CN103001953B - Virtual machine network resource allocation methods and device - Google Patents

Abstract

The present invention provides a virtual machine network resource allocation method and device. The method includes: a first physical host receives a virtual machine resource request message sent by a user, and the virtual machine resource request message is used to request network allocation of at least one virtual machine resources; if the virtual machine resource request message requests to allocate network resources of a virtual machine, then the first physical host allocates private VLAN resources for the user in the private VLAN resource pool of the first physical host, so The private VLAN resources are used to isolate virtual machines on a Layer 2 network; if the virtual machine resource request message requests to allocate network resources of at least two virtual machines, the first physical host is in the community VLAN of the first physical host The user is allocated community VLAN resources in the resource pool, and the community VLAN resources are used to connect virtual machines on the Layer 2 network. The present invention realizes the needs of a large number of users through the above method and device.

Description

Virtual machine network resource allocation method and device

technical field

The invention relates to computer technology, in particular to a virtual machine network resource allocation method and device.

Background technique

802.1Q VLAN (Virtual Local Area Network) is a virtual local area network, which is a technology that realizes a virtual workgroup by logically rather than physically dividing devices in a local area network into network segments. VLAN technology allows network managers to logically divide a physical LAN into different broadcast domains. Each VLAN includes a group of computer workstations with the same requirements, and has the same attributes as the physically formed LAN.

In the prior art, a VLAN is assigned to each tenant. However, in this mode, due to the limitation of the 802.1Q VLAN protocol, it can only support up to 4094 VLANs. Therefore, it can only serve up to 4094 tenants, which cannot meet the needs of a large number of users. need.

Contents of the invention

The present invention provides a virtual machine network resource allocation method and device, which are used to realize the demands of a large number of users.

In one aspect, the present invention provides a virtual machine network resource allocation method, including:

The first physical host receives a virtual machine resource request message sent by a user, where the virtual machine resource request message is used to request allocation of network resources of at least one virtual machine;

If the virtual machine resource request message requests to allocate network resources of a virtual machine, the first physical host allocates private VLAN resources to the user in the private VLAN resource pool of the first physical host, and the private VLAN resources are used to isolate virtual machines on the Layer 2 network;

If the virtual machine resource request message requests to allocate network resources of at least two virtual machines, the first physical host allocates community VLAN resources to the user in the community VLAN resource pool of the first physical host, and the Community VLAN resources are used to connect VMs on a Layer 2 network.

In another aspect, the present invention provides a virtual machine network resource allocation device, including:

A receiving module, configured to receive a virtual machine resource request message sent by a user, where the virtual machine resource request message is used to request allocation of network resources of at least one virtual machine;

An allocation module, configured to allocate private VLAN resources to the user in the private VLAN resource pool of the first physical host by the first physical host when the virtual machine resource request message requests allocation of network resources of a virtual machine , the private VLAN resource is used to isolate virtual machines on a Layer 2 network; when the virtual machine resource request message requests to allocate network resources of at least two virtual machines, the first physical host is in the community of the first physical host The user is allocated community VLAN resources in the VLAN resource pool, and the community VLAN resources are used to connect virtual machines on the Layer 2 network.

In the method and device for allocating virtual machine network resources provided by the present invention, if a user requests network resources of a virtual machine, the physical machine can allocate private VLAN resources for the virtual machine in the private VLAN resource pool so that the virtual machine is isolated on the second-layer network ; If the user requests network resources of at least two virtual machines, the physical machine can allocate community VLAN resources for the virtual machines in the community VLAN resource pool so that the at least two virtual machines requested by the user can communicate on the Layer 2 network, and private VLAN resources can be Reuse, so as to meet the needs of a large number of users.

Description of drawings

FIG. 1 is a flowchart of an embodiment of a method for allocating virtual machine network resources according to the present invention;

FIG. 2 is a flow chart of another embodiment of the method for allocating virtual machine network resources according to the present invention;

FIG. 3 is a flowchart of another embodiment of the method for allocating virtual machine network resources according to the present invention;

FIG. 4 is a flow chart of still another embodiment of the method for allocating virtual machine network resources according to the present invention;

Fig. 5 is a schematic diagram of virtual machine network interconnection across physical subnets in the present invention;

FIG. 6 is a schematic structural diagram of an embodiment of a virtual machine network resource allocation device according to the present invention;

FIG. 7 is a schematic structural diagram of another embodiment of an apparatus for allocating virtual machine network resources according to the present invention.

Detailed ways

In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments It is a part of embodiments of the present invention, but not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the protection scope of the present invention.

Fig. 1 is a flowchart of an embodiment of a method for allocating virtual machine network resources according to the present invention. As shown in Fig. 1, the method for allocating virtual machine network resources includes:

101. The first physical host receives a virtual machine resource request message sent by a user, where the virtual machine resource request message is used to request allocation of network resources of at least one virtual machine.

In the embodiment of the present invention, when the physical host receives a user's virtual machine resource allocation request, it can allocate different network resources according to different needs of different users for virtual machine resources. The invention aggregates virtual network resources into resource pools, including a group of virtual switches, private virtual local area network VLAN resource pools and community virtual local area network VLAN resource pools. Specifically, set the Layer 2 ports of all virtual switches to trunk mode for connection between virtual switches; create a virtual switch on each physical host, and initialize a private VLAN resource for all virtual switches pool and a community VLAN resource pool, and record all resource pool information into the database of the data center.

102. If the virtual machine resource request message requests to allocate network resources of a virtual machine, the first physical host allocates private VLAN resources to the user in the private VLAN resource pool of the first physical host, and The above private VLAN resources are used to isolate virtual machines on the Layer 2 network.

If a user requests to allocate a virtual machine's network resources, it indicates that the user's virtual machine usually does not want to communicate with other users' virtual machines when it is running, so that it will be interfered by other users. In the private VLAN resource pool of the physical host of the resource, network resources are allocated to the virtual machine. According to the layer-3 routing function of the virtual switch, the virtual machine is isolated from other virtual machines in the layer-2 network.

Private VLAN resources can be reused on different physical machines, because the virtual machines allocated to private VLAN resources belong to different users, so the above-mentioned virtual machines cannot communicate at the second layer of the switch.

103. If the virtual machine resource request message requests to allocate network resources of at least two virtual machines, the first physical host allocates community VLAN resources to the user in the community VLAN resource pool of the first physical host, The community VLAN resources are used to connect virtual machines on a Layer 2 network.

If a user requests to allocate network resources of at least two virtual machines, since these virtual machines belong to the same user, or are used by the same user for the same business, the user usually hopes that the at least two virtual machines can communicate with each other for convenience. User same operation and management. Therefore, network resources can be allocated to the virtual machine in the community VLAN resource pool of the physical host that the user requests to allocate the network resources of the virtual machine. At the same time, according to the layer-3 routing function of the switch, the group of virtual machines can communicate in the layer-2 network, but the group of virtual machines cannot communicate with the virtual machines assigned to the private VLAN resources in the layer-2 network.

In the virtual machine network resource allocation method provided by the present invention, if the user requests the network resources of a virtual machine, the physical machine can allocate private VLAN resources for the virtual machine in the private VLAN resource pool so that the virtual machine is isolated in the two-layer network; if When a user requests network resources of at least two virtual machines, the physical machine can allocate community VLAN resources to the virtual machines in the community VLAN resource pool so that at least two virtual machines requested by the user can communicate on the Layer 2 network, and private VLAN resources can be reused , so as to meet the needs of a large number of users.

Fig. 2 is the flow chart of another embodiment of the virtual machine network resource allocation method of the present invention, as shown in Fig. 2, when the private VLAN resource in the current physical host is not enough to allocate for a virtual machine, the method may include:

201. The first physical host receives a virtual machine resource request message sent by a user, where the virtual machine resource request message is used to request allocation of network resources of at least one virtual machine.

202. If the virtual machine resource request message requests to allocate a network resource of a virtual machine, the first physical host judges whether the private VLAN resources in its private VLAN resource pool can meet the allocation requirement of the virtual machine resource request message. If the network resources of one virtual machine are satisfied, then step 203 is performed; if not, then step 204 is performed.

When a user requests the physical host to allocate network resources for a virtual machine, the remaining private VLAN resources on the physical host may be insufficient. Therefore, before the physical host allocates virtual network resources to the virtual machine, a judgment can be made to determine whether the remaining private VLAN resources of the physical host can be allocated to users.

203. If the private VLAN resources in the private VLAN resource pool of the first physical host can satisfy the network resources of a virtual machine allocated by the virtual machine resource request message, then the first physical host in the first The private VLAN resource is allocated to the user in the private VLAN resource pool of the physical host.

204. If the private VLAN resources in the private VLAN resource pool of the first physical host cannot satisfy the network resources of a virtual machine allocated by the virtual machine resource request message, the first physical host determines to assign the virtual machine The machine resource request message requests the allocated virtual machine to migrate to the second physical host, so that the second physical host allocates private VLAN resources for the user in the private VLAN resources of the second physical host.

After receiving a user request to allocate network resources for a virtual machine, the physical host detects that the network resources owned by the machine can be allocated for the virtual machine, and then allocates resources for the user virtual machine in the private VLAN resource pool of the physical host; the physical host detects If the network resources owned by this machine are not enough to allocate for the virtual machine, then the virtual machine is migrated to another physical host through the virtual machine switch, and the target physical host allocates resources for the virtual machine in its private VLAN resource pool. In this way, although the virtual machine does not belong to the target physical host, the allocation of network resources and the normal operation of services can still be guaranteed.

In the virtual machine network resource allocation method provided by the present invention, if the user requests the network resources of a virtual machine, the physical machine can allocate private VLAN resources for the virtual machine in the private VLAN resource pool so that the virtual machine is isolated in the two-layer network; if When a user requests network resources of at least two virtual machines, the physical machine can allocate community VLAN resources to the virtual machines in the community VLAN resource pool so that at least two virtual machines requested by the user can communicate on the Layer 2 network, and private VLAN resources can be reused , so as to meet the needs of a large number of users. Through the migration of virtual machines between different physical hosts, resource allocation across physical hosts is realized, and the normal operation of services on virtual machines can be guaranteed.

Fig. 3 is a flowchart of another embodiment of the virtual machine network resource allocation method of the present invention. As shown in Fig. 3, when the community VLAN resources in the current physical host are insufficient to allocate at least two virtual machines, the method may include:

301. The first physical host receives a virtual machine resource request message sent by a user, where the virtual machine resource request message is used to request allocation of network resources of at least one virtual machine.

302. If the virtual machine resource request message requests to allocate network resources of at least two virtual machines, the first physical machine judges whether the community VLAN resources in its community VLAN resource pool can satisfy at least the resource allocation requested by the virtual machine resource request message. If the network resources of the two virtual machines are satisfied, go to step 303; if not, go to step 304.

Similarly, when a user requests a physical host to allocate network resources for two or more virtual machines, if the remaining network resources on the physical host are not enough to allocate to the two or more virtual machines created on the physical host, The operation of services between virtual machines cannot be guaranteed. Therefore, before the physical host allocates community VLAN resources to the virtual machine, it can be judged to check whether the physical host still has enough community VLAN resources for allocation.

303. If the community VLAN resources in the community VLAN resource pool of the first physical host can satisfy the network resources of at least two virtual machines allocated by the virtual machine resource request message, then the first physical host in the first The community VLAN resource is allocated to the user in the community VLAN resource pool of the physical host, and the community VLAN resource is used to connect the virtual machine on the Layer 2 network.

304. If the community VLAN resources in the community VLAN resource pool of the first physical host cannot satisfy the at least two virtual machine network resources allocated by the virtual machine resource request message, the first physical host determines that the incapable At least one virtual machine that satisfies the allocation requested by the virtual machine resource request message is migrated to a third physical host, so that the third physical host allocates a community VLAN for the user in the community VLAN resource of the third physical host resource.

Similarly, after receiving a user request to allocate network resources for two or more virtual machines, the physical host detects whether the community VLAN resources owned by the machine meet the allocation requirements for two or more virtual machines. Allocate resources for user virtual machines in the community VLAN resource pool of the physical host; if not satisfied, at least one virtual machine will be migrated to another physical host through the virtual machine switch, and the target physical host will be assigned resources in its community VLAN resource pool. Allocate resources to virtual machines. In this way, although the two or more virtual machines do not belong to the target physical host, the allocation of network resources and the normal operation of services can still be guaranteed. Moreover, this group of virtual machines is connected on the layer 2 network, but isolated from other virtual machines on the layer 2 network, which also ensures the interaction within the same service and the security isolation from other services.

305. Verify whether the virtual machines allocated community VLAN resources on the first physical host and the third physical host can communicate on the Layer 2 network.

In the virtual machine network resource allocation method provided by the present invention, if the user requests the network resources of a virtual machine, the physical machine can allocate private VLAN resources for the virtual machine in the private VLAN resource pool so that the virtual machine is isolated in the two-layer network; if When a user requests network resources of at least two virtual machines, the physical machine can allocate community VLAN resources to the virtual machines in the community VLAN resource pool so that at least two virtual machines requested by the user can communicate on the Layer 2 network, and private VLAN resources can be reused , so as to meet the needs of a large number of users. Through the migration of virtual machines between different physical hosts, the communication and resource allocation between virtual machines across physical hosts are realized, and the normal operation of services on virtual machines can be guaranteed at the same time.

Fig. 4 is a flowchart of another embodiment of the virtual machine network resource allocation method of the present invention. As shown in Fig. 4, the community VLAN resources in the current physical host are not enough to allocate at least two virtual machines, and the target physical host to which the virtual machine is migrated When the original physical host does not belong to the same physical subnet, the method may include:

401. The first physical host receives a virtual machine resource request message sent by a user, where the virtual machine resource request message is used to request allocation of network resources of at least one virtual machine.

402. If the virtual machine resource request message requests to allocate network resources of at least two virtual machines, the first physical server judges that the community VLAN resources in its community VLAN resource pool can satisfy at least two of the virtual machine resource request messages. Network resources for the virtual machine.

403. If the community VLAN resources in the community VLAN resource pool of the first physical host can satisfy at least one virtual machine network resource allocated by the virtual machine resource request message, then the first physical host in the first The community VLAN resource is allocated to the user in the community VLAN resource pool of the physical host, and the community VLAN resource is used to connect the virtual machine on the Layer 2 network.

404. If the community VLAN resources in the community VLAN resource pool of the first physical host cannot satisfy at least one virtual machine network resource allocated by the virtual machine resource request message, then the first physical host determines that the incapable At least one virtual machine satisfying the allocation requested by the virtual machine resource request message is migrated to the third physical host.

405. The first physical host determines whether the third physical host and the first physical host belong to the same physical subnet; if they belong to the same subnet, perform step 406, and if some do not belong to the same subnet, perform step 407.

406. Directly connect the virtual machine to the virtual switch of the third physical host, so that the virtual machine allocated to the user on the first physical host is the same as the virtual machine allocated to the user on the third physical host. The host communicates on the Layer 2 network, so that the third physical host allocates community VLAN resources to the user in the community VLAN resources of the third physical host.

407. The third physical host creates an isolated virtual switch IVS, and establishes a bidirectional GRE tunnel between the IVS and the physical subnet to which the first physical host belongs, so that the first physical host is the The virtual machine allocated by the user communicates with the virtual machine allocated to the user on the third physical host on the Layer 2 network, so that the third physical host is the third physical host in the community VLAN resource of the third physical host for the Users allocate community VLAN resources.

Considering the following situation: If a user needs to allocate 3 virtual machines, and the community VLAN resource of the physical host in the current physical subnet is only enough to allocate the resources used by the two virtual machines, the third one needs to be placed in another physical subnet. In the server of the network, the user certainly hopes that the three virtual machines can communicate with each other at the second layer. Due to the need to span different physical subnets, the third virtual machine needs to communicate with the other two virtual machines through a router.

The invention ensures the interconnection of virtual machines at the layer 2 by establishing layer 2 tunnels between different physical subnets. As shown in Figure 5, a virtual machine in physical subnet 2 needs to be migrated to physical subnet 1 for community VLAN resource allocation, then create an isolated virtual switch (IVS, Isolated Virtual Switch) 1 in physical subnet 1, Connect the IVS1 to the target physical subnet 2 through a bidirectional General Routing Encapsulation (GRE, General Routing Encapsulation) tunnel; similarly, another virtual machine in the physical subnet 3 needs to be migrated to the physical subnet 1 for community VLAN resource allocation, Create an IVS2 in physical subnet 1, connect the IVS2 to the target physical subnet 3 through a bidirectional GRE tunnel, and then realize network resource allocation of virtual machines across physical subnets.

408. Verify whether the virtual machines allocated community VLAN resources on the first physical host and the third physical host can communicate on the Layer 2 network.

In the virtual machine network resource allocation method provided by the present invention, if the user requests the network resources of a virtual machine, the physical machine can allocate private VLAN resources for the virtual machine in the private VLAN resource pool so that the virtual machine is isolated in the two-layer network; if When a user requests network resources of at least two virtual machines, the physical machine can allocate community VLAN resources to the virtual machines in the community VLAN resource pool so that at least two virtual machines requested by the user can communicate on the Layer 2 network, and private VLAN resources can be reused , so as to meet the needs of a large number of users. Through the migration of virtual machines between physical hosts in different physical subnets, IVS is created, and at the same time, GRE tunnels are used to connect different physical subnets to realize communication and resource allocation between virtual machines across physical subnets. Ensure the normal operation of services on the virtual machine.

FIG. 6 is a flow chart of an embodiment of a virtual machine network resource allocation device according to the present invention. As shown in FIG. 6, the device includes:

The receiving module 61 is configured to receive a virtual machine resource request message sent by a user, and the virtual machine resource request message is used to request allocation of network resources of at least one virtual machine;

The allocation module 62 is configured to allocate a private VLAN to the user in the private VLAN resource pool of the first physical host by the first physical host when the virtual machine resource request message requests to allocate network resources of a virtual machine resources, the private VLAN resources are used to isolate virtual machines on a Layer 2 network; when the virtual machine resource request message requests to allocate network resources of at least two virtual machines, the first physical host is on the first physical host The community VLAN resource is allocated to the user in the community VLAN resource pool, and the community VLAN resource is used to connect the virtual machine on the Layer 2 network.

Fig. 7 is a flowchart of another embodiment of the device for allocating virtual machine network resources according to the present invention. As shown in Fig. 7, the device may include:

The receiving module 71 is configured to receive a virtual machine resource request message sent by a user, and the virtual machine resource request message is used to request allocation of network resources of at least one virtual machine;

The allocation module 74 is configured to allocate a private VLAN to the user in the private VLAN resource pool of the first physical host by the first physical host when the virtual machine resource request message requests to allocate network resources of a virtual machine resources, the private VLAN resources are used to isolate virtual machines on a Layer 2 network; when the virtual machine resource request message requests to allocate network resources of at least two virtual machines, the first physical host is on the first physical host The community VLAN resource is allocated to the user in the community VLAN resource pool, and the community VLAN resource is used to connect the virtual machine on the Layer 2 network.

Optionally, the device for allocating virtual machine network resources may also include:

A judging module 72, configured to judge whether the private VLAN resources in the private VLAN resource pool of the first physical host can meet the requirements before allocating private VLAN resources to the user in the private VLAN resource pool of the first physical host. The virtual machine resource request message requests the allocated network resources of a virtual machine;

The migration module 73 is configured to, when the private VLAN resources in the private VLAN resource pool of the first physical host cannot satisfy the network resources of a virtual machine allocated by the virtual machine resource request message, the first physical host determines migrating a virtual machine allocated by the virtual machine resource request message to a second physical host, so that the second physical host allocates private VLAN resources for the user in the private VLAN resources of the second physical host .

Optionally, the judging module 72 can also be used for:

Before the first physical host allocates community VLAN resources to the user in the community VLAN resource pool of the first physical host, it is judged whether the community VLAN resources in the community VLAN resource pool of the first physical host can meet the requirements. The network resource of at least two virtual machines allocated by the virtual machine resource request message;

Optionally, the migration module 73 can also be used for:

When the community VLAN resource in the community VLAN resource pool of the first physical host cannot satisfy at least one virtual machine network resource allocated by the virtual machine resource request message, the first physical host determines that the The virtual machine resource request message requests at least one allocated virtual machine to migrate to a third physical host, so that the third physical host allocates community VLAN resources for the user in the community VLAN resources of the third physical host.

Optionally, the judging module 72 can also be used for:

Before the first physical host determines to migrate the at least one virtual machine that cannot satisfy the allocation requested by the virtual machine resource request message to a third physical host, determine whether the third physical host and the first physical host belong to the same physical subnet;

Optionally, the migration module 73 can also be used for;

When the third physical host and the first physical host belong to different physical subnets, the first physical host creates an isolated virtual switch IVS, and creates an isolated virtual switch IVS on the physical subnet to which the IVS and the first physical host belong A bidirectional general routing encapsulation GRE tunnel is established between them, so that the virtual machine allocated to the user on the first physical host communicates with the virtual machine allocated to the user on the third physical host on a Layer 2 network.

Optionally, the device for allocating virtual machine network resources may also include:

A verification module 75, configured to verify whether the virtual machines allocated the community VLAN resources can communicate on the Layer 2 network.

In this embodiment, the virtual machine memory sharing device is an execution device related to the virtual machine network resource allocation method. For the specific process of executing the virtual machine network resource allocation method, please refer to the relevant descriptions in the method embodiments shown in FIGS. 1-5 of the present invention. , which will not be repeated here.

The virtual machine network resource allocation device provided by the present invention, if the user requests the network resources of a virtual machine, the physical machine can allocate private VLAN resources for the virtual machine in the private VLAN resource pool so that the virtual machine is isolated on the two-layer network; if When a user requests network resources of at least two virtual machines, the physical machine can allocate community VLAN resources to the virtual machines in the community VLAN resource pool so that at least two virtual machines requested by the user can communicate on the Layer 2 network, and private VLAN resources can be reused , so as to meet the needs of a large number of users.

Those of ordinary skill in the art can understand that all or part of the steps for implementing the above method embodiments can be completed by program instructions and related hardware. The aforementioned program can be stored in a computer-readable storage medium. When the program is executed, it executes the steps including the above-mentioned method embodiments; and the aforementioned storage medium includes: ROM, RAM, magnetic disk or optical disk and other various media that can store program codes.

Finally, it should be noted that: the above embodiments are only used to illustrate the technical solutions of the present invention, rather than limiting them; although the present invention has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that: It is still possible to modify the technical solutions described in the foregoing embodiments, or perform equivalent replacements for some or all of the technical features; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the technical solutions of the various embodiments of the present invention. scope.

Claims (10)

1. a virtual machine network resource allocation methods, is characterized in that, comprising:

First physical host receives the resources of virtual machine request message that user sends, and described resources of virtual machine request message is used for the Internet resources of request dispatching at least one virtual machine;

Each physical host creates virtual switch, is the privately owned VLAN resource pool of all virtual switch initialization one and a community VLAN resource pool, and all resource pool information is recorded in the database of data center;

If described resources of virtual machine request message requests distributes the Internet resources of a virtual machine, then described first physical host distributes privately owned VLAN resource for described user in the privately owned VLAN resource pool of described first physical host, and described privately owned VLAN resource is used at double layer network isolation virtual machine;

If described resources of virtual machine request message requests distributes the Internet resources of at least two virtual machines, then described first physical host distributes community VLAN resource for described user in the community VLAN resource pool of described first physical host, and described community VLAN resource is used for being communicated with virtual machine at double layer network.

2. virtual machine network resource allocation methods according to claim 1, is characterized in that, described first physical host is, before described user distributes privately owned VLAN resource, also comprise in the privately owned VLAN resource pool of described first physical host:

Described first physical host judges whether the privately owned VLAN resource in the privately owned VLAN resource pool of described first physical host can meet the Internet resources of the virtual machine that described resources of virtual machine request message requests is distributed;

If the privately owned VLAN resource in the privately owned VLAN resource pool of described first physical host can not meet the Internet resources of the virtual machine that described resources of virtual machine request message requests is distributed, then described first physical host is determined, by virtual machine (vm) migration to the second physical host of described resources of virtual machine request message requests distribution, to distribute privately owned VLAN resource to make described second physical host in the privately owned VLAN resource of described second physical host for described user.

3. virtual machine network resource allocation methods according to claim 1, is characterized in that, described first physical host is, before described user distributes community VLAN resource, also comprise in the community VLAN resource pool of described first physical host:

Described first physical host judges whether the community VLAN resource in the community VLAN resource pool of described first physical host can meet the Internet resources of at least two virtual machines that described resources of virtual machine request message requests is distributed;

If the community VLAN resource in the community VLAN resource pool of described first physical host can not meet at least two virtual machine network resources that described resources of virtual machine request message requests is distributed, then described first physical host determine by described can not meet described resources of virtual machine request message requests distribute described at least one virtual machine (vm) migration at least two virtual machines to the 3rd physical host, in the community VLAN resource of described 3rd physical host, distribute community VLAN resource for described user to make described 3rd physical host.

4. virtual machine network resource allocation methods according to claim 3, it is characterized in that, described first physical host determine by described can not meet described resources of virtual machine request message requests distribute described in before at least one virtual machine (vm) migration at least two virtual machines to the 3rd physical host, also comprise:

Described first physical host judges whether described 3rd physical host and described first physical host belong to Same Physical subnet;

If described 3rd physical host belongs to different physical subnets from described first physical host, then described 3rd physical host creates isolated virtual switch IVS, and two-way generic route encapsulation gre tunneling is set up between the physical subnets belonging to described IVS and described first physical host, communicate at double layer network with the virtual machine that described 3rd physical host distributes for described user to make the virtual machine that described first physical host distributes for described user.

5. the virtual machine network resource allocation methods according to any one of claim 1,3,4, is characterized in that, described first physical host is, after described user distributes community VLAN resource, also comprise in the community VLAN resource pool of described first physical host:

Whether can communicate at double layer network between the virtual machine of the described community VLAN resource of described first physical host checking distribution.

6. a virtual machine network resource allocation device, is characterized in that, comprising:

Receiver module, for receiving the resources of virtual machine request message that user sends, described resources of virtual machine request message is used for the Internet resources of request dispatching at least one virtual machine;

Distribution module, for creating virtual switch on each physical host, being the privately owned VLAN resource pool of all virtual switch initialization one and a community VLAN resource pool, and being recorded in the database of data center by all resource pool information; When described resources of virtual machine request message requests distributes the Internet resources of a virtual machine, first physical host distributes privately owned VLAN resource for described user in the privately owned VLAN resource pool of described first physical host, and described privately owned VLAN resource is used at double layer network isolation virtual machine; When described resources of virtual machine request message requests distributes the Internet resources of at least two virtual machines, described first physical host distributes community VLAN resource for described user in the community VLAN resource pool of described first physical host, and described community VLAN resource is used for being communicated with virtual machine at double layer network.

7. virtual machine network resource allocation device according to claim 6, is characterized in that, described virtual machine network resource allocation device also comprises:

Judge module, for being before described user distributes privately owned VLAN resource in the privately owned VLAN resource pool of described first physical host, judge whether the privately owned VLAN resource in the privately owned VLAN resource pool of described first physical host can meet the Internet resources of the virtual machine that described resources of virtual machine request message requests is distributed;

Transferring module, when can not meet the Internet resources of the virtual machine that described resources of virtual machine request message requests is distributed for the privately owned VLAN resource in the privately owned VLAN resource pool of described first physical host, described first physical host determines virtual machine (vm) migration to the second physical host described resources of virtual machine request message requests distributed, and distributes privately owned VLAN resource to make described second physical host in the privately owned VLAN resource of described second physical host for described user.

8. virtual machine network resource allocation device according to claim 7, is characterized in that, described judge module also for:

For before described user distributes community VLAN resource in the community VLAN resource pool of described first physical host at described first physical host, judge whether the community VLAN resource in the community VLAN resource pool of described first physical host can meet the Internet resources of at least two virtual machines that described resources of virtual machine request message requests is distributed;

Described transferring module also for, when community VLAN resource in the community VLAN resource pool of described first physical host can not meet at least two virtual machine network resources of described resources of virtual machine request message requests distribution, described first physical host determine by described can not meet described resources of virtual machine request message requests distribute at least two virtual machines at least one virtual machine (vm) migration to the 3rd physical host, in the community VLAN resource of described 3rd physical host, distribute community VLAN resource for described user to make described 3rd physical host.

9. virtual machine network resource allocation device according to claim 7, is characterized in that, described judge module also for:

Described first physical host is determined, by before at least one virtual machine (vm) migration in described at least two virtual machines that can not meet the distribution of described resources of virtual machine request message requests to the 3rd physical host, to judge whether described 3rd physical host and described first physical host belong to Same Physical subnet;

Described transferring module also for, when described 3rd physical host belongs to different physical subnets from described first physical host, described 3rd physical host creates isolated virtual switch IVS, and two-way generic route encapsulation gre tunneling is set up between the physical subnets belonging to described IVS and described first physical host, communicate at double layer network with the virtual machine that described 3rd physical host distributes for described user to make the virtual machine that described first physical host distributes for described user.

10. the virtual machine network resource allocation device according to any one of claim 6,8,9, is characterized in that, described virtual machine network resource allocation device also comprises:

Authentication module, in the community VLAN resource pool of described first physical host at described first physical host for after described user distributes community VLAN resource, whether can communicate at double layer network between the virtual machine that checking distributes described community VLAN resource.