A double-layer VXLAN tunnel encapsulation method based on VPP

Abstract

The application discloses a double-layer VXLAN tunnel encapsulation method based on VPP. The double-layer VXLAN is configured in a vpp network element, double bridge-domain forwarding is adopted in the layer 2, the double bridge-domain is interconnected in the layer 3 through vrf-0, inner layer VXLAN is implemented in bridge-domain-1 to realize message encapsulation and decapsulation, outer layer VXLAN is implemented in bridge-domain-2 to realize message encapsulation and decapsulation, and the purpose of realizing the layer 2 intercommunication of resources on the cloud and resources under the cloud in the same subnet is achieved.

Description

Technical Field

[0001] This application relates to the fields of cloud computing and cloud network technology, and in particular to a dual-layer VXLAN tunnel encapsulation method based on VPP. Background Technology

[0002] VPP is a high-performance packet processing framework. As a representative of high-performance forwarding in general-purpose processors, it is widely used in network forwarding elements. It is typically used to build network devices and functions, enabling highly flexible packet processing in Software-Defined Networking (SDN) and Network Functions Virtualization (NFV) environments. Bridge-domain manages Layer 2 forwarding, allowing communication between different Layer 2 domains. Loopback is typically used to implement virtual interfaces. VXLAN is used to create logical tunnels on the underlying network to connect virtual networks. VRF implements Layer 3 forwarding, allowing the creation of multiple virtual routing tables on the same physical device. In cloud networks, the general application of VPP is: using bridge-domain / loopback / VXLAN for Layer 2 forwarding and loopback / VRF for Layer 3 forwarding. A typical application scenario is single-layer VXLAN decapsulation of overlay packets -> route lookup -> single-layer VXLAN encapsulation.

[0003] However, in some special scenarios, such as Layer 2 interconnection between cloud and on-premises resources, or mutual access between cloud and IDC resources on the same subnet, Layer 3 routing cannot be used. In such cases, VPP network elements are required to encapsulate / decapsulate packets using a two-layer VXLAN tunnel to achieve Layer 2 mutual access between cloud and on-premises resources on the same subnet. Summary of the Invention

[0004] This application aims to at least partially address one of the technical problems in the related art. To this end, one objective of this application is to propose a VPP-based dual-layer VXLAN tunnel encapsulation method, which achieves Layer 2 inter-network access between cloud and on-premises resources by encapsulating overlay packets with dual-layer VXLAN.

[0005] One aspect of this application provides a VPP-based dual-layer VXLAN tunnel encapsulation method, comprising:

[0006] Configure dual-layer VXLAN in the VPP network element;

[0007] Dual bridge-domain forwarding is used at Layer 2;

[0008] Interconnect the two bridge-domains at Layer 3 using VRF-0;

[0009] Implement packet encapsulation and decapsulation in the inner VXLAN layer of bridge-domain-1;

[0010] Implement packet encapsulation and decapsulation in the outer VXLAN layer of bridge-domain-2;

[0011] The configuration of dual-layer VXLAN in VPP network elements refers to the following: during the initialization phase of the network device, configuring bridge-domain-1 to handle the encapsulation and decapsulation of the inner VXLAN, configuring bridge-domain-2 to handle the encapsulation and decapsulation of the outer VXLAN, configuring VRF-0 for Layer 3 interconnection between bridge-domain-1 and bridge-domain-2, and configuring the routing definition in VRF-0.

[0012] The specific method for configuring dual-layer VXLAN in the VPP network element is as follows:

[0013] The specific process for configuring bridge-domain-1 is as follows:

[0014] Create bridge-domain-1 to handle packet encapsulation and decapsulation of the inner VXLAN tunnel;

[0015] Create a VXLAN tunnel, encapsulate the inner VXLAN packet from the source IP address 10.10.10.1 and send it to the destination IP address 20.20.20.1, with the VXLAN network identifier set to 1 and the instance set to 0;

[0016] Create a loopback interface as an interface instance for the inner VXLAN tunnel;

[0017] Create a second VXLAN tunnel for Layer 3 interconnection of the inner VXLAN tunnel. The inner VXLAN tunnel encapsulates VXLAN packets from the source IP address 192.168.1.1 and sends them to the destination IP address 172.16.0.1. The VXLAN network identifier is 100 and the instance is 1.

[0018] Add interface l2 to bridge-domain-1 and associate it with vxlan tunnel instance 1;

[0019] Add interface l2 to bridge-domain-1 and associate it with loopback interface instance 1 to use it as a bridge virtual interface;

[0020] Add interface l2 to bridge-domain-1 and associate it with the second VXLAN tunnel instance 2;

[0021] The specific process for configuring bridge-domain-2 is as follows:

[0022] Create bridge-domain-2 to handle packet encapsulation and decapsulation of the outer VXLAN tunnel;

[0023] Create a second VXLAN tunnel, encapsulate the outer VXLAN packet from the source IP address 10.10.10.1 and send it to the destination IP address 30.30.30.1. The VXLAN network identifier is 2 and the instance is 2.

[0024] Create a second loopback interface as an interface instance for the outer VXLAN tunnel;

[0025] Add interface l2 to bridge-domain-2 and associate it with vxlan tunnel instance 2;

[0026] Add interface l2 to bridge-domain-2 and associate it with the second loopback interface instance 2, using it as a bridge virtual interface;

[0027] The specific process of configuring VRF-0 is as follows: add a VRF route to forward packets destined for 172.16.0.1 / 32 to loop2 via the next-hop address 192.168.1.254;

[0028] When configuring dual-layer VXLAN in a VPP network element, if there is peer overlay MAC information, the Layer 2 forwarding table and Layer 3 ARP table of the bridge-domain are configured to be static.

[0029] Configuring the bridge-domain's Layer 2 forwarding table and Layer 3 ARP table to be static can reduce Layer 2 flooding.

[0030] When configuring dual-layer VXLAN in a VPP network element, VRF is output through a specified VXLAN tunnel, and n dual-layer VXLAN instances are configured on one VPP, thereby enabling n users to share one VPP.

[0031] The dual-layer VXLAN instance includes: two bridge-domains and one VRF;

[0032] The aforementioned implementation of n users sharing one vpp refers to configuring n Layer 2 VXLAN instances on one vpp, with each user being configured with an independent Layer 2 VXLAN instance. This enables network isolation between different users, thereby achieving network isolation for n users on one vpp.

[0033] The specific process of message encapsulation is as follows:

[0034] Step S100: The single-layer VXLAN tunnel in the cloud encapsulates the packet and enters the VPP network element. The packet is then decapsulated in bridge-domain-1 to obtain the overlay packet.

[0035] Step S200: The overlay packet is forwarded at Layer 2 in bridge-domain-1. The overlay packet is encapsulated with the inner vxlan-tunnel-1 tunnel information to obtain the vxlan tunnel packet.

[0036] The overlay message is either forwarded at Layer 2 in bridge-domain-1 as a forwarding or an unknown unicast flood;

[0037] Step S300: The VXLAN tunnel packet finds the next hop interface as loop-back-2 through routing in vrf-0, and then enters bridge-domain-2;

[0038] Step S400: The VXLAN tunnel message is forwarded at Layer 2 in bridge-domain-2, encapsulating the VXLAN-tunnel-2 tunnel information;

[0039] The second-layer forwarding refers to forwarding or unknown unicast flood;

[0040] The specific process for message decapsulation is as follows:

[0041] Step R100: The backhaul message from the cloud enters the VPP;

[0042] Step R200: The backhaul message is decapsulated in bridge-domain-2 to obtain the vxlan tunnel message of vxlan-tunnel-2. The vxlan tunnel message is forwarded at layer 2 in bridge-domain-2.

[0043] Step R300: The VXLAN tunnel message performs a route lookup through VRF-0, and the next hop outgoing interface is loop-back-1;

[0044] Step R400: VXLAN tunnel messages enter bridge-domain-1;

[0045] Step R500: The VXLAN tunnel message is forwarded at Layer 2 in bridge-domain-1. During the Layer 2 forwarding process, the tunnel information of the inner VXLAN-tunnel-1 is decapsulated.

[0046] One aspect of this application provides a VPP-based dual-layer VXLAN tunneling encapsulation system, comprising:

[0047] The VXLAN configuration module is used to configure dual-layer VXLAN in VPP network elements;

[0048] The Layer 2 forwarding module is used for dual bridge-domain forwarding at Layer 2.

[0049] The Layer 3 interconnect module is used to interconnect the two bridge-domains at Layer 3 via VRF-0;

[0050] The inner packet processing module is used to perform packet encapsulation and decapsulation in the inner VXLAN layer of bridge-domain-1.

[0051] The outer packet processing module is used to perform packet encapsulation and decapsulation in the outer VXLAN layer of bridge-domain-2.

[0052] One aspect of this application provides an electronic device including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the program to implement steps in a VPP-based dual-layer VXLAN tunneling encapsulation method.

[0053] One aspect of this application provides a readable storage medium storing a computer program adapted for loading by a processor to perform steps in a VPP-based dual-layer VXLAN tunneling encapsulation method.

[0054] The dual-layer VXLAN tunneling encapsulation method based on VPP proposed in this application has the following advantages over existing technologies:

[0055] VPP's dual-layer VXLAN encapsulation and decapsulation offer flexible configuration, self-learning capabilities with two layers of L2FIB, and are applicable to a wider range of special scenarios. According to the VPP-based dual-layer VXLAN tunnel encapsulation method described above, dual-layer VXLAN tunnel encapsulation can be extended to VXLAN tunnel encapsulation with any number of layers. Attached Figure Description

[0056] Figure 1 This is a scenario diagram illustrating Layer 2 interconnection between an IDC and the same subnet in the cloud, based on a VPP-based dual-layer VXLAN tunnel encapsulation method of this application.

[0057] Figure 2 This is a schematic diagram illustrating the implementation of a dual-layer VXLAN encapsulation and decapsulation scheme for a dual-layer VXLAN tunnel encapsulation method based on VPP according to this application;

[0058] Figure 3 This is a VPP dual-layer VXLAN configuration diagram for a VPP-based dual-layer VXLAN tunnel encapsulation method according to this application;

[0059] Figure 4 This is a message processing flowchart of a VPP-based two-layer VXLAN tunnel encapsulation method according to this application;

[0060] Figure 5 A schematic diagram of the structure of an electronic device provided in this application;

[0061] Figure 6 This is a schematic diagram of a readable storage medium structure provided in this application. Detailed Implementation

[0062] To better understand this application, various aspects of this application will be described in more detail with reference to the accompanying drawings. It should be understood that these detailed descriptions are merely illustrative of exemplary embodiments of this application and are not intended to limit the scope of this application in any way. Throughout the specification, the same reference numerals refer to the same elements. The expression "and / or" includes any and all combinations of one or more of the associated listed items.

[0063] In the accompanying drawings, the size, dimensions, and shapes of the elements have been slightly adjusted for ease of illustration. The drawings are for illustrative purposes only and are not strictly to scale. As used herein, the terms “approximately,” “about,” and similar terms are used to indicate approximation, not degree, and are intended to illustrate inherent deviations in measured or calculated values ​​that will be recognized by one of ordinary skill in the art. Furthermore, the order in which the steps are described in this application does not necessarily indicate the order in which these steps occur in actual operation, unless otherwise expressly defined or deduced from the context.

[0064] It should also be understood that expressions such as "comprising," "including," "having," "containing," and / or "comprising" are open-ended rather than closed-ended expressions in this specification, indicating the presence of the stated features, elements, and / or components, but not excluding the presence of one or more other features, elements, components, and / or combinations thereof. Furthermore, when expressions such as "at least one of..." appear after a list of listed features, they modify the entire list of features, not just individual elements in the list. Additionally, when describing embodiments of this application, the word "may" is used to mean "one or more embodiments of this application." And the term "exemplary" is intended to refer to examples or illustrations.

[0065] Unless otherwise specified, all terms used herein (including engineering and technical terms) shall have the same meaning as commonly understood by one of ordinary skill in the art to which this application pertains. It should also be understood that, unless expressly stated herein, terms defined in common dictionaries shall be interpreted as having the meaning consistent with their meaning in the context of the relevant art, and not as having an idealized or overly formalized meaning.

[0066] It should be noted that, where there is no conflict, the embodiments and features described in this application can be combined with each other. This application will now be described in detail with reference to the accompanying drawings and embodiments.

[0067] Example 1

[0068] like Figure 1 The diagram illustrates a scenario of Layer 2 interconnection between an IDC and a cloud-based subnet using a VPP-based dual-layer VXLAN tunnel encapsulation method provided in this application. This scenario involves Layer 2 interconnection between the cloud and on-premises environments, with access between the cloud and IDC resources via shared subnets. The method employs a dual-layer VXLAN architecture, with the inner layer being Layer 2 forwarding and the outer layer being Layer 3 routing forwarding. The VPP-based dual-layer VXLAN tunnel encapsulation method addresses the encapsulation and decapsulation issues of dual-layer VXLAN tunnels in this scenario.

[0069] like Figure 2 The diagram shown is a schematic representation of the dual-layer VXLAN encapsulation and decapsulation scheme implementation of the dual-layer VXLAN tunnel encapsulation method based on VPP described in this application, including:

[0070] Configure dual-layer VXLAN in the VPP network element;

[0071] Dual bridge-domain forwarding is used at Layer 2;

[0072] Interconnect the two bridge-domains at Layer 3 using VRF-0;

[0073] Implement packet encapsulation and decapsulation in the inner VXLAN layer of bridge-domain-1;

[0074] Implement packet encapsulation and decapsulation in the outer VXLAN layer of bridge-domain-2;

[0075] The VRF-0 is used to interconnect two Bridge-Domains at three layers;

[0076] The bridge-domain-1 refers to the bridge-domain that handles packet encapsulation and decapsulation of the inner VXLAN tunnel, and the bridge-domain-2 refers to the bridge-domain that handles packet encapsulation and decapsulation of the outer VXLAN tunnel.

[0077] like Figure 3 The diagram shown is a VPP dual-layer VXLAN configuration diagram for a VPP-based dual-layer VXLAN tunnel encapsulation method according to this application. Figure 3 The configuration method shown configures the dual-layer VXLAN in the VPP network element;

[0078] The configuration of dual-layer VXLAN in VPP network elements refers to the following: during the initialization phase of the network device, configuring bridge-domain-1 to handle the encapsulation and decapsulation of the inner VXLAN, configuring bridge-domain-2 to handle the encapsulation and decapsulation of the outer VXLAN, configuring VRF-0 for Layer 3 interconnection between bridge-domain-1 and bridge-domain-2, and configuring the routing definition in VRF-0.

[0079] The specific method for configuring dual-layer VXLAN in the VPP network element is as follows:

[0080] The specific process for configuring bridge-domain-1 is as follows:

[0081] Create bridge-domain-1 to handle packet encapsulation and decapsulation of the inner VXLAN tunnel;

[0082] Create a VXLAN tunnel, encapsulate the inner VXLAN packet from the source IP address 10.10.10.1 and send it to the destination IP address 20.20.20.1, with the VXLAN network identifier set to 1 and the instance set to 0;

[0083] Create a loopback interface as an interface instance for the inner VXLAN tunnel;

[0084] Create a second VXLAN tunnel for Layer 3 interconnection of the inner VXLAN tunnel. The inner VXLAN tunnel encapsulates VXLAN packets from the source IP address 192.168.1.1 and sends them to the destination IP address 172.16.0.1. The VXLAN network identifier is 100 and the instance is 1.

[0085] Add interface l2 to bridge-domain-1 and associate it with vxlan tunnel instance 1;

[0086] Add interface l2 to bridge-domain-1 and associate it with loopback interface instance 1 to use it as a bridge virtual interface;

[0087] Add interface l2 to bridge-domain-1 and associate it with the second VXLAN tunnel instance 2;

[0088] The specific process for configuring bridge-domain-2 is as follows:

[0089] Create bridge-domain-2 to handle packet encapsulation and decapsulation of the outer VXLAN tunnel;

[0090] Create a second VXLAN tunnel, encapsulate the outer VXLAN packet from the source IP address 10.10.10.1 and send it to the destination IP address 30.30.30.1. The VXLAN network identifier is 2 and the instance is 2.

[0091] Create a second loopback interface as an interface instance for the outer VXLAN tunnel;

[0092] Add interface l2 to bridge-domain-2 and associate it with vxlan tunnel instance 2;

[0093] Add interface l2 to bridge-domain-2 and associate it with the second loopback interface instance 2, using it as a bridge virtual interface;

[0094] The specific process of configuring VRF-0 is as follows: add a VRF route to forward packets destined for 172.16.0.1 / 32 to loop2 via the next-hop address 192.168.1.254;

[0095] When configuring dual-layer VXLAN in a VPP network element, if there is peer overlay MAC information, the Layer 2 forwarding table and Layer 3 ARP table of the bridge-domain are configured to be static.

[0096] Configuring the bridge-domain's Layer 2 forwarding table and Layer 3 ARP table to be static can reduce Layer 2 flooding.

[0097] The Layer 2 forwarding table of the bridge-domain is used to record MAC addresses and associated interface information;

[0098] The three-layer ARP table is used to map IP addresses to MAC addresses;

[0099] When configuring dual-layer VXLAN in a VPP network element, VRF is output through a specified VXLAN tunnel, and n dual-layer VXLAN instances are configured on one VPP, thereby enabling n users to share one VPP.

[0100] Configuring n dual-layer VXLAN instances on a single VPP refers to using two layers of VXLAN tunnels in the network to enable virtual network connectivity in a cloud environment.

[0101] The dual-layer VXLAN instance includes: two bridge-domains and one VRF;

[0102] The two bridge domains are used to handle Layer 2 forwarding of packets, and the VRF is used to forward packets from one bridge domain to another.

[0103] The aforementioned implementation of n users sharing one vpp refers to configuring n Layer 2 VXLAN instances on one vpp, with each user being configured with an independent Layer 2 VXLAN instance. This enables network isolation between different users, thereby achieving network isolation for n users on one vpp.

[0104] like Figure 4 The diagram shows a packet processing flowchart of a VPP-based two-layer VXLAN tunnel encapsulation method according to this application. The specific process of packet encapsulation and decapsulation in the inner VXLAN layer of bridge-domain-1 is as follows:

[0105] Step S100: The single-layer VXLAN tunnel in the cloud encapsulates the packet and enters the VPP network element. The packet is then decapsulated in bridge-domain-1 to obtain the overlay packet.

[0106] Step S200: The overlay packet is forwarded at Layer 2 in bridge-domain-1. The overlay packet is encapsulated with the inner vxlan-tunnel-1 tunnel information to obtain the vxlan tunnel packet.

[0107] The overlay message is either forwarded at Layer 2 in bridge-domain-1 as a forwarding or an unknown unicast flood;

[0108] Step S300: The VXLAN tunnel packet finds the next hop interface as loop-back-2 through routing in vrf-0, and then enters bridge-domain-2;

[0109] Step S400: The VXLAN tunnel message is forwarded at Layer 2 in bridge-domain-2, encapsulating the VXLAN-tunnel-2 tunnel information;

[0110] The second-layer forwarding refers to forwarding or unknown unicast flood;

[0111] The specific process for implementing packet encapsulation and decapsulation in the outer VXLAN layer of bridge-domain-2 is as follows:

[0112] Step R100: The backhaul message from the cloud enters the VPP;

[0113] Step R200: The backhaul message is decapsulated in bridge-domain-2 to obtain the vxlan tunnel message of vxlan-tunnel-2. The vxlan tunnel message is forwarded at layer 2 in bridge-domain-2.

[0114] Step R300: The VXLAN tunnel message performs a route lookup through VRF-0, and the next hop outgoing interface is loop-back-1;

[0115] Step R400: VXLAN tunnel messages enter bridge-domain-1;

[0116] Step R500: The VXLAN tunnel packet is forwarded at Layer 2 in bridge-domain-1. During the Layer 2 forwarding process, the tunnel information of the inner VXLAN-tunnel-1 is decapsulated.

[0117] Example 2

[0118] This application provides a VPP-based dual-layer VXLAN tunnel encapsulation method that can be applied to cloud tenant gateways. It carries the inner VXLAN encapsulated packets on existing Layer 3 network resources such as leased lines / VPNs, achieving the effect of dual-layer VXLAN tunnel encapsulation. This enables Layer 2 interconnection between cloud and on-premises resources and relaxes the requirement that on-premises and cloud access must be conducted in different subnets via CIDR.

[0119] Example 3

[0120] This application proposes a dual-layer VXLAN tunneling encapsulation system based on VPP, comprising:

[0121] The VXLAN configuration module is used to configure dual-layer VXLAN in VPP network elements;

[0122] The Layer 2 forwarding module is used for dual bridge-domain forwarding at Layer 2.

[0123] The Layer 3 interconnect module is used to interconnect the two bridge-domains at Layer 3 via VRF-0;

[0124] The inner packet processing module is used to perform packet encapsulation and decapsulation in the inner VXLAN layer of bridge-domain-1.

[0125] The outer packet processing module is used to perform packet encapsulation and decapsulation in the outer VXLAN layer of bridge-domain-2.

[0126] Example 4

[0127] Figure 5 This is a schematic diagram of an electronic device structure provided in one embodiment of this application. Figure 5 As shown, according to another aspect of this application, an electronic device is also provided. This electronic device may include one or more processors and one or more memories. The memories store computer-readable code, which, when executed by the one or more processors, can perform a VPP-based dual-layer VXLAN tunneling encapsulation method as described above.

[0128] The method or system according to the embodiments of this application can also be used by means of Figure 5 The electronic device shown is implemented using the architecture of an electronic device. For example... Figure 5 As shown, the electronic device may include a bus, one or more CPUs, read-only memory (ROM), random access memory (RAM), a communication port connected to a network, input / output components, a hard disk, etc. The storage device in the electronic device, such as ROM or hard disk, may store a VPP-based dual-layer VXLAN tunnel encapsulation method provided in this application. A VPP-based dual-layer VXLAN tunnel encapsulation method may, for example, include: configuring dual-layer VXLAN in the VPP network element; employing dual bridge-domain forwarding at Layer 2; interconnecting the dual bridge-domains at Layer 3 via VRF-0; implementing packet encapsulation and decapsulation of the inner VXLAN in bridge-domain-1; and implementing packet encapsulation and decapsulation of the outer VXLAN in bridge-domain-2. Furthermore, the electronic device may also include a user interface. Of course, Figure 5 The architecture shown is merely exemplary and can be omitted as needed when implementing different devices. Figure 5 One or more components in the illustrated electronic device.

[0129] Example 5

[0130] Figure 6 This is a schematic diagram of a readable storage medium structure provided in one embodiment of this application. For example... Figure 6The diagram illustrates a readable storage medium according to one embodiment of this application. The computer-readable storage medium stores computer-readable instructions. When executed by a processor, the computer-readable instructions can perform a VPP-based dual-layer VXLAN tunneling encapsulation method according to an embodiment of this application, as described with reference to the above figures. The storage medium includes, but is not limited to, volatile memory and / or non-volatile memory. Volatile memory may include, for example, random access memory (RAM) and cache memory. Non-volatile memory may include, for example, read-only memory (ROM), hard disk, flash memory, etc.

[0131] Furthermore, according to embodiments of this application, the processes described in the above-referenced flowchart can be implemented as computer software programs. For example, this application provides a non-transitory machine-readable storage medium storing machine-readable instructions that can be executed by a processor to perform instructions corresponding to the method steps provided in this application, such as: configuring dual-layer VXLAN in a VPP network element; employing dual bridge-domain forwarding at Layer 2; interconnecting the dual bridge-domains at Layer 3 via VRF-0; implementing packet encapsulation and decapsulation in the inner VXLAN at bridge-domain-1; and implementing packet encapsulation and decapsulation in the outer VXLAN at bridge-domain-2. When this computer program is executed by a central processing unit (CPU), the functions defined in the method of this application are performed.

[0132] The methods, apparatus, and devices of this application may be implemented in many ways. For example, they may be implemented by software, hardware, firmware, or any combination of software, hardware, and firmware. The above-described order of steps for the method is for illustrative purposes only, and the steps of the method of this application are not limited to the order specifically described above, unless otherwise specifically stated. Furthermore, in some embodiments, this application may also be implemented as a program recorded on a recording medium, the program including machine-readable instructions for implementing the method according to this application. Thus, this application also covers recording media storing programs for performing the method according to this application.

[0133] In addition, the parts of the technical solutions provided in the embodiments of this application that are consistent with the implementation principles of the corresponding technical solutions in the prior art have not been described in detail, so as to avoid excessive elaboration.

[0134] The specific embodiments described above further illustrate the purpose, technical solution, and beneficial effects of the present invention. It should be understood that the above descriptions are merely specific embodiments of the present invention and are not intended to limit the invention. Any modifications, equivalent substitutions, or improvements made within the spirit and principles of the present invention should be included within the scope of protection of the present invention.

Claims

1. A method for encapsulating a dual-layer VXLAN tunnel based on VPP, characterized in that, include: Configure dual-layer VXLAN in the VPP network element; use dual bridge-domain forwarding at layer 2; interconnect the dual bridge-domains at layer 3 via VRF-0; implement packet encapsulation and decapsulation in the inner VXLAN of bridge-domain-1; and implement packet encapsulation and decapsulation in the outer VXLAN of bridge-domain-2.

2. The dual-layer VXLAN tunnel encapsulation method based on VPP as described in claim 1, characterized in that, The configuration of dual-layer VXLAN in VPP network elements refers to the following: during the initialization phase of the network device, configuring bridge-domain-1 to handle the encapsulation and decapsulation of the inner VXLAN, configuring bridge-domain-2 to handle the encapsulation and decapsulation of the outer VXLAN, configuring VRF-0 for Layer 3 interconnection between bridge-domain-1 and bridge-domain-2, and configuring the routing definition in VRF-0.

3. The dual-layer VXLAN tunnel encapsulation method based on VPP as described in claim 2, characterized in that, When configuring dual-layer VXLAN in a VPP network element, if there is peer overlay MAC information, the Layer 2 forwarding table and Layer 3 ARP table of the bridge-domain are configured to be static.

4. The dual-layer VXLAN tunnel encapsulation method based on VPP as described in claim 3, characterized in that, When configuring dual-layer VXLAN in a VPP network element, by specifying the output VRF of the VXLAN tunnel, n dual-layer VXLAN instances can be configured on one VPP, thereby enabling n users to share one VPP.

5. The dual-layer VXLAN tunnel encapsulation method based on VPP as described in claim 4, characterized in that, The dual-layer VXLAN instance includes two bridge domains and one VRF.

6. The dual-layer VXLAN tunnel encapsulation method based on VPP as described in claim 5, characterized in that, The specific process of message encapsulation is as follows: the message encapsulated by the single-layer VXLAN tunnel in the cloud enters the VPP network element, and is decapsulated in bridge-domain-1 to obtain the overlay message; the overlay message is forwarded at layer 2 in bridge-domain-1, and the overlay message is encapsulated with the inner VXLAN-tunnel-1 tunnel information to obtain the VXLAN tunnel message. The VXLAN tunnel packet finds the next-hop interface as loop-back-2 through routing in VRF-0, and then enters bridge-domain-2. The VXLAN tunnel packet is forwarded at Layer 2 in bridge-domain-2, and the VXLAN-tunnel-2 tunnel information is encapsulated.

7. The dual-layer VXLAN tunnel encapsulation method based on VPP as described in claim 6, characterized in that, The specific process of message decapsulation is as follows: the backhaul message from the cloud enters the VPP; the backhaul message is decapsulated in bridge-domain-2 to obtain the VXLAN tunnel message of vxlan-tunnel-2; the VXLAN tunnel message is forwarded at Layer 2 in bridge-domain-2; the VXLAN tunnel message performs route lookup through vrf-0, and the next hop outgoing interface is loop-back-1; VXLAN tunnel packets enter bridge-domain-1; VXLAN tunnel packets are forwarded at layer 2 in bridge-domain-1. During the layer 2 forwarding process, the tunnel information of the inner VXLAN-tunnel-1 is decapsulated.

8. A dual-layer VXLAN tunneling encapsulation system based on VPP, characterized in that, include: The VXLAN configuration module is used to configure dual-layer VXLAN in VPP network elements; the Layer 2 forwarding module is used to use dual bridge-domain forwarding at Layer 2. The three-layer interconnection module is used to interconnect the two bridge-domains at layer three via VRF-0; the inner packet processing module is used to perform packet encapsulation and decapsulation in the inner VXLAN of bridge-domain-1; and the outer packet processing module is used to perform packet encapsulation and decapsulation in the outer VXLAN of bridge-domain-2.

9. An electronic device, characterized in that, It includes a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the program to implement the steps in a VPP-based dual-layer VXLAN tunneling encapsulation method as described in any one of claims 1-7.

10. A readable storage medium, characterized in that, The readable storage medium stores a computer program adapted for loading by a processor to perform the steps in a VPP-based dual-layer VXLAN tunneling encapsulation method as described in any one of claims 1-7.

Images