WO2023000630A1

WO2023000630A1 - Distributed routing method and apparatus, device, and storage medium

Info

Publication number: WO2023000630A1
Application number: PCT/CN2022/071687
Authority: WO
Inventors: 张宏波
Original assignee: 平安科技（深圳）有限公司
Priority date: 2021-07-23
Filing date: 2022-01-13
Publication date: 2023-01-26
Also published as: CN113595905B; CN113595905A

Abstract

The present application relates to the technical field of cloud, and discloses a distributed routing method and apparatus, a device, and a storage medium, for use in solving the technical problem in the prior art that a large amount of flow table lookup operations would cause the degradation of the performance of a virtual machine network when a virtual switch is used to perform distributed routing management. The method comprises: receiving and extracting a data packet in a data sending instruction, and forwarding the data packet to a host kernel; extracting a source port and a target port of the data sending instruction, and querying a virtual network port associated with the source port in a preset association rule; forwarding the data packet to a corresponding physical network port by means of the virtual network port; extracting data information of the data packet, and looking for a corresponding data forwarding flow table; and performing VXLAN encapsulation according to the data forwarding flow table and the data information to obtain a VXLAN data tunnel, and transmitting the data packet to the target port by means of the VXLAN data tunnel. In addition, the present application further relates to blockchain technology; related information of routing data may be stored in a blockchain.

Description

Distributed routing method, device, equipment and storage medium

This application claims the priority of the Chinese patent application with the application number 202110835453.6 and the title of the invention "distributed routing method, device, equipment and storage medium" filed with the China Patent Office on July 23, 2021, the entire contents of which are incorporated by reference in application.

technical field

The present application relates to the field of cloud technology, and in particular to a distributed routing method, device, equipment and storage medium.

Background technique

When managing the VXLAN distributed routing of the vpc host overlay network, a software virtual switch based on Open vSwitch is required to implement the distributed routing function. In general, when Open vSwitch is used to implement virtual switching, a large number of upcalls will be sent to the user plane if the kernel flow table misses. In the case of a large number of short connections (redis services), the performance of the virtual switch will deteriorate.

In the existing technology, some solutions solve the problem of low performance of short connections caused by upcalls through pre-delivery flow tables, but the inventors realized that it is necessary to search for pre-delivery The flow table makes the operation of looking up the flow table occupy computing resources, which will lead to a decrease in the network performance of the virtual machine.

Contents of the invention

The main purpose of this application is to solve the technical problem that a large number of flow table lookup operations will lead to a decrease in virtual machine network performance when a virtual machine switch is used for distributed routing management.

The first aspect of the present application provides a distributed routing method, including: receiving a data sending instruction, extracting a data packet in the data sending instruction, and forwarding the data packet to the host core; extracting the data sending instruction source port and target port, and query the virtual network port associated with the source port in the preset association rules; forward the data packet to the corresponding physical network port through the virtual network port; extract the data packet According to the data information, look up the corresponding data forwarding flow table from the host kernel according to the data information, wherein the data forwarding flow table is used to indicate the forwarding rule between the physical network port and the target port; according to the Perform VXLAN encapsulation on the data forwarding flow table and the data information to obtain a VXLAN data tunnel, and transmit the data packet to the target port through the VXLAN data tunnel.

The second aspect of the present application provides a distributed routing device, including a memory, a processor, and computer-readable instructions stored on the memory and operable on the processor, and the processor executes the computer-readable instructions. The following steps are implemented when reading the instruction: receiving the data sending instruction, extracting the data packet in the data sending instruction, and forwarding the data packet to the host kernel; extracting the source port and the target port of the data sending instruction, and querying The virtual network port associated with the source port in the preset association rules; forwarding the data packet to the corresponding physical network port through the virtual network port; extracting the data information of the data packet, according to the data information Find the corresponding data forwarding flow table from the host kernel, wherein the data forwarding flow table is used to indicate the forwarding rule between the physical network port and the target port; according to the data forwarding flow table and the data VXLAN encapsulation is performed on the information to obtain a VXLAN data tunnel, and the data packet is transmitted to the target port through the VXLAN data tunnel.

The third aspect of the present application provides a computer-readable storage medium, wherein computer instructions are stored in the computer-readable storage medium, and when the computer instructions are run on the computer, the computer is made to perform the following steps: receiving a data transmission instruction, Extracting the data packet in the data sending instruction, and forwarding the data packet to the host kernel; extracting the source port and the target port of the data sending instruction, and querying the preset association rules associated with the source port the virtual network port; forward the data packet to the corresponding physical network port through the virtual network port; extract the data information of the data packet, and search the corresponding data forwarding flow from the host kernel according to the data information Table, wherein the data forwarding flow table is used to indicate the forwarding rules between the physical network port and the target port; perform VXLAN encapsulation according to the data forwarding flow table and the data information to obtain a VXLAN data tunnel, and pass The VXLAN data tunnel transmits the data packet to the target port.

The fourth aspect of the present application provides a distributed routing device, including: a receiving module, configured to receive a data sending instruction, extract a data packet in the data sending instruction, and forward the data packet to the host core; extract module, used to extract the source port and target port of the data sending instruction, and query the virtual network port associated with the source port in the preset association rules; the forwarding module is used to pass the data packet through the virtual The network port is forwarded to the corresponding physical network port; the flow table lookup module is used to extract the data information of the data packet, and search the corresponding data forwarding flow table from the host kernel according to the data information, wherein the data The forwarding flow table is used to indicate the forwarding rules between the physical network port and the target port; the transmission module is used to perform VXLAN encapsulation according to the data forwarding flow table and the data information to obtain a VXLAN data tunnel, and pass the The VXLAN data tunnel transmits the data packet to the target port.

In the technical solution provided by this application, the data packet in the data sending instruction is received and extracted, and the data packet is forwarded to the host kernel; the source port and target port of the data sending instruction are extracted, and the source port in the preset association rule is queried Associated virtual network port; forward the data packet to the corresponding physical network port through the virtual network port; extract the data information of the data packet, find the corresponding data forwarding flow table; perform VXLAN encapsulation according to the data forwarding flow table and data information, and obtain VXLAN Data tunnel, and transmit the data packet to the target port through the VXLAN data tunnel. In the embodiment of the present application, the transmission process of the data packet is simplified through the preset forwarding rules, and the operation of searching the flow table is reduced, thereby improving the network performance of the virtual machine.

Description of drawings

FIG. 1 is a schematic diagram of a first embodiment of a distributed routing method in an embodiment of the present application;

FIG. 2 is a schematic diagram of a second embodiment of the distributed routing method in the embodiment of the present application;

FIG. 3 is a schematic diagram of a third embodiment of the distributed routing method in the embodiment of the present application;

FIG. 4 is a schematic diagram of a fourth embodiment of the distributed routing method in the embodiment of the present application;

FIG. 5 is a schematic diagram of an embodiment of a distributed routing device in the embodiment of the present application;

FIG. 6 is a schematic diagram of another embodiment of the distributed routing device in the embodiment of the present application;

FIG. 7 is a schematic diagram of an embodiment of a distributed routing device in the embodiment of the present application.

detailed description

The embodiment of the present application provides a distributed routing method, device, equipment, and storage medium. In the technical solution provided by the present application, the data packet in the data sending instruction is received and extracted, and the data packet is forwarded to the host kernel; the data is extracted Send the source port and target port of the instruction, and query the virtual network port associated with the source port in the preset association rules; forward the data packet to the corresponding physical network port through the virtual network port; extract the data information of the data packet, and find the corresponding The data forwarding flow table; VXLAN encapsulation is performed according to the data forwarding flow table and data information to obtain a VXLAN data tunnel, and the data packet is transmitted to the target port through the VXLAN data tunnel. In the embodiment of the present application, the transmission process of the data packet is simplified through the preset forwarding rules, and the operation of searching the flow table is reduced, thereby improving the network performance of the virtual machine.

The terms "first", "second", "third", "fourth", etc. (if any) in the specification and claims of the present application and the above drawings are used to distinguish similar objects, and not necessarily Used to describe a specific sequence or sequence. It is to be understood that the terms so used are interchangeable under appropriate circumstances such that the embodiments described herein can be practiced in sequences other than those illustrated or described herein. Furthermore, the term "comprising" or "having" and any variations thereof, are intended to cover a non-exclusive inclusion, for example, a process, method, system, product or device comprising a sequence of steps or elements is not necessarily limited to those explicitly listed instead, may include other steps or elements not explicitly listed or inherent to the process, method, product or apparatus.

For ease of understanding, the following describes the specific process of the embodiment of the present application. Please refer to FIG. 1. An embodiment of the distributed routing method in the embodiment of the present application includes:

101. Receive the data sending instruction, extract the data packet in the data sending instruction, and forward the data packet to the host kernel;

It can be understood that the execution subject of the present application may be a distributed routing device, and may also be a terminal or a server, which is not specifically limited here. The embodiment of the present application is described by taking the server as an execution subject as an example.

The distributed routing device described in this embodiment is implemented based on a VPC (Virtual PC, virtual machine) host, and in this embodiment, it is specifically implemented based on Open vSwitch (OVS, an open virtual switching standard) in an Overlay network. Example of the distributed routing method.

When performing a specific routing operation, the server in this embodiment receives a data sending instruction, wherein the data sending instruction includes a data packet to be sent, extracts the data packet contained in the data sending instruction, and sends the data packet to In the VPC host kernel.

102. Extract the source port and target port of the data sending instruction, and query the virtual network port associated with the source port in the preset association rules;

In this step, after receiving the aforementioned data sending instruction, extract the codes of the source port and the target port included in the data sending instruction; The encoding information of the corresponding virtual network port allocated when the port is created, and the associated virtual network port address corresponding to the source port is obtained according to the encoding information of the virtual network port. After obtaining the corresponding associated virtual network port address, send the data packet extracted in the preceding steps to the virtual network port.

In this step, the preset association rule information is the association information generated in advance based on the corresponding relationship between the virtual source port and the virtual network port configured by the preset OVS-agent management system. Specifically, in this embodiment The preset OVS-agent management system will continue to monitor system events. When a corresponding new virtual interface is created when a virtual machine is created in the VPC host, the OVS-agent management system will allocate a virtual network port to the new virtual interface; according to its specific The distribution of the generated association rules.

103. Forward the data packet to the corresponding physical network port through the associated virtual network port;

After the virtual network port receives the data packet, the data packet is forwarded to the physical network port corresponding to the virtual network port.

The following is a specific example to illustrate. In this step, data packets can be forwarded according to the flow table. The specific style of the flow table can be:

in_port=vf,

many match files,

actions:VXLAN_encap(vni),

send to=pf;

Wherein, said in_port represents an input port, vf is a virtual network port, pf is a physical network port, and vni is a VXLAN identifier (VXLAN Network Identifier).

104. Extract the data information of the data packet, and search the corresponding data forwarding flow table from the host kernel according to the data information;

105. Perform VXLAN encapsulation according to the data forwarding flow table and data information to obtain a VXLAN data tunnel, and transmit the data packet to the target port through the VXLAN data tunnel.

The data information of the data packet is extracted, and the corresponding data forwarding flow table is found from the host kernel according to the data information, wherein the data forwarding flow table is used to indicate the forwarding rule between the physical network port and the target port.

In this embodiment, the target address may be an internal address of the virtual machine in this embodiment, or an external address. Perform VXLAN encapsulation according to the flow table and data information, and transmit the data packet to the target address through the underlying network. Among them, VXLAN (Virtual eXtensible Local Area Network) is a tunnel technology that can establish a layer-2 Ethernet network on the basis of a layer-3 network. Network tunnels to achieve cross-regional Layer 2 interconnection; VXLAN generally implements packet encapsulation and decapsulation through software installed on the server, and the network only needs to be reachable by IP routes.

In the embodiment of the present application, the transmission process of the data packet is simplified through the preset forwarding rules, and the operation of searching the flow table is reduced, thereby improving the network performance of the virtual machine.

Referring to Fig. 2, the second embodiment of the distributed routing method in the embodiment of the present application includes:

201. Install the Open vSwitch management tool on the host;

In this embodiment, the Open vSwitch management tool is an OVS-agent management system, through which the OVS-agent management system is used to pre-configure the underlay network, wherein the underlay network refers to the network of the current data center network basic forwarding architecture, as long as Any two points on the data center network can be reached by routing, which refers to the physical base layer. The underlay network can be improved through the technical improvement of the physical network equipment itself, the expansion of the number of equipment, and the scale of bandwidth. It includes all existing traditional networks. technology.

In addition, OVS-datapath must also be configured. Among them, datapath is the OVS kernel module, which is responsible for performing data exchange, that is, matching the data packets received from the receiving port in the flow table, and executing the matched actions. A datapath can correspond to multiple vports (virtual ports).

202. Determine whether a new virtual port is created on the Open vSwitch data path;

Create a virtual machine, and continue to monitor system device events through the OVS-agent management system to determine whether a new virtual interface has been created on the OVS-datapath.

203. If there is, obtain the virtual port code, allocate the virtual network port according to the virtual port code according to the preset allocation rule, and obtain the association rule;

If a new virtual interface is created, the OVS-agent management system assigns a virtual network port to the corresponding virtual interface, and configures the rules that directly associate the virtual interface with the virtual network port, that is, let datapath directly receive packets from the virtual interface , directly forwards to the virtual network port without any processing, and forwards the packet received from the virtual network port to the virtual interface directly.

In addition, OVS-agent needs to query the control plane database, find the network configuration of the online virtual machine, generate the corresponding eSwitch hardware forwarding rules according to the virtual machine network configuration, similar to the rules of the kernel state distributed flow table, and send them to the Physical network port.

204. Check whether there is a process in the virtual machine user control to send a data packet sending instruction through the socket;

The Socket (socket) mentioned in this step is an abstraction of an endpoint for two-way communication between application processes on different hosts in the network. A socket is one end of process communication on the network, providing a mechanism for application layer processes to exchange data using network protocols. From the perspective of its position, the socket connects to the application process and connects to the network protocol stack, which is the interface for the application program to communicate through the network protocol, and the interface for the application program to interact with the network protocol root. Specifically in this embodiment, the Open vSwitch management tool monitors whether there is a process in the virtual machine user control to send a data packet sending instruction through the socket.

205. If so, receive the data sending instruction, extract the data packet in the data sending instruction, and send the data packet to the Host host kernel through the ring in the virtio driver of the virtual machine;

If there is a process to send a data packet sending instruction through the socket, then extract the data packet in the data sending instruction, wherein the distributed routing device described in this embodiment is implemented based on a VPC (Virtual PC, virtual machine) host, in this In the embodiment, the distributed routing method in the embodiment is implemented specifically through the Overlay network based on Open vSwitch (OVS, Open Virtual Switching Standard).

In this step, the virtio is an I/O paravirtualization solution, a set of general I/O device virtualization programs, and an abstraction of a group of general I/O devices in the paravirtualized Hypervisor. Provides a set of communication framework and programming interface between upper-layer applications and various hypervisor virtualization devices (KVM, Xen, VMware, etc.), reducing compatibility problems caused by cross-platform, and greatly improving the efficiency of driver development.

When performing a specific routing operation, the server in this embodiment receives a data sending instruction, wherein the data sending instruction includes a data packet to be sent, extracts the data packet contained in the data sending instruction, and drives it through the virtio of the virtual machine Send the data packet to the host host kernel through the ring.

206. Extract the source port and target port of the data sending instruction, and query the virtual network port associated with the source port in the preset association rules;

207. Forward the data packet to the corresponding physical network port through the virtual network port;

To illustrate with a specific example, in this step, data packets can be forwarded according to the flow table, and the specific style of the flow table can be:

in_port=vf,

many match files,

actions:VXLAN_encap(vni),

send to=pf;

208. Extract the data information of the data packet, and search the corresponding data forwarding flow table from the host kernel according to the data information;

209. Perform VXLAN encapsulation according to the data forwarding flow table and data information to obtain a VXLAN data tunnel, and transmit the data packet to the target port through the VXLAN data tunnel.

In the embodiment of this application, forwarding rules are configured in advance according to the virtual port when the virtual machine is online, and data transmission is performed according to the forwarding rules, which simplifies the transmission process of data packets, reduces the flow table lookup operation of routing operations in this solution, and greatly improves Virtual machine network performance.

Referring to Figure 3, the third embodiment of the distributed routing method in the embodiment of the present application includes:

301. Install the Open vSwitch management tool on the host;

302. Determine whether a new virtual port is created on the Open vSwitch data path;

303. If yes, obtain the virtual port code, allocate the virtual network port according to the virtual port code according to the preset allocation rule, and obtain the association rule;

The contents of step 301-step 303 in this embodiment are basically the same as the contents of step 201-step 203 in the foregoing embodiment, so details are not repeated here.

304. Receive the data sending instruction, extract the data packet in the data sending instruction, and forward the data packet to the host kernel;

305. Extract the source port and target port of the data sending instruction, and query the virtual network port associated with the source port in the preset association rules;

306. Forward the data packet to the corresponding physical network port through the virtual network port;

307. Extract the data information of the data packet, and search the corresponding data forwarding flow table from the host kernel according to the data information;

308. Perform VXLAN encapsulation according to the data forwarding flow table and data information to obtain a VXLAN data tunnel, and transmit the data packet to the target port through the VXLAN data tunnel;

The contents of step 304-step 308 in this embodiment are basically the same as the contents of step 101-step 105 in the foregoing embodiment, so details are not repeated here.

309. Detect whether a virtual network port receives a TC command for flow table offloading;

310. If yes, search the flow table unloading rules in the preset control database;

The distributed routing method in this embodiment can also search and offload the flow table. Specifically, the distributed routing method described in this embodiment uses the offloading function of the network card hardware to perform the offloading operation. Before this step, when creating a virtual machine in the VPC host in this embodiment, the pre-installed OVS-agent management system extracts the configuration information in the code, obtains the flow table unloading rule of the virtual machine, and stores the unloading rule in advance into the database.

In this step, detect whether there is a virtual network port to receive the TC (Traffic Control, flow control) command of flow table unloading, the TC command is a preset control tool in the Linux kernel, and the TC command can be provided by specific hardware Implemented by the TC command issuing rules. Specifically, after detecting that a virtual network port has received a TC command for flow table offloading, the flow table offloading rule corresponding to the virtual network port is found in the preset control database.

311. Call the rule delivery interface of the network card hardware to deliver the flow table unloading rule to the virtual network port that receives the flow table unloading command;

312. The virtual network port unloads the data forwarding flow table corresponding to the flow table unloading TC command according to the flow table offloading rule.

According to the rules of the network card hardware, the interface address is issued, and the flow table unloading rule corresponding to the virtual network port that receives the flow table offloading command is sent. The virtual network port unloads the corresponding data forwarding flow in the TC command according to the received flow table offloading rule. The table is unloaded. In this embodiment, the function of the virtual network port is set in the OVS, and the virtual network port is in one-to-one correspondence with the virtual port of the virtual machine, so that the unloading of the data forwarding flow table can be realized through the writing function of the virtual network port.

In the embodiment of this application, the forwarding rules are configured in advance according to the virtual port when the virtual machine goes online, and data transmission is performed according to the forwarding rules, which simplifies the transmission process of data packets, reduces the flow table lookup operation of routing operations in this solution, and can also perform The search and unloading of the flow table greatly improves the network performance of the virtual machine without using a smart network card.

Please refer to Figure 4, the fourth embodiment of the distributed routing method in the embodiment of the present application includes:

401. Install the Open vSwitch management tool on the host;

402. Determine whether a new virtual port is created on the Open vSwitch data path;

403. If yes, obtain the virtual port code, allocate the virtual network port according to the virtual port code according to the preset allocation rule, and obtain the association rule;

The content in step 401-step 403 in this embodiment is basically the same as the content in step 201-step 203 in the previous embodiment, so it will not be repeated here.

404. Check whether there is a process in the virtual machine user control to send a data packet sending instruction through the socket;

405. If so, receive the data sending instruction, extract the data packet in the data sending instruction, and send the data packet to the Host host kernel through the ring in the virtio driver of the virtual machine;

406. Extract the source port and target port of the data sending instruction, and query the virtual network port associated with the source port in the preset association rules;

The specific content in this step is basically the same as the content in step 102 in the foregoing embodiment, so details are not repeated here.

407. Forward the data packet to the corresponding physical network port through the associated virtual network port;

The specific content in this step is basically the same as the content in step 103 in the foregoing embodiment, so details are not repeated here.

408. Extract the data information of the data packet, and search the corresponding data forwarding flow table from the host kernel according to the data information;

The specific content in this step is basically the same as the content in step 104 in the foregoing embodiment, so details are not repeated here.

409. Perform VXLAN encapsulation according to the data forwarding flow table and data information to obtain a VXLAN data tunnel, and transmit the data packet to the target port through the VXLAN data tunnel;

The specific content in this step is basically the same as the content in step 105 in the foregoing embodiment, so details are not repeated here.

410. Detect whether a virtual network port receives a TC command for flow table offloading;

411. If yes, search the flow table unloading rule in the preset control database;

412. Call the rule delivery interface of the network card hardware to deliver the flow table unloading rule to the virtual network port that receives the flow table unloading command;

413. The virtual network port unloads the corresponding data forwarding flow table in the flow table unloading TC command according to the flow table offloading rule;

414. Detect whether a VXLAN decapsulation command is received;

415. If yes, search for VXLAN decapsulation rules in the preset control database;

416. Call the network card hardware delivery rule interface to deliver the VXLAN decapsulation rule to the virtual network port that receives the VXLAN decapsulation command;

417. The virtual network port decapsulates the corresponding VXLAN data tunnel in the VXLAN decapsulation command according to the VXLAN decapsulation rule.

In addition, the distributed routing method described in this embodiment can also receive a VXLAN decapsulation command, and perform a decapsulation operation on VXLAN when the data forwarding flow table is unloaded. The distributed routing method described in this embodiment uses the write-in function of the network card hardware to perform the VXLAN decapsulation operation. Specifically, after detecting that a virtual network port has received a TC command for VXLAN decapsulation, the VXLAN decapsulation rule corresponding to the virtual network port is found in the preset control database. According to the rules of the network card hardware, the interface address is issued, and the VXLAN decapsulation rule corresponding to the virtual network port that receives the flow table unloading command is sent. The virtual network port decapsulates the corresponding VXLAN data tunnel in the TC command according to the received VXLAN decapsulation rule. encapsulation.

For example, a specific operation statement for offloading a VXLAN-encapsulated flow table can be:

filter protocol all pref 49152flower handle 0x1

dst_mac ea:84:22:e4:2b:da

enc_dst_ip 6.2.14.129

enc_key_id 1048

enc_dst_port 4789

in_hw

action order 1: tunnel_key unset pipe

index 11ref 1bind 1

action order 2:mirred(Egress Redirect to device enp175s0f0_0)stolen

index 11ref 1bind 1;

Among them, the specific meaning of the above statement is: the destination mac matches ea:84:22:e4:2b:da; the destination address matches 6.2.14.129; the key id is 1048; the packet whose destination port is 4789 is first untunneled and then mirrored Give VF interface enp175s0f0_0.

In addition, according to the configuration in this embodiment, the virtual machine in this embodiment can be migrated; when a virtual machine migration instruction is received, the codes of the original virtual machine and the target virtual machine in the virtual machine migration instruction are extracted, and according to the The original virtual machine and the target virtual machine are coded to find the network location of the original virtual machine and the target virtual machine; the storage data in the original virtual machine is backed up, and a transmission channel is created through a data migration command issued by the network card hardware; The backup storage data is transmitted to the target virtual machine through the transmission channel. Among them, in this application, because the virtual network port is placed in the OVS network to replace the solution of directly entering the virtual machine into the virtual machine, the virtual machine can use the standard virtio-net network card driver, so that the virtual machine subsequent migration.

In the embodiment of this application, the forwarding rules are configured in advance according to the virtual port when the virtual machine goes online, and data transmission is performed according to the forwarding rules, which simplifies the transmission process of data packets, reduces the flow table lookup operation of routing operations in this solution, and can also perform The search and unloading of the flow table greatly improves the network performance of the virtual machine without using a smart network card; it also supports the migration of the virtual machine.

The distributed routing method in the embodiment of the present application is described above, and the distributed routing device in the embodiment of the present application is described below. Please refer to FIG. 5. An embodiment of the distributed routing device in the embodiment of the present application includes:

The receiving module 501 is configured to receive a data sending instruction, extract a data packet in the data sending instruction, and forward the data packet to the host core;

An extraction module 502, configured to forward the data packet request to the virtual network port associated with the source port according to the preset association rules according to the source port information of the data packet;

A forwarding module 503, configured to forward the data packet to a physical network port through the associated virtual network port;

A flow table lookup module 504, configured to extract data information of the data packet, and search a preset flow table in the host kernel according to the data information;

The transmission module 505 is configured to perform VXLAN encapsulation according to the flow table and the data information, and transmit the data packet to the target address through the underlying network.

Please refer to Figure 6, another embodiment of the distributed routing device in the embodiment of the present application includes:

Optionally, the receiving module 501 includes:

The checking unit 5011 is used to check whether there is a process in the virtual machine user control to send a data packet sending instruction through the socket;

The transmission unit 5012 is configured to receive the data sending instruction if yes, extract the data packet in the data sending instruction, and send the data packet to the Host host kernel through the ring in the virtio driver of the virtual machine.

Optionally, the distributed routing device further includes a rule setting module 506, and the rule setting module 506 is specifically used for:

Install the Open vSwitch management tool on the host;

Determine whether a new virtual port is created on the Open vSwitch data path;

If so, the virtual port code is obtained, and the virtual network port is allocated according to the virtual port code according to a preset allocation rule to obtain the association rule.

Optionally, the distributed routing device further includes an offload module, and the offload module includes:

The first command receiving unit is used to detect whether a virtual network port has received a TC command for flow table offloading;

The first rule search unit is configured to search the flow table unloading rule in the preset control database if yes;

A first rule issuing unit, configured to call a rule issuing interface of the network card hardware to issue the flow table offloading rule to the virtual network port that has received the flow table offloading command;

The offload execution unit is used for the virtual network port to offload the corresponding flow table in the flow table offload TC command according to the flow table offload rule.

Optionally, the distributed routing device also includes a decapsulation module, and the decapsulation module includes:

The second command receiving unit detects whether a VXLAN decapsulation command is received;

The second rule search unit is used to search the VXLAN decapsulation rule in the preset control database if it is true;

The second rule delivery unit is used to call the network card hardware delivery rule interface to deliver the VXLAN decapsulation rule to the virtual network port that has received the VXLAN decapsulation command;

The decapsulation execution unit is used for the virtual network port to decapsulate the corresponding VXLAN data tunnel in the VXLAN decapsulation command according to the VXLAN decapsulation rule.

Optionally, the distributed routing device further includes a virtual machine migration module, and the virtual machine migration module is specifically used for:

Obtaining a virtual machine migration instruction, and extracting codes of the original virtual machine and the target virtual machine in the virtual machine migration instruction;

Finding the network locations of the original virtual machine and the target virtual machine according to the codes of the original virtual machine and the target virtual machine;

Backing up the stored data in the original virtual machine, and creating a transmission channel through a data migration command issued by the network card hardware;

The backup storage data is transmitted to the target virtual machine through the transmission channel.

The above Figures 5 and 6 describe in detail the distributed routing device in the embodiment of the present application from the perspective of modular functional entities, and the following describes the distributed routing device in the embodiment of the present application in detail from the perspective of hardware processing.

FIG. 7 is a schematic structural diagram of a distributed routing device provided by an embodiment of the present application. The distributed routing device 700 may have relatively large differences due to different configurations or performances, and may include one or more processors (central processing units) , CPU) 710 (eg, one or more processors) and memory 720, one or more storage media 730 (eg, one or more mass storage devices) for storing application programs 733 or data 732 . Wherein, the memory 720 and the storage medium 730 may be temporary storage or persistent storage. The program stored in the storage medium 730 may include one or more modules (not shown in the figure), and each module may include a series of instruction operations on the distributed routing device 700 . Furthermore, the processor 710 may be configured to communicate with the storage medium 730 , and execute a series of instruction operations in the storage medium 730 on the distributed routing device 700 .

The distributed routing device 700 can also include one or more power supplies 740, one or more wired or wireless network interfaces 750, one or more input and output interfaces 760, and/or, one or more operating systems 731, such as Windows Server , Mac OS X, Unix, Linux, FreeBSD, etc. Those skilled in the art can understand that the distributed routing device structure shown in Figure 7 does not constitute a limitation on the distributed routing device, and may include more or less components than shown in the illustration, or combine some components, or different Part placement.

The present application also provides a computer device, which may be any device capable of executing the distributed routing method described in the above embodiments, the computer device includes a memory and a processor, and the memory stores a computer-readable Instructions, when the computer-readable instructions are executed by the processor, the processor is made to execute the steps of the distributed routing method in the foregoing embodiments.

The blockchain referred to in this application is a new application mode of computer technologies such as distributed data storage, point-to-point transmission, consensus mechanism, and encryption algorithm. Blockchain (Blockchain), essentially a decentralized database, is a series of data blocks associated with each other using cryptographic methods. Each data block contains a batch of network transaction information, which is used to verify its Validity of information (anti-counterfeiting) and generation of the next block. The blockchain can include the underlying platform of the blockchain, the platform product service layer, and the application service layer.

The present application also provides a computer-readable storage medium. The computer-readable storage medium may be a non-volatile computer-readable storage medium. The computer-readable storage medium may also be a volatile computer-readable storage medium. Instructions are stored in the computer-readable storage medium, and when the instructions are run on the computer, the computer is made to execute the steps of the distributed routing method.

Those skilled in the art can clearly understand that for the convenience and brevity of the description, the specific working process of the above-described system, device and unit can refer to the corresponding process in the foregoing method embodiment, which will not be repeated here.

If the integrated unit is realized in the form of a software function unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application is essentially or part of the contribution to the prior art or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium , including several instructions to make a computer device (which may be a personal computer, a server, or a network device, etc.) execute all or part of the steps of the methods described in the various embodiments of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (read-only memory, ROM), random access memory (random access memory, RAM), magnetic disk or optical disc and other media that can store program codes. .

As mentioned above, the above embodiments are only used to illustrate the technical solutions of the present application, and are not intended to limit them; although the present application has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that: it can still understand the foregoing The technical solutions described in each embodiment are modified, or some of the technical features are equivalently replaced; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the various embodiments of the application.

Claims

A distributed routing method, wherein the distributed routing method includes:

receiving a data sending instruction, extracting a data packet in the data sending instruction, and forwarding the data packet to the host kernel;

Extracting the source port and target port of the data sending instruction, and querying the virtual network port associated with the source port in the preset association rules;

Forwarding the data packet to the corresponding physical network port through the virtual network port;

extracting the data information of the data packet, and searching for a corresponding data forwarding flow table from the host kernel according to the data information, wherein the data forwarding flow table is used to indicate the connection between the physical network port and the target port Forwarding rules;

Perform VXLAN encapsulation according to the data forwarding flow table and the data information to obtain a VXLAN data tunnel, and transmit the data packet to the target port through the VXLAN data tunnel.
The distributed routing method according to claim 1, wherein the receiving the data sending instruction, extracting the data packet in the data sending instruction, and forwarding the data packet to the host kernel comprises:

Check whether there is a process in the virtual machine user control to send a packet sending instruction through the socket;

If so, receive the data sending instruction, extract the data packet in the data sending instruction, and send the data packet to the Host host kernel through the ring in the virtio driver of the virtual machine.
The distributed routing method according to claim 1 or 2, wherein, before receiving the data sending instruction, extracting the data packet in the data sending instruction, and forwarding the data packet to the host kernel, further comprising: :

Install the Open vSwitch management tool on the host;

Determine whether a new virtual port is created on the Open vSwitch data path;

If so, the virtual port code is obtained, and the virtual network port is allocated according to the virtual port code according to a preset allocation rule to obtain the association rule.
The distributed routing method according to claim 3, wherein, after transmitting the data packet to the target port through the VXLAN data tunnel, further comprising:

Detect whether a virtual network port has received the TC command for flow table offloading;

If so, look for flow table offload rules in the preset control database;

Calling the rule delivery interface of the network card hardware to deliver the flow table offloading rule to the virtual network port that has received the flow table offloading command;

The virtual network port unloads the corresponding data forwarding flow table in the flow table unloading TC command according to the flow table offloading rule.
The distributed routing method according to claim 4, wherein, after transmitting the data packet to the target port through the VXLAN data tunnel, further comprising:

Detect whether a VXLAN decapsulation command is received;

If so, look for VXLAN decapsulation rules in the preset control database;

Calling the network card hardware delivery rule interface to send the VXLAN decapsulation rule to the virtual network port that received the VXLAN decapsulation command;

The virtual network port decapsulates the corresponding VXLAN data tunnel in the VXLAN decapsulation command according to the VXLAN decapsulation rule.
The distributed routing method according to claim 5, wherein, after transmitting the data packet to the target port through the VXLAN data tunnel, further comprising:

Obtaining a virtual machine migration instruction, and extracting codes of the original virtual machine and the target virtual machine in the virtual machine migration instruction;

Finding the network locations of the original virtual machine and the target virtual machine according to the codes of the original virtual machine and the target virtual machine;

Backing up the stored data in the original virtual machine, and creating a transmission channel through a data migration command issued by the network card hardware;

The backup storage data is transmitted to the target virtual machine through the transmission channel.
A distributed routing device, comprising a memory, a processor, and computer-readable instructions stored on the memory and operable on the processor, and the processor implements the following steps when executing the computer-readable instructions:

receiving a data sending instruction, extracting a data packet in the data sending instruction, and forwarding the data packet to the host kernel;

Extracting the source port and target port of the data sending instruction, and querying the virtual network port associated with the source port in the preset association rules;

Forwarding the data packet to the corresponding physical network port through the virtual network port;

extracting the data information of the data packet, and searching for a corresponding data forwarding flow table from the host kernel according to the data information, wherein the data forwarding flow table is used to indicate the connection between the physical network port and the target port Forwarding rules;

Perform VXLAN encapsulation according to the data forwarding flow table and the data information to obtain a VXLAN data tunnel, and transmit the data packet to the target port through the VXLAN data tunnel.
The distributed routing device according to claim 7, wherein the receiving the data sending instruction, extracting the data packet in the data sending instruction, and forwarding the data packet to the host kernel comprises:

Check whether there is a process in the virtual machine user control to send a packet sending instruction through the socket;

If so, receive the data sending instruction, extract the data packet in the data sending instruction, and send the data packet to the Host host kernel through the ring in the virtio driver of the virtual machine.
The distributed routing device according to claim 7 or 8, wherein, before receiving the data sending instruction, extracting the data packet in the data sending instruction, and forwarding the data packet to the host kernel, further comprising: :

Install the Open vSwitch management tool on the host;

Determine whether a new virtual port is created on the Open vSwitch data path;

If so, the virtual port code is obtained, and the virtual network port is allocated according to the virtual port code according to a preset allocation rule to obtain the association rule.
The distributed routing device according to claim 9, wherein, after transmitting the data packet to the target port through the VXLAN data tunnel, further comprising:

Detect whether a virtual network port has received the TC command for flow table offloading;

If so, look for flow table offload rules in the preset control database;

Calling the rule delivery interface of the network card hardware to deliver the flow table offloading rule to the virtual network port that has received the flow table offloading command;

The virtual network port unloads the corresponding data forwarding flow table in the flow table unloading TC command according to the flow table offloading rule.
The distributed routing device according to claim 10, wherein, after transmitting the data packet to the target port through the VXLAN data tunnel, further comprising:

Detect whether a VXLAN decapsulation command is received;

If so, look for VXLAN decapsulation rules in the preset control database;

Calling the network card hardware delivery rule interface to send the VXLAN decapsulation rule to the virtual network port that received the VXLAN decapsulation command;

The virtual network port decapsulates the corresponding VXLAN data tunnel in the VXLAN decapsulation command according to the VXLAN decapsulation rule.
The distributed routing device according to claim 11, wherein, after transmitting the data packet to the target port through the VXLAN data tunnel, further comprising:

Obtaining a virtual machine migration instruction, and extracting codes of the original virtual machine and the target virtual machine in the virtual machine migration instruction;

Finding the network locations of the original virtual machine and the target virtual machine according to the codes of the original virtual machine and the target virtual machine;

Backing up the stored data in the original virtual machine, and creating a transmission channel through a data migration command issued by the network card hardware;

The backup storage data is transmitted to the target virtual machine through the transmission channel.
A computer-readable storage medium, wherein computer instructions are stored in the computer-readable storage medium, and when the computer instructions are run on the computer, the computer is made to perform the following steps:

receiving a data sending instruction, extracting a data packet in the data sending instruction, and forwarding the data packet to the host kernel;

Extracting the source port and target port of the data sending instruction, and querying the virtual network port associated with the source port in the preset association rules;

Forwarding the data packet to the corresponding physical network port through the virtual network port;

extracting the data information of the data packet, and searching for a corresponding data forwarding flow table from the host kernel according to the data information, wherein the data forwarding flow table is used to indicate the connection between the physical network port and the target port Forwarding rules;

Perform VXLAN encapsulation according to the data forwarding flow table and the data information to obtain a VXLAN data tunnel, and transmit the data packet to the target port through the VXLAN data tunnel.
The computer-readable storage medium according to claim 13, wherein the receiving the data sending instruction, extracting the data packet in the data sending instruction, and forwarding the data packet to the host kernel comprises:

Check whether there is a process in the virtual machine user control to send a packet sending instruction through the socket;

If so, receive the data sending instruction, extract the data packet in the data sending instruction, and send the data packet to the Host host kernel through the ring in the virtio driver of the virtual machine.
The computer-readable storage medium according to claim 13 or 14, wherein, before receiving the data sending instruction, extracting the data packet in the data sending instruction, and forwarding the data packet to the host core, further include:

Install the Open vSwitch management tool on the host;

Determine whether a new virtual port is created on the Open vSwitch data path;

If so, the virtual port code is obtained, and the virtual network port is allocated according to the virtual port code according to a preset allocation rule to obtain the association rule.
The computer-readable storage medium according to claim 15, wherein, after transmitting the data packet to the target port through the VXLAN data tunnel, further comprising:

Detect whether a virtual network port has received the TC command for flow table offloading;

If so, look for flow table offload rules in the preset control database;

Calling the rule delivery interface of the network card hardware to deliver the flow table offloading rule to the virtual network port that has received the flow table offloading command;

The virtual network port unloads the corresponding data forwarding flow table in the flow table unloading TC command according to the flow table offloading rule.
The computer-readable storage medium according to claim 16, wherein, after transmitting the data packet to the target port through the VXLAN data tunnel, further comprising:

Detect whether a VXLAN decapsulation command is received;

If so, look for VXLAN decapsulation rules in the preset control database;

Calling the network card hardware delivery rule interface to send the VXLAN decapsulation rule to the virtual network port that received the VXLAN decapsulation command;

The virtual network port decapsulates the corresponding VXLAN data tunnel in the VXLAN decapsulation command according to the VXLAN decapsulation rule.
The computer-readable storage medium according to claim 17, wherein, after transmitting the data packet to the target port through the VXLAN data tunnel, further comprising:

Obtaining a virtual machine migration instruction, and extracting codes of the original virtual machine and the target virtual machine in the virtual machine migration instruction;

Finding the network locations of the original virtual machine and the target virtual machine according to the codes of the original virtual machine and the target virtual machine;

Backing up the stored data in the original virtual machine, and creating a transmission channel through a data migration command issued by the network card hardware;

The backup storage data is transmitted to the target virtual machine through the transmission channel.
A distributed routing device, wherein the distributed routing device includes:

A receiving module, configured to receive a data sending instruction, extract a data packet in the data sending instruction, and forward the data packet to the host kernel;

An extraction module, configured to extract the source port and target port of the data sending instruction, and query the virtual network port associated with the source port in the preset association rules;

A forwarding module, configured to forward the data packet to a corresponding physical network port through the virtual network port;

A flow table lookup module, configured to extract data information of the data packet, and search for a corresponding data forwarding flow table from the host kernel according to the data information, wherein the data forwarding flow table is used to indicate that the physical network Forwarding rules between port and target port;

The transmission module is configured to perform VXLAN encapsulation according to the data forwarding flow table and the data information to obtain a VXLAN data tunnel, and transmit the data packet to the target port through the VXLAN data tunnel.
The distributed routing device according to claim 19, wherein the receiving module comprises:

The checking unit is used to check whether there is a process in the virtual machine user control to send a data packet sending instruction through the socket;

The transmission unit is configured to, if yes, receive the data sending instruction, extract the data packet in the data sending instruction, and send the data packet to the Host host kernel through the ring in the virtio driver of the virtual machine.