Container sinking method and device based on DPU, storage medium and program product

Abstract

The invention provides a container sinking method and device based on a DPU, a storage medium and a program product, and relates to the technical field of computers.The method comprises the steps that under the condition that a first containerization platform receives a container operation request, calling information is generated based on target container information carried in the container operation request, and a first container network interface plug-in is called; under the condition that the calling information carries a preset sinking identifier, generating a hypertext transfer protocol request based on the target container information through the first container network interface plug-in, and sending the hypertext transfer protocol request to a second container module; receiving the hypertext transfer protocol request through a second container network interface plug-in in a second container module, and extracting target container information; executing an operation corresponding to the container operation request based on the target container information through the second containerization platform; the problem that the execution efficiency and the execution speed of a service application are low due to the fact that all containers run on a CPU of a server node can be solved.

Description

Technical Field

[0001] The present invention relates to the field of computer technology, and in particular to a DPU-based container sinking method, device, storage medium and program product. Background Art

[0002] With the rapid development of cloud computing and containerization technologies, and the continuous increase in data center network load, application scale, and number of users, network performance and efficiency have become critical, and the requirements for network throughput and latency are becoming increasingly higher.

[0003] Currently, in traditional container clusters, all container groups (Pods) run on the central processing unit (CPU) of the server node. However, when this architecture is under high load and large-scale deployment, network and storage operations will occupy a large amount of CPU resources, resulting in high CPU load, which leads to low execution efficiency and execution speed of business applications during execution. Summary of the invention

[0004] In view of this, an embodiment of the present invention provides a DPU-based container sinking method, device, storage medium and program product to eliminate or improve one or more defects existing in the prior art.

[0005] One aspect of the present invention provides a DPU-based container sinking method, which is applied to a target terminal, wherein the target terminal includes a first container module and a second container module; the first container module includes a first containerization platform and a first container network interface plug-in; the second container module includes a DPU board component, a second containerization platform and a second container network interface plug-in; the DPU board component serves as a hardware accelerator to provide performance optimization for the second containerization platform and the second container network interface plug-in; the method includes the following steps:

[0006] When the first containerization platform receives the container operation request, based on the target container information carried in the container operation request, generates call information and sends it to the first container network interface plug-in to call the first container network interface plug-in;

[0007] In the case where the preset sinking identifier is carried in the call information, a hypertext transfer protocol request is generated based on the target container information through the first container network interface plug-in, and the hypertext transfer protocol request is sent to the second container module;

[0008] Receiving a hypertext transfer protocol request through a second container network interface plug-in in the second container module, and extracting target container information;

[0009] The second containerization platform executes an operation corresponding to the container operation request based on the target container information.

[0010] In some embodiments of the present invention, a container operation request includes a container creation request or a container deletion request; in the case where the container operation request is a container creation request; the target container information includes a container name, container image information and container configuration information of the target container; the container configuration information includes container mount point information and container network interface information; based on the container operation information, an operation corresponding to the container operation request is performed, including: creating a target container using the container name through a second containerization platform; determining an image file corresponding to the target container based on the container image information; defining an operating environment and behavior of the target container based on the container configuration information; adding a target route corresponding to the target container in the second container module kernel through the second containerization platform, recording the target route in a routing table corresponding to the second container module, and performing a service discovery operation on the target container so that external data packets access the target container based on the target route.

[0011] In some embodiments of the present invention, the method also includes: when the second container module receives an external data packet, matching the external data packet with a routing table corresponding to the second container module; when the external data packet hits a container in the routing table corresponding to the second container module, sending the external data packet to the container accessed by the external data packet through the second containerization platform.

[0012] In some embodiments of the present invention, when the external data packet does not hit the container in the routing table corresponding to the second container module, the method also includes: sending the external data packet to the first container module through the second container module; when the first container module receives the external data packet, matching the external data packet with the routing table corresponding to the first container module, and when hitting the container in the routing table corresponding to the first container module, sending the external data packet to the container accessed by the external data packet through the first containerization platform.

[0013] In some embodiments of the present invention, when the call information does not carry a preset sinking identifier, the method further includes: executing an operation corresponding to the container operation request based on the target container information through the first containerization platform.

[0014] In some embodiments of the present invention, before receiving a hypertext transfer protocol request through the second container network interface plug-in in the second container module, the method further includes: creating a hypertext transfer protocol service through the second container network interface plug-in.

[0015] In some embodiments of the present invention, after executing the operation corresponding to the container operation request based on the target container information through the second containerization platform, the method also includes: generating a hypertext transfer protocol receipt based on the container information of the target container through the second container module, and returning it to the first container module.

[0016] Another aspect of the present invention provides a DPU-based container sinking device, including a DPU or a network card, and the DPU or the network card is used to implement the steps of the above-mentioned DPU-based container sinking method.

[0017] Another aspect of the present invention provides a computer-readable storage medium having a computer program / instruction stored thereon, which, when executed by a processor, implements the steps of the above-mentioned DPU-based container sinking method.

[0018] Another aspect of the present invention provides a computer program product, comprising a computer program / instruction, which, when executed by a processor, implements the steps of the above-mentioned DPU-based container sinking method.

[0019] The DPU-based container sinking method, device, storage medium and program product of the present invention can solve the problem that all containers are running on the CPU of the server node, resulting in low execution efficiency and execution speed of business applications; through the first container network interface plug-in installed in the first container module and the second container network interface plug-in installed in the second container module, the first containerization platform in the first container module can sink the data flow and container operation to the second container module, which is processed by the DPU board component and the second containerization platform, which can reduce the CPU load, thereby improving the execution efficiency and execution speed of business applications; at the same time, by utilizing the hardware acceleration capability of the DPU board component, the network and storage performance of the container can be optimized, thereby further improving the execution efficiency and execution speed of business applications.

[0020] In addition, by receiving external data packets through the second container module and using the DPU board component hardware to accelerate the processing of network data streams, when the external data packets hit the routing table corresponding to the second container module, the second containerized platform processes the external data packets and optimizes the processing path of the external data packets, which can further reduce the CPU load, significantly improve network performance, reduce network latency, and further improve the execution efficiency and speed of business applications.

[0021] In addition, through the first container network interface plug-in in the first container module and the second container network interface plug-in in the second container module, the container can be flexibly migrated and distributed between the first container module and the second container module, which can improve the scalability and flexibility of the system.

[0022] Additional advantages, purposes, and features of the present invention will be described in part in the following description, and will become apparent to those skilled in the art after studying the following, or may be learned from the practice of the present invention. The purposes and other advantages of the present invention may be achieved and obtained by the structures specifically indicated in the specification and the accompanying drawings.

[0023] Those skilled in the art will appreciate that the objectives and advantages that can be achieved with the present invention are not limited to the above specific description, and the above and other objectives that can be achieved by the present invention will be more clearly understood from the following detailed description. BRIEF DESCRIPTION OF THE DRAWINGS

[0024] The drawings described herein are used to provide a further understanding of the present invention, constitute a part of the present application, and do not constitute a limitation of the present invention. In the drawings:

[0025] Figure 1 A schematic structural diagram of a first container module and a second container module in a target device provided by an embodiment of the present invention.

[0026] Figure 2 A flow chart of a DPU-based container sinking method provided in one embodiment of the present invention.

[0027] Figure 3 A schematic structural diagram of a first container module and a second container module in a target device provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0028] In order to make the purpose, technical solution and advantages of the present invention more clearly understood, the present invention is further described in detail below in conjunction with the embodiments and the accompanying drawings. Here, the illustrative embodiments of the present invention and their descriptions are used to explain the present invention, but are not intended to limit the present invention.

[0029] It should also be noted that, in order to avoid obscuring the present invention due to unnecessary details, only structures and / or processing steps closely related to the solutions according to the present invention are shown in the accompanying drawings, while other details that are not closely related to the present invention are omitted.

[0030] It should be emphasized that the term “include / comprises” when used herein refers to the existence of features, elements, steps or plug-ins, but does not exclude the existence or addition of one or more other features, elements, steps or plug-ins.

[0031] It should also be noted that, unless otherwise specified, the term “connection” herein may refer not only to a direct connection but also to an indirect connection involving an intermediate.

[0032] Hereinafter, embodiments of the present invention will be described with reference to the accompanying drawings. In the accompanying drawings, the same reference numerals represent the same or similar components, or the same or similar steps.

[0033] The present invention provides a container sinking method based on DPU, which is applied to a target terminal. The target terminal refers to a comprehensive computing platform or device in a container environment. The target terminal can be a computer (including desktops and laptops), a server cluster or a cloud platform, or a hyper-converged infrastructure (HCI). This embodiment does not limit the device type of the target terminal.

[0034] In some embodiments of the present invention, the target terminal includes a first container module and a second container module; the first container module includes a first containerization platform and a first container network interface (Container Network Interface, CNI) plug-in; the second container module includes a DPU board component, a second containerization platform and a second container network interface (Container Network Interface, CNI) plug-in; the DPU board component acts as a hardware accelerator to provide performance optimization for the second containerization platform and the second container network interface plug-in.

[0035] Among them, Figure 1 As shown, the first container module refers to one side of the host (HOST) in the target device; the second container module refers to one side of the data processing unit system-on-chip (DPU Soc) in the target device.

[0036] In the first container module, the first containerization platform refers to the environment in the first container module for managing and running containerized applications, including the Docker container platform or the container orchestration system (Kubernetes, K8s), which is responsible for managing and scheduling the life cycle of the container, including operations such as creation, destruction, and expansion; the first container network interface plug-in refers to the component that operates the container network in the cluster of the first containerization platform.

[0037] In the second container module, the DPU board component refers to the hardware board that integrates the data processing unit; the second containerization platform refers to the environment in the second container module for managing and running containerized applications, including the Docker container platform or the container orchestration system (Kubernetes, K8s), which is responsible for managing and scheduling the life cycle of the container, including creation, destruction, expansion and other operations; the second container network interface plug-in refers to the component that operates the container network in the cluster of the second containerization platform.

[0038] Figure 2 FIG. 1 is a flow chart of a method for sinking a container based on a DPU according to an embodiment of the present invention. Figure 2As shown, the container sinking method based on DPU at least includes the following steps S201 to S204:

[0039] S201, when the first containerization platform receives a container operation request, based on the target container information carried in the container operation request, generates call information and sends it to the first container network interface plug-in to call the first container network interface plug-in.

[0040] In some embodiments of the present invention, the first container module (HOST side) in the target device receives a container operation request through the first containerization platform. The container operation request includes a container creation request or a container deletion request. The container operation request carries target container information corresponding to the target container to be operated, including the container name of the target container, container image information or container configuration information, etc.

[0041] For example: when the operation request is a container creation request, the target container information includes the container name of the target container, container image information or container configuration information, etc., wherein the container configuration information includes container mount point information and container network interface information, or also includes resource limitation information (such as CPU, memory requirements, etc.); when the container operation request is a container deletion request, the target container information includes the container name and container configuration information of the target container.

[0042] In some embodiments of the present invention, the container operation request may be generated by a user inputting target container information into a target device through an input device (including a keyboard, a mouse, or a touch screen, etc.) connected to the target device, or may be generated by a user using a designated device and then remotely sent to the target device.

[0043] The designated device includes a mobile phone, a tablet computer, or other devices that have established a communication connection with the target device. This embodiment does not limit the implementation and sending of the container operation request.

[0044] In some embodiments of the present invention, after a first containerization platform (e.g., Kubernetes) receives a container operation request, the first container network interface plug-in is called, and the target container information carried in the container operation request is passed to the first container network interface plug-in as call information.

[0045] When there is a preset sinking identifier in the calling information received by the first container network interface plug-in, the first container network interface plug-in sends the target container information to the second container module for processing; when the received calling information does not carry the preset sinking identifier, the first containerization platform in the first container module processes the container operation request.

[0046] Among them, the preset sinking identifier is a pre-set identifier, including characters, letters, numbers, or a combination of characters, letters and numbers. This embodiment does not limit the implementation method of the preset sinking identifier.

[0047] S202, when the call information carries a preset sinking identifier, a Hypertext Transfer Protocol (HTTP) request is generated based on the target container information through the first container network interface plug-in, and the Hypertext Transfer Protocol request is sent to the second container module.

[0048] In some embodiments of the present invention, the container operation request includes a container deletion request or a container creation request. Based on this, in the process of generating a hypertext transfer protocol request, it is necessary to first determine the request method (TTTP Method) according to the type of the container operation request. For example, when the container operation request is a container creation request, the request method is a POST method or a PUT method; when the container operation request is a container deletion request, the request method is a DELETE method. Afterwards, a request URL is generated based on the container name (or container unique identifier) ​​of the target container in the target container information and the API endpoint corresponding to the second container module. For example, creating a target container can be POST / api / containers / {container-id}; deleting a target container can be DELETE / api / containers / {container-id}, where {container-id} is the container name or container identifier of the target container. Then, according to the specific container operation request and the requirements of the second container module, a specific request header (HTTP Headers) is set, for example, Content-Type is set to indicate the data type of the request body, and the Authorization header is set for identity authentication. Finally, a request body (HTTP Body) is provided, that is, data needs to be submitted to create or delete a target container in the target container information, which can be in JSON data format or other data formats.

[0049] Specifically, a hypertext transfer protocol request is generated based on the target container information, including: determining a request method based on the type of the container operation request; generating a request URL based on the container name of the target container in the target container information and the API endpoint corresponding to the second container module; determining a request header according to the specific container operation request and the requirements of the second container module; and generating a request body based on data required to be submitted for creating a target container or deleting a target container in the target container information.

[0050] In some embodiments of the present invention, when the call information does not carry a preset sinking identifier, it also includes: executing an operation corresponding to the container operation request based on the target container information through the first containerization platform.

[0051] The first containerization platform includes but is not limited to a Docker container platform or a container orchestration system (Kubernetes, K8s), etc. The container operation request includes a container creation request or a container deletion request.

[0052] refer to Figure 3 , taking the first containerization platform as a container orchestration system as an example, when the container operation request is a container creation request, the container orchestration system creates a target container in the first container module according to the container name, container image information, and container configuration information corresponding to the target container in the target container information. For example, if the target container created by the container creation request is container group D, the container orchestration system will create container group D in the first container module according to the container image information and container configuration information. The container configuration information includes container mount point information and container network interface information.

[0053] Specifically, the first containerization platform executes operations corresponding to the container operation request based on the target container information, including: creating a target container using the container name through the first containerization platform; determining the image file corresponding to the target container based on the container image information; defining the operating environment and behavior of the target container based on the container configuration information; adding a target route corresponding to the target container in the kernel of the first container module through the first containerization platform, recording the target route in the routing table corresponding to the first container module, and performing a service discovery operation on the target container, so that external data packets can access the target container based on the target route.

[0054] When the container operation request is a container deletion request, the target container is deleted in the first container module through the container orchestration system according to the container name or container configuration information corresponding to the target container in the target container information; for example, if the target container to be deleted by the container deletion request is container group E (Pod E), the container orchestration system will delete the container group E in the first container module according to the container name Pod E and the container configuration information.

[0055] S203: Receive a hypertext transfer protocol request through a second container network interface plug-in in the second container module, and extract target container information.

[0056] The second container module needs to receive a hypertext transfer protocol request through a hypertext transfer protocol service (HTTP server). Based on this, the second container module needs to create a hypertext transfer protocol service before receiving the hypertext transfer protocol request. The hypertext transfer protocol service can be implemented by hypertext transfer protocol service software, such as Apache HTTP Server, Nginx or Microsoft IIS, or by using various programming languages ​​and frameworks to implement a custom hypertext transfer protocol service, such as Flask or Django in Python, Spring framework in Java, etc.

[0057] Specifically, before receiving the hypertext transfer protocol request through the second container network interface plug-in in the second container module, the method further includes: creating a hypertext transfer protocol service through the second container network interface plug-in.

[0058] S204: Execute an operation corresponding to the container operation request based on the target container information through the second containerization platform.

[0059] The first containerization platform includes but is not limited to a Docker container platform or a container orchestration system (Kubernetes, K8s), etc. The container operation request includes a container creation request or a container deletion request.

[0060] In the case where the container operation request is a container creation request; the target container information includes the container name, container image information and container configuration information of the target container; the container configuration information includes container mount point information and container network interface information.

[0061] refer to Figure 3 Taking the second containerization platform as the Docker container platform as an example, when the container operation request is a container creation request, the Docker container platform creates a target container in the second container module according to the container name, container image information, container configuration information and other information corresponding to the target container in the target container information. For example, the target container created by the container creation request is container group A, and the container orchestration system creates container group A in the second container module according to the container image information, container configuration information and other information.

[0062] Specifically, based on the container operation information, an operation corresponding to the container operation request is executed, including: creating a target container using the container name through the second containerization platform; determining the image file corresponding to the target container based on the container image information; defining the operating environment and behavior of the target container based on the container configuration information; adding a target route corresponding to the target container in the kernel of the second container module through the second containerization platform, recording the target route in the routing table corresponding to the second container module, and performing a service discovery operation on the target container so that external data packets can access the target container based on the target route.

[0063] When the container operation request is a container deletion request, the target container is deleted in the second container module through the Docker container platform according to the container name or container configuration information corresponding to the target container in the target container information; for example, if the target container to be deleted by the container deletion request is container group B (Pod B), the container orchestration system will delete container group B in the second container module according to the container name Pod A and the container configuration information.

[0064] In some embodiments of the present invention, after the container is created, a service discovery operation is performed on the container so that external data can access the container. When the second container module receives the external data, the external data is matched with the routing table, and the external data is sent to the hit container if a match is found.

[0065] Specifically, when the second container module receives an external data packet, the external data packet is matched with the routing table corresponding to the second container module; when the external data packet hits the container in the routing table corresponding to the second container module, the external data packet is sent to the container accessed by the external data packet through the second containerization platform.

[0066] In the case where the external data packet does not hit the container in the routing table corresponding to the second container module, it also includes: sending the external data packet to the first container module through the second container module; when the first container module receives the external data packet, matching the external data packet with the routing table corresponding to the first container module, and in the case of hitting the container in the routing table corresponding to the first container module, sending the external data packet to the container accessed by the external data packet through the first containerization platform.

[0067] For example: Reference Figure 3, taking the second containerization platform as the Docker container platform as an example; when an external data packet accesses the business container, the external data packet enters the second container module (DPU Soc side) from the physical network card P0, and the external data packet will match the routing table of the second container module. If it hits the business container, it will enter the business container through the Docker bridge network (bridge); if it does not hit the route, it will take the default route from the network card eth2 of the second container module to the network card eth1 of the first container module (Host side) and then judge the network rules of the cluster in the first container module.

[0068] In addition, in the second container module, when the second container network interface plug-in operates the second containerization platform to complete the creation of the target container, a hypertext transfer protocol request with a response code of 200 is generated as a receipt, and the interface information corresponding to the target container is carried in the request body, such as the interface name, IP address, mac address, DNS, etc.

[0069] Specifically, after executing the operation corresponding to the container operation request based on the target container information through the second containerization platform, the method also includes: generating a hypertext transfer protocol receipt based on the container information of the target container through the second container module, and returning it to the first container module.

[0070] In summary, the DPU-based container sinking method provided by the present invention is applied to a target terminal, and the target terminal includes a first container module and a second container module; the first container module includes a first containerization platform and a first container network interface plug-in; the second container module includes a DPU board component, a second containerization platform, and a second container network interface plug-in; the DPU board component serves as a hardware accelerator to provide performance optimization for the second containerization platform and the second container network interface plug-in; when the first containerization platform receives a container operation request, based on the target container information carried in the container operation request, a call information is generated and sent to the first container network interface plug-in to call the first container network interface plug-in; when the call information carries a preset sinking identifier, a hypertext transfer protocol request is generated based on the target container information through the first container network interface plug-in, and the hypertext transfer protocol request is sent to the second container module; through the The second container network interface plug-in in the second container module receives the Hypertext Transfer Protocol request and extracts the target container information; the second containerization platform executes the operation corresponding to the container operation request based on the target container information; it can solve the problem that all containers are running on the CPU of the server node, resulting in low execution efficiency and execution speed of business applications; through the first container network interface plug-in installed in the first container module and the second container network interface plug-in installed in the second container module, the first containerization platform in the first container module can sink the data flow and container operation to the second container module, which is processed by the DPU board component and the second containerization platform, which can reduce the CPU load, thereby improving the execution efficiency and execution speed of business applications; at the same time, by utilizing the hardware acceleration capability of the DPU board component, the network and storage performance of the container can be optimized, thereby further improving the execution efficiency and execution speed of business applications.

[0071] In addition, by receiving external data packets through the second container module and using the DPU board component hardware to accelerate the processing of network data streams, when the external data packets hit the routing table corresponding to the second container module, the second containerized platform processes the external data packets and optimizes the processing path of the external data packets, which can further reduce the CPU load, significantly improve network performance, reduce network latency, and further improve the execution efficiency and speed of business applications.

[0072] In addition, through the first container network interface plug-in in the first container module and the second container network interface plug-in in the second container module, the container can be flexibly migrated and distributed between the first container module and the second container module, which can improve the scalability and flexibility of the system.

[0073] Corresponding to the above method, an embodiment of the present invention also provides a DPU-based container sinking device, including a DPU or a network card, and the DPU or the network card is used to implement the steps of the DPU-based container sinking method provided in the above method embodiment.

[0074] The embodiment of the present invention also provides a computer-readable storage medium on which a computer program is stored, and when the computer program is executed by a processor, the steps of the DPU-based container sinking method provided in the method embodiment are implemented. The computer-readable storage medium can be a tangible storage medium, such as a random access memory (RAM), a memory, a read-only memory (ROM), an electrically programmable ROM, an electrically erasable programmable ROM, a register, a floppy disk, a hard disk, a removable storage disk, a CD-ROM, or any other form of storage medium known in the technical field.

[0075] An embodiment of the present invention also provides a computer program product, including a computer program / instruction, which, when executed by a processor, implements the steps of the DPU-based container sinking method provided in the method embodiment of the present application.

[0076] It should be understood by those skilled in the art that the exemplary components, systems and methods described in conjunction with the embodiments disclosed herein can be implemented in hardware, software or a combination of the two. Whether it is implemented in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of the present invention.

[0077] It should be clear that the present invention is not limited to the specific configuration and processing described above and shown in the figures. For the sake of simplicity, a detailed description of the known method is omitted here. In the above embodiments, several specific steps are described and shown as examples. However, the method process of the present invention is not limited to the specific steps described and shown, and those skilled in the art can make various changes, modifications and additions, or change the order between the steps after understanding the spirit of the present invention.

[0078] In the present invention, features described and / or illustrated for one embodiment may be used in the same or similar manner in one or more other embodiments, and / or combined with features of other embodiments or replace features of other embodiments.

[0079] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. For those skilled in the art, the embodiments of the present invention may have various modifications and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. A container sinking method based on DPU, characterized in that: Applied in a target terminal, the target terminal includes a first container module and a second container module; the first container module includes a first containerization platform and a first container network interface plug-in; the second container module includes a DPU board component, a second containerization platform and a second container network interface plug-in; the DPU board component serves as a hardware accelerator to provide performance optimization for the second containerization platform and the second container network interface plug-in; When the first containerization platform receives a container operation request, based on the target container information carried in the container operation request, generates call information and sends the information to the first container network interface plug-in to call the first container network interface plug-in; In a case where the call information carries a preset sinking identifier, a hypertext transfer protocol request is generated based on the target container information through the first container network interface plug-in, and the hypertext transfer protocol request is sent to the second container module; Receiving the hypertext transfer protocol request through the second container network interface plug-in in the second container module, and extracting the target container information; The operation corresponding to the container operation request is performed by the second containerization platform based on the target container information.

2. The method according to claim 1, characterized in that The container operation request includes a container creation request or a container deletion request; in the case where the container operation request is the container creation request; the target container information includes a container name, container image information and container configuration information of the target container; the container configuration information includes container mount point information and container network interface information; The performing the operation corresponding to the container operation request based on the container operation information includes: Using the second containerization platform, create the target container using the container name; determine the image file corresponding to the target container based on the container image information; and define the operating environment and behavior of the target container based on the container configuration information; Through the second containerization platform, a target route corresponding to the target container is added in the kernel of the second container module, the target route is recorded in a routing table corresponding to the second container module, and a service discovery operation is performed on the target container, so that external data packets access the target container based on the target route.

3. The method according to claim 2, characterized in that The method further comprises: When the second container module receives the external data packet, matching the external data packet with a routing table corresponding to the second container module; In the case where the external data packet hits a container in the routing table corresponding to the second container module, the external data packet is sent to the container accessed by the external data packet through the second containerization platform.

4. The method according to claim 3, characterized in that In the case where the external data packet does not hit the container in the routing table corresponding to the second container module, the method further includes: sending the external data packet to the first container module through the second container module; When the first container module receives the external data packet, the external data packet is matched with the routing table corresponding to the first container module. When a container in the routing table corresponding to the first container module is hit, the external data packet is sent to the container accessed by the external data packet through the first containerization platform.

5. The method according to claim 1, characterized in that: In a case where the preset sinking identifier is not carried in the calling information, the method further includes: executing, through the first containerization platform, an operation corresponding to the container operation request based on the target container information.

6. The method according to claim 1, characterized in that Before receiving the hypertext transfer protocol request through the second container network interface plug-in in the second container module, the method further includes: creating a hypertext transfer protocol service through the second container network interface plug-in.

7. The method according to claim 1, characterized in that After the second containerization platform executes the operation corresponding to the container operation request based on the target container information, the method further includes: generating a hypertext transfer protocol receipt based on the container information of the target container through the second container module, and returning it to the first container module.

8. A container sinking device based on DPU, comprising DPU or network card, characterized in that: The DPU or network card is used to implement the steps of the method as described in any one of claims 1 to 7.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, the steps of the method according to any one of claims 1 to 7 are implemented.

10. A computer program product comprising a computer program / instructions, characterized in that When the computer program / instructions are executed by a processor, the steps of the method according to any one of claims 1 to 7 are implemented.

Images