Data processing method, device, apparatus, and computer storage medium

Abstract

The embodiment of the present application relates to the technical field of network communication, and discloses a data processing method, the method comprises: the method is based on an SD-WAN network;The SD-WAN network comprises a vcpe cluster;The vcpe cluster comprises a plurality of optional vcpe devices;The optional vcpe devices are connected with each other in pairs;The method comprises: receiving a data processing request sent by a cpe device through a target vcpe device;The target vcpe device is one of the optional vcpe devices;When the target vcpe device is unavailable, determining an available vcpe device from the plurality of optional vcpe devices connected with the target vcpe device;Forwarding the data processing request to a target virtual machine through the available vcpe device, and the target virtual machine is used for processing the data processing request. Through the above manner, the embodiment of the present application improves the availability of the SD-WAN network.

Description

Technical Field

[0001] The embodiments of the present invention relate to the field of network communication technology, specifically to a data processing method, apparatus, device, and computer storage medium. Background Technology

[0002] With the rapid development of information technology, the demand for networks is increasing. SD-WAN, or Software-Defined Wide Area Network, is a service that applies SDN technology to wide area network scenarios. It is mainly used in scenarios such as Internet data centers.

[0003] The inventors of this application discovered during the implementation of embodiments of the present invention that existing SD-WAN-based networks suffer from low availability and poor user experience. Summary of the Invention

[0004] In view of the above problems, embodiments of the present invention provide a data processing method to solve the problem of low availability of SD-WAN networks in the prior art.

[0005] According to one aspect of the present invention, a data processing method is provided, the method being based on an SD-WAN network; the SD-WAN network includes a VCPE cluster; the VCPE cluster includes multiple optional VCPE devices; the optional VCPE devices are interconnected in pairs; the method includes:

[0006] The target VCPE device receives a data processing request sent by the CPE device; the target VCPE device is one of the optional VCPE devices.

[0007] When the target VCPE device is unavailable, an available VCPE device is determined from a plurality of optional VCPE devices connected to the target VCPE device;

[0008] The data processing request is forwarded to the target virtual machine via the available VCPE device, and the target virtual machine is used to process the data processing request.

[0009] In an optional manner, the SD-WAN network further includes a virtual routing device; each of the optional VCPE devices is connected to the virtual routing device; the virtual routing device is configured with routing information between each of the optional VCPE devices and multiple optional virtual machines; the target virtual machine is one of the optional virtual machines.

[0010] In an alternative approach, the method further includes:

[0011] Retrieve the VCPE cluster orchestration file sent by the user;

[0012] Configure the VCPE cluster and the connection between the CPE device and the VCPE cluster according to the VCPE cluster orchestration file.

[0013] In an alternative approach, the method further includes:

[0014] Perform rule validation on the VCPE cluster orchestration file;

[0015] When the verification passes, the VCPE cluster and the connection between the CPE device and the VCPE cluster are configured according to the VCPE cluster orchestration file.

[0016] In an alternative approach, the method further includes:

[0017] When the verification fails, the handling strategy is determined according to the preset rule base;

[0018] The VCPE cluster orchestration file is updated according to the aforementioned handling strategy.

[0019] In an alternative approach, the method further includes:

[0020] The VCPE cluster orchestration file is parsed to obtain the host information, external network information, and internal network information corresponding to each of the optional VCPE devices.

[0021] Based on the network information within the cluster, establish the optional VCPE devices and the first tunnels between each pair of the optional VCPE devices;

[0022] A second tunnel is established between the CPE device and each of the VCPE devices based on the host information and the network information outside the cluster.

[0023] In one alternative approach, the second tunnel is established based on a resilient public IP address; bandwidth is shared among the various second tunnels.

[0024] According to another aspect of the present invention, a data processing apparatus is provided, comprising:

[0025] The receiving module is configured to receive a data processing request sent by a CPE device through a target VCPE device; the target VCPE device is one of the optional VCPE devices.

[0026] The determination module is used to determine an available VCPE device from a plurality of optional VCPE devices connected to the target VCPE device when the target VCPE device is unavailable.

[0027] A forwarding module is used to forward the data processing request to a target virtual machine via the available VCPE device, and the target virtual machine is used to process the data processing request.

[0028] According to another aspect of the present invention, a data processing device is provided, comprising: a processor, a memory, a communication interface, and a communication bus, wherein the processor, the memory, and the communication interface communicate with each other through the communication bus;

[0029] The memory is used to store at least one executable instruction that causes the processor to perform the operation of the data processing method as described in any of the foregoing embodiments.

[0030] According to another aspect of the present invention, a computer-readable storage medium is provided, the storage medium storing at least one executable instruction that causes a data processing device to perform the operation of the data processing method described in any of the preceding embodiments.

[0031] This invention is based on an SD-WAN network. The SD-WAN network includes a VCPE cluster, which includes multiple optional VCPE devices. These optional VCPE devices are interconnected. This invention receives data processing requests from CPE devices via a target VCPE device, which is one of the optional VCPE devices. When the target VCPE device is unavailable, an available VCPE device is determined from the multiple optional VCPE devices connected to the target VCPE device. The data processing request is forwarded to a target virtual machine via the available VCPE device, and the target virtual machine processes the data processing request. This invention improves the availability of the SD-WAN network by forwarding and processing data processing requests through a fully interconnected VCPE cluster within a Virtual Private Cloud service.

[0032] The above description is merely an overview of the technical solutions of the embodiments of the present invention. In order to better understand the technical means of the embodiments of the present invention and to implement them in accordance with the contents of the specification, and to make the above and other objects, features and advantages of the embodiments of the present invention more apparent and understandable, specific embodiments of the present invention are described below. Attached Figure Description

[0033] The accompanying drawings are for illustrative purposes only and are not intended to limit the invention. Furthermore, the same reference numerals denote the same parts throughout the drawings. In the drawings:

[0034] Figure 1 A flowchart illustrating the data processing method provided in an embodiment of the present invention is shown;

[0035] Figure 2 A flowchart illustrating a data processing method provided in another embodiment of the present invention is shown;

[0036] Figure 3 A network diagram of a data processing method provided in another embodiment of the present invention is shown;

[0037] Figure 4 A data transmission schematic diagram of a data processing method provided in another embodiment of the present invention is shown;

[0038] Figure 5 A data transmission schematic diagram of a data processing method provided in another embodiment of the present invention is shown;

[0039] Figure 6 A schematic diagram of the structure of the data processing apparatus provided in an embodiment of the present invention is shown;

[0040] Figure 7 A schematic diagram of the structure of the data processing device provided in an embodiment of the present invention is shown. Detailed Implementation

[0041] Exemplary embodiments of the invention will now be described in more detail with reference to the accompanying drawings. While exemplary embodiments of the invention are shown in the drawings, it should be understood that the invention can be implemented in various forms and should not be limited to the embodiments set forth herein.

[0042] Before describing the embodiments of the present invention, the relevant terms will be explained:

[0043] VPC (Virtual Private Cloud) is a virtual intranet created within the cloud. It builds an isolated and private virtual network environment for cloud resources such as cloud servers, cloud containers, and cloud databases. Using network virtualization technology, it employs link redundancy, distributed gateway clusters, and multi-AZ deployments to ensure network security, stability, and high availability. Specifically, public cloud providers isolate specific parts of their public cloud infrastructure for private use. While the VPC infrastructure is managed by the public cloud provider, the allocated resources are not shared with other customers.

[0044] CPE (Customer Premises Equipment) refers to network terminal equipment located at the user end, used to connect with operators for services. It is an important component of network solutions and is usually a router, firewall, or integrated router security appliance.

[0045] vCPE (Virtual Customer Premises Equipment), also known as cloud CPE, is a method of providing virtualized hosting services such as routing, security, and SD-WAN to branch offices or edge networks via software rather than hardware. With vCPE, all hardware-based operations can now be achieved using software-based virtualization capabilities. CPEs run on commercial hardware and Virtual Network Functions (VNFs), rather than proprietary ASICs performing specific network functions. They can be deployed on hardware platforms, in private and public cloud environments, and are virtual network devices geared towards enterprise cloud applications.

[0046] Elastic IP Address (EIP) is a public IP address resource that can be purchased and held independently.

[0047] Shared bandwidth (BWS) provides the ability to reuse bandwidth across multiple IP addresses at the region level. For instances such as ECS instances, load balancers, and NAT gateways bound to EIPs, they can share the same bandwidth. Shared bandwidth can be understood as a pool used to encapsulate EIPs, with all EIPs in the pool sharing the same bandwidth.

[0048] YML stands for YAML (Yarn Aint Markup Language). YAML is an intuitive data serialization format that can be recognized by computers, is easily readable by humans, and interacts easily with scripting languages. It can be imported by various programming languages ​​that support YAML libraries, such as C / C++, Ruby, Python, Java, Perl, C#, and PHP. YML files are data-centric and more concise than traditional XML. YML files can use the extension .yml or .yaml.

[0049] Before describing the embodiments of the present invention, the prior art and its problems will be explained:

[0050] In existing SD-WAN networks, when dynamic increases in user bandwidth are needed, the primary / backup network configuration cannot flexibly meet the demands. The only solution is to increase the bandwidth of existing devices, which is cumbersome. Currently, VCPE deployment is mostly done manually, without automation through document compilation, increasing the risk of errors and consuming significant manpower.

[0051] In one embodiment of the present invention, the method is based on an SD-WAN network, which includes a VCPE cluster; the VCPE cluster includes multiple optional VCPE devices; and the optional VCPE devices are interconnected in pairs.

[0052] Figure 1 A flowchart of a data processing method provided in an embodiment of the present invention is shown. This method is executed by a computer processing device. The computer processing device may include a mobile phone, a laptop computer, etc. Figure 1 As shown, the method includes the following steps:

[0053] Step 10: Receive a data processing request sent by a CPE device through the target VCPE device; the target VCPE device is one of the optional VCPE devices.

[0054] In one embodiment of the present invention, the CPE device may be a front-end device used by the user to enable the user to connect to the Internet, such as a router.

[0055] You can randomly select one of the available VCPE devices as the target VCPE device. Alternatively, you can perform load balancing based on the load of each available VCPE device, selecting the available VCPE device with the lowest current load as the target VCPE device.

[0056] In one embodiment of the present invention, considering that the construction of VCPE devices in the prior art is mostly carried out manually, which has low efficiency and accuracy and cannot meet the needs of quickly building a VCPE cluster, the following method is included before step 10:

[0057] Step 101: Obtain the VCPE cluster orchestration file sent by the user.

[0058] In one embodiment of the present invention, the VCPE cluster orchestration file can be a user-written YAML file, which includes device parameter information for creating optional VCPE devices and network communication information between devices. The device parameter information includes hardware information such as the cloud host's CPU, network card, and memory, as well as image information of the optional VCPE devices within the cloud. The network communication information may include information required for tunneling between optional VCPE devices.

[0059] Step 102: Configure the VCPE cluster and the connection between the CPE device and the VCPE cluster according to the VCPE cluster orchestration file.

[0060] In one embodiment of the present invention, the VCPE cluster orchestration file is parsed to obtain the aforementioned device parameter information and network communication information, and then configured.

[0061] Considering that VCPE cluster orchestration files are written by users, they may contain formal or technical errors that prevent correct conversion into VCPE cluster configuration files. Therefore, to improve the efficiency of VCPE cluster construction and the usability of the constructed VCPE cluster, the VCPE cluster orchestration files can be validated based on some preset orchestration rules. The files can then be automatically corrected based on the validation results to obtain correct and usable VCPE cluster orchestration files. Orchestration rules characterize the orchestration parameters and methods that a usable VCPE cluster must meet. These rules may include whether the resources of the VCPE devices within the cluster are sufficient, whether the tunnel configuration information is correct, whether the image file is running normally, and whether there are any IP address errors or conflicts inside or outside the cluster.

[0062] Therefore, before step 102, the method further includes: step 1021: performing rule verification on the vcpe cluster orchestration file.

[0063] In one embodiment of the present invention, rule verification is performed according to a preset rule base. The preset rule base stores multiple cluster configuration rules and corresponding handling strategies. The cluster configuration rules are used to verify whether the host configuration information is correct, whether the image file exists and is running normally, whether the cloud-based VCPE device resources are sufficient, whether the WAN and LAN IPs are correct and conflicting, whether they are identical VPCs, and whether the tunnel configuration information is correct. The handling strategies are used to modify the cluster configuration file when it does not meet the cluster configuration rules, and to remind the user, etc., to obtain a file that meets the rules and establish a usable cluster.

[0064] Step 1022: When the verification passes, configure the VCPE cluster and the connection between the CPE device and the VCPE cluster according to the VCPE cluster orchestration file.

[0065] In one embodiment of the present invention, when the verification passes, the VCPE cluster orchestration file is parsed to obtain the device configuration information of each optional VCPE device in the VCPE cluster, the device connection information within the cluster, and the connection information between the VCPE device and the CPE device outside the cluster.

[0066] Step 1021 is followed by:

[0067] Step 1023: When the verification fails, determine the handling strategy according to the preset rule base.

[0068] In one embodiment of the present invention, a handling strategy corresponding to the file content that failed the verification is found according to the rule base.

[0069] Step 1024: Update the VCPE cluster orchestration file according to the aforementioned handling strategy.

[0070] In one embodiment of the present invention, the VCPE cluster orchestration file can be automatically modified according to the handling strategy to obtain an updated file. Furthermore, prompts can be provided to the user according to the handling strategy, enabling the user to update the VCPE cluster orchestration file more quickly and accurately with the help of the handling strategy.

[0071] In one embodiment of the present invention, step 1022 further includes:

[0072] Step 221: Parse the VCPE cluster orchestration file to obtain the host information, external network information, and internal network information corresponding to each of the optional VCPE devices.

[0073] In one embodiment of the present invention, host information refers to the device identification information and resources corresponding to the VCPE device, and the network information within the cluster includes the network connection information between each optional VCPE device in a VCPE cluster corresponding to a virtual private cloud service, specifically the tunnel connection information. The network information within the cluster also includes the network connection information between each optional VCPE device in the CPE cluster and devices outside the cloud, specifically the connection between the VCPE device and the CPE device outside the cloud, thereby enabling users to access the virtual private cloud service through the CPE device.

[0074] The VCPE cluster orchestration file is parsed according to its format. Multiple preset fields are used to extract host information, external network information, and internal network information for each selectable VCPE device. The fields representing host information include: device identification information, resource configuration information, and image file information. Identification information includes device ID and device name; resource configuration information includes CPU and memory; and image file information includes the image required by the VCPE device within the virtual private cloud (VPN). One VPN corresponds to one VCPE cluster.

[0075] Fields representing network information within the cluster may include: cluster identification information, cluster description information, WAN and LAN network information corresponding to each VCPE device, domain information, subnet information, host information corresponding to both ends of the tunnel between the current VCPE device and any other VCPE device in the cluster, and the virtual private cloud information to which it belongs.

[0076] Fields representing network information outside the cluster may include: the public IP address used between the VCPE device and the CPE device, specifically, the public IP address may correspond to an Elastic IP address.

[0077] Step 222: Establish the optional VCPE devices and the first tunnels between each pair of the optional VCPE devices based on the network information within the cluster.

[0078] In one embodiment of the present invention, the first tunnel may be a VxLAN tunnel established on the WAN side of each VCPE. By establishing multiple optional VCPE devices within the VCPE cluster, and establishing VxLAN tunnels between each pair of VCPEs on the WAN side, a full mesh network is formed within the cluster. This enables the convenient forwarding of data processing requests to other available optional VCPE devices for processing through the fully interconnected network when a single optional VCPE device fails. This achieves rapid fault handling and ensures that users are unaware of the fault, thereby improving the user's virtual private cloud service experience.

[0079] Step 223: Establish a second tunnel between the CPE device and each of the VCPE devices based on the host information and the network information outside the cluster.

[0080] In one embodiment of the present invention, the second tunnel is established based on an Elastic Public IP address; the bandwidth is shared among the various second tunnels. By establishing the second tunnel using an Elastic Public IP address and distributing the traffic sent by the user through the CPE device among multiple second tunnels by sharing bandwidth, the user does not need to pay for multiple second tunnels simultaneously, but only needs to bear the cost of the shared bandwidth.

[0081] Furthermore, unlike existing SDWAN networks where the primary / backup mode cannot meet the need for flexible bandwidth updates when user bandwidth needs to be dynamically changed, and can only increase the bandwidth of the original devices, resulting in low efficiency and low availability, this embodiment of the invention achieves flexible bandwidth configuration by sharing bandwidth, thereby improving the availability of cloud services and the user experience.

[0082] Optionally, the CPE device can also be configured with a metric (hop count) value as needed, and send data processing requests to the VCPE device corresponding to the second tunnel with the fewest hops, thereby achieving load balancing of data processing outside the cloud by the VCPE devices in the cluster.

[0083] Step 20: When the target VCPE device is unavailable, determine an available VCPE device from among the multiple optional VCPE devices connected to the target VCPE device.

[0084] In one embodiment of the present invention, the available VCPE device can be any available VCPE device in the aforementioned fully connected network within the cluster.

[0085] Step 30: Forward the data processing request to the target virtual machine through the available VCPE device, and the target virtual machine is used to process the data processing request.

[0086] In one embodiment of the present invention, a first tunnel is used to quickly forward data processing requests in the event of a failure, thereby enabling a seamless response to cloud service requests and achieving high availability of the virtual private cloud service.

[0087] In one embodiment of the present invention, the SD-WAN network further includes a virtual routing device; each of the optional VCPE devices is connected to the virtual routing device; the virtual routing device is configured with routing information between each of the optional VCPE devices and multiple optional virtual machines; the target virtual machine is one of the optional virtual machines.

[0088] The virtual routing device can be a vRouter. The virtual routing device is connected between the LAN side of the vCPE cluster and the optional virtual machine. The data of the optional virtual machine can be set according to the size and needs of the cluster. The routing information configured in the virtual routing device is used to realize the data transmission between the optional vCPE device and the optional virtual machine.

[0089] In another embodiment of the present invention, the data processing procedure can also be referred to Figure 2 ,like Figure 2 As shown, firstly, the user writes a YAML file based on the number of VCPE clusters required, completing the hosts and tunnel sections. The hosts section includes basic cloud host information and network information required by each optional VCPE, while the tunnel section includes information on establishing tunnels between optional VCPE devices, such as the IDs of the two VCPEs at each end of the tunnel. The WAN subnet information is then found based on the IDs, and the tunnel is established via VxLAN.

[0090] Specifically, the VCPE cluster orchestration file can be as follows:

[0091] Metadata: # Arrange file names and other content

[0092] name:test #VCPE cluster name

[0093] description:#description

[0094] hosts:# Information about the VCPE cluster

[0095] host:# Basic information required to set up a single VCPE instance

[0096] id:host1 #vcpe ID

[0097] name: Virtual machine name # VCPE name

[0098] cpu: 5 #vcpe cpu

[0099] mem:20 #VCPE memory

[0100] wan:192.168.5.4 #WAN side network of VCPE

[0101] lan:192.168.22.2 #The LAN side network of VCPE

[0102] EIP:10.10.6.3 #Public IP address between CPE and VCPE

[0103] iamge:vcpe_host1 # The cloud image required to create a vcpe host

[0104] region:AZ1 # Create a VCPE domain

[0105] subnet:192.5.6.4 # Create subnet information for VCPE

[0106] vpc:t1 # Create VPC information for VCPE

[0107] host:

[0108] id:host2

[0109] name: Virtual machine name

[0110] CPU: 5

[0111] mem:20

[0112] wan:192.168.5.6

[0113] LAN: 192.168.22.6

[0114] EIP: 10.10.6.5

[0115] iamge:vcpe_host2

[0116] region:AZ1

[0117] subnet:192.5.6.5

[0118] vpc:t1

[0119] tunnels: #Information on tunnel establishment between all VCPEs

[0120] tunnel: #Information on establishing a tunnel between vcpes

[0121] src:host1 # Host information of the source VCPE

[0122] dst:host2 # Host information for the destination VCPE

[0123] tunnel:

[0124] src:host2

[0125] dst:host3

[0126] Optionally, a cluster orchestration template and / or cluster orchestration interface can be provided to prompt users to write VCPE cluster orchestration files, thereby improving the efficiency and accuracy of VCPE cluster creation.

[0127] After receiving the user's yml file, the orchestration module formats the user's orchestration file according to the file format specified by the cloud and the controller.

[0128] After receiving the contents of the compiled file, the verification module needs to query the rule base for the rules that need to be verified, and verify the file according to the rule content. If the verification fails, it searches the rule base for the action to solve the problem based on the failed content, and resolves the error in a closed loop. If it cannot be resolved automatically, it returns the reason for the failure.

[0129] The split file information is sent to the cloud engine, which then interacts with cloud services based on the file content.

[0130] Send file information to the controller engine, which is responsible for establishing tunnels, etc.

[0131] In yet another embodiment of the present invention, the VCPE cluster environment on which data processing is based, based on the network structure shown in the figure, can be referred to... Figure 3 .

[0132] like Figure 2 As shown, the CPE and VCPE used on the user side establish a tunnel through an elastic public IP address. Multiple tunnels need to distribute user traffic by sharing bandwidth. Users do not need to consume the cost of multiple tunnels at the same time, but only need to share the same bandwidth cost. At the same time, the CPE device needs to be configured with a metric value to ensure load balancing.

[0133] Multiple VCPE devices are set up in the cloud. VxLAN tunnels need to be established between each pair of VCPE devices on the WAN side to form a full mesh network. Routes to the cloud subnets are configured on the VCPE devices, and return routes to the VCPE devices are configured on the vRouter.

[0134] based on Figure 3 In the network environment shown, the data flow during normal client-side access to VM3 is as follows: Figure 4 As shown, the traffic path when receiving an access request is: cpe->vcpe1->vRouter->vm3, and the return path is vm3->vRouter->vcpe1->cpe.

[0135] Assumption Figure 4 If the tunnel between CPE and VCPE1 fails, access to the tunnel within the cloud will switch to a working link, such as... Figure 5 As shown, the traffic path when receiving access requests becomes: cpe->vcpe2->vcpe1->vRouter->vm3.

[0136] The return path becomes: vm3->vRouter->vcpe1->vcpe2->cpe.

[0137] The data processing method provided in this embodiment of the invention is based on an SD-WAN network. The SD-WAN network includes a VCPE cluster, which includes multiple optional VCPE devices. These optional VCPE devices are interconnected. This embodiment of the invention receives data processing requests sent by CPE devices through a target VCPE device, which is one of the optional VCPE devices. When the target VCPE device is unavailable, an available VCPE device is determined from the multiple optional VCPE devices connected to the target VCPE device. The data processing request is forwarded to a target virtual machine through the available VCPE device, and the target virtual machine processes the data processing request. This data processing method, by forwarding and processing data processing requests through a fully interconnected VCPE cluster within a Virtual Private Cloud service, can improve the availability of the SD-WAN network.

[0138] Figure 6 A schematic diagram of the structure of a data processing apparatus provided in an embodiment of the present invention is shown. Figure 6 As shown, the device 40 includes: a receiving module 401, a determining module 402, and a forwarding module 403.

[0139] The receiving module 401 is used to receive a data processing request sent by a CPE device through a target VCPE device; the target VCPE device is one of the optional VCPE devices.

[0140] The determination module 402 is used to determine an available VCPE device from a plurality of optional VCPE devices connected to the target VCPE device when the target VCPE device is unavailable.

[0141] The forwarding module 403 is used to forward the data processing request to the target virtual machine through the available VCPE device, and the target virtual machine is used to process the data processing request.

[0142] The operation process of the data processing device provided in this embodiment of the invention is largely the same as that of the aforementioned method embodiment, and will not be described again.

[0143] The data processing apparatus provided in this embodiment of the invention is based on an SD-WAN network. The SD-WAN network includes a VCPE cluster, which includes multiple optional VCPE devices. These optional VCPE devices are interconnected. This embodiment of the invention receives data processing requests sent by CPE devices through a target VCPE device, which is one of the optional VCPE devices. When the target VCPE device is unavailable, an available VCPE device is determined from the multiple optional VCPE devices connected to the target VCPE device. The data processing request is forwarded to a target virtual machine through the available VCPE device, and the target virtual machine processes the data processing request. The data processing apparatus provided in this embodiment of the invention forwards and processes data processing requests through a fully interconnected VCPE cluster within a Virtual Private Cloud service, thereby improving the availability of the SD-WAN network.

[0144] Figure 7 The diagram shows a structural schematic of a data processing device provided in an embodiment of the present invention. The specific embodiments of the present invention do not limit the specific implementation of the data processing device.

[0145] like Figure 7 As shown, the data processing device may include: a processor 402, a communications interface 404, a memory 506, and a communications bus 508.

[0146] The processor 502, communication interface 504, and memory 506 communicate with each other via communication bus 508. Communication interface 504 is used to communicate with other network elements, such as clients or other servers. The processor 502 executes program 510, specifically performing the relevant steps described above in the data processing method embodiment.

[0147] Specifically, program 510 may include program code, which includes computer-executable instructions.

[0148] Processor 502 may be a central processing unit (CPU), an application-specific integrated circuit (ASIC), or one or more integrated circuits configured to implement embodiments of the present invention. The data processing device includes one or more processors, which may be processors of the same type, such as one or more CPUs; or processors of different types, such as one or more CPUs and one or more ASICs.

[0149] Memory 506 is used to store program 510. Memory 506 may include high-speed RAM memory, and may also include non-volatile memory, such as at least one disk storage device.

[0150] Specifically, program 510 can be called by processor 502 to cause the data processing device to perform the following operations:

[0151] The target VCPE device receives a data processing request sent by the CPE device; the target VCPE device is one of the optional VCPE devices.

[0152] When the target VCPE device is unavailable, an available VCPE device is determined from a plurality of optional VCPE devices connected to the target VCPE device;

[0153] The data processing request is forwarded to the target virtual machine via the available VCPE device, and the target virtual machine is used to process the data processing request.

[0154] The operation process of the data processing device provided in this embodiment of the invention is largely the same as that of the aforementioned method embodiment, and will not be described again.

[0155] The data processing device provided in this embodiment of the invention is based on an SD-WAN network. The SD-WAN network includes a VCPE cluster, which includes multiple optional VCPE devices. These optional VCPE devices are interconnected. This embodiment of the invention receives data processing requests sent by CPE devices through a target VCPE device, which is one of the optional VCPE devices. When the target VCPE device is unavailable, an available VCPE device is determined from the multiple optional VCPE devices connected to the target VCPE device. The data processing request is forwarded to a target virtual machine through the available VCPE device, and the target virtual machine processes the data processing request. The data processing device provided in this embodiment of the invention forwards and processes data processing requests through a fully interconnected VCPE cluster within a Virtual Private Cloud service, thereby improving the availability of the SD-WAN network.

[0156] This invention provides a computer-readable storage medium storing at least one executable instruction that, when executed on a data processing device, causes the data processing device to perform the data processing method described in any of the above method embodiments.

[0157] Executable instructions can be used to cause the data processing device to perform the following operations:

[0158] The target VCPE device receives a data processing request sent by the CPE device; the target VCPE device is one of the optional VCPE devices.

[0159] When the target VCPE device is unavailable, an available VCPE device is determined from a plurality of optional VCPE devices connected to the target VCPE device;

[0160] The data processing request is forwarded to the target virtual machine via the available VCPE device, and the target virtual machine is used to process the data processing request.

[0161] The operation process of the executable instructions stored in the computer storage medium provided in this embodiment of the invention is largely the same as that in the aforementioned method embodiments, and will not be described again.

[0162] The executable instructions stored in the computer storage medium provided in this embodiment of the invention are based on an SD-WAN network; the SD-WAN network includes a VCPE cluster; the VCPE cluster includes multiple optional VCPE devices; the optional VCPE devices are interconnected; this embodiment of the invention receives data processing requests sent by CPE devices through a target VCPE device; the target VCPE device is one of the optional VCPE devices; when the target VCPE device is unavailable, an available VCPE device is determined from the multiple optional VCPE devices connected to the target VCPE device; the data processing request is forwarded to a target virtual machine through the available VCPE device, and the target virtual machine is used to process the data processing request. This embodiment of the invention improves the availability of the SD-WAN network by forwarding and processing data processing requests through a fully interconnected VCPE cluster within a Virtual Private Cloud service.

[0163] This invention provides a data processing apparatus for executing the above-described data processing method.

[0164] This invention provides a computer program that can be invoked by a processor to cause a data processing device to execute the data processing method described in any of the above method embodiments.

[0165] This invention provides a computer program product, which includes a computer program stored on a computer-readable storage medium. The computer program includes program instructions, which, when executed on a computer, cause the computer to perform the data processing method described in any of the above method embodiments.

[0166] The algorithms or displays provided herein are not inherently related to any particular computer, virtual system, or other device. Various general-purpose systems can also be used in conjunction with the teachings herein. The required structure for constructing such systems is apparent from the above description. Furthermore, the embodiments of the present invention are not directed to any particular programming language. It should be understood that the content of the invention described herein can be implemented using various programming languages, and the above description of specific languages ​​is for the purpose of disclosing the best mode of implementation of the invention.

[0167] Numerous specific details are set forth in the specification provided herein. However, it will be understood that embodiments of the invention may be practiced without these specific details. In some instances, well-known methods, structures, and techniques have not been shown in detail so as not to obscure the understanding of this specification.

[0168] Similarly, it should be understood that, in order to streamline the invention and aid in understanding one or more of the various aspects of the invention, features of the embodiments of the invention are sometimes grouped together in a single embodiment, figure, or description thereof in the above description of exemplary embodiments of the invention. However, this disclosure should not be construed as reflecting an intention that the claimed invention requires more features than are expressly recited in each claim.

[0169] Those skilled in the art will understand that modules in the device of the embodiments can be adaptively changed and placed in one or more devices different from that embodiment. Modules, units, or components in the embodiments can be combined into a single module, unit, or component, and can be divided into multiple sub-modules, sub-units, or sub-components. Except where at least some of such features and / or processes or units are mutually exclusive, any combination can be used to combine all features disclosed in this specification (including the accompanying claims, abstract, and drawings) and all processes or units of any method or device so disclosed. Unless expressly stated otherwise, each feature disclosed in this specification (including the accompanying claims, abstract, and drawings) may be replaced by an alternative feature that serves the same, equivalent, or similar purpose.

[0170] It should be noted that the above embodiments are illustrative of the invention and not restrictive, and that those skilled in the art can devise alternative embodiments without departing from the scope of the appended claims. In the claims, any reference signs placed between parentheses should not be construed as limiting the claims. The word "comprising" does not exclude the presence of elements or steps not listed in the claims. The word "a" or "an" preceding an element does not exclude the presence of a plurality of such elements. The invention can be implemented by means of hardware comprising several different elements and by means of a suitably programmed computer. In the unit claims enumerating several means, several of these means may be embodied by the same item of hardware. The use of the words first, second, and third, etc., does not indicate any order. These words can be interpreted as names. The steps in the above embodiments, unless otherwise specified, should not be construed as limiting the order of execution.

Claims

1. A data processing method, characterized in that, The method is based on an SD-WAN network; the SD-WAN network includes a VCPE cluster; the VCPE cluster includes multiple optional VCPE devices; The optional VCPE devices are interconnected in pairs via VxLAN tunnels established on their respective WAN sides, forming a fully interconnected network; the method includes: The target VCPE device receives a data processing request sent by the CPE device; the target VCPE device is one of the optional VCPE devices. When the target VCPE device is unavailable, an available VCPE device is determined from a plurality of optional VCPE devices connected to the target VCPE device; The data processing request is forwarded to the target virtual machine through the available VCPE device. The target virtual machine is used to process the data processing request. The traffic path when the data processing request is received is: CPE->VCPE2->VCPE1->VRouter->VM3, where VCPE1 is the target VCPE device, VCPE2 is an optional VCPE device, VM3 is the target virtual machine, and VRouter is a virtual router device.

2. The method according to claim 1, characterized in that, The SD-WAN network also includes a virtual routing device; each of the optional VCPE devices is connected to the virtual routing device; the virtual routing device is configured with routing information between each of the optional VCPE devices and multiple optional virtual machines; the target virtual machine is one of the optional virtual machines.

3. The method according to claim 1, characterized in that, Before receiving the data processing request sent by the CPE device through the target VCPE device in the VCPE cluster, the process includes: Retrieve the VCPE cluster orchestration file sent by the user; Configure the VCPE cluster and the connection between the CPE device and the VCPE cluster according to the VCPE cluster orchestration file.

4. The method according to claim 3, characterized in that, Before configuring the VCPE cluster and the connection between the CPE device and the VCPE cluster according to the VCPE cluster orchestration file, the following steps are included: Perform rule validation on the VCPE cluster orchestration file; When the verification passes, the VCPE cluster and the connection between the CPE device and the VCPE cluster are configured according to the VCPE cluster orchestration file.

5. The method according to claim 4, characterized in that, After performing rule validation on the VCPE cluster orchestration file, the method further includes: When the verification fails, the handling strategy is determined according to the preset rule base; The VCPE cluster orchestration file is updated according to the aforementioned handling strategy.

6. The method according to claim 3, characterized in that, The configuration of the VCPE cluster and the connection between the CPE device and the VCPE cluster according to the VCPE cluster orchestration file includes: The VCPE cluster orchestration file is parsed to obtain the host information, external network information, and internal network information corresponding to each of the optional VCPE devices. Based on the network information within the cluster, establish the optional VCPE devices and the first tunnels between each pair of the optional VCPE devices; A second tunnel is established between the CPE device and each of the VCPE devices based on the host information and the network information outside the cluster.

7. The method according to claim 6, characterized in that, The second tunnel is established based on an elastic public IP address; the bandwidth is shared among the various second tunnels.

8. A data processing apparatus, characterized in that, The device is based on an SD-WAN network; the SD-WAN network includes a VCPE cluster; the VCPE cluster includes multiple optional VCPE devices; The optional VCPE devices are interconnected in pairs via VxLAN tunnels established on their respective WAN sides, forming a fully interconnected network. The device includes: The receiving module is configured to receive a data processing request sent by a CPE device through a target VCPE device; the target VCPE device is one of the optional VCPE devices. The determination module is used to determine an available VCPE device from a plurality of optional VCPE devices connected to the target VCPE device when the target VCPE device is unavailable. The forwarding module is used to forward the data processing request to the target virtual machine through the available VCPE device. The target virtual machine is used to process the data processing request. The traffic path when the data processing request is received is: CPE->VCPE2->VCPE1->VRouter->VM3, where VCPE1 is the target VCPE device, VCPE2 is an optional VCPE device, VM3 is the target virtual machine, and VRouter is a virtual routing device.

9. A data processing device, characterized in that, include: The processor, memory, communication interface, and communication bus are provided, wherein the processor, memory, and communication interface communicate with each other via the communication bus. The memory is used to store at least one executable instruction that causes the processor to perform the operation of the data processing method as described in any one of claims 1-7.

10. A computer-readable storage medium, characterized in that, The storage medium stores at least one executable instruction, which, when executed on the data processing device, causes the data processing device to perform the operation of the data processing method as described in any one of claims 1-7.

Images