VPC service chain implementation method and system for cloud computing environment

Abstract

The invention discloses a VPC service chain implementation method and system for a cloud computing environment, and belongs to the field of cloud computing and the field of computer networks. The method comprises the following specific steps: S1, creating a service chain by utilizing a cloud management platform; S2, enabling a service chain management control center to processes the service chaincreation event; S3, judging whether an available service chain agent exists in the current VPC or not; S4, introducing an SFC proxy node between a vRouter and an SFC head node; S5, calling a service link port of Neutron, and creating a flow table type SFC link from a service link agent to the two VNF network elements; S6, recording the service chain configuration information into a service chain configuration database for persistence; the traffic traction on the path is no longer based on policy routing, but is realized based on the flow table of the OVS, and the traffic table type service chain drainage scheme can support the transparent mode of the VNF, and has no configuration requirement on the VNF.

Description

technical field [0001] The invention discloses a VPC service chain realization method and system for a cloud computing environment, and relates to the field of cloud computing and computer network technology. Background technique [0002] Cloud computing is one of the hottest topics in the field of IT infrastructure in recent years. Its virtual abstraction of computing, network, storage and other resources provides users with extremely convenient resource usage and flexible resource expansion capabilities. As an open source cloud computing operating system, Openstack has been widely used in both public and private clouds. [0003] As a resource isolation unit in cloud computing, VPC (Virtual Private Cloud) provides users with a dedicated service resource pool for creating ECS ​​virtual servers, virtual SLB load balancers, virtual WAF security devices, and virtual firewalls in VPC Devices, virtual DPI devices, etc., and users often do not use one of the virtual services alon...

AI Technical Summary

Problems solved by technology

This mode based on static routing or policy routing has obvious defects: 1) It is necessary to configure the network elements of the service chain one by one, and to obtain the login authority of each network element. For some OEM network elements, It cannot be done; 2) Since this service chain is based on static routing or policy routing, this requires that all network element interfaces on the service chain must have IP addresses, that is, network elements can only work in gateway mode, and Cannot work in transparent mode, which greatly limits the application scenarios of service chains

[0004] OpenStack also provides a service chain implementation method, which is completely based on the flow table. This method needs to specify a complete port path of a service chain, and the neutron controller sends corresponding information to each computing node in turn according to the port path list. The forwarding flow table is used to realize the function of the service chain. Because this method relies on the flow table to implement, and for the inbound traffic of the VPC, the vrouter generally enters the VPC, and the vrouter cannot support the flow table function, so this method currently does not support northbound ingress traffic. The drainage function of the northbound traffic is the key application scenario of the current VPC service chain drainage

Images