WO2015135499A1

WO2015135499A1 - Network virtualization

Info

Publication number: WO2015135499A1
Application number: PCT/CN2015/074199
Authority: WO
Inventors: Wan ZHOU
Original assignee: Hangzhou H3C Technologies Co Ltd
Current assignee: Hangzhou H3C Technologies Co Ltd
Priority date: 2014-03-14
Filing date: 2015-03-13
Publication date: 2015-09-17
Anticipated expiration: 2016-09-14
Also published as: CN104917682B; CN104917682A

Abstract

According to an example, a local NVE registers its IP address information and virtual network instance information at a NVE and obtains IP address information and virtual network instance information of a remote NVE from the NVA. According to the IP address information and the virtual network instance information of the local NVE and the remote NVE, a broadcast tunnel encapsulation entry and a broadcast tunnel decapsulation entry are generated.

Description

NETWORK VIRTUALIZATION

BACKGROUND

Server virtualization is increasingly becoming the norm in data center networks. With server virtualization, each physical server supports multiple virtual machines (VMs) , each running independently. With the server virtualization technique, a data center may provide services such as server hosting to different tenants. Tenants are users of resources of the data center. In order to ensure data security of the tenants, virtual networks are used to isolate a tenant’s traffic from other tenants. For this reason the physical network inside the data center may be divided into different virtual networks.

In order to realize division of different virtual networks inside the physical network, a “network virtualization over layer 3” (NVO3) technique is provided. NVO3 is a network overlay technique, which performs tunnel encapsulation to packets of the virtual networks through introducing a tunnel technique, so as to differentiate different virtual networks via different tunnels.

BRIEF DESCRIPTION OF THE DRAWINGS

Features of the present disclosure are illustrated by way of example and not limited in the following figure (s) , in which like numerals indicate like elements, in which:

FIG. 1 shows a structure of a NVO3 data center according to various examples of the present disclosure；

FIG. 2 shows an overlay network automatic configuring method according to various examples of the present disclosure；

FIG. 3 shows a structure of a NVE according to various examples of the present disclosure； and

FIG. 4 shows hardware structure of a NVE in which the overlay network automatic configuring method and apparatus are applied according to various examples of the present disclosure.

DETAILED DESCRIPTION

Hereinafter, various examples will be described by referring to the figures.

In the following description, numerous specific details are set forth in order to provide a thorough understanding of the present disclosure. It will be readily apparent however, that the present disclosure may be practiced without limitation to these specific details. In other instances, some methods and structures have not been described in detail so as not to unnecessarily obscure the present disclosure. As used herein, the term “includes” means includes but not limited to, the term “including” means including but not limited to. The term “based on” means based at least in part on. In addition, the terms “a” and “an” are intended to denote at least one of a particular element.

FIG. 1 is a schematic diagram illustrating a network virtualization over layer 3 (NVO3) data center network according to an example of the present disclosure. As shown in FIG. 1, the data center network includes: an IP network 101, tenant end systems 102～ 104, network virtualization edges (NVEs) 105～107, and a Network Virtualization Authority (NVA) 108. The tenant end systems may host virtual machines (VMs) . A network virtualization edge (NVE) may be implemented as part of a physical switch or router, or a network server appliance, responsible for data communication among the tenant end systems 102～104. The Network Virtualization Authority (NVA) 108 is responsible for centralized management and control of the NVEs 105～107.

After receiving a packet from a virtual machine (VM) , the NVE consults a Media Access Control (MAC) forwarding table. If, after consulting the MAC forwarding table, the NVE determines that the packet is to be forwarded across the IP network 101, the NVE performs a NVO3 encapsulation to the packet. The encapsulation adds the IP address of a peer side of the tunnel as an outer IP address of the NVO3 encapsulated packet. The NVO3 packet is then forwarded in the IP network hop by hop according to the outer IP address. When arriving at a destination device, the packet is decapsulated and transmitted to a destination VM.

For example, NVE 105 may receive a packet from a VM 102A on tenant end system 102 and determine that a destination of the packet is a VM 104A on tenant system 104. In response to this determination, the NVE 105 may encapsulate the packet and forward the packet over the IP network 101 to NVE 107. NVE 107 may decapsulate the packet and transmit it to the destination VM on tenant system 104. In the context of this disclosure a “local NVE” refers to a NVE to which a VM is directly connected. A remote NVE refers to a NVE to which the VM’s peer VM is connected. Thus in the above example for VM 102A and other VMs on tenant end system 102, NVE 105 is the local NVE and NVEs 106 and 107 are remote NVEs.

As can be seen from the above example, the NVE forwards the packet based on its MAC table and information indicating the IP address of a peer side of a NVO3 tunnel through which the packet’s destination may be reached (e.g. the IP address of a remote NVE to which a destination VM is connected. It can be time consuming and laborious for this information to be configured manually by the network administrator, especially if there are a large number of VMs or NVEs.

In an example of the present disclosure, a local NVE registers its IP address information and virtual network instance information to the NVA 108, and obtains IP address information and virtual network instance information of a remote NVE from the NVA 108. As such, a communication tunnel between the local NVE and the remote NVE may be established according to the IP address information and the virtual network instance information of them. In this way the NVE may be configured automatically. In certain example implementations this configuration may be accomplished with no manual configuration or manual operation. Furthermore, if the NVE is a switch, router or other network device that is incompatible with a server based VM and vSwitch management system, the NVE may be configured by the above method.

In one example, the virtual network instance information of a NVE may include a virtual network instance identifier, a broadcast group address and a virtual network broadcast identifier assigned by the NVE for transmitting broadcast packets.

In another example, the virtual network instance information of a NVE may include a virtual network instance identifier and a virtual network unicast identifier assigned by the NVE for transmitting unicast packets.

Hereinafter, the above procedure is described taking the NVE 105 shown in FIG. 1 as an example. Suppose that two virtual network instances A and B are deployed in the NVE 105； three virtual network instances A, B and C are deployed in the NVE 106； and two virtual network instances A and C are deployed in the NVE 107. As shown in FIG. 1, the NVE 105 obtains its IP address information. For each of the virtual network instances A and B, the NVE 105 assigns a virtual network broadcast identifier for transmitting broadcast packets, and generates a broadcast tunnel encapsulation entry (see 122 in FIG. 1) corresponding to its IP address and the virtual network broadcast identifier, so as to establish a broadcast packet transmitting tunnel corresponding to the virtual network instance.

The NVE 105 transmits its IP address information and virtual network instance information to the NVA 108 as registration information. In one example, the virtual network instance information of the NVE 105 includes a virtual network instance identifier, a broadcast group address configured for the NVE 105 and the virtual network broadcast identifier assigned by the NVE 105. Since two virtual network instances are deployed in the NVE 105, the NVE 105 transmits the virtual network instance information with respect to each of the virtual network instances A and B to the NVA 108.

For example, with respect to the virtual network instance A, the virtual network instance information includes a virtual network instance identifier A, a broadcast group address A and a virtual network broadcast identifier A assigned by the NVE 105 for the virtual network instance A. Similarly, other NVEs such as NVEs 106 and 107 also transmit their IP address information and virtual network instance information to the NVA 108. After receiving the registration information of the NVE 105, the NVA 108 returns, to the NVE 105, the IP address information and the virtual network instance information of remote NVEs (such as NVEs 106 and 107) (see 140 in FIG. 1) . The NVE 105 obtains the IP address information and the virtual network instance information that remote NVEs (NVEs 106 and 107) register at the NVA 108.

For each remote NVE, the NVE 105 determines a same virtual network instance or a set of same virtual network instances between the NVE 105 and the remote NVE. For example, the determination may be performed through comparing their virtual network instance identifiers. For instance, in the example shown in FIG. 1, network instance A is a same network instance between

NVE

105 and 107, i.e. it is a set comprising a single instance. Meanwhile, network instances A and B form a set of same virtual network instances between the NVE 105 and the NVE 106. In that case the set comprises two network instances. For each virtual network instance in the set, the NVE 105 generates a broadcast tunnel decapsulation entry (see 124 in FIG. 1) corresponding to the virtual network instance according to the virtual network instance information of the remote NVE, so as to establish a broadcast packet receiving tunnel corresponding to the virtual network instance.

After determining the set of same virtual network instances between the NVE 105 and the remote NVE, the NVE 105 assigns, for each virtual network instance in the set, a virtual network identifier for receiving unicast packets, referred to as a virtual network unicast identifier hereinafter. The NVE 105 may generate a unicast tunnel decapsulation tunnel (see 128 in FIG. 1) corresponding to the virtual network instance according to the virtual network unicast identifier which is used for receiving unicast packets and the IP address information of the remote NVE, so as to establish a unicast packet receiving tunnel associated with the remote NVE corresponding to the virtual network instance and receive unicast packets from the remote NVE via the tunnel.

In addition, the NVE 105 also informs the remote NVE of the virtual network unicast identifier assigned by the NVE 105 to each virtual network instance in the set for receiving unicast packets. The remote NVE generates a unicast tunnel encapsulation entry corresponding to the virtual network instance. Similarly, the NVE 105 also receives a virtual network unicast identifier assigned by the remote NVE. Then, the NVE 105 generates a corresponding unicast tunnel encapsulation entry (see 126 in FIG. 1) according to the network unicast identifier assigned by the remote NVE, so as to establish a unicast packet transmitting tunnel associated with the NVE 105 corresponding to the virtual network instance.

FIG. 2 is a flowchart illustrating an overlay network automatic configuring method according to an example of the present disclosure. As shown in FIG. 2, the method includes the following.

At block 201, a broadcast packet transmitting tunnel corresponding to each virtual network instance deployed in the local NVE is established.

In one example, block 201 may include the following blocks 2011 to 2013.

At block 2011, IP address information of a local NVE is obtained.

For each virtual network instance deployed in the local NVE, following

blocks

2012 and 2013 are performed.

At block 2012, a virtual network broadcast identifier used for transmitting broadcast packets is assigned to the virtual network instance of the local NVE.

At block 2013, a broadcast tunnel encapsulation entry corresponding to the virtual network instance is generated according to the IP address information of the local NVE and the virtual network broadcast identifier, so as to establish a broadcast packet transmitting tunnel corresponding to the virtual network instance.

In one example, the IP address information of the local NVE includes a backbone IP address of the local NVE. If the local NVE have multiple backbone IP addresses, the IP address information of the local NVE may further include a weight of each backbone IP address.

After deploying a virtual network instance (VNI) , the local NVE needs to assign a virtual network identifier for the deployed virtual network instance to transmit broadcast packets. The virtual network identifier is used for transmitting broadcast packets, referred to as a virtual network broadcast identifier hereinafter.

In order to enable a NVE to transmit broadcast packets in a virtual network instance, a broadcast packet transmitting tunnel corresponding to the virtual network instance needs to be established. In one example, the NVE may generate a corresponding broadcast tunnel encapsulation entry for the virtual network instance. The broadcast tunnel encapsulation entry includes: a source IP address, a destination IP address (which is a broadcast group address) , a virtual network instance identifier (which uniquely identifies a virtual network instance) , and a virtual network broadcast identifier. After the NVE generates the broadcast tunnel encapsulation entry corresponding to the virtual network instance, the broadcast packet transmitting tunnel corresponding to the virtual network instance is established. Thereafter, packets may be transmitted via the broadcast packet transmitting tunnel. For example, after receiving broadcast packets of the virtual network instance, the NVE performs a tunnel encapsulation (also referred to as NOV3 encapsulation) to the broadcast packets according to the broadcast tunnel encapsulation entry corresponding to the virtual network instance and then forwards the encapsulated packets.

In this block, the process of generating the broadcast tunnel encapsulation entry corresponding to the virtual network instance according to the IP address information of the local NVE and the virtual network broadcast identifier for transmitting broadcast packets assigned by the local NVE to the virtual network instance may include: taking the backbone IP address of the local NVE as the source IP address of the broadcast tunnel encapsulation entry, and respectively taking the broadcast group address configured for the local NVE, the virtual network instance identifier and the virtual network broadcast identifier assigned by the local NVE to the virtual network instance for transmitting broadcast packets as the destination IP address, the virtual network instance identifier and the virtual network broadcast identifier of the broadcast tunnel encapsulation entry.

At block 202, a broadcast packet receiving tunnel corresponding to each virtual network instance in a set of same virtual network instances between the local NVE and the remote NVE is established.

In one example, block 202 may include the following blocks 2021 to 2024.

At block 2021, the IP address information of the local NVE and the virtual network instance information of the local NVE are registered at a NVA.

At block 2022, IP address information and virtual network instance information of a remote NVE registered at the NVA is obtained.

At block 2023, a set of same virtual network instances between the local NVE and the remote NVE is determined.

At block 2024, for each virtual network instance in the set, a broadcast tunnel decapsulation entry corresponding to the virtual network instance is generated according to the virtual network instance information of the remote NVE, so as to establish a broadcast packet receiving tunnel corresponding to the virtual network instance.

In one example, the virtual network instance information of the remote NVE includes the virtual network instance identifier, the broadcast group address configured for the remote NVE, a virtual network broadcast identifier assigned by the remote NVE to the virtual network instance for transmitting broadcast packets, and may further include a broadcast mode of the virtual network instance. The broadcast mode may include a tandem duplication mode and a head-end duplication mode.

In order to enable the local NVE to receive broadcast packets in a virtual network instance, a broadcast packet receiving tunnel corresponding to the virtual network instance is established. The local NVE obtains the IP address information and the virtual network instance information of the remote NVE. In one example, the IP address information and the virtual network instance information of the remote NVE is obtained from the NVA. The remote NVE registers its IP addresses and virtual network instance information to the NVA, and the local NVE obtains the IP address information and the virtual network instance information of remote NVE from the NVA.

In one example of the present disclosure, the local NVE obtains its IP address and an IP address of the NVA from a DHCP server. The IP address information of the NVA may be configured in the DHCP server in advance. As such, the local NVE may obtain the IP address information of itself as well as the IP address information of the NVA (the local NVE may transmits a DHCP request message to the DHCP server. After receiving the DHCP request message, the DHCP server returns a DHCP response message carrying the IP address information assigned to the local NVE to the local NVE. Meanwhile, the IP address of the NVA is carried as an option of the DHCP response message and is transmitted to the local NVE) . Thus, the local NVE may register its IP address information and virtual network instance information at the NVA and obtain the IP address information and the virtual network instance information of remote NVEs from the NVA according to the IP address information of the NVA.

In one example of the present disclosure, if the remote NVE and the local NVE have deployed the same virtual network instance, the remove NVE may transmit broadcast packets of the virtual network instance to the local NVE. At this time, the local NVE needs to establish the broadcast packet receiving tunnel associated with the remote NVE corresponding to the virtual network instance. Thus, in this block, the local NVE determines the same virtual network instance that the local NVE and the remote NVE have deployed, generates a corresponding broadcast tunnel decapsulation entry for the same virtual network instance, so as to establish the broadcast packet receiving tunnel associated with the remote NVE corresponding to the virtual network instance. The broadcast tunnel decapsulation entry includes: a source IP address, a destination IP address (which may be a broadcast group address) , a virtual network instance identifier, and a virtual network broadcast identifier.

In this block, the process of generating the broadcast tunnel decapsulation entry corresponding to the virtual network instance according to the virtual network instance information of the remote NVE includes: taking the backbone IP address of the remote NVE as a source IP address of the broadcast tunnel decapsulation entry, respectively taking the broadcast group address configured by the remote NVE, the virtual network instance identifier and the virtual network broadcast identifier assigned by the remote NVE to the virtual network instance for transmitting broadcast packets as the destination IP address, the virtual network instance identifier and the virtual network broadcast identifier of the broadcast tunnel decapsulation entry.

In one example of the present disclosure, there is unicast packet transmission between the NVEs. The unicast packets are transmitted via tunnels. Therefore, a unicast tunnel is to be established between the NVEs which have deployed the same virtual network instance, including a unicast packet transmitting tunnel and a unicast packet receiving tunnel.

In order to establish the unicast packet receiving tunnel between the local NVE and the remote NVE, the local NVE determines the set of same virtual network instances between the local NVE and the remote NVE, and then assigns a virtual network identifier for each virtual network instance in the set for receiving unicast packets. Hereinafter, this virtual network identifier is referred to as virtual network unicast identifier. The local NVE may generate the unicast tunnel decapsulation entry corresponding to the virtual network instance according to the virtual network unicast identifier which is used for receiving unicast packets and the IP address information of the remote NVE, so as to establish the unicast packet receiving tunnel associated with the remote NVE corresponding to the virtual network instance, and to receive unicast packets from the remote NVE via the tunnel.

The unicast tunnel decapsulation entry may include: a source IP address, a destination IP address, a virtual network instance identifier, and a virtual network unicast identifier. The process of generating the unicast tunnel decapsulation entry corresponding to the virtual network instance according to the virtual network unicast identifier assigned by the local NVE to each virtual network instance for receiving unicast packets and the IP address information of the remote NVE may include: respectively taking the backbone IP address of the remote NVE, the backbone IP address of the local NVE, the virtual network instance identifier of the virtual network instance, and the virtual network unicast identifier assigned by the local NVE to the virtual network instance for receiving unicast packets as the source IP address, the destination IP address, the virtual network instance identifier and the virtual network unicast identifier of the unicast tunnel decapsulation entry.

In addition, after the local NVE determines the set of same virtual network instances between the local NVE and the remote NVE and assigns the virtual network unicast identifier to each virtual network instance for receiving unicast packets, the local NVE further informs the remote NVE of the virtual network unicast identifier assigned to each virtual network instance for receiving unicast packets. The remote NVE generates its unicast tunnel encapsulation entry corresponding to the virtual network instance according to the virtual network unicast identifier assigned by the local NVE, so as to establish its unicast packet transmitting tunnel associated with the local NVE corresponding to the virtual network instance.

In order to establish the unicast packet transmitting tunnel between the local NVE and the remote NVE, after determining the set of same virtual network instances between the local NVE and the remote NVE, the local NVE further transmits virtual network instance information of the virtual network instances in the set to the remote NVE. After receiving the virtual network instance information, the remote NVE assigns a virtual network unicast identifier for each virtual network instance corresponding to the virtual network instance information for receiving unicast packets, and returns the virtual network unicast identifier to the local NVE. After receiving the virtual network unicast identifier assigned by the remote NVE for each virtual network instance for receiving unicast packets, the local NVE may generate the unicast tunnel encapsulation entry according to the virtual network unicast identifier assigned by the remote NVE for each virtual network instance for receiving unicast packets, so as to establish the unicast packet transmitting tunnel associated with the remote NVE corresponding to the virtual network instance.

The unicast tunnel encapsulation entry may include: a source IP address, a destination IP address, a virtual network instance identifier and a virtual network unicast identifier. The process of generating the unicast tunnel encapsulation entry corresponding to the virtual network instance according to the virtual network unicast identifier assigned by the remote NVE to each virtual network instance for receiving unicast packets includes: respectively taking the backbone IP address of the local NVE, the backbone IP address of the remote NVE, the virtual network instance identifier of the virtual network instance, and the virtual network unicast identifier assigned by the remote NVE to the virtual network instance for receiving unicast packets as the source IP address, destination IP address, the virtual network instance identifier and the virtual network unicast identifier of the unicast tunnel encapsulation entry.

It should be noted that, the example shown by FIG. 2 is applicable for different types of overlay networks, such as overlay networks adopting virtual extensible local area network (VxLAN) , network virtualization using generic routing encapsulation (NVGRE) or stateless transport tunneling (STT) techniques.

In one example the overlay network adopts the VxLAN technique. In that case, the virtual network instance is a VxLAN instance, the virtual network broadcast identifier and the virtual network unicast identifier are VxLAN IDs. In another example the overlay network may adopt the NVGRE technique. In that case, the virtual network instance is a NVGRE instance, the virtual network broadcast identifier and the virtual network unicast identifier are NVGRE IDs. In yet another example, the overlay network may adopt the STT technique. In that case, the virtual network instance is a STT instance and the virtual network broadcast identifier and the virtual network unicast identifier are STT IDs.

The above describes the automatic configuration method of the overlay network with reference to some examples of the present disclosure. An example of the present disclosure provides a NVE which is described hereinafter with reference to FIG. 3.

FIG. 3 shows a structure of a NVE according to an example of the present disclosure. As shown in FIG. 3, the NVE 300 includes: an obtaining unit 301, an assignment unit 302, a registration unit 303 and a tunnel establishment unit 304； wherein

the obtaining unit 301 obtains IP address information of the local NVE 300；

the assignment unit 302 assigns a virtual network broadcast identifier for a virtual network instance of the local NVE 300 for transmitting broadcast packets；

the registration unit 303 registers the IP address information and virtual network instance information of the local NVE 300 at a NVA, and obtains IP address information and virtual network instance information of a remote NVE from the NVA； and

the tunnel establishment unit 304 generates a broadcast tunnel encapsulation entry corresponding to the virtual network instance according to the IP address information of the local NVE 300 and the virtual network broadcast identifier assigned by the assignment unit 302, so as to establish a broadcast packet transmitting tunnel corresponding to the virtual network instance； and determines, after the registration unit 303 obtains the IP address information and the virtual network instance information of the remote NVE registered at the NVA, a set of same virtual network instances between the local NVE 300 and the remote NVE, and for each virtual network instance in the set, generate a broadcast tunnel decapsulation entry corresponding to the virtual network instance according to the virtual network instance information of the remote NVE, so as to establish a broadcast packet receiving tunnel corresponding to the virtual network instance.

In an example of the present disclosure, the above units of the NVE 300 may be implemented by machine readable instructions stored in a non-transitory storage medium.

In one example of the present disclosure, the broadcast tunnel encapsulation entry and the broadcast tunnel decapsulation entry respectively include: a source IP address, a destination IP address, a virtual network instance identifier and a virtual network broadcast identifier.

The IP address information of the local NVE 300 includes the backbone IP address of the local NVE 300. The IP address information of the remote NVE includes a backbone IP address of the remote NVE. The virtual network instance information of the local NVE 300 includes a virtual network instance identifier, a broadcast group address configured for the local NVE 300 and a virtual network broadcast identifier assigned by the assignment unit 302 for transmitting broadcast packets. The virtual network instance information of the remote NVE includes the virtual network instance identifier, a broadcast group address configured for the remote NVE and a second virtual network broadcast identifier assigned by the remote NVE. The virtual network broadcast identifiers assigned by the local NVE 300 and the remote NVE may be the same or different. The broadcast group addresses configured for the local NVE 300 and the remote NVE may be the same or different.

When generating the broadcast tunnel encapsulation entry corresponding to the virtual network instance according to the IP address information of the local NVE 300 and the virtual network broadcast identifier assigned by the assignment unit 302 to the virtual network instance of the local NVE 300 for transmitting broadcast packets, the tunnel establishment unit 304 takes the backbone IP address of the local NVE 300 as the source IP address of the broadcast tunnel encapsulation entry, and respectively takes the broadcast group address configured for the local NVE 300, the virtual network instance identifier and the virtual network broadcast identifier assigned by the assignment unit 302 as the destination IP address, the virtual network instance identifier and the virtual network broadcast identifier of the broadcast tunnel encapsulation entry.

When generating the broadcast tunnel decapsulation entry corresponding to the virtual network instance according to the virtual network instance information of the remote NVE, the tunnel establishment 304 takes the backbone IP address of the remote NVE as the source IP address of the broadcast tunnel decapsulation entry, and respectively takes the broadcast group address configured for the remote NVE, the virtual network instance identifier and the virtual network broadcast identifier assigned by the remote NVE for transmitting broadcast packets as the destination IP address, the virtual network instance identifier and the virtual network broadcast identifier of the broadcast tunnel decapsulation entry.

In one example of the present disclosure, after the tunnel establishment unit 304 determines the set of same virtual network instances between the local NVE 300 and the remote NVE, the assignment unit 302 assigns for each virtual network instance in the set a virtual network unicast identifier for receiving unicast packets.

After determining the set of same virtual network instances between the local NVE and the remote NVE, for each virtual network instance in the set,

the tunnel establishment unit 304 generates a unicast tunnel decapsulation entry for the virtual network instance according to the virtual network unicast identifier assigned by the assignment unit 302 for receiving unicast packets and the IP address information of the remote NVE, so as to establish a unicast packet receiving tunnel associated with the remote NVE corresponding to the virtual network instance； and

informs the remote NVE of the virtual network unicast identifier assigned by the assignment unit 302 to the virtual network instance for receiving unicast packets, such that the remote NVE generates a corresponding unicast tunnel encapsulation entry corresponding to the virtual network instance and establishes a unicast packet transmission tunnel associated with the local NVE 300 corresponding to the virtual network instance.

After determining the set of same virtual network instances between the local NVE 300 and the remote NVE, for each virtual network instance in the set,

the tunnel establishment unit 304 transmits information of the virtual network instance to the remote NVE； receives a virtual network unicast identifier assigned by the remote NVE to the virtual network instance for receiving unicast packets from the remote NVE, and

generates a corresponding unicast tunnel encapsulation entry corresponding to the virtual network instance, so as to establish a unicast packet transmitting tunnel associated with the remote NVE corresponding to the virtual network instance.

In one example of the present disclosure, the unicast tunnel encapsulation entry and the unicast tunnel decapsulation entry respectively include: a source IP address, a destination IP address, a virtual network instance identifier and a virtual network unicast identifier.

The IP address information of the local NVE 300 includes the backbone IP address of the local NVE 300. The IP address information of the remote NVE includes the backbone IP address of the remote NVE. The virtual network instance information of the local NVE 300 includes a virtual network instance identifier, and a virtual network unicast identifier assigned by the assignment unit 302 for receiving unicast packets. The virtual network instance information of the remote NVE includes a virtual network instance identifier and a virtual network unicast identifier assigned by the remote NVE to the virtual network instance for receiving unicast packets.

When generating the unicast tunnel decapsulation entry corresponding to the virtual network instance in the set according to virtual network unicast identifier assigned by the assignment unit 302 for receiving unicast packets and the IP address information of the remote NVE, the tunnel establishment unit 304 respectively takes the backbone IP address of the remote NVE, the backbone IP address of the local NVE 300, the virtual network instance identifier of the virtual network instance, and the virtual network unicast identifier assigned by the assignment unit 302 for receiving unicast packets as the source IP address, the destination IP address, the virtual network instance identifier and the virtual network unicast identifier of the unicast tunnel decapsulation entry.

When generating the unicast tunnel encapsulation entry corresponding to the virtual network instance according to the virtual network unicast identifier assigned by the remote NVE for receiving unicast packets, the tunnel establishment unit 304 takes the backbone IP address of the local NVE 300, the backbone IP address of the remote NVE, the virtual instance identifier of the virtual network instance, and the virtual network unicast identifier assigned by the remote NVE for receiving unicast packets as the source IP address, the destination IP address, the virtual network identifier and the virtual network unicast identifier of the unicast tunnel encapsulation entry.

In one example of the present disclosure, the virtual network instance may be a VxLAN instance, and the virtual network broadcast identifier and the virtual network unicast identifier may be VxLAN IDs.

In another example of the present disclosure, the virtual network instance may be a NVGRE instance, and the virtual network broadcast identifier and the virtual network unicast identifier may be NVGRE IDs.

In another example of the present disclosure, the virtual network instance may be a STT instance, and the network broadcast identifier and the virtual network unicast identifier may be STT IDs.

In one example of the present disclosure, the obtaining unit 301 further obtains an IP address of the NVA while obtaining the IP address information of the local NVE 300.

The registration unit 303 registers the IP address information and the virtual network instance information of the local NVE 300 at the NVA and obtains the IP address information and the virtual network instance information of the remote NVE from the NVA according to the IP address of the NVA.

In one example of the present disclosure, the obtaining unit 301 obtains the IP address information of the local NVE 300 and the IP address of the NVA from a DHCP server.

An example of the present disclosure provides a hardware structure of a NVE in which the overlay network automatic configuration method and apparatus are implemented. As shown in FIG. 4, the NVE 400 includes: a memory 410, a processor 420, communication ports 430 and an interconnection part 440 through which the memory 410, the processor 420 and the communication port 430 are coupled with each other.

The above automatic configuration method of the overlay network may be realized through machine readable instructions stored in the memory 410. The processor 420 may read and run the machine readable instructions stored in the memory 410 to implement the above described method.

In one example of the present disclosure, the memory 420 may include the following program units: an obtaining unit, an assignment unit, a registration unit and a tunnel establishment unit.

The obtaining unit obtains IP address information of the local NVE 400 and IP address information of a NVA.

The assignment unit assigns a virtual network broadcast identifier to a virtual network instance of the local NVE 400 for transmitting broadcast packets and assigns a virtual network unicast identifier to the virtual network instance of the local NVE 400 for receiving unicast packets.

The registration unit registers the IP address information and virtual network instance information of the local NVE 400 at a NVA, and obtains IP address information and virtual network instance information of a remote NVE from the NVA.

The tunnel establishment unit generates a broadcast tunnel encapsulation entry corresponding to the virtual network instance according to the IP address information of the local NVE 400 and the virtual network broadcast identifier assigned by the assignment unit, so as to establish a broadcast packet transmitting tunnel corresponding to the virtual network instance；

The tunnel establishment unit determines, after the registration unit obtains the IP address information and the virtual network instance information of the remote NVE registered at the NVA, a set of same virtual network instances between the local NVE 400 and the remote NVE, and for each virtual network instance in the set, generate a broadcast tunnel decapsulation entry corresponding to the virtual network instance according to the virtual network instance information of the remote NVE, so as to establish a broadcast packet receiving tunnel corresponding to the virtual network instance.

After determining the set of same virtual network instances between the local NVE 400 and the remote NVE, for each virtual network instance in the set,

the tunnel establishment unit generates a unicast tunnel decapsulation entry for the virtual network instance according to the virtual network unicast identifier assigned by the assignment unit for receiving unicast packets and the IP address information of the remote NVE, so as to establish a unicast packet receiving tunnel associated with the remote NVE corresponding to the virtual network instance；

informs the remote NVE of the virtual network unicast identifier assigned by the assignment unit to the virtual network instance for receiving unicast packets, such that the remote NVE generates a corresponding unicast tunnel encapsulation entry corresponding to the virtual network instance and establishes a unicast packet transmission tunnel associated with the local NVE 400 corresponding to the virtual network instance.

the tunnel establishment unit transmits information of the virtual network instance to the remote NVE； receives a virtual network unicast identifier assigned by the remote NVE to the virtual network instance for receiving unicast packets from the remote NVE, and

The communication ports 430 forwards information received from the obtaining units, the registration unit and the tunnel establishment unit to the DHCP server, the NVA and the remote NVE respectively； and forwards information from the DHCP server to the obtaining unit in the memory 420 for processing, forwards information from the NVA to the registration unit in the memory 420 for processing, and forwards information from the remote NVE to the tunnel establishment unit in the memory 420 for processing.

Claims

A method for configuring an overlay network, comprising:

obtaining IP address information of a local network virtualization edge (NVE) , assigning a virtual network broadcast identifier to a virtual network instance of the local NVE for transmitting broadcast packets, generating a broadcast tunnel encapsulation entry corresponding to the virtual network instance according to the IP address information of the local NVE and the virtual network broadcast identifier assigned by the local NVE for transmitting broadcast packets, so as to establish a broadcast packet transmitting tunnel corresponding to the virtual network instance；

registering the IP address information of the local NVE and information of the virtual network instance of the local NVE to a network virtualization authority (NVA) , obtaining IP address information and virtual network instance information of a remote NVE from the NVA, determining a same virtual network instance between the local NVE and the remote NVE； for the same virtual network instance, generating a broadcast tunnel decapsulation entry corresponding to the virtual network instance according to the virtual network instance information of the remote NVE, so as to establish a broadcast packet receiving tunnel corresponding to the virtual network instance.
The method of claim 1, wherein the broadcast tunnel encapsulation entry and the broadcast tunnel decapsulation entry respectively include a source IP address, a destination IP address, a virtual network instance identifier and a virtual network broadcast identifier；

the IP address information of the local NVE includes: a backbone IP address of the local NVE； the IP address information of the remote NVE includes: a backbone IP address of the remote NVE； the virtual network instance information of the local NVE includes a virtual network instance identifier, a broadcast group address configured for the local NVE and the virtual network broadcast identifier assigned by the local NVE； the virtual network instance information of the remote NVE includes the virtual network instance identifier, a broadcast group address configured for the remote NVE and a virtual network broadcast identifier assigned by the remote NVE；

the generating the broadcast tunnel encapsulation entry corresponding to the virtual network instance according to the IP address information of the local NVE and the virtual network broadcast identifier for transmitting broadcast packets comprises: taking the backbone IP address of the local NVE as the source IP address of the broadcast tunnel encapsulation entry, and respectively taking the broadcast group address configured for the local NVE, the virtual network instance identifier and the virtual network broadcast identifier for transmitting broadcast packets as the destination IP address, the virtual network instance identifier and the virtual network broadcast identifier of the broadcast tunnel encapsulation entry；

the generating the broadcast tunnel decapsulation entry corresponding to the virtual network instance according to the virtual network instance information of the remote NVE comprises: taking the backbone IP address of the remote NVE as the source IP address of the broadcast tunnel decapsulation entry, and respectively taking the broadcast group address configured for the remote NVE, the virtual network instance identifier and the virtual network broadcast identifier assigned by the remote NVE to the virtual network instance for transmitting broadcast packets as the destination IP address, the virtual network instance identifier and the virtual network broadcast identifier of the broadcast tunnel decapsulation entry.
The method of claim 1, further comprising:

after determining the same virtual network instances between the local NVE and the remote NVE,

for the same virtual network instance,

assigning a virtual network unicast identifier to the virtual network instance for receiving unicast packets； generating a unicast tunnel decapsulation entry according to the virtual network unicast identifier for receiving unicast packets and the IP address information of the remote NVE, so as to establish a unicast packet receiving tunnel associated with the remote NVE corresponding to the virtual network instance；

informing the remote NVE of the virtual network unicast identifier assigned to the virtual network instance for receiving unicast packets, such that the remote NVE generates a unicast tunnel encapsulation entry corresponding to the virtual network instance and establish a unicast packet transmitting tunnel associated with the local NVE corresponding to the virtual network instance；

after determining the same virtual network instances between the local NVE and the remote NVE,

for the same virtual network instance,

transmitting information of the virtual network instance to the remote NVE； receiving a virtual network unicast identifier assigned by the remote NVE to the virtual network instance for receiving unicast packets, and generating a unicast tunnel encapsulation entry according to the virtual network unicast identifier assigned by the remote NVE, so as to establish a unicast packet transmitting tunnel associated with the remote NVE corresponding to the virtual network instance.
The method of claim 3, wherein each of the unicast tunnel encapsulation entry and the unicast tunnel decapsulation entry include a source IP address, a destination IP address, a virtual network instance identifier and a virtual network unicast identifier；

the IP address information of the local NVE includes a backbone IP address of the local NVE； the IP address information of the remote NVE includes a backbone IP address of the remote NVE； the virtual network instance information includes a virtual network instance identifier, and the virtual network unicast identifier；

the generating the unicast tunnel decapsulation entry corresponding to the virtual network instance according to the virtual network unicast identifier for receiving the unicast packets and the IP address information of the remote NVE comprises: respectively taking the backbone IP address of the remote NVE, the backbone IP address of the local NVE, the virtual network instance identifier of the virtual network instance and the virtual network unicast identifier for receiving unicast packets as the source IP address, the destination IP address, the virtual network instance identifier and the virtual network unicast identifier of the unicast tunnel decapsulation entry； and

the generating the unicast tunnel encapsulation entry corresponding to the virtual network instance according to the virtual network unicast identifier assigned by the remote NVE to each virtual network instance for receiving unicast packets comprises: respectively taking the backbone IP address of the local NVE, the backbone IP address of the remote NVE, the virtual network instance identifier of the virtual network instance, and the virtual network unicast identifier assigned by the remote NVE to the virtual network instance for receiving unicast packets as the source IP address, the destination IP address, the virtual network instance identifier and the virtual network unicast identifier of the unicast tunnel encapsulation entry.
The method of claim 4, wherein the virtual network instance is a VxLAN instance, the virtual network broadcast identifier and the virtual network unicast identifier are VxLAN IDs； or

the virtual network instance is a NVEGRE instance, the virtual network broadcast identifier and the virtual network unicast identifier are NVEGRE IDs； or

the virtual network instance is a STT instance, the virtual network broadcast identifier and the virtual network unicast identifier are STT IDs.
The method of claim 1, further comprising:

obtaining an IP address of the NVA while obtaining the IP address information of the local NVE； and

registering the IP address information and the virtual network instance information of the local NVE to the NVA and obtaining the IP address information and the virtual network instance information of the remote NVE from the NVA according to the IP address of the NVA.
The method of claim 6, wherein the IP address information of the local NVE and the IP address of the NVA are obtained from a DHCP server.
A network virtualization edge (NVE) , comprising:

a processor；

non-transitory machine readable storage medium, storing instructions which are executable by the processor to perform acts of:

obtaining IP address information of a local network virtualization edge (NVE) , assigning a virtual network broadcast identifier to each virtual network instance of the local NVE for transmitting broadcast packets, generating a broadcast tunnel encapsulation entry corresponding to the virtual network instance according to the IP address information of the local NVE and the virtual network broadcast identifier for transmitting broadcast packets, so as to establish a broadcast packet transmitting tunnel corresponding to the virtual network instance；

registering the IP address information of the local NVE and information of the virtual network instance of the local NVE to a network virtualization authority (NVA) , obtaining IP address information and virtual network instance information of a remote NVE from the NVA, determining a same virtual network instances between the local NVE and the remote NVE； for the same virtual network instance, generating a broadcast tunnel decapsulation entry corresponding to the virtual network instance according to the virtual network instance information of the remote NVE, so as to establish a broadcast packet receiving tunnel corresponding to the virtual network instance.
The NVE of claim 8, wherein each of the broadcast tunnel encapsulation entry and the broadcast tunnel decapsulation entry include a source IP address, a destination IP address, a virtual network instance identifier and a virtual network broadcast identifier；

the IP address information of the local NVE includes: a backbone IP address of the local NVE； the IP address information of the remote NVE includes: a backbone IP address of the remote NVE； the virtual network instance information of the local NVE includes a virtual network instance identifier, a broadcast group address configured for the local NVE and the virtual network broadcast identifier assigned by the local NVE； the virtual network instance information of the remote NVE includes the virtual network instance identifier, the broadcast group address configured for the remote NVE and a virtual network broadcast identifier assigned by the remote NVE；

the generating the broadcast tunnel encapsulation entry corresponding to the virtual network instance according to the IP address information of the local NVE and the virtual network broadcast identifier for transmitting broadcast packets comprises: taking the backbone IP address of the local NVE as the source IP address of the broadcast tunnel encapsulation entry, and respectively taking the broadcast group address configured for the local NVE, the virtual network instance identifier and the virtual network broadcast identifier for transmitting broadcast packets as the destination IP address, the virtual network instance identifier and the virtual network broadcast identifier of the broadcast tunnel encapsulation entry；

the generating the broadcast tunnel decapsulation entry corresponding to the virtual network instance according to the virtual network instance information of the remote NVE comprises: taking the backbone IP address of the remote NVE as the source IP address of the broadcast tunnel decapsulation entry, and respectively taking the broadcast group address configured for the remote NVE, the virtual network instance identifier and the virtual network broadcast identifier assigned by the remote NVE to the virtual network instance for transmitting broadcast packets as the destination IP address, the virtual network instance identifier and the virtual network broadcast identifier of the broadcast tunnel decapsulation entry.
The NVE of claim 8, wherein

after determining the same virtual network instances between the local NVE and the remote NVE,

for the same virtual network instance,

assigning a virtual network unicast identifier to the virtual network instance for receiving unicast packets； generating a unicast tunnel decapsulation entry according to the virtual network unicast identifier for receiving unicast packets and the IP address information of the remote NVE, so as to establish a unicast packet receiving tunnel associated with the remote NVE corresponding to the virtual network instance；

informing the remote NVE of the virtual network unicast identifier assigned to the virtual network instance for receiving unicast packets, such that the remote NVE generates a unicast tunnel encapsulation entry corresponding to the virtual network instance and establish a unicast packet transmitting tunnel associated with the local NVE corresponding to the virtual network instance；

after determining the same virtual network instances between the local NVE and the remote NVE,

for the same virtual network instance,

transmitting information of the virtual network instance to the remote NVE； receiving a virtual network unicast identifier assigned by the remote NVE to the virtual network instance for receiving unicast packets, and generating a unicast tunnel encapsulation entry according to the virtual network unicast identifier assigned by the remote NVE, so as to establish a unicast packet transmitting tunnel associated with the remote NVE corresponding to the virtual network instance.
The NVE of claim 10, wherein each of the unicast tunnel encapsulation entry and the unicast tunnel decapsulation entry include a source IP address, a destination IP address, a virtual network instance identifier and a virtual network unicast identifier；

the IP address information of the local NVE includes a backbone IP address of the local NVE； the IP address information of the remote NVE includes a backbone IP address of the remote NVE； the virtual network instance information includes a virtual network instance identifier, and the virtual network unicast identifier；

the generating the unicast tunnel decapsulation entry corresponding to the virtual network instance according to the virtual network unicast identifier for receiving the unicast packets and the IP address information of the remote NVE comprises: respectively taking the backbone IP address of the remote NVE, the backbone IP address of the local NVE, the virtual network instance identifier of the virtual network instance and the virtual network unicast identifier for receiving unicast packets as the source IP address, the destination IP address, the virtual network instance identifier and the virtual network unicast identifier of the unicast tunnel decapsulation entry； and

the generating the unicast tunnel encapsulation entry corresponding to the virtual network instance according to the virtual network unicast identifier assigned by the remote NVE to each virtual network instance for receiving unicast packets comprises: respectively taking the backbone IP address of the local NVE, the backbone IP address of the remote NVE, the virtual network instance identifier of the virtual network instance, and the virtual network unicast identifier assigned by the remote NVE to the virtual network instance for receiving unicast packets as the source IP address, the destination IP address, the virtual network instance identifier and the virtual network unicast identifier of the unicast tunnel encapsulation entry.
The NVE of claim 11, wherein the virtual network instance is a VxLAN instance, the virtual network broadcast identifier and the virtual network unicast identifier are VxLAN IDs； or

the virtual network instance is a NVEGRE instance, the virtual network broadcast identifier and the virtual network unicast identifier are NVEGRE IDs； or

the virtual network instance is a STT instance, the virtual network broadcast identifier and the virtual network unicast identifier are STT IDs.
The NVE of claim 8, wherein:

obtaining an IP address of the NVA while obtaining the IP address information of the local NVE； and

registering the IP address information and the virtual network instance information of the local NVE to the NVA and obtaining the IP address information and the virtual network instance information of the remote NVE from the NVA according to the IP address of the NVA.
The NVE of claim 13, wherein the IP address information of the local NVE and the IP address of the NVA are obtained from a DHCP server.