SDN-based cloud direct connect highly-available method and system

Abstract

Disclosed in the present invention is an SDN-based cloud direct connect highly-available system, comprising: a control unit, comprising a switch, a port, a vlan, and an interconnection address information input device, wherein the switch, the port, the vlan, and the interconnection address information input device are used for creating physical dedicated lines; the control unit is connected to a BGP configuration unit, a VPC binding and health check configuration unit, and a route configuration unit; the BGP configuration unit is used for creating a BGP neighbor on each dedicated line gateway; the VPC binding and health check configuration unit is used for binding a VPC and configuring a route weight and health check; the route configuration unit is used for adding a route pointing to the VPC; the control unit is connected to a connectivity test unit; and the connectivity test unit is used for executing ping and tracert command check connectivity. In the present invention, dedicated line gateways can be configured for different access point devices, the access point devices can be connected to the same VPC, and the VPC is highly available on the basis of multiple AZs, thereby solving the problem of a single point of failure between an access device and a cloud gateway.

Description

SDN-based cloud private line high availability method and system TECHNICAL FIELD

[0001] The present application relates to the field of cloud computing virtual networks, and in particular to an SDN-based cloud private line high availability method and system. BACKGROUND

[0002] Cloud private line technology is a secure, stable and efficient private network communication technology based on the physical private line of an operator between the customer's Internet data center and the virtual private network on the cloud. After the customer private line is connected to the cloud computing vendor room, a VXLAN tunnel is established between the access switch (private line gateway) and the VPC forwarding gateway (cloud gateway) cluster to realize business cloud access. In the process of cloud access, customers will place complex database clusters, professional equipment and high-security systems in the local IDC, and the front-end application is deployed on the cloud platform. In this deployment scenario, the local IDC and the front-end application interact frequently, and usually have high requirements for the delay, reliability and bandwidth capacity of the cloud access link, so multiple access point private lines are needed to realize bandwidth expansion and effectively avoid single point failure.

[0003] In the existing scheme, bandwidth expansion and link reliability can be realized by aggregating ports and ECMP aggregated links, and the existing method has the following problems: the aggregation port / link requires configuration on the private line switch in the same access point (same room), which cannot avoid single point failure, that is, after a single room failure, the aggregated private lines are all unavailable; the current master / standby and load capacity is realized based on the link between the customer IDC and the access device of the cloud vendor, and the link between the access device and the cloud gateway is still a single point, which cannot realize end-to-end high availability. SUMMARY

[0004] This section is intended to summarize some aspects of the embodiments of the present application and briefly introduce some preferred embodiments. Some simplifications or omissions may be made in this section and the abstract and title of the specification of the present application to avoid obscuring the purpose of this section, abstract and title, and such simplifications or omissions cannot be used to limit the scope of the present application.

[0005] In view of the above problems of the prior art, the present application is proposed.

[0006] Therefore, the purpose of the present application is to provide an SDN-based cloud private line high availability method and system, which solves the problem of "single room failure, aggregated private lines are all unavailable, access device to cloud gateway is still a single point, and end-to-end high availability cannot be realized".

[0007] To solve the above technical problems, the present application provides the following technical scheme: an SDN-based cloud private line high availability system, comprising:

[0008] A control unit comprising a switch, a port, a VLAN, and an interconnection address information input device for creating a physical dedicated line, the control unit being connected with a BGP configuration unit for creating a BGP neighbor on each dedicated line gateway, a VPC binding and health check configuration unit for binding a VPC and configuring a routing weight and a health check, and a routing configuration unit for adding a route pointing to the VPC to realize traffic intercommunication between a local IDC and the VPC, the control unit being connected with a connectivity test unit for executing ping and tracert commands to check connectivity.

[0009] As a preferred scheme of the cloud dedicated line high-availability system based on SDN, the control unit monitors and manages the software of the entire network structure through an SDN controller, can respond to changes in network state in real time and adjust network configuration to maintain high availability, and the SDN controller realizes dynamic path selection between the dedicated line gateway and the cloud gateway cluster, optimizes data transmission efficiency and link stability.

[0010] As a preferred scheme of the cloud dedicated line high-availability system based on SDN, the switch, the port, the VLAN, and the interconnection address information input device are operated and configured through a user interface.

[0011] As a preferred scheme of the cloud dedicated line high-availability system based on SDN, the VPC binding and health check configuration unit can automatically adjust the routing weight to respond to changes in network state, and perform periodic health checks to ensure network stability, and the health check configuration unit is arranged between the VPC and the dedicated line gateway.

[0012] As a preferred scheme of the cloud dedicated line high-availability system based on SDN, the control unit further comprises a module for configuring failover and recovery strategies to automatically switch to a backup path when a dedicated line or a gateway fails, ensuring service continuity and reliability, and supporting isolation and security control in a multi-tenant environment.

[0013] As a preferred scheme of the cloud dedicated line high-availability system based on SDN, the control unit utilizes an SDN controller to realize dynamic adjustment of the internal network structure of the VPC to adapt to changes in the state of the customer-side dedicated line link, and the control unit utilizes the SDN controller control plane to realize real-time monitoring and reactive adjustment of the link between the dedicated line gateway and the cloud gateway cluster to respond to network topology changes and failures.

[0014] A method of a cloud private line high-availability system based on SDN, comprising the following steps

[0015] Step one: create two physical private lines by selecting the designated switch, port, vlan, and interconnection address information of the user;

[0016] Step two: create two private line gateways and bind the two physical private lines respectively;

[0017] Step three: the two private line gateways respectively establish BGP neighbors with the customer side;

[0018] Step four: the two private line gateways are respectively bound to the same VPC and configured with routing weights, and the IP configuration health check probe is specified;

[0019] Step five: add a route pointing to the VPC to the access device of the local IDC to realize the secure intercommunication of the local IDC and the VPC traffic

[0020] Step six: test connectivity

[0021] Step seven: end.

[0022] As a preferred scheme of the method of a cloud private line high-availability system based on SDN, in the step four, the state of the customer side private line link is monitored through NQA detection or BFD protocol to optimize the fast convergence of the routing, and a load balancing configuration unit is set in the step four, which is used for dynamically distributing the traffic among the multiple physical private lines to optimize the network load and improve the data transmission efficiency.

[0023] As a preferred scheme of the method of a cloud private line high-availability system based on SDN, in the step five, real-time synchronous updating is supported to ensure that all related devices can obtain the latest configuration in time when the network configuration changes or recovers from failure, and the access device of the local IDC is internally provided with a security monitoring module, which is responsible for monitoring all network traffic to identify and respond to potential security threats.

[0024] As a preferred scheme of the method of a cloud private line high-availability system based on SDN, in the step six: test connectivity, the following steps are included

[0025] S1: open the command line window of the computer on the local IDC side;

[0026] S2: execute the ping command to check whether the local IDC and the cloud host under the VPC on the cloud are connected;

[0027] S3: execute the tracert command to check whether the two physical private lines realize load access through the route tracking command.

[0028] The beneficial effects of the present application are:

[0029] 1. Support different access point device configuration dedicated line gateway and connect the same VPC, VPC is based on multi-AZ high availability, solve the single point failure problem between access device and cloud gateway.

[0030] 2. Support configuring different weight routes for VPC through dedicated line, and distinguish master / standby / load dedicated line according to the weight, and realize load capacity through equivalent routing.

[0031] 3. Support HC health check detection, based on dedicated line granularity, cloud gateway initiates ping detection to customer side address regularly, when master / standby / load link fails, cloud gateway can actively cancel the route pointing to the fault dedicated line according to the health check detection result, and the customer side cancels the route pointing to the cloud based on NQA or BFD link detection state, realize automatic switching of the link. BRIEF DESCRIPTION OF DRAWINGS

[0032] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the following will briefly introduce the drawings needed to be used in the embodiment description. Obviously, the drawings in the following description are only some embodiments of the present application, and other drawings can be obtained by those skilled in the art without creative labor. Among them:

[0033] Fig. 1 is a customer IDC through dedicated line cloud structure diagram of the cloud dedicated line high availability method and system based on SDN provided by the present application;

[0034] Fig. 2 is an aggregated port access dedicated line structure diagram provided by the present application;

[0035] Fig. 3 is a multi-dedicated line binding the same dedicated line gateway structure diagram provided by the present application;

[0036] Fig. 4 is a multi-AZ load dedicated line cloud structure diagram provided by the present application. DETAILED DESCRIPTION

[0037] In order to make the above-mentioned purposes, features and advantages of the present application more obvious and easy to understand, the specific embodiments of the present application will be described in detail below with reference to the drawings of the specification.

[0038] In the following description, many specific details are set forth in order to provide a thorough understanding of the present application, but the present application can also be implemented in other ways different from those described herein, and those skilled in the art can make similar generalizations without departing from the connotation of the present application, therefore the present application is not limited to the specific embodiments disclosed below.

[0039] Second, the "one embodiment" or "an embodiment" described herein as including a particular feature, structure, or characteristic, but not every embodiment necessarily includes that particular feature, structure, or characteristic. Moreover, these particular features, structures, or characteristics can be combined in any suitable manner in one or more embodiments.

[0040] Third, the term "exemplary" is used herein to mean "serving as an example, instance, or illustration." Any implementation described herein as "exemplary" is not necessarily to be construed as preferred or advantageous over other implementations.

[0041] Referring to FIGS. 1-4, the present application provides a cloud private line high availability method and system based on SDN, comprising:

[0042] The control unit comprises a switch, a port, a vlan, and an interconnection address information input device, and is used to create a physical private line. The control unit is connected with a BGP configuration unit, a VPC binding and health check configuration unit, and a route configuration unit. The BGP configuration unit is used to create a BGP neighbor on each private line gateway. The VPC binding and health check configuration unit is used to bind a VPC and configure a route weight and a health check. The route configuration unit is used to add a route pointing to the VPC, so as to realize the traffic intercommunication between a local IDC and the VPC. The control unit is connected with a connectivity test unit, and the connectivity test unit is used to execute a ping and a tracert command to check the connectivity. The SDN controller is used to not only realize the centralized management of network devices, but also effectively improve the stability and reliability of the network by dynamically adjusting the network configuration. Meanwhile, the health check configuration unit is used to periodically check the connectivity and performance of the VPC, so as to guarantee the continuous availability of the network service and reduce the influence of system failure. In addition, the periodic ping and tracert diagnosis performed by the connectivity test unit is helpful to quickly locate and solve potential network problems, so as to maintain the optimization of the network performance.

[0043] The control unit can monitor and manage the software of the entire network structure through the SDN controller, and can respond to changes in network state in real time and adjust the network configuration to maintain high availability. The SDN controller realizes dynamic path selection between the dedicated gateway and the cloud gateway cluster, optimizes data transmission efficiency and link stability. Through centralized management, the administrator can allocate and adjust the resources of the entire network from a single interface, improving the efficiency of network management and reducing the complexity of operation. The dynamic path selection function of the SDN controller can optimize the data transmission path in real time according to the current congestion or fault condition of the network, so as to bypass the fault node or overloaded link, ensure the transmission efficiency of the data packet and reduce the delay. The SDN controller can predict and prevent potential network problems such as traffic surge or network attack by monitoring the network state and performance indicators in real time, so as to take measures in advance to ensure the overall security and stable operation of the network.

[0044] Further, the switch, port, vlan and interconnection address information input device is operated and configured through a user interface. Through a unified user interface, the administrator can realize centralized management and configuration of all network devices, including but not limited to opening and closing of switch ports, creation and management of VLANs, and allocation and management of IP addresses. The advantage of this centralized management is that the administrator does not need to log in to each device to operate, but can complete all tasks through a unified control platform, greatly simplifying the management operation and reducing the possibility of errors, improving the response speed and management efficiency of the network.

[0045] Further, the VPC binding and health check configuration unit can automatically adjust the routing weight to respond to changes in network state, and perform periodic health checks to ensure network stability. The health check configuration unit is set between the VPC and the dedicated gateway. The configuration unit has the ability to intelligently monitor and adjust network traffic to respond to changing network environments and needs. By being set between the VPC and the dedicated gateway, the health check configuration unit can monitor network traffic and connection status in real time, periodically check whether the network path is smooth, and ensure smooth data transmission. The health check configuration unit periodically sends probe data packets to key nodes in the network, analyzes the response time and success rate of these data packets to evaluate the health status of the network, and if it finds that the performance of a certain path has decreased or the connection has failed, the configuration unit will automatically adjust the routing weight to redirect traffic to a path with better performance, thereby avoiding data transmission interruption or delay.

[0046] Further, the control unit also includes a module configured with failover and recovery strategy to automatically switch to a backup path when the dedicated line or gateway fails, ensuring the continuity and reliability of the service, supporting isolation and security control in a multi-tenant environment. The failover module is pre-configured with multiple network paths, and the priority of each path is set. Under normal circumstances, data is transmitted through the main path. When the main path fails, the system will immediately evaluate the status and performance of the backup path and select the optimal backup path for data forwarding. At the same time, the module will also attempt to restore the function of the main path. Once the main path is restored, the system can choose to switch back to the main path according to the strategy, minimizing service interruption time and ensuring business continuity and high availability of network services.

[0047] Further, the control unit utilizes the SDN controller to achieve dynamic adjustment of the VPC internal network structure to adapt to changes in the customer side dedicated line link state. The control unit utilizes the SDN controller control plane to achieve real-time monitoring and reactive adjustment of the link between the dedicated line gateway and the cloud gateway cluster to respond to network topology changes and failures. The SDN controller communicates with the data plane device through the OpenFlow or similar protocol through the control plane separated from the network device. The control unit achieves network device configuration and traffic control by sending instructions to the SDN controller, thereby achieving dynamic adjustment and optimization of the network. The SDN controller can dynamically reallocate network resources and paths to optimize data transmission efficiency and quickly switch to a backup path in the event of a link failure, thereby ensuring service continuity and stable performance.

[0048] Further, a method for a cloud dedicated line high-availability system based on SDN includes the following steps

[0049] Step one: create two physical dedicated lines by selecting and specifying switches, ports, VLANs, and interconnection address information by the user;

[0050] Step two: create two dedicated line gateways and bind them to two physical dedicated lines respectively;

[0051] Step three: establish BGP neighbors with the customer side for the two dedicated line gateways respectively;

[0052] Step four: bind the same VPC to the two dedicated line gateways respectively and configure route weights and specify IP configuration health check probes;

[0053] Step five: add routes pointing to the VPC to the access devices of the local IDC to achieve secure intercommunication between the local IDC and the VPC traffic

[0054] Step six: test connectivity

[0055] Step seven: end.

[0056] Step four monitors the customer side dedicated line link state through NQA detection or BFD protocol to optimize the fast convergence of routing, and a load balancing configuration unit is set in step four to dynamically allocate traffic among multiple physical dedicated lines to optimize network load and improve data transmission efficiency. Step five supports real-time synchronous updating to ensure that all related devices can obtain the latest configuration in real time when network configuration changes or fault recovery, and the internal access device of the local IDC is provided with a security monitoring module to monitor all network traffic to identify and respond to potential security threats. Step six: test connectivity includes the following steps;

[0057] S1: Open the command line window on the computer side at the local IDC;

[0058] S2: Execute the ping command to check if the local IDC and the cloud host under the VPC on the cloud are connected;

[0059] S3: Execute the tracert command to check if the two physical dedicated lines realize load access through the route tracking command. By utilizing the flexibility and centralized management advantages of software-defined network, a highly redundant and reliable network connection can be created at the physical layer, and the fault tolerance of the system is increased through the dual physical dedicated line, so that even if one dedicated line fails, the other dedicated line can immediately take over the traffic to maintain uninterrupted service. Through the use of NQA detection or BFD protocol, real-time monitoring of the dedicated line state can be realized to ensure that the routing can be quickly adjusted when facing link quality changes, reducing the delay and packet loss of data transmission. The introduction of the load balancing configuration unit further optimizes the allocation of data traffic, balances the network load, and improves the overall data transmission efficiency and system performance. Through the real-time synchronous updating mechanism, any network configuration changes or fault recovery can be quickly reflected to all related devices, enhancing the adaptability and flexibility of the network. The security monitoring module of the local IDC access device is an important guarantee for network security, which can monitor and analyze the passing network traffic in real time, effectively identify and block potential security threats, protect enterprise data and applications from attacks, and finally through the test connectivity steps executed by the ping and tracert commands, the correctness of the physical dedicated line and network configuration is verified, and the stability and high availability of the entire network system are ensured.

[0060] It should be noted that the above embodiments are only used to illustrate the technical solutions of the present application and are not limiting. Although the present application has been described in detail with reference to the preferred embodiments, those skilled in the art should understand that the technical solutions of the present application can be modified or replaced by equivalents without departing from the spirit and scope of the present application, and all should be covered in the scope of the claims of the present application.

Claims

1. An SDN-based cloud private line high-availability system, characterized in that: include: The control unit includes switches, ports, VLANs, and interconnect address information input devices. These switches, ports, VLANs, and interconnect address information input devices are used to create physical leased lines. The control unit is connected to a BGP configuration unit, a VPC binding and health check configuration unit, and a routing configuration unit. The BGP configuration unit is used to create BGP neighbors on each leased line gateway. The VPC binding and health check configuration unit is used to bind VPCs and configure route weights and health checks. The routing configuration unit is used to add routes pointing to VPCs to enable traffic exchange between the local data center and the VPCs. The control unit is also connected to a connectivity testing unit, which is used to execute ping and tracert commands to check connectivity. 2.The SDN-based cloud private line high-availability system of claim 1, wherein: The control unit monitors and manages the entire network structure through the SDN controller software, which can respond to changes in network status in real time and adjust network configuration to maintain high availability. The SDN controller enables dynamic path selection between leased gateways and cloud gateway clusters, optimizing data transmission efficiency and link stability. 3.The SDN-based cloud private line high-availability system of claim 1, wherein: The switch, port, VLAN, and interconnect address information input device are operated and configured through a user interface. 4.The SDN-based cloud private line high-availability system of claim 1, wherein: The VPC binding and health check configuration unit can automatically adjust routing weights to cope with changes in network status and perform regular health checks to ensure network stability. The health check configuration unit is set between the VPC and the leased line gateway. 5.The SDN-based cloud private line high-availability system of claim 1, wherein: The control unit also includes a module for configuring failover and recovery strategies to automatically switch to a backup path in the event of a leased line or gateway failure, ensuring service continuity and reliability, and supporting isolation and security control in a multi-tenant environment. 6.The SDN-based cloud private line high-availability system of claim 2, wherein: The control unit utilizes the SDN controller to dynamically adjust the internal network structure of the VPC to adapt to changes in the status of the leased link on the customer side. The control unit then uses the SDN controller control plane to achieve real-time monitoring and reactive adjustment of the link between the leased gateway and the cloud gateway cluster to cope with network topology changes and faults.

7. The method of a cloud private line high availability system based on SDN according to any one of claims 1-6, characterized in that: Includes the following steps Step 1: Create two physical leased lines by having the user select the specified switch, port, VLAN, and interconnect address information; Step 2: Create two dedicated gateways and bind them to two physical dedicated lines respectively; Step 3: Establish BGP neighbors between the two dedicated gateways and the customer side respectively; Step 4: Bind the two dedicated gateways to the same VPC and configure route weights, and configure health check probes for the specified IPs; Step 5: Add a route to the VPC for the access devices in your local IDC to enable secure traffic exchange between your local IDC and the VPC. Step Six: Test Connectivity Step 7: End. 8.The method of claim 7, wherein: In step four, the status of the leased line on the customer side is monitored through NQA probing or BFD protocol to optimize the fast convergence of routes. In step four, a load balancing configuration unit is set up to dynamically distribute traffic among multiple physical leased lines in order to optimize network load and improve data transmission efficiency. 9.The method of claim 7, wherein: The step five supports real-time synchronization update, ensuring that all related devices can obtain the latest configuration in time when network configuration changes or fault recovery, and the internal access device of the local IDC in the step five is provided with a security monitoring module, which is responsible for monitoring all network traffic to identify and respond to potential security threats. 10.The method of claim 7, wherein: The step six: test connectivity includes the following steps: S1: open the command line window of the computer on the local IDC side; S2: execute the ping command to check whether the local IDC and the cloud host under the cloud VPC are connected; S3: execute the tracert command to check whether the two physical private lines realize load access through the route tracking command.

Images