An implementation framework and method for symmetrical drainage of north-south traffic

Abstract

In particular, the present invention relates to a framework and method for implementing symmetrical drainage of north-south traffic. The implementation architecture and method of the symmetric north-south traffic diversion implements the policy routing function through the virtual router; the SNAT namespace is responsible for sending the network return packet; the transit virtual machine includes four ports, two of which are used to receive the guiding traffic of the policy routing , and the other two are used as the logical starting point and logical end point of the service chain; the transparent firewall has a management port, and at least 3 ports are used for the ingress port and the egress port of the service chain; the OVS bridge matches the flow table according to the characteristics of the message, and then The action instructions on the table determine the next step. The implementation architecture and method of symmetric north-south traffic diversion can successfully guide the traffic from the external network, effectively support the application of transparent firewalls in the service chain, and ensure the symmetrical performance of network round-trip packets to meet the needs of firewall session verification .

Description

technical field [0001] The invention relates to the technical fields of computer networks and cloud computing, and in particular, to an implementation framework and method for symmetric traffic drainage in north-south direction. Background technique [0002] In the network, a user's request may need to pass through or use different network functions. Generally, the order of the network functions that the request needs to pass through is also specific. This path is formed by the different network functions that the traffic passes through. It is called Service Function Chain (SFC). In other words, a service function chain is a serial chain formed by combining different network service functions in a specific order. The combination order of the chain is generally determined by a specific order. User requests to decide. [0003] The emergence of SDN (Software Defined Networking) and NFV (Network Function Virtualization, Network Function Virtualization) technologies provides an ...

Images