A high availability implementation method and system for vpc gateway

Abstract

The present invention discloses a high availability implementation method of a vpc gateway, comprising the following steps: when a data packet is sent from an instance in a vpc, it first reaches a subnet router associated with the subnet where the instance is located, and the subnet router checks its routing table to determine whether the target address of the data packet is in the same vpc or needs to be sent to an external network through a vpc gateway; when the data packet needs to be sent to an external network, the subnet router forwards the data packet to a transit gateway of the vpc, and the transit gateway acts as a regional virtual router to route traffic between the vpc and the local network; a health check status module performs the following checks: checking whether the ovs service of the network forwarding module is abnormal, and checking whether the tunnel network from the gateway node to the back-end physical node is abnormal; a flow suppression module suppresses the current gateway node from receiving messages from non-service master nodes, and the flow suppression module is configured with an active suppression mode and a passive suppression mode. High availability of gateway service granularity is achieved.

Description

Technical Field

[0001] The present invention belongs to the technical field of virtual private cloud, and in particular to a high availability implementation method and system for a vpc gateway. Background Art

[0002] VPC (Virtual Private Cloud) is a user-defined logically isolated network space. Users can manage their own subnet structure, IP address range and allocation method, gateway service, security service, etc. in VPC. VPC gateway is used to connect the internal network of VPC and the external physical network to achieve interoperability between VPC and physical network.

[0003] The following technical solutions are usually used in existing technologies to achieve interoperability between VPC and physical network:

[0004] 1. Use control plane high availability, implement master selection through control plane logic, such as zk, etcd, and then configure the service on the master node. This method relies on control plane logic, has poor switching timeliness, and loses high availability when the control plane is abnormal.

[0005] 2. Use the Vrrp protocol to implement VIP selection and release on multiple nodes. However, the Vrrp protocol configuration is complex, there is a brain split, and the high-availability switching time is at least in seconds.

[0006] 3. Through the BGP protocol, by configuring different BGP priorities, VIP routing announcements on different nodes are realized. Similarly, the BGP configuration is complex and depends on the user's physical network routing equipment. Summary of the invention

[0007] To solve the above problems, the purpose of the present invention is to provide a high availability implementation method and system for a vpc gateway, which utilizes the forwarding capability of OvS (Open vSwitch, open virtual switching standard) and combines the logic of arp suppression and notification to achieve high availability of gateway service granularity between a group of two-node gateways.

[0008] The technical solution provided by the present invention is: a high-availability implementation method of a vpc gateway, a group of the vpc gateways has multiple gateway nodes, each service selects one of the gateway nodes as the main node and the other gateway nodes as hot standby nodes, each gateway node respectively maintains a health check status module, and each gateway node has a flow suppression module, comprising the following steps: when a data packet is sent from an instance in a vpc, it first reaches a subnet router associated with a subnet where the instance is located, and the subnet router checks its routing table to determine whether the target address of the data packet is in the same vpc or needs to be sent to an external network through the vpc gateway; when the data packet needs to be sent to an external network, the subnet router forwards the data packet to a transit gateway of the vpc, and the transit gateway acts as a regional virtual router to route traffic between the vpc and a local network; the health check status module performs the following checks: checking whether the ovs service of a network forwarding module is abnormal, and checking whether the tunnel network from the gateway node to the back-end physical node is abnormal; the flow suppression module suppresses the current gateway node from receiving messages of a non-service main node, and the flow suppression module is configured with an active suppression mode and a passive suppression mode.

[0009] Preferably, in the active suppression mode, the agent controller module actively sends down the suppression flow table. When the gateway node receives and replies to the ARP message, it will mark whether the currently replied service is the main service or the backup service at this gateway node. If it carries the mark of the backup service, it will be filtered by the active suppression flow table sent by the agent controller.

[0010] Preferably, in the passive suppression mode, the current gateway node receives an ARP reply message, and the message has the characteristics sent by the gateway service. The gateway service corresponding to the ARP reply message is detected to see whether it is marked as the main service in the current gateway. If not, a flow table is generated through the flow table learning mechanism to suppress the current service reply ARP, so that the gateway node will not attempt to take over the traffic corresponding to the current ARP.

[0011] Preferably, when the gateway node is abnormal, all service information is notified by the service notification module to try to take over all gateway services, wherein each gateway node has a service notification module: a garp message is generated in the agent controller, and the message is sent to the VLAN network corresponding to each service, and the information is sent to each physical node of the vpc, requiring the message sent from the vpc to be forwarded to this gateway.

[0012] Preferably, the service notification module periodically notifies only the main service node of the current gateway to refresh the external network status, so that some low-frequency communication traffic can be quickly connected.

[0013] Preferably, when both the current gateway node and the peer gateway node are healthy, the non-Leader service of the current gateway node is suppressed;

[0014] When the current gateway node is healthy and the peer gateway node is abnormal, the traffic is not suppressed and the VLAN & VPC side service is notified; if the heartbeat line is abnormal, the non-Leader node is suppressed at the service granularity;

[0015] When the current gateway node is abnormal and the peer gateway node is healthy, the peer node notifies to take over the traffic;

[0016] When both the current gateway node and the peer gateway node are abnormal, the data plane forwards the message automatically.

[0017] Among them, the current gateway node status is maintained by the health check module, and the peer gateway node status is maintained by the heartbeat message module.

[0018] Preferably, each of the plurality of gateway nodes in a group of the vpc gateways runs a session synchronization module, and uses udp data packets to synchronize the TCP, UDP, and ICMP connection information of each node to the peer node, so as to ensure that the connection is not interrupted when the vip is switched.

[0019] Based on the same concept, the present invention also provides a high-availability implementation system for a vpc gateway, wherein a group of the vpc gateways has multiple gateway nodes, each service selects one of the gateway nodes as the main node and the remaining gateway nodes as hot standby nodes, each gateway node maintains a health check status module, and each gateway node has a traffic suppression module, including:

[0020] A judgment module is used to determine whether the destination address of the data packet is within the same VPC or needs to be sent to an external network through a vpc gateway when the data packet is sent from the instance in the VPC.

[0021] A routing module, which is used for forwarding packets to the transit gateway of the VPC when packets need to be sent to the external network. The transit gateway acts as a regional virtual router to route traffic between the VPC and the local network.

[0022] The health check status module performs the following checks: Check whether the ovs service of the network forwarding module is abnormal, and check whether the tunnel network from the gateway node to the backend physical node is abnormal;

[0023] The traffic suppression module suppresses the current gateway node from receiving messages from non-service master nodes, and the traffic suppression module is configured with an active suppression mode and a passive suppression mode.

[0024] Based on the same concept, the present invention also provides an electronic device, comprising:

[0025] A memory, the memory being used to store a processing program;

[0026] A processor, wherein when executing the processing program, the processor implements the high availability implementation method of the vpc gateway described in any one of the above items.

[0027] Based on the same concept, the present invention also provides a readable storage medium, on which a processing program is stored. When the processing program is executed by a processor, the high availability implementation method of the vpc gateway described in any one of the above items is implemented.

[0028] Due to the adoption of the above technical solution, the present invention has the following advantages and positive effects compared with the prior art:

[0029] The high availability implementation method of the VPC gateway in the technical solution of this embodiment is achieved through the configuration of multiple gateway nodes, the setting of the master node and hot standby node selected by each service, and the configuration of health check and traffic suppression modules. This method effectively improves the robustness and reliability of the entire network and ensures the stability, security and efficiency of the network. The service granularity achieves high availability, and a group of gateway nodes and two machines can serve as hot standby for each other, with high resource utilization. At the same time, it also optimizes performance and cost efficiency, allowing enterprises to manage their network resources more flexibly and efficiently. The traffic suppression module can suppress the traffic of non-master nodes when needed, reduce network congestion, and ensure the communication quality of critical services. BRIEF DESCRIPTION OF THE DRAWINGS

[0030] The specific embodiments of the present invention are further described in detail below with reference to the accompanying drawings, wherein:

[0031] Figure 1 This is a diagram of a gateway node architecture of a vpc gateway according to an embodiment of the present invention;

[0032] Figure 2 A schematic diagram of the process of performing a health check by the health check status module of the present invention;

[0033] Figure 3 This is a schematic diagram of a session synchronization module in a gateway node of a vpc gateway according to an embodiment of the present invention;

[0034] Figure 4 It is a schematic diagram of the process of the flow suppression module in the active suppression mode and the passive suppression mode;

[0035] Figure 5 Schematic diagram of the process of the service notification module notifying the main service node of the current gateway. DETAILED DESCRIPTION

[0036] The present invention is further described in detail below in conjunction with the accompanying drawings and specific embodiments. The advantages and features of the present invention will become more apparent from the following description and claims. It should be noted that the drawings are all in a very simplified form and use non-precise ratios, which are only used to conveniently and clearly assist in explaining the purpose of the embodiments of the present invention.

[0037] It should be noted that all directional indications in the embodiments of the present invention (such as up, down, left, right, front, back, etc.) are only used to explain the relative position relationship, movement status, etc. between the components under a certain specific posture (as shown in the accompanying drawings). If the specific posture changes, the directional indication will also change accordingly.

[0038] In the present invention, high availability refers to the ability of a system to perform its functions without interruption, and represents the degree of availability of the system.

[0039] First embodiment

[0040] This embodiment provides a high availability implementation method for a vpc gateway. Figure 1 , a group of the vpc gateway has multiple gateway nodes. In this embodiment, 2 gateway nodes are taken as an example. Each service selects one of the gateway nodes as the main node and the remaining gateway nodes as hot standby nodes. Each gateway node maintains a health check status module. Each gateway node has a flow suppression module, including the following steps: when a data packet is sent from an instance in a VPC, it first reaches a subnet router associated with the subnet where the instance is located. The subnet router checks its routing table to determine whether the target address of the data packet is in the same VPC or needs to be sent to an external network through a vpc gateway; when a data packet needs to be sent to an external network, the subnet router forwards the data packet to a transit gateway of the VPC, and the transit gateway acts as a regional virtual router to route traffic between the VPC and the local network; the health check status module performs the following checks: checking whether the ovs service of the network forwarding module is abnormal, and checking whether the tunnel network from the gateway node to the back-end physical node is abnormal; the flow suppression module suppresses the current gateway node from receiving messages from non-service main nodes, and the flow suppression module is configured with an active suppression mode and a passive suppression mode.

[0041] The high availability implementation method of the VPC gateway in the technical solution of this embodiment is achieved through the configuration of multiple gateway nodes, the setting of the master node and hot standby node selected by each service, and the configuration of health check and traffic suppression modules. This method effectively improves the robustness and reliability of the entire network and ensures the stability, security and efficiency of the network. The service granularity achieves high availability, and a group of gateway nodes and two machines can serve as hot standby for each other, with high resource utilization. At the same time, it also optimizes performance and cost efficiency, allowing enterprises to manage their network resources more flexibly and efficiently. The traffic suppression module can suppress the traffic of non-master nodes when needed, reduce network congestion, and ensure the communication quality of critical services.

[0042] See also Figure 2 When the health check status module performs a health check, if all physical nodes cannot be connected or the network forwarding module is abnormal, the current node is marked as abnormal. After a status change occurs at any location, the current node status is checked. Only when all health check behaviors are normal, the current node will be marked as healthy.

[0043] Preferably, see Figure 4 The figure shows the process diagram of the traffic suppression module in the active suppression mode and the passive suppression mode. In the active suppression mode, the agent controller module actively sends the suppression flow table. When the gateway node receives and replies to the ARP message, it will mark whether the currently replied service is the main service or the backup service at this gateway node. If it carries the backup service mark, it will be filtered by the active suppression flow table sent by the agent controller.

[0044] In the active suppression mode, the technical solution manages traffic by actively sending suppression flow tables through the Agent controller module, and distinguishes between primary and backup services through the marking of ARP messages by the gateway node, thereby optimizing network performance and resource utilization. It significantly improves the stability, security and performance of the network, while also increasing the flexibility and efficiency of management, supporting the continuous development of business and technological innovation.

[0045] Preferably, in the passive suppression mode, the current gateway node receives an ARP reply message, and the message has the characteristics sent by the gateway service. The gateway service corresponding to the ARP reply message is detected to see whether it is marked as the main service in the current gateway. If not, a flow table is generated through the flow table learning mechanism to suppress the current service reply ARP, so that the gateway node will not attempt to take over the traffic corresponding to the current ARP.

[0046] The technical solution of this embodiment realizes intelligent management and control of non-primary service traffic through a specific flow table learning mechanism in passive suppression mode, thereby optimizing network performance and resource utilization. By generating a suppression flow table to prevent the gateway node from taking over the ARP response of the non-primary service, it is ensured that only the correct gateway service processes the corresponding traffic, reducing network confusion or interruption caused by erroneous takeover. In the case of failure of the control plane, passive traffic suppression can be achieved by the data plane, and complete high availability functions can still be achieved. Once a problem occurs in the main service, the system can rely on the backup service to take over seamlessly without manual intervention, thereby improving the network's self-healing ability and business continuity. By filtering out the ARP responses of non-primary services, unnecessary network loads are reduced, and the overall performance and response speed of the network are improved. High availability is achieved by suppressing non-primary nodes, and switching within seconds can be achieved with high performance. It not only significantly improves the stability, security and performance of the network, but also increases the flexibility and efficiency of management, supporting the continuous development of the business and technological innovation.

[0047] Preferably, when the gateway node is abnormal, all service information is notified by the service notification module to try to take over all gateway services, wherein each gateway node has a service notification module: a garp message is generated in the agent controller, and the message is sent to the VLAN network corresponding to each service, and the information is sent to each physical node of the vpc, requiring the message sent from the vpc to be forwarded to this gateway.

[0048] Preferably, see Figure 5 ,The service notification module periodically notifies only the main service node of the current gateway to ,refresh the external network situation, so that some low-frequency communication traffic can ,be quickly connected.

[0049] The service notification module of this technical solution will be performed regularly, and only the main service node of the current gateway will be notified, which can refresh the external network situation and allow some low-frequency communication traffic to be quickly connected. Through the regular update of the service notification module, it is ensured that only the current main service node is notified to the external network, so as to achieve rapid processing and connection of low-frequency communication traffic. This method not only improves network efficiency, but also enhances the adaptability and stability of the network. It significantly improves the response speed, stability and security of the network, and also increases the flexibility and efficiency of management.

[0050] Preferably, when both the current gateway node and the peer gateway node are healthy, the non-Leader service of the current gateway node is suppressed;

[0051] When the current gateway node is healthy and the peer gateway node is abnormal, the traffic is not suppressed and the VLAN & VPC side service is notified; if the heartbeat line is abnormal, the non-Leader node is suppressed at the service granularity;

[0052] When the current gateway node is abnormal and the peer gateway node is healthy, the peer node notifies to take over the traffic;

[0053] When both the current gateway node and the peer gateway node are abnormal, the data plane forwards the message automatically.

[0054] Among them, the current gateway node status is maintained by the health check module, and the peer gateway node status is maintained by the heartbeat message module.

[0055] In the technical solution of this embodiment, when the current gateway node is abnormal, the opposite gateway node can take over the traffic to ensure that the network service is not interrupted. When the gateway nodes at both ends are healthy, suppressing the traffic of non-Leader services can reduce unnecessary network load and optimize network performance. Through the health check module and the heartbeat message module, the network can automatically detect faults and recover, reducing the need for manual intervention. Through mechanisms at multiple levels, the stability and continuity of the network in the face of various fault conditions are ensured, while providing flexible network management and optimization performance. These technical advantages enable enterprises to respond to market changes more effectively and ensure the smooth operation of business and data security.

[0056] Preferably, see Figure 3 , each of the multiple gateway nodes in a group of the vpc gateways runs a session synchronization module, and uses udp data packets to synchronize the TCP, UDP, and ICMP connection information of each node to the peer node, so as to achieve uninterrupted connection when vip is switched.

[0057] This embodiment runs the session synchronization module on multiple gateway nodes in the VPC gateway and uses UDP datagrams to synchronize session information to the peer node, thereby achieving uninterrupted connection during VIP switching. Session synchronization between nodes can maintain uninterrupted service after connection switching, and users will not feel it.

[0058] Based on the same concept, the present invention also provides a high-availability implementation system for a vpc gateway, wherein a group of the vpc gateways has multiple gateway nodes, each service selects one of the gateway nodes as the main node and the remaining gateway nodes as hot standby nodes, each gateway node maintains a health check status module, and each gateway node has a traffic suppression module, including:

[0059] A judgment module is used to determine whether the destination address of the data packet is within the same VPC or needs to be sent to an external network through a vpc gateway when the data packet is sent from the instance in the VPC.

[0060] A routing module, which is used for forwarding packets to the transit gateway of the VPC when packets need to be sent to the external network. The transit gateway acts as a regional virtual router to route traffic between the VPC and the local network.

[0061] The health check status module performs the following checks: Check whether the ovs service of the network forwarding module is abnormal, and check whether the tunnel network from the gateway node to the backend physical node is abnormal;

[0062] The traffic suppression module suppresses the current gateway node from receiving messages from non-service master nodes, and the traffic suppression module is configured with an active suppression mode and a passive suppression mode.

[0063] The high availability implementation method of the VPC gateway in the technical solution of this embodiment is achieved through the configuration of multiple gateway nodes, the setting of the master node and hot standby node selected by each service, and the configuration of health check and traffic suppression modules. This method effectively improves the robustness and reliability of the entire network and ensures the stability, security and efficiency of the network. The service granularity achieves high availability, and a group of gateway nodes and two machines can serve as hot standby for each other, with high resource utilization. At the same time, it also optimizes performance and cost efficiency, allowing enterprises to manage their network resources more flexibly and efficiently. The traffic suppression module can suppress the traffic of non-master nodes when needed, reduce network congestion, and ensure the communication quality of critical services.

[0064] Based on the same concept, the present invention also provides an electronic device, comprising:

[0065] A memory, the memory being used to store a processing program;

[0066] A processor, wherein when executing the processing program, the processor implements the high availability implementation method of the vpc gateway described in any one of the above items.

[0067] Based on the same concept, the present invention also provides a readable storage medium, on which a processing program is stored. When the processing program is executed by a processor, the high availability implementation method of the vpc gateway described in any one of the above items is implemented.

[0068] Based on the same concept, the present invention also provides an electronic device, comprising: a memory, the memory is used to store a processing program; a processor, the processor implements the high availability implementation method of the VPC gateway described in any one of the above when executing the processing program.

[0069] Based on the same concept, the present invention also provides a readable storage medium, on which a processing program is stored. When the processing program is executed by a processor, the high availability implementation method of the vpc gateway described in any one of the above items is implemented.

[0070] If the high availability implementation method of the vpc gateway is implemented in the form of program instructions and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this embodiment is essentially or part of the contribution to the prior art or all or part of the technical solution can be embodied in the form of software, and the computer software is stored in a storage medium, including several instructions to enable a computer device (which can be a personal computer, server, or network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present disclosure. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM), random access memory (RAM), disk or optical disk, etc., various media that can store program code.

[0071] Those skilled in the art can clearly understand that, for the sake of convenience and brevity in description, the identification content specifically executed by the above-described system and device can refer to the corresponding process in the aforementioned method embodiment.

[0072] The embodiments of the present invention are described in detail above in conjunction with the accompanying drawings, but the present invention is not limited to the above embodiments. Even if various changes are made to the present invention, if these changes fall within the scope of the claims of the present invention and their equivalents, they still fall within the protection scope of the present invention.

Claims

1. A method for implementing high availability of a virtual private cloud (VPC) gateway, wherein a group of the VPC gateways has multiple gateway nodes, each service selects one of the gateway nodes as the master node and the remaining gateway nodes as hot standby nodes, each gateway node maintains a health check status module, and each gateway node has a traffic suppression module, characterized in that: The steps include: When a data packet is sent from an instance in a vpc, it first reaches the subnet router associated with the subnet where the instance is located. The subnet router checks its routing table to determine whether the destination address of the data packet is within the same vpc or needs to be sent to the external network through the vpc gateway; When a data packet needs to be sent to an external network, the subnet router forwards the data packet to the transit gateway of the vpc, which acts as a regional virtual router; The health check status module performs the following checks: checks whether the open virtual switch service of the network forwarding module is abnormal, and checks whether the tunnel network from the gateway node to the backend physical node is abnormal; The flow suppression module suppresses the current gateway node from receiving messages from non-service master nodes, and the flow suppression module is configured with an active suppression mode and a passive suppression mode; Among them, when the current gateway node and the peer gateway node are both healthy, the non-master node service of the current gateway node is suppressed; When the current gateway node is healthy and the peer gateway node is abnormal, traffic is not suppressed, and virtual LAN and virtual private cloud service notifications are not suppressed; if the heartbeat line is abnormal, non-primary nodes are suppressed at the service granularity; When the current gateway node is abnormal and the peer gateway node is healthy, the peer node notifies to take over the traffic; When both the current gateway node and the peer gateway node are abnormal, the data plane forwards the message automatically. Among them, the current gateway node status is maintained by the health check module, and the peer gateway node status is maintained by the heartbeat message module; In active suppression mode, the proxy controller module actively sends down the suppression flow table. When the gateway node receives and replies to the address resolution protocol message, it will mark whether the currently replied service is the primary service or the backup service at this gateway node. If it carries the backup service mark, it will be filtered by the active suppression flow table sent by the proxy controller. In passive suppression mode, the current gateway node receives an address resolution protocol reply message, and the message has the characteristics sent by the gateway service. It detects whether the gateway service corresponding to the address resolution protocol reply message is marked as the main service in the current gateway. If not, a flow table that suppresses the current service reply address resolution protocol is generated through the flow table learning mechanism, so that the gateway node will not try to take over the traffic corresponding to the current address resolution protocol.

2. The high availability implementation method of the vpc gateway according to claim 1 is characterized in that: When the gateway node is abnormal, all service information is notified and the service notification module attempts to take over all gateway services, wherein each gateway node has a service notification module: The proxy controller generates a free address resolution protocol message and sends it to the virtual LAN network corresponding to each service. At the same time, it sends the information to each physical node of the vpc, requiring the message sent from the vpc to be forwarded to this gateway.

3. The high availability implementation method of the vpc gateway according to claim 2 is characterized in that: The service notification module periodically notifies only the main service node of the current gateway to refresh the external network status, so that some low-frequency communication traffic can be quickly connected.

4. The high availability implementation method of the vpc gateway according to claim 1 is characterized in that: Each of the plurality of gateway nodes in a group of the vpc gateways runs a session synchronization module, and uses user datagram protocol data messages to synchronize the transmission control protocol, user datagram protocol, and internet control message protocol connection information of each node to the peer node.

5. A high availability implementation system for a vpc gateway, wherein a group of the vpc gateways has multiple gateway nodes, each service selects one of the gateway nodes as the main node and the remaining gateway nodes as hot standby nodes, each gateway node maintains a health check status module, and each gateway node has a traffic suppression module, characterized in that: The high availability implementation system of the vpc gateway includes: A judgment module is used to determine whether the destination address of the data packet is in the same vpc or needs to be sent to an external network through a vpc gateway when the data packet is sent from the instance in the vpc. A routing module, which is used for forwarding data packets to the transit gateway of the vpc when the data packets need to be sent to the external network, and the transit gateway acts as a regional virtual router; The health check status module performs the following checks: checks whether the open virtual switch service of the network forwarding module is abnormal, and checks whether the tunnel network from the gateway node to the backend physical node is abnormal; The flow suppression module suppresses the current gateway node from receiving messages from non-service master nodes, and the flow suppression module is configured with an active suppression mode and a passive suppression mode; Among them, when the current gateway node and the peer gateway node are both healthy, the non-master node service of the current gateway node is suppressed; When the current gateway node is healthy and the peer gateway node is abnormal, traffic is not suppressed, and virtual LAN and virtual private cloud service notifications are not suppressed; if the heartbeat line is abnormal, non-primary nodes are suppressed at the service granularity; When the current gateway node is abnormal and the peer gateway node is healthy, the peer will notify the user to take over the traffic. When both the current gateway node and the peer gateway node are abnormal, the data plane forwards the message automatically. Among them, the current gateway node status is maintained by the health check module, and the peer gateway node status is maintained by the heartbeat message module; In active suppression mode, the proxy controller module actively sends down the suppression flow table. When the gateway node receives and replies to the address resolution protocol message, it will mark whether the currently replied service is the primary service or the backup service at this gateway node. If it carries the backup service mark, it will be filtered by the active suppression flow table sent by the proxy controller. In passive suppression mode, the current gateway node receives an address resolution protocol reply message, and the message has the characteristics sent by the gateway service. It detects whether the gateway service corresponding to the address resolution protocol reply message is marked as the main service in the current gateway. If not, a flow table that suppresses the current service reply address resolution protocol is generated through the flow table learning mechanism, so that the gateway node will not try to take over the traffic corresponding to the current address resolution protocol.

6. An electronic device, characterized in that: include: A memory, the memory being used to store a processing program; A processor, wherein when executing the processing program, the processor implements the high availability implementation method of the vpc gateway as described in any one of claims 1 to 4.

7. A readable storage medium, characterized in that: The readable storage medium stores a processing program, and when the processing program is executed by the processor, the high availability implementation method of the vpc gateway as described in any one of claims 1 to 4 is implemented.

Images