In-cloud and out-of-cloud communication method and device, electronic equipment and computer readable storage medium

Abstract

The application discloses a cloud-in and cloud-out communication method and device, electronic equipment and computer readable medium, which are applied to a cloud-in network node, a cloud-in control node and a switch are connected with the cloud-in network node, the switch is connected with a cloud-in computing node; the cloud-in control node is provided with an event monitoring component, the cloud-in network node is provided with an event response component, a routing component and a routing publishing component; the method comprises the following steps: receiving routing data obtained by the cloud-in control node through the event monitoring component for monitoring a corresponding database; generating routing change information based on the routing data through the event response component and publishing the routing change information to the routing component; updating routing table items in the switch by using the routing change information through the routing publishing component, so that the cloud-in computing node performs cloud-out communication through the updated routing table items; and the routing publishing component and the switch have a neighbor relationship established in advance. The technical scheme realizes more accurate and efficient routing configuration, and further realizes more rapid and efficient cloud-in and cloud-out communication.

Description

Technical Field

[0001] This application relates to the field of cloud service technology, and in particular to a cloud-internal and external communication method, as well as a cloud-internal and external communication device, electronic device, and computer-readable storage medium. Background Technology

[0002] In the current era of booming cloud computing and cloud services, both corporate and personal businesses are migrating to the cloud. Cloud services provide virtualization services, and business operations rely heavily on network forwarding. Rapid data forwarding forms the foundation for cloud service performance. When a virtual machine within a cloud service needs to access the external cloud, for security reasons, based on the isolation mechanism (the internal and external clouds cannot communicate directly), it needs to go through a specific network node for special processing before accessing the external cloud. Similarly, access from the external cloud to the internal cloud also requires going through a network node.

[0003] In related technologies, communication between virtual machines within the cloud and the internet typically uses routing. However, routing requires manual addition of routing table entries to physical routing devices to establish connections between the cloud and external networks. It relies on manually configured static routes to establish links. For cloud private line scenarios, where cloud IP addresses are used directly to access other cloud data centers, corresponding static routing table entries need to be configured on the physical routers according to address planning. Clearly, this approach requires operations personnel to be proficient in configuring equipment from different manufacturers. Furthermore, as the number of cloud and external networks to be connected increases, the repetitive manual operations linearly accumulate, resulting in low configuration efficiency and a high risk of errors.

[0004] Therefore, how to achieve more accurate and efficient routing configuration, and thus achieve faster and more efficient communication between the cloud and other systems, is a problem that urgently needs to be solved by those skilled in the art. Summary of the Invention

[0005] The purpose of this application is to provide a cloud-internal and external communication method that can achieve more accurate and efficient routing configuration, thereby enabling faster and more efficient cloud-internal and external communication. Another purpose of this application is to provide a cloud-internal and external communication device, electronic device, and computer-readable storage medium, all of which have the above-mentioned beneficial effects.

[0006] Firstly, this application provides a cloud-internal / external communication method applied to a cloud-internal network node, wherein a cloud-internal control node and a switch are both connected to the cloud-internal network node, and the switch is also connected to a cloud-internal computing node; wherein the cloud-internal control node is equipped with an event monitoring component, and the cloud-internal network node is equipped with an event response component, a routing component, and a route publishing component; the method includes:

[0007] The system receives routing data sent by the cloud control node through the event monitoring component; wherein the routing data is obtained by the event monitoring component through monitoring the database in the cloud control node, and the database is used to store the routing data obtained by the cloud control node.

[0008] The event response component generates route change information based on the route data and publishes the route change information to the route component.

[0009] The routing publishing component updates the routing table entries in the switch using the routing change information in the routing component, so that the cloud computing node can communicate with the outside world through the updated routing table entries; wherein, the routing publishing component and the switch have a pre-established neighbor relationship.

[0010] Optionally, the step of generating route change information based on the route data through the event response component and publishing the route change information to the route component includes:

[0011] The event response component extracts information from the routing data to obtain access subnet information, gateway address information, and routing instruction types; wherein, the routing instruction types include issuing routing instructions, modifying routing instructions, and revoking routing instructions.

[0012] The routing change information is generated based on the subnet information, the gateway address information, and the routing instruction class, and then the routing change information is published to the routing component.

[0013] Optionally, updating the routing table entries in the switch using the routing change information in the routing component through the routing advertising component includes:

[0014] When the routing instruction type is the published routing instruction, the routing change information in the routing component is added to the routing table entry in the switch through the routing publication component;

[0015] When the routing instruction type is "change route change", the routing publishing component determines the original routing information corresponding to the route change information in the routing table entry of the switch through the routing publication component, and changes the original routing information to the route change information.

[0016] When the routing instruction type is the revoked routing instruction, the routing publishing component determines the original routing information corresponding to the routing change information in the routing table entry of the switch, and deletes the original routing information.

[0017] Optionally, the cloud control node is further equipped with a border gateway protocol plugin, which is used to provide the cloud control node with call interface services;

[0018] The interface service includes one or more combinations of creating a border gateway protocol service, modifying a border gateway protocol service, deleting a border gateway protocol service, publishing a route service, changing a route service, canceling a route service, adding a border gateway protocol neighbor service, and deleting a border gateway protocol service.

[0019] The published routing service, the modified routing service, and the canceled routing service are used to enable the cloud control node to obtain the routing data.

[0020] The Create Border Gateway Protocol (BGP) service, Modify Border Gateway Protocol (BGP) service, and Delete Border Gateway Protocol (BGP) service are used to enable the cloud control node to obtain the first BGP configuration data; the first BGP configuration data is used to perform instance change operations on the BGP instances in the routing component and the switch.

[0021] The Add Border Gateway Protocol Neighbor Service and the Delete Border Gateway Protocol Service are used to enable the cloud control node to obtain the second border gateway protocol configuration data; the second border gateway protocol configuration data is used to perform relationship change operations on the neighbor relationship between the routing component and the switch.

[0022] Optionally, the cloud-internal and external communication method further includes:

[0023] The system receives first border gateway protocol configuration data and / or second border gateway protocol configuration data sent by the cloud control node through the event monitoring component; wherein the first border gateway protocol configuration data and / or second border gateway protocol configuration data are obtained by the event monitoring component through monitoring the database in the cloud control node, and the database is also used to store the first border gateway protocol configuration data and / or second border gateway protocol configuration data obtained by the cloud control node.

[0024] The event response component publishes the first border gateway protocol configuration data and / or the second border gateway protocol configuration data to the routing publication component and the switch, so that the routing publication component and the switch perform instance change operations based on the first border gateway protocol configuration data, and / or perform relationship change operations based on the second border gateway protocol configuration data.

[0025] Optionally, the cloud-internal and external communication method further includes:

[0026] Receive the first message sent by the switch, the first message being generated by the switch based on the initial message sent from outside the cloud;

[0027] The destination address is obtained by parsing the first message, and the first message is sent to the cloud computing node corresponding to the destination address;

[0028] The generation process of the first message includes:

[0029] The switch parses the initial destination address from the initial message, determines the destination address corresponding to the initial destination address by querying the local routing table entry, and generates the first message using the destination address and the message content of the initial message.

[0030] Optionally, the cloud-internal and external communication method further includes:

[0031] Receive the second message sent by the cloud computing node;

[0032] The second message is forwarded to the switch, so that the switch generates a third message based on the second message and sends it to the outside of the cloud;

[0033] The generation process of the third message includes:

[0034] The switch parses the original destination address from the second message, determines the external destination address corresponding to the original destination address by querying the local routing table, and generates the third message using the external destination address and the message content of the second message.

[0035] Secondly, this application also discloses a cloud-internal / external communication device applied to a cloud-internal network node, wherein a cloud-internal control node and a switch are both connected to the cloud-internal network node, and the switch is also connected to a cloud-internal computing node; wherein the cloud-internal control node is equipped with an event monitoring component, and the cloud-internal network node is equipped with an event response component, a routing component, and a route publishing component; the device includes:

[0036] A receiving module is used to receive routing data sent by the cloud control node through the event monitoring component; wherein the routing data is obtained by the event monitoring component monitoring the database in the cloud control node, and the database is used to store the routing data obtained by the cloud control node;

[0037] The publishing module is used to generate route change information based on the route data through the event response component, and publish the route change information to the route component;

[0038] The update module is used to update the routing table entries in the switch using the routing change information in the routing component through the routing publication component, so that the cloud computing node can communicate with the outside cloud through the updated routing table entries; wherein, the routing publication component and the switch have a pre-established neighbor relationship.

[0039] Thirdly, this application also discloses an electronic device, comprising:

[0040] Memory, used to store computer programs;

[0041] A processor, used to execute the computer program to implement any of the cloud-to-internal / external communication methods described above.

[0042] Fourthly, this application also discloses a computer-readable storage medium storing a computer program, which, when executed by a processor, implements the steps of any of the cloud-to-internal communication methods described above.

[0043] This application provides a cloud-internal / external communication method applied to a cloud-internal network node. A cloud-internal control node and a switch are both connected to the cloud-internal network node, and the switch is also connected to a cloud-internal computing node. The cloud-internal control node includes an event monitoring component, and the cloud-internal network node includes an event response component, a routing component, and a route publishing component. The method includes: receiving routing data sent by the cloud-internal control node through the event monitoring component; wherein the routing data is obtained by the event monitoring component monitoring a database in the cloud-internal control node, and the database stores the routing data obtained by the cloud-internal control node; generating routing change information based on the routing data through the event response component and publishing the routing change information to the routing component; updating the routing table entries in the switch using the routing change information in the routing component through the route publishing component, so that the cloud-internal computing node can communicate with the external cloud through the updated routing table entries; wherein the route publishing component and the switch have a pre-established neighbor relationship.

[0044] By applying the technical solution provided in this application, an event monitoring component is set up in the cloud master control node to automatically monitor the database of the cloud master control node and send routing data to the cloud network node when a routing data change event is detected in the database. Furthermore, an event response component, a routing component, and a routing publication component are set up in the cloud network node, and these three components work together to generate and publish routing change information, thereby updating the routing table entries in the switch. This achieves automated routing publication, enabling communication between the cloud and the outside world based on the updated routing table entries. Clearly, this technical solution achieves automated routing publication without manual intervention, eliminating reliance on manual processes and thus enabling more accurate and efficient routing configuration, further achieving faster and more efficient communication between the cloud and the outside world.

[0045] In one embodiment of this application, BGP technology is used to create neighbor relationships between the routing publishing component and the switch in the cloud network node. This enables real-time synchronization of various data information (various routing data, various border gateway protocol configuration data, etc.) between the routing publishing component and the switch based on the neighbor relationship, effectively improving routing publishing efficiency and thus facilitating faster and more efficient communication between the cloud and the outside world. Furthermore, multiple API call services can be implemented simply by integrating a BGP plugin, making device deployment simpler and more efficient.

[0046] The cloud-to-internal and external communication devices, electronic devices, and computer-readable storage media provided in this application also have the aforementioned technical effects, and will not be described in detail here. Attached Figure Description

[0047] To more clearly illustrate the technical solutions in the prior art and the embodiments of this application, the accompanying drawings used in the description of the prior art and the embodiments of this application will be briefly introduced below. Of course, the accompanying drawings described below with respect to the embodiments of this application are only a part of the embodiments in this application. For those skilled in the art, other drawings can be obtained based on the provided drawings without creative effort, and such other drawings also fall within the protection scope of this application.

[0048] Figure 1 This application provides a schematic diagram of the structure of an intra-cloud communication system.

[0049] Figure 2 A flowchart illustrating a cloud-internal / external communication method provided in this application;

[0050] Figure 3 A schematic diagram of another cloud-to-internal / external communication system provided in this application;

[0051] Figure 4 A schematic diagram of a cloud-to-internal and external communication device provided in this application;

[0052] Figure 5 This is a schematic diagram of the structure of an electronic device provided in this application. Detailed Implementation

[0053] The core of this application is to provide a cloud-internal and external communication method, which can achieve more accurate and efficient routing configuration, thereby achieving faster and more efficient cloud-internal and external communication; another core aspect of this application is to provide a cloud-internal and external communication device, electronic device, and computer-readable storage medium, all of which have the aforementioned beneficial effects.

[0054] To provide a clearer and more complete description of the technical solutions in the embodiments of this application, the technical solutions in the embodiments of this application will be described below with reference to the accompanying drawings. Obviously, the described embodiments are only a part of the embodiments of this application, and not all of them. All other embodiments obtained by those skilled in the art based on the embodiments of this application without creative effort are within the scope of protection of this application.

[0055] Please refer to Figure 1 , Figure 1 This is a schematic diagram of a cloud-internal / external communication system provided in this application. The system may include: a cloud-internal control node, a cloud-internal network node, a cloud-internal computing node, and a switch. The cloud-internal control node and the switch are both connected to the cloud-internal network node, the cloud-internal computing node is connected to the switch, and the switch is connected to the outside of the cloud. The cloud-internal control node is equipped with an event monitoring component, and the cloud-internal network node is equipped with an event response component, a routing component, and a route publishing component. The cloud-internal / external communication method provided in this application embodiment is implemented based on this cloud-internal / external communication system.

[0056] This application provides a cloud-internal / external communication method.

[0057] Please refer to Figure 2 , Figure 2 This is a flowchart illustrating a cloud-internal / external communication method provided in this application. This cloud-internal / external communication method is applied to... Figure 1 The cloud network nodes shown may include S101 to S103 as follows.

[0058] S101: Receive routing data sent by the cloud control node through the event monitoring component; wherein, the routing data is obtained by the event monitoring component monitoring the database in the cloud control node, and the database is used to store the routing data obtained by the cloud control node;

[0059] This step aims to acquire routing data. Specifically, operators can publish routing data through the cloud control node. The content of this published routing data is not unique; it may include information about adding new routes or modifying or deleting old routes, depending on the actual business operation requirements. The cloud control node originally deploys service components and a database. The service components handle data transmission and reception, and the database stores transmitted and received data. An event monitoring component is added to the cloud control node to automatically monitor change events occurring in the database. Therefore, when the cloud control node receives routing data through the service component and saves it to the database, the event monitoring component will detect this change in the database, obtain the routing information, and forward it to the cloud network node for further processing to achieve route publication.

[0060] S102: Generate route change information based on routing data through the event response component, and publish the route change information to the routing component;

[0061] This step aims to generate and publish route change information. Specifically, the cloud network nodes are equipped with an event response component, a routing component, and a route publishing component. The event response component can receive route change information. In other words, the event monitoring component in the cloud control node sends the monitored routing data to the event response component of the cloud network node, enabling the event response component to generate route change information based on this routing data and further distribute it to the routing component for storage.

[0062] It should be noted that the specific types of components deployed in either the cloud control node or the cloud network node do not affect the implementation of this technical solution, as long as the corresponding functions are achieved; this application does not impose any limitations on this. In one possible implementation, the service component in the cloud monitoring node can be Neutron server, the database can be Neutron DB, the event monitoring component can be OVN SB DB, the event response component in the cloud network node can be OVN-BGP-AGENT, the routing component can be Bgp-VRF, and the route publishing component can be FRR. Neutron is the component in the OpenStack project (a cloud computing open-source infrastructure project) responsible for providing network services; OVN (OpenVirtual Network) is a distributed controller; BGP (Border Gateway Protocol) is a border gateway protocol; VRF (Virtual Routing and Rorwarding) is virtual routing and forwarding; a VRF can be understood as an independent router; and FRR is a full-featured, high-performance, free IP routing software suite in the Ethernet communication field that can implement all standard routing protocols.

[0063] In one embodiment of this application, the above-mentioned generation of route change information based on routing data by the event response component and the publication of the route change information to the routing component may include:

[0064] The event response component extracts information from the routing data to obtain access subnet information, gateway address information, and routing command types; among which, the routing command types include publishing routing commands, modifying routing commands, and revoking routing commands.

[0065] Based on the subnet information, gateway address information, and routing command type, generate routing change information and publish the routing change information to the routing component.

[0066] This application provides a method for generating route change information based on routing data. Specifically, to achieve accurate route advertising, the routing data itself should include access subnet information, gateway address information, and routing command types. Access subnet information refers to the information related to the subnet of the access gateway router, gateway address information is the address information of the network router, and routing command types include route publishing commands (publishing new routes), route modification commands (modifying old routes), and route cancellation commands (deleting old routes). Based on this, the event response component can obtain the above types of information through information extraction and generate route change information based on this information, which is then published to the routing component.

[0067] S103: The routing table entries in the switch are updated by using the routing change information in the routing component through the routing advertisement component, so that the computing nodes inside the cloud can communicate with the outside cloud through the updated routing table entries; wherein, the routing advertisement component and the switch have a neighbor relationship established in advance.

[0068] This step aims to update the routing table entries in the switch, enabling route advertising to further facilitate communication between the cloud and external environments. Specifically, the route advertising component in the cloud network node can read route change information from the routing component and update the routing table entries in the switch accordingly, thus obtaining the updated routing table entries and achieving route advertising. Based on this, cloud nodes can then communicate with the external environment through these updated routing table entries, enabling cloud compute nodes to access external environments and vice versa, achieving data communication between the cloud and the external environment.

[0069] In addition, the routing publishing component and the switch have pre-established neighbor relationships. Based on this neighbor relationship, the routing publishing component and the switch can directly synchronize configuration data and related change data, making data interaction faster and more efficient. This helps to achieve faster and more efficient routing publishing, thereby improving the efficiency of communication inside and outside the cloud.

[0070] In one embodiment of this application, the above-mentioned updating of routing table entries in the switch using routing change information in the routing component through the routing advertisement component may include:

[0071] When the routing instruction type is a published routing instruction, the routing change information in the routing component is added to the routing table entry in the switch through the routing publication component.

[0072] When the routing instruction type is "Route Change", the routing advertising component determines the original routing information corresponding to the route change information in the routing table entry of the switch, and changes the original routing information to the route change information.

[0073] When the routing instruction type is a route cancellation instruction, the route advertising component determines the original routing information corresponding to the route change information in the routing table entry of the switch and deletes the original routing information.

[0074] This application provides a method for updating routing table entries based on routing information. The update operation includes publishing a route, modifying a route, and deleting a route. Correspondingly, publishing a route is used to add a new route that did not originally exist in the routing table entry, modifying a route is used to modify one or more old routes that originally existed in the routing table entry, and deleting a route is used to delete one or more old routes that originally existed in the routing table entry.

[0075] As can be seen, the cloud-internal / internal communication method provided in this application sets up an event monitoring component in the cloud master node to automatically monitor the database of the cloud master node, and sends routing data to the cloud network node when a routing data change event is detected in the database. Furthermore, an event response component, a routing component, and a routing publication component are set up in the cloud network node, and these three components work together to generate and publish routing change information, thereby updating the routing table entries in the switch. This achieves automated routing publication, enabling cloud-internal / internal communication based on the updated routing table entries. Clearly, this technical solution achieves automated routing publication without manual intervention, eliminating reliance on manual intervention, and thus achieving more accurate and efficient routing configuration, further enabling faster and more efficient cloud-internal / internal communication.

[0076] Based on the above embodiments:

[0077] In one embodiment of this application, the cloud control node is further provided with a border gateway protocol plugin, which is used to provide the cloud control node with call interface services;

[0078] The API call service includes one or more combinations of creating a border gateway protocol service, modifying a border gateway protocol service, deleting a border gateway protocol service, publishing a route service, changing a route service, canceling a route service, adding a border gateway protocol neighbor service, and deleting a border gateway protocol service.

[0079] Among them, publishing routing services, modifying routing services, and canceling routing services are used to enable cloud control nodes to obtain routing data;

[0080] The creation, modification, and deletion of border gateway protocol services are used to enable cloud control nodes to obtain the first border gateway protocol configuration data; the first border gateway protocol configuration data is used to perform instance change operations on border gateway protocol instances in routing components and switches.

[0081] Adding and deleting border gateway protocol neighbor services are used to enable cloud control nodes to obtain second border gateway protocol configuration data; the second border gateway protocol configuration data is used to perform relationship change operations on the neighbor relationship between routing components and switches.

[0082] Specifically, the cloud control node also has a Border Gateway Protocol (BGP) plugin. This plugin can be configured in the service components of the cloud control node, providing users with various types of API interfaces to implement different service types, including but not limited to: creating a BGP service (obtaining the first BGP configuration data for creating a BGP instance based on this service interface), modifying a BGP service (obtaining the first BGP configuration data for modifying a BGP instance based on this service interface), deleting a BGP service (obtaining the first BGP configuration data for deleting a BGP instance based on this service interface), publishing a route service (obtaining the routing data of the new route to be created based on this service interface), changing a route service (obtaining the routing data of the old route to be changed based on this service interface), revoking a route service (obtaining the routing data of the old route to be deleted based on this service interface), adding a BGP neighbor service (obtaining the second BGP configuration data for creating a neighbor relationship between the route publishing component of the cloud network node and the switch based on this service interface), and deleting a BGP service (obtaining the second BGP configuration data for deleting the neighbor relationship between the route publishing component of the cloud network node and the switch based on this service interface). Correspondingly, the instance change operations mentioned above include creating a BGP instance, modifying a BGP instance, and deleting a BGP instance; the relationship change operations include adding neighbor relationships and deleting neighbor relationships (neighbor relationships between the routing publishing components of network nodes in the cloud and switches).

[0083] As can be seen, in this embodiment, BGP technology is used to create neighbor relationships between the routing publishing component and the switch in the cloud network node. This enables real-time synchronization of various data information (various routing data, various border gateway protocol configuration data, etc.) between the routing publishing component and the switch based on the neighbor relationship, effectively improving routing publishing efficiency and thus facilitating faster and more efficient communication between the cloud and the outside world. Furthermore, multiple API services can be implemented simply by integrating a BGP plugin, making device deployment simpler and more efficient.

[0084] In one embodiment of this application, the cloud-internal / external communication method may further include:

[0085] Receive first border gateway protocol configuration data and / or second border gateway protocol configuration data sent by the cloud control node through the event monitoring component; wherein, the first border gateway protocol configuration data and / or second border gateway protocol configuration data are obtained by the event monitoring component monitoring the database in the cloud control node, and the database is also used to store the first border gateway protocol configuration data and / or second border gateway protocol configuration data obtained by the cloud control node;

[0086] The event response component publishes the first border gateway protocol configuration data and / or the second border gateway protocol configuration data to the routing publication component and the switch, so that the routing publication component and the switch perform instance change operations based on the first border gateway protocol configuration data, and / or perform relationship change operations based on the second border gateway protocol configuration data.

[0087] Specifically, the configuration data of the first and second border gateway protocols mentioned above are similar to the routing data mentioned above. They are also obtained by the service components in the cloud control node through the BGP plugin and saved to the database. The event monitoring component in the cloud control node also monitors the database, obtains the configuration data of the first and second border gateway protocols, and sends it to the cloud network nodes. Thus, the cloud network nodes can use the event response component to distribute it to the routing publication component and the switch to realize the corresponding instance change operation or relationship change operation.

[0088] As can be seen, in this embodiment, BGP technology is used to create neighbor relationships between the routing publishing component and the switch in the cloud network node. This enables real-time synchronization of various data information (various routing data, various border gateway protocol configuration data, etc.) between the routing publishing component and the switch based on the neighbor relationship, effectively improving routing publishing efficiency and thus facilitating faster and more efficient communication between the cloud and the outside world. Furthermore, multiple API services can be implemented simply by integrating a BGP plugin, making device deployment simpler and more efficient.

[0089] In one embodiment of this application, the cloud-internal / external communication method further includes:

[0090] Receive the first routing data sent by the cloud control node through the BGP plugin; wherein, the first routing data is received by the cloud control node through the BGP plugin;

[0091] The event response component generates first route change information based on the first route data and publishes the first route change information to the routing component.

[0092] The routing advertisement component updates the routing table entries in the switch using the first routing change information in the routing component, so that the computing nodes inside the cloud can communicate with the outside cloud through the updated routing table entries; wherein, the routing advertisement component and the switch have a neighbor relationship established in advance.

[0093] The cloud-internal and external communication method provided in this application embodiment can also realize cloud-internal and external communication based on different working modes. The working modes are divided into automatic route publishing mode (corresponding to S101 to S103) and manual route publishing mode, which allows users to customize the working mode according to their actual needs, so as to effectively improve the user experience. This application embodiment is used to implement the manual route publishing function.

[0094] Specifically, users can directly use the BGP plugin in the service component of the cloud control node to send the routing data to be published (i.e., the aforementioned first routing data) to the event response component of the cloud network node. This allows the event response component to continue with subsequent route publication according to steps S102 and S103, thereby enabling communication between the cloud and the local network. It should be noted that the above working mode selection can be customized by the user according to their actual needs. The corresponding settings can be made directly in the cloud control node. Based on these settings, the BGP plugin can determine whether to actively send the acquired first routing data to the event response component of the cloud network node.

[0095] In one embodiment of this application, the cloud-internal / external communication method may further include:

[0096] Receive the first message sent by the switch, which is generated by the switch based on the initial message sent from outside the cloud;

[0097] The destination address is obtained by parsing the first message, and the first message is sent to the cloud computing node corresponding to the destination address;

[0098] The generation process of the first message includes:

[0099] The switch parses the initial destination address from the initial message, determines the destination address corresponding to the initial destination address by querying the local routing table, and generates the first message using the destination address and the message content of the initial message.

[0100] This application provides a method for accessing cloud-internal nodes from outside the cloud. Specifically, when an external network needs to access a cloud-internal computing node, it will use a switch for routing conversion to achieve access. Therefore, the external network first sends a network packet (i.e., the initial packet mentioned above) to the switch. The switch then uses its local routing table entries to perform packet conversion on the initial packet to generate a first packet. Specifically, the packet conversion involves converting the destination address in the initial packet (the initial destination address) to the corresponding destination address in the local routing table entry. Further, the switch can then send the first packet to the cloud-internal computing node corresponding to the destination address, thus enabling external access to the cloud. The destination address can specifically be the virtual machine address of a cloud-internal computing node.

[0101] In one embodiment of this application, the cloud-internal / external communication method may further include:

[0102] Receive the second message sent by the cloud computing node;

[0103] The second message is forwarded to the switch, so that the switch can generate a third message based on the second message and send it to the outside of the cloud;

[0104] The generation process of the third message includes:

[0105] The switch parses the original destination address from the second packet, determines the corresponding external destination address by querying the local routing table, and generates a third packet using the external destination address and the packet content of the second packet.

[0106] This application provides a method for accessing external networks from within the cloud. Specifically, when a cloud-based computing node needs to access an external network, it will also use a switch for routing conversion to achieve access. Therefore, the cloud-based computing node will first send a network packet (i.e., the aforementioned second packet) to the switch. The switch will then use its local routing table entries to perform packet conversion on the second packet to generate a third packet. Here, packet conversion specifically involves converting the destination address (original destination address) in the second packet into the corresponding external destination address in the local routing table entry. Further, the switch can then send the third packet to the external network based on this external destination address, thus enabling cloud-based access to external networks.

[0107] Based on the above embodiments, this application provides another method for communication between the cloud and the local cloud.

[0108] First, please refer to Figure 3 , Figure 3This is a schematic diagram of another cloud-internal / internal communication system provided in this application. The system includes a cloud-internal control node, a cloud-internal network node, a cloud-internal computing node, and switches. The cloud-internal control node includes a Neutron server service component, a Neutron DB database, and an OVN SB DB event monitoring component. The Neutron server service component is further equipped with a BGP plugin. The cloud-internal network node includes an OVN-BGP-AGENT event response component, a Bgp-VRF routing component, a FRR route publishing component, and a router. It also includes a manage network interface card (manage), a business interface (bussiness), and an overlay network interface. The cloud-internal computing node includes multiple virtual machines (VM1, VM2, etc.) and an overlay network interface. The switches are specifically leaf-spine switches, including leaf switches and spine switches. In this system, cloud network nodes are connected to the leaf-spine switch via various network cards or interfaces (management network card, business interface, and overlay network interface), cloud computing nodes are connected to the leaf-spine switch via the overlay network interface, and the leaf-spine switch is connected to the external cloud network.

[0109] Furthermore, based on Figure 3 The cloud-internal and external communication system shown in this application embodiment is implemented as follows:

[0110] 1. The cloud control node runs Neutron server and BGP plugin. The BGP plugin provides users with various types of API interfaces, which are used to distribute various types of BGP configuration data and routing data.

[0111] 2. The BGP plugin is responsible for storing and maintaining BGP configuration data and routing data in the Neutron DB database; and / or distributing BGP configuration data and routing data to the OVN-BGP-AGENT of the network nodes within the cloud. The BGP configuration data may specifically include the domain ID, Router-ID, BGP peer domain ID, and peer Router-Id.

[0112] 3. OVN SB DB runs on the cloud control node, which can monitor the Neutron DB database and notify the cloud network nodes of any changes that occur. The OVN-BGP-AGENT then captures the event messages.

[0113] 4. The OVN-BGP-AGENT runs on a network node within the cloud. It can receive BGP configuration data from the BGP plugin and distribute it to the FRR suite, enabling the BGP instances in the FRR suite to establish neighbor relationships with the BGP instances in the Spine switch. Figure 3 (The short dashed line connecting FRR and spine is shown).

[0114] 5. The OVN-BGP-AGENT runs on a network node within the cloud and can directly receive routing data from the BGP plugin and update it in the associated Bgp-VRF (manual operation option).

[0115] 6. OVN-BGP-AGENT runs on a network node within the cloud. It can capture routing data sent by OVN SB DB, identify the subnet information, gateway address, and data type of the access gateway router, and synchronously update it in Bgp-VRF.

[0116] 7. The FRR suite is also responsible for reading the aforementioned route change information from Bgp-VRF and publishing it to the leaf-spine switch via the management NIC of the cloud network nodes to update the routing table entries (adding routes, changing routes, deleting routes, etc.). An example of the route format for FRR announcements is "dst:1.1.1.0 / 24next_hop:100.18.35.118".

[0117] 8. The communication traffic paths inside and outside the cloud are as follows ( Figure 3 (The long dashed line passing through the router is shown):

[0118] (1) Taking accessing a virtual machine inside the cloud from outside the cloud as an example, the packet for accessing the virtual machine from outside the cloud first arrives at the Spine switch, and the destination address is the subnet address (1.1.1.0 / 24) inside the cloud.

[0119] (2) Locate the routing table entry in the Spine switch to find the address that matches the destination address 1.1.1.0 / 24. If the next hop is found to be the gateway IP (100.18.35.118), then forward the packet to the gateway node where 100.18.35.118 is located.

[0120] (3) After receiving the message, the gateway node hands it over to the virtual router in the cloud for processing. After matching the destination address of the message to the address of the 1.1.1.0 / 24 network segment, the gateway node injects the message into the tunnel network and the message reaches the virtual machine in the cloud through the tunnel network.

[0121] (4) The message path returned by the virtual machine in the cloud is the same as the path mentioned above.

[0122] As can be seen, the cloud-internal / internal communication method provided in this application sets up an event monitoring component in the cloud master node to automatically monitor the database of the cloud master node, and sends routing data to the cloud network node when a routing data change event is detected in the database. Furthermore, an event response component, a routing component, and a routing publication component are set up in the cloud network node, and these three components work together to generate and publish routing change information, thereby updating the routing table entries in the switch. This achieves automated routing publication, enabling cloud-internal / internal communication based on the updated routing table entries. Clearly, this technical solution achieves automated routing publication without manual intervention, eliminating reliance on manual intervention, and thus achieving more accurate and efficient routing configuration, further enabling faster and more efficient cloud-internal / internal communication.

[0123] This application provides a cloud-internal and external communication device.

[0124] Please refer to Figure 4 , Figure 4 This application provides a schematic diagram of a cloud-internal / external communication device. This device is applied to a cloud-internal network node, where both a cloud-internal control node and a switch are connected. The switch is also connected to a cloud-internal computing node. The cloud-internal control node includes an event monitoring component, and the cloud-internal network node includes an event response component, a routing component, and a route publishing component. The device includes:

[0125] The receiving module 1 is used to receive routing data sent by the cloud control node through the event monitoring component; wherein, the routing data is obtained by the event monitoring component monitoring the database in the cloud control node, and the database is used to store the routing data obtained by the cloud control node.

[0126] Module 2 is used to generate route change information based on routing data through the event response component and publish the route change information to the routing component;

[0127] Update module 3 is used to update the routing table entries in the switch by using the routing change information in the routing component through the routing advertisement component, so that the computing nodes in the cloud can communicate with the outside world through the updated routing table entries; wherein, the routing advertisement component and the switch have a neighbor relationship established in advance.

[0128] As can be seen, the cloud-internal / internal communication device provided in this application embodiment sets up an event monitoring component in the cloud-internal master control node to automatically monitor the database of the cloud-internal master control node, and sends routing data to the cloud-internal network node when a routing data change event is detected in the database. Furthermore, an event response component, a routing component, and a routing publication component are set up in the cloud-internal network node, and these three components combine to generate and publish routing change information, thereby updating the routing table entries in the switch. This achieves automated routing publication, enabling cloud-internal / internal communication based on the updated routing table entries. Clearly, this technical solution achieves automated routing publication without manual intervention, eliminating reliance on manual intervention, and thus achieving more accurate and efficient routing configuration, further enabling faster and more efficient cloud-internal / internal communication.

[0129] In one embodiment of this application, the publishing module 2 can be specifically used to extract information from routing data through an event response component to obtain access subnet information, gateway address information, and routing instruction type; wherein, the routing instruction type includes publishing routing instruction, changing routing instruction, and canceling routing instruction; generating routing change information based on the access subnet information, gateway address information, and routing instruction type, and publishing the routing change information to the routing component.

[0130] In one embodiment of this application, the update module 3 can be specifically used to add the routing change information in the routing component to the routing table entry in the switch when the routing instruction type is to publish a routing instruction; when the routing instruction type is to change a routing change, the routing component determines the original routing information corresponding to the routing change information in the routing table entry in the switch and changes the original routing information to the routing change information; when the routing instruction type is to revoke a routing instruction, the routing component determines the original routing information corresponding to the routing change information in the routing table entry in the switch and deletes the original routing information.

[0131] In one embodiment of this application, the cloud control node is further provided with a border gateway protocol plugin, which is used to provide the cloud control node with call interface services;

[0132] The API call service includes one or more combinations of creating a border gateway protocol service, modifying a border gateway protocol service, deleting a border gateway protocol service, publishing a route service, changing a route service, canceling a route service, adding a border gateway protocol neighbor service, and deleting a border gateway protocol service.

[0133] Among them, publishing routing services, modifying routing services, and canceling routing services are used to enable cloud control nodes to obtain routing data;

[0134] The creation, modification, and deletion of border gateway protocol services are used to enable cloud control nodes to obtain the first border gateway protocol configuration data; the first border gateway protocol configuration data is used to perform instance change operations on border gateway protocol instances in routing components and switches.

[0135] Adding and deleting border gateway protocol neighbor services are used to enable cloud control nodes to obtain second border gateway protocol configuration data; the second border gateway protocol configuration data is used to perform relationship change operations on the neighbor relationship between routing components and switches.

[0136] In one embodiment of this application, the cloud-internal / external communication device may further include a configuration module for receiving first border gateway protocol configuration data and / or second border gateway protocol configuration data sent by the cloud-internal control node through an event monitoring component; wherein the first border gateway protocol configuration data and / or second border gateway protocol configuration data are obtained by the event monitoring component monitoring the database in the cloud-internal control node, and the database is also used to store the first border gateway protocol configuration data and / or second border gateway protocol configuration data obtained by the cloud-internal control node; the first border gateway protocol configuration data and / or second border gateway protocol configuration data are published to the routing publishing component and the switch through the event response component, so that the routing publishing component and the switch perform instance change operations according to the first border gateway protocol configuration data, and / or perform relationship change operations according to the second border gateway protocol configuration data.

[0137] In one embodiment of this application, the cloud-internal and external communication device may further include a first communication module, which is used to receive a first message sent by the switch, the first message being generated by the switch based on an initial message sent from outside the cloud; to parse the destination address from the first message and send the first message to the cloud-internal computing node corresponding to the destination address;

[0138] The process of generating the first message includes: the switch parses the initial destination address from the initial message, determines the destination address corresponding to the initial destination address by querying the local routing table, and generates the first message using the destination address and the message content of the initial message.

[0139] In one embodiment of this application, the cloud-inside / outside communication device may further include a second communication module for receiving a second message sent by a cloud computing node; forwarding the second message to a switch, so that the switch generates a third message based on the second message and sends it outside the cloud;

[0140] The process of generating the third message includes: the switch parses the original destination address from the second message, determines the external destination address corresponding to the original destination address by querying the local routing table entry, and generates the third message using the external destination address and the message content of the second message.

[0141] For a description of the apparatus provided in the embodiments of this application, please refer to the above method embodiments; further details will not be repeated here.

[0142] This application provides an electronic device.

[0143] Please refer to Figure 5 , Figure 5 This application provides a schematic diagram of the structure of an electronic device, which may include:

[0144] Memory, used to store computer programs;

[0145] A processor is used to execute computer programs to implement the steps of any of the cloud-to-internal or external communication methods described above.

[0146] like Figure 5 The diagram shows the structural composition of an electronic device, which may include a processor 10, a memory 11, a communication interface 12, and a communication bus 13. The processor 10, memory 11, and communication interface 12 all communicate with each other through the communication bus 13.

[0147] In this embodiment, the processor 10 may be a central processing unit (CPU), an application-specific integrated circuit, a digital signal processor, a field-programmable gate array, or other programmable logic devices.

[0148] The processor 10 can call the program stored in the memory 11. Specifically, the processor 10 can execute the operations in the embodiment of the cloud-internal and external communication method.

[0149] The memory 11 is used to store one or more programs. The programs may include program code, which includes computer operation instructions. In this embodiment, the memory 11 stores at least a program for implementing the following functions:

[0150] Receive routing data sent by the cloud control node through the event monitoring component; the routing data is obtained by the event monitoring component by monitoring the database in the cloud control node, and the database is used to store the routing data obtained by the cloud control node.

[0151] The event response component generates route change information based on the route data and publishes the route change information to the route component.

[0152] The routing advertisement component updates the routing table entries in the switch using the routing change information in the routing component, so that the computing nodes inside the cloud can communicate with the outside cloud through the updated routing table entries; the routing advertisement component and the switch have a pre-established neighbor relationship.

[0153] In one possible implementation, the memory 11 may include a program storage area and a data storage area, wherein the program storage area may store the operating system and applications required for at least one function; and the data storage area may store data created during use.

[0154] In addition, memory 11 may include high-speed random access memory, and may also include non-volatile memory, such as at least one disk storage device or other volatile solid-state storage device.

[0155] Communication interface 12 can be an interface for the communication module, used to connect with other devices or systems.

[0156] Of course, it should be noted that, Figure 5 The structure shown does not constitute a limitation on the electronic device in the embodiments of this application. In practical applications, the electronic device may include more than Figure 5 More or fewer components as shown, or combinations of certain components.

[0157] This application provides a computer-readable storage medium.

[0158] The computer-readable storage medium provided in this application embodiment stores a computer program, which, when executed by a processor, can implement the steps of any of the cloud-internal / external communication methods described above.

[0159] The computer-readable storage medium may include various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0160] For a description of the computer-readable storage medium provided in the embodiments of this application, please refer to the above method embodiments; further details will not be repeated here.

[0161] The various embodiments in this specification are described in a progressive manner, with each embodiment focusing on its differences from other embodiments. Similar or identical parts between embodiments can be referred to interchangeably. For the apparatus disclosed in the embodiments, since it corresponds to the method disclosed in the embodiments, the description is relatively simple; relevant parts can be referred to the method section.

[0162] Those skilled in the art will further recognize that the units and algorithm steps of the various examples described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of both. To clearly illustrate the interchangeability of hardware and software, the components and steps of the various examples have been generally described in terms of functionality in the foregoing description. Whether these functions are implemented in hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this application.

[0163] The steps of the methods or algorithms described in conjunction with the embodiments disclosed herein can be implemented directly by hardware, a software module executed by a processor, or a combination of both. The software module can be located in random access memory (RAM), main memory, read-only memory (ROM), electrically programmable ROM, electrically erasable programmable ROM, registers, hard disk, removable disk, CD-ROM, or any other form of storage medium known in the art.

[0164] The technical solutions provided in this application have been described in detail above. Specific examples have been used to illustrate the principles and implementation methods of this application. The descriptions of the embodiments above are only for the purpose of helping to understand the methods and core ideas of this application. It should be noted that those skilled in the art can make several improvements and modifications to this application without departing from the principles of this application, and these improvements and modifications also fall within the protection scope of this application.

Claims

1. A cloud-internal / external communication method, characterized in that, The method is applied to cloud network nodes, where both cloud control nodes and switches are connected to the cloud network nodes, and the switches are also connected to cloud computing nodes; wherein, the cloud control node is equipped with an event monitoring component, and the cloud network nodes are equipped with an event response component, a routing component, and a route publishing component; the method includes: The system receives routing data sent by the cloud control node through the event monitoring component; wherein the routing data is obtained by the event monitoring component through monitoring the database in the cloud control node, and the database is used to store the routing data obtained by the cloud control node. The event response component generates route change information based on the route data and publishes the route change information to the route component. The routing publishing component updates the routing table entries in the switch using the routing change information in the routing component, so that the cloud computing node can communicate with the outside world through the updated routing table entries; wherein, the routing publishing component and the switch have a pre-established neighbor relationship.

2. The cloud-internal / external communication method according to claim 1, characterized in that, The step of generating route change information based on the route data through the event response component and publishing the route change information to the route component includes: The event response component extracts information from the routing data to obtain access subnet information, gateway address information, and routing instruction types; wherein, the routing instruction types include issuing routing instructions, modifying routing instructions, and revoking routing instructions. The routing change information is generated based on the subnet information, the gateway address information, and the routing instruction class, and then the routing change information is published to the routing component.

3. The cloud-internal / external communication method according to claim 2, characterized in that, The step of updating the routing table entries in the switch using the routing change information in the routing component through the routing advertising component includes: When the routing instruction type is the published routing instruction, the routing change information in the routing component is added to the routing table entry in the switch through the routing publication component; When the routing instruction type is "change route change", the routing publishing component determines the original routing information corresponding to the route change information in the routing table entry of the switch through the routing publication component, and changes the original routing information to the route change information. When the routing instruction type is the revoked routing instruction, the routing publishing component determines the original routing information corresponding to the routing change information in the routing table entry of the switch, and deletes the original routing information.

4. The cloud-internal / external communication method according to any one of claims 1 to 3, characterized in that, The cloud control node is also equipped with a border gateway protocol plugin, which is used to provide the cloud control node with call interface services. The interface service includes one or more combinations of creating a border gateway protocol service, modifying a border gateway protocol service, deleting a border gateway protocol service, publishing a route service, changing a route service, canceling a route service, adding a border gateway protocol neighbor service, and deleting a border gateway protocol service. The published routing service, the modified routing service, and the canceled routing service are used to enable the cloud control node to obtain the routing data. The Create Border Gateway Protocol (BGP) service, Modify Border Gateway Protocol (BGP) service, and Delete Border Gateway Protocol (BGP) service are used to enable the cloud control node to obtain the first BGP configuration data; the first BGP configuration data is used to perform instance change operations on the BGP instances in the routing component and the switch. The Add Border Gateway Protocol Neighbor Service and the Delete Border Gateway Protocol Service are used to enable the cloud control node to obtain the second border gateway protocol configuration data; the second border gateway protocol configuration data is used to perform relationship change operations on the neighbor relationship between the routing component and the switch.

5. The cloud-internal / external communication method according to claim 4, characterized in that, The method further includes: The system receives first border gateway protocol configuration data and / or second border gateway protocol configuration data sent by the cloud control node through the event monitoring component; wherein the first border gateway protocol configuration data and / or second border gateway protocol configuration data are obtained by the event monitoring component through monitoring the database in the cloud control node, and the database is also used to store the first border gateway protocol configuration data and / or second border gateway protocol configuration data obtained by the cloud control node. The event response component publishes the first border gateway protocol configuration data and / or the second border gateway protocol configuration data to the routing publication component and the switch, so that the routing publication component and the switch perform instance change operations based on the first border gateway protocol configuration data, and / or perform relationship change operations based on the second border gateway protocol configuration data.

6. The cloud-internal / external communication method according to claim 1, characterized in that, The method further includes: Receive the first message sent by the switch, the first message being generated by the switch based on the initial message sent from outside the cloud; The destination address is obtained by parsing the first message, and the first message is sent to the cloud computing node corresponding to the destination address; The generation process of the first message includes: The switch parses the initial destination address from the initial message, determines the destination address corresponding to the initial destination address by querying the local routing table entry, and generates the first message using the destination address and the message content of the initial message.

7. The cloud-internal / external communication method according to claim 1, characterized in that, The method further includes: Receive the second message sent by the cloud computing node; The second message is forwarded to the switch, so that the switch generates a third message based on the second message and sends it to the outside of the cloud; The generation process of the third message includes: The switch parses the original destination address from the second message, determines the external destination address corresponding to the original destination address by querying the local routing table entry, and generates the third message using the external destination address and the message content of the second message.

8. A cloud-to-internal and external communication device, characterized in that, This device is applied to cloud network nodes, where both a cloud control node and a switch are connected to the cloud network node, and the switch is also connected to cloud computing nodes. The cloud control node includes an event monitoring component, and the cloud network node includes an event response component, a routing component, and a route publishing component. The device includes: A receiving module is used to receive routing data sent by the cloud control node through the event monitoring component; wherein the routing data is obtained by the event monitoring component monitoring the database in the cloud control node, and the database is used to store the routing data obtained by the cloud control node; The publishing module is used to generate route change information based on the route data through the event response component, and publish the route change information to the route component; The update module is used to update the routing table entries in the switch using the routing change information in the routing component through the routing publication component, so that the cloud computing node can communicate with the outside cloud through the updated routing table entries; wherein, the routing publication component and the switch have a pre-established neighbor relationship.

9. An electronic device, characterized in that, include: Memory, used to store computer programs; A processor for executing the computer program to implement the steps of the cloud-inside / outside communication method as described in any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores a computer program that, when executed by a processor, implements the steps of the cloud-to-internal and external communication method as described in any one of claims 1 to 7.

Images