Dpu-based container sinking method and device, storage medium and program product

Abstract

The application provides a DPU-based container sinking method and device, a storage medium and a program product, and relates to the technical field of computers.The method comprises the following steps: in the case that a container operation request is received by a first containerization platform, based on target container information carried in the container operation request, calling information is generated to call a first container network interface plug-in; in the case that a preset sinking identifier is carried in the calling information, based on the target container information, a hypertext transfer protocol request is generated through the first container network interface plug-in, and the hypertext transfer protocol request is sent to a second container module; the hypertext transfer protocol request is received through a second container network interface plug-in in the second container module, and target container information is extracted; based on the target container information, the second containerization platform executes an operation corresponding to the container operation request; and the problem that the execution efficiency and speed of a business application are low because containers all run on a CPU of a server node can be solved.

Description

Technical Field

[0001] The present invention relates to the field of computer technology, and in particular to a DPU-based container sinking method, device, storage medium, and program product. Background Art

[0002] With the rapid development of cloud computing and containerization technologies, and the continuous increase in data center network load, application scale, and number of users, network performance and efficiency have become critical, and the requirements for network throughput and latency are becoming increasingly higher.

[0003] Currently, in traditional container clusters, all container groups (pods) run on the central processing unit (CPU) of server nodes. However, under high load and large-scale deployment, this architecture consumes a large amount of CPU resources due to network and storage operations, resulting in high CPU load and low execution efficiency and speed of business applications. Summary of the Invention

[0004] In view of this, embodiments of the present invention provide a DPU-based container sinking method, device, storage medium, and program product to eliminate or improve one or more defects in the prior art.

[0005] One aspect of the present invention provides a DPU-based container sinking method, which is applied to a target terminal. The target terminal includes a first container module and a second container module. The first container module includes a first containerization platform and a first container network interface plug-in. The second container module includes a DPU board assembly, a second containerization platform, and a second container network interface plug-in. The DPU board assembly serves as a hardware accelerator to provide performance optimization for the second containerization platform and the second container network interface plug-in. The method includes the following steps:

[0006] When the first containerization platform receives the container operation request, based on the target container information carried in the container operation request, generates a call message and sends the call message to the first container network interface plug-in to call the first container network interface plug-in;

[0007] When the call information carries a preset sinking identifier, a hypertext transfer protocol request is generated based on the target container information through the first container network interface plug-in, and the hypertext transfer protocol request is sent to the second container module;

[0008] Receiving a hypertext transfer protocol request through a second container network interface plug-in in the second container module, and extracting target container information;

[0009] The second containerization platform executes an operation corresponding to the container operation request based on the target container information.

[0010] In some embodiments of the present invention, a container operation request includes a container creation request or a container deletion request; in the case where the container operation request is a container creation request; the target container information includes the container name, container image information and container configuration information of the target container; the container configuration information includes the container mount point information and the container network interface information; based on the container operation information, an operation corresponding to the container operation request is executed, including: creating a target container using the container name through a second containerization platform; determining the image file corresponding to the target container based on the container image information; defining the operating environment and behavior of the target container based on the container configuration information; adding a target route corresponding to the target container in the kernel of the second container module through the second containerization platform, recording the target route in the routing table corresponding to the second container module, and performing a service discovery operation on the target container so that external data packets can access the target container based on the target route.

[0011] In some embodiments of the present invention, the method further includes: when the second container module receives an external data packet, matching the external data packet with the routing table corresponding to the second container module; when the external data packet hits the container in the routing table corresponding to the second container module, sending the external data packet to the container accessed by the external data packet through the second containerization platform.

[0012] In some embodiments of the present invention, when the external data packet does not hit the container in the routing table corresponding to the second container module, the method further includes: sending the external data packet to the first container module through the second container module; when the first container module receives the external data packet, matching the external data packet with the routing table corresponding to the first container module, and when hitting the container in the routing table corresponding to the first container module, sending the external data packet to the container accessed by the external data packet through the first containerization platform.

[0013] In some embodiments of the present invention, when the call information does not carry a preset sinking identifier, the method further includes: executing, through the first containerization platform, an operation corresponding to the container operation request based on the target container information.

[0014] In some embodiments of the present invention, before receiving a hypertext transfer protocol request through the second container network interface plug-in in the second container module, the method further includes: creating a hypertext transfer protocol service through the second container network interface plug-in.

[0015] In some embodiments of the present invention, after executing the operation corresponding to the container operation request based on the target container information by the second containerization platform, the method further includes: generating a hypertext transfer protocol receipt based on the container information of the target container by the second container module, and returning it to the first container module.

[0016] Another aspect of the present invention provides a DPU-based container sinking device, including a DPU or a network card, and the DPU or the network card is used to implement the steps of the above-mentioned DPU-based container sinking method.

[0017] Another aspect of the present invention provides a computer-readable storage medium having a computer program / instruction stored thereon, which, when executed by a processor, implements the steps of the above-mentioned DPU-based container sinking method.

[0018] Another aspect of the present invention provides a computer program product, comprising a computer program / instruction, which, when executed by a processor, implements the steps of the above-mentioned DPU-based container sinking method.

[0019] The DPU-based container sinking method, device, storage medium and program product of the present invention can solve the problem that all containers run on the CPU of the server node, resulting in low execution efficiency and execution speed of business applications; through the first container network interface plug-in installed in the first container module and the second container network interface plug-in installed in the second container module, the first containerization platform in the first container module can sink the data flow and container operation to the second container module, which is processed by the DPU board assembly and the second containerization platform, which can reduce the CPU load and thus improve the execution efficiency and execution speed of business applications; at the same time, by utilizing the hardware acceleration capability of the DPU board assembly, the network and storage performance of the container can be optimized, thereby further improving the execution efficiency and execution speed of business applications.

[0020] In addition, external data packets are received through the second container module, and the DPU board component hardware is used to accelerate the processing of network data streams. When the external data packet hits the routing table corresponding to the second container module, the second containerization platform processes the external data packet and optimizes the processing path of the external data packet, which can further reduce the CPU load, significantly improve network performance, reduce network latency, and further improve the execution efficiency and speed of business applications.

[0021] In addition, through the first container network interface plug-in in the first container module and the second container network interface plug-in in the second container module, the container can be flexibly migrated and distributed between the first container module and the second container module, which can improve the scalability and flexibility of the system.

[0022] Additional advantages, objects, and features of the present invention will be set forth in part in the following description and will become apparent to those skilled in the art upon examination of the following or may be learned from practice of the present invention. The objects and other advantages of the present invention may be realized and obtained by the structures particularly pointed out in the description and drawings.

[0023] Those skilled in the art will understand that the purposes and advantages that can be achieved by the present invention are not limited to the above specific descriptions, and the above and other purposes that can be achieved by the present invention will be more clearly understood based on the following detailed description. BRIEF DESCRIPTION OF THE DRAWINGS

[0024] The drawings described herein are used to provide a further understanding of the present invention, constitute a part of this application, and do not constitute a limitation of the present invention. In the drawings:

[0025] Figure 1 This is a structural diagram of a first container module and a second container module in a target device provided by an embodiment of the present invention.

[0026] Figure 2 A flowchart of a DPU-based container sinking method provided in one embodiment of the present invention.

[0027] Figure 3 This is a structural diagram of a first container module and a second container module in a target device provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0028] In order to make the purpose, technical solutions and advantages of the present invention more clearly understood, the present invention is further described in detail below in conjunction with the embodiments and the accompanying drawings. Here, the exemplary embodiments of the present invention and their descriptions are used to explain the present invention, but are not intended to limit the present invention.

[0029] It should also be noted that, in order to avoid obscuring the present invention due to unnecessary details, the accompanying drawings only show structures and / or processing steps closely related to the solutions according to the present invention, while other details that are not closely related to the present invention are omitted.

[0030] It should be emphasized that the term "include / comprises" when used herein refers to the existence of features, elements, steps or plug-ins, but does not exclude the existence or addition of one or more other features, elements, steps or plug-ins.

[0031] It should also be noted that, unless otherwise specified, the term "connection" herein may refer not only to a direct connection but also to an indirect connection involving an intermediate.

[0032] Hereinafter, embodiments of the present invention will be described with reference to the accompanying drawings. In the accompanying drawings, the same reference numerals represent the same or similar components, or the same or similar steps.

[0033] The present invention provides a DPU-based container sinking method for application to a target terminal. The target terminal refers to a comprehensive computing platform or device in a container environment. The target terminal can be a computer (including desktops and laptops), a server cluster, a cloud platform, or a hyper-converged infrastructure (HCI). This embodiment does not limit the device type of the target terminal.

[0034] In some embodiments of the present invention, the target terminal includes a first container module and a second container module; the first container module includes a first containerization platform and a first container network interface (CNI) plug-in; the second container module includes a DPU board component, a second containerization platform and a second container network interface (CNI) plug-in; the DPU board component serves as a hardware accelerator to provide performance optimization for the second containerization platform and the second container network interface plug-in.

[0035] Among them, Figure 1 As shown, the first container module refers to a side of a host (HOST) in the target device; the second container module refers to a side of a data processing unit system-on-chip (DPU Soc) in the target device.

[0036] In the first container module, the first containerization platform refers to the environment in the first container module used to manage and run containerized applications, including the Docker container platform or the container orchestration system (Kubernetes, K8s), which is responsible for managing and scheduling the life cycle of containers, including operations such as creation, destruction, and expansion; the first container network interface plug-in refers to the component that operates the container network in the cluster of the first containerization platform.

[0037] In the second container module, the DPU board component refers to the hardware board that integrates the data processing unit; the second containerization platform refers to the environment in the second container module for managing and running containerized applications, including the Docker container platform or the container orchestration system (Kubernetes, K8s), which is responsible for managing and scheduling the life cycle of the container, including operations such as creation, destruction, and expansion; the second container network interface plug-in refers to the component that operates the container network in the cluster of the second containerization platform.

[0038] Figure 2 FIG. 1 is a flow chart of a container sinking method based on a DPU according to an embodiment of the present invention. Figure 2As shown, the container sinking method based on the DPU at least includes the following steps S201 to S204:

[0039] S201: When a first containerization platform receives a container operation request, based on target container information carried in the container operation request, generates call information and sends it to a first container network interface plug-in to call the first container network interface plug-in.

[0040] In some embodiments of the present invention, a first container module in a target device (on the host side) receives a container operation request through a first containerization platform. The container operation request includes a container creation request or a container deletion request. The container operation request carries target container information corresponding to the target container to be operated, including the target container's container name, container image information, or container configuration information.

[0041] For example, when the operation request is a container creation request, the target container information includes the container name, container image information, or container configuration information of the target container, wherein the container configuration information includes the container mount point information and the container network interface information, or resource limitation information (such as CPU and memory requirements). When the container operation request is a container deletion request, the target container information includes the container name and container configuration information of the target container.

[0042] In some embodiments of the present invention, the container operation request may be generated by a user inputting target container information into a target device through an input device connected to the target device (including a keyboard, mouse, or touch screen, etc.), or may be generated by a user using a designated device and then remotely sent to the target device.

[0043] The designated device includes a mobile phone, tablet computer, or other device that has established a communication connection with the target device. This embodiment does not limit the implementation and sending of the container operation request.

[0044] In some embodiments of the present invention, after a first containerization platform (e.g., Kubernetes) receives a container operation request, it calls a first container network interface plug-in, and passes the target container information carried in the container operation request as call information to the first container network interface plug-in.

[0045] If the call information received by the first container network interface plug-in contains a preset sinking identifier, the first container network interface plug-in sends the target container information to the second container module for processing; if the received call information does not carry the preset sinking identifier, the first containerization platform in the first container module processes the container operation request.

[0046] Among them, the preset sinking identifier is a pre-set identifier, including characters, letters, numbers, or a combination of characters, letters and numbers. This embodiment does not limit the implementation method of the preset sinking identifier.

[0047] S202: When the call information carries a preset sinking identifier, a Hypertext Transfer Protocol (HTTP) request is generated based on the target container information through the first container network interface plug-in, and the HTTP request is sent to the second container module.

[0048] In some embodiments of the present invention, a container operation request includes a container deletion request or a container creation request. Based on this, in the process of generating a Hypertext Transfer Protocol request, it is necessary to first determine the request method (TTTP Method) according to the type of container operation request. For example, if the container operation request is a container creation request, the request method is the POST method or the PUT method; if the container operation request is a container deletion request, the request method is the DELETE method. Subsequently, a request URL is generated based on the container name (or container unique identifier) ​​of the target container in the target container information and the API endpoint corresponding to the second container module. For example, creating a target container can be POST / api / containers / {container-id}; deleting a target container can be DELETE / api / containers / {container-id}, where {container-id} is the container name or container identifier of the target container. Then, according to the specific container operation request and the requirements of the second container module, specific request headers (HTTP Headers) are set, for example, setting the Content-Type to indicate the data type of the request body and setting the Authorization header for identity authentication. Finally, a request body (HTTP Body) is provided, that is, data needs to be submitted in the target container information to create or delete the target container, which can be in JSON data format or other data formats.

[0049] Specifically, a hypertext transfer protocol request is generated based on the target container information, including: determining a request method based on the type of the container operation request; generating a request URL based on the container name of the target container in the target container information and the API endpoint corresponding to the second container module; determining a request header according to the specific container operation request and the requirements of the second container module; and generating a request body based on data required to be submitted for creating or deleting the target container in the target container information.

[0050] In some embodiments of the present invention, when the call information does not carry a preset sinking identifier, the method further includes: executing an operation corresponding to the container operation request based on the target container information through the first containerization platform.

[0051] The first containerization platform includes but is not limited to a Docker container platform or a container orchestration system (Kubernetes, K8s), etc. The container operation request includes a container creation request or a container deletion request.

[0052] refer to Figure 3 Taking the first containerization platform as a container orchestration system as an example, when the container operation request is a container creation request, the container orchestration system creates a target container in the first container module according to the target container information, including the container name, container image information, and container configuration information corresponding to the target container. For example, if the target container created by the container creation request is container group D, the container orchestration system creates container group D in the first container module according to the container image information and container configuration information. The container configuration information includes container mount point information and container network interface information.

[0053] Specifically, the first containerization platform executes operations corresponding to the container operation request based on the target container information, including: creating a target container using the container name through the first containerization platform; determining the image file corresponding to the target container based on the container image information; defining the operating environment and behavior of the target container based on the container configuration information; adding a target route corresponding to the target container in the kernel of the first container module through the first containerization platform, recording the target route in the routing table corresponding to the first container module, and performing a service discovery operation on the target container so that external data packets can access the target container based on the target route.

[0054] When the container operation request is a container deletion request, the container orchestration system deletes the target container in the first container module according to the container name or container configuration information corresponding to the target container in the target container information. For example, if the target container to be deleted by the container deletion request is container group E (Pod E), the container orchestration system deletes container group E in the first container module according to the container name Pod E and container configuration information.

[0055] S203: Receive a hypertext transfer protocol request through the second container network interface plug-in in the second container module, and extract target container information.

[0056] The second container module needs to receive HTTP requests through a Hypertext Transfer Protocol (HTTP) server. Therefore, before receiving the HTTP requests, the second container module needs to first create an HTTP server. The HTTP server can be implemented using HTTP server software, such as Apache HTTP Server, Nginx, or Microsoft IIS, or by implementing a custom HTTP server using various programming languages ​​and frameworks, such as Flask or Django in Python or the Spring Framework in Java.

[0057] Specifically, before receiving the hypertext transfer protocol request through the second container network interface plug-in in the second container module, the method further includes: creating a hypertext transfer protocol service through the second container network interface plug-in.

[0058] S204: Execute an operation corresponding to the container operation request based on the target container information through the second containerization platform.

[0059] The first containerization platform includes but is not limited to a Docker container platform or a container orchestration system (Kubernetes, K8s), etc. The container operation request includes a container creation request or a container deletion request.

[0060] In the case where the container operation request is a container creation request; the target container information includes the container name, container image information and container configuration information of the target container; the container configuration information includes container mount point information and container network interface information.

[0061] refer to Figure 3 Taking the second containerization platform as the Docker container platform as an example, when the container operation request is a container creation request, the Docker container platform creates a target container in the second container module according to the container name, container image information, container configuration information and other information corresponding to the target container in the target container information. For example, if the target container created by the container creation request is container group A, the container orchestration system will create container group A in the second container module according to the container image information, container configuration information and other information.

[0062] Specifically, based on the container operation information, the operation corresponding to the container operation request is executed, including: creating a target container using the container name through the second containerization platform; determining the image file corresponding to the target container based on the container image information; defining the operating environment and behavior of the target container based on the container configuration information; adding the target route corresponding to the target container in the kernel of the second container module through the second containerization platform, recording the target route in the routing table corresponding to the second container module, and performing a service discovery operation on the target container so that external data packets can access the target container based on the target route.

[0063] When the container operation request is a container deletion request, the Docker container platform deletes the target container in the second container module according to the container name or container configuration information corresponding to the target container in the target container information. For example, if the target container to be deleted by the container deletion request is container group B (Pod B), the container orchestration system will delete container group B in the second container module according to the container name Pod A and container configuration information.

[0064] In some embodiments of the present invention, after the container is created, a service discovery operation is performed on the container to enable external data to access the container. When the second container module receives the external data, the external data is matched with the routing table and, if a match is found, the external data is sent to the matching container.

[0065] Specifically, when the second container module receives an external data packet, it matches the external data packet with the routing table corresponding to the second container module; when the external data packet hits the container in the routing table corresponding to the second container module, the external data packet is sent to the container accessed by the external data packet through the second containerization platform.

[0066] In the case where the external data packet does not hit the container in the routing table corresponding to the second container module, the method further includes: sending the external data packet to the first container module through the second container module; when the first container module receives the external data packet, matching the external data packet with the routing table corresponding to the first container module, and in the case where the container in the routing table corresponding to the first container module is hit, sending the external data packet to the container accessed by the external data packet through the first containerization platform.

[0067] For example: Reference Figure 3Taking the Docker container platform as the second containerization platform as an example; when an external data packet accesses the business container, the external data packet enters the second container module (DPU Soc side) through the physical network card P0. The external data packet will match the routing table of the second container module. If it hits the business container, it will enter the business container through the Docker bridge network (bridge); if it does not hit the route, it will take the default route from the network card eth2 of the second container module to the network card eth1 of the first container module (Host side) and then determine the cluster network rules in the first container module.

[0068] In addition, in the second container module, when the second container network interface plug-in operates the second containerization platform to complete the creation of the target container, a hypertext transfer protocol request with a response code of 200 is generated as a receipt, and the interface information corresponding to the target container, such as the interface name, IP address, MAC address, DNS, etc., is carried in the request body.

[0069] Specifically, after executing the operation corresponding to the container operation request based on the target container information through the second containerization platform, the method also includes: generating a hypertext transfer protocol receipt based on the container information of the target container through the second container module, and returning it to the first container module.

[0070] In summary, the DPU-based container sinking method provided by the present invention is applied to a target terminal, and the target terminal includes a first container module and a second container module; the first container module includes a first containerization platform and a first container network interface plug-in; the second container module includes a DPU board component, a second containerization platform and a second container network interface plug-in; the DPU board component serves as a hardware accelerator to provide performance optimization for the second containerization platform and the second container network interface plug-in; when the first containerization platform receives a container operation request, based on the target container information carried in the container operation request, a call information is generated and sent to the first container network interface plug-in to call the first container network interface plug-in; when the call information carries a preset sinking identifier, a hypertext transfer protocol request is generated based on the target container information through the first container network interface plug-in, and the hypertext transfer protocol request is sent to the second container module; through the The second container network interface plug-in in the second container module receives the Hypertext Transfer Protocol request and extracts the target container information; the second containerization platform executes the operation corresponding to the container operation request based on the target container information; it can solve the problem that all containers are running on the CPU of the server node, resulting in low execution efficiency and execution speed of business applications; through the first container network interface plug-in installed in the first container module and the second container network interface plug-in installed in the second container module, the first containerization platform in the first container module can sink the data flow and container operation to the second container module, which is processed by the DPU board component and the second containerization platform, which can reduce the CPU load and thus improve the execution efficiency and execution speed of business applications; at the same time, by utilizing the hardware acceleration capability of the DPU board component, the network and storage performance of the container can be optimized, thereby further improving the execution efficiency and execution speed of business applications.

[0071] In addition, external data packets are received through the second container module, and the DPU board component hardware is used to accelerate the processing of network data streams. When the external data packet hits the routing table corresponding to the second container module, the second containerization platform processes the external data packet and optimizes the processing path of the external data packet, which can further reduce the CPU load, significantly improve network performance, reduce network latency, and further improve the execution efficiency and speed of business applications.

[0072] In addition, through the first container network interface plug-in in the first container module and the second container network interface plug-in in the second container module, the container can be flexibly migrated and distributed between the first container module and the second container module, which can improve the scalability and flexibility of the system.

[0073] Corresponding to the above method, an embodiment of the present invention also provides a DPU-based container sinking device, including a DPU or a network card, and the DPU or the network card is used to implement the steps of the DPU-based container sinking method provided in the above method embodiment.

[0074] An embodiment of the present invention further provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the steps of the DPU-based container sinking method provided in the method embodiment. The computer-readable storage medium can be a tangible storage medium, such as a random access memory (RAM), a memory, a read-only memory (ROM), an electrically programmable ROM, an electrically erasable programmable ROM, a register, a floppy disk, a hard disk, a removable storage disk, a CD-ROM, or any other form of storage medium known in the art.

[0075] An embodiment of the present invention also provides a computer program product, including a computer program / instruction, which, when executed by a processor, implements the steps of the DPU-based container sinking method provided in the method embodiment of this application.

[0076] It should be understood by those skilled in the art that the exemplary components, systems, and methods described in conjunction with the embodiments disclosed herein can be implemented in hardware, software, or a combination of both. Whether hardware or software is used depends on the specific application and design constraints of the technical solution. Professionals and technicians may use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of the present invention.

[0077] It should be understood that the present invention is not limited to the specific configurations and processes described above and illustrated in the figures. For the sake of brevity, a detailed description of known methods is omitted. In the above embodiments, several specific steps are described and illustrated as examples. However, the method of the present invention is not limited to the specific steps described and illustrated. Those skilled in the art may make various changes, modifications, and additions, or change the order of the steps after understanding the spirit of the present invention.

[0078] In the present invention, features described and / or illustrated for one embodiment may be used in the same or similar manner in one or more other embodiments, and / or combined with or replace features of other embodiments.

[0079] The foregoing description is merely a preferred embodiment of the present invention and is not intended to limit the present invention. Those skilled in the art will readily appreciate that various modifications and variations of the present invention are possible. Any modifications, equivalent substitutions, or improvements made within the spirit and principles of the present invention are intended to be within the scope of protection of the present invention.

Claims

1. A container sinking method based on DPU, characterized in that: Applied to a target terminal, the target terminal includes a first container module and a second container module; the first container module includes a first containerization platform and a first container network interface plug-in; the second container module includes a DPU board component, a second containerization platform, and a second container network interface plug-in; the DPU board component serves as a hardware accelerator to provide performance optimization for the second containerization platform and the second container network interface plug-in; When the first containerization platform receives a container operation request, based on the target container information carried in the container operation request, generates a call message and sends the call message to the first container network interface plug-in to call the first container network interface plug-in; When the call information carries a preset sinking identifier, generating a hypertext transfer protocol request based on the target container information through the first container network interface plug-in, and sending the hypertext transfer protocol request to the second container module; receiving the hypertext transfer protocol request through a second container network interface plug-in in the second container module, and extracting the target container information; executing, by the second containerization platform, an operation corresponding to the container operation request based on the target container information; The container operation request includes a container creation request or a container deletion request; in the case where the container operation request is the container creation request; the target container information includes the container name, container image information and container configuration information of the target container; the container configuration information includes container mount point information and container network interface information; The performing an operation corresponding to the container operation request based on the container operation information includes: Using the second containerization platform, create the target container using the container name; determine the image file corresponding to the target container based on the container image information; and define the operating environment and behavior of the target container based on the container configuration information; Through the second containerization platform, a target route corresponding to the target container is added to the kernel of the second container module, the target route is recorded in a routing table corresponding to the second container module, and a service discovery operation is performed on the target container, so that external data packets can access the target container based on the target route.

2. The method according to claim 1, characterized in that The method further comprises: When the second container module receives the external data packet, matching the external data packet with a routing table corresponding to the second container module; In a case where the external data packet hits a container in the routing table corresponding to the second container module, the external data packet is sent to the container accessed by the external data packet through the second containerization platform.

3. The method according to claim 2, characterized in that In the case where the external data packet does not hit the container in the routing table corresponding to the second container module, the method further includes: sending the external data packet to the first container module through the second container module; When the first container module receives the external data packet, the external data packet is matched with the routing table corresponding to the first container module. When a container in the routing table corresponding to the first container module is hit, the external data packet is sent to the container accessed by the external data packet through the first containerization platform.

4. The method according to claim 1, wherein In a case where the call information does not carry the preset sinking identifier, the method further includes: executing, through the first containerization platform, an operation corresponding to the container operation request based on the target container information.

5. The method according to claim 1, wherein Before receiving the hypertext transfer protocol request through the second container network interface plug-in in the second container module, the method further includes: creating a hypertext transfer protocol service through the second container network interface plug-in.

6. The method according to claim 1, characterized in that After the second containerization platform executes the operation corresponding to the container operation request based on the target container information, the method further includes: generating a hypertext transfer protocol receipt based on the container information of the target container by the second container module, and returning it to the first container module.

7. A container sinking device based on DPU, including DPU or network card, characterized in that: The DPU or network card is used to implement the steps of the method according to any one of claims 1 to 6.

8. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.

9. A computer program product comprising a computer program / instructions, characterized in that When the computer program / instructions are executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.

Images