WO2020088340A1 - Method and system for providing cloud computing service - Google Patents

Abstract

Disclosed are a method and a system for providing a cloud computing service. The system comprises: a first virtual machine management module deployed on a physical machine of a first region and adapted to create a first virtual machine on the basis of physical machine resources of the first region; and a second virtual machine management module deployed on the first virtual machine and adapted to create a second virtual machine on the basis of physical machine resources of a second region and providing a cloud computing service on the basis of the created second virtual machine, wherein the physical machine resources of the first region and the physical machine resources of the second region are connected via a network. The present invention reduces deployment costs of a regional cloud computing platform, and achieves fast capacity expansion for respective regions.

Description

Method and system for providing cloud computing service

This application requires the priority of the Chinese patent application with the application number 201811295727.1 and the invention titled "A Method and System for Providing Cloud Computing Services" filed on November 01, 2018, the entire content of which is incorporated by reference in this application.

Technical field

The invention relates to the field of cloud computing, and in particular to a method and system for providing cloud computing services.

Background technique

Internet Data Center (IDC) refers to the use of existing Internet communication lines and bandwidth resources by the telecommunications department to establish a standardized telecommunications professional-grade computer room environment to provide server hosting, leasing and related value-added aspects for enterprises and governments. Full Service. In traditional IDC, service stability and security are not very satisfying customer needs. With the continuous development of cloud computing, cloud computing technology can meet customer needs in areas such as off-site disaster tolerance, low latency, and regional protection. Therefore, major operators will build more and more regional cloud computing platforms based on customer needs to address the regionalized needs of various customers.

However, when establishing a new area and considering the service level (Service-Level Agreement, SLA) at the same time, hundreds of physical machines need to be deployed, resulting in the high cost of establishing a new regional cloud computing platform. For some smaller IDC providers, the physical machine resources that can provide external services are limited. Due to cost factors, it is difficult to connect these IDCs to cloud services.

Summary of the invention

In view of the above problems, the present invention is proposed in order to provide a system for providing cloud computing services and a corresponding method for providing cloud computing services that overcome the above problems or at least partially solve the above problems.

According to an aspect of the present invention, a system for providing cloud computing services is provided, including:

The first virtual machine management and control module is deployed on the physical machine in the first area, and is adapted to create the first virtual machine based on the physical machine resources in the first area;

The second virtual machine management and control module is deployed on the first virtual machine and is adapted to create a second virtual machine based on the physical machine resources in the second area and provide cloud computing services based on the created second virtual machine;

The physical machine resources in the first area and the physical machine resources in the second area are connected through a network.

According to another aspect of the present invention, a method for providing cloud computing services is provided, including:

A first virtual machine management and control module is formed on the physical machine in the first area, and the first virtual machine management and control module creates the first virtual machine based on the physical machine resources in the first area;

A second virtual machine management and control module is formed on the first virtual machine, and the second virtual machine management and control module creates a second virtual machine based on the physical machine resources in the second area and provides cloud computing services based on the created second virtual machine;

The physical machine resources in the first area and the physical machine resources in the second area are connected through a network.

According to the technical solution of the embodiment of the present invention, by creating a virtual machine on a physical machine in the central area and deploying a regionalized virtual machine management and control module on the created virtual machine, the regionalized virtual machine management and control module can be based on the physical machine in the area where the IDC is located Resources to create virtual machines and provide cloud computing services based on the created virtual machines, thereby quickly accessing IDCs in the region to cloud services.

Further, when deploying multiple regions, only the virtual machine management and control modules required by each region need to be deployed in the central region. These regions can reuse the dedicated network service module, load balancing service module, and database service module in the central region. Distributed storage service modules and middleware service modules, on the one hand, can reduce the deployment cost of regional cloud computing platforms, on the other hand, they can quickly expand each area.

The above description is only an overview of the technical solutions of the present invention. In order to understand the technical means of the present invention more clearly, it can be implemented according to the content of the specification, and in order to make the above and other objects, features and advantages of the present invention more obvious The specific embodiments of the present invention are listed below.

BRIEF DESCRIPTION

By reading the detailed description of the preferred embodiments below, various other advantages and benefits will become clear to those of ordinary skill in the art. The drawings are only for the purpose of showing the preferred embodiments, and are not considered to limit the present invention. Furthermore, the same reference numerals are used to denote the same parts throughout the drawings. In the drawings:

FIG. 1 is a schematic diagram of a cloud computing architecture in the prior art;

2 is a schematic diagram of a cloud computing architecture according to an embodiment of the present invention.

detailed description

Hereinafter, exemplary embodiments of the present disclosure will be described in more detail with reference to the accompanying drawings. Although the exemplary embodiments of the present disclosure are shown in the drawings, it should be understood that the present disclosure can be implemented in various forms and should not be limited by the embodiments set forth herein. Rather, these embodiments are provided to enable a more thorough understanding of the present disclosure and to fully convey the scope of the present disclosure to those skilled in the art.

The cloud computing architecture is a system composed of system virtualization, distributed storage services, database services, proprietary network services, virtual machine management and control systems and their dependent middleware. It can integrate the calculation of the underlying physical machine (virtual machine) ), Storage (such as cloud disk), network (virtualized network) and other resources are provided to users as services.

FIG. 1 is a schematic diagram of a cloud computing architecture in the prior art. Referring to FIG. 1, the cloud computing architecture 100 includes an ECS management and control module, a VPN service module, a SLB service module, an RDB service module, a distributed storage service module, a middleware service module, and multiple physical machine resources. These modules are respectively deployed on physical machines . The ECS management and control module can create virtual machines on physical machines based on ECS resource configuration; the VPN service module can provide private network services for the virtual machines; the SLB service module can provide load balancing services; and the RDB service module can provide database services.

It can be seen that according to the existing cloud computing architecture, each cloud computing platform deployed in an area must deploy ECS management and control modules on the physical machines in the area, and repeatedly deploy the other modules mentioned above, and the deployment of these modules may require hundreds of One physical machine leads to complicated implementation and high deployment cost. For example, if you want to connect the IDC of area A and the IDC of area B to the cloud service, you need to build the above cloud computing architecture separately in area A and area B.

In view of the shortcomings of the existing regionalized cloud architecture, the embodiments of the present invention provide a cloud architecture solution based on centralized management and control. By publicizing common components (middleware), components that manage computing resources and network resources (ECS management and control Module) virtualization and centralization, which solves the problem of high cost in the process of accessing cloud services (clouds) for small IDCs with limited computer room capacity. At the same time, the cloud architecture based on centralized management and control also has the capabilities of operation and maintenance, monitoring, SLA, high availability, and rapid expansion of the original cloud architecture, and this new architecture provides public, private, and private clouds. A virtual machine (ECS) is the capability of a public cloud infrastructure.

2 is a schematic diagram of a cloud computing architecture according to an embodiment of the present invention. The cloud computing architecture can access at least one IDC to a cloud service at low cost and quickly, thereby enabling the IDC to provide cloud computing services.

2, the cloud computing architecture 100 includes a central virtual machine (ECS) management and control module, a private network (VPC) service module, a load balancing (SLB) service module, a database (RDB) service module, a distributed storage service module, and an intermediate Server service module and multiple physical machine resources, and these modules are deployed on the physical machines in the central area.

Region refers to the geographical area divided by cloud service providers, such as: North China, East China Three, Frankfurt, East China One, etc. The physical machine resources in the central area are connected to the physical machine resources in other areas through the network. Only two areas are shown in the figure, namely area A and area B. It should be noted that in the embodiment of the present invention, the central area refers to the area where centralized ECS management is deployed, and does not refer to the geographically central area; the other areas refer to the area where the IDC to be accessed to the cloud service is located Each area includes a computer cluster composed of multiple physical machine resources.

According to an embodiment of the present invention, the central area is connected to other areas through dedicated lines, such as Border Gateway Protocol (Border Gateway Protocol, BGP) dedicated lines. The BGP dedicated line is used to open up the network between the central management and the physical machine resources in other regions, so that the central management and control can transmit relevant commands such as control and operation and maintenance to other regions.

The cloud server (Elastic Compute Service, ECS) refers to the elastic cloud computing service provided by the cloud service provider. The ECS instance is also called a virtual machine (Virtual Machine, VM), which is a virtual host provided by virtualization technology, and Multiple virtual machines can be deployed on the physical machine.

The central ECS management and control module can create virtual machines on physical machines in the central area based on ECS resource configuration. Specifically, the user initiates a request to create a virtual machine to the central ECS management and control module, and the request includes relevant configuration parameters of the virtual machine selected by the user, such as CPU core number, memory capacity, disk capacity, operating system, etc .; the central ECS management and control module Receive the request, and refer to the remaining resource amount, remaining resource rate, network communication status and other factors of each physical machine, and allocate the request to the appropriate physical machine in the central area; the appropriate physical machine allocates the user setting based on the request Configure the resources indicated by the parameters and create a virtual machine based on the allocated resources.

After the central ECS management and control module creates a virtual machine, you can deploy a regional ECS management and control module on the created virtual machine and provide functions to control and control the central ECS resources, including stop, start, pause, create, delete, schedule, and downtime Migration, management of security groups, networks, sales, etc. related to ECS resource management.

Each regional ECS management and control module corresponds to an area (that is, the area where the IDC to be accessed to the cloud service is located). The figure shows the regional ECS management and control module A corresponding to the area A and the regional ECS management and control module B corresponding to the area A . The regional ECS management and control module A is deployed on the virtual machine A, and the regional ECS management and control module B is deployed on the virtual machine B. Both the virtual machine A and the virtual machine B are created by the central ECS management and control module based on the physical machine resources in the central area.

The regional ECS management and control module can create a virtual machine based on the physical machine resources of the corresponding region, and provide cloud computing services based on the created virtual machine, where the operating system image required for creating the virtual machine can be distributed storage service module provide. For example, the regional ECS management and control module A can create a virtual machine based on the physical machine resources of the region A according to the user's request, and the virtual machine provides the cloud computing service of the region A, thereby accessing the IDC of the region A to the cloud service; The ECS management and control module B can create a virtual machine based on the physical machine resources of the area B according to the user's request, and the virtual machine provides the cloud computing service of the area B, thereby accessing the IDC of the area B to the cloud service. Similarly, the regional ECS management and control module can also provide functions for the management and control of regional ECS resources, including stop, start, pause, create, delete, schedule, downtime migration, management security group, network, sales and other management related to ECS resources

Private network (Virtual Private Cloud, VPC) is an isolated network environment constructed by cloud service providers, and can customize IP, address range, network segment, routing table and gateway, etc. The VPC service module can provide private network services for virtual machines created by regional ECS management and control modules. Specifically, the regional ECS management and control module creates a virtual machine based on the physical machine resources of the associated area according to the user's request, obtains VPC resources by interacting with the VPC service module, and provides the obtained VPC resources to the created virtual machine machine.

Server Load Balancer (SLB) is a load balancing service that distributes traffic to multiple virtual machines. It can expand the external service capabilities of the application system through traffic distribution, and improve the availability of the application system by eliminating single points of failure. In the embodiment of the present invention, the SLB service module can communicate with the regional ECS management and control module, and the regional ECS management and control module module creates multiple virtual machines for load balancing based on the physical machine resources of the associated area. Then, the SLB service module Control the traffic forwarding rules of multiple virtual machines to provide load balancing services.

The relational database (RDB) service is a relational database service based on virtual machine resources, providing off-site capacity, master-slave switching, rapid expansion, and visual operation and maintenance. In the embodiment of the present invention, the RDB service module can communicate with the regional ECS management and control module, and the ECS management and control module creates multiple virtual machines that provide database services based on the physical machine resources of the associated area.

In one embodiment, the RDB service module itself can also provide data storage services for the regional ECS management and control module, that is, the RDB service module can complete the database service components required by the regional ECS management and control service, and has the ability to switch between the master and backup.

The distributed storage service module can provide image resources for creating virtual machines for the regional ECS management and control module, that is, provide image storage services for ECS, and on the other hand, it can also provide distributed for the virtual machines created by the regional ECS management and control module. Storage service, the distributed storage includes block storage and / or object storage.

The middleware service module is suitable for providing middleware services to other modules in the system. Middleware is a common component, including: distributed lock service, message middleware, unified routing, distributed memory object cache system, mirror center, monitoring center, virtual machine initialization (cloudinit) service. Among them, cloudinit is a virtual machine initialization tool that can read relevant data from various data sources and configure the virtual machine accordingly.

It can be seen that in the prior art, ECS management and control, middleware, and distributed storage are the only dependencies. In the embodiment of the present invention, ECS management and control have changed from one-to-one correspondence to the original middleware. Regional ECS management and control can correspond to a set of middleware services and distributed storage services.

It should be noted that one or more modules in the above cloud computing architecture are not necessary, and those skilled in the art can make trade-offs according to specific application scenarios. For example, the central ECS management and control module and the regional ECS management and control module can provide basic cloud computing services, that is, the central ECS management and control module and the regional ECS management and control module can constitute a basic system for providing cloud computing services. For another example, the central ECS management and control module, the regional ECS management and control module, and the VPC service module may constitute a system that provides a cloud computing service with a proprietary network function. When a database service needs to be provided, the system may include an RDB service module; when a load balancing service needs to be provided, the system may include a load balancing service module.

According to the above cloud computing architecture, the process of creating a complete ECS service is as follows: providing mirroring services through distributed storage, providing cloud disk services through distributed storage, scheduling resources to different physical machines through ECS management, and providing isolation through VPC The virtualized network service virtualizes computing resources, storage resources, and network resources into a computing unit through virtualization.

Taking the deployment of a cloud computing platform in two regions as an example, the method for providing a cloud computing service (that is, connecting the IDC of region A and region B to a cloud service) according to an embodiment of the present invention includes the following steps:

1) Procurement of the resources required for the implementation of the cloud computing architecture in Region A, deployment of all hardware devices (including network devices, storage devices, and physical machine resources of various models) required by the cloud computing environment, network resources (IP resources, dedicated line bandwidth) ).

2) Deploy distributed storage services in the central area: Through the deployment of physical machines in the central area, provide the ECS management and control of each area to create the operating system image required by the virtual machine. Each area has the ability to cache the image locally and control the area ECS Provide the ability to upload, export and create images. Here, the distributed storage service can also provide services such as block storage and / or object storage for virtual machines created by regional ECS management and control.

3) Deploy area A dedicated line: Connect the network exit equipment and switches of the equipment room of the operator in the area A with the network of the central area computer room, open up the physical machine resources in the area A and the network in the center area, so that the network controlled by the central ECS and the area A operate Shang's computer room is in the same network security domain. The physical and virtual machines in the central area can directly access the physical machines in the equipment room where the operator in area A is located, and ensure that the private line network is isolated from other networks in the equipment room.

4) Deploying the central area cloud computing platform middleware: Deploying the mirror center, monitoring, operation and maintenance and cache components required by the cloud computing platform through the central area physical machine, which is mainly for RDB services, regional ECS management and control, SLB services, VPC Services and other modules provide general services. Middleware is a common component, including: distributed lock service, message middleware, unified routing, distributed memory object cache system, mirror center, monitoring center, virtual machine initialization (cloudinit) service

5) Deploy some RDB services in the central area (Mini RDB): Deploy the Mini RDB services through the physical machines in the central area to complete the database service components required by the ECS management and control services, and have the ability to switch between the master and backup.

6) Deploy the VPC service in the central area (only once, only change the configuration in the next area), the VPC service module can provide proprietary network services for the virtual machines created by the regional ECS management and control module

7) ECS management and control of deployment area A. The central ECS management and control creates a virtual machine on the physical machine in the central area, and then, the ECS management and control of the area A may be deployed on the created virtual machine. The ECS control and VPC control of Region A use Mini RDB to store data, and manage computing resources, networks, authentication, general interfaces, storage resources, inventory scheduling, etc.

8) Deploy the SLB service in the central area: Deploy SLB related services through the physical machine resources in the central area, and communicate with the regionalized ECS management and control. The ECS control in the area A creates multiple virtual machines on the physical machines in the area A. Through SLB Services to control the traffic forwarding rules of multiple virtual machines to provide load balancing services for internal and external services.

9) Deploy a complete RDB service in the central area: Create the virtual machine required for the RDB service on the physical machine in the area A through the ECS control and centralized distributed storage service in the area A, and complete the RDB service through the SLB service Application disaster tolerance capabilities, computing resources, storage resources and network resources required to complete the deployment of RDB services. And the ability to provide relational databases mysql and sqlserver based on virtual machines.

After completing the above steps, the IDC in Area A can provide basic cloud services to the outside world. In an application example, the centralized configuration of VPC, SLB, RDB, and ECS in area A is shown in Table 1. In Table 1, the first three columns of IP addresses are routing addresses provided internally, and the last column of IP addresses are service addresses provided externally.

service Middleware ECS service Distributed storage External service address Region A VPC 10.0.0.1 10.0.0.2 10.0.0.15 10.0.0.5 Area A SLB 10.0.0.1 10.0.0.2 10.0.0.15 10.0.0.4 Region A RDB 10.0.0.1 10.0.0.2 10.0.0.15 10.0.0.3 Region A ECS 10.0.0.1 N / A 10.0.0.15 10.0.0.2

Table 1

Next, deploy the cloud computing platform in Region B.

First, as in step 1) above, purchase the resources required for the implementation of the cloud computing architecture in Region B, deploy all hardware devices (including network devices, storage devices, and physical machine resources of various models) and network resources required by the cloud computing environment (IP resources, dedicated line bandwidth).

Secondly, as in step 3) above, deploy a dedicated line in area B, connect the network outlet equipment and switches of the equipment room of the operator in the area B to the network of the central area computer room, and open up the physical machine resources in the area B and the network in the central area to make the central ECS The managed network is in the same network security domain as the regional B operator's computer room. The physical and virtual machines in the central area can directly access the physical machines in the equipment room where the operator in area B is located, and ensure that the private line network is isolated from other networks in the equipment room.

Then, as in step 7) above, deploy the ECS management and control of area B.

Finally, by modifying the configuration in the centralized RDB service and SLB service, the virtual machine resources required for the RDB and SLB to be applied for by region B are configured into the ECS management and control of region B, and the distributed storage services required by it The central distributed storage service, so that RDB and SLB can provide services for area B.

After completing the above steps, the IDC in Region B can provide basic cloud services to the outside world. In an application example, the centralized configuration of VPC, SLB, RDB, and ECS in area B is shown in Table 2.

service Middleware ECS service Distributed storage External service address Region B VPC 10.0.0.1 10.0.1.2 10.0.0.15 10.0.1.5 Area B SLB 10.0.0.1 10.0.1.2 10.0.0.15 10.0.1.4 Region B RDB 10.0.0.1 10.0.1.2 10.0.0.15 10.0.1.3 Region B ECS 10.0.0.1 N / A 10.0.0.15 10.0.1.2

Table 2

It can be seen that, in addition to the deployment of the regional ECS modules in area B, for other centralized modules, only the configuration of area A needs to be modified to complete the deployment.

In summary, the embodiments of the present invention provide a low-cost possibility for third-party operators and traditional IDC to access cloud services. Under the original cloud architecture, the BPG dedicated line is used to open up the operator network, and the centralized management and control is Third-party operators provide ECS with IDC capabilities and centralize common components (ie middleware), which greatly simplifies the resources required for management and control, and can reuse a set of control for the second area The system reduces the overall cost of the newly built second area to 2-3 physical machines, which can quickly integrate the capabilities of second- and third-tier city operators and traditional IDCs.

The specification provided here explains a lot of specific details. However, it can be understood that the embodiments of the present invention can be practiced without these specific details. In some instances, well-known methods, structures, and techniques have not been shown in detail so as not to obscure the understanding of this description.

Those skilled in the art can understand that the modules in the device in the embodiment can be adaptively changed and set in one or more devices different from the embodiment. The modules or units or components in the embodiments may be combined into one module or unit or component, and in addition, they may be divided into a plurality of submodules or subunits or subcomponents. Except that at least some of such features and / or processes or units are mutually exclusive, all features disclosed in this specification (including the accompanying claims, abstract and drawings) and any method so disclosed or All processes or units of equipment are combined. Unless expressly stated otherwise, each feature disclosed in this specification (including the accompanying claims, abstract and drawings) may be replaced by alternative features serving the same, equivalent or similar purpose.

Claims (18)

A system for providing cloud computing services, including: The first virtual machine management and control module is deployed on the physical machine in the first area, and is adapted to create the first virtual machine based on the physical machine resources in the first area; The second virtual machine management and control module is deployed on the first virtual machine and is adapted to create a second virtual machine based on the physical machine resources in the second area and provide cloud computing services based on the created second virtual machine; The physical machine resources in the first area and the physical machine resources in the second area are connected through a network. The system of claim 1, further comprising: The distributed storage service module is deployed on the physical machine in the first area, and is adapted to provide the second virtual machine management and control module with image resources for creating virtual machines. The system according to claim 2, wherein the distributed storage service module is further adapted to provide a distributed storage service for the second virtual machine, the distributed storage including block storage and / or object storage. The system of claim 1, further comprising: The private network service module is deployed on the physical machine in the first area, and is adapted to provide the private network service for the second virtual machine. The system of claim 1, further comprising: The load balancing service module is deployed on the physical machine in the first area and is adapted to communicate with the second virtual machine management and control module. The second virtual machine management and control module creates a plurality of virtual machines for load balancing based on the physical machine resources in the second area , And control the traffic forwarding rules of multiple virtual machines. The system of claim 1, further comprising: The database service module is deployed on the physical machine in the first area and is adapted to communicate with the second virtual machine management and control module. The second virtual machine management and control module creates a plurality of virtual machines that provide database services based on the physical machine resources in the second area. The system of claim 6, wherein the database service module is further adapted to: provide a data storage service for the second virtual machine management and control module. The system according to any one of claims 1 to 7, further comprising: The middleware service module is deployed on the physical machine in the first area and is suitable for providing middleware services to other modules in the system. The system of claim 8, wherein the middleware service includes at least one of the following: Distributed lock service, message middleware, unified routing, distributed memory object cache system, mirror center, monitoring center, virtual machine initialization service. A method for providing cloud computing services, including: A first virtual machine management and control module is formed on the physical machine in the first area, and the first virtual machine management and control module creates the first virtual machine based on the physical machine resources in the first area; A second virtual machine management and control module is formed on the first virtual machine, and the second virtual machine management and control module creates a second virtual machine based on the physical machine resources in the second area and provides cloud computing services based on the created second virtual machine; The physical machine resources in the first area and the physical machine resources in the second area are connected through a network. The method of claim 10, further comprising: A distributed storage service module is formed on the physical machine in the first area, and the distributed storage service module provides the second virtual machine management and control module with image resources for creating a virtual machine. The method of claim 11, further comprising: The distributed storage service module provides a distributed storage service for the second virtual machine, and the distributed storage includes block storage and / or object storage. The method of claim 10, further comprising: A dedicated network service module is formed on the physical machine in the first area, and the dedicated network service module provides the dedicated network service for the second virtual machine. The method of claim 10, further comprising: A load balancing service module is formed on the physical machine in the first area, the load balancing service module communicates with the second virtual machine management and control module, and the second virtual machine management and control module creates a plurality of load balancing services based on the physical machine resources in the second area Virtual machine and control the traffic forwarding rules of multiple virtual machines. The method of claim 10, further comprising: A database service module is formed on the physical machine in the first area, the database service module communicates with the second virtual machine management and control module, and the second virtual machine management and control module creates a plurality of virtual machines providing database services based on the physical machine resources in the second area . The method of claim 15, further comprising: The database service module provides a data storage service for the second virtual machine management and control module. The method according to any one of claims 10 to 16, further comprising: A middleware service module is formed on the physical machine in the first area, and the middleware service module provides the middleware service for the execution of the method. The method of claim 17, wherein the middleware service includes at least one of the following: Distributed lock service, message middleware, unified routing, distributed memory object cache system, mirror center, monitoring center, and virtual machine initialization service.

Images