A hybrid cloud network communication method and system based on virtual routing gateway

Abstract

The present invention provides a hybrid cloud network communication method and system based on a virtual routing gateway, comprising: a cloud service platform obtains a creation instruction of a first virtual routing gateway and executes the creation instruction to create the first virtual routing gateway in a target virtual private network on the cloud service platform; the cloud service platform creates a first virtual network card instance in the target virtual private network and binds the first virtual network card instance to the first virtual routing gateway; the cloud service platform sets a first endpoint on a first switch in the target virtual private network; an internet data center sets a second endpoint on the created second switch and establishes a communication connection between the second endpoint and the first endpoint to form a VXLAN tunnel; the cloud service platform can send request traffic to the internet data center through the VLAN network, and can also enable the internet data center to send response data back to the cloud service platform, thereby better protecting the communication security between the cloud service platform and the internet data center.

Description

Technical Field

[0001] The present invention relates to the field of Internet cloud network technology, and in particular to a hybrid cloud network communication method and system based on a virtual routing gateway. Background Art

[0002] Among current cloud platform network technologies, virtual private networks (VPCs) provide excellent isolation. For computing resources within a VPC to provide external services, they typically need to map their internal IP addresses to subnet IP addresses and access them through the subnet. Furthermore, accessing local services also requires the local services to provide subnet IP addresses. While feasible, this approach carries the risk of exposing access addresses to the public, potentially opening the door to attacks and disrupting secure communication between cloud and local services. Summary of the Invention

[0003] The present invention provides a hybrid cloud network communication method and system based on a virtual routing gateway, which solves the problem in the prior art that cloud services and local services cannot communicate securely.

[0004] According to one aspect of the present invention, a hybrid cloud network communication method based on a virtual routing gateway is provided, comprising:

[0005] The cloud service platform obtains a creation instruction for the first virtual routing gateway and executes the creation instruction to create the first virtual routing gateway in the target virtual private network on the cloud service platform;

[0006] The cloud service platform creates a first virtual network card instance in the target virtual private network and binds the first virtual network card instance to the first virtual routing gateway;

[0007] The cloud service platform sets a first endpoint on a first switch in the target virtual private network;

[0008] The internet data center sets a second endpoint on the created second switch and communicatively connects the second endpoint with the first endpoint to form a VXLAN tunnel; wherein the VXLAN tunnel provides a VLAN network;

[0009] The cloud service platform sends the request traffic generated by the subnet in the target virtual private network to the Internet data center based on the VLAN network; wherein the subnet in the target virtual private network is communicatively connected to the first virtual router in the target virtual private network, the first virtual routing gateway is communicatively connected to the first virtual router, and the first switch is communicatively connected to the first virtual routing gateway;

[0010] The Internet data center receives the request traffic based on the VLAN network and sends response data to the cloud service platform.

[0011] In one embodiment, before the cloud service platform sends the request traffic generated by the subnet in the target virtual private network to the internet data center based on the VLAN network, the hybrid cloud network communication method based on the virtual routing gateway further includes:

[0012] The cloud service platform configures the first virtual router based on the first routing configuration rule to obtain a configured first virtual router;

[0013] The cloud service platform configures the first virtual routing gateway based on the second routing configuration rule to obtain a configured first virtual routing gateway; wherein the subnet in the target virtual private network is communicatively connected to the configured first virtual router, the first virtual routing gateway is communicatively connected to the configured first virtual router, and the first switch is communicatively connected to the first virtual routing gateway.

[0014] In one embodiment, the cloud service platform configures the first virtual router based on the first routing configuration rule to obtain the configured first virtual router including:

[0015] The cloud service platform sets the destination network segment of the first virtual router to be the subnet segment of the Internet data center;

[0016] The cloud service platform configures the first virtual router to forward the request traffic to the first virtual network card instance to obtain a configured first virtual router.

[0017] In one embodiment, the cloud service platform configures the first virtual routing gateway based on the second routing configuration rule, so that the configured first virtual routing gateway includes:

[0018] The cloud service platform sets the destination network segment of the first virtual routing gateway to the subnet segment in the target virtual private network;

[0019] The cloud service platform sets the first virtual routing gateway to forward the response data sent by the Internet data center to the first virtual router to obtain the configured first virtual routing gateway.

[0020] In one embodiment, the network segment configured for the first switch in the target virtual private network of the cloud service platform is the same as the network segment configured for the second switch in the Internet data center.

[0021] In one embodiment, after the Internet data center receives the request traffic based on the VLAN network and sends response data to the cloud service platform, the hybrid cloud network communication method based on the virtual routing gateway further includes:

[0022] The cloud service platform creates a second virtual network card instance in the VLAN network and binds the second virtual network card instance to the first virtual routing gateway;

[0023] The cloud service platform sends the response data sent by the Internet data center to the first virtual routing gateway through the second virtual network card instance.

[0024] In one embodiment, the cloud service platform sends the request traffic generated by the subnet in the target virtual private network to the Internet data center based on the VLAN network, including:

[0025] Configuring a static routing rule on the first virtual routing gateway to obtain a configured first virtual routing gateway; wherein the static routing rule includes setting a destination network segment to a subnet segment of the Internet data center, and setting the first virtual routing gateway to send the request traffic to a third virtual network card instance in the VLAN network, wherein the third virtual network card instance is created in the Internet data center;

[0026] Based on the configured first virtual routing gateway and the VLAN network, the request traffic is sent to the subnet of the Internet data center.

[0027] In one embodiment, the Internet data center receives the request traffic based on the VLAN network and sends response data to the cloud service platform, including:

[0028] Create a second virtual routing gateway;

[0029] Based on the third routing configuration rule, configuring the second virtual routing gateway to obtain a configured second virtual routing gateway;

[0030] Based on the VLAN network and the configured second virtual routing gateway, the request traffic is received and response data is sent to the cloud service platform.

[0031] In one embodiment, configuring the second virtual routing gateway based on the third routing configuration rule to obtain the configured second virtual routing gateway includes:

[0032] Setting the destination network segment of the second virtual routing gateway to the subnet segment of the Internet data center;

[0033] The second virtual routing gateway is set to forward the request traffic to the second virtual router of the Internet data center.

[0034] According to another aspect of the present invention, a hybrid cloud network communication system based on a virtual routing gateway is provided, comprising:

[0035] A cloud service platform, configured to obtain a creation instruction for a first virtual routing gateway and execute the creation instruction to create the first virtual routing gateway in a target virtual private network on the cloud service platform, create a first virtual network card instance in the target virtual private network and bind the first virtual network card instance to the first virtual routing gateway, set a first endpoint on a first switch in the target virtual private network, and send request traffic generated by a subnet in the target virtual private network to an internet data center based on a VLAN network; wherein the subnet in the target virtual private network is communicatively connected to the first virtual router in the target virtual private network, the first virtual routing gateway is communicatively connected to the first virtual router, and the first switch is communicatively connected to the first virtual routing gateway;

[0036] The Internet data center is configured to set a second endpoint on the created second switch and communicatively connect the second endpoint with the first endpoint to form a VXLAN tunnel, receive the request traffic based on the VLAN network, and send response data to the cloud service platform; wherein the VXLAN tunnel provides a VLAN network.

[0037] An embodiment of the present invention provides a hybrid cloud network communication method and system based on a virtual routing gateway, including: a cloud service platform obtains a creation instruction of a first virtual routing gateway and executes the creation instruction to create the first virtual routing gateway in a target virtual private network on the cloud service platform, the cloud service platform creates a first virtual network card instance in the target virtual private network and binds the first virtual network card instance to the first virtual routing gateway, the cloud service platform sets a first endpoint on a first switch in the target virtual private network, an internet data center sets a second endpoint on the created second switch and communicatively connects the second endpoint with the first endpoint to form a VXLAN tunnel, wherein the VXLAN tunnel provides a VLAN network, the cloud service platform sends request traffic generated by a subnet in the target virtual private network to the internet data center based on the VLAN network, wherein the subnet in the target virtual private network is communicatively connected to the first virtual router in the target virtual private network, the first virtual routing gateway is communicatively connected to the first virtual router, the first switch is communicatively connected to the first virtual routing gateway, and the internet data center receives the request traffic based on the VLAN network and sends response data to the cloud service platform. In order to save subnet IP address resources and ensure secure communication between the cloud service platform and the Internet data center, they can communicate directly through the intranet address (VLAN network segment). This method not only improves resource utilization efficiency, but also enhances system security, thereby better protecting the security of cloud service resources and local services, and saving public IP address resources. BRIEF DESCRIPTION OF THE DRAWINGS

[0038] Figure 1 It is a flow chart of a hybrid cloud network communication method based on a virtual routing gateway provided by an exemplary embodiment of the present invention.

[0039] Figure 2 It is a flow chart of a hybrid cloud network communication method based on a virtual routing gateway provided by another exemplary embodiment of the present invention.

[0040] Figure 3 It is a communication diagram of a hybrid cloud network communication system based on a virtual routing gateway provided by an exemplary embodiment of the present invention.

[0041] Figure 4 It is a structural diagram of a hybrid cloud network communication system based on a virtual routing gateway provided by an exemplary embodiment of the present invention.

[0042] Figure 5 It is a structural diagram of an electronic device provided by an exemplary embodiment of the present application. DETAILED DESCRIPTION

[0043] A virtual routing gateway can bind network cards from multiple non-business segments and automatically configure static routes for these networks by communicating with the management network, enabling communication between multiple networks using internal network addresses. Using a virtual routing gateway, you can connect virtual private networks on the cloud to dedicated mapped networks on the cloud platform. Furthermore, because the virtual routing gateway can be controlled through route configuration, it can manage communication between cloud and local networks to a certain extent.

[0044] VXLAN technology is a network virtualization technology within NVO3. It encapsulates data packets sent by the original host in UDP, using the physical network's IP and MAC addresses as the outer header. The data is then transmitted over the IP network. Upon reaching the destination, the tunnel endpoint decapsulates the data and sends it to the target host. VXLAN technology enables the construction of a virtual Layer 2 network on an existing Layer 3 network, enabling Layer 2 interoperability between hosts. This eliminates the limitations of physical network IP addresses and broadcast domains, simplifying network management. By using VXLAN technology and establishing VXLAN tunnel VTEP ports on the network mapped on the cloud platform and the local network, Layer 2 network communication over a Layer 3 network can be achieved architecturally.

[0045] VLAN (Virtual Local Area Network) is a network technology used to divide a physical network into multiple logical subnets. Even within the same physical network, VLAN allows different devices to be in different broadcast domains, thereby improving network management flexibility and security.

[0046] A Virtual Private Network (VPC) is an isolated network created in a cloud computing environment that allows users to build their own private network environment on public cloud infrastructure.

[0047] A virtual network interface card (vNIC) is a network interface created in a virtualized environment and used to connect a virtual machine (VM) to the network.

[0048] Internet Data Center (IDC) provides multi-faceted infrastructure and support for cloud service platforms to ensure the efficiency and reliability of cloud services.

[0049] A cloud service platform refers to the infrastructure and applications that provide cloud computing resources and services, allowing users to access and use computing resources through the Internet without having to install and maintain hardware or software locally.

[0050] A switch is an important device in a computer network, used to connect multiple devices (such as computers, printers, and servers) and forward data between them.

[0051] A virtual router is a router function implemented through virtualization technology. It creates multiple virtual routing instances on a single physical hardware. Each virtual router can independently process network traffic, configure routing protocols, and interact with physical and virtual network devices.

[0052] Figure 1 FIG is a flow chart of a hybrid cloud network communication method based on a virtual routing gateway provided by an exemplary embodiment of the present invention. Figure 1 As shown, the hybrid cloud network communication method based on the virtual routing gateway includes:

[0053] Step 110: The cloud service platform obtains a creation instruction for the first virtual routing gateway and executes the creation instruction to create the first virtual routing gateway in the target virtual private network on the cloud service platform.

[0054] In this embodiment of the present invention, to enable communication between the cloud service platform and the internet data center, a first virtual routing gateway is created within the cloud service platform's target virtual private network (VPN). This virtual routing gateway enables secure communication between the cloud service platform and the internet data center. The virtual routing gateway creates a secure network boundary within the VPN, ensuring that only authorized traffic can enter and exit the VPN, thereby enhancing overall security. The virtual routing gateway can be responsible for managing traffic routing between multiple VPNs.

[0055] In the present invention, users can log in to the cloud service platform and create a target virtual private network in the cloud service platform. In the target virtual private network, one or more subnets can be created. Multiple servers can be established in the subnets to achieve load balancing, disperse traffic, and improve availability and performance. If a server fails, traffic can be automatically switched to other healthy servers.

[0056] Step 120: The cloud service platform creates a first virtual network card instance in the target virtual private network and binds the first virtual network card instance to the first virtual routing gateway.

[0057] In an embodiment of the present invention, the cloud service platform receives an instruction to create an instance, creates a virtual network card instance in the target virtual network of the cloud service platform, and binds the virtual network card instance to a virtual routing gateway. The virtual network card instance forwards network packets through the virtual routing gateway, transferring traffic from a virtual private network (VPC) or subnet to other networks (such as the Internet or another VPC). For example, in virtual private network A, a virtual network card instance a is created and bound to the virtual routing gateway.

[0058] Step 130: The cloud service platform sets a first endpoint on a first switch in the target virtual private network.

[0059] Step 140: The Internet data center sets a second endpoint on the created second switch and communicatively connects the second endpoint with the first endpoint to form a VXLAN tunnel, wherein the VXLAN tunnel provides a VLAN network.

[0060] In an embodiment of the present invention, in order to ensure that the cloud service platform and the Internet data center can communicate, it is necessary to ensure in advance that the subnet IP segments of the two networks are accessible. Create a VXLAN tunnel on the switches at both ends. The VXLAN tunnel is determined by a pair of VTEP IP addresses. The creation of a static VXLAN tunnel is completed entirely by manually configuring the VNI and VTEP IP addresses of the local and remote ends. As long as the VTEP IPs at both ends of the VXLAN tunnel are reachable by Layer 3 routing, the VXLAN tunnel can be successfully established. After the tunnel is established, the VXLAN network is mapped to the VLAN network of the cloud service platform, and Layer 2 communication with the IP segment of the local network of the Internet data center can be carried out through the VXLAN tunnel. VTEP (Virtual Tunnel End Point) is a key component for realizing network virtualization, especially in VXLAN (Virtual Extended Local Area Network). The main function of VTEP is to encapsulate the traffic of virtual machines or virtual networks into VXLAN data packets and transmit them through the physical network. VNI (VXLAN Network Identifier) ​​is a key concept in the VXLAN (Virtual Extended Local Area Network) protocol, used to identify different virtual networks.

[0061] Step 150: The cloud service platform sends the request traffic generated by the subnet in the target virtual private network to the Internet data center based on the VLAN network, wherein the subnet in the target virtual private network is communicatively connected to the first virtual router in the target virtual private network, the first virtual routing gateway is communicatively connected to the first virtual router, and the first switch is communicatively connected to the first virtual routing gateway.

[0062] In an embodiment of the present invention, the cloud service platform can send request traffic or data packets to the Internet data center through the VLAN network, so that corresponding response data can be obtained from the Internet data center.

[0063] Step 160: The Internet data center receives the request traffic based on the VLAN network and sends response data to the cloud service platform.

[0064] In an embodiment of the present invention, the Internet data center transmits the data packets desired by the cloud service platform to the cloud service platform via a VLAN network, so that the cloud service platform can view or process them. For example, the Internet data center can provide monitoring data (monitoring data can monitor the performance data of servers, storage and network devices in real time, such as CPU usage, memory usage, network traffic, etc.), log data (log data can record system operations, user behavior, faults and abnormal events, which is convenient for subsequent analysis and troubleshooting), traffic data (traffic data can be real-time data of network traffic, including inbound and outbound traffic statistics), etc. The CPU (Central Processing Unit) is one of the core components of a computer system, responsible for executing program instructions and processing data.

[0065] An embodiment of the present invention provides a hybrid cloud network communication method based on a virtual routing gateway, including: a cloud service platform obtains a creation instruction of a first virtual routing gateway and executes the creation instruction to create the first virtual routing gateway in a target virtual private network on the cloud service platform, the cloud service platform creates a first virtual network card instance in the target virtual private network and binds the first virtual network card instance to the first virtual routing gateway, the cloud service platform sets a first endpoint on a first switch in the target virtual private network, an internet data center sets a second endpoint on the created second switch and communicatively connects the second endpoint with the first endpoint to form a VXLAN tunnel, wherein the VXLAN tunnel provides a VLAN network, the cloud service platform sends request traffic generated by a subnet in the target virtual private network to the internet data center based on the VLAN network, wherein the subnet in the target virtual private network is communicatively connected to the first virtual router in the target virtual private network, the first virtual routing gateway is communicatively connected to the first virtual router, the first switch is communicatively connected to the first virtual routing gateway, and the internet data center receives the request traffic based on the VLAN network and sends response data to the cloud service platform. In order to save subnet IP address resources and ensure secure communication between the cloud service platform and the Internet data center, they can communicate directly through the intranet address (VLAN network segment). This method not only improves resource utilization efficiency, but also enhances system security, thereby better protecting the security of cloud service resources and local services, and saving public IP address resources.

[0066] In one embodiment, before step 150, the hybrid cloud network communication method based on the virtual routing gateway of the cloud service platform can be specifically implemented as follows: based on the first routing configuration rule, the first virtual router is configured to obtain the configured first virtual router; based on the second routing configuration rule, the cloud service platform configures the first virtual routing gateway to obtain the configured first virtual routing gateway; wherein, the subnet in the target virtual private network is communicatively connected to the configured first virtual router, the first virtual routing gateway is communicatively connected to the configured first virtual router, and the first switch is communicatively connected to the first virtual routing gateway.

[0067] In an embodiment of the present invention, communication between a cloud service platform and an internet data center is achieved by configuring a first virtual router and a first virtual routing gateway. The present invention configures the first virtual router by setting a first routing configuration rule and the first virtual routing gateway by setting a second routing configuration rule, so that request traffic generated by a subnet can be sent to the configured first virtual router. The request traffic is then sent from the configured first virtual router to the configured first virtual routing gateway. The configured first virtual routing gateway sends the request traffic to a first switch, which then sends the request traffic to a second switch in the internet data center via the first switch.

[0068] Specifically, the cloud service platform configures the first virtual router based on the first routing configuration rule to obtain the configured first virtual router, including: the cloud service platform sets the destination network segment of the first virtual router to the subnet segment of the Internet data center; the cloud service platform sets the first virtual router to forward the request traffic to the first virtual network card instance to obtain the configured first virtual router.

[0069] The present invention can achieve secure traffic management between a virtual private network and an Internet data center by setting a first routing rule, that is, only permitted traffic can pass through the first virtual network card instance to the Internet data center. Therefore, it is necessary to set the destination network segment of the first virtual router to be the subnet segment of the Internet data center, and set the first virtual router to forward the request traffic to the first virtual network card instance. When the request traffic sent by the subnet in the target virtual private network is destined for the subnet of the Internet data center, the request traffic sent by the subnet in the target virtual private network will be sent through the interface of the first virtual network card instance. For example, setting the destination network segment of the first virtual router to be the subnet segment of the Internet data center, and setting the first virtual router to forward the request traffic to the first virtual network card instance can be expressed as follows: the destination network segment of the first virtual router v-router is the subnet segment of the Internet data center, and the next hop is the first virtual network card instance a.

[0070] Specifically, the cloud service platform configures the first virtual routing gateway based on the second routing configuration rule to obtain the configured first virtual routing gateway, including: the cloud service platform sets the destination network segment of the first virtual routing gateway to the subnet segment of the subnet; the cloud service platform sets the first virtual routing gateway to forward the response data sent by the Internet data center to the first virtual router to obtain the configured first virtual routing gateway.

[0071] In an embodiment of the present invention, by setting a second routing configuration rule, the request traffic passing through the first virtual routing gateway is sent to the Internet data center. Specifically, the destination network segment of the first virtual routing gateway is set to the subnet network segment of the subnet, and the first virtual routing gateway is set to forward the request traffic to the first virtual router to obtain the configured first virtual routing gateway. That is, when the response data sent by the Internet data center passes through the first virtual routing gateway, if the subnet of the subnet of the first virtual routing gateway is the subnet of the subnet, then the response data sent by the Internet data center will be sent through the interface of the first virtual router. For example, setting the destination network segment of the first virtual routing gateway to the subnet network segment in the target virtual private network, and setting the first virtual routing gateway to forward the request traffic to the first virtual router can be expressed as: the destination network segment of the first virtual road gateway is the connected network segment (subnet network segment) of the virtual private network A, and the next hop is the gateway on the v-router.

[0072] In one embodiment, the network segment configured on the first switch of the cloud service platform in the target virtual private network is the same as the network segment configured on the second switch of the Internet data center.

[0073] In an embodiment of the present invention, in order to enable the cloud service platform and the Internet data center to transmit data, traffic, etc. in the VLAN network, it is necessary to configure the network segment of the first switch of the cloud service platform in the target virtual private network to be the same as the network segment of the second switch of the Internet data center.

[0074] In addition, in order to map the VLAN network to the cloud service platform, the following steps can be used to implement it:

[0075] The VLAN network mapped to the VXLAN network on the cloud platform is called Network B. In VLAN Network B, create Elastic Network Interface Card (ENIC) B (the second virtual network interface card instance) and add it to the first virtual routing gateway. Configure a static route for the first virtual routing gateway, with the destination network segment being the network segment to which the local network of the internet data center needs to connect (the internet data center's subnet segment), and the next hop being the second virtual routing gateway. The second virtual routing gateway is located in the internet data center.

[0076] Among them, a static route is configured for the first virtual routing gateway, the destination network segment is the network segment that the local network of the Internet data center needs to be connected to (the subnet segment of the Internet data center), and the next hop points to the second virtual routing gateway, which means that the cloud service platform creates a second virtual network card instance in the VLAN network and binds the second virtual network card instance to the first virtual routing gateway. The cloud service platform sends the request traffic to the second virtual routing gateway through the second virtual network card instance.

[0077] To map the VLAN network to the Internet data center, the following steps can be used:

[0078] Configure routing rules on the second virtual routing gateway, with the destination network segment being the subnet segment of the target virtual private network and the next hop being the fourth virtual gateway instance. Create a third virtual network adapter instance in the VLAN network and configure routing rules on the third virtual network adapter instance, with the destination network segment being the subnet segment of the target virtual private network and the next hop being the second virtual network adapter instance.

[0079] Among them, the routing rules are configured in the second virtual routing gateway, the destination network segment is the subnet network segment in the target virtual private network, and the next hop is the fourth virtual gateway instance, which means that the Internet data center sends the request traffic to the fourth virtual gateway instance through the second virtual routing gateway.

[0080] Among them, the third virtual network card instance configures routing rules, the destination network segment is the network segment of the subnet in the target virtual private network, and the next hop is the second virtual network card instance, which means that the Internet data center creates a third virtual network card instance in the VLAN network, and the Internet data center sends the response data to the second virtual network card instance through the third virtual network card instance.

[0081] Figure 2 FIG is a flow chart of a hybrid cloud network communication method based on a virtual routing gateway provided by another exemplary embodiment of the present invention. Figure 2 As shown, after step 160, the following steps may also be included:

[0082] Step 170: The cloud service platform creates a second virtual network card instance in the VLAN network and binds the second virtual network card instance to the first virtual routing gateway.

[0083] In an embodiment of the present invention, the cloud service platform creates a second virtual network card instance in the VLAN network and binds the second virtual network card instance to the first virtual routing gateway. The cloud service platform sends the request traffic to the second virtual routing gateway through the second virtual network card instance.

[0084] Step 180: The cloud service platform sends the response data sent by the Internet data center to the first virtual routing gateway through the second virtual network card instance.

[0085] In one embodiment, step 150 can be specifically implemented as follows: configuring static routing rules on the first virtual routing gateway to obtain a configured first virtual routing gateway; wherein the static routing rules include setting the destination network segment to the subnet segment of the Internet data center, setting the first virtual routing gateway to send the request traffic to the third virtual network card instance in the VLAN network, and the third virtual network card instance is created in the Internet data center; based on the configured first virtual routing gateway and the VLAN network, sending the request traffic to the subnet of the Internet data center.

[0086] In an embodiment of the present invention, in order to send the request traffic sent by the cloud service platform to the subnet of the Internet data center, the destination network segment of the first virtual routing gateway is set to the subnet segment of the Internet data center, and the first virtual routing gateway is set to send the request traffic to the third virtual network card instance in the VLAN network, so that the request traffic of the first virtual routing gateway is sent to the second switch of the Internet data center through the first switch, and the request traffic is sent to the third virtual network card instance in the VLAN network.

[0087] In one embodiment, step 160 can be specifically implemented as follows: creating a second virtual routing gateway; configuring the second virtual routing gateway based on the third routing configuration rule to obtain a configured second virtual routing gateway; receiving request traffic based on the VLAN network and the configured second virtual routing gateway and sending response data to the cloud service platform.

[0088] In an embodiment of the present invention, in order for the Internet data center to receive the request traffic of the cloud service platform, it is necessary to establish a second virtual routing gateway in the Internet data center, and receive the request traffic transmitted by the cloud service platform through the VLAN network through the second virtual routing gateway. Then, the Internet data center responds based on the request traffic, outputs response data, and sends the response data back to the cloud service platform through the second virtual routing gateway.

[0089] In one embodiment, step 160 can be specifically implemented as follows: setting the destination network segment of the second virtual routing gateway to the subnet segment of the Internet data center; and setting the second virtual routing gateway to forward the request traffic to the second virtual router of the Internet data center.

[0090] In an embodiment of the present invention, communication between the cloud service platform and the Internet data center is achieved by setting the destination network segment of the second virtual routing gateway to the subnet segment of the Internet data center and setting the second virtual routing gateway to forward the request traffic to the second virtual router of the Internet data center.

[0091] In one embodiment, before step 170, the hybrid cloud network communication method based on the virtual routing gateway can be specifically implemented as follows: the Internet data center configures the second virtual routing gateway of the Internet data center based on the third routing configuration rule to obtain the configured second virtual routing gateway; the Internet data center sends the response data to the second virtual network card instance of the cloud service platform based on the configured second virtual routing gateway.

[0092] Specifically, the Internet data center configures the second virtual routing gateway of the Internet data center based on the third routing configuration rule to obtain the configured second virtual routing gateway, which may include the following steps:

[0093] The destination network segment of the second virtual routing gateway is set to the subnet network segment in the target virtual private network, and the second virtual routing gateway is set to send the response data to the second virtual routing gateway.

[0094] Figure 3 FIG. 1 is a communication diagram of a hybrid cloud network communication system based on a virtual routing gateway provided by an exemplary embodiment of the present invention. Figure 3As shown, a first virtual routing gateway (virtual gateway) is created in the target virtual private network (VPC1) on the cloud service platform. This first virtual routing gateway is responsible for managing traffic routing between multiple virtual private networks. A first virtual network adapter (NIC) instance (eth1) is created in the target virtual private network (VPC1) and bound to the first virtual routing gateway (virtual gateway). The subnet (subnet) in the target virtual private network (VPC1) has an IP address in the 192.168.0.0 / 16 subnet. This subnet communicates with the first virtual router (v-router). The destination network segment of the first virtual router (v-router) is the IP address of the Internet Data Center (IDC) subnet (172.16.0.0 / 12), and the next hop is the first virtual network adapter (eth1). Routing rules are configured in the first virtual routing gateway, with the destination network segment being the subnet (192.168.0.0 / 16) of the target virtual private network (VPC1), and the next hop being the first virtual router (v-router). Establish two VTEP endpoints for the VXLAN tunnel using the IP subnet segments of the cloud service platform and the internet data center. Map the VXLAN networks to VLANs in both environments, configuring the same IP segment (100.200.0.0 / 24). Create a second virtual network adapter (NIC) instance, vlan-eth1, in the VLAN network mapped by the cloud service platform and bind it to the first virtual routing gateway, virtual gateway. Configure a static route on the first virtual routing gateway, with the destination segment being the internet data center's subnet IP segment (172.16.0.0 / 12) and the next hop being the third virtual gateway instance, vlan-eth2, in the internet data center. Establish a second virtual router, router, in the internet data center's local network. The second virtual router communicates with the internet data center's subnet, connects to the fourth virtual network adapter (NIC) instance, eth2, connects to the second virtual routing gateway, gateway, and connects to the third virtual gateway instance, vlan-eth2. The destination network segment of the second virtual router, router, is the subnet IP segment of the cloud service platform (192.168.0.0 / 16). The second virtual routing gateway, gateway, is configured with a routing rule whose destination network segment is the subnet IP segment of the Internet data center (172.16.0.0 / 12) and whose next hop is the second virtual router, router.A static route is configured for the second virtual routing gateway, with the destination network segment being the cloud service platform's subnet IP segment (192.168.0.0 / 16) and the next hop being the second virtual network adapter instance, vlan-eth1. The fourth virtual network adapter instance, eth2, and the third virtual gateway instance, vlan-eth2, are each bound to the second virtual routing gateway, gateway.

[0095] The path for sending request traffic from the cloud service platform to the Internet data center is:

[0096] The subnet sends the request traffic to the first virtual router v-router. Since the first virtual router's destination network segment is the Internet data center's subnet segment and its next hop is the first virtual network adapter instance eth1, the first virtual router v-router sends the request traffic to the first virtual network adapter instance eth1. The first virtual network adapter instance eth1 sends the request traffic to the first virtual routing gateway virtual gateway. Since the first virtual routing gateway virtual gateway is configured with static routing, the destination network segment is the Internet data center's subnet segment and its next hop is the third virtual gateway instance vlan-eth2. Therefore, the first virtual routing gateway virtual gateway sends the request traffic to the third virtual gateway instance vlan-eth2 via the VLAN network. The third virtual network adapter instance vlan-eth2 sends the request traffic to the second virtual network adapter instance gateway. Since the second virtual network adapter instance gateway is configured with the destination network segment of the Internet data center's subnet segment and its next hop is the second virtual router router, the second virtual routing gateway gateway sends the request traffic to the Internet data center's subnet. The path for sending response data from the Internet data center to the cloud service platform is:

[0097] The Internet data center's subnet sends the response data to the second virtual router (router). The second virtual router is configured with the subnet of the target virtual private network (VPC1) as the destination network segment, and the next hop is the fourth virtual network interface card (NIC) instance, eth2. Therefore, the second virtual router sends the response data to the fourth virtual network interface card (NIC) instance, eth2. The fourth virtual network interface card (NIC) instance, eth2, sends the response data to the second virtual network interface card (NIC) instance, gateway. The second virtual network interface card (NIC) instance, gateway, is configured with the subnet of the target virtual private network (VPC1) as the destination network segment, and the next hop is the second virtual network interface card (NIC) instance, vlan-eth1. Therefore, the second virtual network interface card (NIC) instance, gateway, sends the response data to the second virtual network interface card (NIC) instance, vlan-eth1. The second virtual network interface card (NIC) instance, vlan-eth1, sends the response data to the first virtual routing gateway, virtual gateway. The first virtual routing gateway virtual gateway is configured with the destination network segment as the subnet segment of the target virtual private network VPC1, and the next hop is the first virtual router v-router. Therefore, the first virtual routing gateway virtual gateway sends the response data to the first virtual router v-router, and the first virtual router v-router sends the response data to the subnet in the cloud service platform.

[0098] Figure 4 FIG is a structural diagram of a hybrid cloud network communication system based on a virtual routing gateway provided by an exemplary embodiment of the present invention. Figure 4 As shown, the hybrid cloud network communication system 20 based on the virtual routing gateway includes: a cloud service platform 201, which is used to obtain a creation instruction of a first virtual routing gateway and execute the creation instruction to create the first virtual routing gateway in the target virtual private network on the cloud service platform, create a first virtual network card instance in the target virtual private network and bind the first virtual network card instance to the first virtual routing gateway, set a first endpoint on the first switch in the target virtual private network, and send the request traffic generated by the subnet in the target virtual private network to the Internet data center based on the VLAN network; wherein, the subnet in the target virtual private network is communicatively connected to the first virtual router in the target virtual private network, the first virtual routing gateway is communicatively connected to the first virtual router, and the first switch is communicatively connected to the first virtual routing gateway; the Internet data center 202 is used to set a second endpoint on the created second switch and communicatively connect the second endpoint with the first endpoint to form a VXLAN tunnel, receive the request traffic based on the VLAN network and send response data to the cloud service platform; wherein, the VXLAN tunnel provides a VLAN network.

[0099] An embodiment of the present invention provides a hybrid cloud network communication system based on a virtual routing gateway, including: a cloud service platform obtains a creation instruction of a first virtual routing gateway and executes the creation instruction to create the first virtual routing gateway in a target virtual private network on the cloud service platform, creates a first virtual network card instance in the target virtual private network and binds the first virtual network card instance to the first virtual routing gateway, sets a first endpoint on a first switch in the target virtual private network, and sends request traffic generated by a subnet in the target virtual private network to an Internet data center based on a VLAN network; wherein, the subnet in the target virtual private network is communicatively connected to the first virtual router in the target virtual private network, the first virtual routing gateway is communicatively connected to the first virtual router, and the first switch is communicatively connected to the first virtual routing gateway; the Internet data center sets a second endpoint on the created second switch and communicatively connects the second endpoint to the first endpoint to form a VXLAN tunnel, receives request traffic based on the VLAN network, and sends response data to the cloud service platform, wherein the VXLAN tunnel provides a VLAN network. In order to save subnet IP address resources and ensure secure communication between the cloud service platform and the Internet data center, they can communicate directly through the intranet address (VLAN network segment). This method not only improves resource utilization efficiency, but also enhances system security, thereby better protecting the security of cloud service resources and local services, and saving public IP address resources.

[0100] In one embodiment, the cloud service platform 201 can be specifically configured as follows: the cloud service platform configures the first virtual router based on the first routing configuration rule to obtain the configured first virtual router; the cloud service platform configures the first virtual routing gateway based on the second routing configuration rule to obtain the configured first virtual routing gateway; wherein, the subnet in the target virtual private network is communicatively connected to the configured first virtual router, the first virtual routing gateway is communicatively connected to the configured first virtual router, and the first switch is communicatively connected to the first virtual routing gateway.

[0101] In one embodiment, the cloud service platform 201 can be specifically configured as follows: the cloud service platform sets the destination network segment of the first virtual router to be the subnet segment of the Internet data center; the cloud service platform sets the first virtual router to forward the request traffic to the first virtual network card instance to obtain the configured first virtual router.

[0102] In one embodiment, the cloud service platform 201 can be specifically configured as follows: the cloud service platform sets the destination network segment of the first virtual routing gateway to the subnet network segment in the target virtual private network; the cloud service platform sets the first virtual routing gateway to forward the response data sent by the Internet data center to the first virtual router to obtain the configured first virtual routing gateway.

[0103] In one embodiment, the network segment configured on the first switch of the cloud service platform in the target virtual private network is the same as the network segment configured on the second switch of the Internet data center.

[0104] In one embodiment, the hybrid cloud network communication system based on the virtual routing gateway can be specifically configured as follows: the cloud service platform creates a second virtual network card instance in the VLAN network and binds the second virtual network card instance to the first virtual routing gateway; the cloud service platform sends the response data sent by the Internet data center to the first virtual routing gateway through the second virtual network card instance.

[0105] In one embodiment, the cloud service platform 201 can be specifically configured as follows: configuring static routing rules on the first virtual routing gateway to obtain the configured first virtual routing gateway; wherein the static routing rules include setting the destination network segment to the subnet segment of the Internet data center, setting the first virtual routing gateway to send the request traffic to the third virtual network card instance in the VLAN network, and the third virtual network card instance is created in the Internet data center; based on the configured first virtual routing gateway and the VLAN network, sending the request traffic to the subnet of the Internet data center.

[0106] In one embodiment, the Internet data center 202 can be specifically configured to: create a second virtual routing gateway; configure the second virtual routing gateway based on a third routing configuration rule to obtain a configured second virtual routing gateway; based on the VLAN network and the configured second virtual routing gateway, receive request traffic and send response data to the cloud service platform.

[0107] In one embodiment, the Internet data center 202 can be specifically configured as follows: setting the destination network segment of the second virtual routing gateway to the subnet segment of the Internet data center; and setting the second virtual routing gateway to forward the request traffic to the second virtual router of the Internet data center.

[0108] Figure 5 The figure shows a block diagram of an electronic device according to an embodiment of the present application.

[0109] like Figure 5 As shown, the electronic device 10 includes one or more processors 11 and a memory 12 .

[0110] The processor 11 may be a central processing unit (CPU) or other forms of processing units having data processing capabilities and / or instruction execution capabilities, and may control other components in the electronic device 10 to perform desired functions.

[0111] The memory 12 may include one or more computer program products, which may include various forms of computer-readable storage media, such as volatile memory and / or non-volatile memory. The volatile memory may, for example, include random access memory (RAM) and / or cache memory (cache), etc. The non-volatile memory may, for example, include read-only memory (ROM), a hard disk, a flash memory, etc. One or more computer program instructions may be stored on the computer-readable storage medium, and the processor 11 may execute the program instructions to implement the hybrid cloud network communication method based on the virtual routing gateway of each embodiment of the present application described above and / or other desired functions. Various contents such as input signals, signal components, noise components, etc. may also be stored in the computer-readable storage medium.

[0112] In one example, the electronic device 10 may further include an input device 13 and an output device 14 , and these components are interconnected via a bus system and / or other forms of connection mechanisms (not shown).

[0113] When the electronic device is a stand-alone device, the input device 13 may be a communication network connector, configured to receive collected input signals from the first device and the second device.

[0114] In addition, the input device 13 may also include, for example, a keyboard, a mouse, and the like.

[0115] The output device 14 can output various information to the outside, including determined distance information, direction information, etc. The output device 14 can include, for example, a display, a speaker, a printer, a communication network and a remote output device connected thereto, and the like.

[0116] Of course, to simplify, Figure 5 Only some of the components related to the present application in the electronic device 10 are shown, and components such as a bus, an input / output interface, etc. are omitted. In addition, the electronic device 10 may further include any other appropriate components according to specific application scenarios.

[0117] The computer program product may be written in any combination of one or more programming languages ​​to implement the program code for performing the operations of the embodiments of the present application, including object-oriented programming languages ​​such as Java, C++, and conventional procedural programming languages ​​such as "C" or similar programming languages. The program code may be executed entirely on the user's computing device, partially on the user's computing device, as a standalone software package, partially on the user's computing device and partially on a remote computing device, or entirely on a remote computing device or server.

[0118] The computer-readable storage medium can adopt any combination of one or more readable media. The readable medium can be a readable signal medium or a readable storage medium. The readable storage medium can, for example, include but is not limited to a system, device or component of electricity, magnetism, light, electromagnetic, infrared, or semiconductor, or any combination thereof. More specific examples (non-exhaustive list) of readable storage media include: an electrical connection with one or more wires, a portable disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination thereof.

[0119] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention should be included in the scope of protection of the present invention.

Claims

1. A hybrid cloud network communication method based on a virtual routing gateway, characterized in that: include: The cloud service platform obtains a creation instruction for the first virtual routing gateway and executes the creation instruction to create the first virtual routing gateway in the target virtual private network on the cloud service platform; The cloud service platform creates a first virtual network card instance in the target virtual private network and binds the first virtual network card instance to the first virtual routing gateway; The cloud service platform sets a first endpoint on a first switch in the target virtual private network; The internet data center sets a second endpoint on the created second switch and communicatively connects the second endpoint with the first endpoint to form a VXLAN tunnel; wherein the VXLAN tunnel provides a VLAN network; The cloud service platform sends the request traffic generated by the subnet in the target virtual private network to the Internet data center based on the VLAN network; wherein the subnet in the target virtual private network is communicatively connected to the first virtual router in the target virtual private network, the first virtual routing gateway is communicatively connected to the first virtual router, and the first switch is communicatively connected to the first virtual routing gateway; The Internet data center receives the request traffic based on the VLAN network and sends response data to the cloud service platform.

2. The hybrid cloud network communication method based on virtual routing gateway according to claim 1, characterized in that: Before the cloud service platform sends the request traffic generated by the subnet in the target virtual private network to the Internet data center based on the VLAN network, the method further includes: The cloud service platform configures the first virtual router based on the first routing configuration rule to obtain a configured first virtual router; The cloud service platform configures the first virtual routing gateway based on the second routing configuration rule to obtain a configured first virtual routing gateway; wherein the subnet in the target virtual private network is communicatively connected to the configured first virtual router, the first virtual routing gateway is communicatively connected to the configured first virtual router, and the first switch is communicatively connected to the first virtual routing gateway.

3. The hybrid cloud network communication method based on virtual routing gateway according to claim 2, characterized in that: The cloud service platform configures the first virtual router based on the first routing configuration rule, so that the configured first virtual router includes: The cloud service platform sets the destination network segment of the first virtual router to be the subnet segment of the Internet data center; The cloud service platform configures the first virtual router to forward the request traffic to the first virtual network card instance to obtain a configured first virtual router.

4. The hybrid cloud network communication method based on virtual routing gateway according to claim 2, characterized in that: The cloud service platform configures the first virtual routing gateway based on the second routing configuration rule, so that the configured first virtual routing gateway includes: The cloud service platform sets the destination network segment of the first virtual routing gateway to the subnet segment in the target virtual private network; The cloud service platform sets the first virtual routing gateway to forward the response data sent by the Internet data center to the first virtual router to obtain the configured first virtual routing gateway.

5. The hybrid cloud network communication method based on virtual routing gateway according to claim 1, characterized in that: The network segment configured for the first switch of the cloud service platform in the target virtual private network is the same as the network segment configured for the second switch of the Internet data center.

6. The hybrid cloud network communication method based on virtual routing gateway according to claim 1, characterized in that: After the Internet data center receives the request traffic based on the VLAN network and sends response data to the cloud service platform, the method further includes: The cloud service platform creates a second virtual network card instance in the VLAN network and binds the second virtual network card instance to the first virtual routing gateway; The cloud service platform sends the response data sent by the Internet data center to the first virtual routing gateway through the second virtual network card instance.

7. The hybrid cloud network communication method based on virtual routing gateway according to claim 1, characterized in that: The cloud service platform sending the request traffic generated by the subnet in the target virtual private network to the Internet data center based on the VLAN network includes: Configuring a static routing rule on the first virtual routing gateway to obtain a configured first virtual routing gateway; wherein the static routing rule includes setting a destination network segment to a subnet segment of the Internet data center, and setting the first virtual routing gateway to send the request traffic to a third virtual network card instance in the VLAN network, wherein the third virtual network card instance is created in the Internet data center; Based on the configured first virtual routing gateway and the VLAN network, the request traffic is sent to the subnet of the Internet data center.

8. The hybrid cloud network communication method based on virtual routing gateway according to claim 1, characterized in that: The Internet data center receives the request traffic based on the VLAN network and sends response data to the cloud service platform, including: Create a second virtual routing gateway; Based on the third routing configuration rule, configuring the second virtual routing gateway to obtain a configured second virtual routing gateway; Based on the VLAN network and the configured second virtual routing gateway, the request traffic is received and response data is sent to the cloud service platform.

9. The hybrid cloud network communication method based on virtual routing gateway according to claim 8, characterized in that: The configuring the second virtual routing gateway based on the third routing configuration rule to obtain the configured second virtual routing gateway includes: Setting the destination network segment of the second virtual routing gateway to the subnet segment of the Internet data center; The second virtual routing gateway is set to forward the request traffic to the second virtual router of the Internet data center.

10. A hybrid cloud network communication system based on a virtual routing gateway, characterized in that: include: A cloud service platform, configured to obtain a creation instruction for a first virtual routing gateway and execute the creation instruction to create the first virtual routing gateway in a target virtual private network on the cloud service platform, create a first virtual network card instance in the target virtual private network and bind the first virtual network card instance to the first virtual routing gateway, set a first endpoint on a first switch in the target virtual private network, and send request traffic generated by a subnet in the target virtual private network to an internet data center based on a VLAN network; wherein the subnet in the target virtual private network is communicatively connected to the first virtual router in the target virtual private network, the first virtual routing gateway is communicatively connected to the first virtual router, and the first switch is communicatively connected to the first virtual routing gateway; The Internet data center is configured to set a second endpoint on the created second switch and communicatively connect the second endpoint with the first endpoint to form a VXLAN tunnel, receive the request traffic based on the VLAN network, and send response data to the cloud service platform; wherein the VXLAN tunnel provides a VLAN network.

Images