A method for limiting bandwidth of container public network based on optional fields of ip protocol

Abstract

The invention discloses a container public network bandwidth limitation method based on an optional field of the IP protocol. By loading a specific kernel module on a physical machine of the local area network, before the container sends the IP data packet to the local area network, the container IP of the IP data packet is sent to the local area network. The address is set into an optional field of the IP protocol. On the public network gateway machine of the LAN, by loading a specific kernel module, the container IP address in the optional field of the IP data packet is taken out, and the data packet is marked with a corresponding label, and then passed to the bandwidth limiting module for bandwidth control. The invention uniformly manages and restricts the flow of all containers in the local area network on a local area network gateway machine, simplifies the software architecture, improves management efficiency, and reduces management costs. Moreover, the present invention can realize the joint management and limitation of the public network bandwidth of multiple containers across physical machines, and the operations on data packets are all completed in the kernel state of the operating system, which has high operating efficiency.

Description

technical field [0001] The present invention relates to the technical field of containers, in particular to a container public network bandwidth limiting method based on an IP protocol optional field. Background technique [0002] Containers are a lightweight computing virtualization technology. By using container technology, applications and their operating environments such as standard libraries, third-party libraries, and configuration files that they depend on can be packaged into a container image, and subsequent application operations can be replaced by running container images. Compared with running the application directly, packaging the application into a container image and running it has the advantage of isolating the operating environment and physical resources. Because the operating environment and physical resources such as CPU, memory, and network between containers are isolated from each other, when multiple containers run on the same physical machine, it wi...

AI Technical Summary

Problems solved by technology

After the first layer of conversion, the IP address of the container is lost. On the gateway machine, only the physical machine from which the data packet comes from can be determined, and it is impossible to determine which container on the physical machine the data packet originates from.

Images