Method and device for realizing docker network penetration through two-layer protocol stack in cloud computing environment

Abstract

The invention discloses a method and apparatus for enabling a docker network to penetrate through a two-layer protocol stack in a cloud computing environment. The method comprises the following steps:storing, by a docker network protocol stack, tcp / ip / eth related packet data and corresponding packet header information in a protocol stack cache for transparent transmission pre-created by a physical node, constructing a new data packet according to an address and a size corresponding to the cache, placing the new data packet in a related protocol stack packet processing function to transmit thesame to a cloud host protocol stack, so that the cloud host protocol stack judges whether the received data packet is placed in the protocol stack cache for transparent transmission, and if so, directly sending the received data packet to a physical node protocol stack; and upon receiving the data packet, extracting, by the physical node protocol stack, the address, the size and the correspondingpacket header information in the data packet, extracting the data stored in the protocol stack cache for transparent transmission according to the extracted address and the size, transmitting the data to a function corresponding to tcp, ip and eth layers to perform packet encapsulation processing, and sending the data to a physical network card for transmission. The number of data packets of thenetwork protocol stacks in the docker and a cloud host can be reduced, and the cpu usage rate and the data packet forwarding speed are reduced.

Description

technical field

[0001] Embodiments of the present invention relate to the technical field of computer networks, and in particular to a method and device for realizing docker network penetration through two-layer protocol stacks in a cloud computing environment. Background technique

[0002] Docker is an open source application container engine that allows developers to package their applications and dependencies into a portable container, and then publish it to any popular Linux machine. It can also be virtualized. The container is completely sandboxed mechanism, there will be no interface between each other. Docker envisions that the delivery operating environment is like shipping, the OS (operating system) is like a freighter, and each software based on the OS is like a container. Users can freely assemble the operating environment through standardized means, and the content of the container can be customized by the user. , can also be made by professionals. In this way,...

Images