Network data transmission method, access method and storage medium based on SDN

Abstract

The present invention discloses a network data transmission method, access method and storage medium based on SDN. The method includes: controlling a first elastic network card for data transmission to access a software defined network SDN; determining a gateway associated with the first elastic network card in the software defined network SDN, wherein the elastic network card information of the first elastic network card is configured on the gateway; obtaining first configuration information between the gateway and a virtual private cloud VPC system, wherein the first configuration information is used to characterize that data transmission is allowed between the gateway and the VPC system; and transmitting data associated with the first elastic network card between the gateway and the VPC system based on the first configuration information. The present invention solves the technical problem of low efficiency of data transmission.

Description

Technical Field

[0001] The present invention relates to the field of computers, and in particular to a network data transmission method, an access method and a storage medium based on SDN. Background Art

[0002] At present, when allocating and processing resources, Network Function Virtualization (NFV) is usually deployed in an Elastic Cloud Server (ECS). Since elastic network cards are usually deployed based on resources on computing nodes, the number of elastic network card settings is limited due to the resources on the nodes. At the same time, this method cannot achieve intercommunication between elastic network cards and VPC networks, and there is a technical problem of low data transmission efficiency.

[0003] To address the above-mentioned problems, no effective solution has been proposed yet. Summary of the invention

[0004] The embodiments of the present invention provide a network data transmission method, an access method and a storage medium based on SDN, so as to at least solve the technical problem of low efficiency of data transmission.

[0005] According to one aspect of an embodiment of the present invention, a network data transmission method based on SDN is provided. The method may include: controlling a first elastic network card used for transmitting data to access a software defined network SDN; determining a gateway associated with the first elastic network card in the software defined network SDN, wherein the elastic network card information of the first elastic network card is configured on the gateway; obtaining first configuration information between the gateway and a virtual private cloud VPC system, wherein the first configuration information is used to indicate that data transmission is allowed between the gateway and the VPC system; and transmitting data associated with the first elastic network card between the gateway and the VPC system based on the first configuration information.

[0006] According to another aspect of an embodiment of the present invention, a network data access method based on SDN is provided. The method may include: determining a first elastic network card corresponding to a client and used to transmit data; controlling the first elastic network card to access a software-defined network SDN; determining a gateway associated with the first elastic network card in the software-defined network SDN, wherein the elastic network card information of the first elastic network card is configured on the gateway; obtaining first configuration information between the gateway and a virtual private cloud VPC system, wherein the first configuration information is used to characterize that data transmission is allowed between the gateway and the VPC system; based on the first configuration information, transmitting data associated with the first elastic network card between the gateway and the VPC system to access the client to the network function virtualization NFV resources on the VPC system.

[0007] According to another aspect of an embodiment of the present invention, another SDN-based network data transmission method is also provided. The method may include: determining the gateway associated with the first elastic network card in the connected software-defined network SDN by calling the first interface, wherein the first interface includes a first parameter, the parameter value of the first parameter is the gateway, and the elastic network card information of the first elastic network card is configured on the gateway; obtaining the first configuration information between the gateway and the virtual private cloud VPC system, wherein the first configuration information is used to characterize that data transmission is allowed between the gateway and the VPC system; determining the data associated with the first elastic network card to be transmitted between the gateway and the VPC system based on the first configuration information; outputting the data associated with the first elastic network card by calling the second interface, wherein the second interface includes a second parameter, and the parameter value of the second parameter is the data associated with the first elastic network card.

[0008] According to one aspect of an embodiment of the present invention, a network data transmission device based on SDN is provided. The device may include: a first control unit, used to control a first elastic network card used for transmitting data to access a software-defined network SDN; a first determination unit, used to determine a gateway associated with the first elastic network card in the software-defined network SDN, wherein the elastic network card information of the first elastic network card is configured on the gateway; a first acquisition unit, used to acquire first configuration information between the gateway and a virtual private cloud VPC system, wherein the first configuration information is used to indicate that data transmission is allowed between the gateway and the VPC system; a first transmission unit, used to transmit data associated with the first elastic network card between the gateway and the VPC system based on the first configuration information.

[0009] According to another aspect of an embodiment of the present invention, a network data access device based on SDN is provided. The device may include: a second determination unit, used to determine a first elastic network card corresponding to a client and used to transmit data; a second control unit, used to control the first elastic network card to access the software defined network SDN; a third determination unit, used to determine the gateway associated with the first elastic network card in the software defined network SDN, wherein the elastic network card information of the first elastic network card is configured on the gateway; a second acquisition unit, used to acquire first configuration information between the gateway and the virtual private cloud VPC system, wherein the first configuration information is used to characterize that data transmission is allowed between the gateway and the VPC system; a second transmission unit, used to transmit data associated with the first elastic network card between the gateway and the VPC system based on the first configuration information, so as to access the client to the network function virtualization NFV resources on the VPC system.

[0010] According to another aspect of an embodiment of the present invention, another network data transmission device based on SDN is also provided. The device may include: a fourth determination unit, used to determine the gateway associated with the first elastic network card in the connected software defined network SDN by calling the first interface, wherein the first interface includes a first parameter, the parameter value of the first parameter is the gateway, and the elastic network card information of the first elastic network card is configured on the gateway; a third acquisition unit, used to obtain the first configuration information between the gateway and the virtual private cloud VPC system, wherein the first configuration information is used to characterize that data transmission is allowed between the gateway and the VPC system; a fifth determination unit, used to determine the data associated with the first elastic network card to be transmitted between the gateway and the VPC system based on the first configuration information; an output unit, used to output the data associated with the first elastic network card by calling the second interface, wherein the second interface includes a second parameter, and the parameter value of the second parameter is the data associated with the first elastic network card.

[0011] According to another aspect of an embodiment of the present invention, a computer-readable storage medium is provided, the computer-readable storage medium including a stored program, wherein when the program is running, the device where the storage medium is located is controlled to execute any one of the above-mentioned SDN-based network data transmission methods.

[0012] According to another aspect of an embodiment of the present invention, a processor is further provided, and the processor is used to run a program, wherein any one of the above-mentioned SDN-based network data transmission methods is executed when the program is running.

[0013] According to another aspect of an embodiment of the present invention, there is also provided a network data transmission system based on SDN, including: a processor; a memory, connected to the processor, and used to provide the processor with instructions for processing the following processing steps: controlling a first elastic network card used for transmitting data to access a software defined network SDN; determining a gateway associated with the first elastic network card in the SDN, wherein the elastic network card information of the first elastic network card is configured on the gateway; obtaining first configuration information between the gateway and a virtual private cloud VPC system, wherein the first configuration information is used to characterize that data transmission is allowed between the gateway and the VPC system; and transmitting data associated with the first elastic network card between the gateway and the VPC system based on the first configuration information.

[0014] According to another aspect of an embodiment of the present invention, a network data access system based on SDN is also provided. The network data transmission device based on SDN includes: a first elastic network card connected to a client; a gateway in a software defined network SDN, used to configure the elastic network card information of the first elastic network card; a virtual private cloud VPC system, used to receive data associated with the first elastic network card based on the first configuration information between the gateway, so as to access the client to the network function virtualization NFV resources on the VPC system, wherein the first configuration information is used to indicate that data transmission is allowed between the gateway and the VPC system.

[0015] According to another aspect of an embodiment of the present invention, a network data transmission device based on SDN is also provided. The network data transmission device based on SDN includes: a gateway, which is used to configure the elastic network card information of the first elastic network card connected to the software defined network SDN; a third interface, which is connected to the gateway, and is used to obtain the first configuration information between the gateway and the virtual private cloud VPC system, and control the gateway to transmit the data associated with the first elastic network card to the VPC system based on the first configuration information, wherein the first configuration information is used to indicate that data transmission is allowed between the gateway and the VPC system.

[0016] In an embodiment of the present invention, a first elastic network card used for transmitting data is controlled to access a software defined network SDN; a gateway associated with the first elastic network card in the software defined network SDN is determined, wherein the elastic network card information of the first elastic network card is configured on the gateway; first configuration information between the gateway and the virtual private cloud VPC system is obtained, wherein the first configuration information is used to characterize that data transmission is allowed between the gateway and the VPC system; and data associated with the first elastic network card is transmitted between the gateway and the VPC system based on the first configuration information. In other words, the present application deploys the first elastic network card on the SDN gateway, which is only limited by the SDN gateway resources, does not occupy the resources of the computing node, and can realize the intercommunication between the first elastic network card and the VPC network, thereby achieving the technical effect of improving the efficiency of data transmission and solving the technical problem of low efficiency of data transmission. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] The drawings described herein are used to provide a further understanding of the present invention and constitute a part of this application. The exemplary embodiments of the present invention and their descriptions are used to explain the present invention and do not constitute an improper limitation of the present invention. In the drawings:

[0018] Figure 1 It is a hardware structure block diagram of a computer terminal (or mobile device) of a network data transmission method based on SDN according to an embodiment of the present invention;

[0019] Figure 2 is a flow chart of a network data transmission method based on SDN according to an embodiment of the present invention;

[0020] Figure 3 is a flow chart of a network data access method based on SDN according to an embodiment of the present invention;

[0021] Figure 4 is a flow chart of another SDN-based network data transmission method according to an embodiment of the present invention;

[0022] Figure 5 It is a schematic diagram of multi-tenant and NFV intercommunication according to the related technology;

[0023] Figure 6 It is a schematic diagram of another multi-tenant and NFV intercommunication according to the related art;

[0024] Figure 7 is a schematic diagram of implementing NFV access based on a gateway elastic network card according to an embodiment of the present invention;

[0025] Figure 8 is a schematic diagram of multi-tenant access according to an embodiment of the present invention;

[0026] Fig. 9 is a schematic diagram of multi-tenant allocation of tunnel information according to an embodiment of the present invention;

[0027] Fig.10 It is a schematic diagram of a NFV elastic network card directly communicating with an infrastructure service layer according to an embodiment of the present invention;

[0028] Fig.11 is a schematic diagram of a network data transmission device based on SDN according to an embodiment of the present invention;

[0029] Fig.12 is a schematic diagram of a network data access device based on SDN according to an embodiment of the present invention;

[0030] Fig.13 is a schematic diagram of another SDN-based network data transmission device according to an embodiment of the present invention;

[0031] Fig.14 It is a structural block diagram of a computer terminal according to an embodiment of the present invention. DETAILED DESCRIPTION

[0032] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.

[0033] It should be noted that the terms "first", "second", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0034] First, some nouns or terms that appear in the description of the embodiments of the present application are subject to the following explanations:

[0035] Network Function Virtualization (NFV) is a concept of network architecture that uses virtualization technology to divide the functions of network nodes into several functional blocks, which are implemented in software instead of hardware structure.

[0036] Software Defined Network (SDN) is a new network architecture that uses network protocols to separate the control plane of routers from the data plane and implements it in software, making it possible to centrally manage the control planes distributed on various network devices.

[0037] Elastic Network Interface (ENI) is an elastic network interface that binds cloud servers in a private network and can be freely migrated between multiple cloud servers.

[0038] Gateway (GW for short), also known as an internetwork connector or protocol converter, is a complex network connection device that implements network interconnection above the network layer and is only used for interconnection between two networks with different high-level protocols. In this application, it specifically refers to an SDN gateway.

[0039] A Virtual Private Cloud (VPC) is a private cloud that exists in a shared or public cloud and can be an isolated, private virtual network environment that users can apply for on the cloud.

[0040] A tenant can be a customer of a system or computer computing resource, or a client.

[0041] Example 1

[0042] According to an embodiment of the present invention, an embodiment of a network data transmission method based on SDN is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0043] The method embodiment provided in the first embodiment of the present application can be executed in a mobile terminal, a computer terminal or a similar computing device. Figure 1 1 is a hardware structure block diagram of a computer terminal (or mobile device) according to an SDN-based network data transmission method according to an embodiment of the present invention. Figure 1 As shown, the computer terminal 10 (or mobile device 10) may include one or more (shown as 102a, 102b, ..., 102n in the figure) processors (the processor may include but is not limited to a processing device such as a microprocessor MCU or a programmable logic device FPGA), a memory 104 for storing data, and a transmission module 106 for communication functions. In addition, it may also include: a display, an input / output interface (I / O interface), a universal serial bus (USB) port (which may be included as one of the ports of the BUS bus), a network interface, a power supply and / or a camera. It can be understood by those skilled in the art that Figure 1 The structure shown is only for illustration and does not limit the structure of the above electronic device. Figure 1 More or fewer components as shown, or with Figure 1 Different configurations shown.

[0044] It should be noted that the above-mentioned one or more processors and / or other signal processing circuits may generally be referred to herein as "SDN-based network data transmission circuits". The SDN-based network data transmission circuit may be embodied in whole or in part as software, hardware, firmware, or any other combination thereof. In addition, the SDN-based network data transmission circuit may be a single independent processing module, or may be fully or partially integrated into any of the other components in the computer terminal 10 (or mobile device). As involved in the embodiments of the present application, the SDN-based network data transmission circuit acts as a processor control (e.g., selection of a variable resistor terminal path connected to an interface).

[0045] The memory 104 can be used to store software programs and modules of application software, such as the program instructions / data storage device corresponding to the SDN-based network data transmission method in the embodiment of the present invention. The processor executes various functional applications and SDN-based network data transmission by running the software programs and modules stored in the memory 104, that is, the above-mentioned SDN-based network data transmission method is realized. The memory 104 may include a high-speed random access memory, and may also include a non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some instances, the memory 104 may further include a memory remotely arranged relative to the processor, and these remote memories may be connected to the computer terminal 10 via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0046] The transmission device 106 is used to receive or send data via a network. The specific example of the above network may include a wireless network provided by a communication provider of the computer terminal 10. In one example, the transmission device 106 includes a network adapter (Network Interface Controller, NIC), which can be connected to other network devices through a base station so as to communicate with the Internet. In one example, the transmission device 106 can be a radio frequency (RF) module, which is used to communicate with the Internet wirelessly.

[0047] The display may be, for example, a touch screen liquid crystal display (LCD) that enables a user to interact with a user interface of the computer terminal 10 (or mobile device).

[0048] It should be noted that, in some optional embodiments, the above Figure 1 The computer device (or mobile device) shown may include hardware elements (including circuits), software elements (including computer code stored on a computer-readable medium), or a combination of hardware elements and software elements. It should be noted that Figure 1 This is merely one example of a particular embodiment and is intended to illustrate the types of components that may be present in the above-described computer device (or mobile device).

[0049] exist Figure 1 In the operating environment shown, this application provides Figure 2 It should be noted that the network data transmission method based on SDN in this embodiment can be Figure 1 The illustrated embodiment is executed by a mobile terminal.

[0050] Figure 2 is a flow chart of a network data transmission method based on SDN according to an embodiment of the present invention. Figure 2 As shown, the method may include the following steps:

[0051] Step S202: Control a first elastic network card used for transmitting data to access a software defined network SDN.

[0052] In the technical solution provided in the above step S202 of the present invention, the first elastic network card can be a gateway elastic network card (GW ENI), which can be called a virtual ENI, used to transmit data, and the first elastic network card can be controlled to access the software defined network SDN, so that the first elastic network card works in the SDN, that is, this embodiment is a network data transmission method based on SDN.

[0053] Step S204: determine the gateway associated with the first elastic network card in the software defined network SDN.

[0054] In the technical solution provided in the above step S204 of the present invention, the elastic network card information of the first elastic network card is configured on the gateway, and the location information of the first elastic network card is stored on the SDN gateway to determine the gateway associated with the first elastic network card in the software defined network SDN; the gateway can be an SDN gateway; the location information can be used to determine in which SDN gateway the gateway elastic network card is located.

[0055] Optionally, a static configuration method can be used to configure the information of the gateway elastic network card on the SDN gateway through an SDN controller, etc., or a dynamic configuration method can be used. The SDN gateway custom protocol learns the gateway elastic network card from the SDN controller and other forwarding components, and on this basis, the gateway associated with the first elastic network card in the software defined network SDN is determined, wherein the gateway associated with the first elastic network card can be a gateway configured with the first elastic network card through static settings or dynamic settings.

[0056] Optionally, the first elastic network card can configure the location information of the first elastic network card in the SDN network on the SDN gateway through static configuration, dynamic learning, etc., to determine the gateway associated with the first elastic network card in the software defined network SDN. It should be noted that the configuration method here includes but is not limited to static configuration, dynamic learning, etc.

[0057] Optionally, the static configuration method is to configure the gateway elastic network card information on the SDN gateway through the SDN controller, etc.; the dynamic configuration method is for the SDN gateway to customize the protocol to learn the gateway elastic network card from the SDN controller and other forwarding components.

[0058] Step S206: obtaining first configuration information between the gateway and the virtual private cloud VPC system, wherein the first configuration information is used to indicate that data transmission is allowed between the gateway and the VPC system.

[0059] In the technical solution provided in the above step S206 of the present invention, a first elastic network card is created, and the information of the first elastic network card in the software defined network is configured on the SDN gateway. The gateway associated with the first elastic network card in the software defined network SND is determined, and the first configuration information between the gateway and the virtual private cloud VPC system is obtained, wherein the first configuration information is used to characterize that data transmission is allowed between the gateway and the VPC system, for example, it can be VPC 888192.168.1.1--->SDN gateway, which can be used to specify data transmission rules; the VPC system can be represented by VPC888, and it should be noted that the numbers here are only for example purposes and are not specifically limited.

[0060] Step S208: Transmit data associated with the first elastic network interface card between the gateway and the VPC system based on the first configuration information.

[0061] In the technical solution provided in the above step S208 of the present invention, a tunnel information can be assigned to the first elastic network card and stored in the gateway associated with the elastic network card in the software defined network SDN. The tunnel information can be configured using virtual LAN extension, generic routing encapsulation (GRE for short) and other solutions. The tunnel information can be obtained according to the first elastic network card, and the tunnel information can be encapsulated in data packets, NFV return packets and other data, and transmitted between the gateway and the VPC system based on the first configuration information. The tunnel information can be used to distinguish multiple clients in the NFV of the VPC888 system, and can correspond to at least one client. It should be noted that the numbers here are only for example and are not specifically limited.

[0062] Through the above steps S202 to S208 of this application, determine the gateway associated with the first elastic network card in the software defined network SDN; obtain the first configuration information between the gateway and the virtual private cloud VPC system, wherein the first configuration information is used to characterize that data transmission is allowed between the gateway and the VPC system; based on the first configuration information, transmit the data associated with the first elastic network card between the gateway and the VPC system. In other words, by deploying the first elastic network card on the SDN gateway, the application is only limited by the SDN gateway resources, does not occupy the resources of the computing node, and can realize the intercommunication between the first elastic network card and the VPC network, thereby achieving the technical effect of improving the efficiency of data transmission and solving the technical problem of low efficiency of data transmission.

[0063] The above method of this embodiment is further introduced below.

[0064] As an optional implementation, step S208, transmitting data associated with the first elastic network card between the gateway and the VPC system based on the first configuration information includes: determining a network function virtualization NFV resource corresponding to the first configuration information on the VPC system; and transmitting data associated with the first elastic network card between the gateway and the VPC system based on the NFV resource.

[0065] In this embodiment, the network function virtualization NFV resources corresponding to the first configuration information are determined on the VPC system based on the first configuration information. For example, based on the VPC 888 192.168.1.1--->SDN gateway rule, the NFV resources corresponding to the VPC 888192.168.1.1--->SDN gateway rule are determined, and based on the NFV resources, the data associated with the first elastic network card is transmitted between the gateway and the VPC system.

[0066] Optionally, the elastic network card of NFV directly communicates with the infrastructure service layer (Infrastructure as a Service, abbreviated as IaaS). The gateway associated with the first elastic network card in the software defined network SDN serves as an infrastructure service layer device. After the first elastic network card is inserted, it can directly communicate with the VPC where the NFC is located. The network function virtualization NFV resources corresponding to the first configuration information are determined on the VPC system. When the functions of devices such as the elastic gateway (NAT gateway) and the export gateway (VPN gateway) established in the virtual private cloud need to be implemented on the NFV, the corresponding first elastic network card is configured on the SDN gateway, and based on the NFV resources, the data associated with the first elastic network card is transmitted between the gateway and the VPC system.

[0067] As an optional implementation, determine a first elastic network card corresponding to the client; step S204, determine the gateway associated with the first elastic network card in the software defined network SDN, including: based on second configuration information between the client and the gateway, determine the gateway where the first elastic network card is located, wherein the second configuration information is used to characterize that data transmission is allowed between the client and the gateway.

[0068] In this embodiment, based on the second configuration information between the client and the gateway, the gateway where the first elastic network card is located is determined, wherein the second configuration information can be used to characterize that data transmission is allowed between the client and the gateway, and can be VPC111 192.168.11.1--->SDN gateway, VPC 222 192.168.22.1--->SDN gateway, etc. It should be noted that the second configuration information is only calculated as an example here without specific limitation; the client can be the corresponding tenant.

[0069] Optionally, create second configuration information for the client (e.g., tenant), and achieve intercommunication between the client and the gateway through the second configuration information (e.g., VPC111 192.168.11.1--->SDN gateway, VPC 222 192.168.22.1--->SDN gateway), and determine the gateway where the first elastic network card is located based on the second configuration information.

[0070] Optionally, the second configuration information is configured on an SDN gateway in the SDN network, and the gateway where the first elastic network card is located can be determined based on the second configuration information between the client and the gateway.

[0071] As an optional implementation, the number of first elastic network interfaces is determined based on gateway resources of the gateway.

[0072] In this embodiment, since the number of first elastic network cards is limited by gateway resources, the number of first elastic network cards can be determined based on the number of gateway resources of the gateway.

[0073] Optionally, the number of first elastic network cards can be determined based on the gateway resources of the gateway, wherein, since the first elastic network card does not occupy the resources of the computing node and is only limited by the gateway resources, more first elastic network cards can be configured when there are more gateway resources.

[0074] In the related technology, multiple clients are connected to NFV through the cross-VPC plug-in and unplug technology of elastic network cards. However, this method is severely limited in the number of network cards that can be plugged into a single virtual machine. The number of interface (PCI) addresses of the elastic cloud server is limited, and the number of network cards that can be plugged into a single virtual machine is severely limited. It does not support the access of multiple virtual machines (VMs) through a single elastic network card for active-active backup. The present application proposes a method for determining the number of first elastic network cards based on the gateway resources of the gateway. Since the first elastic network card does not occupy the resources of the computing node and is only limited by the gateway resources, and the gateway resources are relatively large, a larger number of first elastic network cards can be determined based on the gateway resources of the gateway.

[0075] As an optional implementation, identification information is assigned to the first elastic network card, wherein the identification information is used to identify a client corresponding to the first elastic network card in NFV resources deployed on the VPC system; and data associated with the first elastic network card is determined based on the identification information.

[0076] In this embodiment, identification information is assigned to the first elastic network card of the client. The identification information is stored on the network card and can be used to distinguish different clients. Different clients can be determined within the NFV based on the identification information. The identification information is obtained according to the first elastic network card and encapsulated in a data packet to determine the data associated with the first elastic network card based on the representation information. The identification information can be tunnel information assigned to the first virtual network card of the client, which can be used to identify the client corresponding to the first elastic network card in the NFV resources deployed on the VPC system.

[0077] Optionally, an identification information is assigned to the first virtual network card of each client, and the identification information is encapsulated in a data packet and stored on the gateway, wherein the identification information can be configured by means of virtual LAN extension, general routing encapsulation, etc., and can be client 1 gateway elastic network card (gweni1)--->tunnel information 1; client 2 gateway elastic network card (gweni2)--->tunnel information 2, and the data associated with the first elastic network card is determined based on the identification information.

[0078] Optionally, the tunnel information in the identification information is used to identify the client in the NFV resources of the VPC system to distinguish multiple tenants. For example, the tunnel information can be used to identify which tenant it is, wherein the tunnel information corresponds to the tenant one by one.

[0079] As an optional implementation manner, determining a first elastic network card corresponding to a client includes: creating a corresponding first elastic network card for each of a plurality of clients to be connected to the NFV resource.

[0080] In this embodiment, for each of the multiple clients to be connected to the NFV resource, a corresponding first elastic network card is created to determine the first elastic network card corresponding to the client.

[0081] Optionally, a first elastic network card is created for each tenant, and the location information of the first elastic network card created for each tenant in the SDN network is configured on the SDN gateway.

[0082] As an optional implementation, transmitting data associated with the first elastic network card between the gateway and the VPC system based on the first configuration information includes: transmitting data associated with the first elastic network card between the gateway and the second elastic network card on the VPC system based on the first configuration information.

[0083] In this embodiment, the second elastic network card can directly communicate with the infrastructure service layer, wherein the second elastic network card can be represented by eni001, which can be the elastic network card in the NFV; the gateway, as a device of the infrastructure service layer, can directly communicate with the VPC where the NFV is located after inserting the second elastic network card, and the corresponding second elastic network card is configured on the gateway. Based on the first configuration information, the data associated with the first elastic network card can be transmitted between the gateway and the second elastic network card on the VPC system.

[0084] Optionally, based on the first configuration information (eg, VPC 888 192.168.1.1 ---> SDN gateway), data associated with the first elastic network card may be transmitted between the gateway and the second elastic network card on the VPC system.

[0085] As an optional implementation, address information of the second elastic network card is obtained in the SDN; and the second elastic network card is determined on the VPC system based on the address information.

[0086] In this embodiment, the address information of the second elastic network card is obtained in the SDN, and the second elastic network card is determined on the VPC system based on the address information, wherein the address information may be similar to the Media Access Control address (MAC) in network forwarding.

[0087] Optionally, each second elastic network card has location information in the SDN network, similar to the media access control address in network forwarding, and the corresponding second elastic network card is configured on the SDN gateway based on the address information.

[0088] As an optional implementation, transmitting data associated with the first elastic network card between the gateway and the second elastic network card on the VPC system based on the first configuration information includes: transmitting data associated with the first elastic network card between the gateway and the second elastic network card via a third elastic network card based on the first configuration information, wherein the third elastic network card is deployed on the VPC system.

[0089] In this embodiment, based on the first configuration information, data associated with the first elastic network card is transmitted between the gateway and the second elastic network card via the third elastic network card, where the third elastic network card can be represented by gweni888 and can be a gateway elastic network card deployed on the VPC system.

[0090] Optionally, the data associated with the first elastic network card is sent to the third elastic network card. The third elastic network card encloses the client information in a data packet according to the location information of the second elastic network card, and sends it to the SDN gateway. The SDN gateway finds the second elastic network card according to the client's router, and obtains tunnel information according to the second elastic network card, encapsulates the tunnel information in the data packet, modifies the outer client information to the system VPC, and then sends it to the virtual machine where the NFV is located. The NFV returns the data packet with the data associated with the second elastic network card to the SDN gateway corresponding to the second elastic network card through the location information of the second elastic network card.

[0091] The embodiment of the present invention further provides a network data access method based on SDN, which is further introduced below.

[0092] Figure 3 is a flow chart of a network data access method based on SDN according to an embodiment of the present invention. Figure 3 As shown, the method may include the following steps:

[0093] Step S302: Determine a first elastic network interface card corresponding to the client and used for transmitting data.

[0094] In the technical solution provided in the above step S302 of the present invention, a first elastic network card is created for each client, wherein the location information of the first elastic network card in the SDN network can be configured on the SDN gateway by static configuration, dynamic learning, etc.

[0095] Optionally, a first elastic network card is created for each client, and the location information of the first elastic network card in the SDN network can be configured on the SDN gateway according to rules such as VPC 111192.168.11.1--->SDN gateway, VPC 222 192.168.22.1--->SDN gateway, etc.

[0096] Optionally, the static configuration method is to configure the gateway elastic network card information on the SDN gateway through the SDN controller, etc.; the dynamic configuration method is for the SDN gateway to customize the protocol to learn the gateway elastic network card from the SDN controller and other forwarding components.

[0097] Step S304: Control the first elastic network card to access the software defined network SDN.

[0098] In the technical solution provided in the above step S304 of the present invention, the first elastic network card can be a gateway elastic network card (GW ENI) used to transmit data. After determining the first elastic network card corresponding to the client and used to transmit data, this embodiment can control the first elastic network card to access the software defined network SDN, so that the first elastic network card works in the SDN.

[0099] Step S306: determine the gateway associated with the first elastic network card in the software defined network SDN.

[0100] In the technical solution provided in the above step S306 of the present invention, the location information of the first elastic network card is stored on the SDN gateway, and the gateway associated with the first elastic network card in the software defined network SDN is determined, wherein the first elastic network card can be a gateway elastic network card; the gateway can be an SDN gateway; the location information can be used to determine in which SDN gateway the gateway elastic network card is located.

[0101] Optionally, a static configuration method can be used to configure the information of the gateway elastic network card on the SDN gateway through an SDN controller, etc., or a dynamic configuration method can be used. The SDN gateway custom protocol learns the gateway elastic network card from the SDN controller and other forwarding components, and on this basis, the gateway associated with the first elastic network card in the software defined network SDN is determined, wherein the gateway associated with the first elastic network card can be a gateway configured with the first elastic network card through static settings or dynamic settings.

[0102] Step S308: obtaining first configuration information between the gateway and the virtual private cloud VPC system, wherein the first configuration information is used to indicate that data transmission is allowed between the gateway and the VPC system.

[0103] In the technical solution provided in the above step S308 of the present invention, a first elastic network card is created, and the information of the first elastic network card in the software defined network is configured on the SDN gateway. The gateway associated with the first elastic network card in the software defined network SND is determined, and the first configuration information between the gateway and the virtual private cloud VPC system is obtained, wherein the first configuration information is used to characterize that data transmission is allowed between the gateway and the VPC system, for example, it can be VPC 888192.168.1.1--->SDN gateway, which can be used to specify data transmission rules; the VPC system can be represented by VPC888, VPC111, etc. It should be noted that the numbers here are only for example purposes and are not specifically limited.

[0104] Optionally, the location information of the first elastic network card in the software defined network is configured on the SDN gateway, the gateway associated with the first elastic network card in the software defined network SDN is determined, the SDN gateway configures the first configuration information, obtains the first configuration information between the gateway virtual private cloud VPC system, and transmits data between the gateway and the VPC system based on the first configuration information.

[0105] Step S310: transmitting data associated with the first elastic network card between the gateway and the VPC system based on the first configuration information, so as to connect the client to the network function virtualization NFV resources on the VPC system.

[0106] In the technical solution provided in the above step S310 of the present invention, a tunnel information can be assigned to the first elastic network card and stored in the gateway associated with the elastic network card in the software defined network SDN. The tunnel information can be configured using virtual LAN extension, general routing encapsulation and other solutions. The tunnel information can be obtained according to the first elastic network card, and the tunnel information can be encapsulated in data packets, NFV return packets and other data, and transmitted between the gateway and the VPC system based on the first configuration information to achieve the purpose of connecting the client to the network function virtualization NFV resources on the VPC system. Among them, the tunnel information can be used to distinguish multiple clients in the NFV of the VPC888 system, and can correspond one-to-one to at least one client. It should be noted that the numbers here are only for example and are not specifically limited.

[0107] Optionally, based on the first configuration information, the client information is enclosed in a data packet and sent to the SDN gateway. The data associated with the first elastic network card is determined according to the client, and the data associated with the first elastic network card is encapsulated in the data packet. The outer client information is modified to the system VPC, and then sent to the network function virtualization NFV resource.

[0108] Optionally, NFV returns the data packet associated with the first elastic network card to the SDN gateway corresponding to the first elastic network card and the second elastic network card through the location information of the first elastic network card and the second elastic network card. The SDN gateway finds the corresponding client VPC information according to the tunnel information, encapsulates the client information in the data packet, determines the client route, and forwards it to the corresponding client.

[0109] Through the above steps S302 to S310 of this application, the first elastic network card corresponding to the client is determined; the gateway associated with the first elastic network card in the software defined network SDN is determined; the first configuration information between the gateway and the virtual private cloud VPC system is obtained, wherein the first configuration information is used to characterize that data transmission is allowed between the gateway and the VPC system; based on the first configuration information, the data associated with the first elastic network card is transmitted between the gateway and the VPC system to connect the client to the network function virtualization NFV resources on the VPC system. In other words, this application deploys the first elastic network card on the SDN gateway, which is only limited by the SDN gateway resources, does not occupy the resources of the computing node, and can realize the intercommunication between the first elastic network card and the VPC network, thereby achieving the technical effect of improving the efficiency of data transmission and solving the technical problem of low efficiency of data transmission.

[0110] The embodiment of the present invention also provides a network data transmission method based on SDN.

[0111] Figure 4 is a flow chart of a network data transmission method based on SDN according to an embodiment of the present invention. Figure 4 As shown, the method may include the following steps.

[0112] Step S402: determining a gateway associated with the first elastic network card in the connected software defined network SDN by calling a first interface, wherein the first interface includes a first parameter, and a parameter value of the first parameter is the gateway.

[0113] In the technical solution provided in the above step S402 of the present invention, the elastic network card information of the first elastic network card is configured on the gateway.

[0114] In this embodiment, the first interface may be an interface for data interaction between the server and the client. The client may determine the gateway associated with the first elastic network card in the software defined network SDN and pass it to the first interface as a first parameter of the first interface, thereby achieving the purpose of determining the gateway associated with the first elastic network card in the software defined network SDN.

[0115] Step S404: obtaining first configuration information between the gateway and the virtual private cloud VPC system, wherein the first configuration information is used to indicate that data transmission is allowed between the gateway and the VPC system.

[0116] Step S406: Determine data associated with the first elastic network interface card to be transmitted between the gateway and the VPC system based on the first configuration information.

[0117] Step S408: outputting data associated with the first elastic network card by calling a second interface, wherein the second interface includes a second parameter, and a parameter value of the second parameter is the data associated with the first elastic network card.

[0118] In the technical solution provided in the above step S408 of the present invention, the second interface may be an interface for data interaction between the server and the client, and the server may output the data associated with the first elastic network card by calling the second interface as a parameter of the second interface, thereby achieving the purpose of outputting the data associated with the first elastic network card. Optionally, the platform outputs the data associated with the first elastic network card by calling the second interface, wherein the second interface is used to output the data associated with the first elastic network card.

[0119] In an embodiment of the present invention, the present application determines the gateway associated with the first elastic network card in the software defined network SDN by calling the first interface, wherein the first interface includes a first parameter, and the parameter value of the first parameter is the gateway; obtains the first configuration information between the gateway and the virtual private cloud VPC system, wherein the first configuration information is used to characterize that data transmission is allowed between the gateway and the VPC system; determines the data associated with the first elastic network card to be transmitted between the gateway and the VPC system based on the first configuration information; outputs the data associated with the first elastic network card by calling the second interface, wherein the second interface includes a second parameter, and the parameter value of the second parameter is the data associated with the first elastic network card. In other words, the present application deploys the first elastic network card on the SDN gateway, which is only limited by the SDN gateway resources, does not occupy the resources of the computing node, and can realize the intercommunication between the first elastic network card and the VPC network, thereby achieving the technical effect of improving the efficiency of data transmission and solving the technical problem of low efficiency of data transmission.

[0120] Example 2

[0121] The preferred implementation manner of the above method of this embodiment is further introduced below, specifically taking an NFV access method based on a network card elastic gateway in an SDN network as an example.

[0122] Currently, NFV is deployed in ECS, and the intercommunication between NFV instances and client instances is generally achieved through the elastic network card solution. However, this solution has the following problems: it is limited by the implementation of the elastic network card and relies on the resources on the computing node, and the number of elastic network cards that can be set is limited; in some scenarios, NFV implements the capabilities of the infrastructure service layer network and directly communicates with the infrastructure service layer, but the current NFV access cannot achieve this scenario.

[0123] To solve the above problems, this application provides a multi-tenant solution. Figure 5 is a schematic diagram of multi-tenant and NFV intercommunication according to an embodiment of the present invention, such as Figure 5 As shown, multiple clients can access NFV through the cross-VPC plug-in technology of elastic network cards. However, this method is severely limited in the number of network cards that can be plugged into a single virtual machine. The number of interface (PCI) addresses of the elastic cloud server is limited, and the number of network cards that can be plugged into a single virtual machine is severely limited. It does not support the access of multiple virtual machines (VMs) for active-active backup through a single elastic network card.

[0124] This application also provides another multi-tenant solution. Figure 6 is a schematic diagram of another multi-tenant and NFV intercommunication according to an embodiment of the present invention, such as Figure 6 As shown, NFV is deployed in an elastic cloud server, and isolation between multiple tenants is achieved through the port aggregation (ENI runking) technology of the elastic network card, and access to multiple NFV virtual machines is achieved through the port bonding (ENI Bonding) technology of the elastic network card. Although this method can achieve high-reliability access of NFV and can borrow the capabilities of the virtualized network card to achieve quality of service (Quality of service, referred to as QoS) and control access lists (access control lists, referred to as ACLs), the port aggregation technology is limited by the number of virtual local area networks (virtual local area networks, referred to as VLANs) of only 4096 and the virtualization resources of computing nodes, the number of tenants that can be supported is limited; in some scenarios, NFV implements the capabilities of the infrastructure service layer network and directly communicates with the infrastructure service layer. This solution does not support direct communication between NFV and the infrastructure service layer.

[0125] This application proposes a method for implementing NFV access based on gateway elastic network card. Figure 7 is a schematic diagram of implementing NFV access based on a gateway elastic network card according to an embodiment of the present invention, such as Figure 7 As shown, the location information of the gateway elastic network card can be set on the SDN gateway by static setting, dynamic learning, etc., wherein the static configuration method is to configure the information of the gateway elastic network card on the SDN gateway through the SDN controller, etc.; the dynamic configuration method is to learn the gateway elastic network card from the SDN controller and other forwarding components through the SDN gateway custom protocol; the location information can be used to determine which SDN gateway the gateway elastic network card is in, and through the configuration rules (for example, VPC 888 192.168.1.1--->SDN gateway rules), the VPC network of the system gateway elastic network card and NFV resources (for example, Figure 7The interconnection of VPC888 in

[0126] Optionally, this method does not need to distinguish multiple clients through ENI. Figure 8 is a schematic diagram of a multi-tenant access according to an embodiment of the present invention, such as Figure 8 As shown, when multiple clients access, a gateway elastic network card is created for each client. The location information of the gateway elastic network card can be set on the SDN gateway through static settings, dynamic learning, etc. Since the gateway elastic network card does not occupy the resources of the computing node, it is only limited by the SDN gateway resources. Since there are more SDN gateway resources, more can be configured. By configuring rules (for example, VPC111192.168.11.1--->SDN gateway, VPC 222192.168.22.1--->SDN gateway), the system client and the SDN gateway can be interconnected.

[0127] Optionally, Fig. 9 is a schematic diagram of multi-tenant allocation tunnel information according to an embodiment of the present invention, such as Fig. 9 As shown, a tunnel is allocated to the gateway elastic network card of each client, wherein the tunnel information can be used to distinguish multiple clients in the NFV of the system VPC888, corresponding one-to-one with the system VPC111 and VPC222.

[0128] Optionally, a tunnel information is assigned to the gateway elastic network card of each client, and the tunnel information is stored on the SDN gateway. The tunnel information can be determined by using virtual LAN extension, GRE and other solutions. By configuring rules (for example, network card 1---> tunnel information 1, network card 2---> tunnel information 2), the interconnection between the system client and the NFV resources corresponding to VPC888 can be achieved, and different tenants are identified in NFV through tunnel information.

[0129] Optionally, the interconnection process from client information to NFV resources is as follows: a data packet is sent from the virtual machine to the virtual switch; the virtual switch encloses the client information in the data packet according to the location information of the network card elastic gateway, and sends it to the SDN gateway; the SDN gateway finds the gateway elastic network card according to the tenant's route, and obtains tunnel information according to the gateway elastic network card, encapsulates the tunnel information in the data packet, modifies the outer tenant information to system VPC888, and then sends it to the virtual machine where the NFV is located; NFV returns the data packet with tunnel information to the SDN gateway corresponding to the gateway elastic network card through the location information of the gateway elastic network card; the SDN gateway finds the corresponding tenant VPC information according to the tunnel information, encapsulates the client information in the data packet; searches for the client route and forwards it to the corresponding client virtual machine.

[0130] In this embodiment, the SDN gateway is an infrastructure service layer device. After the gateway elastic network card is inserted, it can directly communicate with the VPC where the NFV is located, so as to realize the direct communication between the elastic network card of the NFV and the infrastructure service layer. Fig.10 is a schematic diagram of a NFV elastic network card directly communicating with an infrastructure service layer according to an embodiment of the present invention, such as Fig.10 As shown, after receiving the data packet, the SDN gateway confirms that it needs to be forwarded to NFV, and then searches for the network card information of NFV and the gateway elastic network card information; encapsulates the client information of system VPC888 into the data packet and forwards it to NFV; when the NFV gateway completes processing the data packet, it confirms that it needs to be forwarded to the SDN gateway, searches for the information of the gateway elastic network card of SDN, and uses the address information of the gateway elastic network card as the destination address; the virtual switch where the NFV is located searches for the SDN gateway where the gateway elastic network card is located according to the destination address and forwards it to the SDN gateway, where each network card has location information in the SDN network, similar to the media access control address in network forwarding.

[0131] Optionally, when the functions of the elastic gateway and the egress gateway established in the virtual private cloud need to be implemented on NFV, the corresponding gateway elastic network card is configured on the SDN gateway. By configuring the rules (for example, egress direction: SDN gateway: corresponding function, the egress is network card 888, the next hop is the location information of the NFV network card in the SDN network; ingress direction: VPC 888192.168.1.1--->SDN gateway), the elastic network card of NFV can be directly interconnected with the infrastructure service layer.

[0132] In this embodiment, since the resources of the SDN gateway are much larger than those of the computing nodes, and the gateway elastic network card is lighter and occupies less resources, the ENI is carried on the gateway elastic network card, and the gateway elastic network card is carried on the SDN gateway, so as to increase the number of network cards that can be plugged into a single virtual machine, thereby connecting the client information and NFV and realizing multi-client access; the gateway elastic network card is directly configured on the corresponding infrastructure service layer device to solve the problem of intercommunication between VPC and infrastructure service layer devices, and realize the intercommunication between the infrastructure service layer and VPC.

[0133] In this embodiment, the virtual network card implemented based on the SDN gateway, by deploying the first elastic network card on the SDN gateway, is only limited by the SDN gateway resources and does not occupy the resources of the computing node, thereby realizing the VPC network interconnection between the system gateway elastic network card and the NFV resources, and realizing the interconnection between multiple clients and NFV through multiple gateway elastic network cards, and the direct interconnection between NFV and the infrastructure service layer, thereby achieving the technical effect of improving the efficiency of data transmission and solving the technical problem of low data transmission efficiency.

[0134] Example 3

[0135] According to an embodiment of the present invention, there is also provided a method for implementing the above Figure 2 The SDN-based network data transmission method and the SDN-based network data transmission device are shown.

[0136] Fig.11 Schematic diagram of a network data transmission device based on SDN according to an embodiment of the present invention. Fig.11 As shown, the SDN-based network data transmission 110 may include: a first control unit 112 , a first determination unit 114 , a first acquisition unit 116 and a first transmission unit 118 .

[0137] A first control unit 112, used to control a first elastic network card for transmitting data to access a software defined network SDN;

[0138] The first determining unit 114 is used to determine the gateway associated with the first elastic network card in the software defined network SDN. The first control unit is used to control the first elastic network card used for transmitting data to access the software defined network SDN.

[0139] The first acquisition unit 116 is used to acquire first configuration information between the gateway and the virtual private cloud VPC system, wherein the first configuration information is used to indicate that data transmission is allowed between the gateway and the VPC system.

[0140] The first transmission unit 118 is used to transmit data associated with the first elastic network card between the gateway and the VPC system based on the first configuration information.

[0141] It should be noted that the first control unit 112, the first determination unit 114, the first acquisition unit 116 and the first transmission unit 118 correspond to steps S202 to S208 in Embodiment 1, and the three units and the corresponding steps implement the same examples and application scenarios, but are not limited to the contents disclosed in Embodiment 1. It should be noted that the above units, as part of the device, can be run in the computer terminal 10 provided in Embodiment 1.

[0142] According to an embodiment of the present invention, there is also provided a method for implementing the above Figure 3 The network data access method based on SDN and the network data transmission device based on SDN are shown.

[0143] Fig.12 Schematic diagram of a network data access device based on SDN according to an embodiment of the present invention. Fig.12 As shown, the SDN-based network data access device 120 may include: a second determining unit 122 , a second control unit 124 , a third determining unit 126 , a second acquiring unit 128 and a second transmitting unit 130 .

[0144] The second determining unit 122 is configured to determine a first elastic network interface card corresponding to the client and used for transmitting data.

[0145] The second control unit 124 is used to control the first elastic network card to access the software defined network SDN.

[0146] The third determining unit 126 is configured to determine a gateway associated with the first elastic network card in the software defined network SDN.

[0147] The second acquisition unit 128 is used to acquire first configuration information between the gateway and the virtual private cloud VPC system, wherein the first configuration information is used to indicate that data transmission is allowed between the gateway and the VPC system.

[0148] The second transmission unit 130 is used to transmit data associated with the first elastic network card between the gateway and the VPC system based on the first configuration information, so as to connect the client to the network function virtualization NFV resources on the VPC system.

[0149] It should be noted that the second determining unit 122, the second control unit 124, the third determining unit 126, the second obtaining unit 128, and the second transmission unit 130 correspond to steps S302 to S310 in Embodiment 1, and the four units and the corresponding steps implement the same examples and application scenarios, but are not limited to the contents disclosed in Embodiment 1. It should be noted that the above units, as part of the device, can be run in the computer terminal 10 provided in Embodiment 1.

[0150] According to an embodiment of the present invention, another method for implementing the above Figure 4 The SDN-based network data transmission method and the SDN-based network data transmission device are shown.

[0151] Fig.13 Schematic diagram of another SDN-based network data transmission device according to an embodiment of the present invention. Fig.13 As shown, the SDN-based network data transmission device 130 may include: a fourth determining unit 132 , a third obtaining unit 134 , a fifth determining unit 136 and an output unit 138 .

[0152] The fourth determination unit 132 is used to determine the gateway associated with the first elastic network card in the connected software defined network SDN by calling the first interface, wherein the first interface includes a first parameter, the parameter value of the first parameter is the gateway, and the elastic network card information of the first elastic network card is configured on the gateway.

[0153] The third acquisition unit 134 is used to acquire first configuration information between the gateway and the virtual private cloud VPC system, wherein the first configuration information is used to indicate that data transmission is allowed between the gateway and the VPC system.

[0154] The fifth determining unit 136 is configured to determine, based on the first configuration information, data associated with the first elastic network interface to be transmitted between the gateway and the VPC system.

[0155] The output unit 138 is configured to output the data associated with the first elastic network card by calling the second interface, wherein the second interface includes a second parameter, and a parameter value of the second parameter is the data associated with the first elastic network card.

[0156] It should be noted that the fourth determining unit 132, the third obtaining unit 134, the fifth determining unit 136 and the output unit 138 correspond to steps S402 to S408 in Embodiment 1, and the four units and the corresponding steps implement the same examples and application scenarios, but are not limited to the contents disclosed in Embodiment 1. It should be noted that the above units, as part of the device, can be run in the computer terminal 10 provided in Embodiment 1.

[0157] In the SDN-based network data transmission device of this embodiment, the present application deploys the first elastic network card on the SDN gateway, which is only limited by the SDN gateway resources and does not occupy the resources of the computing node. It can also realize the interconnection between the first elastic network card and the VPC network, thereby achieving the technical effect of improving the efficiency of data transmission and solving the technical problem of low data transmission efficiency.

[0158] Example 4

[0159] The embodiment of the present invention can provide a network data transmission system based on SDN, and the network data transmission system based on SDN can include a computer terminal, and the computer terminal can be any computer terminal device in a computer terminal group. Optionally, in this embodiment, the above-mentioned computer terminal can also be replaced by a terminal device such as a mobile terminal.

[0160] Optionally, in this embodiment, the computer terminal may be located in at least one network device among a plurality of network devices of the computer network.

[0161] In this embodiment, the above-mentioned computer terminal can execute the program code of the following steps in the SDN-based network data transmission method of the application: controlling the first elastic network card used to transmit data to access the software-defined network SDN; determining the gateway associated with the first elastic network card in the SDN, wherein the elastic network card information of the first elastic network card is configured on the gateway; obtaining the first configuration information between the gateway and the virtual private cloud VPC system, wherein the first configuration information is used to characterize that data transmission is allowed between the gateway and the VPC system; and transmitting the data associated with the first elastic network card between the gateway and the VPC system based on the first configuration information.

[0162] Optionally, Fig.14 is a structural block diagram of a computer terminal according to an embodiment of the present invention. Fig.14 As shown, the computer terminal A may include: one or more (only one is shown in the figure) processors 142 , a memory 144 , and a transmission device 146 .

[0163] Among them, the memory can be used to store software programs and modules, such as the program instructions / modules corresponding to the SDN-based network data transmission method and device in the embodiment of the present invention. The processor executes various functional applications and signal processing by running the software programs and modules stored in the memory, that is, realizing the above-mentioned SDN-based network data transmission method. The memory may include a high-speed random access memory, and may also include a non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some instances, the memory may further include a memory remotely arranged relative to the processor, and these remote memories can be connected to the computer terminal A via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0164] The processor can call the information and application programs stored in the memory through an SDN-based network data transmission device to execute the following steps: control the first elastic network card used for transmitting data to access the software-defined network SDN; determine the gateway associated with the first elastic network card in the SDN, wherein the elastic network card information of the first elastic network card is configured on the gateway; obtain the first configuration information between the gateway and the virtual private cloud VPC system, wherein the first configuration information is used to characterize that data transmission is allowed between the gateway and the VPC system; and transmit the data associated with the first elastic network card between the gateway and the VPC system based on the first configuration information.

[0165] Optionally, the processor may also execute program codes of the following steps: determining network function virtualization NFV resources corresponding to the first configuration information on the VPC system; and transmitting data associated with the first elastic network card between the gateway and the VPC system based on the NFV resources.

[0166] Optionally, the processor may further execute program code of the following steps: determining the gateway where the first elastic network card is located based on second configuration information between the client and the gateway, wherein the second configuration information is used to indicate that data transmission is allowed between the client and the gateway.

[0167] Optionally, the processor may further execute program code of the following steps: determining the number of first elastic network interfaces based on gateway resources of the gateway.

[0168] Optionally, the processor may also execute program code of the following steps: assigning identification information to the first elastic network card, wherein the identification information is used to identify a client corresponding to the first elastic network card in NFV resources deployed on the VPC system; and determining data associated with the first elastic network card based on the identification information.

[0169] Optionally, the processor may further execute program code of the following steps: creating a corresponding first elastic network card for each of a plurality of clients to be connected to the NFV resource.

[0170] Optionally, the processor may further execute program code of the following steps: transmitting data associated with the first elastic network card between the gateway and the second elastic network card on the VPC system based on the first configuration information.

[0171] Optionally, the processor may further execute program codes of the following steps: obtaining address information of the second elastic network card in the SDN; and determining the second elastic network card in the VPC system based on the address information.

[0172] Optionally, the processor may further execute program code of the following steps: based on the first configuration information, transmitting data associated with the first elastic network card between the gateway and the second elastic network card via a third elastic network card, wherein the third elastic network card is deployed on the VPC system.

[0173] As an optional example, the processor can call the information and application stored in the memory through an SDN-based network data access device to perform the following steps: determine a first elastic network card corresponding to the client and used to transmit data; control the first elastic network card to access the software-defined network SDN; determine the gateway associated with the first elastic network card in the software-defined network SDN, wherein the elastic network card information of the first elastic network card is configured on the gateway; obtain first configuration information between the gateway and the virtual private cloud VPC system, wherein the first configuration information is used to characterize that data transmission is allowed between the gateway and the VPC system; based on the first configuration information, transmit the data associated with the first elastic network card between the gateway and the VPC system to connect the client to the network function virtualization NFV resources on the VPC system.

[0174] As an optional example, the processor can call the information and application stored in the memory through an SDN-based network data transmission device to perform the following steps: determine the gateway associated with the first elastic network card in the connected software defined network SDN by calling the first interface, wherein the first interface includes a first parameter, the parameter value of the first parameter is the gateway, and the elastic network card information of the first elastic network card is configured on the gateway; obtain the first configuration information between the gateway and the virtual private cloud VPC system, wherein the first configuration information is used to characterize that data transmission is allowed between the gateway and the VPC system; determine the data associated with the first elastic network card to be transmitted between the gateway and the VPC system based on the first configuration information; output the data associated with the first elastic network card by calling the second interface, wherein the second interface includes a second parameter, and the parameter value of the second parameter is the data associated with the first elastic network card.

[0175] In an embodiment of the present invention, a network data transmission method based on SDN is provided, which determines the gateway associated with the first elastic network card in the software defined network SDN; obtains the first configuration information between the gateway and the virtual private cloud VPC system, wherein the first configuration information is used to characterize that data transmission is allowed between the gateway and the VPC system; and transmits the data associated with the first elastic network card between the gateway and the VPC system based on the first configuration information. In other words, by deploying the first elastic network card on the SDN gateway, the application is only limited by the SDN gateway resources, does not occupy the resources of the computing node, and can realize the intercommunication between the first elastic network card and the VPC network, thereby achieving the technical effect of improving the efficiency of data transmission and solving the technical problem of low efficiency of data transmission.

[0176] It can be understood by those skilled in the art that Fig.14 The structure shown is for illustration only, and the computer terminal A may also be a smart phone (such as an Android phone, an iOS phone, etc.), a tablet computer, a handheld computer, a mobile Internet device (Mobile Internet Devices, MID), a PAD, and other terminal devices. Fig.14 The structure of the computer terminal A is not limited. For example, the computer terminal A may also include Fig.14 More or fewer components (such as network interfaces, display devices, etc.) shown, or having Fig.14 Different configurations shown.

[0177] A person of ordinary skill in the art can understand that all or part of the steps in the various methods of the above embodiments can be completed by instructing the hardware related to the terminal device through a program, and the program can be stored in a computer-readable storage medium, and the storage medium may include: a flash drive, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, etc.

[0178] According to another aspect of an embodiment of the present invention, a network data access system based on SDN may be provided, and the network data access system based on SDN may include a computer terminal, and the computer terminal may be any computer terminal device in a computer terminal group. Optionally, the network data transmission device based on SDN includes: a first elastic network card, connected to a client; a gateway in a software defined network SDN, used to configure the elastic network card information of the first elastic network card; a virtual private cloud VPC system, used to receive data associated with the first elastic network card based on the first configuration information between the gateway, so as to connect the client to the network function virtualization NFV resources on the VPC system, wherein the first configuration information is used to indicate that data transmission is allowed between the gateway and the VPC system.

[0179] In this embodiment, the first elastic network card in the SDN-based network data access system is connected to the client, and the client segment can correspond to the tenant; the gateway in the software-defined network SDN is used to configure the elastic network card information of the above-mentioned first elastic network card, so that the first elastic network card is deployed on the gateway. The VPC system can obtain the first configuration information between the VPC system and the gateway, and the first configuration information is used to characterize that data transmission is allowed between the gateway and the VPC system. The data associated with the first elastic network card can be received based on the first configuration information to access the client to the network function virtualization NFV resources on the VPC system. Therefore, the SDN-based network data access system of this embodiment can be deployed on the SDN gateway by the first elastic network card, which is only limited by the SDN gateway resources, does not occupy the resources of the computing node, and can realize the intercommunication between the first elastic network card and the VPC network, thereby achieving the technical effect of improving the efficiency of data transmission and solving the technical problem of low efficiency of data transmission.

[0180] According to another aspect of an embodiment of the present invention, a network data transmission device based on SDN may be provided, and the network data transmission device based on SDN may include a computer terminal, and the computer terminal may be any computer terminal device in a computer terminal group. Optionally, the network data transmission device based on SDN includes: a gateway, used to configure the elastic network card information of the first elastic network card connected to the software defined network SDN; a third interface, connected to the gateway, used to obtain the first configuration information between the gateway and the virtual private cloud VPC system, and based on the first configuration information, control the gateway to transmit the data associated with the first elastic network card to the VPC system, wherein the first configuration information is used to indicate that data transmission is allowed between the gateway and the VPC system.

[0181] In this embodiment, the gateway in the SDN-based network data transmission device can be used to configure the elastic network card information of the first elastic network card connected to the software defined network SDN, and then obtain the first configuration information between the gateway and the virtual private cloud VPC system through the third interface connected to the gateway. Since the first configuration information is used to characterize that data transmission is allowed between the gateway and the VPC system, the gateway can be controlled based on the first configuration information to transmit the data associated with the first elastic network card to the VPC system. Therefore, the SDN-based network data transmission device of this embodiment can deploy the first elastic network card on the SDN gateway, which is only limited by the SDN gateway resources and does not occupy the resources of the computing node, and can realize the intercommunication between the first elastic network card and the VPC network, thereby achieving the technical effect of improving the efficiency of data transmission and solving the technical problem of low efficiency of data transmission.

[0182] Example 5

[0183] The embodiment of the present invention further provides a computer-readable storage medium. Optionally, in this embodiment, the computer-readable storage medium can be used to store the program code executed by the SDN-based network data transmission method provided in the first embodiment.

[0184] Optionally, in this embodiment, the computer-readable storage medium may be located in any one of the computer terminals in a computer terminal group in a computer network, or in any one of the mobile terminals in a mobile terminal group.

[0185] As an optional example, a computer-readable storage medium is configured to store program code for performing the following steps: controlling a first elastic network card for transmitting data to access a software-defined network SDN; determining a gateway associated with the first elastic network card in the software-defined network SDN, wherein the elastic network card information of the first elastic network card is configured on the gateway; obtaining first configuration information between the gateway and a virtual private cloud VPC system, wherein the first configuration information is used to characterize that data transmission is allowed between the gateway and the VPC system; and transmitting data associated with the first elastic network card between the gateway and the VPC system based on the first configuration information.

[0186] Optionally, in this embodiment, the above-mentioned computer-readable storage medium is configured to store program codes for executing the following steps: determining network function virtualization NFV resources corresponding to the first configuration information on the VPC system; and transmitting data associated with the first elastic network card between the gateway and the VPC system based on the NFV resources.

[0187] Optionally, in this embodiment, the above-mentioned computer-readable storage medium is configured to store program code for executing the following steps: based on second configuration information between the client and the gateway, determine the gateway where the first elastic network card is located, wherein the second configuration information is used to characterize that data transmission is allowed between the client and the gateway.

[0188] Optionally, in this embodiment, the computer-readable storage medium is configured to store program codes for executing the following steps: determining the number of first elastic network interfaces based on gateway resources of the gateway.

[0189] Optionally, in this embodiment, the above-mentioned computer-readable storage medium is configured to store program code for performing the following steps: assigning identification information to the first elastic network card, wherein the identification information is used to identify the client corresponding to the first elastic network card in the NFV resources deployed on the VPC system; and determining the data associated with the first elastic network card based on the identification information.

[0190] Optionally, in this embodiment, the computer-readable storage medium is configured to store a program code for executing the following steps: creating a corresponding first elastic network card for each of a plurality of clients to be connected to the NFV resource.

[0191] Optionally, in this embodiment, the computer-readable storage medium is configured to store program code for executing the following steps: transmitting data associated with the first elastic network card between the gateway and the second elastic network card on the VPC system based on the first configuration information.

[0192] Optionally, in this embodiment, the computer-readable storage medium is configured to store program codes for executing the following steps: obtaining address information of the second elastic network card in the SDN; and determining the second elastic network card on the VPC system based on the address information.

[0193] Optionally, in this embodiment, the above-mentioned computer-readable storage medium is configured to store program code for performing the following steps: based on the first configuration information, transmitting data associated with the first elastic network card between the gateway and the second elastic network card via the third elastic network card, wherein the third elastic network card is deployed on the VPC system.

[0194] As an optional example, a computer-readable storage medium is configured to store program code for performing the following steps: determining a first elastic network card corresponding to a client and used to transmit data; controlling the first elastic network card to access a software-defined network SDN; determining a gateway associated with the first elastic network card in the software-defined network SDN, wherein the elastic network card information of the first elastic network card is configured on the gateway; obtaining first configuration information between the gateway and a virtual private cloud VPC system, wherein the first configuration information is used to characterize that data transmission is allowed between the gateway and the VPC system; based on the first configuration information, transmitting data associated with the first elastic network card between the gateway and the VPC system to connect the client to the network function virtualization NFV resources on the VPC system.

[0195] As an optional example, a computer-readable storage medium is configured to store program code for performing the following steps: determining a gateway associated with a first elastic network card in an accessed software-defined network SDN by calling a first interface, wherein the first interface includes a first parameter, a parameter value of the first parameter is the gateway, and the elastic network card information of the first elastic network card is configured on the gateway; obtaining first configuration information between the gateway and a virtual private cloud VPC system, wherein the first configuration information is used to characterize that data transmission is allowed between the gateway and the VPC system; determining data associated with the first elastic network card to be transmitted between the gateway and the VPC system based on the first configuration information; and outputting data associated with the first elastic network card by calling a second interface, wherein the second interface includes a second parameter, and the parameter value of the second parameter is the data associated with the first elastic network card.

[0196] The serial numbers of the above embodiments of the present invention are only for description and do not represent the advantages or disadvantages of the embodiments.

[0197] In the above embodiments of the present invention, the description of each embodiment has its own emphasis. For parts that are not described in detail in a certain embodiment, reference can be made to the relevant descriptions of other embodiments.

[0198] In the several embodiments provided in this application, it should be understood that the disclosed technical content can be implemented in other ways. Among them, the device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of units or modules, which can be electrical or other forms.

[0199] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0200] In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0201] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, in essence, or the part that contributes to the prior art, or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including a number of instructions for a computer device (which can be a personal computer, a server or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present invention. The aforementioned storage medium includes: U disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), mobile hard disk, magnetic disk or optical disk and other media that can store program codes.

[0202] The above is only a preferred embodiment of the present invention. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principle of the present invention. These improvements and modifications should also be regarded as the scope of protection of the present invention.

Claims

1. A network data transmission method based on SDN, It is characterized in that include: Controlling a first elastic network card for transmitting data to access a software defined network SDN; Determine a gateway associated with the first elastic network card in the SDN, wherein elastic network card information of the first elastic network card is configured on the gateway; Acquire first configuration information between the gateway and a virtual private cloud (VPC) system, wherein the first configuration information is used to indicate that data transmission is allowed between the gateway and the VPC system; Transmitting data associated with the first elastic network card between the gateway and the VPC system based on the first configuration information; The first elastic network card is created for each of the multiple clients to access the network function virtualization NFV resources, and the location information of the first elastic network card is stored on the SDN gateway.

2. The method according to claim 1, It is characterized in that Transmitting data associated with the first elastic network card between the gateway and the VPC system based on the first configuration information includes: Determining, on the VPC system, NFV resources corresponding to the first configuration information; Data associated with the first elastic network card is transmitted between the gateway and the VPC system based on the NFV resource.

3. The method according to claim 2, It is characterized in that The method further includes: determining the first elastic network card corresponding to the client; Determining the gateway associated with the first elastic network card in the SDN includes: determining the gateway where the first elastic network card is located based on second configuration information between the client and the gateway, wherein the second configuration information is used to indicate that data transmission is allowed between the client and the gateway.

4. The method according to claim 3, It is characterized in that The method further comprises: The number of the first elastic network interface cards is determined based on the gateway resources of the gateway.

5. The method according to claim 3, It is characterized in that The method further comprises: Allocating identification information to the first elastic network card, wherein the identification information is used to identify the client corresponding to the first elastic network card in the NFV resources deployed on the VPC system; Data associated with the first elastic network interface card is determined based on the identification information.

6. The method according to claim 1, It is characterized in that Transmitting data associated with the first elastic network card between the gateway and the VPC system based on the first configuration information includes: Based on the first configuration information, data associated with the first elastic network card is transmitted between the gateway and the second elastic network card on the VPC system.

7. The method according to claim 6, It is characterized in that The method further comprises: Obtaining address information of the second elastic network card in the SDN; The second elastic network interface card is determined on the VPC system based on the address information.

8. The method according to claim 6, It is characterized in that Transmitting data associated with the first elastic network card between the gateway and the second elastic network card on the VPC system based on the first configuration information includes: Based on the first configuration information, data associated with the first elastic network card is transmitted between the gateway and the second elastic network card via a third elastic network card, wherein the third elastic network card is deployed on the VPC system.

9. A network data access method based on SDN, It is characterized in that include: Determine a first elastic network card corresponding to the client and used for transmitting data; Controlling the first elastic network card to access the software defined network SDN; Determine a gateway associated with the first elastic network card in the SDN, wherein elastic network card information of the first elastic network card is configured on the gateway; Acquire first configuration information between the gateway and a virtual private cloud (VPC) system, wherein the first configuration information is used to indicate that data transmission is allowed between the gateway and the VPC system; Transmitting data associated with the first elastic network card between the gateway and the VPC system based on the first configuration information, so as to connect the client to the network function virtualization NFV resources on the VPC system; The first elastic network card is created for each of the multiple clients to access the NFV resources, and the location information of the first elastic network card is stored on the SDN gateway.

10. A network data transmission method based on SDN, It is characterized in that include: Determine the gateway associated with the first elastic network card in the connected software defined network SDN by calling the first interface, wherein the first interface includes a first parameter, the parameter value of the first parameter is the gateway, and the elastic network card information of the first elastic network card is configured on the gateway; Acquire first configuration information between the gateway and a virtual private cloud (VPC) system, wherein the first configuration information is used to indicate that data transmission is allowed between the gateway and the VPC system; Determine, based on the first configuration information, data associated with the first elastic network card to be transmitted between the gateway and the VPC system; Outputting the data associated with the first elastic network card by calling a second interface, wherein the second interface includes a second parameter, and a parameter value of the second parameter is the data associated with the first elastic network card; The first elastic network card is created for each of the multiple clients to be connected to the NFV resources, and the location information of the first elastic network card is stored on the SDN gateway.

11. A computer-readable storage medium, It is characterized in that The computer-readable storage medium includes a stored program, wherein when the program is executed by a processor, the device where the computer-readable storage medium is located is controlled to execute the method according to any one of claims 1 to 10.

12. A processor, It is characterized in that The processor is used to run a program, wherein the program executes the method according to any one of claims 1 to 10 when running.

13. A network data transmission system based on SDN, It is characterized in that include: processor; A memory connected to the processor, and configured to provide the processor with instructions for processing the following processing steps: controlling a first elastic network card for transmitting data to access a software defined network SDN; determining a gateway associated with the first elastic network card in the SDN, wherein the elastic network card information of the first elastic network card is configured on the gateway; obtaining first configuration information between the gateway and a virtual private cloud VPC system, wherein the first configuration information is used to indicate that data transmission is allowed between the gateway and the VPC system; and transmitting data associated with the first elastic network card between the gateway and the VPC system based on the first configuration information; The first elastic network card is created for each of the multiple clients to be connected to the NFV resources, and the location information of the first elastic network card is stored on the SDN gateway.

14. A network data access system based on SDN, It is characterized in that include: A first elastic network card is connected to the client; A gateway in a software defined network SDN, used to configure the elastic network card information of the first elastic network card; A virtual private cloud VPC system, configured to receive data associated with the first elastic network card based on first configuration information between the gateway, so as to connect the client to the network function virtualization NFV resources on the VPC system, wherein the first configuration information is used to indicate that data transmission is allowed between the gateway and the VPC system; The first elastic network card is created for each of the multiple clients to be connected to the NFV resources, and the location information of the first elastic network card is stored on the SDN gateway.

15. A network data transmission device based on SDN, It is characterized in that include: A gateway, used to configure elastic network card information of a first elastic network card connected to a software defined network SDN; a third interface, connected to the gateway, for obtaining first configuration information between the gateway and a virtual private cloud VPC system, and controlling the gateway to transmit data associated with the first elastic network card to the VPC system based on the first configuration information, wherein the first configuration information is used to indicate that data transmission is allowed between the gateway and the VPC system; The first elastic network card is created for each of the multiple clients to access the network function virtualization NFV resources, and the location information of the first elastic network card is stored on the SDN gateway.

Images