Message processing method and device, computer device, readable storage medium and program product

Abstract

This application relates to a message processing method, apparatus, computer equipment, readable storage medium, and program product. The method includes: acquiring network function information of multiple hardware devices and generating virtual function network elements (VNFs) corresponding to each network function information; deploying the multiple VNFs in a target physical server and connecting each VNF to an integrated bridge in the target physical server; when a network interface device in the target physical server acquires a first message to be processed, detecting the target network segment information corresponding to each first message to be processed, and selecting the target VNF ​​corresponding to each target network segment from the multiple VNFs; and sending each first message to be processed to the corresponding target VNF ​​through the integrated bridge. This method enables efficient message processing.

Description

Technical Field

[0001] This application relates to the field of cloud computing technology, and in particular to a message processing method, apparatus, computer equipment, computer-readable storage medium, and computer program product. Background Technology

[0002] With the development of cloud computing technology, the technologies for processing messages are becoming increasingly diverse. By processing messages for data transmission, messages can be accurately pushed to the required devices, improving the reliability of message transmission.

[0003] Generally, packet processing often requires the participation of virtual function network elements (VNFs), such as virtual routers, virtual load balancers, and virtual VPNs (Virtual Private Networks). Different VNFs have different network dependencies on the physical servers. Therefore, the deployment of VNFs during packet processing is extremely important. Currently, the common deployment scheme is to deploy each VNF independently on its own physical server according to its function. The host network configuration also differs for different VNFs. This deployment method ensures that different types of VNFs do not interfere with each other. Finally, based on the deployed multiple physical servers, packet data processing is completed.

[0004] However, the current message processing methods are not efficient enough. Summary of the Invention

[0005] Therefore, it is necessary to provide an efficient message processing method, apparatus, computer equipment, computer-readable storage medium, and computer program product to address the aforementioned technical problems.

[0006] Firstly, this application provides a message processing method, including:

[0007] Obtain network function information from multiple hardware devices and generate virtual function network elements corresponding to each network function information;

[0008] Multiple virtual function network elements are deployed in the target physical server, and each virtual function network element is connected to the integrated bridge in the target physical server.

[0009] When the network interface device in the target physical server obtains the first message to be processed, the target network segment information corresponding to each first message to be processed is detected, and the target virtual function network element corresponding to each target network segment information is selected from multiple virtual function network elements. The first message to be processed includes messages flowing into the target physical server from the external physical server.

[0010] Each first message to be processed is sent to the target virtual function network element corresponding to the first message to be processed through the integrated bridge.

[0011] In one embodiment, the method further includes:

[0012] When the integrated bridge receives a second pending message sent by a virtual function network element, it obtains preset route mapping information and, based on the preset route mapping information, detects the first bridge connection port corresponding to the second pending message, wherein the second pending message is a message flowing from the target physical server to the external physical server.

[0013] The second message to be processed is forwarded from the integrated bridge to the first bridge connection port, and then sent to the external physical server through the network interface device corresponding to the first bridge connection port.

[0014] In one embodiment, before sending each first message to be processed to the target virtual function network element corresponding to the first message to be processed via the integrated bridge, the method further includes:

[0015] Obtain the message type information for each first message to be processed;

[0016] If the message type information includes a first message type, the first message to be processed is sent to the integrated bridge. The first message to be processed corresponding to the first message type includes data messages with a priority higher than a preset priority threshold.

[0017] When the message type information includes a second message type, for each first message to be processed, the first message to be processed is sent to the virtual bridge corresponding to the message type information. The first message to be processed corresponding to the second message type includes data packets with a priority lower than or equal to a preset priority threshold.

[0018] The first message to be processed is sent from the virtual bridge to the integrated bridge through the second bridge connection port corresponding to the virtual bridge.

[0019] In one embodiment, sending the first message to be processed to the virtual bridge corresponding to the message type information includes:

[0020] If the second message type includes the data intranet message type, the virtual extended LAN encapsulation of the first message to be processed is removed, and the decapsulated first message to be processed is sent to the virtual bridge corresponding to the data intranet message type.

[0021] If the second message type includes the external data network message type, the local area network encapsulation of the first message to be processed is removed, and the decapsulated first message to be processed is sent to the virtual bridge corresponding to the external data network message type.

[0022] In one embodiment, when the network interface device in the target physical server obtains a first packet to be processed, before detecting the target network segment information corresponding to each first packet to be processed, the method further includes:

[0023] When the network interface card bound to the network interface device in the target physical server obtains the first message to be processed, the data platform development kit is used to send the first message to be processed to the network interface device corresponding to the network interface card.

[0024] In one embodiment, the method further includes:

[0025] When the network interface device in the target physical server obtains the first message to be processed, delete the first message type label in the first message to be processed.

[0026] When the network interface device in the target physical server obtains the second message to be processed, it detects the target message type of the second message to be processed and adds the second message type tag corresponding to the target message type to the first message to be processed.

[0027] Secondly, this application also provides a message processing apparatus, comprising:

[0028] The conversion module is used to acquire network function information of multiple hardware devices and generate virtual function network elements corresponding to each network function information.

[0029] The deployment module is used to deploy multiple virtual function network elements in the target physical server and connect the multiple virtual function network elements to the integrated bridge in the target physical server respectively;

[0030] The detection module is used to detect the target network segment information corresponding to each first message to be processed when the network interface device in the target physical server obtains the first message to be processed, and to filter the target virtual function network element corresponding to each target network segment information from multiple virtual function network elements. The first message to be processed includes messages flowing into the target physical server from the external physical server.

[0031] The sending module is used to send each first message to be processed to the target virtual function network element corresponding to the first message to be processed through the integrated bridge.

[0032] Thirdly, this application also provides a computer device, including a memory and a processor, wherein the memory stores a computer program, and the processor executes the computer program to perform the following steps:

[0033] Obtain network function information from multiple hardware devices and generate virtual function network elements corresponding to each network function information;

[0034] Multiple virtual function network elements are deployed in the target physical server, and each virtual function network element is connected to the integrated bridge in the target physical server.

[0035] When the network interface device in the target physical server obtains the first message to be processed, the target network segment information corresponding to each first message to be processed is detected, and the target virtual function network element corresponding to each target network segment information is selected from multiple virtual function network elements. The first message to be processed includes messages flowing into the target physical server from the external physical server.

[0036] Each first message to be processed is sent to the target virtual function network element corresponding to the first message to be processed through the integrated bridge.

[0037] Fourthly, this application also provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, performs the following steps:

[0038] Obtain network function information from multiple hardware devices and generate virtual function network elements corresponding to each network function information;

[0039] Multiple virtual function network elements are deployed in the target physical server, and each virtual function network element is connected to the integrated bridge in the target physical server.

[0040] When the network interface device in the target physical server obtains the first message to be processed, the target network segment information corresponding to each first message to be processed is detected, and the target virtual function network element corresponding to each target network segment information is selected from multiple virtual function network elements. The first message to be processed includes messages flowing into the target physical server from the external physical server.

[0041] Each first message to be processed is sent to the target virtual function network element corresponding to the first message to be processed through the integrated bridge.

[0042] Fifthly, this application also provides a computer program product, including a computer program that, when executed by a processor, performs the following steps:

[0043] Obtain network function information from multiple hardware devices and generate virtual function network elements corresponding to each network function information;

[0044] Multiple virtual function network elements are deployed in the target physical server, and each virtual function network element is connected to the integrated bridge in the target physical server.

[0045] When the network interface device in the target physical server obtains the first message to be processed, the target network segment information corresponding to each first message to be processed is detected, and the target virtual function network element corresponding to each target network segment information is selected from multiple virtual function network elements. The first message to be processed includes messages flowing into the target physical server from the external physical server.

[0046] Each first message to be processed is sent to the target virtual function network element corresponding to the first message to be processed through the integrated bridge.

[0047] The aforementioned message processing method, apparatus, computer equipment, computer-readable storage medium, and computer program product convert the network function information of multiple hardware devices into virtual function network elements with different network segment information, and control multiple virtual function network elements to connect to an integrated bridge in the target physical server, thereby deploying multiple virtual function network elements in the same target physical server. This improves the flexibility and scalability of virtual function network element deployment. Furthermore, when the network interface device in the target physical server obtains a first message to be processed, it detects the target network segment information corresponding to each first message to be processed flowing into the target physical server from an external physical server, and filters the target virtual function network elements corresponding to the target network segment information from multiple virtual function network elements. Finally, each first message to be processed is sent to the target virtual function network element corresponding to the first message to be processed through the integrated bridge. In other words, with the improved flexibility and scalability of virtual function network element deployment, the obtained first message to be processed can be input to the target virtual function network element corresponding to the target network segment information through the integrated bridge, which greatly increases the message processing efficiency. Attached Figure Description

[0048] To more clearly illustrate the technical solutions in the embodiments of this application or related technologies, the drawings used in the description of the embodiments of this application or related technologies will be briefly introduced below. Obviously, the drawings described below are some embodiments of this application. For those skilled in the art, other related drawings can be obtained based on these drawings without creative effort.

[0049] Figure 1 This is an application environment diagram of a message processing method in one embodiment;

[0050] Figure 2 This is a flowchart illustrating a message processing method in one embodiment;

[0051] Figure 3 This is a flowchart illustrating a message processing method in another embodiment;

[0052] Figure 4This is a schematic diagram of data interaction between the target physical server and a specific application example.

[0053] Figure 5 This is a structural block diagram of a message processing apparatus in one embodiment;

[0054] Figure 6 This is an internal structural diagram of a computer device in one embodiment. Detailed Implementation

[0055] To make the objectives, technical solutions, and advantages of this application clearer, the following detailed description is provided in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are for illustrative purposes only and are not intended to limit the scope of this application.

[0056] With the development of cloud computing technology, the technologies for processing messages are becoming increasingly diverse. By processing message data, messages can be accurately pushed to the required devices, improving the reliability of message transmission. Generally, the message processing process often requires the participation of virtual function network elements, such as virtual routers, virtual load balancers, and virtual VPNs. The functions of different virtual function network elements have different network dependencies on the physical server. Therefore, the deployment of virtual function network elements in the message processing process is extremely important.

[0057] It's important to explain that a virtual function element (NFV) is a network element corresponding to a network function. Network functions are typically executed through dedicated hardware devices, which are usually expensive and difficult to maintain. NFV technology, by using standard servers, storage, and network devices, along with virtualization techniques, allows network functions to be deployed as software entities—virtual function elements—thereby improving flexibility, scalability, and reducing costs. NFV is a network architecture and service delivery model that decouples traditional network device functions, such as routers, firewalls, and load balancers, from dedicated hardware, allowing them to run as software on general-purpose hardware.

[0058] Cloud data centers typically contain a variety of virtual network elements, such as virtual routers, virtual load balancers, and virtual VPNs. The network dependencies of different virtual network elements on physical servers vary. For example, virtual routers usually need to connect to the external network of the data center to enable users to access the internet. Load balancers and VPNs typically only need to handle internal network forwarding logic, with public network access handled by the virtual router. Furthermore, virtual routers usually require traffic entering the virtual network interface card (NIC) to retain overlay information, while load balancers and VPNs are dedicated to a single customer, and traffic entering the virtual NIC does not need to retain overlay information.

[0059] Currently, the deployment scheme for virtual function network elements is to deploy each type of virtual function network element independently on its own physical server according to its function. The network configuration of the host machine is also different for different virtual function network elements. This deployment method can ensure that there is no functional interference between different types of virtual function network elements. This method is simple in logic and suitable for small-scale clusters.

[0060] However, this method also has the following problems:

[0061] 1. Poor flexibility: Different virtual function network element types depend on the configuration of the underlying physical server. In the event of a host machine failure, the range of physical servers that virtual function network elements can migrate to becomes smaller.

[0062] 2. Poor scalability: Different virtual function network elements require different physical resources such as CPU (Central Processing Unit), memory, and network interface cards. Virtual routers, which carry the majority of user traffic, typically require large-scale virtual machines, while load balancers (LBs) and VPNs, under normal circumstances, require smaller virtual machine sizes. If various virtual function network elements are deployed on separate physical servers, when expansion is needed, there may be situations where other types of physical servers have the resources (such as load balancer network element servers), but cannot deploy a specific network element (such as a virtual router network element).

[0063] To solve the above two problems, more physical servers are needed without changing the overall solution, increasing costs. Furthermore, packet processing efficiency is relatively low in environments using multiple physical servers to deploy virtual function network elements.

[0064] Therefore, this application provides a message processing method that converts the network function information of multiple hardware devices into virtual function network elements with different network segment information, and controls multiple virtual function network elements to connect to an integrated bridge in a target physical server, thereby deploying multiple virtual function network elements in the same target physical server. This improves the flexibility and scalability of virtual function network element deployment. Furthermore, when a network interface device in the target physical server obtains a first message to be processed, it detects the target network segment information corresponding to each first message to be processed flowing into the target physical server from an external physical server, and filters the target virtual function network elements corresponding to the target network segment information from multiple virtual function network elements. Finally, each first message to be processed is sent to the target virtual function network element corresponding to the first message to be processed through the integrated bridge. In other words, with the improved flexibility and scalability of virtual function network element deployment, the obtained first message to be processed can be input to the target virtual function network element corresponding to the target network segment information through the integrated bridge, which greatly increases the message processing efficiency.

[0065] The message processing method provided in this application embodiment can be applied to, for example, Figure 1 In the application environment shown, the external physical server 102 communicates with the target physical server 104 via a network. Both the external physical server 102 and the target physical server 104 communicate with the controller 106, meaning that both are managed by the controller 106. The data storage system can store the data that each server needs to process. The data storage system can be integrated on the corresponding server or placed in the cloud.

[0066] Generally, controller 106 can be an SDN (Software Defined Network) controller. SDN is a new type of network architecture that enables programmable network topology. Compared with traditional data center networks, SDN technology relies on the traditional underlying network to achieve a more flexible network model. Currently, SDN technology is an essential core technology for major cloud service providers and is widely used in the construction of public clouds, private clouds, and hybrid clouds.

[0067] During message processing, controller 106 acquires network function information from multiple hardware devices and generates virtual function network elements corresponding to each network function information, wherein the network segment information of each virtual function network element is different; deploys multiple virtual function network elements in target physical server 104 and controls multiple virtual function network elements to connect to the integrated bridge in target physical server 104 respectively; when the network interface device in target physical server 104 acquires a first message to be processed, it detects the target network segment information corresponding to each first message to be processed, and selects the target virtual function network element corresponding to the target network segment information from multiple virtual function network elements, wherein the first message to be processed includes messages flowing from external physical server 102 into target physical server 104; and sends each first message to be processed to the target virtual function network element corresponding to the first message to be processed through the integrated bridge respectively.

[0068] The server can be a standalone physical server, a server cluster or distributed system consisting of multiple physical servers, or a cloud server that provides cloud computing services.

[0069] In one exemplary embodiment, such as Figure 2 As shown, a message processing method is provided, which is applied to... Figure 1 The following explanation uses controller 106 as an example. Specifically:

[0070] S200 acquires network function information from multiple hardware devices and generates virtual function network elements for each network function.

[0071] The network segment information is different for each virtual functional network element.

[0072] Specifically, network functions are typically executed through dedicated hardware devices, which are often expensive and difficult to maintain. Therefore, this application, when obtaining network function information from multiple hardware devices, can use NFV technology to generate virtual function network elements corresponding to each network function. NFV is a network architecture process that migrates network functions such as load balancing and encryption from physical hardware to virtual machines. Its goal is to deploy network functions as software entities using standard servers, storage, and network devices, as well as virtualization technology, thereby improving flexibility, scalability, and reducing costs.

[0073] In practical applications, the virtual function network elements corresponding to each network function information include, but are not limited to, virtual routers, virtual load balancers, and virtual VPNs. Furthermore, if we consider virtual function network elements as virtual machines, the field information corresponding to each virtual function network element for each network function information will also be different.

[0074] In one exemplary embodiment, network segment information is routing information, such as IP (Internet Protocol Address) address information or MAC (Media Access Control Address) address information.

[0075] The S400 deploys multiple virtual function network elements in the target physical server and connects each virtual function network element to an integrated bridge in the target physical server.

[0076] The integrated bridge in the target physical server can connect to multiple bridge structures, such as other bridges or multiple virtual function network elements.

[0077] Specifically, in traditional technologies, the functions of different virtual function network elements have different network dependencies on the physical server. In other words, the usual deployment scheme is to deploy each type of virtual function network element independently on its own physical server according to its function, so as to ensure that there is no functional interference between different types of virtual function network elements.

[0078] In this application, multiple virtual function network elements are deployed on the same target physical server. Even virtual function network elements of different types can be deployed on the same target physical server. Different network element traffic is isolated using OVS (Open vSwitch), an open-source multi-layer virtual switch for virtualization and software-defined networking. OVS allows for flexible configuration of network connections in a virtualized environment and provides support for SDN, enabling network administrators to better control and manage network traffic.

[0079] Furthermore, to enable the deployment of multiple virtual function network elements on the same target physical server, this application designs an integrated bridge within the target physical server. Specifically, by establishing connections between multiple virtual function network elements and the integrated bridge in the target physical server, the deployment of multiple virtual function network elements on the same target physical server is achieved.

[0080] S600, when the network interface device in the target physical server obtains the first message to be processed, detects the target network segment information corresponding to each first message to be processed, and selects the target virtual function network element corresponding to each target network segment information from multiple virtual function network elements.

[0081] The first message to be processed includes messages flowing from an external physical server to the target physical server.

[0082] Specifically, the target physical server also includes network interface devices, namely bondm.n, such as bond0.x, bond1.y, and bond2.z. These network interface devices also come in different types, receiving different types of messages. Furthermore, these network interface devices can be used to connect external physical servers to the target physical server.

[0083] Therefore, when a message to be processed flows from an external physical server into a target physical server, it first flows into the network interface device in the target physical server. If the network interface device obtains the first message to be processed, it needs to transmit the first message to be processed from the network interface device to the corresponding virtual function network element.

[0084] Since multiple virtual function network elements are deployed in the target physical server, in order to achieve this goal, it is necessary to select the target virtual function network element corresponding to each first message to be processed from among the multiple virtual function network elements.

[0085] Considering that the network segment information of each virtual functional network element is different, the specific method for filtering may include: detecting the target network segment information corresponding to each first message to be processed, and filtering the target virtual functional network element corresponding to the target network segment information from multiple virtual functional network elements.

[0086] S800 sends each first message to be processed to the target virtual function network element corresponding to the first message to be processed through the integrated bridge.

[0087] Specifically, upon detecting the target virtual function network element corresponding to each target network segment information, each first message to be processed is sent to the target virtual function network element corresponding to the first message to be processed through the integrated bridge.

[0088] In other words, each first message to be processed is sent to the integrated bridge, and each first message to be processed is sent from the integrated bridge to the corresponding target virtual function element to realize message forwarding processing.

[0089] In the above message processing method, by converting the network function information of multiple hardware devices into virtual function network elements with different network segment information, and controlling multiple virtual function network elements to connect to the integrated bridge in the target physical server, multiple virtual function network elements are deployed in the same target physical server, which improves the flexibility and scalability of virtual function network element deployment. Furthermore, when the network interface device in the target physical server obtains the first message to be processed, it detects the target network segment information corresponding to each first message to be processed flowing into the target physical server from the external physical server, and filters the target virtual function network elements corresponding to the target network segment information from multiple virtual function network elements. Finally, each first message to be processed is sent to the target virtual function network element corresponding to the first message to be processed through the integrated bridge. In other words, with the improved flexibility and scalability of virtual function network element deployment, the obtained first message to be processed can be input to the target virtual function network element corresponding to the target network segment information through the integrated bridge, which greatly increases the message processing efficiency.

[0090] In one exemplary embodiment, the method further includes:

[0091] When the integrated bridge receives a second message to be processed from a virtual function network element, it obtains preset routing mapping information and, based on the preset routing mapping information, detects the first bridge connection port corresponding to the second message to be processed; forwards the second message to be processed from the integrated bridge to the first bridge connection port, and sends the second message to be processed to the external physical server through the network interface device corresponding to the first bridge connection port.

[0092] In this context, the second message to be processed flows in the opposite direction to the first message to be processed. It represents the message flowing from the target physical server to the external physical server. In simpler terms, for the target physical server, the second message to be processed represents outbound traffic, while the first message to be processed represents inbound traffic.

[0093] Specifically, this application can process not only messages flowing from an external physical server to a target physical server, but also messages flowing from a target physical server to an external physical server.

[0094] The second pending message is typically generated by a Virtual Functions (VFC) element and needs to be sent to an external physical server. Since multiple VFC elements are connected to an integrated bridge, sending the second pending message generated by the VFC to the external physical server first requires sending the message to the integrated bridge within the target physical server, and then forwarding it through the integrated bridge to the external physical server.

[0095] Furthermore, at least one network interface device in the target physical server needs to determine which network interface device sent the second packet to be processed to the external server when the integrated bridge receives the second packet from the virtual function network element. The methods employed include: obtaining preset routing mapping information, such as flow table information, and based on this preset routing mapping information, detecting the first bridge connection port corresponding to the second packet to be processed. The first bridge connection port is a port connecting the integrated bridge and the network interface device. Specifically, this involves detecting the MAC address corresponding to the second packet to be processed based on the preset routing mapping information, and then detecting the first bridge connection port corresponding to that MAC address.

[0096] By detecting the first bridge connection port corresponding to the second message to be processed, the network interface device corresponding to the target bridge connection port can be determined. Therefore, when the second message to be processed generated by the virtual function element is sent to the integrated bridge in the target physical server, the second message to be processed is forwarded from the integrated bridge to the first bridge connection port, and then sent to the external physical server through the network interface device corresponding to the first bridge connection port.

[0097] In the above embodiments, by designing an integrated bridge and bridge connection port in the target physical server, outbound traffic can be processed more efficiently, enabling the second message to be processed to be sent to the external physical server more quickly through the integrated bridge and bridge connection port.

[0098] In one exemplary embodiment, such as Figure 3 As shown, prior to S800, the method also included:

[0099] S720, obtain the message type information for each first message to be processed.

[0100] S740, if the message type information includes the first message type, sends the first message to be processed to the integrated bridge.

[0101] S760, when the message type information includes a second message type, sends the first message to be processed to the virtual bridge corresponding to the message type information for each first message to be processed.

[0102] The S780 sends the first message to be processed from the virtual bridge to the integrated bridge through the second bridge connection port corresponding to the virtual bridge.

[0103] The first message type corresponds to the first message to be processed, which includes data messages with a priority higher than a preset priority threshold. The second message type corresponds to the first message to be processed, which includes data messages with a priority lower than or equal to the preset priority threshold, that is, the first message to be processed corresponding to all message types other than the first message type.

[0104] Specifically, each first message to be processed has its own message type information, which includes a first message type and a second message type. The first message type corresponds to data messages with a priority higher than a preset priority threshold. The second message type corresponds to data messages with a priority lower than or equal to the preset priority threshold.

[0105] For example, data packets with a priority higher than a preset priority threshold can be management-level data packets, while data packets with a priority lower than or equal to the preset priority threshold can be non-management-level packet types.

[0106] Based on the message type information of all the first messages to be processed, the first messages to be processed are classified to obtain the first message type of the first message and the second message type of the second message.

[0107] Furthermore, for the first pending message of the first message type, such as a management-level data message, the first pending message is directly sent to the integrated bridge. In other words, the network interface device of the first message type is directly connected to the integrated bridge to send the first pending message of the first message type to the integrated bridge. This direct connection of the network interface device of the first message type to the integrated bridge is achieved through the OVS open-source multilayer virtual switch.

[0108] Furthermore, when the network interface device of the first message type is directly connected to the integrated bridge, the firewall is in an open state, filtering the first message to be processed, and no other configuration is required.

[0109] For the second type of message to be processed, such as non-management level data messages, the participation of a virtual bridge is also required. This virtual bridge is a non-integrated bridge, such as a br-ext bridge or a br-pub bridge. A connection is established between the virtual bridge and the integrated bridge.

[0110] When the message type information includes a second message type, for each first message to be processed, firstly, the first message to be processed is sent to the virtual bridge corresponding to the message type information, and then the first message to be processed is sent from the virtual bridge to the integrated bridge.

[0111] Furthermore, the virtual bridge and the integrated bridge are connected through the bridge connection port. The bridge connection port mentioned above is used to connect the integrated bridge and the network interface device. In essence, it is used to directly connect the integrated bridge and the virtual bridge, and indirectly connect the integrated bridge and the network interface device through the virtual bridge.

[0112] Therefore, the first message to be processed is sent from the virtual bridge to the integrated bridge. The first message to be processed is sent from the virtual bridge to the integrated bridge through the second bridge connection port corresponding to the virtual bridge. Each type of virtual bridge corresponds to a second bridge connection port.

[0113] Furthermore, the specific method for detecting the second bridge connection port corresponding to the second processed message is the same as the method for detecting outbound traffic, which is also detected through routing mapping relationships.

[0114] In the above embodiments, by obtaining the message type information of each first message to be processed, different sending methods can be adopted to send the first messages to be processed of different message types to the target virtual function network element through the integrated bridge, making the message processing more accurate and reliable.

[0115] In an exemplary embodiment, sending the first message to be processed to the virtual bridge corresponding to the message type information includes:

[0116] If the second message type includes the intranet data message type, the virtual extended LAN encapsulation of the first message to be processed is removed, and the decapsulated first message to be processed is sent to the virtual bridge corresponding to the intranet data message type; if the second message type includes the extranet data message type, the LAN encapsulation of the first message to be processed is removed, and the decapsulated first message to be processed is sent to the virtual bridge corresponding to the extranet data message type.

[0117] Specifically, the second message type also includes various message types, such as intranet message type and extranet message type. Intranet message type refers to messages obtained from the intranet, while extranet message type refers to messages obtained from the extranet.

[0118] The first message to be processed, which has different message types, is decapsulated and then sent to the virtual bridge corresponding to the message type in the data intranet.

[0119] Furthermore, the decapsulation method varies depending on the type of the second message. Specifically, when the second message type includes an intranet data message, the virtual extended LAN encapsulation of the first message to be processed is decapsulated. When the second message type includes an extranet data message, the LAN encapsulation of the first message to be processed is decapsulated.

[0120] Therefore, this application also sets up a Vtep (VXLAN Tunnel Endpoint) module between the virtual bridge corresponding to the data intranet packet type and the network interface device corresponding to the data intranet packet type. The Vtep plays a key role in VXLAN encapsulation and decapsulation, responsible for transmitting VXLAN encapsulated data packets between different hosts in the VXLAN network, thereby enabling communication between virtual machines. In this application, the Vtep module is the module for decapsulating virtual extended LANs.

[0121] In other words, the Vtep module can remove the virtual extended LAN encapsulation from the first pending message of the data intranet message type.

[0122] For the first pending message of the data external network message type, there is no need to set up a special module to remove the virtual extended LAN encapsulation. Instead, the LAN encapsulation of the first pending message is directly removed, and the decapsulated first pending message is sent from the network interface device corresponding to the data external network message type to the virtual bridge corresponding to the data external network message type.

[0123] In the above embodiments, the sending methods for the first message to be processed are different for different second message types. Specifically, when the second message type includes the intranet data message type, a VTEP module needs to be set between the corresponding virtual bridge and the network interface device to remove the virtual extended LAN encapsulation of the first message to be processed. When the second message type includes the extranet data message type, the LAN encapsulation of the first message to be processed is directly removed without setting up a special module. By setting it up in this way, the protection level of the message to be processed of the intranet data message type can be improved.

[0124] In an exemplary embodiment, when the network interface device in the target physical server obtains a first packet to be processed, before detecting the target network segment information corresponding to each first packet to be processed, the method further includes:

[0125] When the network interface card bound to the network interface device in the target physical server obtains the first message to be processed, the data platform development kit is used to send the first message to be processed to the network interface device corresponding to the network interface card.

[0126] Network interface devices are used to combine multiple physical network interfaces into a single logical interface. When multiple physical interfaces (such as eth0, eth1, etc.) are bound to a network interface device, they are treated as a single logical interface, sharing the same IP address and MAC address.

[0127] Specifically, some network interface devices are bound to a network interface card (NIC), while others are not. A NIC can receive data packets from an external physical server and can also transmit data packets from the physical server it resides in.

[0128] It should be noted that the network card generally receives the first pending message of the second message type. In other words, the first pending message of the first message type is sent directly to the integrated bridge through the corresponding network interface device without going through the network card.

[0129] When the network interface card (NIC) bound to the network interface device in the target physical server receives the first packet to be processed, the DPDK (Data Plane Development Kit) can be used to send the first packet to the network interface device corresponding to the NIC. Using DPDK can significantly improve packet sending efficiency and shorten packet transmission time.

[0130] In the above embodiments, by setting the network interface device to bind the network card, the first message to be processed of the second message type can be obtained through the network card, and the first message to be processed can be efficiently sent to the network interface device corresponding to the network card by utilizing the data platform development kit.

[0131] In one exemplary embodiment, the method further includes:

[0132] If the network interface device in the target physical server obtains the first message to be processed, delete the first message type label in the first message to be processed; if the network interface device in the target physical server obtains the second message to be processed, detect the target message type of the second message to be processed, and add the second message type label corresponding to the target message type to the first message to be processed.

[0133] Specifically, the messages to be processed are tagged messages. The tag generally refers to a message type tag. For example, if the message type information of the message to be processed is a first message type, then the message type tag is "first message type tag"; similarly, if the message type information of the message to be processed is a second message type, then the message type tag is "second message type tag". Furthermore, the message type tag can be further subdivided. For example, if the message type information of the message to be processed is an intranet message type, then the message type tag is "intranet message type tag"; if the message type information of the message to be processed is an extranet message type, then the message type tag is "extranet message type tag". The messages to be processed include first messages to be processed and second messages to be processed.

[0134] When a network interface device acquires a packet to be processed, it can add or delete tags on the packet. Specifically, this can be done in the following two ways:

[0135] When the network interface device obtains the first message to be processed, since the first message to be processed is a message flowing from the external physical server to the target physical server, it includes first messages of various message types. Therefore, when the first message to be processed flows to the target physical server, the first message type tag in the first message to be processed needs to be deleted.

[0136] When a network interface device acquires a second message to be processed, since this second message is a message flowing from the target physical server to the external physical server, it is necessary to add a corresponding second message type tag to the second message that no longer carries a message type tag. More specifically, when adding a second message type tag, since there are many message types, it is necessary to first detect the target message type of the second message to be processed, and then add the second message type tag corresponding to the target message type to the first message to be processed.

[0137] In the above embodiments, by adding or deleting message type tags in the message to be processed when the network interface device in the target physical server obtains the message to be processed, the message to be processed can be accurately fed in or out, thereby improving the accuracy of message processing.

[0138] In an exemplary embodiment, a schematic diagram of the data interaction of the target physical server is shown below. Figure 4 As shown, different types of virtual function network elements are deployed on the same physical server. Traffic from different network elements is isolated using OVS. The packet type information for pending messages includes a first packet type and a second packet type. The second packet type includes intranet data packet types and extranet data packet types. For example, pending messages of the first packet type include pending messages from the management network, pending messages of the intranet data packet type include pending messages from the intranet data network, and pending messages of the extranet data packet type include pending messages from the extranet data network. The specific OVS configuration scheme is as follows:

[0139] 1. The network interface device bond0.x corresponding to the management network of the virtual function element manage VM is connected to the operating system bridge linux-br. The firewall iptables is open and no other configuration is made. When the network interface device bond0.x obtains the first pending packet in the inbound direction, it directly sends the first pending packet to the linux bridge, which is the integrated bridge br-int. When the network interface device bond0.x obtains the second pending packet in the outbound direction, it directly sends the first pending packet from the integrated bridge br-int to the network interface device bond0.x.

[0140] 2. The integrated bridge br-int connects to the SDN management network without VXLAN encapsulation;

[0141] 3. The network interface device bond1.y corresponding to the virtual bridge br-ext can add or delete VLANs on the data intranet without performing VXLAN encapsulation during the process;

[0142] 4. The virtual bridge br-ext connects to the integrated bridge br-int via the corresponding bridge connection port patch. When the network interface device bond1.y receives the first incoming packet to be processed, it needs to obtain the destination IP of the first packet and detect the virtual function element corresponding to the destination IP. Then, it sends the first packet to the integrated bridge br-int and forwards it through br-int to the virtual function element corresponding to the destination IP, such as the internal network port of the virtual router. Figure 4 The data port in the network interface device; when the network interface device bond1.y obtains the second unprocessed packet in the outgoing direction, it will forward it to the bridge connection port patch corresponding to the virtual bridge br-ext.

[0143] 5. The network interface device bond2.z corresponding to the virtual bridge br-pub can add or delete VLANs on the external data network without performing VXLAN encapsulation during the process;

[0144] 6. The virtual bridge br-pub connects to the integrated bridge br-int through the corresponding bridge connection port patch. In the in direction, the traffic packets are matched with the MAC address in the traffic packets through the routing flow table, and based on the MAC address, the traffic packets are forwarded to the virtual network card in the corresponding virtual function network element. Out-of direction traffic packets are uniformly forwarded to the corresponding patch port of the virtual bridge br-pub, and then forwarded to the external physical server.

[0145] 7. The controller manages the scheduling of br-int, but does not manage the scheduling of br-ext and br-pub.

[0146] 8. In this target physical server system, when the integrated bridge transmits traffic packets to the virtual function network element, the communication method used is vhost-user communication technology. vhost-user communication technology uses a shared memory communication method to realize communication between two processes in user space.

[0147] 9. In virtual function network elements such as load balancers / virtual private networks, there are three ports: management port mng, data port data, and egress port ext1. In virtual function network elements such as virtual routers, there are three ports: management port mng, data port data, and egress port ext2. The data port data communicates with the integrated bridge through the VXLAN tunnel endpoint module vetp2.

[0148] Based on the above deployment architecture of the target physical server, corresponding packet forwarding methods can be implemented, including:

[0149] 1. Messages for the management network:

[0150] When the network interface device bond0.x obtains the first message to be processed, it deletes the first message type tag in the first message to be processed, detects the target network segment information corresponding to each first message to be processed, and selects the target virtual function network element corresponding to each target network segment information from multiple virtual function network elements. It then sends each first message to be processed directly to the integrated bridge and sends it from the integrated bridge to the target virtual function network element corresponding to the target network segment information of the first message to be processed.

[0151] The first message to be processed includes messages flowing from an external physical server to the target physical server.

[0152] When the integrated bridge obtains a second message to be processed from a virtual function network element, it sends the second message to the network interface device bond0.x that matches the network segment information of the second message. The network interface device bond0.x adds a second message type tag to the first message to be processed, and the message flows from the network interface device bond0.x to the external physical server.

[0153] The second message to be processed is a message flowing from the target physical server to the external physical server.

[0154] 2. For messages within the data intranet:

[0155] When the network interface device bond1.y obtains the first packet to be processed by the network interface cards eth0 and eth1, the data platform development kit dpdk is used to send the first packet to be processed to the network interface device bond1.y corresponding to the network interface card.

[0156] The network interface device bond1.y removes the first message type tag from the first message to be processed and detects the target network segment information corresponding to each first message to be processed. From multiple virtual function network elements, it selects the target virtual function network element corresponding to each target network segment information.

[0157] Furthermore, the network interface device bond1.y sends each first message to be processed to the VXLAN tunnel endpoint vtep1 module. The VXLAN tunnel endpoint vtep1 module decapsulates the first message to be processed and sends the decapsulated first message to the virtual bridge br-xet corresponding to the data intranet message type. The virtual bridge br-xet sends the message to the integrated bridge through the bridge connection port, i.e., the patch port. Finally, the integrated bridge sends the message to the target virtual function element corresponding to the target network segment information of the first message to be processed.

[0158] When the integrated bridge receives a second pending message from a virtual function network element, it sends the second pending message to the patch port matched by the virtual bridge br-xet. The second pending message is then sent to the virtual bridge br-xet, processed and encapsulated by the vtep1 module, and transmitted to the network interface device bond1.y. Finally, it is sent to the network card bound to the network interface device bond1.y via DPDK technology, thus sending the second pending message to the external physical server.

[0159] 3. For messages sent to the external data network:

[0160] When the network interface devices bond2.z and eth2.eth3 receive the first packet to be processed, the data platform development kit dpdk is used to send the first packet to the network interface device bond2.z corresponding to the network interface device.

[0161] The network interface device bond2.z removes the first message type tag from the first message to be processed and detects the target network segment information corresponding to each first message to be processed. From multiple virtual function network elements, it selects the target virtual function network element corresponding to each target network segment information.

[0162] Furthermore, the network interface device bond2.z removes the VLAN encapsulation of each first message to be processed and sends the decapsulated first message to the virtual bridge br-pub corresponding to the data external network message type. The virtual bridge br-pub then sends the message to the integrated bridge through the patch port. Finally, the integrated bridge sends the message to the target virtual functional network element corresponding to the target network segment information of the first message to be processed.

[0163] When the integrated bridge receives a second pending message from a virtual function network element, it sends the second pending message to the patch port matched by the virtual bridge br-pub, so that the second pending message is sent to the virtual bridge br-pub, then encapsulated and transmitted to the network interface device bond2.z. Finally, it is sent to the network card bound to the network interface device bond2.z through DPDK technology, so as to send the second pending message to the external physical server.

[0164] Furthermore, the deployment scheme based on virtual function network elements proposed in this application can be well applied to scenarios with diverse network service requirements, such as cloud computing and edge computing. It ensures flexible and scalable deployment of virtual network elements while reducing costs. Simultaneously, this application demonstrates strong practicality, providing high availability guarantees for various SDN-based network systems. This has a positive impact on ensuring network availability and can create considerable value for society and enterprises.

[0165] It should be understood that although the steps in the flowcharts of the above embodiments are shown sequentially according to the arrows, these steps are not necessarily executed in the order indicated by the arrows. Unless explicitly stated herein, there is no strict order restriction on the execution of these steps, and they can be executed in other orders. Moreover, at least some steps in the flowcharts of the above embodiments may include multiple steps or multiple stages. These steps or stages are not necessarily completed at the same time, but can be executed at different times. The execution order of these steps or stages is not necessarily sequential, but can be performed alternately or in turn with other steps or at least some of the steps or stages of other steps.

[0166] Based on the same inventive concept, this application also provides a message processing apparatus for implementing the message processing method described above. The solution provided by this apparatus is similar to the implementation scheme described in the above method; therefore, the specific limitations in one or more message processing apparatus embodiments provided below can be found in the limitations of the message processing method described above, and will not be repeated here.

[0167] In one exemplary embodiment, such as Figure 5 As shown, a message processing apparatus is provided, including: a conversion module 200, a deployment module 400, a detection module 600, and a sending module 800, wherein:

[0168] The conversion module 200 is used to acquire network function information of multiple hardware devices and generate virtual function network elements corresponding to each network function information.

[0169] Deployment module 400 is used to deploy multiple virtual function network elements in the target physical server and connect the multiple virtual function network elements to the integrated bridge in the target physical server respectively;

[0170] The detection module 600 is used to detect the target network segment information corresponding to each first message to be processed when the network interface device in the target physical server obtains the first message to be processed, and to filter the target virtual function network element corresponding to each target network segment information from multiple virtual function network elements. The first message to be processed includes messages flowing into the target physical server from the external physical server.

[0171] The sending module 800 is used to send each first message to be processed to the target virtual function network element corresponding to the first message to be processed through the integrated bridge.

[0172] In one embodiment, the message processing device further includes an outgoing module, which is used to obtain preset routing mapping information when the integrated bridge receives a second message to be processed sent by a virtual function network element, and based on the preset routing mapping information, detect the first bridge connection port corresponding to the second message to be processed, wherein the second message to be processed is a message flowing from the target physical server to the external physical server; forward the second message to be processed from the integrated bridge to the first bridge connection port, and send the second message to be processed to the external physical server through the network interface device corresponding to the first bridge connection port.

[0173] In one embodiment, the message processing apparatus further includes a classification processing module, which is used to obtain message type information for each first message to be processed; when the message type information includes a first message type, the first message to be processed is sent to the integrated bridge, wherein the first message to be processed corresponding to the first message type includes data messages with a priority higher than a preset priority threshold; when the message type information includes a second message type, for each first message to be processed, the first message to be processed is sent to the virtual bridge corresponding to the message type information, wherein the first message to be processed corresponding to the second message type includes data messages with a priority lower than or equal to a preset priority threshold; and the first message to be processed is sent from the virtual bridge to the integrated bridge through the second bridge connection port corresponding to the virtual bridge.

[0174] In one embodiment, the classification processing module is further configured to, when the second message type includes a data intranet message type, decapsulate the virtual extended LAN encapsulation of the first message to be processed and send the decapsulated first message to be processed to the virtual bridge corresponding to the data intranet message type; and when the second message type includes a data extranet message type, decapsulate the LAN encapsulation of the first message to be processed and send the decapsulated first message to be processed to the virtual bridge corresponding to the data extranet message type.

[0175] In one embodiment, the message processing apparatus further includes a network interface card (NIC) receiving module, which is used to send the first message to be processed to the network interface device corresponding to the NIC when the NIC bound to the network interface device in the target physical server obtains the first message to be processed, using the data platform development kit.

[0176] In one embodiment, the message processing apparatus further includes a tag processing module, which is used to delete a first message type tag from the first message to be processed when the network interface device in the target physical server obtains a first message to be processed; and to detect the target message type of the second message to be processed when the network interface device in the target physical server obtains a second message to be processed, and to add a second message type tag corresponding to the target message type to the first message to be processed.

[0177] Each module in the aforementioned message processing device can be implemented entirely or partially through software, hardware, or a combination thereof. These modules can be embedded in or independent of the processor in a computer device, or stored in the memory of a computer device as software, so that the processor can call and execute the operations corresponding to each module.

[0178] In one exemplary embodiment, a computer device is provided, which may be a server, and its internal structure diagram may be as follows: Figure 6 As shown, this computer device includes a processor, memory, input / output interfaces (I / O), and a communication interface. The processor, memory, and I / O interfaces are connected via a system bus, and the communication interface is also connected to the system bus via the I / O interfaces. The processor provides computational and control capabilities. The memory includes non-volatile storage media and internal memory. The non-volatile storage media stores the operating system, computer programs, and a database. The internal memory provides the environment for the operation of the operating system and computer programs stored in the non-volatile storage media. The database stores data such as messages to be processed. The I / O interfaces are used for exchanging information between the processor and external devices. The communication interface is used for communicating with external terminals via a network connection. When the computer program is executed by the processor, it implements a message processing method.

[0179] Those skilled in the art will understand that Figure 6 The structure shown is a block diagram of a partial structure related to the present application and does not constitute a limitation on the computer device to which the present application is applied. The specific computer device may include more or fewer components than shown in the figure, or combine certain components, or have different component arrangements.

[0180] In one embodiment, a computer device is also provided, including a memory and a processor, wherein the memory stores a computer program, and the processor executes the computer program to implement the steps in the above method embodiments.

[0181] In one embodiment, a computer-readable storage medium is provided having a computer program stored thereon that, when executed by a processor, implements the steps in the above method embodiments.

[0182] In one embodiment, a computer program product is provided, including a computer program that, when executed by a processor, implements the steps in the above method embodiments.

[0183] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, data stored, data displayed, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of the relevant data must comply with relevant regulations.

[0184] Those skilled in the art will understand that all or part of the processes in the methods of the above embodiments can be implemented by a computer program instructing related hardware. The computer program can be stored in a non-volatile computer-readable storage medium, and when executed, it can include the processes of the embodiments of the above methods. Any references to memory, databases, or other media used in the embodiments provided in this application can include at least one of non-volatile memory and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. By way of illustration and not limitation, RAM can take many forms, such as Static Random Access Memory (SRAM) or Dynamic Random Access Memory (DRAM). The databases involved in the embodiments provided in this application may include at least one type of relational database and non-relational database. Non-relational databases may include, but are not limited to, blockchain-based distributed databases. The processors involved in the embodiments provided in this application may be general-purpose processors, central processing units, graphics processing units, digital signal processors, programmable logic devices, quantum computing-based data processing logic devices, artificial intelligence (AI) processors, etc., and are not limited to these.

[0185] The technical features of the above embodiments can be combined in any way. For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this application.

[0186] The above embodiments are merely illustrative of several implementation methods of this application, and their descriptions are relatively specific and detailed. However, they should not be construed as limiting the scope of this application. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of this application, and these all fall within the protection scope of this application. Therefore, the protection scope of this application should be determined by the appended claims.

Claims

1. A method of processing a packet, the method comprising: The method includes: Obtain network function information from multiple hardware devices and generate virtual function network elements corresponding to each of the network function information; Deploy multiple virtual function network elements in the target physical server, and connect each of the multiple virtual function network elements to the integrated bridge in the target physical server; When the network interface device in the target physical server obtains a first message to be processed, it obtains the message type information of each first message to be processed. If the message type information includes a first message type, the first message to be processed is sent to the target virtual function network element through the integrated bridge. The first message to be processed corresponding to the first message type includes data messages with a priority higher than a preset priority threshold. If the message type information includes a second message type, for each first message to be processed, the first message to be processed is sent to the virtual bridge corresponding to the message type information. The first message to be processed is then sent from the virtual bridge to the integrated bridge through the second bridge connection port corresponding to the virtual bridge. The first message to be processed corresponding to the second message type is further processed. The processing includes data packets with a priority lower than or equal to a preset priority threshold; if the second packet type includes a data intranet packet type, the virtual extended LAN encapsulation of the first packet to be processed is removed, and the decapsulated first packet to be processed is sent to the virtual bridge corresponding to the data intranet packet type; if the second packet type includes a data extranet packet type, the LAN encapsulation of the first packet to be processed is removed, and the decapsulated first packet to be processed is sent to the virtual bridge corresponding to the data extranet packet type; the target network segment information corresponding to each first packet to be processed is detected, and the target virtual functional network element corresponding to each target network segment information is selected from multiple virtual functional network elements, wherein the first packet to be processed includes packets flowing from an external physical server to the target physical server; Each of the first messages to be processed is sent to the target virtual function network element corresponding to the first message to be processed through the integrated bridge.

2. The method according to claim 1, characterized in that, The method further includes: When the integrated bridge receives a second pending message sent by a virtual function network element, it obtains preset routing mapping information and, based on the preset routing mapping information, detects the first bridge connection port corresponding to the second pending message, wherein the second pending message is a message flowing from the target physical server to an external physical server; The second message to be processed is forwarded from the integrated bridge to the first bridge connection port, and then sent to the external physical server through the network interface device corresponding to the first bridge connection port.

3. The method according to claim 1, characterized in that, When the network interface device in the target physical server obtains a first packet to be processed, before detecting the target network segment information corresponding to each of the first packets to be processed, the method further includes: When the network interface card bound to the network interface device in the target physical server obtains the first message to be processed, the data platform development kit is used to send the first message to be processed to the network interface device corresponding to the network interface card.

4. The method according to claim 2, characterized in that, The method further includes: When the network interface device in the target physical server obtains the first message to be processed, the first message type tag in the first message to be processed is deleted. When the network interface device in the target physical server obtains a second message to be processed, it detects the target message type of the second message to be processed and adds a second message type tag corresponding to the target message type to the first message to be processed.

5. A message processing apparatus, characterized in that, The device includes: The conversion module is used to acquire network function information of multiple hardware devices and generate virtual function network elements corresponding to each of the network function information. The deployment module is used to deploy multiple virtual function network elements in the target physical server and connect the multiple virtual function network elements to the integrated bridge in the target physical server respectively. The classification processing module is used to, when the network interface device in the target physical server obtains a first message to be processed, acquire message type information for each of the first messages to be processed; if the message type information includes a first message type, send the first messages to be processed to the target virtual function network element through the integrated bridge; wherein, the first messages to be processed corresponding to the first message type include data messages with a priority higher than a preset priority threshold; if the message type information includes a second message type, for each first message to be processed, send the first message to the virtual bridge corresponding to the message type information, and then send the message to the target virtual function network element through the virtual bridge. The second bridge connection port sends the first message to be processed from the virtual bridge to the integrated bridge; wherein, the first message to be processed corresponding to the second message type includes data messages with a priority lower than or equal to a preset priority threshold; if the second message type includes a data intranet message type, then the virtual extended LAN encapsulation of the first message to be processed is decapsulated, and the decapsulated first message to be processed is sent to the virtual bridge corresponding to the data intranet message type; if the second message type includes a data extranet message type, then the LAN encapsulation of the first message to be processed is decapsulated, and the decapsulated first message to be processed is sent to the virtual bridge corresponding to the data extranet message type; The detection module is used to detect the target network segment information corresponding to each of the first packets to be processed, and to filter the target virtual function network elements corresponding to each of the multiple virtual function network elements from the target network segment information. The first packets to be processed include packets flowing from an external physical server into the target physical server. The sending module is used to send each of the first messages to be processed to the target virtual function network element corresponding to the first message to be processed through the integrated bridge.

6. The apparatus according to claim 5, characterized in that, The device further includes: an outgoing module, configured to, upon receiving a second pending message from a virtual function network element via the integrated bridge, obtain preset routing mapping information, and based on the preset routing mapping information, detect a first bridge connection port corresponding to the second pending message, wherein the second pending message is a message flowing from the target physical server to an external physical server; forward the second pending message from the integrated bridge to the first bridge connection port, and send the second pending message to the external physical server through the network interface device corresponding to the first bridge connection port.

7. The apparatus according to claim 5, characterized in that, The device further includes a network interface card (NIC) receiving module, which, when the NIC bound to the network interface device in the target physical server obtains the first message to be processed, uses a data platform development kit to send the first message to be processed to the network interface device corresponding to the NIC.

8. A computer device comprising a memory and a processor, wherein the memory stores a computer program, characterized in that, When the processor executes the computer program, it implements the steps of the method according to any one of claims 1 to 4.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by a processor, it implements the steps of the method according to any one of claims 1 to 4.

10. A computer program product, comprising a computer program, characterized in that, When the computer program is executed by a processor, it implements the steps of the method according to any one of claims 1 to 4.

Images