Flow table query method and system based on flow table structure isolation in virtual switch

Abstract

The invention provides a flow table query method and system based on flow table structure isolation in a virtual switch. The method comprises the following steps: distributing an independent flow table for each virtual machine in the system; when a data packet is received from a virtual machine, obtaining the flow table of the virtual machine to serve as a current flow table, and completing a table look-up process in the current flow table according to quintuple information in the data packet to obtain a matched target item in the flow table so as to execute corresponding operation; adding a pre-classification module and a flow table sub-module of each virtual machine to a network card port, wherein the pre-classification module comprises corresponding relation between destination IPs and the flow table sub-modules, and each flow table sub-module stores an independent flow table of the virtual machine corresponding to the flow table sub-module; and when a data packet is received from a network card port, querying the pre-classification module according to a destination IP to obtain a corresponding flow table sub-module, and completing a table look-up process in the corresponding flow table sub-module to obtain a matched destination item in the flow table so as to execute a corresponding operation.

Description

technical field [0001] The invention relates to the performance isolation of tenants in a virtualized environment, and proposes a flow table query method for the flow table structure isolation of a VM in a virtual switch. Background technique [0002] Since the introduction of cloud computing, it has been favored by the industry for its high cost performance and flexibility. Today, cloud computing has become a paradigm for service deployment and provision. More and more services and even network architectures are implemented on cloud platforms, such as cloud-based data center systems and cloud-based carrier networks. [0003] On the cloud platform, a large number of services are deployed in the form of virtual machines (VMs) or containers, and they communicate with the external network through a software-implemented virtual switch (vSwitch). The vSwitch mainly provides functions of data forwarding and flow table query for these virtual machines VM. The flow table query ref...

AI Technical Summary

Problems solved by technology

[0007] In order to solve the problem of lack of isolation in the existing centralized flow table in the virtual switch (vSwitch), the present invention proposes a VM flow table isolation method, which integrates the flow table architecture and table lookup process from the system architecture and process. VM (that is, tenant) is separated as a unit, and each VM only has its own flow table, so the time complexity and space complexity are no longer related to each other, and the search performance is therefore isolated

Images