A method and system for containerized implementation of IPv6 address stateless configuration and networking

Abstract

The application discloses a kind of containerized implementation IPv6 address stateless configuration and networking method and system, belong to computer network communication technical field, based on container cluster realizes the stateless configuration of IPv6 address and IPv6 networking communication, the service component of container cluster is in the service of data center, and the equipment of data center is controlled and configured by service component, realizes the stateless IPv6 address configuration of data center;Service component includes data center controller, network manager, virtual machine manager, IPv6 gateway manager and unified resource management interface.The application solves the problem that IPv6 stateless address automatic configuration exists IPv6 address allocation lag, can improve the reliability of IPv6 stateless address allocation, simplifies networking, reduces the load pressure of gateway.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of computer network communication, in particular to a method and system for containerized implementation of IPv6 address stateless configuration and networking. BACKGROUND

[0002] Under the background of artificial intelligence, big data and Internet of Things, the number of mobile, storage, database and server devices has increased dramatically, and in 2019, IPv4 global unicast addresses have been exhausted, and the Chinese government has also called for support for IPv6 protocol.

[0003] Under the IPv6 stateful address automatic configuration mode, DHCP is mainly used, a special DHCP server needs to be equipped, and user equipment obtains address configuration information from the DHCP server through the C / S mode, the networking architecture of this mode is relatively complex, and the allocated IPv6 address is 128 bits, so that virtual machines in the same local link domain can only communicate through a three-layer network, which increases the burden of gateway devices in the network. Therefore, a more simple and efficient IPv6 address allocation method is needed. SUMMARY

[0004] The technical task of the present application is to solve the above problems, and provide a method and system for containerized implementation of IPv6 address stateless configuration and networking, which can improve the reliability of IPv6 stateless address allocation, simplify the networking and reduce the load pressure of the gateway.

[0005] The technical solution adopted by the present application to solve its technical problems is:

[0006] A method for containerized implementation of IPv6 address stateless configuration and networking, which realizes IPv6 address stateless configuration and IPv6 networking communication based on a container cluster, the container cluster manages service components of a data center, controls and configures devices of the data center through the service components, and realizes stateless IPv6 address configuration of the data center.

[0007] The service components include a data center controller, a network manager, a virtual machine manager, an IPv6 gateway manager and a unified resource management interface; a user operates the unified resource management interface to initiate a request, including a network resource application, an access control policy and a virtual machine configuration request; the network manager receives the network configuration request, allocates a network prefix and a gateway, and notifies the data center controller of the network prefix and the gateway information; the data center controller notifies the IPv6 gateway manager of the network prefix and the gateway; the IPv6 gateway manager configures IPv6 routing exchange with a core switch and configures an RA announcement to send an RA message to a link-local virtual machine at a regular time; the virtual machine activation message is received by the data center controller, and the data center controller responds to the RS request of the virtual machine to send an RA to the virtual machine; the virtual machine generates a 64-bit mac address through an EUI-64 algorithm and splices the network prefix to generate a global unicast address. This method is different from the DHCP address allocation method which requires a DHCP server to process and manage IPv6 addresses. Only the network prefix needs to be stored, and the cumbersome process of managing IPv6 addresses is omitted. The RA message reply by the data center controller can improve the reliability of IPv6 stateless address allocation.

[0008] The method applies a container cluster to integrate the data center controller, the network manager, the virtual machine manager, the IPv6 gateway manager and the unified resource management interface into the container cluster in the form of microservices by virtue of the advantages of the container cluster, realize automatic deployment, rapid update iteration of application programs, and conveniently realize resource elasticity based on the container cluster to improve resource utilization. The IPv6 stateless address allocation scheme can simplify the networking architecture, and the data center controller and the IPv6 gateway manager can realize IPv6 stateless address allocation and improve the reliability of address allocation, thereby achieving the purpose of migrating from IPv4 networking to IPv6 networking.

[0009] The container cluster realizes IPv6 stateless address configuration and networking communication; the data center controller and the IPv6 gateway manager double RA message announcement improves the reliability of virtual machine stateless IPv6 address configuration; the virtual machine configures a routing network segment and a default gateway route through the RA message, realizes communication within the network through a two-layer network, and reduces the load pressure of the IPv6 gateway; the stateless address configuration simplifies IPv6 communication networking, does not require a DHCP server, and facilitates network migration as a whole. When the network prefix of a site changes, the virtual machine of the data center can quickly be reconfigured without affecting network connection.

[0010] Further, the data center controller controls the network manager and the virtual machine manager downward, and controls the gateway port configuration of the IPv6 gateway manager and the configuration of the RADVD upward, and starts state monitoring of the network manager, the virtual machine manager and the IPv6 gateway manager, and remedies abnormal services in time;

[0011] The data center controller controls the network manager and the virtual machine manager through a northbound interface, including receiving network prefix and gateway information of the network manager, and receiving state change information of virtual machine activation and deactivation; and sends the network prefix and the gateway information to the IPv6 gateway manager through a message queue; in response to a virtual machine activation message, controls virtual machine port addition and flow table delivery through ovs+openflow, and in response to an RS request sent by the virtual machine, encapsulates an RA packet to notify the virtual machine, the packet containing network prefix and gateway information, to improve reliability of the virtual machine in allocating a stateless address; the data center controller detects running states of other components in real time through detection, and when detecting an exception, starts service rescue measures in time, including detecting a network, checking a configuration, and restarting a service.

[0012] Further, the network manager is a configuration component for providing network basic information, receives a network resource request and releases a network resource of a unified resource management interface, checks legality of network resource configuration, and persists the network resource configuration to a database; meanwhile, the network manager notifies the data center controller of network prefix and gateway information through a northbound interface, and the data center controller provides the network prefix and the gateway information to the virtual machine through an RA packet. Obviously, the network manager is a basic component in the system, and provides an effective address prefix.

[0013] Further, the virtual machine manager is used for activating and deactivating a virtual machine, and manages a whole life cycle of the virtual machine; the virtual machine manager receives a virtual machine resource request of a unified resource management interface, checks legality of information carried by the virtual machine request, then sends virtual machine activation information to the data center controller, receives virtual machine configuration information returned by the data center controller, and forwards an RA packet to the virtual machine, so that the virtual machine generates a global unicast IPv6 address through an EUI-64 algorithm.

[0014] Further, the IPv6 gateway manager is a routing switcher of the system, and provides forwarding routes across network segments and to an external network; first, the IPv6 gateway manager receives network prefix and gateway notification information of the data center controller, configures a gateway port and a network segment route, and is a basis for routing forwarding of a cross-network segment request; second, the IPv6 gateway manager configures a RADVD, and periodically notifies an RA packet to a virtual machine in a link local domain, to improve reliability of the virtual machine in configuring a global unicast IPv6 address; finally, the IPv6 gateway manager exchanges IPv6 routing information in a data center with a core switch in real time, and provides routing information for communication between the data center and an external network.

[0015] Further, the network configuration process, i.e. the process of user-initiated application of network resources, includes that the network manager checks network information, persists the network information, and notifies the network information to the data center controller, the data center controller notifies the network information to the IPv6 gateway manager, the IPv6 gateway manager configures gateway port and network segment routing information, and starts RADVD to notify the network segment routing to the virtual machine in the local link domain; the specific implementation manner is as follows:

[0016] 1) The user initiates the network resource application through the unified resource management interface, and sends the application to the network manager, including the application of IPv6 network prefix, gateway, DNS server address, the IPv6 network is by default in the stateless address allocation mode, and the network prefix is a 64-bit mask;

[0017] 2) The network manager receives the network resource request application, checks the validity of the network resource, including the legality of the network prefix, the legality of the gateway address, the network prefix mask, whether the network prefix address conflicts, the validity of the DNS domain name address, and the legality of the description and name, and the legal network resource information is persisted to the database; finally, the network manager notifies the network prefix and gateway information to the data center controller;

[0018] 3) The data center controller receives the network configuration information, encapsulates the information into JSON format, and notifies the IPv6 gateway manager through socket;

[0019] 4) After the IPv6 gateway manager receives the notification of the data center controller, the gateway port and the IPv6 network segment routing are configured, the new network prefix is added in the RADVD configuration file, and RADVD is restarted to start sending RA packets in the local link domain.

[0020] Further, the virtual machine configuration process, i.e. the process of user-initiated activation of virtual machine, includes the virtual machine activation and network prefix request process, and the specific implementation manner is as follows:

[0021] 1) The user initiates the virtual machine resource application request through the unified resource management interface, and sends the application to the virtual machine resource manager, including the network resource, specification, image, disk, name, and description of the virtual machine;

[0022] 2) After the virtual machine manager receives the virtual machine activation request, the virtual machine configuration validity is checked, including whether the network resource is available, whether there is access control restriction, the virtual machine specification validity, and whether the system resource usage rate meets the requirement, the information is pre-stored in the database for persistence after the checking, and then the virtual machine activation message is sent to the data center controller;

[0023] 3) Data center controller receives virtual machine activation message, allocates host, configures ovs information and flow table information in host to guide virtual machine traffic forwarding, sends RA notification to virtual machine to notify network prefix and gateway information to virtual machine, and sends virtual machine information to virtual machine manager;

[0024] 4) Virtual machine manager receives virtual machine information, and persists to database, so that user can view, modify, delete and the like through unified resource management interface;

[0025] 5) Virtual machine receives RA packet, generates global unicast address according to network prefix and mac address by using EUI-64 algorithm, sends DAD to detect uniqueness of address, and configures network segment route, the route is 64-bit mask, and virtual machines in the network can communicate through layer 2 without IPv6 gateway manager.

[0026] The application also claims to protect a containerized system for realizing IPv6 address stateless configuration and networking, comprising a data center controller, a network manager, a virtual machine manager, an IPv6 gateway manager, a unified resource management interface,

[0027] The data center controller downwardly contains the network manager and the virtual machine manager, upwardly controls gateway port configuration of the IPv6 gateway manager and configuration of RADVD, and starts state monitoring on the network manager, the virtual machine manager and the IPv6 gateway manager, and timely remedies abnormal services;

[0028] The network manager is a configuration component for providing network basic information, receives network resource request and release of the unified resource management interface, checks legality of network resource configuration, and persists network resource configuration to a database;

[0029] The virtual machine manager is used for activating and deactivating virtual machines, and managing whole life cycle of the virtual machines;

[0030] The IPv6 gateway manager is a routing switcher of the system, and provides forwarding route across network segments and out of the network;

[0031] The unified resource management interface provides a convenient resource application page for users, and the user initiates network and virtual machine application through the interface;

[0032] The system realizes IPv6 address stateless configuration and networking through the above method.

[0033] The application also claims to protect a containerized system for realizing IPv6 address stateless configuration and networking, comprising a data center controller, a network manager, a virtual machine manager, an IPv6 gateway manager, a unified resource management interface,

[0034] The at least one memory is used for storing machine readable programs;

[0035] The at least one processor is configured to invoke the machine-readable program to implement the method described above.

[0036] The application also claims a computer readable medium having computer instructions stored thereon, which, when executed by a processor, cause the processor to perform the method described above.

[0037] Compared with the prior art, the method and system for containerized implementation of IPv6 address stateless configuration and networking provided by the application have the following beneficial effects:

[0038] The application is based on a container cluster, and achieves stateless configuration of an IPv6 address, and improves the reliability of IPv6 address allocation by controlling the sending of an RA packet. A network segment route is sent by the RA, and a virtual machine can achieve layer 2 communication through the network segment route, thereby reducing the load pressure of a gateway. The scheme can also achieve automatic configuration of an IPv6 address without relying on a DHCP server, and the networking is simple and convenient for overall network migration. When the network prefix of a site changes, the virtual machine of the data center can be quickly recompiled without affecting network connection. BRIEF DESCRIPTION OF DRAWINGS

[0039] Figure 1 is a method principle diagram for containerized implementation of IPv6 address stateless configuration and networking provided by an embodiment of the application;

[0040] Figure 2 is a network configuration flow diagram provided by an embodiment of the application;

[0041] Figure 3 is a virtual machine IPv6 address configuration flow diagram provided by an embodiment of the application. DETAILED DESCRIPTION

[0042] The application will be further described below in combination with the drawings and specific embodiments.

[0043] An embodiment of the application provides a method for containerized implementation of IPv6 address stateless configuration and networking, which is based on a container cluster to achieve stateless configuration of an IPv6 address and IPv6 networking communication. The container cluster of the method is a k8s cluster, the k8s cluster manages service components of a data center, controls and configures devices of the data center through the service components, and achieves stateless IPv6 address configuration of the data center. The method improves the reliability of address configuration and completes IPv6 networking communication.

[0044] The service component includes a data center controller, a network manager, a virtual machine manager, an IPv6 gateway manager and a uniform resource management interface; a user operates the uniform resource management interface to initiate a request for applying network resources, access control policy, virtual machine configuration and the like, the network manager receives the network configuration request to allocate a network prefix and a gateway, and notifies the network prefix and the gateway information to the data center controller, the data center controller further notifies the network prefix and the gateway to the IPv6 gateway manager, the IPv6 gateway manager configures IPv6 routing exchange with a core switch and configures RA notification to send an RA message to a link local virtual machine at a time; a virtual machine activation message is received by the data center controller, and an RA response is sent to the virtual machine in response to an RS request sent by the virtual machine, the virtual machine generates a 64-bit mac address through an EUI-64 algorithm and splices a network prefix to generate a global unicast address. This method is different from a DHCP address allocation method which needs a DHCP server to process and manage IPv6 addresses, and only needs to store a network prefix to save a cumbersome process of managing IPv6 addresses. Moreover, the data center controller replies to the RA message to improve the reliability of IPv6 stateless address allocation.

[0045] The container cluster implements IPv6 stateless address configuration and networking communication; the data center controller and the IPv6 gateway manager double RA message notification to improve the reliability of virtual machine stateless IPv6 address configuration; the virtual machine configures a routing network segment and a default gateway routing of a network prefix through an RA message, realizes communication in the network through a layer 2 network, and reduces the load pressure of an IPv6 gateway; the stateless address configuration simplifies IPv6 communication networking, does not need a DHCP server, and is convenient for network overall migration; when a network prefix of a site changes, virtual machines of a data center can be quickly reconfigured without affecting network connection.

[0046] The functions and effects of the main service components of the data center are described in detail below, and the organization structure of the container cluster and the service components is shown in Figure 1

[0047] ​The data center controller is the central system of the system. It controls the network manager and the virtual machine manager downward, and controls the gateway port configuration of the IPv6 gateway manager and the configuration of the RADVD upward. It also monitors the network manager, the virtual machine manager and the IPv6 gateway manager, and remedies the abnormal service in time. The data center controller controls the network manager and the virtual machine manager through the northbound interface, including receiving the network prefix and gateway information of the network manager, and receiving the state change information of the virtual machine activation and deactivation. The network prefix and gateway information are sent to the IPv6 gateway manager through the message queue. In response to the virtual machine activation message, the ovs+openflow is controlled to add the virtual machine port and the flow table, and the RA packet is encapsulated to inform the virtual machine in response to the RS request sent by the virtual machine, and the packet contains the network prefix and gateway information, so as to improve the reliability of the virtual machine in allocating the stateless address. The data center controller detects the running state of other components in real time through detection, and starts the service rescue measures in time when the abnormality is detected, such as detecting the network, checking the configuration, and restarting the service.

[0048] The network manager is a configuration component for providing network basic information. It receives the network resource request and release of the unified resource management interface, checks the legality of the network resource configuration, and persists the network resource configuration to the database. Meanwhile, it also informs the data center controller of the network prefix and gateway information through the northbound interface, and the data center controller provides the network prefix and gateway information to the virtual machine through the RA packet. Obviously, the network manager is a basic component in the system, and provides the effective address prefix.

[0049] The virtual machine manager is mainly used for activating and deactivating the virtual machine, and manages the whole life cycle of the virtual machine. The virtual machine manager receives the virtual machine resource request of the unified resource management interface, checks the legality of the information carried by the virtual machine request, then sends the virtual machine activation information to the data center controller, receives the virtual machine configuration information returned by the data center controller, and forwards the RA packet to the virtual machine, so that the virtual machine generates the global unicast IPv6 address through the EUI-64 algorithm.

[0050] The IPv6 gateway manager is the routing switcher of the system, and provides the forwarding route across the network segment and out of the network. Firstly, it receives the network prefix and gateway information of the data center controller, configures the gateway port and the network segment route, and is the basis of the route forwarding of the cross-network segment request. Secondly, it configures the RADVD, and informs the RA packet to the virtual machine in the local link domain in time, so as to improve the reliability of the virtual machine in configuring the IPv6 global unicast address. Finally, the IPv6 gateway manager exchanges the IPv6 route information in the data center with the core switch in real time, and provides the route information for the communication between the data center and the external network.

[0051] The unified resource management interface provides users with a convenient resource application page, through which users can initiate network and virtual machine applications, making the process easy for users.

[0052] This method can be divided into two processes: network configuration process and virtual machine IPv6 address configuration process.

[0053] The network configuration process is the process by which a user initiates a request for network resources. This includes the network manager verifying network information, persisting the network information, and announcing the network information to the data center controller. The data center controller then announces the network information to the IPv6 gateway manager. The IPv6 gateway manager configures the gateway port and network segment routing information, and starts RADVD to announce the network segment routes to virtual machines within the local link domain. See the flowchart below. Figure 2 As shown:

[0054] 1. Users initiate network resource requests through the unified resource management interface. The requests are sent to the network manager, including requests for IPv6 network prefixes, gateways, DNS server addresses, etc. The IPv6 network defaults to a stateless address allocation mode, and the network prefix is ​​a 64-bit mask.

[0055] 2. Upon receiving a network resource request, the network manager verifies the validity of the network resource, including the legality of the network prefix, gateway address, network prefix mask, whether the network prefix address conflicts, the validity of the DNS domain name address, and the legality of the description and name. Valid network resource information is persisted to the database. Finally, the network manager notifies the data center controller of the network prefix and gateway information.

[0056] 3. The data center controller receives the network configuration information, encapsulates the information in JSON format, and announces it to the IPv6 gateway manager via socket;

[0057] 4. After receiving the announcement from the data center controller, the IPv6 gateway manager configures the gateway port and IPv6 network segment routes, adds the new network prefix to the RADVD configuration file, and restarts RADVD to start sending RA packets periodically within the link local area.

[0058] The virtual machine configuration process is the user-initiated activation process for a virtual machine. This process includes virtual machine activation and network prefix request procedures. The process is described in detail below, with a flowchart as shown. Figure 3 As shown:

[0059] 1. Users initiate virtual machine resource request requests through the unified resource management interface. The request is sent to the virtual machine resource manager, including the network resources, specifications, images, disks, names, descriptions, etc. requested by the virtual machine.

[0060] 2. After receiving the virtual machine activation request, the virtual machine manager begins to verify the validity of the virtual machine configuration, check whether network resources are available, whether there are access control restrictions, the validity of the virtual machine specifications, and whether the system resource availability is met. After the verification is completed, this information is pre-stored in the database for persistence, and then the virtual machine activation message is sent to the data center controller.

[0061] 3. After receiving the virtual machine activation message, the data center controller allocates a host machine and configures OVS information and flow table information on the host machine to guide the forwarding of virtual machine traffic. Then, it sends an RA announcement to the virtual machine to announce the network prefix and gateway information to the virtual machine, and then sends the virtual machine information to the virtual machine manager.

[0062] 4. The Virtual Machine Manager receives virtual machine information and persists it to the database. This data persistence allows users to easily view, modify, and delete data through the unified resource management interface.

[0063] 5. When a virtual machine receives a RA message, it uses the EUI-64 algorithm to generate a global unicast address based on the network prefix and MAC address, sends a DAD probe to verify the uniqueness of the address, and configures a network segment route. This route is a 64-bit mask, and virtual machines in the same network can communicate through Layer 2 without going through the IPv6 gateway manager.

[0064] This solution leverages dual RA (Redirect Address Translation) message announcements from both the data center controller and the IPv6 gateway manager to ensure virtual machines (VMs) can correctly receive network prefix and gateway information. VMs use the EUI-64 algorithm to generate stateless global unicast addresses based on the network prefix and MAC address, achieving containerized stateless IPv6 address configuration and networking. Configuring 64-bit subnetting eliminates the need for gateways for Layer 2 traffic between VMs, reducing the load on the IPv6 gateway manager. Furthermore, this solution simplifies network topology, eliminating the need for DHCP server-like IP address management and enabling automated IPv6 address configuration. It also facilitates network migration; when a site's network prefix changes, the data center VMs can quickly re-encode the address without affecting network connectivity.

[0065] like Figure 1 The diagram illustrates the overall implementation of a containerized network for stateless IPv6 address configuration. The data center is uniformly managed by the container cluster, and users perform resource operations through a unified resource management interface. The data center controller acts as the central system, managing the network manager and virtual machine manager downwards, controlling the IPv6 gateway manager for gateway configuration upwards, responding to RS messages sent by virtual machines to reduce the communication load on the IPv6 gateway manager, and merging with RA announcements sent by the IPv6 gateway manager to improve the reliability of stateless IPv6 address allocation.

[0066] Figure 2 The network configuration process involves applying for and allocating basic network resources for the data center. The unified resource manager receives user requests and sends them to the network resource manager. The network resource manager verifies the validity of the network resources, persists them, and notifies the data center controller of the network configuration information. The data center controller then encapsulates the information in JSON format and sends it to the IPv6 gateway manager via socket. The IPv6 gateway manager configures the gateway port and routing information and starts periodically announcing RA messages.

[0067] Figure 3 The process for configuring a virtual machine (VM) IPv6 address involves the VM requesting a stateless IPv6 address. The VM manager verifies the validity of the VM information, while the data center controller allocates the host machine, configures OVS and flow table information, and sends RA packets to the VM. Upon receiving the RA packet, the VM uses the EUI-64 algorithm to generate a stateless IPv6 address based on the network prefix and MAC address, configures the default gateway route and network segment route, guides Layer 2 traffic forwarding, and reduces the load on the IPv6 gateway manager.

[0068] A container cluster is a cluster architecture based on container technology, primarily used to manage and run a large number of containerized applications. Container technology allows applications and other dependencies to be packaged into a portable container, which can be deployed and run in different environments. A container cluster combines multiple containers to form a highly scalable, elastically elastic, and manageable system. Through container clusters, the automated deployment, scaling, and management of applications can be achieved more easily, thereby improving system availability and stability. Simultaneously, it can quickly respond to changes in business needs, enabling rapid business iteration and upgrades.

[0069] Stateless Address Autoconfiguration (SLAAC) is an automatic address configuration mechanism for IPv6 that allows devices to obtain a globally unique IPv6 unicast address without the need for a DHCP server. In this mechanism, the device generates a 64-bit address using the MAC address based on the EUI-64 algorithm. This address, along with the network address prefix, is then used to construct the device's IPv6 address. This allows the device to automatically obtain a globally unique IPv6 address without manual configuration.

[0070] IPv6 stateless address autoconfiguration uses ICMPv6 Router Request messages and Router Advertisement messages to provide network editing and other configuration information:

[0071] Router Solicitation (RS) message: When a client configures itself to automatically obtain addressing information using IPv6 stateless addresses, it sends an RS message to the router. The RS message is sent to the multicast address FF02::2 on all IPv6 routers. This message is an ICMPv6 message and is identified by a number; the ICMPv6 type of the RS message is 133.

[0072] Router Advertisement (RA) messages: Routers send RA messages to provide network addressing information for configured clients to automatically obtain their IPv6 addresses. RA messages include the prefix and prefix length of the local data segment; clients use this information to create IPv6 global unicast addresses. Routers periodically send RA messages or respond with RS messages. Periodically sent RA messages are also multicast packets sent to a multicast address representing all nodes, with ICMPv6 type 134. If a client sends an RS message, the router will immediately respond with an RS message upon receiving the message.

[0073] The client verifies the global uniqueness of an IPv6 address through a Neighbor Discovery Request (ND). IPv6 stateless address autoconfiguration does not require a server to maintain network address information, making the IPv6 address allocation process simple and network setup relatively straightforward. However, this can lead to delays in IPv6 address allocation. This method provides a solution to this problem, improving the reliability of IPv6 address allocation.

[0074] This method leverages the advantages of container clusters, integrating components such as data center controllers, network managers, virtual machine managers, IPv6 gateway managers, and unified resource management interfaces into the container cluster as microservices. This enables automated deployment, rapid application updates and iterations, and convenient elastic scaling of resources, improving resource utilization. The stateless IPv6 address allocation scheme simplifies the network architecture and, through the data center controller and IPv6 gateway manager, achieves stateless IPv6 address allocation and improves the reliability of address allocation, thereby achieving the goal of migrating from IPv4 to IPv6 networking.

[0075] This invention also provides a containerized system for stateless configuration and networking of IPv6 addresses, including a data center controller, a network manager, a virtual machine manager, an IPv6 gateway manager, and a unified resource management interface.

[0076] The data center controller is the central system of this system. It manages the network manager and virtual machine manager downwards, and controls the gateway port configuration and RADVD configuration of the IPv6 gateway manager upwards. It also enables status monitoring of the network manager, virtual machine manager, and IPv6 gateway manager to promptly remediate abnormal services. The data center controller manages the network manager and virtual machine manager through its northbound interface, including receiving network prefix and gateway information from the network manager and receiving virtual machine activation / deactivation status change information. It also sends network prefix and gateway information to the IPv6 gateway manager via message queues; responds to virtual machine activation messages, controls the addition of virtual machine ports and the distribution of flow tables through OVS+OpenFlow, and responds to RS requests sent by virtual machines, encapsulating RA messages to announce them to the virtual machines. These messages contain network prefix and gateway information, improving the reliability of stateless address allocation for virtual machines. The data center controller monitors the operational status of other components in real time through probes. When an anomaly is detected, it promptly initiates service recovery measures, such as network checks, configuration verification, and service restarts.

[0077] The Network Manager is a configuration component that provides basic network information. It receives network resource requests and releases from the Unified Resource Management interface, verifies the validity of network resource configurations, and persists the network resource configurations to the database. Simultaneously, it advertises network prefix and gateway information to the Data Center Controller via the northbound interface, and the Data Center Controller then provides this information to virtual machines via RA messages. Clearly, the Network Manager is a fundamental component in this system, providing valid address prefixes.

[0078] The Virtual Machine Manager (VM) is primarily used to activate and deactivate virtual machines (VMs) and manage their entire lifecycle. The VM receives VM resource requests from the Unified Resource Management (URM) interface, verifies the validity of the information carried in the VM request, then sends VM activation information to the Data Center Controller (DCC). It also receives VM configuration information returned by the DCC and forwards RA (Range Access Message) packets to the VMs so that they can generate globally unicast IPv6 addresses using the EUI-64 algorithm.

[0079] The IPv6 Gateway Manager acts as the system's routing switch, providing forwarding routes across network segments and to the external network. First, it receives network prefix and gateway advertisement information from the data center controller, configuring the gateway port and network segment routes, which forms the basis for routing forwarding requests across network segments. Second, it configures RADVD to periodically advertise RA messages to virtual machines within the link's local domain, improving the reliability of configuring IPv6 global unicast addresses for virtual machines. Finally, the IPv6 Gateway Manager exchanges IPv6 routing information within the data center with the core switch in real time, providing routing information for communication between the data center and the external network.

[0080] The unified resource management interface provides users with a convenient resource application page, through which users can initiate network and virtual machine applications, making the process easy for users.

[0081] This system implements stateless IPv6 address configuration and networking using the containerization method described in the above embodiments. It consists of two processes: a network configuration process and a virtual machine IPv6 address configuration process.

[0082] The network configuration process is the process by which a user initiates a request for network resources. This includes the network manager verifying network information, persisting the network information, and announcing the network information to the data center controller. The data center controller then announces the network information to the IPv6 gateway manager. The IPv6 gateway manager configures the gateway port and network segment routing information, and starts RADVD to announce the network segment routes to virtual machines within the local link domain. The details are as follows:

[0083] 1. Users initiate network resource requests through the unified resource management interface. The requests are sent to the network manager, including requests for IPv6 network prefixes, gateways, DNS server addresses, etc. The IPv6 network defaults to a stateless address allocation mode, and the network prefix is ​​a 64-bit mask.

[0084] 2. Upon receiving a network resource request, the network manager verifies the validity of the network resource, including the legality of the network prefix, gateway address, network prefix mask, whether the network prefix address conflicts, the validity of the DNS domain name address, and the legality of the description and name. Valid network resource information is persisted to the database. Finally, the network manager notifies the data center controller of the network prefix and gateway information.

[0085] 3. The data center controller receives the network configuration information, encapsulates the information in JSON format, and announces it to the IPv6 gateway manager via socket;

[0086] 4. After receiving the announcement from the data center controller, the IPv6 gateway manager configures the gateway port and IPv6 network segment routes, adds the new network prefix to the RADVD configuration file, and restarts RADVD to start sending RA packets periodically within the link local area.

[0087] The virtual machine configuration process is the process by which a user initiates the activation of a virtual machine. This process includes virtual machine activation and network prefix request procedures, as detailed below:

[0088] 1. Users initiate virtual machine resource request requests through the unified resource management interface. The request is sent to the virtual machine resource manager, including the network resources, specifications, images, disks, names, descriptions, etc. requested by the virtual machine.

[0089] 2. After receiving the virtual machine activation request, the virtual machine manager begins to verify the validity of the virtual machine configuration, check whether network resources are available, whether there are access control restrictions, the validity of the virtual machine specifications, and whether the system resource availability is met. After the verification is completed, this information is pre-stored in the database for persistence, and then the virtual machine activation message is sent to the data center controller.

[0090] 3. After receiving the virtual machine activation message, the data center controller allocates a host machine and configures OVS information and flow table information on the host machine to guide the forwarding of virtual machine traffic. Then, it sends an RA announcement to the virtual machine to announce the network prefix and gateway information to the virtual machine, and then sends the virtual machine information to the virtual machine manager.

[0091] 4. The Virtual Machine Manager receives virtual machine information and persists it to the database. This data persistence allows users to easily view, modify, and delete data through the unified resource management interface.

[0092] 5. When a virtual machine receives a RA message, it uses the EUI-64 algorithm to generate a global unicast address based on the network prefix and MAC address, sends a DAD probe to verify the uniqueness of the address, and configures a network segment route. This route is a 64-bit mask, and virtual machines in the same network can communicate through Layer 2 without going through the IPv6 gateway manager.

[0093] This system can assign global unicast IPv6 addresses to cloud servers without manual allocation and configuration, even without a DHCP server. It responds to global unicast address requests from cloud servers through the data center controller, improving the reliability of stateless IPv6 address allocation. It also facilitates overall network migration. When the network prefix of a site changes, the cloud servers in the data center can quickly re-encode the address without affecting network connectivity.

[0094] This invention also provides a containerized device for stateless configuration and networking of IPv6 addresses, comprising: at least one memory and at least one processor;

[0095] The at least one memory is used to store a machine-readable program;

[0096] The at least one processor is used to call the machine-readable program to implement the containerized method for stateless configuration and networking of IPv6 addresses as described in the above embodiments.

[0097] This invention also provides a computer-readable medium storing computer instructions. When executed by a processor, the computer instructions cause the processor to perform the containerized method for stateless configuration and networking of IPv6 addresses described in the above embodiments. Specifically, a system or apparatus equipped with a storage medium storing software program code that implements the functions of any of the above embodiments can be provided, and the computer (or CPU or MPU) of the system or apparatus can read and execute the program code stored in the storage medium.

[0098] In this case, the program code read from the storage medium can itself implement the function of any of the above embodiments, and therefore the program code and the storage medium storing the program code constitute part of the present invention.

[0099] Examples of storage media used to provide program code include floppy disks, hard disks, magneto-optical disks, optical disks (such as CD-ROM, CD-R, CD-RW, DVD-ROM, DVD-RAM, DVD-RW, DVD+RW), magnetic tapes, non-volatile memory cards, and ROMs. Alternatively, program code can be downloaded from a server computer via a communication network.

[0100] Furthermore, it should be clear that not only can the program code read by the computer be executed, but also the operating system or other components operating on the computer can be instructed based on the program code to perform some or all of the actual operations, thereby realizing the function of any of the embodiments described above.

[0101] Furthermore, it is understood that the program code read from the storage medium is written to the memory set in the expansion board inserted into the computer or to the memory set in the expansion unit connected to the computer. Then, based on the instructions of the program code, the CPU or other components installed on the expansion board or expansion unit execute some and all of the actual operations, thereby realizing the function of any of the embodiments described above.

[0102] The present invention has been shown and described in detail above with reference to the accompanying drawings and preferred embodiments. However, the present invention is not limited to these disclosed embodiments. Based on the above embodiments, those skilled in the art will know that more embodiments of the present invention can be obtained by combining the code review methods in the different embodiments. These embodiments are also within the protection scope of the present invention.

Claims

1. A method for containerizing stateless configuration and networking of IPv6 addresses, characterized in that, Stateless configuration of IPv6 addresses and IPv6 networking communication are achieved based on container clusters. The container clusters manage the service components of the data center, and control and configure the data center equipment through the service components to achieve stateless IPv6 address configuration of the data center. The service components include the data center controller, network manager, virtual machine manager, IPv6 gateway manager, and unified resource management interface; Users initiate requests through the unified resource management interface, including requests for network resources, access control policies, and virtual machine configuration. The network manager receives the network configuration request, allocates the network prefix and gateway, and announces the network prefix and gateway information to the data center controller. The data center controller then announces the network prefix and gateway to the IPv6 gateway manager. The IPv6 gateway manager configures IPv6 routing and switching with the core switch, configures RA (Radio Access Request) announcements, and periodically sends RA messages to the link-local virtual machines. The data center controller receives the virtual machine activation message and responds to the virtual machine's RS (Radio Access Request) request by responding to the virtual machine with an RA. The virtual machine generates a 64-bit MAC address using the EUI-64 algorithm and concatenates the network prefix to generate a global unicast address. The data center controller manages the network manager and virtual machine manager downwards, and controls the gateway port configuration and RADVD configuration of the IPv6 gateway manager upwards. It also enables status monitoring of the network manager, virtual machine manager and IPv6 gateway manager to promptly remedy abnormal services. The network manager is a configuration component that provides basic network information. It receives network resource requests from the unified resource management interface and releases network resources, verifies the legality of network resource configurations, and persists network resource configurations to the database. At the same time, it announces network prefix and gateway information to the data center controller through the northbound interface, and the data center controller provides the network prefix and gateway information to the virtual machine through RA messages. The virtual machine manager is used to activate and deactivate virtual machines and manage the entire lifecycle of virtual machines. The virtual machine manager receives virtual machine resource requests from the unified resource management interface, verifies the legality of the information carried in the virtual machine request, then sends the virtual machine activation information to the data center controller, receives the virtual machine configuration information returned by the data center controller, and forwards the RA message to the virtual machine so that the virtual machine can generate a global unicast IPv6 address through the EUI-64 algorithm. The IPv6 gateway manager is the system's routing switch, providing forwarding routes across network segments and to the external network; it first receives network prefix and gateway announcement information from the data center controller, and configures the gateway port and network segment routes; Next, configure RADVD to periodically announce RA messages to virtual machines within the link's local domain; finally, the IPv6 gateway manager exchanges IPv6 routing information within the data center with the core switch in real time, providing routing information for communication between the data center and the external network.

2. The method for containerized stateless configuration and networking of IPv6 addresses according to claim 1, characterized in that, The data center controller manages the network manager and virtual machine manager through the northbound interface. This includes receiving network prefix and gateway information from the network manager, and receiving virtual machine activation / deactivation status change information. It also sends the network prefix and gateway information to the IPv6 gateway manager via a message queue. In response to virtual machine activation messages, it controls the addition of virtual machine ports and the distribution of flow tables via OVS+OpenFlow. Furthermore, it responds to RS requests sent by virtual machines, encapsulating RA messages to announce these requests to the virtual machines. These messages contain network prefix and gateway information. The data center controller also monitors the operational status of several other components in real time. Upon detecting anomalies, it promptly initiates service recovery measures, including network detection, configuration verification, and service restart.

3. The method for containerized stateless configuration and networking of IPv6 addresses according to claim 1, characterized in that, The network configuration process is the process by which a user initiates a request for network resources. This includes the network manager verifying network information, persisting the network information, and announcing the network information to the data center controller. The data center controller then announces the network information to the IPv6 gateway manager. The IPv6 gateway manager configures the gateway port and network segment routing information, and starts RADVD to announce the network segment routes to virtual machines within the local link domain. The specific implementation is as follows: 1) Users initiate network resource requests through the unified resource management interface. The requests are sent to the network manager, including requests for IPv6 network prefixes, gateways, and DNS server addresses. IPv6 networks default to stateless address allocation mode, and the network prefix is ​​a 64-bit mask. 2) Upon receiving a network resource request, the network manager verifies the validity of the network resource, including the legality of the network prefix, gateway address, network prefix mask, whether the network prefix address conflicts, the validity of the DNS domain name address, and the legality of the description and name. Valid network resource information will be persisted to the database. Finally, the network manager notifies the data center controller of the network prefix and gateway information. 3) The data center controller receives the network configuration information, encapsulates the information in JSON format, and announces it to the IPv6 gateway manager via socket; 4) After receiving the announcement from the data center controller, the IPv6 gateway manager configures the gateway port and IPv6 network segment routes, adds the new network prefix to the RADVD configuration file, and restarts RADVD to start sending RA packets periodically within the link local area.

4. The method for containerized stateless configuration and networking of IPv6 addresses according to claim 1, characterized in that, The virtual machine configuration process is the process by which a user initiates the activation of a virtual machine. This process includes virtual machine activation and network prefix request procedures, as detailed below: 1) Users initiate virtual machine resource request requests through the unified resource management interface. The request is sent to the virtual machine resource manager, including the network resources, specifications, images, disks, names, and descriptions requested by the virtual machine. 2) After receiving the virtual machine activation request, the virtual machine manager begins to verify the validity of the virtual machine configuration, check whether network resources are available, whether there are access control restrictions, the validity of the virtual machine specifications, and whether the system resource availability is met. After the verification is completed, this information is pre-stored in the database for persistence, and then the virtual machine activation message is sent to the data center controller. 3) After receiving the virtual machine activation message, the data center controller allocates a host machine and configures OVS information and flow table information on the host machine to guide the forwarding of virtual machine traffic. Then, it sends an RA announcement to the virtual machine to announce the network prefix and gateway information to the virtual machine, and then sends the virtual machine information to the virtual machine manager. 4) The Virtual Machine Manager receives virtual machine information and persists it to the database; 5) When a virtual machine receives a RA message, it uses the EUI-64 algorithm to generate a global unicast address based on the network prefix and MAC address, sends a DAD probe to verify the uniqueness of the address, and configures a network segment route. This route is a 64-bit mask, and virtual machines in the same network can communicate through Layer 2 without going through the IPv6 gateway manager.

5. A system for containerizing stateless configuration and networking of IPv6 addresses, characterized in that, This includes the data center controller, network manager, virtual machine manager, IPv6 gateway manager, and unified resource management interface. The data center controller manages the network manager and virtual machine manager downwards, and controls the gateway port configuration and RADVD configuration of the IPv6 gateway manager upwards. It also enables status monitoring for the network manager, virtual machine manager and IPv6 gateway manager to promptly remedy abnormal services. The network manager is a configuration component that provides basic network information. It receives network resource requests and releases from the unified resource management interface, verifies the validity of network resource configurations, and persists network resource configurations to the database. The Virtual Machine Manager is used to activate and deactivate virtual machines and manage their entire lifecycle. The IPv6 gateway manager acts as the system's routing switch, providing forwarding routes across network segments and to the external network. The unified resource management interface provides users with a convenient resource application page, through which users can initiate network and virtual machine applications; The system achieves stateless configuration and networking of IPv6 addresses through the method described in any one of claims 1 to 4.

6. A containerized device for stateless configuration and networking of IPv6 addresses, characterized in that, include: At least one memory and at least one processor; The at least one memory is used to store a machine-readable program; The at least one processor is configured to invoke the machine-readable program to implement the method according to any one of claims 1 to 4.

7. A computer-readable medium, characterized in that, The computer-readable medium stores computer instructions that, when executed by a processor, cause the processor to perform the method described in any one of claims 1 to 4.

Images