System and method for realizing SIL2 independent double links based on OpenStack

Abstract

The invention discloses a system and a method for realizing SIL2 independent double links based on OpenStack, and the system comprises a computing node server which comprises a network service providing component, a computing service providing component, a network interface management component and at least two network card binding components; the computing node server is used for running a virtual machine instance, and a virtual machine is configured to connect at least two networks; the network service providing component is used for creating a port for each network, and each port belongs to a network bridge; the computing service providing component is used for generating a configuration file of a network interface of the virtual machine; the network interface management component is used for creating a virtual network card, connecting the virtual network card to a specified network bridge, and printing a virtual local area network label; each network card binding assembly is connected with one network bridge, and each network card binding assembly is used for binding at least two physical network cards; and the external switch is used for providing at least four interfaces which are respectively connected with the physical network cards in the network card binding component.

Description

Technical Field

[0001] The present invention relates to the field of rail transit technology, and in particular to a system and method for implementing SIL2 independent dual links based on OpenStack. Background Art

[0002] In the field of rail transportation technology, with the development of intelligent transportation technology, rail transportation cloudification has gradually become an irreversible trend. OpenStack has developed to become the de facto standard in the field of cloud computing. Figure 1 and Figure 2 In OpenStack, when a virtual machine is allocated a network, the network plug-in in the computing service provider component (NovaCompute) of the computing node server actively calls the request processing component (Neutron Server) to create a port (Port) for the virtual machine, and then calls the network service provider component (Open Virtual Network Agent, OVN Agent) to insert a virtual network card (Traffic Access Point, TAP) in the operating system of the computing node server, and uses the network configuration information provided by the port (Port) to generate the network interface information in the virtual machine XML configuration file, and finally the network interface management component (Libvirt) creates the virtual machine. The network of the virtual machine is under the control of the network service provider component (OVN Agent). Based on the OpenStack network model, all services communicate through the computing node's bridge (Integration Bridge, br-int). Even if the virtual machine has multiple network interfaces (Ethernet interface, eth), they all communicate through the bridge (br-int). Using the same bridge (br-int) also means that network traffic enters and exits from the same physical network card. If the network service provider component (OVN Agent) or the physical network port is abnormal, the virtual machine will not be accessible. Therefore, in the rail transit industry, the OpenStack native network solution cannot meet the Safety Integrity Level (SIL) requirements. Summary of the invention

[0003] The purpose of the present invention is to provide a system and method for implementing SIL2 independent dual links based on OpenStack, so as to solve the problem that the OpenStack native network solution in the prior art cannot meet the safety integrity level requirements of the rail transit industry.

[0004] In order to solve the above technical problems, the present invention provides a system for implementing SIL2 independent dual links based on OpenStack, comprising:

[0005] A computing node server, the computing node server comprising a network service providing component, a computing service providing component, a network interface management component and at least two network card binding components; the computing node server is used to run a virtual machine instance, and the virtual machine is configured to connect to at least two networks;

[0006] The network service providing component is used to create a port for each network, and each of the ports belongs to a bridge;

[0007] The computing service providing component is used to generate a configuration file of a network interface of the virtual machine, wherein the configuration file specifies a network bridge, a virtual network card and an associated virtual local area network label to which the network interface is connected;

[0008] The network interface management component is used to create a virtual network card, connect the virtual network card to a designated bridge, and label it with a virtual local area network;

[0009] Each of the network card binding components is connected to a network bridge, and each of the network card binding components includes at least two bound physical network cards;

[0010] An external switch, the external switch is used to provide at least four interfaces, which are respectively connected to the physical network cards in the network card binding component.

[0011] Optionally, the system further comprises:

[0012] An enhanced network monitoring module is used to monitor the network indicators of the virtual machines running on the computing node servers and report network alarms in case of failures.

[0013] Optionally, the enhanced network monitoring module is used to:

[0014] Calling the network interface management component to query the network indicators of the virtual machine;

[0015] Calling the external switch to query the index of the port;

[0016] Analyze the port indicators and the network indicators of the virtual machine; determine whether there is an abnormality. If there is an abnormality, send an abnormal message to the message queue;

[0017] Analyze the virtual network card and the port; determine whether there is a residual virtual network card, if so, clean up the residual virtual network card and record a log; if not, record a log.

[0018] Optionally, at least two virtual machine instances are running on the system.

[0019] Optionally, the at least four interfaces provided by the external switch include:

[0020] One external switch provides at least four interfaces or at least four external switches each provide at least one interface.

[0021] On the other hand, the present invention provides a method for implementing SIL2 independent dual links based on OpenStack, characterized in that the above-mentioned SIL2 independent dual link system based on OpenStack is adopted, and the method comprises:

[0022] Configuring the virtual machine instance running in the computing node server to connect to at least two networks;

[0023] Using the network service providing component to create a port for each network, each of the ports belonging to a bridge;

[0024] Generate a configuration file of a network interface of a virtual machine using the computing service providing component, wherein the configuration file specifies a network bridge, a virtual network card, and an associated virtual local area network tag to which the network interface is connected;

[0025] The network interface management component is used to create a virtual network card, and the virtual network card is connected to a designated network bridge and labeled with a virtual local area network.

[0026] Optionally, the step of creating a port includes:

[0027] creating a port on the external switch;

[0028] Generate a name of a virtual network card corresponding to each of the ports;

[0029] Obtaining a virtual local area network tag corresponding to each of the ports;

[0030] Get the bridge to which each port belongs.

[0031] Optionally, before creating a virtual network card using the network interface management component, the method includes:

[0032] Check whether the name of the virtual network card to be created already exists.

[0033] If so, the creation fails;

[0034] If not, check whether the network bridge exists. If so, create the virtual network card. If not, create the network bridge and then create the virtual network card.

[0035] On the other hand, the present invention provides an electronic device, including a processor and a memory, wherein the memory stores a computer program, and when the computer program is executed by the processor, the method for realizing SIL2 independent dual links based on OpenStack is implemented.

[0036] On the other hand, the present invention provides a readable storage medium, wherein the readable storage medium stores a computer program, and when the computer program is executed by a processor, the above-mentioned method for realizing SIL2 independent dual links based on OpenStack is implemented.

[0037] Compared with the prior art, the technical solution of the present invention has at least the following beneficial effects:

[0038] 1. The present invention uses at least four physical network cards on the physical network, and binds two of them into a network card binding component (Bond) to ensure the stability of the network on the physical network. In the field of rail transportation technology, each professional software further guarantees the communication stability requirements of each professional software through the dual-network dual-transmission mechanism;

[0039] 2. The technical solution of the present invention directly uses the bridge to connect with the network card binding component (Bond), eliminating the single point failure problem of the network service provider component (OVN Agent);

[0040] 3. The present invention adopts a physical network card binding component (Bond), which doubles the network card bandwidth, while ensuring high availability, it also improves the network card performance;

[0041] 4. The present invention supports multi-tenant networks, divides different virtual LAN labels and bridges for different tenants, and ensures the physical isolation of the communication network. BRIEF DESCRIPTION OF THE DRAWINGS

[0042] Figure 1 It is a schematic diagram of the OpenStack native network solution in the prior art;

[0043] Figure 2 A schematic diagram of a network model corresponding to the OpenStack native network solution in the prior art;

[0044] Figure 3 A schematic diagram of a network solution for a system implementing SIL2 independent dual links based on OpenStack provided in one embodiment of the present invention;

[0045] Figure 4 for Figure 3 A schematic diagram of a network model corresponding to the network solution shown;

[0046] Figure 5 A schematic diagram of the workflow of an enhanced network monitoring module in a system implementing SIL2 independent dual links based on OpenStack provided in one embodiment of the present invention;

[0047] Figure 6 A flow chart of a method for implementing SIL2 independent dual links based on OpenStack provided in one embodiment of the present invention;

[0048] Figure 7 A schematic diagram of a process of creating a port in a method for implementing SIL2 independent dual links based on OpenStack provided in an embodiment of the present invention;

[0049] Figure 8 A schematic diagram of a process for creating a virtual machine in a method for implementing SIL2 independent dual links based on OpenStack provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0050] The following is a further detailed description of a system and method for implementing SIL2 independent dual links based on OpenStack of the present invention in combination with the accompanying drawings and specific embodiments. According to the following description, the advantages and features of the present invention will be clearer. It should be noted that the accompanying drawings are in a very simplified form and use non-precise proportions, which are only used to conveniently and clearly assist in explaining the purpose of the implementation method of the present invention. In order to make the purpose, features and advantages of the present invention more obvious and easy to understand, please refer to the accompanying drawings. It should be noted that the structure, proportion, size, etc. illustrated in the drawings of this specification are only used to match the content disclosed in the specification for people familiar with this technology to understand and read, and are not used to limit the limiting conditions for the implementation of the present invention, so they have no technical substantive significance. Any modification of the structure, change of the proportional relationship or adjustment of the size, without affecting the effect that the present invention can produce and the purpose that can be achieved, should still fall within the scope of the technical content disclosed by the present invention.

[0051] OpenStack is an open source cloud computing management platform project. It consists of multiple components that work together to provide various services required to build public and private clouds.

[0052] See also Figure 3 and Figure 4 The present invention provides a system for implementing SIL2 independent dual links based on OpenStack, comprising:

[0053] Computing node server, the computing node server includes a network service providing component (OVN Agent, attached Figure 3 The corresponding components are enhanced network agent), computing service provider component (Nova Compute), network interface management component (Attachment Figure 3 The corresponding one is enhanced Libvirt) and at least two network card binding components (Bond); the computing node server is used to run a virtual machine instance, and the virtual machine is configured to connect to at least two networks;

[0054] The network service provider component (OVN Agent) is used to create a port (Port) for each network, and each of the ports (Port) belongs to a bridge;

[0055] The computing service providing component (Nova Compute) is used to generate a configuration file (XML) of a network interface (Ethernet interface, eth) of a virtual machine, wherein the configuration file specifies a name of a bridge and a virtual network card (TAP) to which the network interface is connected and an associated virtual local area network (VLAN) tag;

[0056] The network interface management component is used to create a virtual network card (TAP), connect the virtual network card (TAP) to a specified bridge, and add a virtual local area network (VLAN) tag;

[0057] Each of the network card binding components (Bond) is connected to a network bridge, and each of the network card binding components (Bond) includes at least two bound physical network cards;

[0058] An external switch, the external switch is used to provide at least four interfaces, which are respectively connected to the physical network cards in the network card binding component.

[0059] It should be noted that Virtual Local Area Network (VLAN) is a network technology that uses 802.1q tagging. The 802.1q standard defines a method for adding tags to Ethernet frames to implement the division of Virtual Local Area Networks (VLANs) in switching networks. A virtual local area network is a layer 2 broadcast domain. Virtual machine instances in the same virtual local area network can communicate, while different virtual local area networks can only communicate through routers. Virtual local area networks can span nodes and are the most widely used network type.

[0060] A port can be considered as a port on a virtual switch. A MAC address and an IP address are defined on the port. When the network interface (eth) of a virtual machine instance is bound to the port, the port will assign the MAC and IP to the network interface of the virtual machine.

[0061] The system for implementing SIL2 independent dual links based on OpenStack provided by the present invention adopts at least four physical network cards from the physical network, and binds two of them into a network card binding component (Bond), thereby ensuring the stability of the network from the physical network. In the field of rail transit technology, each professional software further guarantees the communication stability requirements of each professional software through the dual-network dual-transmission mechanism; directly uses a bridge to connect with the network card binding component (Bond), eliminating the single point failure problem of the network service provider component (OVN Agent); adopts the physical network card binding component (Bond), and the network card bandwidth is doubled, which not only ensures high availability, but also improves the network card performance.

[0062] In some embodiments, the system further comprises:

[0063] An enhanced network monitoring module is used to monitor the network indicators of the virtual machines running on the computing node servers and report network alarms in case of failures.

[0064] Specifically, see Figure 5 , the enhanced network monitoring module is used to:

[0065] Calling the network interface management component to query the network indicators of the virtual machine;

[0066] Calling the external switch to query the index of the port;

[0067] Analyze the port indicators and the network indicators of the virtual machine; determine whether there is an abnormality. If there is an abnormality, send an abnormal message to the message queue (MQ);

[0068] Analyze the virtual network card and the port; determine whether there is a residual virtual network card, if so, clean up the residual virtual network card and record a log; if not, record a log.

[0069] In some embodiments, the at least four interfaces provided by the external switch include:

[0070] One external switch provides at least four interfaces or at least four external switches each provide at least one interface.

[0071] In some embodiments, at least two virtual machine instances are running on the system.

[0072] The system for implementing SIL2 independent dual links based on OpenStack provided in this embodiment supports multi-tenant networks, divides different virtual LAN labels and bridges for different tenants, and ensures physical isolation of the communication network.

[0073] This embodiment also provides a method for implementing SIL2 independent dual links based on OpenStack. The above-mentioned system for implementing SIL2 independent dual links based on OpenStack is used. Figure 6 , the method comprising:

[0074] Step S1: Configuring the virtual machine instance running in the computing node server to connect to at least two networks;

[0075] Step S2: using the network service providing component to create a port for each network, each of the ports belonging to a bridge;

[0076] Step S3: using the computing service providing component to generate a configuration file of the network interface of the virtual machine, wherein the configuration file specifies a network bridge, a virtual network card, and an associated virtual local area network tag to which the network interface is connected;

[0077] Step S4: Create a virtual network card using the network interface management component, connect the virtual network card to a designated bridge, and add a virtual local area network label.

[0078] In some embodiments, see Figure 7 The step of creating a port includes:

[0079] creating a port on the external switch;

[0080] Generate a name of a virtual network card corresponding to each of the ports;

[0081] Obtaining a virtual local area network tag corresponding to each of the ports;

[0082] Get the bridge to which each port belongs.

[0083] In some embodiments, see Figure 8 , before using the network interface management component to create a virtual network card, it includes:

[0084] Check whether the name of the virtual network card (TAP) to be created already exists.

[0085] If so, the creation fails;

[0086] If not, check whether the network bridge exists. If so, create the virtual network card. If not, create the network bridge and then create the virtual network card.

[0087] Specifically, the method for implementing SIL2 independent dual links based on OpenStack provided in this embodiment can be implemented by the following code:

[0088] Create a virtual machine through the Nova API. The request body is as follows:

[0089] {

[0090] "server":{

[0091] "security_groups":[],

[0092] "name":"test-zxm",

[0093] "flavorRef":"b614661d-d387-4766-b802-8043ced8bb03",

[0094] "availability_zone":"nova",

[0095] "networks":[

[0096] {

[0097] "uuid":"404415e4-8e82-48df-a557-da2ee818f1ae"

[0098] },

[0099] {

[0100] "uuid":"9ae3c366-83c8-4305-861d-605be8de575d"

[0101] }

[0102] ],

[0103] "block_device_mapping_v2":[

[0104] {

[0105] "boot_index":0,

[0106] "uuid":"c5c2294b-65c3-432e-9755-c77c89f94465",

[0107] "source_type":"image",

[0108] "volume_size":10,

[0109] "destination_type":"volume",

[0110] "volume_type":"1a3e786d-630a-47d3-80d1-e83284adff14",

[0111] "delete_on_termination":true

[0112] }

[0113] ],

[0114] "adminPass":"Admin@123",

[0115] "min_count":2,

[0116] "max_count":2,

[0117] "return_reservation_id":true,

[0118] },

[0119] "OS-SCH-HNT:scheduler_hints":{

[0120] "group":"e1ad4457-9d97-4fb4-9901-74b4fca77966"

[0121] }

[0122] }

[0123] The "networks" section is the network data we focus on. In "networks", two networks are selected, both of which are enhanced networks, which means that the virtual machine will create two network interfaces (eth).

[0124] The network service provider creates a port and obtains the full information of the port through the computing service provider. The key information of the port is as follows: [

[0126] {

[0127] "id":"13bcdc9e-2425-44eb-8487-5a5f8cc8960c",

[0128] "network":{

[0129] "uuid":"404415e4-8e82-48df-a557-da2ee818f1ae",

[0130] "subnets":[

[0131] {

[0132] "ips":[

[0133] {

[0134] "address":"10.201.0.32"

[0135] } ]

[0137] }

[0138] ],

[0139] "type":"enhanced_ovs",

[0140] "devname":"tap13bcdc9e-24",

[0141] "enhance_bridge":"enhance_bridge01"

[0142] }

[0143] },

[0144] {

[0145] "id":"43428ce5-eb8e-4f42-9fa5-b9f28b9a3bd5",

[0146] "network":{

[0147] "uuid":"9ae3c366-83c8-4305-861d-605be8de575d",

[0148] "subnets":[

[0149] {

[0150] "ips":[

[0151] {

[0152] "address":"10.202.0.32"

[0153] } ]

[0155] }

[0156] ],

[0157] "type":"enhanced_ovs",

[0158] "devname":"tap43428ce5-eb",

[0159] "enhance_bridge":"enhance_bridge02"

[0160] }

[0161] } ]

[0163] It can be seen that the network type of the port is "enhanced_ovs", each port has its own corresponding virtual network card name "devname", the first port belongs to the bridge "enhance_bridge01", and the second port belongs to the bridge "enhance_bridge02".

[0164] The computing service provider (Nova Compute) generates a configuration file xml for the network interface of the virtual machine, as shown below:

[0165] <devices>

[0166] <disk> ...< / disk>

[0167] <interface>

[0168] <mac address="C8:15:4E:54:9C:8B" / >

[0169] <model type="virtio" / >

[0170] <source bridge＝"enhance_bridge01">

[0171] <mtu size="1400" / >

[0172] <target dev="tap13bcdc9e-24" / >

[0173] <vlan>

[0174] <tag id='1023' / >

[0175] < / vlan>

[0176] < / interface>

[0177] <interface>

[0178] <mac address="FC:5C:EE:74:AE:0E" / >

[0179] <model type="virtio" / >

[0180] <source bridge＝"enhance_bridge02">

[0181] <mtu size="1400" / >

[0182] <target dev="tap43428ce5-eb" / >

[0183] <vlan>

[0184] <tag id='2023' / >

[0185] < / vlan>

[0186] < / interface>

[0187] < / devices>

[0188] The network interface management component will create a virtual network card on the computing node server, connect the virtual network card to the bridge, and then label it as a virtual LAN.

[0189] This embodiment further provides an electronic device, including a processor and a memory, wherein a computer program is stored in the memory, and when the computer program is executed by the processor, the above-mentioned method for implementing SIL2 independent dual links based on OpenStack is implemented.

[0190] This embodiment further provides a readable storage medium, in which a computer program is stored. When the computer program is executed by a processor, the above-mentioned method for implementing SIL2 independent dual links based on OpenStack is implemented.

[0191] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or device including the elements.

[0192] It should be noted that the devices and methods disclosed in the embodiments of this article can also be implemented in other ways. The device implementation described above is only schematic. For example, the flowcharts and block diagrams in the accompanying drawings show the possible architecture, functions and operations of the devices, methods and computer program products according to multiple embodiments of this article. In this regard, each box in the flowchart or block diagram can represent a part of a module, program or code, and the module, program segment or part of the code contains one or more executable instructions for implementing the specified logical function, and the module, program segment or part of the code contains one or more executable instructions for implementing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in a different order from the order marked in the accompanying drawings. For example, two consecutive boxes can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram and / or flowchart, and the combination of boxes in the block diagram and / or flowchart can be implemented by a dedicated hardware-based system for performing a specified function or action, or can be implemented by a combination of dedicated hardware and computer instructions.

[0193] In addition, the functional modules in the various embodiments of this document may be integrated together to form an independent part, or each module may exist independently, or two or more modules may be integrated to form an independent part.

[0194] Although the content of the present invention has been described in detail through the above preferred embodiments, it should be appreciated that the above description should not be considered as a limitation of the present invention. After reading the above content, it will be apparent to those skilled in the art that various modifications and substitutions of the present invention will occur. Therefore, the protection scope of the present invention should be limited by the appended claims.

Claims

1. A system for implementing SIL2 independent dual links based on OpenStack, characterized in that: include: A computing node server, the computing node server comprising a network service providing component, a computing service providing component, a network interface management component and at least two network card binding components; The computing node server is used to run a virtual machine instance, and the virtual machine is configured to connect to at least two networks; The network service providing component is used to create a port for each network, and each of the ports belongs to a bridge; The computing service providing component is used to generate a configuration file of a network interface of the virtual machine, wherein the configuration file specifies a network bridge, a virtual network card and an associated virtual local area network label to which the network interface is connected; The network interface management component is used to create a virtual network card, connect the virtual network card to a designated bridge, and label it with a virtual local area network; Each of the network card binding components is connected to a network bridge, and each of the network card binding components includes at least two bound physical network cards; An external switch, the external switch is used to provide at least four interfaces, which are respectively connected to the physical network cards in the network card binding component.

2. The system for implementing SIL2 independent dual links based on OpenStack as claimed in claim 1, characterized in that: The system further comprises: An enhanced network monitoring module is used to monitor the network indicators of the virtual machines running on the computing node servers and report network alarms in case of failures.

3. The system for implementing SIL2 independent dual links based on OpenStack as claimed in claim 2, characterized in that: The enhanced network monitoring module is used for: Calling the network interface management component to query the network indicators of the virtual machine; Calling the external switch to query the index of the port; Analyze the port indicators and the network indicators of the virtual machine; determine whether there is an abnormality. If there is an abnormality, send an abnormal message to the message queue; Analyze the virtual network card and the port; determine whether there is a residual virtual network card, if so, clean up the residual virtual network card and record a log; if not, record a log.

4. The system for implementing SIL2 independent dual links based on OpenStack as claimed in claim 1, characterized in that: At least two virtual machine instances are running on the system.

5. The system for implementing SIL2 independent dual links based on OpenStack as claimed in claim 1, characterized in that: The at least four interfaces provided by the external switch include: One external switch provides at least four interfaces or at least four external switches each provide at least one interface.

6. A method for implementing SIL2 independent dual links based on OpenStack, characterized in that: The SIL2 independent dual-link system is implemented based on OpenStack according to any one of claims 1 to 5, wherein the method comprises: Configuring the virtual machine instance running in the computing node server to connect to at least two networks; Using the network service providing component to create a port for each network, each of the ports belonging to a bridge; Generate a configuration file of a network interface of a virtual machine using the computing service providing component, wherein the configuration file specifies a network bridge, a virtual network card, and an associated virtual local area network tag to which the network interface is connected; The network interface management component is used to create a virtual network card, and the virtual network card is connected to a designated network bridge and labeled with a virtual local area network.

7. The method for implementing SIL2 independent dual links based on OpenStack as claimed in claim 6, characterized in that: The step of creating a port includes: creating a port on the external switch; Generate a name of a virtual network card corresponding to each of the ports; Obtaining a virtual local area network tag corresponding to each of the ports; Get the bridge to which each port belongs.

8. The method for implementing SIL2 independent dual links based on OpenStack as claimed in claim 6, characterized in that: Before creating a virtual network card using the network interface management component, the method includes: Check whether the name of the virtual network card to be created already exists. If so, the creation fails; If not, check whether the network bridge exists. If so, create the virtual network card. If not, create the network bridge and then create the virtual network card.

9. An electronic device, characterized in that: The method comprises a processor and a memory, wherein a computer program is stored in the memory, and when the computer program is executed by the processor, the method according to any one of claims 6 to 8 is implemented.

10. A readable storage medium, characterized in that: The readable storage medium stores a computer program, and when the computer program is executed by a processor, the method according to any one of claims 6 to 8 is implemented.

Images