Disaster recovery switching method and device, electronic equipment and storage medium

Abstract

One or more embodiments of the invention disclose a disaster recovery switching method and device, electronic equipment and a storage medium. The method comprises the following steps: acquiring at least one disaster recovery node in the SD-WAN network, wherein each disaster recovery node is provided with at least two disaster recovery devices with the same function; at least two tunnels borne by the internet lines of different operators are constructed for each disaster recovery device, and other parts of the at least two tunnels corresponding to the same disaster recovery device have the same function except the different internet lines; in the process of transmitting the service flow by using the tunnel, under the condition that the tunnel has a fault, determining a disaster recovery tunnel which is in mutual disaster recovery with the tunnel with the fault; and using the disaster recovery tunnel to continue to transmit the service traffic transmitted by the tunnel with the fault so as to realize disaster recovery switching of the SD-WAN network.

Description

Technical Field

[0001] The present invention relates to the field of wide area network technology, and in particular to a method and device for disaster recovery switching, an electronic device, and a storage medium. Background Art

[0002] Software defined wide area network (SD-WAN) is the application of software defined network (SDN) technology in wide area network (WAN). Hub-spoke networking is a common networking method of SD-WAN network. In Hub-spoke networking, the enterprise headquarters and data center are generally used as the central site (Hub), and the enterprise branches are used as branch sites (Spokes). Spokes centrally access server applications deployed on the Hub through WAN. At the same time, if Spokes need to communicate with each other, they are also transferred through the Hub.

[0003] In Hub-spoke networking, the Hub is usually deployed with two machines, and each group of Spoke devices establishes a tunnel connection with each Hub device through a carrier line, which enables the Hub to have dual-machine disaster recovery capabilities and the carrier Internet line to have dual-line disaster recovery capabilities. However, the dual-machine disaster recovery capability of the Hub often leads to the problem of waste of resources on the Internet line where the faulty Hub device is located, and excessive load pressure on the Internet line where the normal Hub device is located; the dual-line disaster recovery capability of the carrier Internet line often leads to the problem of waste of processing power of normal Hub devices in the faulty line, and the load of Hub devices in the normal line is doubled. The existence of these problems often increases the risk of disaster recovery switching of the SD-WAN network. Summary of the invention

[0004] The embodiments of the present specification provide a method and device for disaster recovery switching, an electronic device, and a storage medium to provide a better disaster recovery switching solution.

[0005] In a first aspect, an embodiment of the present specification provides a method for disaster recovery switching, including: Obtain at least one disaster recovery node in the SD-WAN network, each of the disaster recovery nodes having at least two disaster recovery devices with the same function; For each of the disaster recovery devices, at least two tunnels carried by Internet lines of different operators are respectively constructed, and the at least two tunnels corresponding to the same disaster recovery device have the same functions except for the Internet lines; In the process of using the tunnel to transmit service traffic, if the tunnel has a fault, determining a disaster recovery tunnel that serves as a disaster recovery tunnel for the tunnel with the fault; The disaster recovery tunnel is used to continue transmitting the business traffic transmitted by the failed tunnel to achieve disaster recovery switching of the SD-WAN network.

[0006] In a second aspect, one or more embodiments of this specification provide a disaster recovery switching device, including: A disaster recovery location module, used to obtain at least one disaster recovery node in the SD-WAN network, each of which has at least two disaster recovery devices with the same function; A tunnel construction module, used to construct at least two tunnels carried by Internet lines of different operators for each of the disaster recovery devices, wherein the at least two tunnels corresponding to the same disaster recovery device have the same functions except for the Internet lines; A disaster recovery tunnel module, used for determining a disaster recovery tunnel that is mutually disaster-tolerant with the tunnel with the fault when the tunnel has a fault during the process of using the tunnel to transmit service traffic; A disaster recovery switching module is used to use the disaster recovery tunnel to continue transmitting the business traffic transmitted by the failed tunnel, so as to realize disaster recovery switching of the SD-WAN network.

[0007] In a third aspect, an embodiment of the present specification provides an electronic device, which includes a processor, a memory, and a program or instruction stored in the memory and executable on the processor, wherein the program or instruction, when executed by the processor, implements the steps of the method described in the first aspect.

[0008] In a fourth aspect, an embodiment of the present specification provides a readable storage medium, on which a program or instruction is stored, and when the program or instruction is executed by a processor, the steps of the method described in the first aspect are implemented.

[0009] In a fifth aspect, an embodiment of this specification provides a chip, the chip comprising a processor and a communication interface, the communication interface is coupled to the processor, and the processor is used to run a program or instruction to implement the method described in the first aspect.

[0010] In a sixth aspect, an embodiment of this specification provides a computer program product, which, when executed by a processor, implements the method described in the first aspect.

[0011] In the embodiments of this specification, for each disaster recovery device of the disaster recovery node in the SD-WAN network, at least two tunnels are constructed using different Internet lines. When a tunnel fails, the disaster recovery tunnel corresponding to the failed tunnel is determined to achieve disaster recovery switching of the SD-WAN network through the disaster recovery tunnel. This process is based on multiple operators building two tunnels for disaster recovery devices. Not only are two tunnels for disaster recovery devices of the disaster recovery nodes determined to be mutually disaster-tolerant, but also two tunnels for Internet lines are determined to be mutually disaster-tolerant. This solution retains the traffic carried by other parts of the faulty tunnel except the faulty part during disaster recovery switching. Compared with the solution of a single line carrying all traffic, this solution has a more balanced line load and a better disaster recovery switching effect, which helps to improve the reliability of disaster recovery switching of the SD-WAN network. BRIEF DESCRIPTION OF THE DRAWINGS

[0012] In order to more clearly illustrate one or more embodiments of this specification or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments recorded in one or more embodiments of this specification. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0013] Figure 1 It is a flowchart of a method for disaster recovery switching provided by an embodiment of this specification; Figure 2 It is a schematic diagram of a networking solution based on two operators provided in an embodiment of this specification; Figure 3 This is a schematic diagram of disaster recovery switching of a Hub failure provided in an embodiment of this specification; Figure 4 This is a schematic diagram of disaster recovery switching of a line failure provided by an embodiment of this specification; Figure 5 This is a schematic diagram of a process of searching for a tunnel matching service traffic provided by an embodiment of this specification; Figure 6 It is a structural schematic diagram of a disaster recovery switching device provided in an embodiment of this specification; Figure 7 It is a structural diagram of an electronic device provided in an embodiment of this specification. DETAILED DESCRIPTION

[0014] The following will be combined with the drawings in the embodiments of this specification to clearly and completely describe the technical solutions in the embodiments of this specification. Obviously, the described embodiments are part of the embodiments of this specification, not all of the embodiments. Based on the embodiments in this specification, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0015] The terms "first", "second", etc. in the specification and claims of this application are used to distinguish similar objects, and are not used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable under appropriate circumstances, so that the embodiments of this specification can be implemented in an order other than those illustrated or described here, and the objects distinguished by "first", "second", etc. are generally of one type, and the number of objects is not limited. For example, the first object can be one or more. In addition, "and / or" in the specification and claims represents at least one of the connected objects, and the character " / " generally indicates that the objects associated with each other are in an "or" relationship.

[0016] In order to meet the requirements of disaster recovery and high availability, Hub devices are usually deployed in dual machines in the SD-WAN network. Each group of Spoke devices will establish a tunnel with each Hub device through an Internet line (the two tunnels established correspond to the Internet lines of the same operator) to achieve disaster recovery switching when the following faults occur: (1) Hub device failure. When a Hub device fails, the service will automatically switch to another backup Hub device. At this time, the backup Hub device will carry all services, and the Internet line connected to the failed Hub device will no longer forward traffic. This will cause a waste of line resources of the normal Internet line where the failed Hub device is located, and the Internet line connected to the backup Hub device will double the pressure. When the Internet line load pressure is too high, the reliability of the Internet line will decrease, which will greatly increase the risk of disaster recovery switching of the SD-WAN network; (2) Internet line failure. When an Internet line fails, the SD-WAN network's redundancy mechanism will automatically switch the faulty line service to a tunnel carried by another Internet line. The normal Hub device that has established a connection with the faulty line will no longer forward traffic, which will cause a waste of processing power for the Hub device in the faulty line. The Hub device in the normal line will have its load doubled and the device performance pressure will be too high, which will greatly increase the risk of disaster recovery switching in the SD-WAN network.

[0017] The method and device for disaster recovery switching, the electronic device, and the storage medium provided in the embodiments of this specification are described in detail below with reference to the accompanying drawings through specific embodiments and their application scenarios.

[0018] Figure 1 A method for disaster recovery switching provided by an embodiment of the present invention is shown. The method can be executed by an electronic device for use in an SD-WAN network. The electronic device may include: a server and / or a terminal device, wherein the terminal device may be, for example, a vehicle-mounted terminal or a mobile phone terminal. In other words, the method can be executed by software or hardware installed in the aforementioned electronic device. Figure 1 As shown, the disaster recovery switching method includes the following steps: Step S102: Obtain at least one disaster recovery node in the SD-WAN network.

[0019] Among them, the disaster recovery node is a pre-determined location in each physical link of the SD-WAN network where disaster recovery switching can be performed. Specifically, the disaster recovery node can be determined based on the importance and / or failure frequency of each device and / or link in the SD-WAN network. For example, the central site serves as a data transfer station, responsible for receiving data from branch sites and distributing it to other branch sites. Since the central site is an indispensable role in the data interaction process, the central site can be used as a disaster recovery node in the SD-WAN network, and at least two Hub devices that build the central site can be used as disaster recovery devices. The functions of these Hub devices are the same or similar. The number of disaster recovery devices at the disaster recovery node can be determined based on actual conditions. Two or more are acceptable. This is not specifically limited in this manual.

[0020] In addition to the Hub device, other important links and important devices (such as important Spoke devices) in the SD-WAN network can be used as disaster recovery nodes in the SD-WAN network. This specification does not specifically limit the disaster recovery nodes in the SD-WAN network, and can be determined according to actual conditions. In order to better illustrate this specification and highlight the main purpose of this specification, the specific embodiments of this article describe the disaster recovery node constructed by two Hub devices. Those skilled in the art should understand that this specification can also be implemented for other types of disaster recovery nodes.

[0021] Step S104: for each of the disaster recovery devices, at least two tunnels carried by Internet lines of different operators are constructed respectively.

[0022] SD-WAN network can virtualize physical links such as Internet lines and links between devices into logical networks. In order to realize disaster recovery switching of SD-WAN network, before disaster recovery switching, existing links and devices can be used in advance to build a logical tunnel passing through the aforementioned disaster recovery node. Then, from the pre-built tunnel, two disaster recovery tunnels corresponding to the fault location (including the disaster recovery node) can be determined. Except for the different equipment at the fault location, the functions of the other parts of the two tunnels are the same or similar.

[0023] In one example, a multi-operator solution can be used to construct multiple tunnels corresponding to the disaster recovery node that are mutually disaster-tolerant. Specifically, for each disaster recovery device of the disaster recovery node, two tunnels can be constructed using the Internet lines of two operators. The Internet lines of the two tunnels are different, but the rest of the parts are the same. Since the functions of the tunnels corresponding to the two disaster recovery devices of the same disaster recovery node should be the same or similar, after the tunnel construction is completed, for the two disaster recovery devices of the same disaster recovery node, there will be at least two tunnels with different Internet lines and the functions of the rest of the parts (including the disaster recovery devices) are the same or similar; there will be at least two tunnels with different disaster recovery devices and the rest of the parts (including the Internet lines) are the same or similar.

[0024] Figure 2 The figure shows the networking scheme based on two operators. Figure 2 As shown in the figure, the SD-WAN network deploys two Internet lines of different operators (ISP1 and ISP2). Each group of Spoke devices (Spoke3 and Spoke4 are a group) builds dual tunnels based on the Internet line of each operator in the core side of the SD-WAN network. Each tunnel ends on a different Hub device (HUB1 and HUB2). Finally, each group of Spoke devices and the two Hub devices on the core side build a total of 4 tunnels (serial numbers ①, ②, ③ and ④). Among these 4 tunnels, except for the different Hub devices, the functions of tunnels ① and ④ are the same or similar; except for the different Internet lines, the functions of tunnels ② and ④ are the same or similar.

[0025] In step S104, by constructing multiple tunnels containing Internet lines of different operators for each disaster recovery device, not only are two tunnels with the same or similar functions except for the different disaster recovery devices constructed for the disaster recovery devices, but also two tunnels with the same or similar functions except for the different Internet lines are constructed for the Internet lines.

[0026] In order to better illustrate this specification and highlight the main purpose of this specification, the specific embodiments of this document are described with two operators. Those skilled in the art should understand that this specification can also be implemented for three or more operators.

[0027] Step S106: When the tunnel is used to transmit service traffic, if a fault occurs in the tunnel, a disaster recovery tunnel is determined that serves as a disaster recovery tunnel for the faulty tunnel.

[0028] Step S108: Use the disaster recovery tunnel to continue transmitting the business traffic transmitted by the faulty tunnel to achieve disaster recovery switching of the SD-WAN network.

[0029] When the interface in the SD-WAN network receives a message of business traffic, the equipment in the SD-WAN network will forward the business traffic according to the selected tunnel. In the process of using the tunnel to transmit business traffic, when an individual tunnel has a fault such as a device or link, a disaster recovery tunnel that serves as a disaster recovery for the tunnel with the fault (i.e., the fault tunnel) can be determined based on the location of the fault (i.e., the fault location). The disaster recovery tunnel and the fault tunnel have the same or similar functions except that the equipment or link (including the Internet line) corresponding to the fault location is different. Furthermore, the disaster recovery tunnel can be used to continue to transmit business traffic that should have been transmitted using the fault tunnel, thereby realizing disaster recovery switching of the SD-WAN network.

[0030] In one example, when the faulty part is a device of a disaster recovery node, a tunnel that is different from the faulty device of the faulty tunnel (the device different from the faulty device is another normal device of the faulty disaster recovery node) and has the same or similar other parts (including Internet lines) as the disaster recovery tunnel of the faulty tunnel can be used. Since the disaster recovery tunnel still retains the traffic forwarding services of the other parts except the faulty device, it will not cause waste of resources of normal links and / or normal devices in the faulty tunnel. Therefore, using the disaster recovery tunnel to continue to transmit the service traffic that should have been transmitted by the faulty tunnel will not cause the pressure of the devices and / or links in the disaster recovery tunnel to double and the load pressure to be too high.

[0031] Similarly, in the case where the faulty part is an Internet line, a tunnel that is different from the Internet line of the faulty tunnel (using another normal Internet line different from the faulty Internet line) and has the same remaining parts (including equipment and other links except the faulty Internet line) as the faulty tunnel can be used as a disaster recovery tunnel for the faulty tunnel. Since the disaster recovery tunnel still retains the traffic forwarding services of the remaining parts except the faulty Internet line, it will not cause waste of resources of normal equipment and / or normal links in the faulty tunnel. Therefore, using the disaster recovery tunnel to continue to transmit the business traffic that should have been transmitted by the faulty tunnel will not cause the pressure on the equipment and / or links in the disaster recovery tunnel to double or the load pressure to be too high.

[0032] In the embodiments of this specification, for each disaster recovery device of the disaster recovery node in the SD-WAN network, at least two tunnels are constructed using different Internet lines. When a tunnel fails, the disaster recovery tunnel corresponding to the failed tunnel is determined to achieve disaster recovery switching of the SD-WAN network through the disaster recovery tunnel. This process is based on multiple operators building two tunnels for disaster recovery devices. Not only are two tunnels for disaster recovery devices of the disaster recovery nodes determined to be mutually disaster-tolerant, but also two tunnels for Internet lines are determined to be mutually disaster-tolerant. This solution retains the traffic carried by other parts of the faulty tunnel except the faulty part during disaster recovery switching. Compared with the solution of a single line carrying all traffic, this solution has a more balanced line load and a better disaster recovery switching effect, which helps to improve the reliability of disaster recovery switching of the SD-WAN network.

[0033] In one implementation, when the disaster recovery device of the disaster recovery node is a Hub device, the step of constructing at least two tunnels carried by Internet lines of different operators for each of the disaster recovery devices includes: For each of the Hub devices, two tunnels are constructed respectively, which are carried by Internet lines of different operators and start from a group of Spoke devices and terminate at the Hub device.

[0034] Specifically, when the disaster recovery device of the disaster recovery node is a Hub device, for each Hub device, two tunnels can be constructed using Internet lines of different operators. The two tunnels start from the Spoke device and end at the Hub device. Except for the Internet link, the functions of the other parts of the two tunnels are the same or similar. Figure 2 As shown in the figure, ISP1 and ISP2 are deployed in the SD-WAN network, and tunnels ① and ③ are constructed for the disaster recovery device HUB1, and tunnels ② and ④ are constructed for the disaster recovery device HUB2. Obviously, when the Hub device fails, tunnels ② and ③ are mutually disaster-tolerant, and tunnels ① and ④ are mutually disaster-tolerant; when the Internet line fails, tunnels ① and ③ are mutually disaster-tolerant, and tunnels ② and ④ are mutually disaster-tolerant.

[0035] Specifically, the SD-WAN network is provided with two external network firewalls, and the detailed construction process of the tunnel may include: The IP addresses of the Internet lines of the two operators are configured to the WAN interface of each of the external network firewalls, and the network address translation configurations of the two external network firewalls are consistent; Configure the IP addresses of the Internet lines of the two operators to the WAN interface of each Hub device, and the network address translation configurations of the two Hub devices are consistent; The line is constructed according to the two WAN interfaces of each of the Hub devices and the two WAN interfaces of each of the external network firewalls.

[0036] The SD-WAN network is provided with two external network firewalls (FireWall, FW) FW1 and FW2. Figure 2 As shown, the external network export switch in the SD-WAN network is deployed at the second layer, and each Internet line is connected to the external network firewalls of two SD-WAN networks through the external network export switch of the SD-WAN network, ensuring that the external network firewall of the SD-WAN network is connected to two Internet service providers (Internet Service Provider, ISP) at the same time.

[0037] The external firewall of the SD-WAN network is deployed in a three-layer high-availability (HA) active-standby manner. The IP address of the fixed public network (from the two aforementioned operators) is configured to the firewall's wide area network interface (WAN port for short). Through network address translation (NAT), the four WAN port addresses of the disaster recovery devices Hub1 and Hub2 are mapped to the Internet to provide SD-WAN tunnel establishment services. The NAT configurations on the two Internet dedicated firewalls are consistent.

[0038] The intranet firewall of the SD-WAN network is deployed in a Layer 2 HA active-standby mode to connect the SD-WAN network with the company's intranet.

[0039] The SD-WAN network's disaster recovery device Hub is deployed in site dual-gateway mode. The site role is a router reflector (RR), which requires four public IPs. Each disaster recovery device Hub has two IP addresses that map to the public IPs of Internet Service Providers (ISPs) ISP1 and IPS2. For example, WAN port 1 of disaster recovery device Hub1 corresponds to ISP1, and WAN port 2 corresponds to ISP2; WAN port 1 of disaster recovery device Hub2 corresponds to IPS1, and WAN port 2 corresponds to ISP2.

[0040] The disaster recovery device Hub in the SD-WAN network is connected to the SD-WAN intranet firewall at Layer 2, and the Interior Gateway Protocol (IGP) in the dynamic routing protocol is used to interconnect with the intranet core switch.

[0041] The disaster recovery device Hub and the switches in the SD-WAN area in the SD-WAN network use a static routing protocol. The default route next hop of the disaster recovery device Hub is configured to point to the interconnection address of the switches in the SD-WAN area.

[0042] The SD-WAN zone external network firewall is deployed in a three-layer active-standby mode. The external network firewall is configured with a static route to the Hub device, and the next hop points to the interconnection address of the SD-WAN zone switch. The public network IP is deployed on the external network firewall, and the private network address of the Hub device is mapped to the public network IP, which is used to establish the SD-WAN tunnel for the branch device.

[0043] Through the above networking technology solution, each group of Spoke devices builds a dual SD-WAN tunnel based on the Internet line of each operator, and the tunnel ends at different Hub devices, that is, each group of Spoke devices and two disaster recovery devices Hub build a total of 4 tunnels, among which, for each disaster recovery device Hub in the SD-WAN network, two tunnels are built using different Internet lines. Furthermore, when the Hub device or Internet line of the disaster recovery node fails, the constructed tunnel can be used for disaster recovery switching.

[0044] In one implementation, in the process of using the tunnel to transmit service traffic, when the tunnel has a fault, determining a disaster recovery tunnel that serves as a disaster recovery tunnel for the faulty tunnel includes: During the process of using the tunnel to transmit service traffic, detecting faults of the tunnel; In the case that the Hub device of the disaster recovery node of the tunnel fails, querying a tunnel that has a different Hub device from the tunnel corresponding to the failed tunnel and has the same parts except the Hub device; The queried tunnel is used as the disaster recovery tunnel corresponding to the faulty tunnel.

[0045] Specifically, the SD-WAN network can sense the failure of the link carrying the tunnel through monitoring technology. After sensing the failure of the Hub device, the SD-WAN network can determine the interruption of the tunnel terminated by the faulty Hub device through tunnel detection technology. After setting the interrupted tunnel (i.e., the faulty tunnel) to invalid, the disaster recovery tunnel corresponding to the faulty tunnel can be queried so as to perform disaster recovery switching through the disaster recovery tunnel. In the case of a Hub device whose fault location is a disaster recovery node, the faulty tunnel is the same or similar to the disaster recovery tunnel except for the Hub device. Therefore, from the tunnels constructed above, a tunnel that is the same or similar to the faulty tunnel except for the Hub device can be queried, and the queried tunnel can be used as the disaster recovery tunnel.

[0046] Figure 3 The figure shows a schematic diagram of disaster recovery switching in case of Hub failure. Figure 3As shown in the figure, in the normal forwarding scenario before the failure occurs, Class A services are transmitted through tunnel 1, Class B services are transmitted through tunnel 2, Class C services are transmitted through tunnel 3, and Class D services are transmitted through tunnel 4. The SD-WAN network senses the failure of the Hub device through monitoring technology. The SD-WAN network uses tunnel detection technology to find that tunnels 2 and 4 that carry traffic through the faulty line are interrupted, and these two tunnels are set to invalid, and the disaster recovery tunnels corresponding to tunnels 2 and 4 are queried. It is found that tunnel 3 is the disaster recovery tunnel of tunnel 2, and tunnel 1 is the disaster recovery tunnel of tunnel 4, and then the SD-WAN network undergoes disaster recovery switching. The traffic after switching is: Class A services are transmitted through tunnel 1, Class B services are transmitted through tunnel 3, Class C services are transmitted through tunnel 3, and Class D services are transmitted through tunnel 1.

[0047] In the above disaster recovery switching process, due to the use of multiple tunnel technology of multiple operators, each operator carries two valid tunnels, and the two tunnels terminate on different Hub devices. In this way, when a Hub device fails, all tunnels terminated by the failed Hub device fail. At this time, since each operator still has a valid tunnel, the physical line of each operator carries traffic. Compared with the solution of a single line carrying all traffic, the line load in this solution is more balanced and the disaster recovery switching effect is better.

[0048] In one implementation, in the process of using the tunnel to transmit service traffic, when the tunnel has a fault, determining a disaster recovery tunnel that serves as a disaster recovery tunnel for the faulty tunnel includes: During the process of using the tunnel to transmit service traffic, detecting faults of the tunnel; In the case that the Internet line of the tunnel is faulty, querying a tunnel that has a different Internet line from the tunnel corresponding to the faulty tunnel and has the same parts except the Internet line; The queried tunnel is used as the disaster recovery tunnel corresponding to the faulty tunnel.

[0049] Specifically, the SD-WAN network can sense the failure of the link of the bearer tunnel through monitoring technology. After sensing the failure of the Internet line, the SD-WAN network can determine the interruption of the tunnel carrying traffic through the faulty Internet line through tunnel detection technology. After setting the interrupted tunnel (i.e., the faulty tunnel) to invalid, the disaster recovery tunnel corresponding to the faulty tunnel can be queried so as to perform disaster recovery switching through the disaster recovery tunnel. In the case where the faulty part is the Internet line, the faulty tunnel and the disaster recovery tunnel are the same or similar except for the Internet line. Therefore, from the tunnels constructed above, the tunnels that are the same or similar to the faulty tunnel except for the Internet line can be queried, and the queried tunnels can be used as disaster recovery tunnels.

[0050] Figure 4 Figure 1 shows a schematic diagram of disaster recovery switching for line failure. Figure 4 As shown, in the normal forwarding scenario before the failure occurs, Class A services are transmitted through tunnel 1, Class B services are transmitted through tunnel 2, Class C services are transmitted through tunnel 3, and Class D services are transmitted through tunnel 4. The SD-WAN network uses tunnel detection technology to find that tunnels 2 and 3 that carry traffic through the faulty line are interrupted, and sets these two tunnels to invalid. It is found that tunnel 4 is the disaster recovery device of tunnel 2 and tunnel 1 is the disaster recovery tunnel of tunnel 3, and then the SD-WAN network undergoes disaster recovery switching. The traffic after switching is: Class A services are transmitted through tunnel 1, Class B services are transmitted through tunnel 4, Class C services are transmitted through tunnel 1, and Class D services are transmitted through tunnel 4.

[0051] In the above disaster recovery switching process, due to the use of multiple tunnel technology of multiple operators, each operator carries two valid tunnels, and the two tunnels terminate on different Hub devices. In this way, when an Internet line of an operator fails, since the two valid tunnels of another operator terminate on different Hub devices, both Hub devices carry traffic. Compared with the solution of a single device carrying all traffic, the device load in this solution is more balanced and the disaster recovery switching effect is better.

[0052] Before performing disaster recovery switching, it is necessary to select appropriate tunnels for each service in the service traffic for service transmission. Specifically, different SD-WAN tunnels can be selected for transmission between customer premise equipment (CPE) for different service traffic based on tunnel priority, tunnel quality, and tunnel bandwidth. In one implementation, before using the tunnel to transmit the service traffic, the disaster recovery switching method further includes: When receiving a message of the service flow, determining a tunnel selection strategy for each service in the service flow according to the service characteristics of each service in the service flow in the message; Based on the priority and usage of each tunnel in the tunnel selection strategy, a tunnel for transmitting each service in the service traffic is determined.

[0053] Among them, the message of service traffic usually contains the five-tuple and differential services code point of each service in the service traffic. The five-tuple contains basic attributes of the service such as source IP address, destination IP address, source port number, destination port number and transmission protocol. The Differentiated Services Code Point (DSCP) is used to mark the network priority classification of the service.

[0054] Based on the basic attributes and priorities of each service in the service traffic reflected in the message, the tunnel selection strategy corresponding to each service in the service traffic can be determined. The service traffic template is used to define the tunnel selection strategy for different services. Figure 5 FIG. 1 shows a schematic diagram of the process of searching for a tunnel that matches the service traffic. Figure 5 As shown, the service flow template number (Flow ID) corresponding to each service in the service flow can be determined based on the service characteristics such as the five-tuple and the differential service code point in the message, and then the tunnel for transmitting each service in the service flow can be determined based on the tunnel selection policy in the service flow template corresponding to the Flow ID. If the tunnel selection policy fails to determine the tunnel, ordinary forwarding can be performed according to the original routing table.

[0055] Typically, tunnel selection strategies may include: (1) important services give priority to tunnels with the best communication quality; (2) multimedia file transfer services that do not require high real-time performance but have high bandwidth requirements give priority to tunnels with lower costs; (3) other services are prioritized based on the principle of balancing the load between links.

[0056] For a certain service type, the priority of each tunnel in the service traffic template can be defined based on factors such as link quality, link price, and service demand. When selecting tunnels for service traffic, tunnels with higher priorities are given priority. Specifically, important services (Class A) are given priority over lines with good communication quality (such as ISP1 lines), and services (Class B) with low real-time requirements and high bandwidth requirements are given priority over links with lower costs (such as ISP2 lines). Priority is set for other services (Class C and Class D) based on the principle of balancing the load between links.

[0057] Combination Figure 2 For each tunnel in the above, the tunnel selection strategy for the above-mentioned class A, class B, class C, and class D services can be: Class A services: Tunnel 1 > Tunnel 4 > Tunnel 3 > Tunnel 2; Class B services: Tunnel 2 > Tunnel 3 > Tunnel 4 > Tunnel 1; Class C services: Tunnel 3 > Tunnel 2 > Tunnel 1 > Tunnel 4; Class D services: Tunnel 4 > Tunnel 2 > Tunnel 1 > Tunnel 3.

[0058] The same tunnel selection strategy may include multiple tunnels, each tunnel has a different priority and there may be more than one tunnel at the same priority level. In one implementation, determining the tunnel for transmitting each service in the service traffic based on the priority and usage of each tunnel in the tunnel selection strategy includes: Traversing each tunnel in the tunnel selection strategy according to the priority of each tunnel in the tunnel selection strategy; In the process of traversing each tunnel in the tunnel selection strategy, a tunnel matching the service flow is determined from the tunnels included in the tunnel selection strategy according to the usage of each tunnel in the tunnel selection strategy.

[0059] The usage of the tunnel may include information about the tunnel, such as whether the tunnel is available and the available bandwidth of the tunnel.

[0060] like Figure 5 As shown, each tunnel in the tunnel selection strategy can be traversed from high to low priority. When traversing a tunnel of one priority, first determine the usage of each tunnel in the priority, determine the number of available tunnels, and then determine the tunnel corresponding to each service in the service traffic based on the number of tunnels.

[0061] Specifically, when there are multiple available tunnels under a traversed priority, the tunnels corresponding to each service in the service traffic can be determined according to the bandwidth of each available tunnel; when there is only one available tunnel under this priority, the available tunnel can be directly determined as the tunnel for each service in the service traffic; when there is no available tunnel under this priority, the tunnel for each service in the service traffic can be determined from the tunnel of the next priority.

[0062] It can be understood that the above-mentioned various method embodiments mentioned in this specification can be combined with each other to form a combined embodiment without violating the principle logic. Due to space limitations, they will not be repeated in this specification. Those skilled in the art can understand that in the above-mentioned method of the specific implementation method, the specific execution order of each step should be determined according to its function and possible internal logic.

[0063] It should be noted that the disaster recovery switching method provided in the embodiments of this specification can be executed by a disaster recovery switching device or a control module in the disaster recovery switching device for executing the disaster recovery switching method. In the embodiments of this specification, the disaster recovery switching device provided in the embodiments of this specification is described by taking the disaster recovery switching method executed by the disaster recovery switching device as an example.

[0064] Figure 6 FIG. 1 is a schematic diagram of the structure of a disaster recovery switching device according to an embodiment of the present invention. Figure 6 As shown, the disaster recovery switching device 600 includes: The disaster recovery location module 610 is used to obtain at least one disaster recovery node in the SD-WAN network, each of which has at least two disaster recovery devices with the same function; The tunnel construction module 620 is used to construct at least two tunnels carried by Internet lines of different operators for each of the disaster recovery devices, and the at least two tunnels corresponding to the same disaster recovery device have the same functions except for the Internet lines; The disaster recovery tunnel module 630 is used to determine a disaster recovery tunnel that is mutually disaster-tolerant with the tunnel with the fault when the tunnel has a fault during the process of using the tunnel to transmit service traffic; The disaster recovery switching module 640 is used to use the disaster recovery tunnel to continue transmitting the business traffic transmitted by the failed tunnel, so as to realize disaster recovery switching of the SD-WAN network.

[0065] In one embodiment, the disaster recovery site includes a Hub device and an Internet line, and the tunnel construction module 620 includes: The tunnel construction unit is used to construct two tunnels carried by Internet lines of different operators for each of the Hub devices, starting from a group of Spoke devices and terminating the Hub device.

[0066] In one embodiment, the disaster recovery tunnel module 630 includes: A first sensing unit, configured to sense a fault of the tunnel during the process of using the tunnel to transmit service traffic; A first query unit is used for querying a tunnel which has a different Hub device from the tunnel with the fault and has the same parts except the Hub device when a Hub device of a disaster recovery node of the tunnel fails; The disaster recovery tunnel unit is used to use the queried tunnel as the disaster recovery tunnel corresponding to the tunnel with the fault.

[0067] In one embodiment, in the process of using the tunnel to transmit service traffic, when one of the tunnels fails and the failed part is the disaster recovery part, determining a disaster recovery tunnel that is mutually disaster-tolerant with the failed tunnel includes: A second sensing unit is used to sense faults of the tunnel during the process of using the tunnel to transmit service traffic; A second query unit is used to query a tunnel that has a different Internet line from the tunnel with the fault and has the same parts except the Internet line when the Internet line of the tunnel has a fault; The disaster recovery tunnel unit is used to use the queried tunnel as the disaster recovery tunnel corresponding to the tunnel with the fault.

[0068] In one embodiment, the SD-WAN network is provided with two external network firewalls, and the tunnel construction process includes: The IP addresses of the Internet lines of the two operators are configured to the WAN interface of each of the external network firewalls, and the network address translation configurations of the two external network firewalls are consistent; Configure the IP addresses of the Internet lines of the two operators to the WAN interface of each Hub device, and the network address translation configurations of the two Hub devices are consistent; The line is constructed according to the two WAN interfaces of each of the Hub devices and the two WAN interfaces of each of the external network firewalls.

[0069] In one embodiment, before using the tunnel to transmit the service traffic, the disaster recovery switching device 600 further includes: A strategy selection module, configured to, upon receiving a message of the service flow, determine a tunnel selection strategy for each service in the service flow according to the service characteristics of each service in the service flow in the message; The tunnel selection module is used to determine the tunnel for transmitting each service in the service traffic based on the priority and usage of each tunnel in the tunnel selection strategy.

[0070] In one embodiment, the tunnel selection module includes: A traversal unit, configured to traverse each tunnel in the tunnel selection strategy according to the priority of each tunnel in the tunnel selection strategy; A matching unit is used to determine a tunnel matching the service flow from the tunnels included in the tunnel selection strategy according to the usage of each tunnel in the tunnel selection strategy during the process of traversing each tunnel in the tunnel selection strategy.

[0071] In the embodiments of this specification, for each disaster recovery device of the disaster recovery node in the SD-WAN network, at least two tunnels are constructed using different Internet lines. When a tunnel fails, the disaster recovery tunnel corresponding to the failed tunnel is determined to achieve disaster recovery switching of the SD-WAN network through the disaster recovery tunnel. This process is based on multiple operators building two tunnels for disaster recovery devices. Not only are two tunnels for disaster recovery devices of the disaster recovery nodes determined to be mutually disaster-tolerant, but also two tunnels for Internet lines are determined to be mutually disaster-tolerant. This solution retains the traffic carried by other parts of the faulty tunnel except the faulty part during disaster recovery switching. Compared with the solution of a single line carrying all traffic, this solution has a more balanced line load and a better disaster recovery switching effect, which helps to improve the reliability of disaster recovery switching of the SD-WAN network.

[0072] Each module in the above-mentioned disaster recovery switching device can be implemented in whole or in part by software, hardware and a combination thereof. Each of the above-mentioned modules can be embedded in or independent of the processor in the terminal device or the processor on the server side in the form of hardware, or can be stored in the memory in the terminal device or the memory on the server side in the form of software, so that the processor can call and execute the operations corresponding to each of the above modules.

[0073] Further, corresponding to the disaster recovery switching method described above, based on the same technical concept, one or more embodiments of the present application further provide an electronic device, such as Figure 7 As shown. The electronic device may have relatively large differences due to different configurations or performances, and may include one or more processors 701 and memory 702, and the memory 702 may store one or more storage applications or data. Among them, the memory 702 may be a temporary storage or a permanent storage. The application stored in the memory 702 may include one or more modules (not shown in the figure), and each module may include a series of computer executable instructions in the electronic device. Furthermore, the processor 701 can be configured to communicate with the memory 702 to execute a series of computer executable instructions in the memory 702 on the electronic device. The electronic device may also include one or more power supplies 703, one or more wired or wireless network interfaces 704, one or more input and output interfaces 705, and one or more keyboards 706.

[0074] In a specific embodiment, the electronic device includes a memory and one or more programs, wherein the one or more programs are stored in the memory, and the one or more programs may include one or more modules, and each module may include a series of computer executable instructions for the electronic device, and the one or more programs configured to be executed by one or more processors include the following computer executable instructions: Obtain at least one disaster recovery node in the SD-WAN network, each of the disaster recovery nodes having at least two disaster recovery devices with the same function; For each of the disaster recovery devices, at least two tunnels carried by Internet lines of different operators are respectively constructed, and the at least two tunnels corresponding to the same disaster recovery device have the same functions except for the Internet lines; In the process of using the tunnel to transmit service traffic, if the tunnel has a fault, determining a disaster recovery tunnel that serves as a disaster recovery tunnel for the tunnel with the fault; The disaster recovery tunnel is used to continue transmitting the business traffic transmitted by the failed tunnel to achieve disaster recovery switching of the SD-WAN network.

[0075] In the embodiments of this specification, for each disaster recovery device of the disaster recovery node in the SD-WAN network, at least two tunnels are constructed using different Internet lines. When a tunnel fails, the disaster recovery tunnel corresponding to the failed tunnel is determined to achieve disaster recovery switching of the SD-WAN network through the disaster recovery tunnel. This process is based on multiple operators building two tunnels for disaster recovery devices. Not only are two tunnels for disaster recovery devices of the disaster recovery nodes determined to be mutually disaster-tolerant, but also two tunnels for Internet lines are determined to be mutually disaster-tolerant. This solution retains the traffic carried by other parts of the faulty tunnel except the faulty part during disaster recovery switching. Compared with the solution of a single line carrying all traffic, this solution has a more balanced line load and a better disaster recovery switching effect, which helps to improve the reliability of disaster recovery switching of the SD-WAN network.

[0076] It should be noted that the embodiment of the electronic device in the present application and the embodiment of the disaster recovery switching method in the present application are based on the same inventive concept, so the specific implementation of this embodiment can refer to the implementation of the corresponding disaster recovery switching method mentioned above, and the repeated parts will not be repeated.

[0077] Further, corresponding to the disaster recovery switching method described above, based on the same technical concept, one or more embodiments of the present application further provide a storage medium for storing computer executable instructions. In a specific embodiment, the storage medium may be a USB flash drive, an optical disk, a hard disk, etc. When the computer executable instructions stored in the storage medium are executed by the processor, the following process can be implemented: Obtain at least one disaster recovery node in the SD-WAN network, each of the disaster recovery nodes having at least two disaster recovery devices with the same function; For each of the disaster recovery devices, at least two tunnels carried by Internet lines of different operators are respectively constructed, and the at least two tunnels corresponding to the same disaster recovery device have the same functions except for the Internet lines; In the process of using the tunnel to transmit service traffic, if the tunnel has a fault, determining a disaster recovery tunnel that serves as a disaster recovery tunnel for the tunnel with the fault; The disaster recovery tunnel is used to continue transmitting the business traffic transmitted by the failed tunnel to achieve disaster recovery switching of the SD-WAN network.

[0078] In the embodiments of this specification, for each disaster recovery device of the disaster recovery node in the SD-WAN network, at least two tunnels are constructed using different Internet lines. When a tunnel fails, the disaster recovery tunnel corresponding to the failed tunnel is determined to achieve disaster recovery switching of the SD-WAN network through the disaster recovery tunnel. This process is based on multiple operators building two tunnels for disaster recovery devices. Not only are two tunnels for disaster recovery devices of the disaster recovery nodes determined to be mutually disaster-tolerant, but also two tunnels for Internet lines are determined to be mutually disaster-tolerant. This solution retains the traffic carried by other parts of the faulty tunnel except the faulty part during disaster recovery switching. Compared with the solution of a single line carrying all traffic, this solution has a more balanced line load and a better disaster recovery switching effect, which helps to improve the reliability of disaster recovery switching of the SD-WAN network.

[0079] It should be noted that the embodiment of the storage medium in this application and the disaster recovery switching method in this application are based on the same inventive concept, so the specific implementation of this embodiment can refer to the implementation of the corresponding disaster recovery switching method mentioned above, and the repeated parts will not be repeated.

[0080] Furthermore, corresponding to the disaster recovery switching method described above, based on the same technical concept, one or more embodiments of the present application further provide a computer program product, the computer program product including a computer program, and when the computer program is executed by a processor, the following process can be implemented: Obtain at least one disaster recovery node in the SD-WAN network, each of the disaster recovery nodes having at least two disaster recovery devices with the same function; For each of the disaster recovery devices, at least two tunnels carried by Internet lines of different operators are respectively constructed, and the at least two tunnels corresponding to the same disaster recovery device have the same functions except for the Internet lines; In the process of using the tunnel to transmit service traffic, if the tunnel has a fault, determining a disaster recovery tunnel that serves as a disaster recovery tunnel for the tunnel with the fault; The disaster recovery tunnel is used to continue transmitting the business traffic transmitted by the failed tunnel to achieve disaster recovery switching of the SD-WAN network.

[0081] In the embodiments of this specification, for each disaster recovery device of the disaster recovery node in the SD-WAN network, at least two tunnels are constructed using different Internet lines. When a tunnel fails, the disaster recovery tunnel corresponding to the failed tunnel is determined to achieve disaster recovery switching of the SD-WAN network through the disaster recovery tunnel. This process is based on multiple operators building two tunnels for disaster recovery devices. Not only are two tunnels for disaster recovery devices of the disaster recovery nodes determined to be mutually disaster-tolerant, but also two tunnels for Internet lines are determined to be mutually disaster-tolerant. This solution retains the traffic carried by other parts of the faulty tunnel except the faulty part during disaster recovery switching. Compared with the solution of a single line carrying all traffic, this solution has a more balanced line load and a better disaster recovery switching effect, which helps to improve the reliability of disaster recovery switching of the SD-WAN network.

[0082] It should be noted that the embodiment of the computer program product in the present application and the embodiment of the disaster recovery switching method in the present application are based on the same inventive concept, so the specific implementation of this embodiment can refer to the implementation of the corresponding disaster recovery switching method mentioned above, and the repeated parts will not be repeated.

[0083] The above describes specific embodiments of the present application. Other embodiments are within the scope of the appended claims. In some cases, the actions or steps recorded in the claims can be performed in an order different from that in the embodiments and still achieve the desired results. In addition, the processes depicted in the accompanying drawings do not necessarily require the specific order or continuous order shown to achieve the desired results. In some embodiments, multitasking and parallel processing are also possible or may be advantageous.

[0084] In the 1990s, it was very clear whether the improvement of a technology was hardware improvement (for example, improvement of the circuit structure of diodes, transistors, switches, etc.) or software improvement (improvement of the method flow). However, with the development of technology, many improvements of the method flow today can be regarded as direct improvements of the hardware circuit structure. Designers almost always obtain the corresponding hardware circuit structure by programming the improved method flow into the hardware circuit. Therefore, it cannot be said that the improvement of a method flow cannot be implemented with a hardware entity module. For example, a programmable logic device (PLD) (such as a field programmable gate array (FPGA)) is such an integrated circuit whose logical function is determined by the user's programming of the device. Designers can "integrate" a digital system on a PLD by programming themselves, without having to ask chip manufacturers to design and make dedicated integrated circuit chips. Moreover, nowadays, instead of manually making integrated circuit chips, this kind of programming is mostly implemented by "logic compiler" software, which is similar to the software compiler used when developing and writing programs, and the original code before compilation must also be written in a specific programming language, which is called hardware description language (HDL). There is not only one kind of HDL, but many kinds, such as ABEL (Advanced Boolean Expression Language), AHDL (Altera Hardware Description Language), Confluence, CUPL (Cornell University Programming Language), HDCal, JHDL (Java Hardware Description Language), Lava, Lola, MyHDL, PALASM, RHDL (Ruby Hardware Description Language), etc. The most commonly used ones are VHDL (Very-High-Speed ​​Integrated Circuit Hardware Description Language) and Verilog. Those skilled in the art should also know that it is only necessary to program the method flow slightly in the above-mentioned hardware description languages ​​and program it into the integrated circuit, and then it is easy to obtain the hardware circuit that implements the logic method flow.

[0085] The controller may be implemented in any suitable manner, for example, the controller may take the form of a microprocessor or processor and a computer-readable medium storing a computer-readable program code (e.g., software or firmware) executable by the (micro)processor, a logic gate, a switch, an application-specific integrated circuit (ASIC), a programmable logic controller, and an embedded microcontroller, examples of which include but are not limited to the following microcontrollers: ARC 625D, Atmel AT91SAM, Microchip PIC18F26K20, and Silicone Labs C8051F320, and the memory controller may also be implemented as part of the control logic of the memory. It is also known to those skilled in the art that, in addition to implementing the controller in a purely computer-readable program code manner, the controller may be implemented in the form of a logic gate, a switch, an application-specific integrated circuit, a programmable logic controller, and an embedded microcontroller by logically programming the method steps. Therefore, such a controller may be considered as a hardware component, and the devices for implementing various functions included therein may also be considered as structures within the hardware component. Or even, the devices for implementing various functions may be considered as both software modules for implementing the method and structures within the hardware component.

[0086] The systems, devices, modules or units described in the above embodiments may be implemented by computer chips or entities, or by products with certain functions. A typical implementation device is a computer. Specifically, the computer may be, for example, a personal computer, a laptop computer, a cellular phone, a camera phone, a smart phone, a personal digital assistant, a media player, a navigation device, an email device, a game console, a tablet computer, a wearable device, or a combination of any of these devices.

[0087] For the convenience of description, the above devices are described in terms of functions and are divided into various units. Of course, when implementing the embodiments of the present application, the functions of each unit can be implemented in the same or multiple software and / or hardware.

[0088] Those skilled in the art will appreciate that one or more embodiments of the present application may be provided as a method, system or computer program product. Therefore, one or more embodiments of the present application may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present application may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0089] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0090] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0091] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0092] In a typical configuration, a computing device includes one or more processors (CPU), input / output interfaces, network interfaces, and memory.

[0093] Memory may include non-permanent storage in a computer-readable medium, random access memory (RAM) and / or non-volatile memory in the form of read-only memory (ROM) or flash RAM. Memory is an example of a computer-readable medium.

[0094] Computer readable media include permanent and non-permanent, removable and non-removable media that can be implemented by any method or technology to store information. Information can be computer readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, magnetic disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined in this article, computer readable media does not include temporary computer readable media (transitory media), such as modulated data signals and carrier waves.

[0095] It should also be noted that the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, commodity or device. In the absence of more restrictions, the elements defined by the sentence "comprises a ..." do not exclude the existence of other identical elements in the process, method, commodity or device including the elements.

[0096] One or more embodiments of the present application may be described in the general context of computer-executable instructions executed by a computer, such as program modules. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform specific tasks or implement specific abstract data types. One or more embodiments of the present application may also be practiced in distributed computing environments, in which tasks are performed by remote processing devices connected through a communication network. In a distributed computing environment, program modules may be located in local and remote computer storage media, including storage devices.

[0097] Each embodiment in this application is described in a progressive manner, and the same or similar parts between the embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the system embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0098] The above are only embodiments of this document and are not intended to limit this document. For those skilled in the art, this document may have various changes and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of this document should be included in the scope of the claims of this document.

Claims

1. A method for disaster recovery switching, characterized in that: include: Obtain at least one disaster recovery node in the SD-WAN network, each of the disaster recovery nodes having at least two disaster recovery devices with the same function; For each of the disaster recovery devices, at least two tunnels carried by Internet lines of different operators are respectively constructed, and the at least two tunnels corresponding to the same disaster recovery device have the same functions except for the Internet lines; In the process of using the tunnel to transmit service traffic, if the tunnel has a fault, determining a disaster recovery tunnel that serves as a disaster recovery tunnel for the tunnel with the fault; The disaster recovery tunnel is used to continue transmitting the business traffic transmitted by the failed tunnel to achieve disaster recovery switching of the SD-WAN network.

2. The method according to claim 1, characterized in that In the case where the disaster recovery device of the disaster recovery node is a Hub device, at least two tunnels carried by Internet lines of different operators are respectively constructed for each of the disaster recovery devices, including: For each of the Hub devices, two tunnels are constructed respectively, which are carried by Internet lines of different operators and start from a group of Spoke devices and terminate at the Hub device.

3. The method according to claim 2, characterized in that In the process of using the tunnel to transmit service traffic, when the tunnel has a fault, determining a disaster recovery tunnel that serves as a disaster recovery tunnel for the faulty tunnel includes: During the process of using the tunnel to transmit service traffic, detecting faults of the tunnel; In the case that the Hub device of the disaster recovery node of the tunnel fails, querying a tunnel that has a different Hub device from the tunnel corresponding to the failed tunnel and has the same parts except the Hub device; The queried tunnel is used as the disaster recovery tunnel corresponding to the faulty tunnel.

4. The method according to claim 2, characterized in that: In the process of using the tunnel to transmit service traffic, when the tunnel has a fault, determining a disaster recovery tunnel that serves as a disaster recovery tunnel for the faulty tunnel includes: During the process of using the tunnel to transmit service traffic, detecting faults of the tunnel; In the case that the Internet line of the tunnel is faulty, querying a tunnel that has a different Internet line from the tunnel corresponding to the faulty tunnel and has the same parts except the Internet line; The queried tunnel is used as the disaster recovery tunnel corresponding to the faulty tunnel.

5. The method according to claim 2, characterized in that: The SD-WAN network is provided with two external network firewalls, and the tunnel construction process includes: The IP addresses of the Internet lines of the two operators are configured to the WAN interface of each of the external network firewalls, and the network address translation configurations of the two external network firewalls are consistent; Configure the IP addresses of the Internet lines of the two operators to the WAN interface of each Hub device, and the network address translation configurations of the two Hub devices are consistent; The line is constructed according to the two WAN interfaces of each of the Hub devices and the two WAN interfaces of each of the external network firewalls.

6. The method according to claim 1, characterized in that Before using the tunnel to transmit the service traffic, the method further includes: When receiving a message of the service flow, determining a tunnel selection strategy for each service in the service flow according to the service characteristics of each service in the service flow in the message; Based on the priority and usage of each tunnel in the tunnel selection strategy, a tunnel for transmitting each service in the service traffic is determined.

7. The method according to claim 6, characterized in that The determining, based on the priority and usage of each tunnel in the tunnel selection strategy, a tunnel for transmitting each service in the service traffic includes: Traversing each tunnel in the tunnel selection strategy according to the priority of each tunnel in the tunnel selection strategy; In the process of traversing each tunnel in the tunnel selection strategy, a tunnel matching the service flow is determined from the tunnels included in the tunnel selection strategy according to the usage of each tunnel in the tunnel selection strategy.

8. A disaster recovery switching device, characterized in that: include: A disaster recovery location module, used to obtain at least one disaster recovery node in the SD-WAN network, each of which has at least two disaster recovery devices with the same function; A tunnel construction module, used to construct at least two tunnels carried by Internet lines of different operators for each of the disaster recovery devices, wherein the at least two tunnels corresponding to the same disaster recovery device have the same functions except for the Internet lines; A disaster recovery tunnel module, used for determining a disaster recovery tunnel that is mutually disaster-tolerant with the tunnel with the fault when the tunnel has a fault during the process of using the tunnel to transmit service traffic; A disaster recovery switching module is used to use the disaster recovery tunnel to continue transmitting the business traffic transmitted by the failed tunnel, so as to realize disaster recovery switching of the SD-WAN network.

9. An electronic device, characterized in that: include: processor; as well as A memory arranged to store computer executable instructions, the executable instructions being configured to be executed by the processor, the executable instructions comprising instructions for performing the steps in the method according to any one of claims 1 to 7.

10. A storage medium, characterized in that: The storage medium is used to store computer-executable instructions, and the executable instructions enable a computer to execute the method according to any one of claims 1 to 7.

Images