A method and device for constructing a traditional bare machine access storage express channel

Abstract

The application provides a construction method and device for traditional bare machine to access a storage high-speed channel, and the method comprises the following steps: a bare machine second network card is connected to a file gateway or an iSCSI gateway through underlay network three-layer intercommunication to access HPFS; a bare machine upper connection Leaf is designed to distribute an address segment to the Leaf; a VLAN, a VLAN IP and a VRRP IP are configured through a netconf interface; the address segment is distributed through BGP; an IP of a bond port is configured, and a route of a storage gateway is pointed; a VLAN and an ACL are configured to be isolated. The application does not need to pass through a BMGW and a VPCE gateway, and a bare machine second network card is used to open a bare machine access storage special high-speed channel as needed; direct operation of the Leaf is avoided; the architecture is simplified, the bandwidth performance of the bare machine access storage is greatly improved, the access storage delay is greatly reduced; the access storage flow and other flows such as calculation and network are isolated, and the QOS of the access storage flow is ensured.

Description

Technical Field

[0001] This invention relates to the field of cloud network and data security technology, and more specifically, to a method and apparatus for constructing a high-speed channel for accessing storage from a traditional bare-metal environment. Background Technology

[0002] Cloud computing has revolutionized data storage, offering users more options. Object storage, file storage, and block storage are three common types of cloud storage.

[0003] 1. Object Storage (OOS): Object storage is suitable for large-scale, unstructured data, such as images, videos, and documents. It stores data as objects, each containing data, metadata, and a unique identifier. This makes object storage ideal for cloud storage, backup, and archiving, while providing high scalability and resilience.

[0004] 2. File Storage: File storage is suitable for sharing files and collaborative work. It simulates a traditional file system structure, allowing multiple users to access and edit files simultaneously. File storage is suitable for office documents, multimedia content, and application data, etc.

[0005] 3. Block Storage: Block storage provides a low-level data storage solution that divides data into blocks and allows direct reading and writing of these blocks. It is typically used for workloads such as virtual machines, databases, and high-performance computing, offering the highest performance and flexibility.

[0006] Cloud computing allows users to choose the appropriate storage type based on their needs without purchasing expensive hardware. This flexibility and cost-effectiveness make cloud storage ideal for modern applications and businesses. Whether requiring high scalability, shared files, or high-performance data storage, cloud computing offers users a variety of storage solutions.

[0007] Meanwhile, cloud vendors are increasingly demanding traditional bare-metal access storage. Currently, the main technologies used in traditional bare-metal access storage include (see...). Figure 1 As shown):

[0008] 1. The bare metal BM connects to the uplink Leaf switch via a virtual LAN (VLAN), and then connects to the traditional bare metal gateway BMGW via a VxLAN tunnel, thus entering the cloud's VPC (Virtual Private Network).

[0009] 2. The traditional bare metal gateway BMGW converts the Vxlan encapsulation and connects to the VPC End Node Service VPCE.

[0010] 3. VPC Endpoint Service (VPCE) enables bare-metal access to storage by supporting underlay API access to object storage gateways, file gateways, iSCSI gateways, etc.

[0011] Currently, traditional bare-metal access to all-flash block storage, performance-oriented file systems, OceanFS, and HPFS are placing increasingly higher demands on bandwidth, latency, and performance. However, existing technologies used in traditional bare-metal access storage suffer from the following problems and can no longer meet these requirements:

[0012] 1. Traditional bare-metal access to storage involves a long path and too many network elements, resulting in significant network latency.

[0013] 2. When bare metal access traffic to storage is mixed with computing and network traffic on the same path, the QoS and priority of access traffic to storage cannot be guaranteed.

[0014] 3. Accessing storage via bare metal must go through the bare metal gateway (BMGW), which is easily constrained by bottlenecks such as gateway bandwidth, affecting network performance and service performance. Summary of the Invention

[0015] Therefore, the primary objective of this invention is to design a method for constructing a high-speed channel for accessing storage from a traditional bare metal environment. By connecting a self-developed bare metal uplink Leaf controller, a dedicated high-speed channel for accessing storage from the bare metal environment is opened. This method supports on-demand activation and tenant isolation, avoiding problems such as excessively long paths caused by gateways like the bare metal gateway BMGW and VPCE. It simplifies the architecture and significantly improves the bandwidth performance of accessing storage from the bare metal environment, greatly reduces the latency of accessing storage from the bare metal environment, and ensures the quality of service (QoS) of accessing storage from the bare metal environment. This improves the performance and reliability of customer services and enhances the competitiveness of the product.

[0016] A second objective of this invention is to provide an apparatus for a conventional bare-metal access storage high-speed channel and to implement the method for constructing a conventional bare-metal access storage high-speed channel designed in this invention.

[0017] This invention provides a method for constructing a high-speed channel for conventional bare-metal access to storage, comprising:

[0018] S1. Configure bare metal BM dual network cards. Through the second network card in the bare metal BM dual network cards, connect to the file gateway or iSCSI gateway based on the underlay network layer 3 interconnection to access the HPFS high-performance file system.

[0019] S2. Design a bare-metal uplink Leaf controller, and allocate an address range to each group of Leaf switches through the bare-metal uplink Leaf controller. The address range is used to allocate the IP of the second network card of the bare metal, the VLAN IP corresponding to the Leaf switch, and the gateway IP, i.e., the VRRP IP of the virtual router.

[0020] S3. The bare metal unit connects to the Leaf controller via the netconf network configuration interface to configure the Virtual LAN VLAN, Virtual LAN VLAN IP, and Virtual Router VRRP IP on the Leaf switch.

[0021] S4. The Leaf controller uses the netconff network configuration interface to publish the address range allocated to each group of Leaf switches via the BGP border gateway protocol.

[0022] S5. Complete the calculation of the IP address of the bond port of the second network card on the bare metal BM, as well as the route pointing to the storage gateway. The next hop of the route is the gateway IP address of the second network card.

[0023] S6. Configure VLAN and ACL isolation on the uplink port of the second network card of the bare machine on the Leaf switch via the netconf network configuration interface connected to the Leaf controller.

[0024] Furthermore, the bare metal machine (BM) only accesses the storage gateway through the second network interface card (NIC), and the bare metal machines (BMs) do not communicate with each other.

[0025] Furthermore, the method for assigning an IP address and a gateway IP address to the second network interface card (NIC) of the bare machine in step S2 includes:

[0026] The database query calculates and assigns an IP address and gateway IP address to the second network card on the bare machine.

[0027] Furthermore, the two ports of the second network card are dual-connected to the bare metal uplink Leaf controller and configured with Bond ports. If one port fails, traffic can be automatically switched to the other port.

[0028] Furthermore, the bare metal uplink Leaf controller adopts m-lag cross-device link aggregation, which serves to both distribute traffic load and provide backup protection.

[0029] Furthermore, the bare metal uplink Leaf controller is connected to the Spine aggregation switch, and then to the storage gateway. There are multiple equivalent paths in each path. If any path fails, the traffic can be switched to other paths within seconds.

[0030] Furthermore, when a bare-metal tenant needs to enable a high-speed channel for bare-metal access to storage, the second network card of the bare-metal BM is automatically enabled through the Leaf controller connected to the bare-metal BM, accessing the storage IP and routing configuration. VLANs and routes are enabled on the Leaf switch to achieve a high-speed channel for bare-metal access to storage, and VLAN and ACL configurations are used to achieve direct isolation between bare-metal BMs of different tenants.

[0031] The present invention also provides an apparatus for constructing a conventional bare-metal access storage high-speed channel, which performs the conventional bare-metal access storage high-speed channel construction method as described above.

[0032] The meanings of the abbreviations and key terms used in this invention are explained in Table 1:

[0033] Table 1

[0034]

[0035] The present invention also provides a computer-readable storage medium having a computer program stored thereon, wherein the program, when executed by a processor, implements the steps of the conventional bare-metal access storage high-speed channel construction method as described above.

[0036] The present invention also provides a computer device, the computer device including a memory, a processor and a computer program stored in the memory and executable on the processor, wherein when the processor executes the program, it implements the steps of the conventional bare-metal access memory high-speed channel construction method as described above.

[0037] Compared with the prior art, the beneficial effects of the present invention are as follows:

[0038] This invention presents a method for constructing a high-speed channel for bare-metal access to storage. Through in-depth self-development of the Leaf controller connected to the bare-metal machine, it utilizes the second network interface card (NIC) of the bare-metal machine to enable a dedicated high-speed channel for bare-metal access to storage on demand. It supports fully automatic enabling and disabling of this dedicated high-speed channel without requiring gateways such as the bare-metal gateway (BMGW) and VPCE, thus avoiding direct operation of the Leaf switch. This simplifies the architecture and significantly improves the bandwidth performance and reduces latency of bare-metal access to storage. Based on the characteristic that a bare-metal machine can only belong to one tenant, the controller isolates tenants through VLANs and ACLs connected to the Leaf on the bare-metal machine. By restricting the second NIC of the bare-metal machine to access only the storage gateway, it achieves isolation between storage access traffic and other traffic such as computing and network traffic, ensuring the Quality of Service (QoS) for storage access traffic, improving service performance and reliability, and enhancing product competitiveness. Attached Figure Description

[0039] Various other advantages and benefits will become apparent to those skilled in the art upon reading the following detailed description of preferred embodiments. The accompanying drawings are for illustrative purposes only and are not intended to limit the invention.

[0040] In the attached diagram:

[0041] Figure 1 This is a schematic diagram of the traditional bare-metal access storage architecture in existing technologies;

[0042] Figure 2 This is a schematic diagram of a conventional bare-metal access storage architecture according to an embodiment of the present invention;

[0043] Figure 3 This is an operational interface diagram of the bare-metal uplink Leaf controller allocating address ranges for each group of Leaves according to an embodiment of the present invention;

[0044] Figure 4 This is a schematic diagram of the architecture of the underlay network's three-layer interconnection with the file gateway or iSCSI gateway according to an embodiment of the present invention;

[0045] Figure 5 This is a diagram showing the operation interface for configuring VLAN and ACL isolation on the uplink port of the second network card in this embodiment of the invention.

[0046] Figure 6 This is a flowchart illustrating a method for constructing a conventional bare-metal access storage high-speed channel according to the present invention;

[0047] Figure 7 This is a schematic diagram of the configuration of a computer device according to an embodiment of the present invention. Detailed Implementation

[0048] Exemplary embodiments will now be described in detail, examples of which are illustrated in the accompanying drawings. When the following description relates to the drawings, unless otherwise indicated, the same numerals in different drawings denote the same or similar elements. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with this disclosure. Rather, they are merely examples of systems and products consistent with some aspects of this disclosure as detailed in the appended claims.

[0049] The terminology used in this disclosure is for the purpose of describing particular embodiments only and is not intended to be limiting of the disclosure. The singular forms “a,” “the,” and “the” as used in this disclosure and the appended claims are also intended to include the plural forms unless the context clearly indicates otherwise. It should also be understood that the term “and / or” as used herein refers to and includes any and all possible combinations of one or more of the associated listed items.

[0050] It should be understood that although the terms first, second, third, etc., may be used in this disclosure to describe various information, such information should not be limited to these terms. These terms are used only to distinguish information of the same type from one another. For example, without departing from the scope of this disclosure, first information may also be referred to as second information, and similarly, second information may also be referred to as first information. Depending on the context, the word "if" as used herein may be interpreted as "when," "when," or "in response to determination."

[0051] The embodiments of the present invention will be described in further detail below.

[0052] This invention provides a method for constructing a high-speed channel for traditional bare-metal access to storage, see [link to relevant documentation]. Figure 6 As shown, it includes the following steps:

[0053] S1. Configure a bare-metal BM dual-NIC setup. Using the second NIC in the bare-metal BM setup, connect to the file gateway or iSCSI gateway via Layer 3 underlay networking to access the HPFS high-performance file system. (See [link to documentation]) Figure 4 The above;

[0054] S2. Design a bare-metal uplink Leaf controller. This controller allocates address ranges to each group of Leaf switches. These address ranges are used to assign IP addresses to the second network interface card (NIC) of the bare-metal machine, the VLAN IP address corresponding to the Leaf switch, and the gateway IP address (i.e., the VRRP IP address of the virtual router). (See [link]). Figure 3 As shown;

[0055] The method for assigning IP and gateway IP to the second network card of the bare machine in step S2 includes:

[0056] This invention supports querying and calculating from a database to assign an IP address and a gateway IP address to the second network interface card (NIC) of the bare machine.

[0057] S3. The bare metal unit connects to the Leaf controller via the netconf network configuration interface to configure the Virtual LAN VLAN, Virtual LAN VLAN IP, and Virtual Router VRRP IP on the Leaf switch.

[0058] S4. The Leaf controller uses the netconff network configuration interface to publish the address range allocated to each group of Leaf switches via the BGP border gateway protocol.

[0059] S5. Complete the calculation of the IP address of the bond port of the second network card on the bare metal BM, as well as the route pointing to the storage gateway. The next hop of the route is the gateway IP address of the second network card.

[0060] S6. Configure VLAN and ACL isolation on the uplink port of the second network card of the bare metal unit on the Leaf switch via the netconf network configuration interface, which is connected to the Leaf controller from the bare metal unit. See [link to documentation]. Figure 5 As shown.

[0061] The bare metal machine (BM) only accesses the storage gateway through the second network interface card (NIC), and the bare metal machines (BMs) do not communicate with each other.

[0062] The second network card has two ports connected to the bare metal uplink Leaf controller, configured as Bond ports. If one port fails, traffic can automatically switch to the other port. See [link to relevant documentation]. Figure 2 As shown.

[0063] The bare metal uplink Leaf controller uses m-lag cross-device link aggregation, which serves two purposes: load balancing and backup protection.

[0064] The bare metal uplink Leaf controller is connected to the Spine aggregation switch, and then to the storage gateway. There are multiple equivalent paths in each path. If any path fails, the traffic can be switched to other paths in seconds.

[0065] When a bare-metal tenant needs to enable a high-speed channel for bare-metal access to storage, the second network interface card of the bare-metal BM is automatically enabled through the Leaf controller connected to the bare-metal BM, allowing access to storage IP and routing configuration. VLANs and routes are enabled and advertised on the Leaf switch, enabling a high-speed channel for bare-metal access to storage. Furthermore, VLAN and ACL configurations are used to achieve direct isolation between bare-metal BMs of different tenants.

[0066] This invention also provides an apparatus for constructing a conventional bare-metal access storage high-speed channel, which executes the method for constructing a conventional bare-metal access storage high-speed channel as described above.

[0067] High availability design related to embodiments of the present invention:

[0068] (1) High availability at the network card level: the second network card on the bare machine has two ports connected to the uplink Leaf switch and is configured with Bond ports. If one port fails, the traffic can be automatically switched to the other port.

[0069] (2) High availability at the device level: the bare metal uplink to Leaf uses m-lag cross-device link aggregation, which can play a role in load sharing traffic on the one hand, and a role in backup protection on the other.

[0070] (3) Link-level high availability: There are multiple equivalent paths between the bare metal uplink Leaf and the Spine aggregation switch, and then to the storage gateway. If any path fails, the traffic can be switched to other paths in seconds.

[0071] (4) When a bare metal tenant needs to open a high-speed channel for accessing storage, the second network card of the bare metal can be automatically opened and the storage IP and routing configuration can be configured through the Leaf controller connected to the bare metal. VLAN and route publishing can be opened on the Leaf to realize a high-speed channel for accessing storage from the bare metal. The bare metal of different tenants can be directly isolated through VLAN and ACL configuration.

[0072] This invention also provides a computer device. Figure 7 This is a schematic diagram of the structure of a computer device provided in an embodiment of the present invention; see the accompanying drawings. Figure 7As shown, the computer device includes: an input system 23, an output system 24, a memory 22, and a processor 21; the memory 22 is used to store one or more programs; when the one or more programs are executed by the one or more processors 21, the one or more processors 21 implement the conventional bare-metal access memory high-speed channel construction method provided in the above embodiments; wherein the input system 23, the output system 24, the memory 22, and the processor 21 can be connected via a bus or other means. Figure 7 Taking the example of a connection between China and Israel via a bus.

[0073] The memory 22, as a read / write storage medium for computing devices, can be used to store software programs and computer-executable programs, such as program instructions corresponding to the conventional bare-metal access storage high-speed channel construction method described in this embodiment of the invention. The memory 22 may primarily include a program storage area and a data storage area. The program storage area may store the operating system and at least one application program required for a function; the data storage area may store data created based on the use of the device. Furthermore, the memory 22 may include high-speed random access memory and non-volatile memory, such as at least one disk storage device, flash memory device, or other non-volatile solid-state storage device. In some instances, the memory 22 may further include memory remotely located relative to the processor 21, and these remote memories can be connected to the device via a network. Examples of such networks include, but are not limited to, the Internet, corporate intranets, local area networks, mobile communication networks, and combinations thereof.

[0074] The input system 23 can be used to receive input digital or character information, and generate key signal inputs related to user settings and function control of the device; the output system 24 may include display devices such as a display screen.

[0075] The processor 21 executes various functional applications and data processing of the device by running software programs, instructions and modules stored in the memory 22, thereby realizing the above-mentioned method for constructing a high-speed channel for accessing storage from a traditional bare metal.

[0076] The computer equipment provided above can be used to execute the method for constructing a conventional bare-metal access storage high-speed channel provided in the above embodiments, and has corresponding functions and beneficial effects.

[0077] This invention also provides a storage medium containing computer-executable instructions, which, when executed by a computer processor, are used to perform a method for constructing a conventional bare-metal access storage high-speed channel as provided in the above embodiments. The storage medium can be any type of memory device or storage device, including: mounting media such as CD-ROM, floppy disk, or magnetic tape systems; computer system memory or random access memory such as DRAM, DDRRAM, SRAM, EDO RAM, Rambus RAM, etc.; non-volatile memory such as flash memory, magnetic media (e.g., hard disk or optical storage); registers or other similar types of memory elements; the storage medium may also include other types of memory or combinations thereof; furthermore, the storage medium may reside in a first computer system in which the program is executed, or it may reside in a different second computer system connected to the first computer system via a network (such as the Internet); the second computer system can provide program instructions to the first computer for execution. The storage medium includes two or more storage media that may reside in different locations (e.g., in different computer systems connected via a network). The storage medium may store program instructions (e.g., specifically implemented as a computer program) executable by one or more processors.

[0078] Of course, the computer-executable instructions provided in the embodiments of the present invention are not limited to the conventional bare-metal access storage high-speed channel construction method described in the above embodiments, but can also perform related operations in the conventional bare-metal access storage high-speed channel construction method provided in any embodiment of the present invention.

[0079] The technical solution of the present invention has been described above with reference to the preferred embodiments shown in the accompanying drawings. However, it will be readily understood by those skilled in the art that the scope of protection of the present invention is obviously not limited to these specific embodiments. Without departing from the principles of the present invention, those skilled in the art can make equivalent changes or substitutions to the relevant technical features, and the technical solutions after these changes or substitutions will all fall within the scope of protection of the present invention.

[0080] The above description is merely a preferred embodiment of the present invention and is not intended to limit the invention. Various modifications and variations can be made to the present invention by those skilled in the art. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present invention should be included within the scope of protection of the present invention.

Claims

1. A method for constructing a high-speed channel for accessing storage using traditional bare-metal methods, characterized in that, include: S1. Configure bare metal BM dual network cards. Through the second network card in the bare metal BM dual network cards, connect to the file gateway or iSCSI gateway based on the underlay network layer 3 interconnection to access the HPFS high-performance file system. S2. Design a bare-metal uplink Leaf controller, and allocate an address range to each group of Leaf switches through the bare-metal uplink Leaf controller. The address range is used to allocate the IP of the second network card of the bare metal, the VLAN IP corresponding to the Leaf switch, and the gateway IP, i.e., the VRRP IP of the virtual router. S3. The bare metal unit connects to the Leaf controller via the netconf network configuration interface to configure the Virtual LAN VLAN, Virtual LAN VLAN IP, and Virtual Router VRRP IP on the Leaf switch. S4. The Leaf controller uses the netconff network configuration interface to publish the address range allocated to each group of Leaf switches via the BGP border gateway protocol. S5. Complete the calculation of the IP address of the bond port of the second network card on the bare metal BM, as well as the route pointing to the storage gateway. The next hop of the route is the gateway IP address of the second network card. S6. Configure VLAN and ACL isolation on the uplink port of the second network card of the bare machine on the Leaf switch via the netconf network configuration interface connected to the Leaf controller.

2. The method for constructing a conventional bare-metal access storage high-speed channel according to claim 1, characterized in that, The bare metal machine (BM) only accesses the storage gateway through the second network interface card (NIC), and the bare metal machines (BMs) do not communicate with each other.

3. The method for constructing a conventional bare-metal access storage high-speed channel according to claim 2, characterized in that, The method for assigning IP and gateway IP to the second network card of the bare machine in step S2 includes: The database query calculates and assigns an IP address and gateway IP address to the second network card on the bare machine.

4. The method for constructing a conventional bare-metal access storage high-speed channel according to claim 3, characterized in that, The two ports of the second network card are connected to the bare metal uplink Leaf controller and configured with Bond ports. If one port fails, the traffic can be automatically switched to the other port.

5. The method for constructing a conventional bare-metal access storage high-speed channel according to claim 4, characterized in that, The bare metal uplink Leaf controller uses m-lag cross-device link aggregation, which serves two purposes: load balancing and backup protection.

6. The method for constructing a conventional bare-metal access storage high-speed channel according to claim 5, characterized in that, The bare metal uplink Leaf controller is connected to the Spine aggregation switch, and then to the storage gateway. There are multiple equivalent paths in each path. If any path fails, the traffic can be switched to other paths in seconds.

7. The method for constructing a conventional bare-metal access storage high-speed channel according to claim 6, characterized in that, When a bare-metal tenant needs to enable a high-speed channel for bare-metal access to storage, the second network interface card of the bare-metal BM is automatically enabled through the Leaf controller connected to the bare-metal BM, allowing access to storage IP and routing configuration. VLANs and routes are enabled and advertised on the Leaf switch, enabling a high-speed channel for bare-metal access to storage. Furthermore, VLAN and ACL configurations are used to achieve direct isolation between bare-metal BMs of different tenants.

8. A device for conventional bare-metal access to high-speed storage channels, characterized in that, Perform the method for constructing a conventional bare-metal access storage high-speed channel as described in claims 1-7.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the program is executed by the processor, it implements the steps of the method for constructing a conventional bare-metal access storage high-speed channel as described in any one of claims 1-7.

10. A computer device, the computer device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that, When the processor executes the program, it implements the steps of the conventional bare-metal access storage high-speed channel construction method as described in any one of claims 1-7.

Images