WO2019134637A1 - Method, device, and system for multi-type network virtualization overlay interconnection - Google Patents

Abstract

The present disclosure provides a method, a device, and a system for multi-type network virtualization overlay interconnection. The method comprises: when a first host connected to a first network virtualization edge needs to send a data packet to a second host connected to a second network virtualization edge, the first network virtualization edge encapsulating the data packet to obtain a first encapsulated packet, and sending the same to a conversion gateway; after decapsulating the first encapsulated packet, the conversion gateway determining host reachability information for reaching the second host; the conversion gateway again encapsulating, according to the host reachability information for reaching the second host, the data packet obtained after decapsulation, to obtain a second encapsulated packet, and sending the same to the second network virtualization edge; and the second network virtualization edge decapsulating the second encapsulated packet and then sending the same to the second host.

Description

Method, device and system for multi-type cascading virtual network interconnection Technical field

The present disclosure relates to, but is not limited to, the field of data communications.

Background technique

With the massive use of data center server virtualization technology, the number of virtual machines has soared, and in hybrid and public cloud data centers, massive tenant support is needed, and traditional networks cannot meet the demand. In order to meet the needs of multi-tenancy, a layered cascaded virtual network (Network Virtualization Overlay (NVO) technology is proposed.

Generally speaking, in a data center network, devices in the same network are required to follow the same technical implementation to achieve their interconnection, but this requirement is increasingly difficult to achieve for the network edge to be closer to the user side. Devices that access the same data center network will be more diverse. To accommodate this trend, it is necessary to provide protection for interconnection between different virtual tunnel technologies.

Summary of the invention

According to an embodiment of the present disclosure, there is provided a method of multi-type cascading virtual network interconnection, the cascading virtual network including a conversion gateway, a first virtual edge device supporting a first tunnel type, and a second virtual layer supporting a second tunnel type The edge device, the method includes: when the first host connected to the first virtual edge device needs to send a data packet to the second host connected to the second virtual edge device, the first virtual edge device The data packet is encapsulated to obtain a first encapsulated packet, and is sent to the translation gateway. After the decapsulation of the first encapsulated packet, the translation gateway determines to reach the second host. The host can obtain the second encapsulated packet and send it to the local device according to the reachability information of the host that is used to reach the second host, and the data packet obtained by the decapsulation is re-encapsulated. The second virtual edge device is configured to send the second encapsulated packet to the second host after decapsulating the second encapsulated packet.

In accordance with an embodiment of the present disclosure, a method of multi-type cascading virtual network interconnection is provided, the cascading virtual network including a translation gateway for message forwarding and a plurality of virtual edge devices supporting different tunnel types, the method including Transmitting, to the cascading virtual network, host reachability information for a host connected to each of the virtual edge device connections; transmitting gateway reachability information for reaching the translation gateway to the cascading virtual network; Data packets that need to be exchanged between the hosts are encapsulated and sent by the host reachability information of the host used to reach the connection of each of the virtual edge devices and the gateway reachability information used to reach the conversion gateway.

According to an embodiment of the present disclosure, there is provided a multi-type cascading virtual network interconnection conversion gateway, the cascading virtual network including the conversion gateway, a first virtual edge device supporting a first tunnel type, and a second tunnel type supporting a second virtual edge device, the conversion gateway includes a packet receiving module, a destination reachability determining module, and a package forwarding module, where the first host connected to the first virtual edge device needs to be sent to the second virtual edge device When the connected second host sends a data packet, the packet receiving module receives the first encapsulated packet that is obtained by the first virtual edge device to encapsulate and send the data packet, and the destination is reachable. The module decapsulates the first encapsulated packet, and determines host reachability information used to reach the second host, and the encapsulated forwarding module is configured according to the reachability information of the host used to reach the second host. The data packet obtained by the decapsulation is re-encapsulated to obtain a second encapsulated packet, and sent to the second virtual edge device.

A system for interconnecting multiple types of cascading virtual networks according to an embodiment of the present disclosure includes a conversion gateway, a first virtual edge device supporting a first tunnel type, and a second virtual edge device supporting a second tunnel type, where When the first host connected to the first virtual edge device needs to send a data packet to the second host connected to the second virtual edge device, the first virtual edge device is used to arrive through the conversion gateway. The host-capable information of the second host, the data packet is encapsulated, and the first encapsulated packet is obtained and sent to the translation gateway, where the conversion gateway decapsulates the first encapsulated packet. And determining the host reachability information of the second host, and re-encapsulating the data packet obtained after the decapsulation according to the host reachability information used to reach the second host, to obtain a second Encapsulating the packet and sending the packet to the second virtual edge device, and the second virtual edge device sends the packet to the second encapsulated packet after decapsulating the packet Second host.

DRAWINGS

1 is a schematic diagram of a topology structure of a cascading virtual network;

2A, 2B, and 2C are three package form diagrams of a current stacked virtual network;

3 is a flow diagram of a method of multi-type cascading virtual network interconnections in accordance with an embodiment of the present disclosure;

4 is a block diagram showing a structure of a conversion gateway of a multi-type cascading virtual network interconnection according to an embodiment of the present disclosure;

5 is a flow chart of a control protocol for multiple types of cascading virtual network interconnections in accordance with an embodiment of the present disclosure;

6 is a schematic diagram of a host accessing a cascading virtual network in accordance with an embodiment of the present disclosure;

7 is a first connection diagram of a host access cascading virtual network control plane according to an embodiment of the present disclosure;

FIG. 8 is a second connection diagram of a host access cascading virtual network control plane according to an embodiment of the present disclosure.

Detailed ways

The embodiments of the present disclosure are described in detail below with reference to the accompanying drawings.

In order to meet the needs of multi-tenant (tenant), an overlay-based cascading virtual network (NVO) technology is proposed. This kind of NVO can not only support multi-tenancy and multiple virtual networks (VNs), but also the address space and traffic between each tenant are isolated and invisible. Each tenant can use the same address space in different VNs. Each tenant can have multiple VNs, but the traffic between each VN cannot flow freely and needs to be implemented through routers, security gateways, and so on. NVO can solve virtual machine migration and multi-tenancy problems without changing the existing network, and only need to add gateway devices to effectively protect user investment. A common topology diagram of NVO is shown in Figure 1.

In order to implement the NVO, the edge device accessing the network by the terminal TS needs to be virtualized, the packet of the terminal TS is identified, and the packet is encapsulated and then transmitted to the traditional network for transmission. For the virtualization of edge devices, a variety of more common technologies, such as VXLAN, NVGRE, GENEVE, GUE, and MPLSoGRE, can support Layer 2 packets to access Layer 3 network transmission and Layer 3 packet access. Three-tier network. These different virtualization technologies have certain implementations, representing the implementation solutions of different manufacturers, each with its own advantages and supporters. The specific package is shown in Figures 2A to 2C.

Generally speaking, in a data center network, devices in the same network are required to follow the same technical implementation to achieve their interconnection, but this requirement is increasingly difficult to achieve for the network edge to be closer to the user side. Devices that access the same data center network will be more diverse. To accommodate this trend, it is necessary to provide protection for interconnection between different virtual tunnel technologies.

3 is a flow diagram of a method of multiple types of cascading virtual network interconnections in accordance with an embodiment of the disclosure. According to an embodiment of the present disclosure, the cascading virtual network includes a conversion gateway, a first virtual edge device NVE1 supporting the first tunnel type, and a second virtual edge device NVE2 supporting the second tunnel type (see FIG. 6).

As shown in FIG. 3, the method includes steps S101 to S104.

In step S101, when the first host connected to the NVE1 needs to send a data packet to the second host connected to the NVE2, the NVE1 encapsulates the data packet to obtain the first encapsulated packet, and sends the packet to the translation gateway.

In step S102, after the decapsulation of the first encapsulated packet, the translation gateway determines the reachability information of the host used to reach the second host.

When the step S102 is performed, the switching gateway decapsulates the first encapsulated packet according to the first tunnel type to obtain the data packet. Then, according to the destination address and/or the virtual network identifier carried in the data packet obtained by the decapsulation, the host reachability information used to reach the second host is queried.

In the step S103, the switching gateway re-encapsulates the data packet obtained after decapsulation according to the reachability information of the host that is used to reach the second host, and obtains the second encapsulated packet, and sends the packet to the NVE2.

When performing step S103, the switching gateway determines a second tunnel type for encapsulating the data packet according to the host reachability information used to reach the second host, and according to the second tunnel type, The data packet is encapsulated to obtain the second encapsulated packet.

In step S104, the NVE2 decapsulates the second encapsulated packet, obtains the data packet, and sends the data packet to the second host. The NVE2 may decapsulate the second encapsulated packet according to the second tunnel type to obtain the data packet.

According to different control protocols, the control mode can be distributed or centralized.

For the centralized control mode, the cascading virtual network further includes a centralized controller, and before performing step S101, the method may further include: the centralized controller receives the NVE1, the NVE2, and the translation gateway respectively sent to reach the first Host reachability information of a host, host reachability information for reaching the second host, and gateway reachability information for reaching the conversion gateway; the centralized controller will receive the host for reaching the second host The reachable information is sent to the conversion gateway; and the centralized controller generates, according to the host reachability information used to reach the second host, and the reachability information of the gateway used to reach the conversion gateway, to be used to arrive via the conversion gateway. The host reachability information of the second host is sent to the NVE1, so that the NVE1 can encapsulate the data packet according to the host reachability information used to reach the second host via the switch gateway, to obtain the first Encapsulate the message.

For the distributed control mode, before performing step S101, the method may further include: the switching gateway sends the gateway reachability information to the NVE1 and/or the NVE2, and receives the host sent by the NVE1 to reach the first host. Up to the information and/or the reachability information sent by the NVE2 to reach the second host; and/or the NVE2 sends the host reachability information used to reach the second host to the NVE1, and receives the NVE1 for sending To reach the host reachability information of the first host. The NVE1 may determine, according to the received gateway reachability information and host reachability information used to reach the second host, host reachability information used to reach the second host via the translation gateway. The NVE1 may then encapsulate the data packet according to the host reachability information used to reach the second host by using the translation gateway to obtain the first encapsulated packet.

The host reachability information used to reach the first host may include an address of the first host, an address of the NVE1, an identifier of the virtual network where the NVE1 is located, the first tunnel type, and the first host carrying element At least one of the information of the data, the host reachability information used to reach the second host may include an address of the second host, an address of the NVE2, an identifier of the virtual network where the NVE2 is located, and the second tunnel type. And at least one of the information that the second host carries the metadata, and the gateway reachability information used to reach the translation gateway may include an address of the translation gateway, an identifier of the virtual network where the conversion gateway is located, and a tunnel type supported by the conversion gateway. At least one of them.

According to an embodiment of the present disclosure, devices using different cascading technologies (ie, different tunnel types) can be accessed in the same cascading virtual network, so that different hosts are no longer limited by the implementation scheme, and all can be accessed. In a cascading virtual network, multiple access solutions are supported to increase network availability and compatibility.

It will be understood by those skilled in the art that all or part of the steps of the above embodiments may be implemented by a program to instruct related hardware, and the program may be stored in a computer readable storage medium. Further, an embodiment of the present disclosure may further provide a storage medium on which a program of a plurality of types of cascading virtual network interconnections is stored, and the program of the multi-type cascading virtual network interconnection is implemented by a processor to implement the foregoing multi-type The steps of the method of cascading virtual network interconnections.

4 is a block diagram of a translation gateway structure of a multi-type cascading virtual network interconnect in accordance with an embodiment of the present disclosure. According to an embodiment of the present disclosure, the cascading virtual network includes the conversion gateway, a first virtual edge device NVE1 supporting a first tunnel type, and a second virtual edge device NVE2 supporting a second tunnel type.

As shown in FIG. 4, the conversion gateway includes a message receiving module, a destination reachability determining module, and a package forwarding module.

When the first host connected to the NVE1 needs to send a data packet to the second host connected to the NVE2, the packet receiving module receives the first encapsulated packet obtained by the NVE1 to encapsulate and send the data packet, and the destination can be determined. The module decapsulates the first encapsulated packet, and determines host reachability information used to reach the second host, and the encapsulation forwarding module solves the solution according to the reachability information of the host used to reach the second host. The data packet obtained after the encapsulation is re-encapsulated to obtain a second encapsulated packet and sent to the NVE2.

The functions of the packet receiving module, the destination reachability determining module, and the package forwarding module may be implemented by a processor and a memory. Further, embodiments of the present disclosure may further provide an apparatus for interconnecting multiple types of cascading virtual networks, including a processor and a memory coupled to the processor, where the memory is stored to be run on the processor A computer program that, when executed by the processor, performs a method of multi-type cascading virtual network interconnections in accordance with various embodiments of the present disclosure.

5 is a flow diagram of a control protocol for multiple types of cascading virtual network interconnections in accordance with an embodiment of the disclosure. According to an embodiment of the present disclosure, a cascading virtual network includes a translation gateway for message forwarding and a plurality of virtual edge devices (NVEs) supporting different tunnel types.

As shown in FIG. 5, the control protocol flow may include steps S201 to S203.

In step S201, host reachability information for the host that arrives at each NVE connection is sent to the cascading virtual network.

For the centralized control mode, when performing step S201, each NVE sends the host reachability information for reaching the host to which it is connected to the centralized controller in the cascaded virtual network.

For the distributed control mode, when performing step S201, each NVE sends the host reachability information used to reach its connected host to other NVEs in the cascading virtual network.

The host reachability information may include at least one of an address of the host to which the NVE is connected, an address of the NVE, an identifier of the virtual network where the NVE is located, a tunnel type supported by the NVE, and a metadata type.

At step S202, gateway reachability information for reaching the translation gateway is sent to the cascading virtual network.

For the centralized control mode, when performing step S202, the conversion gateway sends the gateway reachability information used to reach itself to the centralized controller in the cascading virtual network.

For the distributed control mode, when performing step S202, the switching gateway sends the gateway reachability information used to reach itself to each NVE in the cascading virtual network.

The gateway reachability information may include at least one of an address of the conversion gateway, an identifier of the virtual network in which the conversion gateway is located, and a tunnel type supported by the conversion gateway.

In step S203, the data reachable information between the hosts is encapsulated and transmitted by using the host reachability information of the host used to reach each NVE connection and the gateway reachability information used to reach the conversion gateway.

For the centralized control mode, when performing step S203: the centralized controller connects to each NVE according to the host reachability information of the host used to reach each NVE connection and the gateway reachability information used to reach the conversion gateway. The host determines the host reachability information of the host used to reach other NVE connections via the translation gateway and sends it to each NVE; each NVE can be based on the host reachability information of the host used to reach other NVE connections via the translation gateway, The data packet sent to the host connected to the other virtual edge device is encapsulated and sent to the translation gateway; the centralized controller sends the received host reachability information of the host used to reach each NVE connection to the translation gateway; And the conversion gateway generates a host reachability information table according to the received host reachability information of the host connected to each of the virtual edge devices, and sends the package to each NVE according to the host reachability information table. After the data packet is decapsulated, it is re-encapsulated and forwarded to the other NVE.

The host reachability information used to reach the hosts of other NVE connections via the translation gateway may include the first tunnel type and the address of the translation gateway.

For the distributed control mode, when performing step S203: each NVE generates another host reachability information table according to the host reachability information of the host used to reach the other NVE connection, and according to the other host reachability information The data packet of the host sent to the other NVE connection is encapsulated and sent to the conversion gateway; and the conversion gateway generates the host reachability information according to the host reachability information of the host used to reach each NVE connection. The encapsulated data packet sent by each NVE is decapsulated and then re-encapsulated and forwarded to the other NVEs according to the host reachability information table.

The embodiment of the present disclosure further provides a system for interconnecting multiple types of cascading virtual networks, including a conversion gateway, an NVE1 supporting a first tunnel type, and an NVE2 supporting a second tunnel type, wherein when the first host connected by the NVE1 needs to When the second host connected to the NVE2 sends a data packet, the NVE1 encapsulates the data packet according to the reachability information of the host that is used to reach the NVE2 through the translation gateway, and obtains the first encapsulated packet and sends the packet to the translation gateway. The switching gateway decapsulates the first encapsulated packet, and determines host reachability information used to reach the second host, and decapsulates according to the reachability information of the host used to reach the second host. The obtained data packet is re-encapsulated to obtain a second encapsulated packet, and is sent to the NVE2, and the NVE2 sends the second encapsulated packet to the second host after decapsulating the second encapsulated packet.

The system according to the embodiment of the present disclosure can communicate with the NVEs supporting different tunnel types by using the control protocol and the forwarding process provided by the embodiments of the present disclosure, so as to implement packet exchange between the two NVE-connected hosts.

6 is a schematic diagram of a host accessing a cascading virtual network in accordance with an embodiment of the present disclosure.

As shown in FIG. 6 , in order to provide interconnection interoperability between multiple cascading virtual network technologies, embodiments of the present disclosure provide a specific scheme for implementing interconnection of multiple cascading technologies, and provide data planes and control planes. Complete program.

For the control plane, the NVE of the cascading virtual network sends the reachability information of each station TS through the control protocol, and the tunnel capability of the NVE and the ability to carry metadata.

The tunnel capability refers to the encapsulation format of data packets used by the interface of the edge device of the network, such as VXLAN, GPE, and GENEVE.

The capability of carrying the metadata refers to some information carried in the packet header of the tunnel, which may be the type and quantity of metadata supported by the tunnel. For packages that cannot carry metadata, such as VXLAN, the control protocol indicates that no metadata type is supported.

Control protocols can be distributed or centralized.

In order to realize interconnection and intercommunication of multiple tunnel technologies, a transformation gateway (Transformer NVE, tNVE) may be set in the cascading virtual network, which may be a dedicated gateway or a specific cascading virtual network edge device. When data communication is required at both ends, if the types of tunnels supported by the two ends are different, it can be implemented by such a conversion gateway. The conversion gateway tNVE also serves as the NVE to send its tunnel type advertisement and metadata capability notification reachability information, and if necessary, can also forward the reachability information of other sites to which it is connected. Finally, each NVE comprehensively determines whether the destination node can be transmitted through the cascading virtual network according to the received reachability information, tunnel capability, and metadata capabilities.

In addition, the conversion gateway can form different subnets with each edge device. When data communication needs to be performed at two ends of different subnets, it can also be implemented by such a conversion gateway.

The conversion gateway tNVE can be specified by configuration or by the control protocol after collecting all NVE capabilities. The conversion gateway can be centralized or distributed by multiple NVEs. The conversion gateway tNVE is different from the cascade gateway (not shown), which is used for communication between different virtual networks, and the conversion gateway is used to connect different tunnels. When a site sends a packet to another site, if the two tunnels do not have the same tunneling technology, even if they are in the same virtual network, they cannot communicate. In this case, you need to exchange the gateway tNVE. The conversion gateway tNVE and the cascade gateway can be implemented on the same device.

The specific operation of the conversion gateway tNVE includes: after the conversion gateway tNVE receives the tunnel data traffic; de-tunes the encapsulation; performs a table lookup on the host reachability information table in the conversion gateway tNVE; and according to the destination address and the virtual network ID in the host data traffic (VNID) Query reachable information. If the reachable information is found, the destination is reachable. The packet can be forwarded to the corresponding card or port of the device that supports the tunnel according to the tunnel information in the reachable information table, and the data packet is received. Re-encapsulation, re-select the new reachable tunnel for forwarding, so that data traffic can be forwarded according to the tunnel encapsulation.

Centralized control solution

7 is a first connection diagram of a host access cascading virtual network control plane according to an embodiment of the present disclosure.

Each edge device (NVE1 to NVE6) of the cascading virtual network transmits reachability information of the host to which it is connected through the control protocol of the network, including address mapping, tunnel type, and metadata information of the host and the network.

In this embodiment, the information carried in the control protocol of the edge device NVE1 is as shown in Table 1.

Table 1. Information carried in the control protocol of NVE1

Host TS address MAC1 NVE address IP1 Virtual network identification VNIDx Tunnel type VXLAN-GPE Metadata type NULL

Since VXLAN-GPE does not support metadata, the metadata package here is filled with NULL.

The information carried in the control protocol sent by the edge device NVE2 is shown in Table 2.

Table 2. Information carried in the control protocol of NVE2

Host TS address MAC2 NVE address IP2

Virtual network identification VNIDx Tunnel type GENEVE Metadata type NULL

The metadata type carried here is the metadata information required when the host TS is the destination host. Some metadata information is optional, and some are mandatory. Here, the control protocol carries the communication with the host TS2. The metadata information, there is no necessary option in this embodiment, so NULL is also filled here.

The information carried in the control protocol sent by the edge device NVE3 is shown in Table 3.

Table 3. Information carried in the control protocol of NVE3

Host TS address MAC3 NVE address IP3 Virtual network identification VNIDx Tunnel type GUE Metadata type Security key

By the same token, the conversion gateway tNVE also publishes its own tunnel encapsulation information and other reachable information through the control protocol, as shown in Table 4.

Table 4. Information carried in the control protocol of tNVE

NVE address IPt Virtual network identification VNIDa-VNIDb Tunnel type GUE, GENEVE, VXLAN-GPE

The virtual network identifier here is a range of VNIDs. In general, the conversion gateway tNVE can belong to all VNIDs in order to connect as many different hosts as possible. Here, it belongs to a VNID range, that is, VNIDa-VNIDb.

It should be noted that the conversion gateway tNVE may be a dedicated device or an NVE device, and the NVE device may configure itself as a function of converting the gateway tNVE, or may be a virtual network control entity (NVA). The NVE device is designated as the role of the translation gateway tNVE.

In the centralized control scheme, each edge device NVE sends the reachability information of the connected host to the centralized controller (ie, NVA), so that the centralized controller NVA obtains the reachability information of the entire network host.

After the centralized controller NVA collects the reachable information, according to the policy, the reachable information can be actively sent to other edge devices (such as NVE1, NVE2, NVE3, ...), or can be sent through the cascading virtual network as needed. After the edge device NVE obtains the request for the reachability information of a certain host, the reachable information is sent to the requested edge device NVE.

In this embodiment, after the centralized controller NVA collects all the host reachability information, it actively informs the reachable information of different hosts of the NVEs of the edge devices, and notifies the host reachability of the same virtual network.

Here, the host TS1 sends a message to the host TS2 as an example to describe the control plane protocol in detail, and how the conversion gateway tNVE implements interworking between different packaging technologies. Hosts TS1 and TS2 belong to the same virtual network VNIDx. In principle, they should be able to communicate with each other. However, host TS1 can only be forwarded by edge device NVE1 to implement VXLAN-GPE, while host TS2 can only be forwarded by edge device NVE2 to implement GENEVE. tNVE to achieve interoperability between the two. The centralized controller NVA can detect that the edge devices NVE1 and NVE2 cannot communicate with each other. Therefore, the centralized controller NVA sends the reachability information of the host TS2 connected to the edge device NVE2 to the edge device NVE1.

The reachability information of the host TS2 sent by the centralized controller NVA to the edge device NVE1 is shown in Table 5.

Table 5. Reachability information of TS2 sent by NVA to NVE1

Host address MAC2 NVE address IPt Virtual network identification VNIDx Tunnel type VXLAN-GPE Metadata type NULL

Here, the reachability information of the host TS2 is basically the same as that of the edge device NVE2 sent to the centralized controller NVA, except that the NVE address is changed to the address of the conversion gateway tNVE, that is, IPt, and the host TS1 is notified to be encapsulated by the VXLAN-GPE. The data message is forwarded to the host TS2.

In addition, the reachable information of the host TS2 sent by the centralized controller NVA to the conversion gateway tNVE is as shown in Table 6.

Table 6. Reachability information of TS2 sent by NVA to tNVE

Host address MAC2 NVE address IP2 Virtual network identification VNIDx Tunnel type GENEVE Metadata type NULL

It can be seen that the reachability information of the host TS2 here is the same as that of the edge device NVE2 sent to the centralized controller NVA. The conversion gateway tNVE is known by the reachability information, and needs to encapsulate the data packet to be sent to the host TS2 through GENEVE and then send it to the edge device NVE2.

At this point, the switch gateway tNVE stores each host reachability information table. As shown in Table 7, the host reachable information table is used to forward the corresponding message.

Table 7. Reachable information table for each host saved by tNVE

Host address NVE address Virtual network identification Tunnel type Metadata type MAC1 IP1 VNIDx VXLAN-GPE NULL MAC2 IP2 VNIDx GENEVE NULL MACx IPx VNIDy ...... ......

In this way, the data packet sent by the host TS1 to the host TS2 is forwarded in the cascading virtual network according to the encapsulation of the VXLAN-GPE, and then tunneled by the conversion gateway tNVE lookup table and transmitted to the host TS2. Similarly, the data packet sent by the host TS2 to the host TS1 is forwarded in the cascading virtual network according to the encapsulation of the GENEVE, and then tunneled by the conversion gateway tNVE lookup table and then sent to the host TS1, thereby realizing the same through the conversion gateway tNVE. Interworking between two virtual networks.

The following takes the host TS1 to send a data packet to the host TS3 as an example for description. Prior to this, the centralized controller NVA also needs to send relevant reachability information to the edge device NVE1. Before sending the reachable information, the centralized controller NVA first needs to judge whether the hosts TS1 and TS3 have interoperability. . In this embodiment, the hosts TS1 and TS3 belong to the same virtual network, but because the requirements for metadata are inconsistent, that is, the host TS3 needs to have a security key, and the host TS1 cannot provide the metadata. It is determined that the hosts TS1 and TS3 cannot communicate directly. Therefore, the centralized controller NVA does not deliver the reachability information of the hosts TS3 and TS1 to the edge devices NVE1 and NVE3.

Distributed control solution

FIG. 8 is a second connection diagram of a host access cascading virtual network control plane according to an embodiment of the present disclosure.

Each edge device (NVE1 to NVE6) of the cascading virtual network sends the reachability information of the connected host to other edge devices through the distributed control protocol of the network, including address mapping, tunnel type, and metadata information of the host and the network.

In this embodiment, the information carried in the control protocols of the edge devices NVE1 to NVE3 and the information carried in the control protocol of the switching gateway tNVE are the same as those described with reference to FIG. 7, as shown in Tables 8 to 11, respectively.

Table 8. Information carried in the control protocol of NVE1

Host TS address MAC1 NVE address IP1 Virtual network identification VNIDx Tunnel type VXLAN-GPE Metadata type NULL

Table 9. Information carried in the control protocol of NVE2

Host TS address MAC2 NVE address IP2 Virtual network identification VNIDx Tunnel type GENEVE Metadata type NULL

Table 10. Information carried in the control protocol of NVE3

Host TS address MAC3 NVE address IP3 Virtual network identification VNIDx Tunnel type GUE

Metadata type Security key

Table 11. Information carried in the control protocol of tNVE

NVE address IPt Virtual network identification VNIDa-VNIDb Tunnel type GUE, GENEVE, VXLAN-GPE

In the distributed control scheme, each edge device NVE sends the reachability information of the connected host to the other edge devices NVE in the network, and each edge device NVE maintains the reachability information sent by other edge devices NVE. Thus, each edge device NVE obtains reachability information of other hosts in the network.

In this embodiment, the edge device NVE1 obtains the reachability information of other hosts, as shown in Table 12.

Table 12. Reachability information of other hosts obtained by NVE1

"ALL" in Table 12 indicates for all host addresses or metadata types.

The edge device NVE1 finds the host TS2 according to the reachability information of the above table, but the edge device NVE1 only supports the VXLAN-GPE mode. Therefore, the edge device NVE1 first encapsulates the packet in the VXLAN-GPE manner according to the reachability information table, and sets the destination address of the outer tunnel to IPt (that is, the address of the translation gateway tNVE), and then forwards the support through the tunnel. VXLAN-GPE conversion gateway tNVE.

For the conversion gateway tNVE, the host reachability information table of other host devices in the network is also obtained, as shown in Table 13.

Table 13. Reachability information for hosts obtained by tNVE

Host address NVE address Virtual network identification Tunnel type Metadata type

MAC1 IP1 VNIDx VXLAN-GPE NULL MAC2 IP2 VNIDx GENEVE NULL MAC3 IP3 VNIDx GUE Security key ...... ...... ...... ...... ......

The conversion gateway tNVE receives the data packet from the host TS1 to be sent to the host TS2 through the VXLAN-GPE tunnel, decapsulates the data packet, finds the above reachable information table, and finds the host address MAC2 of the host TS2. The packet is forwarded to the GENEVE-enabled board or port, and the packet is encapsulated by GENEVE and forwarded to the host TS2 through the GENEVE tunnel.

Similarly, the data packet sent by the host TS2 to the host TS1 can also be sent to the host TS1 through the conversion gateway tNVE, thereby implementing interworking between the same virtual network through the conversion gateway tNVE.

In summary, the embodiments of the present disclosure have the following technical effects:

The embodiments of the present disclosure can access different tunnel technologies into the cascading virtual network, implement interconnection and intercommunication between multiple tunnels, and improve network availability and scalability.

Although the present disclosure has been described in detail above, the present disclosure is not limited thereto, and various modifications may be made by those skilled in the art in accordance with the principles of the present disclosure. Therefore, modifications made in accordance with the principles of the present disclosure are to be understood as falling within the scope of the present disclosure.

Claims (20)

A method of multi-layered cascading virtual network interconnection, the cascading virtual network comprising a switching gateway, a first virtual edge device supporting a first tunnel type, and a second virtual edge device supporting a second tunnel type, the method comprising : When the first host connected to the first virtual edge device needs to send a data packet to the second host connected to the second virtual edge device, the first virtual edge device encapsulates the data packet to obtain Transmitting the packet to the first gateway and sending the packet to the conversion gateway; After the decapsulation of the first encapsulated packet, the conversion gateway determines the reachability information of the host used to reach the second host. The switching gateway re-encapsulates the data packet obtained after decapsulation according to the reachability information of the host that is used to reach the second host, and obtains a second encapsulated packet, and sends the packet to the second virtual edge. Equipment; The second virtual edge device sends the second encapsulated packet to the second host after decapsulating the second encapsulated packet. The method of claim 1, wherein the cascading virtual network further comprises a centralized controller, and the data packet is encapsulated by the first virtual edge device to obtain a first encapsulated message and sent to the Before the step of converting the gateway, the method further includes: The centralized controller receives the host reachability information sent by the first virtual edge device to reach the first host, and the host sent by the second virtual edge device to reach the second host is reachable. Information and gateway reachability information sent by the conversion gateway to reach the conversion gateway; The centralized controller sends the received host reachability information for reaching the second host to the translation gateway; The centralized controller generates a host for reaching the second host via the conversion gateway according to host reachability information used to reach the second host and gateway reachability information used to reach the conversion gateway. The information is reached and sent to the first virtual edge device. The method according to claim 1, wherein before the step of encapsulating the data packet by the first virtual edge device to obtain a first encapsulated message and transmitting the packet to the conversion gateway, the method further include: The switching gateway sends the gateway reachability information to the first virtual edge device, and receives host reachability information sent by the first virtual edge device to reach the first host; and/or The switching gateway sends the gateway reachability information to the second virtual edge device, and receives host reachability information sent by the second virtual edge device to reach the second host; and/or The second virtual edge device sends the host reachability information used to reach the second host to the first virtual edge device, and receives the sent by the first virtual edge device to reach the first host Host reachable information. The method according to claim 3, wherein before the step of encapsulating the data packet by the first virtual edge device to obtain a first encapsulated message and transmitting the packet to the translation gateway, the method further include: The first virtual edge device determines, according to the received gateway reachability information and host reachability information used to reach the second host, host reachability information used to reach the second host via the translation gateway. . The method according to any one of claims 2 to 4, wherein The host reachability information used to reach the first host includes at least one of the following: an address of the first host, an address of the first virtual edge device, and a virtual network where the first virtual edge device is located The identifier, the first tunnel type, and information about the first host carrying metadata; The host reachability information used to reach the second host includes at least one of the following: an address of the second host, an address of the second virtual edge device, and a virtual network where the second virtual edge device is located Identification, the second tunnel type, and information about the second host carrying metadata; The gateway reachability information used to reach the translation gateway includes at least one of the following: an address of the translation gateway, an identifier of a virtual network in which the translation gateway is located, and a tunnel type supported by the conversion gateway. The method according to claim 2 or 4, wherein the step of encapsulating the data packet by the first virtual edge device comprises: The first virtual edge device encapsulates the data packet according to the host reachability information used to reach the second host by using the switching gateway, to obtain the first encapsulated packet. The method according to any one of claims 1 to 4, wherein after the decapsulation of the first encapsulated packet, the conversion gateway determines the reachability information of the host used to reach the second host. The steps include: The conversion gateway queries the host reachability information used to reach the second host according to the destination address and/or the virtual network identifier carried in the data packet obtained by the decapsulation. The method of claim 5, wherein the conversion gateway re-encapsulates the data packet obtained after decapsulation according to the host reachability information used to reach the second host, to obtain a second encapsulation report. The steps of the text include: Determining, by the conversion gateway, a second tunnel type for encapsulating the data packet according to host reachability information used to reach the second host; The switching gateway encapsulates the data packet according to the second tunnel type to obtain the second encapsulated packet. A multi-type method for cascading virtual network interconnections, the cascading virtual network comprising a translation gateway for message forwarding and a plurality of virtual edge devices supporting different tunnel types, the method comprising: Sending host reachability information for the host connected to each of the virtual edge device connections to the cascading virtual network; Transmitting gateway reachability information for reaching the translation gateway to the cascading virtual network; Data packets that need to be exchanged between the hosts are encapsulated and sent by the host reachability information of the host used to reach the connection of each of the virtual edge devices and the gateway reachability information used to reach the conversion gateway. The method of claim 9, wherein the cascading virtual network further comprises a centralized controller, and transmitting host reachability information for reaching a host of each of the virtual edge device connections to the cascading virtual network The steps include: Each of the virtual edge devices sends the host reachability information to reach the host to which it is connected to the centralized controller. The method of claim 9, wherein the step of transmitting host reachability information for the host to each of the virtual edge device connections to the cascading virtual network comprises: Each of the virtual edge devices sends the host reachability information used to reach its connected host to other virtual edge devices and the translation gateway in the cascading virtual network. The method according to claim 10 or 11, wherein the host reachability information comprises at least one of: an address of a host to which the virtual edge device is connected, an address of the virtual edge device, the virtual edge The ID of the virtual network where the device resides, the tunnel type supported by the virtual edge device, and the metadata type. The method of claim 10, wherein the step of transmitting gateway reachability information for reaching the translation gateway to the cascading virtual network comprises: The conversion gateway sends the gateway reachability information to the centralized controller or each of the virtual edge devices. The method of claim 11, wherein the step of transmitting gateway reachability information for reaching the translation gateway to the cascading virtual network comprises: The conversion gateway transmits the gateway reachability information to each of the virtual edge devices in the cascading virtual network. The method according to claim 13 or 14, wherein the gateway reachability information comprises at least one of: an address of the translation gateway, an identifier of a virtual network in which the translation gateway is located, and the conversion gateway The type of tunnel supported. The method according to claim 13, wherein the host reachability information used to reach the host connected to each of the virtual edge devices and the gateway reachability information used to reach the conversion gateway are required for each host The steps of encapsulating and sending the interactive data packet include: The centralized controller connects to each of the virtual edge devices according to the received host reachability information of the host used to reach each virtual edge device connection and the gateway reachability information used to reach the translation gateway. Hosts determine host reachability information for hosts connected to other virtual edge devices via the translation gateway, and send to each of the virtual edge devices; Each of the virtual edge devices encapsulates and sends a data packet to a host connected to the other virtual edge device according to host reachability information of a host that is used to connect to the other virtual edge device via the translation gateway. Giving the conversion gateway; The centralized controller sends host reachability information received to the host connected to each of the virtual edge devices to the translation gateway. The method of claim 14, wherein said utilizing host reachability information for reaching a host of each of said virtual edge device connections and gateway reachability information for reaching said translation gateway are for each host The steps of encapsulating and sending data packets that need to be exchanged include: Each of the virtual edge devices generates another host reachability information table according to the host reachability information of the host that is used to reach the connection of the other virtual edge device, and sends the other host reachability information table according to the other host reachability information table. The data packet of the host connected to the virtual edge device is encapsulated and sent to the translation gateway. The method according to claim 16 or 17, wherein The conversion gateway generates a host reachability information table according to the received host reachability information of the host connected to each virtual edge device, and according to the host reachability information table, each of the virtual The encapsulated data packet sent by the edge device is decapsulated and then re-encapsulated and forwarded to the other virtual edge device. A multi-type cascading virtual network interconnection conversion gateway, the cascading virtual network comprising the conversion gateway, a first virtual edge device supporting a first tunnel type, and a second virtual edge device supporting a second tunnel type, The conversion gateway includes a message receiving module, a destination reachability determining module, and a package forwarding module, where When the first host connected to the first virtual edge device needs to send a data packet to the second host connected to the second virtual edge device, the packet receiving module receives the first virtual edge device to the The first encapsulated packet obtained and sent by the data packet is encapsulated, The destination reachable determining module decapsulates the first encapsulated packet, and determines host reachability information used to reach the second host, and The encapsulating and forwarding module re-encapsulates the data packet obtained after decapsulation according to the reachability information of the host that is used to reach the second host, and obtains a second encapsulated packet, and sends the packet to the second virtual Edge device. A system for interconnecting multiple types of cascading virtual networks, including a switching gateway, a first virtual edge device supporting a first tunnel type, and a second virtual edge device supporting a second tunnel type, wherein When the first host connected to the first virtual edge device needs to send a data packet to the second host connected to the second virtual edge device, the first virtual edge device is used to arrive through the conversion gateway. Decoding the host of the second host, encapsulating the data packet, and obtaining the first encapsulated packet, and sending the packet to the conversion gateway. The switching gateway decapsulates the first encapsulated packet, and determines host reachability information used to reach the second host, and according to the reachability information of the host used to reach the second host, The data packet obtained by the encapsulation is re-encapsulated to obtain a second encapsulated packet, and sent to the second virtual edge device, and The second virtual edge device sends the second encapsulated packet to the second host after decapsulating the second encapsulated packet.

Images