A cloud private line configuration apparatus and method, computer device and storage medium

By configuring a cloud private line configuration device on the cloud platform, multiple modules are used to achieve convenient and efficient configuration of cloud private line hardware network devices, solving the problem of cumbersome and inefficient traditional cloud private line configuration and improving the flexibility and scalability of network topology.

CN116781509BActive Publication Date: 2026-03-24JINAN INSPUR DATA TECH CO LTD
View PDF 2 Cites 0 Cited by

Patent Information

Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2023-07-24
Publication Date
2026-03-24

AI Technical Summary

Technical Problem

In traditional cloud private line solutions, users need to configure directly on the hardware network equipment, which is cumbersome and inefficient, becoming a burden for users.

Method used

By configuring a cloud private line configuration device on the cloud platform, and utilizing modules such as the private line switch management module, private line network module, virtual private cloud module, and private line gateway module, convenient and efficient configuration of cloud private line hardware network equipment can be achieved.

Benefits of technology

It avoids the cumbersome and inefficient problems of direct configuration on hardware network devices, realizes simple and efficient configuration of cloud private lines, and improves the flexibility and scalability of network topology.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN116781509B_ABST
    Figure CN116781509B_ABST
Patent Text Reader

Abstract

The application relates to the technical field of cloud private line and discloses a cloud private line configuration device and method, computer equipment and a storage medium. The device comprises a private line switch management module, which is used for dividing a first virtual local area network on a private line switch and is also used for configuring a static route of a virtual private cloud for the private line switch; a private line network module, which is used for creating a second virtual local area network on an edge switch, the network segment of the second virtual local area network being the same as that of the first virtual local area network; a virtual private cloud module, which is used for creating a virtual private cloud and a virtual router on a leaf switch to connect a spine switch and the virtual private cloud; and a private line gateway module, which is used for creating a virtual router on the edge switch to connect the spine switch and the private line switch. Compared with directly configuring the cloud private line on a hardware network device, the cloud private line is more convenient and efficient to configure through a cloud platform.
Need to check novelty before this filing date? Find Prior Art

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of cloud private line, and particularly relates to a cloud private line configuration device and method, computer equipment and a storage medium. BACKGROUND

[0002] In recent years, with the continuous development of cloud computing technology, more and more enterprises migrate their businesses to the cloud. Through cloud computing, enterprises can not only more efficiently utilize cloud resources, but also reduce the management and maintenance costs of enterprises. At the same time, enterprises face various problems such as large data security risk and slow data transmission speed in cloud computing business. In order to solve these problems, cloud private line technology emerges as the times require.

[0003] Cloud private line is a cloud computing network solution based on physical private line connection. Cloud private line provides stronger security and higher stability, and thus provides higher bandwidth performance and lower network delay. However, in the traditional cloud private line solution, users usually need to directly configure the cloud private line on the hardware network device, which is tedious and inefficient, and is a great burden for users. SUMMARY

[0004] Therefore, the present application provides a cloud private line configuration device and method, computer equipment and a storage medium to solve the problem of tedious and inefficient operation when users configure the cloud private line on the hardware network device.

[0005] In a first aspect, the present application provides a cloud private line configuration device, comprising the following modules:

[0006] The private line switch management module is configured to divide a first virtual local area network on the private line switch and set a network segment of the first virtual local area network according to virtual local area network configuration information; and the private line switch management module is further configured to configure a static route for the private line switch according to static route addition information, and the static route points to a virtual private cloud;

[0007] The private line network module is configured to create a second virtual local area network on the edge switch according to private line network creation information, and the network segment of the second virtual local area network is the same as that of the first virtual local area network;

[0008] The virtual private cloud module is configured to create a virtual private cloud of a virtual local area network type and create a first virtual router on the leaf switch according to virtual private cloud creation information, and the first virtual router is configured to establish communication between the spine switch and the virtual private cloud;

[0009] The private line gateway module is configured to create a second virtual router on the edge switch, and the second virtual router is configured to establish communication between the spine switch and the private line switch.

[0010] This device configures the hardware network equipment of the cloud private line on the cloud platform, avoiding the cumbersome and inefficient operation of configuring the cloud private line directly on the hardware network equipment, thus achieving a simpler and more efficient configuration of the hardware network equipment of the cloud private line.

[0011] In one optional implementation, the following modules are also included:

[0012] The associated subnet module is used to create associated subnets based on associated subnet creation information. Associated subnets are used to associate virtual private clouds to be connected with external subnets.

[0013] The subnet association module provides the necessary subnet creation information for establishing a subnet. Based on this information, virtual private clouds (VPNs) and external subnets can be associated relatively easily and efficiently.

[0014] In one optional implementation, the associated subnet module of this device is used to obtain associated subnet creation information, which includes subnets of the virtual private cloud and network segments of external networks.

[0015] The subnet association module provides the necessary subnet creation information, including the subnet of the Virtual Private Cloud (VPN) and the network segment of the external network. Based on this information, the VPN and external subnets can be associated relatively easily and efficiently.

[0016] In one optional implementation, the leased line switch management module of this device is used to obtain virtual local area network (VLAN) configuration information, which includes the name of the first VLAN, the identifier of the leased line switch, and the network segment of the first VLAN. The leased line switch management module of this device is also used to obtain static route addition information, which includes the static route name, the identifier of the leased line switch, the target network segment, and the next-hop information.

[0017] The leased line switch management module can obtain the VLAN configuration information required for configuring a VLAN. This information includes the name of the first VLAN, the identifier of the leased line switch, and the network segment of the first VLAN. Based on this VLAN configuration information, the first VLAN on the leased line switch can be divided, and network segments can be set for it.

[0018] The leased line switch management module can also obtain the static route addition information required for adding static routes. This information includes the static route name, the leased line switch identifier, the target network segment, and the next-hop information. Based on this static route addition information, a second virtual LAN on the edge switch can be created relatively easily and efficiently, where the network segment of the second virtual LAN is the same as that of the first virtual LAN.

[0019] In one optional implementation, the leased network module of this device is used to obtain leased network creation information, which includes the name of the leased network, the network type of the leased network, the identifier of the edge switch, and the network segment of the leased network.

[0020] The leased network module provides the necessary information for creating a leased network, including its name, network type, edge switch identifier, and network segment. Based on this information, a virtual private cloud (VPN) of the virtual local area network (VLAN) type and a first virtual router on the leaf switch can be created relatively easily and efficiently. This first virtual router then establishes communication between the spine switch and the VPN.

[0021] In one optional implementation, the virtual private cloud module of this device is used to obtain virtual private cloud creation information, which includes the name of the virtual private cloud subnet, the network type of the virtual private cloud subnet, and the network segment of the virtual private cloud subnet.

[0022] The Virtual Private Cloud (VPC) module provides the necessary information for creating a VPC, including the VPC subnet name, network type, and subnet segment. Based on this information, the VPC and the first virtual router on the leaf switch can be created relatively easily and efficiently. This first virtual router then establishes communication between the spine switch and the VPC.

[0023] In one optional implementation, the leased line gateway module of this device is used to obtain cloud leased line creation information and create a second virtual router on the edge switch based on the cloud leased line creation information. The cloud leased line creation information includes the name of the cloud leased line, the name of the virtual data center, the name of the virtual private cloud, the name of the leased line network, the name of the leased line gateway, and the name of the external network.

[0024] The leased line gateway module can obtain the cloud leased line creation information required to create a cloud leased line and a second virtual router on the edge switch. This information includes: the name of the cloud leased line, the name of the virtual data center, the name of the virtual private cloud, the name of the leased line network, the name of the leased line gateway, and the name of the external network. Based on this information, a second virtual router on the edge switch can be created relatively easily and efficiently. Through this second virtual router, communication between the spine switch and the leased line switch can be established.

[0025] Secondly, this invention provides a cloud private line configuration method, comprising the following steps:

[0026] Based on the virtual LAN configuration information, divide the first virtual LAN on the leased line switch and set the network segment of the first virtual LAN;

[0027] Based on the leased network creation information, create a second virtual LAN on the edge switch. The network segment of the second virtual LAN is the same as that of the first virtual LAN.

[0028] Based on the virtual private cloud creation information, a virtual private cloud of type virtual local area network is created and a first virtual router on the leaf switch is created. The first virtual router is used to establish communication between the spine switch and the virtual private cloud.

[0029] Based on the cloud leased line creation information, create a second virtual router on the edge switch. The second virtual router is used to establish communication between the spine switch and the leased line switch.

[0030] Add information based on static routes to configure static routes for the leased line switch, with the static routes pointing to the virtual private cloud.

[0031] Thirdly, the present invention provides a computer device, including: a memory and a processor, the memory and the processor being communicatively connected to each other, the memory storing computer instructions, and the processor executing the computer instructions to perform the cloud private line configuration method of the second aspect above or any corresponding embodiment thereof.

[0032] Fourthly, the present invention provides a computer-readable storage medium storing computer instructions for causing a computer to execute the cloud private line configuration method of the second aspect or any corresponding embodiment described above. Attached Figure Description

[0033] To more clearly illustrate the specific embodiments of the present invention or the technical solutions in the prior art, the drawings used in the description of the specific embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of the present invention. For those skilled in the art, other drawings can be obtained from these drawings without creative effort.

[0034] Figure 1 This is a structural block diagram of a cloud private line configuration device according to an embodiment of the present invention;

[0035] Figure 2 This is a structural block diagram of another cloud private line configuration device according to an embodiment of the present invention;

[0036] Figure 3 This is a network topology diagram of a cloud private line configuration device according to an embodiment of the present invention;

[0037] Figure 4 This is a network topology diagram of the leased line switch management module of the cloud leased line configuration device according to an embodiment of the present invention;

[0038] Figure 5 This is a network topology diagram of the leased line network module of the cloud leased line configuration device according to an embodiment of the present invention;

[0039] Figure 6 This is a network topology diagram of the virtual private cloud module of the cloud dedicated line configuration device according to an embodiment of the present invention;

[0040] Figure 7 This is a network topology diagram of the dedicated line gateway module of the cloud dedicated line configuration device according to an embodiment of the present invention;

[0041] Figure 8 This is a network topology diagram of the associated subnet module of the cloud private line configuration device according to an embodiment of the present invention;

[0042] Figure 9 This is a network topology diagram of the dedicated line switch management module of another cloud dedicated line configuration device according to an embodiment of the present invention;

[0043] Figure 10 This is a flowchart illustrating a cloud private line configuration method according to an embodiment of the present invention;

[0044] Figure 11 This is a schematic diagram of the hardware structure of a computer device according to an embodiment of the present invention. Detailed Implementation

[0045] To make the objectives, technical solutions, and advantages of the embodiments of the present invention clearer, the technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0046] In recent years, with the continuous development of cloud computing technology, more and more enterprises are migrating their businesses to the cloud. Through cloud computing, enterprises can not only utilize cloud resources more efficiently, but also reduce their management and maintenance costs. At the same time, enterprises face various problems in cloud computing operations, such as high data security risks and slow data transmission speeds. To solve these problems, cloud private line technology has emerged.

[0047] Cloud private lines are a cloud computing network solution based on physical leased line connections. They offer enhanced security and stability, resulting in higher bandwidth performance and lower network latency. However, in traditional cloud private line solutions, users typically need to configure the cloud private line directly on the hardware network device, a cumbersome and inefficient process that represents a significant burden for users.

[0048] This invention provides a cloud private line configuration device, which configures the hardware network devices of the cloud private line on the cloud platform, avoiding the cumbersome and inefficient operation of directly configuring the cloud private line on the hardware network devices, and achieving a simpler and more efficient effect in configuring the hardware network devices of the cloud private line.

[0049] According to an embodiment of the present invention, a cloud private line configuration device embodiment is provided. As used below, the term "module" can be a combination of software and / or hardware that implements a predetermined function. Although the device described in the following embodiments is preferably implemented in software, hardware implementation, or a combination of software and hardware, is also possible and contemplated.

[0050] This embodiment provides a cloud private line configuration device, which can be used in the aforementioned cloud platform. Figure 1 This is a structural block diagram of a cloud private line configuration device according to an embodiment of the present invention, such as... Figure 1 As shown, the device includes the following modules:

[0051] The leased line switch management module 101 is used to divide the first virtual local area network on the leased line switch and set the network segment of the first virtual local area network according to the virtual local area network configuration information; the leased line switch management module 101 is also used to configure static routes for the leased line switch according to static route addition information, and the static routes point to the virtual private cloud.

[0052] The leased line switch management module 101 can obtain the virtual LAN configuration information required for configuring a virtual LAN. Based on the virtual LAN configuration information, the first virtual LAN on the leased line switch can be divided relatively easily and efficiently, and network segments can be set for the first virtual LAN.

[0053] The leased line switch management module 101 can also obtain the static route addition information required for adding static routes. Based on the static route addition information, static routes can be configured for the leased line switch relatively conveniently and efficiently, with the static routes pointing to the virtual private cloud.

[0054] The leased network module 102 is used to create a second virtual local area network on the edge switch based on the leased network creation information. The network segment of the second virtual local area network is the same as that of the first virtual local area network.

[0055] The leased network module 102 can obtain the leased network creation information required to create a leased network. Based on the leased network creation information, a second virtual LAN on the edge switch can be created relatively easily and efficiently, wherein the network segment of the second virtual LAN is the same as that of the first virtual LAN.

[0056] The Virtual Private Cloud module 103 is used to create a virtual private cloud of type virtual local area network and a first virtual router on the leaf switch based on the virtual private cloud creation information. The first virtual router is used to establish communication between the spine switch and the virtual private cloud.

[0057] The Virtual Private Cloud module 103 can obtain the virtual private cloud creation information required to create a virtual private cloud. Based on the virtual private cloud creation information, a virtual LAN-type virtual private cloud and a first virtual router on the leaf switch can be created relatively easily and efficiently. Through the first virtual router, communication between the spine switch and the virtual private cloud can be established.

[0058] The leased line gateway module 104 is used to create a second virtual router on the edge switch based on the cloud leased line creation information. The second virtual router is used to establish communication between the spine switch and the leased line switch.

[0059] The leased line gateway module 104 can obtain the cloud leased line creation information required to create a second virtual router on the edge switch. Based on the cloud leased line creation information, the second virtual router on the edge switch can be created relatively easily and efficiently. Through the second virtual router, communication between the spine switch and the leased line switch can be established.

[0060] This embodiment provides a cloud private line configuration device, which can be used in the aforementioned cloud platform. Figure 2This is a structural block diagram of a cloud private line configuration device according to an embodiment of the present invention, such as... Figure 2 As shown, the device includes the following modules:

[0061] The leased line switch management module 201 is used to divide the first virtual local area network (VLAN) on the leased line switch and set the network segment of the first VLAN based on the VLAN configuration information. The leased line switch management module is also used to add information based on static routes and configure static routes for the leased line switch, with the static routes pointing to the virtual private cloud. For details, please refer to [link to details]. Figure 1 The module 101 of the illustrated embodiment will not be described in detail here.

[0062] The leased network module 202 is used to create a second virtual LAN on the edge switch based on the leased network creation information. The network segment of the second virtual LAN is the same as that of the first virtual LAN. For details, please refer to [link to documentation]. Figure 1 The module 102 of the illustrated embodiment will not be described in detail here.

[0063] Virtual Private Cloud module 203 is used to create a virtual private cloud of type Virtual Local Area Network (VLAN) and a first virtual router on the leaf switch based on the virtual private cloud creation information. The first virtual router is used to establish communication between the spine switch and the virtual private cloud. For details, please refer to [link to details]. Figure 1 The module 103 of the illustrated embodiment will not be described in detail here.

[0064] The leased line gateway module 204 is used to create a second virtual router on the edge switch. This second virtual router is used to establish communication between the spine switch and the leased line switch. For details, please refer to [link to details]. Figure 1 The dedicated line gateway module 104 shown in the embodiment will not be described in detail here.

[0065] The associated subnet module 205 is used to create associated subnets based on associated subnet creation information. The associated subnet is used to associate the virtual private cloud subnet to be connected with the external cloud subnet.

[0066] The subnetting module 205 provides the necessary subnetting creation information. Based on this information, the virtual private cloud and external subnets can be linked relatively easily and efficiently.

[0067] In some optional implementations, the associated subnet module 205 in the above-described device is also used to obtain associated subnet creation information, which includes network segments of the virtual private cloud and external networks.

[0068] The subnetting module 205 obtains the necessary subnetting creation information, including the subnet of the virtual private cloud and the network segment of the external network. Based on this subnetting creation information, the virtual private cloud and the external subnet to be connected can be linked relatively conveniently and efficiently.

[0069] In some optional implementations, the leased line switch management module 201 in the above-mentioned device is used to obtain virtual local area network (VLAN) configuration information, which includes the name of the first VLAN, the identifier of the leased line switch, and the network segment of the first VLAN.

[0070] The leased line switch management module 201 in the above device is also used to obtain static route addition information, which includes the static route name, the identifier of the leased line switch, the target network segment, and the next hop information.

[0071] The leased line switch management module 201 can obtain the virtual LAN configuration information required for configuring a virtual LAN. This information includes the name of the first virtual LAN, the identifier of the leased line switch, and the network segment of the first virtual LAN. Based on this configuration information, the first virtual LAN on the leased line switch can be divided, and network segments can be set for it.

[0072] The leased line switch management module 201 can also obtain the static route addition information required for adding static routes. This information includes the static route name, the leased line switch identifier, the target network segment, and the next-hop information. Based on this static route addition information, a second virtual LAN on the edge switch can be created relatively easily and efficiently, where the network segment of the second virtual LAN is the same as that of the first virtual LAN.

[0073] In some optional embodiments, the leased network module 202 in the above-mentioned device is used to obtain leased network creation information, which includes the name of the leased network, the network type of the leased network, the identifier of the edge switch, and the network segment of the leased network.

[0074] The leased network module 202 obtains the necessary leased network creation information, including the network name, network type, edge switch identifier, and network segment. Based on this information, a virtual private cloud (VPN) of the virtual local area network (VLAN) type and a first virtual router on the leaf switch can be created relatively easily and efficiently. Through this first virtual router, communication between the spine switch and the VPN can be established.

[0075] In some optional embodiments, the virtual private cloud module 203 in the above-described device is used to obtain virtual private cloud creation information, which includes the name of the virtual private cloud subnet, the network type of the virtual private cloud subnet, and the network segment of the virtual private cloud subnet.

[0076] The Virtual Private Cloud (VPN) module 203 obtains the necessary VPN creation information, including the VPN subnet name, network type, and network segment. Based on this information, the VPN and the first virtual router on the leaf switch can be created relatively easily and efficiently. Through this first virtual router, communication between the spine switch and the VPN can be established.

[0077] In some optional implementations, the leased line gateway module 204 in the above-mentioned device is used to obtain cloud leased line creation information and create a second virtual router on the edge switch according to the cloud leased line creation information. The cloud leased line creation information includes the name of the cloud leased line, the name of the virtual data center, the name of the virtual private cloud, the name of the leased line network, the name of the leased line gateway, and the name of the external network.

[0078] The leased line gateway module 204 obtains the cloud leased line creation information required for creating a cloud leased line and a second virtual router on the edge switch. This information includes: the name of the cloud leased line, the name of the virtual data center, the name of the virtual private cloud, the name of the leased line network, the name of the leased line gateway, and the name of the external network. Based on this information, a second virtual router on the edge switch can be created relatively easily and efficiently. Through this second virtual router, communication between the spine switch and the leased line switch can be established.

[0079] The present invention can be applied in the following scenarios based on the various embodiments provided:

[0080] In recent years, with the continuous development of cloud computing technology, more and more enterprises are migrating their businesses to the cloud. Through cloud computing, enterprises can not only utilize cloud resources more efficiently, but also reduce their management and maintenance costs. At the same time, enterprises face various problems in cloud computing operations, such as high data security risks and slow data transmission speeds. To solve these problems, cloud private line technology has emerged.

[0081] Cloud private lines are a cloud computing network solution based on physical leased line connections. They offer enhanced security and stability, resulting in higher bandwidth performance and lower network latency. However, in traditional cloud private line solutions, users typically need to configure the cloud private line directly on the hardware network device, a cumbersome and inefficient process that represents a significant burden for users.

[0082] To address the issues arising in the aforementioned scenarios, a cloud-based dedicated line configuration device is provided. This device allows users to configure the hardware network equipment of the cloud dedicated line on the cloud platform, avoiding the cumbersome and inefficient process of directly configuring the cloud dedicated line on the hardware network equipment.

[0083] This device is based on a cloud platform, and its network architecture topology adopts the classic leaf-spine architecture, which improves the flexibility and scalability of the network topology. See details... Figure 3 The cloud platform backend is written in Java and utilizes the NETCONF (Network Configuration) protocol to reduce the cloud platform's reliance on third-party SDN (Software Defined Networking). When a user configures the hardware network devices of the cloud leased line on the cloud platform, commands are sent to the specified hardware network devices, and the hardware network devices receiving the commands are configured accordingly. This device includes six functional modules: leased line switch management module, leased line network module, virtual private cloud module, leased line gateway module, associated subnet module, and physical leased line module.

[0084] On the VLAN creation page of the cloud platform, users select a leased switch, fill in the VLAN name and VLAN network segment, for example, VLAN name as 1000 and VLAN network segment as 100.2.124.1 / 24. After obtaining this VLAN creation information, the leased switch management module will allocate a VLAN on the leased switch based on this information and configure the VLAN network segment, such as... Figure 4 The virtual LAN shown is 1000, and the network segment is 100.2.124.1 / 24. The leased line switch management module will by default assign the physical port used by the cloud leased line to the aforementioned virtual LAN and configure the IP address (Internet Protocol) for the physical port. This completes the process. Figure 4 The network topology configuration shown.

[0085] On the dedicated network creation page of the cloud platform, users select the network type and edge switch for the dedicated network, and fill in the name and network segment of the dedicated network. For example, if the network type is selected as a Virtual LAN, the network name is entered as 1000, and the network segment is entered as 100.2.124.2 / 24. After obtaining this dedicated network creation information, the dedicated network module will create a Virtual LAN of type dedicated network on the edge switch based on this information and configure the network segment of the Virtual LAN, such as... Figure 5 The virtual LAN shown is 1000, and the network segment is 100.2.124.2 / 24. The leased line network module will create a switch virtual interface (SVI) on the leased line switch, associate it with the aforementioned virtual LAN, and specify the physical exit point of the cloud leased line on the edge switch. This completes the process. Figure 5 The network topology configuration shown.

[0086] On the Virtual Private Cloud (VPC) creation page of the cloud platform, users select the network type for the VPC subnet, enter the name of the VPC subnet, and the network segment of the VPC subnet. For example, if the network type for the leased network is Virtual LAN, the network segment of the VPC subnet is entered as 192.168.1.0 / 24. After obtaining this VPC creation information, the VPC module will create the VPC and its subnet based on this information, such as... Figure 6 The virtual private cloud (VPN) subnet shown is 192.168.1.0 / 24, where the VPN's default router connects to this subnet. The VPN module creates a Virtual Router (VRF) on the leaf switch and binds it to the leaf switch's default physical port. Through this virtual router, communication between the spine switch and the VPN is established. This completes the process. Figure 6 The network topology configuration shown.

[0087] On the cloud platform's dedicated cloud line creation page, users select Virtual Private Cloud, dedicated network, and external network, and enter the name of the dedicated cloud line and the name of the dedicated network gateway. After obtaining this dedicated cloud line creation information, the dedicated network gateway module creates the dedicated cloud line and its internal dedicated network gateway. The dedicated cloud line connects the Virtual Private Cloud and the external subnet. The dedicated network gateway module creates a virtual router on the edge switch and binds it to the edge switch's default physical port, as well as to the dedicated cloud line's physical exit point on the edge switch. Through this virtual router, communication is established between the spine switch and the Virtual Private Cloud. This completes the process. Figure 7 The network topology configuration shown.

[0088] Through the leased line gateway module, based on the ECMP (Equal Cost Multipath) mechanism, within a cloud leased line, the same or different leased line networks can be selected for the same virtual private cloud, thereby creating multiple leased line gateways and improving leased line bandwidth and reliability.

[0089] On the subnet creation page of the cloud platform, the user selects the subnet of the Virtual Private Cloud (VPN) and enters the network segment of the external network, for example, 10.10.10.0 / 24. After obtaining this subnet information, the subnet association module will associate the VPN subnet to be connected with the external subnet based on this information. The subnet association module will add static routes to the virtual routers created on the leaf switch and the edge switch. This completes the process. Figure 8 The network topology configuration shown.

[0090] On the cloud platform's static route addition page, users select a leased switch and enter the static route name, target network segment, and next hop. For example, the target network segment is 192.168.1.0 / 24, and the next hop is 100.2.124.2. After the leased switch management module receives this static route addition information, it adds a static route to the virtual router on the leased switch based on this information. This static route points to the virtual private cloud subnet. This completes the process. Figure 9 The network topology configuration shown.

[0091] The cloud leased line in the physical leased line module is a physical leased line laid by the operator. The cloud leased line can connect the virtual private cloud and the external subnet, ensuring stable, secure and high-speed network communication between the virtual private cloud and the external subnet at both ends of the cloud leased line.

[0092] Compared to configuring cloud private lines directly on hardware network devices, users can conveniently and efficiently configure cloud private line hardware network devices by completing the above steps on the cloud platform.

[0093] According to an embodiment of the present invention, a cloud private line configuration method embodiment is provided. It should be noted that the steps shown in the flowchart in the accompanying drawings can be executed in a computer system such as a set of computer-executable instructions. Furthermore, although a logical order is shown in the flowchart, in some cases, the steps shown or described may be executed in a different order than that shown here.

[0094] This embodiment provides a cloud private line configuration method, which can be used on the aforementioned cloud platform. Figure 10 This is a flowchart of a cloud private line configuration method according to an embodiment of the present invention, such as... Figure 10 As shown, the process includes the following steps:

[0095] Step S1001: Based on the virtual LAN configuration information, divide the first virtual LAN on the leased line switch and set the network segment of the first virtual LAN.

[0096] Step S1002: Based on the leased network creation information, create a second virtual local area network on the edge switch, wherein the network segment of the second virtual local area network is the same as that of the first virtual local area network.

[0097] Step S1003: Based on the virtual private cloud creation information, create a virtual private cloud of type virtual local area network and create a first virtual router on the leaf switch, wherein the first virtual router is used to establish communication between the spine switch and the virtual private cloud.

[0098] Step S1004: Based on the cloud leased line creation information, create a second virtual router on the edge switch, wherein the second virtual router is used to establish communication between the spine switch and the leased line switch.

[0099] Step S1005: Add information based on static routes to configure static routes for the leased line switch, where the static routes point to the virtual private cloud.

[0100] Further functional descriptions of the above steps are the same as those in the corresponding embodiments described above, and will not be repeated here.

[0101] In this embodiment, the cloud private line configuration device is presented in the form of a functional unit. Here, a unit refers to an ASIC (Application Specific Integrated Circuit) circuit, a processor and memory that execute one or more software or fixed programs, and / or other devices that can provide the above functions.

[0102] This invention also provides a computer device having the above-described features. Figure 1 The cloud private line configuration device shown.

[0103] Please see Figure 11 , Figure 11 This is a schematic diagram of the structure of a computer device provided in an optional embodiment of the present invention, such as... Figure 11As shown, the computer device includes one or more processors 1101, memory 1102, and interfaces for connecting the components, including high-speed interfaces and low-speed interfaces. The components communicate with each other via different buses and can be mounted on a common motherboard or otherwise installed as needed. The processors can process instructions executed within the computer device, including instructions stored in or on memory to display graphical information of a GUI on external input / output devices (such as display devices coupled to the interfaces). In some alternative implementations, multiple processors and / or multiple buses can be used with multiple memories and multiple memory modules, if desired. Similarly, multiple computer devices can be connected, each providing some of the necessary operations (e.g., as a server array, a group of blade servers, or a multiprocessor system). Figure 11 Take a processor 1101 as an example.

[0104] Processor 1101 may be a central processing unit, a network processor, or a combination thereof. Processor 1101 may further include a hardware chip. The hardware chip may be an application-specific integrated circuit (ASIC), a programmable logic device (PLD), or a combination thereof. The programmable logic device may be a complex programmable logic device (CAMP), a field-programmable gate array (FPGA), a general-purpose array logic (GDA), or any combination thereof.

[0105] The memory 1102 stores instructions executable by at least one processor 1101 to cause at least one processor 1101 to perform the method shown in the above embodiments.

[0106] The memory 1102 may include a program storage area and a data storage area. The program storage area may store the operating system and applications required for at least one function; the data storage area may store data created based on the use of the computer device. Furthermore, the memory 1102 may include high-speed random access memory and may also include non-transitory memory, such as at least one disk storage device, flash memory device, or other non-transitory solid-state storage device. In some alternative embodiments, the memory 1102 may optionally include memory remotely located relative to the processor 1101, and these remote memories can be connected to the computer device via a network. Examples of such networks include, but are not limited to, the Internet, intranets, local area networks, mobile communication networks, and combinations thereof.

[0107] The memory 1102 may include volatile memory, such as random access memory; the memory may also include non-volatile memory, such as flash memory, hard disk or solid-state drive; the memory 1102 may also include a combination of the above types of memory.

[0108] The computer device also includes a communication interface 1103 for communicating with other devices or communication networks.

[0109] This invention also provides a computer-readable storage medium. The methods described above according to embodiments of the invention can be implemented in hardware or firmware, or implemented as computer code that can be recorded on a storage medium, or implemented as computer code downloaded via a network and originally stored on a remote storage medium or a non-transitory machine-readable storage medium and then stored on a local storage medium. Thus, the methods described herein can be processed by software stored on a storage medium using a general-purpose computer, a dedicated processor, or programmable or dedicated hardware. The storage medium can be a magnetic disk, optical disk, read-only memory, random access memory, flash memory, hard disk, or solid-state drive, etc.; further, the storage medium can also include combinations of the above types of memory. It is understood that computers, processors, microprocessor controllers, or programmable hardware include storage components capable of storing or receiving software or computer code, which, when accessed and executed by the computer, processor, or hardware, implements the methods shown in the above embodiments.

[0110] Although embodiments of the invention have been described in conjunction with the accompanying drawings, those skilled in the art can make various modifications and variations without departing from the spirit and scope of the invention, and such modifications and variations all fall within the scope defined by the appended claims.

Claims

1. A cloud private line configuration device, characterized in that, The device includes: The leased line switch management module is used to divide the first virtual local area network on the leased line switch and set the network segment of the first virtual local area network according to the virtual local area network configuration information; the leased line switch management module is also used to configure static routes for the leased line switch according to static route addition information, and the static routes point to the virtual private cloud; The leased network module is used to create a second virtual local area network (VLAN) on the edge switch based on the leased network creation information. The network segment of the second VLAN is the same as that of the first VLAN. The virtual private cloud module is used to create a virtual local area network type virtual private cloud and a first virtual router on the leaf switch according to the virtual private cloud creation information. The first virtual router is used to establish communication between the spine switch and the virtual private cloud. The leased line gateway module is used to create a second virtual router on the edge switch based on the cloud leased line creation information. The second virtual router is used to establish communication between the spine switch and the leased line switch.

2. The cloud private line configuration device according to claim 1, characterized in that, The device further includes: The associated subnet module is used to create associated subnets based on associated subnet creation information. The associated subnets are used to associate the virtual private cloud to be connected with an external subnet.

3. The cloud private line configuration device according to claim 2, characterized in that, The associated subnet module is used to obtain associated subnet creation information, which includes subnets of the virtual private cloud and network segments of external networks.

4. The cloud private line configuration device according to any one of claims 1 to 3, characterized in that, The leased line switch management module is used to obtain the virtual local area network (VLAN) configuration information, which includes the name of the first VLAN, the identifier of the leased line switch, and the network segment of the first VLAN. The leased line switch management module is also used to obtain the static route addition information, which includes the static route name, the identifier of the leased line switch, the target network segment, and the next hop information.

5. The cloud private line configuration device according to any one of claims 1 to 3, characterized in that, The leased network module is used to obtain the leased network creation information, which includes the name of the leased network, the network type of the leased network, the identifier of the edge switch, and the network segment of the leased network.

6. The cloud private line configuration device according to any one of claims 1 to 3, characterized in that, The virtual private cloud module is used to obtain virtual private cloud creation information, which includes the name of the virtual private cloud subnet, the network type of the virtual private cloud subnet, and the network segment of the virtual private cloud subnet.

7. The cloud private line configuration device according to any one of claims 1 to 3, characterized in that, The dedicated line gateway module is used to obtain cloud dedicated line creation information and create a second virtual router on the edge switch according to the cloud dedicated line creation information. The cloud dedicated line creation information includes the name of the cloud dedicated line, the name of the virtual data center, the name of the virtual private cloud, the name of the dedicated line network, the name of the dedicated line gateway, and the name of the external network.

8. A method for configuring a cloud private line, characterized in that, The method includes: Based on the virtual LAN configuration information, divide the first virtual LAN on the leased line switch and set the network segment of the first virtual LAN; Based on the leased network creation information, create a second virtual LAN on the edge switch. The network segment of the second virtual LAN is the same as that of the first virtual LAN. Based on the virtual private cloud creation information, a virtual private cloud of type virtual local area network is created and a first virtual router on the leaf switch is created. The first virtual router is used to establish communication between the spine switch and the virtual private cloud. Based on the cloud leased line creation information, a second virtual router is created on the edge switch. The second virtual router is used to establish communication between the spine switch and the leased line switch. Add information based on static routes to configure static routes for the leased line switch, and the static routes point to the virtual private cloud.

9. A computer device, characterized in that, include: The system includes a memory and a processor, which are interconnected. The memory stores computer instructions, and the processor executes the computer instructions to perform the cloud private line configuration method of claim 8.

10. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores computer instructions for causing the computer to execute the cloud private line configuration method of claim 8.

Citation Information

Patent Citations

  • Virtual network routing

    CN105612722A

  • Network System and Method for Connecting a Private Network with a Virtual Private Network

    CN106998284A