four types of intercommunication include the type of intercommunication between virtual machines in the same virtual private cloud, the type of intercommunication between virtual machines of different virtual private clouds, the type of virtual machines in the virtual private cloud accessing the Internet, and the type of virtual machines in the virtual private cloud. The type of the virtual machine in the private cloud accessing the public facilities of the data center; the flow table is the Open vSwitch kernel state flow table.

Open vSwitch (OVS for short) is a virtual switch that implements OpenFlow.

The flow tables are respectively configured for the four types of interworking in the virtual private cloud, including:

A. Configure a flow table in the virtual private cloud for the type of intercommunication between virtual machines in the same virtual private cloud;

B. Configure a flow table in the virtual private cloud for the type of intercommunication between virtual machines of the different virtual private clouds;

C. Configure a flow table in the virtual private cloud for the types of virtual machines in the virtual private cloud that access the Internet;

D. Configure a flow table in the virtual private cloud for the types of virtual machines in the virtual private cloud that access the public facilities of the data center. Among them, A, B, C, and D do not represent the order of execution of the steps.

Open vSwitch provides a command ovs-dpctl, which can directly send to the host kernel (kernel) The datapath (datapath) configures the flow table. The style of the flow table can be:

ovs-dpctl add-flow vpc-dp "in_port({vma_veth_id}),eth(src={vma_mac},dst={vmb_mac}),eth_type(0x0800),ipv4(src={vma_ip},dst={vmb_ip})" "set(tunnel(tun_id={vpc_vni},src={host_1_ip},dst={host_2_ip},ttl=128,tp_dst=4789,flags(df|key))),{vxlan_port_id}"

In some embodiments, the deployment of a virtual private cloud includes:

Create an OVS bridge for the physical management network port as the OVS management bridge, and create an OVS bridge for each physical work network port as the OVS work bridge; among them, the physical network port and the OVS bridge are one-to-one correspondence;

When creating a virtual machine (VM), among the virtual network ports added for the virtual machine (VM), the virtual management network port corresponding to the physical management network port is associated with the OVS management bridge, and the virtual work corresponding to the physical working network port is associated The network port is associated with the OVS working bridge;

Set data distribution rules for the target OVS working network bridge through the OVS management bridge; this data distribution rule is used to instruct the target OVS network bridge to distribute the data of multiple users received by the target physical working network port to the corresponding user’s virtual The target virtual network port of the VM; the target physical working network port can be any one of the physical working network ports, the target OVS working network bridge is the OVS network bridge created for the target physical working network port, and the target virtual network port is The virtual working network port associated with the target OVS bridge.

The type of intercommunication between virtual machines in the same virtual private cloud

In most cases, after the virtual private cloud and the virtual machines in the virtual private cloud are all established, there will not be too many architectural changes. For example, four virtual machines VM-A, VM-B, VM-C, and VM-D are included in the same virtual private cloud. Take the virtual machine VM-A perspective as an example:

VM-A sends data to VM-B, VM-C, and VM-D. It only needs to configure a flow table for each of the three virtual machines VM-B, VM-C, and VM-D. The flow table style is as above State the style of the flow table.

When VM-A receives data sent by VM-B, VM-C, VM-D, only one flow table is needed. The flow table style is as follows:

ovs-dpctl add-flow vpc-dp "tunnel(tun_id={vpc_vni},dst={host_vma_ip},flags(-df-csum+key),ttl=64),in_port({vxlan_port_id}),eth(dst={vm_mac}),eth_type(0x0800) ,ipv4(dst={vm_ip})" {vma_veth_id}

The above example shows that VM-A can determine the flow tables sent by other VMs in the same VPC and VM-A receives the flow tables of other VMs in the same VPC. These flow tables can be synchronized when VM-A is created. It is delivered to the host (HOST-01) kernel (kernel) Open vSwitch data path (datapath), without the need to deliver the flow table when the actual traffic is generated, thereby reducing the first packet delay and avoiding upcall.

In some embodiments, the step of issuing a flow table by a virtual machine (VM) includes:

1) After receiving a message from the virtual switch requesting to issue the first flow entry, according to the IP address and MAC address in the message, search for the preset first task priority list;

2) If there is no matching entry in the first task priority list, search the preset second task priority list according to the priority field information in the message.

3) According to the search result obtained in step 2), obtain the task priority parameter corresponding to the message.

4) According to the task priority parameter obtained in step 3), and set the corresponding standard flow entry priority.

5) Deliver the first flow entry to the virtual switch.

6) If a flow table overflow failure message is received from the first flow entry of the virtual switch, the priority of the standard flow entry and the priority of the flow entry that has been successfully delivered to the virtual switch will be saved Perform comparison; according to the comparison result, select the flow entry with the lowest priority as the second flow entry from the flow entry with the priority lower than the priority of the standard flow entry.

7) After notifying the virtual switch to delete the second flow entry, the first flow entry is re-issued to the virtual switch.

In some embodiments, as shown in Figure 2, the flow table is configured in the virtual private cloud for the types of intercommunication between virtual machines in the same virtual private cloud, including:

A1. In the same virtual private cloud, when a virtual machine sends data to other virtual machines, a first flow table is configured corresponding to each of the other virtual machines;

A2. The certain virtual machine configures a second flow table to receive data sent by each of the other virtual machines.

In some embodiments, the configuration of the flow table in the virtual private cloud for the type of intercommunication between the virtual machines in the same virtual private cloud further includes: A3. Creating the first virtual machine When the first flow table and the second flow table are synchronously issued to the Open of the host kernel vSwitch data path.

Types of intercommunication between virtual machines of different virtual private clouds

Check whether there are overlapping virtual machine IP addresses between different virtual private clouds. If there is no overlapping virtual machine IP address between the two virtual private clouds, the flow table can still be used directly to realize the intercommunication between the virtual machine of one virtual private cloud and the virtual machine of the other virtual private cloud.

From VPC1-VM1 to VPC2-VM2, the flow table is as follows

ovs-dpctl add-flow vpc-dp "in_port({vpc1_vm1_port_id}),eth(src={vpc1_vm1_mac},dst={vpc2_vm2_mac}),eth_type(0x0800),ipv4(src={vpc1_vm1_ip},dst={vpc2_vm2_ip})" "set(tunnel(tun_id={vpc2_vni},src={host_vm1_ip},dst={host_vm2_ip},ttl=128,tp_dst=4789,flags(df|key))),{vxlan_port_id}"

From VPC2-VM2 to VPC1-VM1, the flow table is as follows

ovs-dpctl add-flow vpc-dp "in_port({vpc2_vm2_port_id}),eth(src={vpc2_vm2_mac},dst={vpc1_vm1_mac}),eth_type(0x0800),ipv4(src={vpc2_vm2_ip},dst={vpc1_vm1_ip})" "set(tunnel(tun_id={vpc1_vni},src={host_vm2_ip},dst={host_vm1_ip},ttl=128,tp_dst=4789,flags(df|key))),{vxlan_port_id}"

If different virtual private clouds have the same virtual machine IP (Internet Protocol, Internet Protocol) address, use NAT (Network Address Translation, network address translation) technology for the same IP address of virtual machines between different VPCs Map it.

Use NAT (Network Address Translation (Network Address Translation) technology maps the same IP addresses of virtual machines between different VPCs, including: introducing a NAT gateway that supports VXLAN (Virtual eXtensible Local Area Network), and configuring the virtual private cloud Machine IP address mapping rules, such as using IP TABLES.

In some embodiments, as shown in FIG. 3, configuring a flow table in the virtual private cloud for the type of intercommunication between virtual machines of the different virtual private clouds includes:

B1. Detect whether there are overlapping virtual machine IP addresses between different virtual private clouds;

B2. If it does not exist, directly use the flow table to realize the intercommunication between the virtual machine of one virtual private cloud and the virtual machine of another virtual private cloud;

B3. If it exists, use network address translation technology to map the overlapping virtual machine IP addresses.

The using network address translation technology to map the overlapping virtual machine IP addresses includes:

Introduce the network address translation gateway that supports the virtual extended LAN, and configure the mapping rules of the virtual machine IP address of the virtual private cloud.

The type of virtual machine accessing the Internet in the virtual private cloud

To access the Internet, virtual machines in the virtual private cloud need to use a NAT gateway that maps VPC-VM to the public IP. VPC-VM to the NAT gateway also uses a fixed configuration flow table:

ovs-dpctl add-flow vpc-dp "in_port({vm_veth_id}),eth(dst=gateway_mac),eth_type(0x0800),ipv4()" "set(tunnel(tun_id={vpc_vni},src={host_vm_ip},dst={nat_gw_vtep},ttl=128,tp_dst=4789,flags(df|key))),{vxlan_port_id}"

In some embodiments, configuring a flow table in the virtual private cloud for the types of virtual machines in the virtual private cloud accessing the Internet includes:

The virtual machine in the virtual private cloud uses a fixed configuration flow table to access the network address translation gateway, and accesses the Internet through the network address translation gateway.

Types of virtual machines in the virtual private cloud accessing the public facilities of the data center

The public facilities of the data center may be, for example, public DNS, DNS PROXY, public database, HTTP PROXY, software package mirroring, or public network storage. The IP address of the public facilities of the data center is usually configured as a fixed IP segment, and the VPC-VM to the public facilities of the data center also uses the flow table corresponding to the fixed configuration of the IP segment; the virtual machine VPC-VM in the virtual private cloud accesses the data When central public facilities, the flow table used is

ovs-dpctl add-flow vpc-dp "in_port({vm_veth_id}),eth(src={vm_mac}),eth_type(0x0800),ipv4(src={vm_ip},dst={comm_zone_cidr/mask})" "set(tunnel(tun_id={vpc_vni},src={host_vm_ip},dst={nat_gw_vtep},ttl=128,tp_dst=4789,flags(df|key))),{vxlan_port_id}"

In some implementation manners, configuring a flow table in the virtual private cloud for the types of virtual machines in the virtual private cloud accessing public facilities of the data center includes:

The virtual machine in the virtual private cloud accesses the public facilities of the data center through a flow table configured corresponding to a fixed IP segment; wherein the fixed IP segment is an IP address of the public facility of the data center.

When creating a virtual machine in a virtual private cloud, the above four types of flow tables can be configured in the virtual private cloud simultaneously. During the life cycle of the virtual machine, these flow tables can be kept in the kernel of the host, and their corresponding statistical information can be operated and maintained. The platform conducts continuous collection and analysis, such as:

in_port(4),eth(src=88:88:11:11:00:03,dst=88:88:11:11:00:02),eth_type(0x0800),ipv4(src=28.8.0.3,dst =28.8.0.2), packets: 2190, bytes: 214892, used: 52234.782s, actions: 3

On the whole, a virtual machine VM-A is online, and when all virtual machines in the entire VPC are reachable, the above-mentioned four types of flow table configurations need to be performed on the host of the virtual machine; and the VPC is also required The host of other virtual machines configures the flow table, namely FLOW:VM-x→VM-a.

If you only want VM-A to only access other virtual machines in this network segment in this VPC, you only need to add VM-A's intercommunication flow table in this subnet.

In some embodiments, the method further includes: when configuring the flow table, setting a matching item in the flow table, and the matching item is used for data packets sent and/or received by the virtual machine. Perform verification.

In the flow table design, add more matching items to the flow table, such as SOURCE MAC, SOURCE IP, DST MAC, DST IP, etc., do as much verification as possible on the data packets sent and received by the virtual machine, and can also provide extra security for the overlay network outside the firewall.

As shown in FIG. 4, another embodiment of the present application provides a distributed routing device based on an Open vSwitch kernel state flow table in an overlay network, including:

Another embodiment of the present application provides an electronic device, including a memory, a processor, and a computer program stored on the memory and running on the processor, and the processor executes the program to implement The distributed routing method based on the Open vSwitch kernel state flow table in the Overlay network shown in any of the above exemplary embodiments, the distributed routing method based on the Open vSwitch kernel state flow table in the Overlay network includes the following steps:

Another embodiment of the present application provides a computer-readable storage medium. The computer-readable storage medium may be non-volatile or volatile. A computer program is stored thereon, and the program is executed by a processor. , In order to implement the distributed routing method based on the Open vSwitch kernel state flow table in the Overlay network shown in any of the above exemplary embodiments, the distributed routing method based on the Open vSwitch kernel state flow table in the Overlay network includes the following steps :

The distributed routing method based on the Open vSwitch kernel state flow table in the Overlay network provided by the embodiment of the application, the flow tables are configured for the four intercommunication types, and all the configured flow tables adopt the kernel state flow table, avoiding the performance caused by a large number of upcall Decline; the configured flow table accompanies the entire life cycle of the virtual machine, and can provide stable and reliable statistics based on the flow table; this method can be applied to both virtual machine and container networks to provide a consistent network operation and maintenance experience and architecture; in network control The workload is stable and predictable, and there is no performance thrashing problem under short connections in solutions such as openstack; the use of flow tables for data packet distribution avoids the network bottleneck of centralized routing and the possibility of single points of failure, and reduces the network Design difficulty: In the flow table design, adding more matching items to the flow table can perform more verifications and enhance security.

It should be noted:

The term "module" is not intended to be limited to a specific physical form. Depending on the specific application, the module can be implemented as hardware, firmware, software, and/or a combination thereof. In addition, different modules can share common components or even be implemented by the same components. There may or may not be clear boundaries between different modules.

The algorithms and displays provided here are not inherently related to any particular computer, virtual device or other equipment. Various general-purpose devices can also be used with the teaching based on this. From the above description, the structure required to construct this type of device is obvious. In addition, this application is not aimed at any specific programming language. It should be understood that various programming languages can be used to implement the content of the application described herein, and the above description of a specific language is for the purpose of disclosing the best embodiment of the application.

Similarly, it should be understood that, in order to simplify the present disclosure and help understand one or more of the various inventive aspects, in the above description of the exemplary embodiments of the present application, the various features of the present application are sometimes grouped together into a single embodiment, Figure, or its description. However, the disclosed method should not be interpreted as reflecting the intention that the claimed application requires more features than the features explicitly recorded in each claim. More precisely, as reflected in the following claims, the inventive aspect lies in less than all the features of a single embodiment disclosed previously. Therefore, the claims following the specific embodiment are thus explicitly incorporated into the specific embodiment, wherein each claim itself serves as a separate embodiment of the application.

It should be understood that although the various steps in the flowchart of the drawings are displayed in sequence as indicated by the arrows, these steps are not necessarily performed in sequence in the order indicated by the arrows. Unless explicitly stated in this article, the execution of these steps is not strictly limited in order, and they can be executed in other orders. Moreover, at least part of the steps in the flowchart of the drawings may include multiple sub-steps or multiple stages. These sub-steps or stages are not necessarily executed at the same time, but can be executed at different times, and the order of execution is also It is not necessarily performed sequentially, but may be performed alternately or alternately with at least a part of other steps or sub-steps or stages of other steps.

Claims

An Overlay network based on Open The distributed routing method of the vSwitch kernel state flow table includes:

When establishing a virtual machine in the virtual private cloud of the Overlay network, synchronously configure flow tables for the four interworking types in the virtual private cloud;

Maintaining the flow table in the host kernel during the life cycle of the virtual machine;

Among them, the four types of intercommunication include the type of intercommunication between virtual machines in the same virtual private cloud, the type of intercommunication between virtual machines of different virtual private clouds, the type of virtual machines in the virtual private cloud accessing the Internet, and the type of virtual machines in the virtual private cloud. The type of the virtual machine in the private cloud accessing the public facilities of the data center; the flow table is the Open vSwitch kernel state flow table.
The method according to claim 1, wherein configuring a flow table in the virtual private cloud for the type of intercommunication between virtual machines in the same virtual private cloud comprises:

In the same virtual private cloud, when a virtual machine sends data to other virtual machines, a first flow table is configured corresponding to each of the other virtual machines;

The certain virtual machine configures a second flow table to receive data sent by each of the other virtual machines.
The method according to claim 2, wherein the configuring a flow table in the virtual private cloud for the type of intercommunication between the virtual machines in the same virtual private cloud further comprises: creating the first In the virtual machine, the first flow table and the second flow table are synchronously delivered to the Open vSwitch data path of the host kernel.
The method according to claim 1, wherein configuring a flow table in the virtual private cloud for the type of intercommunication between virtual machines of the different virtual private clouds comprises:

Detect whether there are overlapping virtual machine IP addresses between different virtual private clouds;

If it does not exist, directly use the flow table to realize the intercommunication between the virtual machine of one virtual private cloud and the virtual machine of another virtual private cloud;

If it exists, the network address translation technology is used to map the overlapping virtual machine IP addresses.
The method according to claim 4, wherein the using network address translation technology to map the overlapping virtual machine IP addresses comprises:

Introduce the network address translation gateway that supports the virtual extended LAN, and configure the mapping rules of the virtual machine IP address of the virtual private cloud.
The method according to claim 1, wherein configuring a flow table in the virtual private cloud for the type of virtual machines in the virtual private cloud accessing the Internet comprises:

The virtual machine in the virtual private cloud uses a fixed configuration flow table to access the network address translation gateway, and accesses the Internet through the network address translation gateway.
The method according to claim 1, wherein the method further comprises: when configuring the flow table, setting a matching item in the flow table, and the matching item is used to send and/or all data to the virtual machine. The received data packet is checked.
An Overlay network based on Open The distributed routing device of the vSwitch kernel state flow table, including:

The first module is used to configure flow tables for four types of intercommunication in the virtual private cloud synchronously when establishing a virtual machine in the virtual private cloud of the overlay network;

The second module is used to keep the flow table in the host kernel during the life cycle of the virtual machine;

Among them, the four types of intercommunication include the type of intercommunication between virtual machines in the same virtual private cloud, the type of intercommunication between virtual machines of different virtual private clouds, the type of virtual machines in the virtual private cloud accessing the Internet, and the type of virtual machines in the virtual private cloud. The type of the virtual machine in the private cloud accessing the public facilities of the data center; the flow table is the Open vSwitch kernel state flow table.
An electronic device, which includes a memory, a processor, and a computer program stored on the memory and capable of running on the processor, and the processor executes the program to implement an Overlay network based on Open Distributed routing method of vSwitch kernel state flow table:

Wherein, the Overlay network is based on Open The distributed routing method of the vSwitch kernel state flow table includes:

When establishing a virtual machine in the virtual private cloud of the Overlay network, synchronously configure flow tables for the four interworking types in the virtual private cloud;

Maintaining the flow table in the host kernel during the life cycle of the virtual machine;

Among them, the four types of intercommunication include the type of intercommunication between virtual machines in the same virtual private cloud, the type of intercommunication between virtual machines of different virtual private clouds, the type of virtual machines in the virtual private cloud accessing the Internet, and the type of virtual machines in the virtual private cloud. The type of the virtual machine in the private cloud accessing the public facilities of the data center; the flow table is the Open vSwitch kernel state flow table.
The electronic device according to claim 9, wherein configuring a flow table in the virtual private cloud for the type of intercommunication between the virtual machines in the same virtual private cloud comprises:

In the same virtual private cloud, when a virtual machine sends data to other virtual machines, a first flow table is configured corresponding to each of the other virtual machines;

The certain virtual machine configures a second flow table to receive data sent by each of the other virtual machines.
The electronic device according to claim 10, wherein the configuring a flow table in the virtual private cloud for the type of intercommunication between the virtual machines in the same virtual private cloud further comprises: creating the first When a virtual machine is used, the first flow table and the second flow table are synchronously delivered to the Open vSwitch data path of the host kernel.
The electronic device according to claim 9, wherein configuring a flow table in the virtual private cloud for the type of intercommunication between virtual machines of the different virtual private clouds comprises:

Detect whether there are overlapping virtual machine IP addresses between different virtual private clouds;

If it does not exist, directly use the flow table to realize the intercommunication between the virtual machine of one virtual private cloud and the virtual machine of another virtual private cloud;

If it exists, the network address translation technology is used to map the overlapping virtual machine IP addresses.
The electronic device according to claim 12, wherein said using network address translation technology to map said overlapping virtual machine IP addresses comprises:

Introduce the network address translation gateway that supports the virtual extended LAN, and configure the mapping rules of the virtual machine IP address of the virtual private cloud.
The electronic device according to claim 9, wherein configuring a flow table in the virtual private cloud for the type of virtual machines in the virtual private cloud accessing the Internet comprises:

The virtual machine in the virtual private cloud uses a fixed configuration flow table to access the network address translation gateway, and accesses the Internet through the network address translation gateway.
The electronic device according to claim 9, further comprising: when configuring the flow table, setting a matching item in the flow table, and the matching item is used for data sent and/or received by the virtual machine The data packet is checked.
A computer-readable storage medium has a computer program stored thereon, where the program is executed by a processor to implement a distributed routing method based on an Open vSwitch kernel state flow table in an overlay network, wherein the overlay network The distributed routing method based on the Open vSwitch kernel state flow table in, includes the following steps:

When establishing a virtual machine in the virtual private cloud of the Overlay network, synchronously configure flow tables for the four interworking types in the virtual private cloud;

Maintaining the flow table in the host kernel during the life cycle of the virtual machine;

Among them, the four types of intercommunication include the type of intercommunication between virtual machines in the same virtual private cloud, the type of intercommunication between virtual machines of different virtual private clouds, the type of virtual machines in the virtual private cloud accessing the Internet, and the type of virtual machines in the virtual private cloud. The type of the virtual machine in the private cloud accessing the public facilities of the data center; the flow table is the Open vSwitch kernel state flow table.
The computer-readable storage medium according to claim 16, wherein configuring a flow table in the virtual private cloud for the type of intercommunication between virtual machines in the same virtual private cloud comprises:

In the same virtual private cloud, when a virtual machine sends data to other virtual machines, a first flow table is configured corresponding to each of the other virtual machines;

The certain virtual machine configures a second flow table to receive data sent by each of the other virtual machines.
The computer-readable storage medium according to claim 17, wherein the configuring a flow table in the virtual private cloud for the type of intercommunication between the virtual machines in the same virtual private cloud further comprises: creating The first virtual machine synchronously delivers the first flow table and the second flow table to the Open vSwitch data path of the host kernel.
The computer-readable storage medium according to claim 16, wherein configuring a flow table in the virtual private cloud for the type of intercommunication between virtual machines of the different virtual private clouds comprises:

Detect whether there are overlapping virtual machine IP addresses between different virtual private clouds;

If it does not exist, directly use the flow table to realize the intercommunication between the virtual machine of one virtual private cloud and the virtual machine of another virtual private cloud;

If it exists, the network address translation technology is used to map the overlapping virtual machine IP addresses.
The computer-readable storage medium according to claim 19, wherein said using network address translation technology to map said overlapping virtual machine IP addresses comprises:

Introduce the network address translation gateway that supports the virtual extended LAN, and configure the mapping rules of the virtual machine IP address of the virtual private cloud.