Network communication architecture, communication method, electronic equipment and storage medium

Abstract

The embodiment of the invention provides a network communication architecture, a communication method, electronic equipment and a storage medium, and relates to the technical field of public cloud networks, the network communication architecture comprises a public cloud machine room and a private cloud machine room communicating with the public cloud machine room; the public cloud machine room comprises an SDN controller, a first private line switch, a Spine switch, a Leaf switch and first equipment; the private cloud machine room at least comprises a second private line switch, an access switch and second equipment; bGP EVPN session connection is established between the SDN controller and the access switch, the SDN controller is used for sending first routing information corresponding to the public cloud machine room to the private cloud machine room through the BGP EVPN session connection, and the access switch is used for sending second routing information corresponding to the private cloud machine room to the public cloud machine room through the BGP EVPN session connection.

Description

Technical Field

[0001] The present invention relates to the field of public cloud network technology, and in particular to a network communication architecture, a network communication method, an electronic device and a computer-readable storage medium. Background Art

[0002] With the acceleration of digital transformation, more and more companies are migrating their core businesses and applications to the cloud to improve efficiency, reduce costs, and enhance business flexibility and scalability. However, a major challenge many companies face during the migration process is how to gradually migrate their businesses to the cloud while retaining traditional data centers to achieve a hybrid cloud architecture.

[0003] In the process of digital transformation, enterprises have higher and higher requirements for business continuity and disaster recovery capabilities. Especially in key industries such as finance, medical care, and manufacturing, business terminals may cause huge economic losses and reputation damage. Therefore, enterprises need a corresponding platform to ensure business continuity under any circumstances. Among them, in related technologies, virtual machines on the cloud need to communicate data with the computer room of the data center through dedicated lines. However, due to the limitations of this communication method, it is impossible to gradually migrate some businesses in the same subnet to the cloud, which limits the flexible migration of businesses and is likely to have a corresponding impact on the business of the enterprise. Summary of the invention

[0004] The embodiments of the present invention provide a network communication architecture, method, electronic device and computer-readable storage medium to solve or partially solve the problem that the network architecture limits the flexible migration of services.

[0005] The embodiment of the present invention discloses a network communication architecture, which includes at least a public cloud computer room and a private cloud computer room communicating with the public cloud computer room; wherein:

[0006] The public cloud computer room includes an SDN controller, a first dedicated line switch connected to the SDN controller for communication, a Spine switch connected to the first dedicated line switch for communication, a Leaf switch connected to the Spine switch for communication, and a first device connected to the SDN controller and the Leaf switch for communication, respectively; the private cloud computer room includes at least a second dedicated line switch, an access switch connected to the second dedicated line switch for communication, and a second device connected to the access switch for communication;

[0007] Wherein, a BGP EVPN session connection is established between the SDN controller and the access switch, the SDN controller is used to send the first routing information corresponding to the public cloud computer room to the private cloud computer room through the BGP EVPN session connection, and the access switch is used to send the second routing information corresponding to the private cloud computer room to the public cloud computer room through the BGP EVPN session connection;

[0008] Among them, the first routing information is used to guide the devices in the private cloud computer room to forward traffic so as to transmit the traffic to the first device; the second routing information is used to guide the devices in the public cloud computer room to forward traffic so as to transmit the traffic to the second device.

[0009] In some feasible implementations, a first control connection is established between the SDN controller and the first dedicated line switch, and a second control connection is established between the SDN controller and the second dedicated line switch;

[0010] The SDN controller sends first configuration information corresponding to the first dedicated line switch to the first dedicated line switch through the first control connection, and sends second configuration information corresponding to the second dedicated line switch to the second dedicated line switch through the second control connection.

[0011] In some feasible implementations, the first configuration information and the second configuration information respectively include at least one of basic configuration, interface configuration, valn configuration, routing configuration, security configuration, Qos configuration, high availability configuration, and log and monitoring configuration.

[0012] In some feasible implementations, a layer 3 vxlan tunnel is established between the first dedicated line switch and the second dedicated line switch.

[0013] In some feasible implementations, a third control connection is established between the SDN controller and the access switch;

[0014] The SDN controller is used to send third configuration information corresponding to the access switch to the access switch through the third control connection.

[0015] In some feasible implementations, the third configuration information includes at least configuration information related to the Ethernet virtual private network and configuration information related to the virtual extensible local area network tunnel;

[0016] Among them, the configuration information related to the Ethernet virtual private network includes at least one of a neighbor IP address, a remote AS number, an update source interface, a multi-hop configuration, an activated address family, a virtual network instance, a routing identifier, a routing target, and a virtual tunnel endpoint address; the configuration information related to the virtual extensible LAN tunnel includes at least a VXLAN interface name, a VXLAN type, a remote IP address, a virtual network instance identifier, a flow table rule, a priority, an input port, an output port, and a VLAN tag processing.

[0017] The embodiment of the present invention further discloses a network communication method, which is applied to the network communication architecture according to any one of claims 1 to 6; wherein the first device includes at least a first virtual switch, the first virtual switch includes at least a first virtual machine, the second device includes at least a second virtual switch, the second virtual switch includes at least a second virtual machine, and the method includes:

[0018] An EVPN neighbor relationship is established between the SDN controller and the access switch;

[0019] The SDN controller obtains a virtual tunnel endpoint address corresponding to a first virtual switch located in a public cloud computer room, and encapsulates the virtual tunnel endpoint address into a Class 2 route;

[0020] The SDN controller establishes a vxlan tunnel with the access switch based on the Class 2 routing;

[0021] In response to detecting a first message transmitted by the second virtual machine, the second virtual switch adds a VLAN header to the first message and transmits the first message to the access switch;

[0022] The access switch maps the VLAN header in the first message to a VXLAN header, and transmits the mapped first message to the second dedicated line switch;

[0023] The second dedicated line switch adds a Layer 3 dedicated line VXLAN header to the mapped first message, and transmits the processed first message to the first dedicated line switch through the Layer 3 VXLAN tunnel;

[0024] The first dedicated line switch removes the VXLAN header of the three-layer dedicated line, and transmits the removed first message to the first virtual switch;

[0025] The first virtual switch removes the VXLAN header, obtains the first message, and transmits the first message to the first virtual machine.

[0026] In some feasible implementations, the private cloud computer room further includes a physical server, the access switch is configured with a layer 2 port, and the method further includes:

[0027] The access switch adds a VLAN header to the second message in response to detecting the second message transmitted by the physical server through the layer 2 port, and transmits the second message to the access switch;

[0028] The access switch maps the VLAN header in the second message to a VXLAN header, and transmits the mapped second message to the second dedicated line switch;

[0029] The second dedicated line switch adds a Layer 3 dedicated line VXLAN header to the mapped second message, and transmits the processed second message to the first dedicated line switch through the Layer 3 VXLAN tunnel;

[0030] The first dedicated line switch removes the VXLAN header of the three-layer dedicated line, and transmits the removed second message to the first virtual switch;

[0031] The first virtual switch removes the VXLAN header, obtains the second message, and transmits the second message to the first virtual machine.

[0032] The embodiment of the present invention further discloses an electronic device, comprising a processor, a communication interface, a memory and a communication bus, wherein the processor, the communication interface and the memory communicate with each other via the communication bus;

[0033] The memory is used to store computer programs;

[0034] The processor is used to implement the method described in the embodiment of the present invention when executing the program stored in the memory.

[0035] The embodiment of the present invention further discloses a computer-readable storage medium having instructions stored thereon, which, when executed by one or more processors, enables the processors to execute the method described in the embodiment of the present invention.

[0036] The embodiments of the present invention include the following advantages:

[0037] In an embodiment of the present invention, by constructing a corresponding network communication architecture, the network communication architecture may include a public cloud computer room and a private cloud computer room communicating with the public cloud computer room, wherein the public cloud computer room includes an SDN controller, a first dedicated line switch connected to the SDN controller for communication, a Spine switch connected to the first dedicated line switch for communication, a Leaf switch connected to the Spine switch for communication, and a first device connected to the SDN controller and the Leaf switch for communication, respectively; the private cloud computer room includes at least a second dedicated line switch, an access switch connected to the second dedicated line switch for communication, and a second device connected to the access switch for communication; wherein a BGP EVPN session connection is established between the SDN controller and the access switch, the SDN controller is used to send the first routing information corresponding to the public cloud computer room to the private cloud computer room through the BGP EVPN session connection, and the access switch is used to send the first routing information corresponding to the public cloud computer room to the private cloud computer room through the BGP The EVPN session connection sends the second routing information corresponding to the private cloud computer room to the public cloud computer room; wherein, the first routing information is used to guide the devices in the private cloud computer room to forward traffic so as to transmit the traffic to the first device; the second routing information is used to guide the devices in the public cloud computer room to forward traffic so as to transmit the traffic to the second device, thereby converting the routing of the network within the cloud by deploying physical access devices, controllers, and physical access devices, etc., to achieve the function of Layer 2 traffic interconnection between virtual machines in the cloud network and traditional IDC computer room services, so that interconnection can be achieved between the on-cloud and off-cloud networks, thereby improving the versatility of the network communication architecture and ensuring flexible migration of services. BRIEF DESCRIPTION OF THE DRAWINGS

[0038] Figure 1 It is a structural diagram of a network communication architecture provided in an embodiment of the present invention;

[0039] Figure 2 is a schematic diagram of a network communication architecture provided in an embodiment of the present invention;

[0040] Figure 3 is a flow chart of a network communication method provided in an embodiment of the present invention;

[0041] Figure 4 It is a schematic diagram of traffic forwarding provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0042] In order to make the above-mentioned objects, features and advantages of the present invention more obvious and easy to understand, the present invention is further described in detail below with reference to the accompanying drawings and specific embodiments.

[0043] As an example, in related technologies, virtual machines on the cloud communicate with traditional IDC rooms through dedicated lines, but currently all dedicated lines are Layer 3 dedicated lines, that is, the IP addresses of virtual machines on the cloud cannot belong to the same subnet as the IP addresses of traditional IDC rooms of enterprises. For enterprises to migrate their services to the cloud, it is impossible to gradually migrate some services to the cloud within the same subnet of the enterprise, which has a great impact on the migration of enterprise services to the cloud.

[0044] In this regard, in the present invention, by constructing a corresponding network communication architecture, the network communication architecture may include a public cloud computer room and a private cloud computer room communicating with the public cloud computer room, wherein the public cloud computer room includes an SDN controller, a first dedicated line switch connected to the SDN controller for communication, a Spine switch connected to the first dedicated line switch for communication, a Leaf switch connected to the Spine switch for communication, and a first device connected to the SDN controller and the Leaf switch for communication, respectively; the private cloud computer room includes at least a second dedicated line switch, an access switch connected to the second dedicated line switch for communication, and a second device connected to the access switch for communication; wherein a BGP EVPN session connection is established between the SDN controller and the access switch, the SDN controller is used to send the first routing information corresponding to the public cloud computer room to the private cloud computer room through the BGP EVPN session connection, and the access switch is used to send the first routing information corresponding to the public cloud computer room to the private cloud computer room through the BGP The EVPN session connection sends the second routing information corresponding to the private cloud computer room to the public cloud computer room; wherein, the first routing information is used to guide the devices in the private cloud computer room to forward traffic so as to transmit the traffic to the first device; the second routing information is used to guide the devices in the public cloud computer room to forward traffic so as to transmit the traffic to the second device, thereby converting the routing of the network within the cloud by deploying physical access devices, controllers, and physical access devices, etc., to achieve the function of Layer 2 traffic interconnection between virtual machines in the cloud network and traditional IDC computer room services, so that interconnection can be achieved between the on-cloud and off-cloud networks, thereby improving the versatility of the network communication architecture and ensuring flexible migration of services.

[0045] In order to enable those skilled in the art to better understand the technical solutions in the embodiments of the present invention, some technical features involved in the embodiments of the present invention are explained and illustrated below:

[0046] SDN (Software Defined Network): It can be a network architecture that makes network management more centralized and intelligent by separating the network control plane from the data plane. For SDN, it can include a controller, a southbound interface, a northbound interface, and network devices, among which the SDN controller can be responsible for managing and controlling the entire network, communicating with network applications through the northbound interface, and communicating with network devices through the southbound interface; the southbound interface can be the interface between the controller and the network device, and the commonly used protocols are OpenFlow, NETCONF, etc.; the northbound interface can be the interface between the controller and the network application, providing an API for the network application to call to implement network policies and configurations; the network device can be centrally managed by the controller for performing packet forwarding and processing tasks.

[0047] OVS (Open Vswitch, virtual switch): It can be an open source virtual switch, which is widely used in virtualization environments, such as cloud computing data centers. OVS has multi-layer switching functions and supports multiple protocols and standards, such as OpenFlow, NETCONF, BGP, etc.

[0048] VXLAN (Virtual eXtensible LAN): It is a network virtualization technology that aims to solve the scalability limitations of traditional VLANs. VXLAN can be based on the UDP protocol and use a 24-bit identifier (VNI) to support the construction of large-scale virtual networks.

[0049] EIP (Elastic Public IP function, implementing 1:1 NAT): It can be a network function that allows dynamic allocation and management of public IP addresses to implement 1:1 Network Address Translation (NAT).

[0050] Security Group (security group function, used to limit the traffic of inbound and outbound ports, stateful): It can be a virtual firewall function used to control the traffic of inbound and outbound ports, provide stateful traffic filtering, rule-based traffic control, and dynamically adjust security policies to ensure network security and compliance.

[0051] Subnet (subnet function, which can create subnets within VPC): A subnet is a logically isolated network segment within a virtual private cloud (VPC) that is used to allocate IP addresses and control network traffic. It can realize internal network division and management and support flexible network architecture design and resource allocation.

[0052] VNI range, which can be used for VNI segment management. VNI (VXLAN Network Identifier) ​​segment management is used to define and manage the identifier (VNI) segment of the VXLAN network. By providing VNI allocation and control functions, it ensures the construction and management of large-scale virtual networks.

[0053] Reference Figure 1 , shows a schematic diagram of the structure of a network communication architecture provided in an embodiment of the present invention, wherein the network communication architecture at least includes a public cloud computer room and a private cloud computer room communicating with the public cloud computer room; wherein,

[0054] The public cloud computer room includes an SDN controller, a first dedicated line switch connected to the SDN controller for communication, a Spine switch connected to the first dedicated line switch for communication, a Leaf switch connected to the Spine switch for communication, and a first device connected to the SDN controller and the Leaf switch for communication, respectively; the private cloud computer room includes at least a second dedicated line switch, an access switch connected to the second dedicated line switch for communication, and a second device connected to the access switch for communication;

[0055] Wherein, a BGP EVPN session connection is established between the SDN controller and the access switch, the SDN controller is used to send the first routing information corresponding to the public cloud computer room to the private cloud computer room through the BGP EVPN session connection, and the access switch is used to send the second routing information corresponding to the private cloud computer room to the public cloud computer room through the BGP EVPN session connection;

[0056] Among them, the first routing information is used to guide the devices in the private cloud computer room to forward traffic so as to transmit the traffic to the first device; the second routing information is used to guide the devices in the public cloud computer room to forward traffic so as to transmit the traffic to the second device.

[0057] In the embodiment of the present invention, the network communication architecture is mainly composed of a public cloud computer room and a private cloud computer room, and the public cloud computer room and the private cloud computer room can communicate with each other through a dedicated switch. The public cloud computer room and the private cloud computer room each contain a series of network devices, and realize the exchange of routing information and traffic forwarding through the SDN controller and BGP EVPN session connection.

[0058] For the public cloud computer room, the SDN controller can serve as the brain of the network, responsible for managing and controlling the traffic and routing of the entire network; the first dedicated line switch can communicate with the SDN controller, responsible for the dedicated line connection between the public cloud computer room and the private cloud computer room; the Spine switch can communicate with the first dedicated line switch, responsible for high-speed data exchange within the public cloud computer room; the Leaf switch can communicate with the Spine switch, responsible for connecting the SDN controller and the first device; the first device can communicate with the SDN controller and the Leaf switch, which may be a server, storage device, etc.

[0059] For the private cloud computer room, the second dedicated line switch can communicate with the first dedicated line switch, responsible for the dedicated line connection between the private cloud computer room and the public cloud computer room; the access switch can communicate with the second dedicated line switch, responsible for the device access inside the private cloud computer room; the second device can communicate with the access switch, which may be a server, storage device, etc.

[0060] For the network communication architecture, the communication process between the public cloud data center and the private cloud data center may include:

[0061] First, a BGP EVPN session connection can be established: a BGP EVPN session connection is established between the SDN controller and the access switch to exchange routing information. The SDN controller sends the first routing information of the public cloud room to the private cloud room through the BGP EVPN session. The access switch sends the second routing information of the private cloud room to the public cloud room through the BGP EVPN session.

[0062] Next, routing information exchange can be performed: First routing information: generated by the SDN controller, including routing information of the public cloud computer room, used to instruct the devices in the private cloud computer room how to forward traffic to the first device. Second routing information: generated by the access switch, including routing information of the private cloud computer room, used to instruct the devices in the public cloud computer room how to forward traffic to the second device.

[0063] Finally, traffic forwarding can be performed: the device in the private cloud computer room forwards the traffic to the first device in the public cloud computer room according to the first routing information. The device in the public cloud computer room forwards the traffic to the second device in the private cloud computer room according to the second routing information.

[0064] In some feasible implementations, a first control connection is established between the SDN controller and the first dedicated line switch, and a second control connection is established between the SDN controller and the second dedicated line switch;

[0065] The SDN controller sends first configuration information corresponding to the first dedicated line switch to the first dedicated line switch through the first control connection, and sends second configuration information corresponding to the second dedicated line switch to the second dedicated line switch through the second control connection.

[0066] In some feasible implementations, the first configuration information and the second configuration information respectively include at least one of basic configuration, interface configuration, valn configuration, routing configuration, security configuration, QoS configuration, high availability configuration, and log and monitoring configuration.

[0067] In some feasible implementations, a Layer 3 vxlan tunnel is established between the first dedicated line switch and the second dedicated line switch.

[0068] In some feasible implementations, a third control connection is established between the SDN controller and the access switch; wherein the SDN controller is configured to send third configuration information corresponding to the access switch to the access switch through the third control connection.

[0069] In some feasible implementations, the third configuration information includes at least configuration information related to the Ethernet virtual private network and configuration information related to the virtual extensible local area network tunnel;

[0070] Among them, the configuration information related to the Ethernet virtual private network includes at least one of the neighbor IP address, remote AS number, update source interface, multi-hop configuration, activated address family, virtual network instance, routing identifier, routing target and virtual tunnel endpoint address; the configuration information related to the virtual extensible LAN tunnel includes at least the VXLAN interface name, VXLAN type, remote IP address, virtual network instance identifier, flow table rule, priority, input port, output port, and VLAN tag processing.

[0071] In one example, referring to Figure 2 , showing a schematic diagram of the network communication architecture provided in an embodiment of the present invention. For a public cloud host, it may include an SDN controller, a first dedicated line switch, a Spine switch, a Leaf switch and a first virtual switch, and the first virtual switch may include several virtual machines (computing nodes), etc.; for a private cloud host, it may include a second dedicated line switch, an IDC access switch, a bare metal server and a second virtual switch, and the second virtual switch may include several virtual machines (such as ordinary virtualized servers, etc.).

[0072] It should be noted that IDC access switches and dedicated switches are deployed in the private cloud computer room. The dedicated switch is mainly used to establish a Layer 3 vxlan dedicated tunnel with the dedicated switch in the cloud network, and the IDC access switch is mainly used to access the services of the private cloud computer room. The dedicated switch in the private cloud computer room establishes a netconf connection with the SDN controller, which is used by the SDN controller to send relevant configurations to the dedicated switch. The dedicated switch in the private cloud computer room and the dedicated switch in the cloud establish a Layer 3 vxlan tunnel. The IDC access switch in the private cloud computer room establishes a netconf connection with the SDN controller in the cloud and establishes a BGPEVPN neighbor. Among them, the netconf connection is used by the SDN controller to send the relevant configurations on the switch to the IDC access switch, mainly including the relevant configurations of EVPN and the relevant configurations of establishing a vxlan tunnel with OVS; the BGPEVPN neighbor is used to send the EVPN routes learned in the traditional IDC computer room to the SDN controller in the public cloud computer room for traffic forwarding, and also learns the EVPN routes sent by the SDN controller in the public cloud computer room to guide the traffic forwarding of the devices in the traditional IDC computer room.

[0073] It should be noted that the embodiments of the present invention include but are not limited to the above examples. It is understandable that those skilled in the art can also make settings according to actual needs under the guidance of the ideas of the embodiments of the present invention, and the present invention is not limited to this.

[0074] In an embodiment of the present invention, by constructing a corresponding network communication architecture, the network communication architecture may include a public cloud computer room and a private cloud computer room communicating with the public cloud computer room, wherein the public cloud computer room includes an SDN controller, a first dedicated line switch connected to the SDN controller for communication, a Spine switch connected to the first dedicated line switch for communication, a Leaf switch connected to the Spine switch for communication, and a first device connected to the SDN controller and the Leaf switch for communication, respectively; the private cloud computer room includes at least a second dedicated line switch, an access switch connected to the second dedicated line switch for communication, and a second device connected to the access switch for communication; wherein a BGP EVPN session connection is established between the SDN controller and the access switch, the SDN controller is used to send the first routing information corresponding to the public cloud computer room to the private cloud computer room through the BGP EVPN session connection, and the access switch is used to send the first routing information corresponding to the public cloud computer room to the private cloud computer room through the BGP The EVPN session connection sends the second routing information corresponding to the private cloud computer room to the public cloud computer room; wherein, the first routing information is used to guide the devices in the private cloud computer room to forward traffic so as to transmit the traffic to the first device; the second routing information is used to guide the devices in the public cloud computer room to forward traffic so as to transmit the traffic to the second device, thereby converting the routing of the network within the cloud by deploying physical access devices, controllers, and physical access devices, etc., to achieve the function of Layer 2 traffic interconnection between virtual machines in the cloud network and traditional IDC computer room services, so that interconnection can be achieved between the on-cloud and off-cloud networks, thereby improving the versatility of the network communication architecture and ensuring flexible migration of services.

[0075] Reference Figure 3 , shows a flow chart of a network communication method provided in an embodiment of the present invention, which is applied to the network communication architecture described in the above embodiment; wherein, the first device includes at least a first virtual switch, the first virtual switch includes at least a first virtual machine, the second device includes at least a second virtual switch, the second virtual switch includes at least a second virtual machine, and specifically may include the following steps:

[0076] Step 301, an EVPN neighbor relationship is established between the SDN controller and the access switch;

[0077] Step 302, the SDN controller obtains a virtual tunnel endpoint address corresponding to a first virtual switch located in a public cloud computer room, and encapsulates the virtual tunnel endpoint address into a Class 2 route;

[0078] Step 303, the SDN controller establishes a vxlan tunnel with the access switch based on the type 2 routing;

[0079] Step 304: In response to detecting the first message transmitted by the second virtual machine, the second virtual switch adds a VLAN header to the first message and transmits the first message to the access switch;

[0080] Step 305: the access switch maps the VLAN header in the first message to a VXLAN header, and transmits the mapped first message to the second dedicated line switch;

[0081] Step 306: the second dedicated line switch adds a Layer 3 dedicated line VXLAN header to the mapped first message, and transmits the processed first message to the first dedicated line switch through the Layer 3 VXLAN tunnel;

[0082] Step 307: The first dedicated line switch removes the VXLAN header of the layer-3 dedicated line, and transmits the removed first message to the first virtual switch;

[0083] Step 308: The first virtual switch removes the VXLAN header, obtains the first message, and transmits the first message to the first virtual machine.

[0084] In some feasible implementations, the private cloud computer room further includes a physical server, the access switch is configured with a layer 2 port, and the method further includes:

[0085] The access switch adds a VLAN header to the second message in response to detecting the second message transmitted by the physical server through the layer 2 port, and transmits the second message to the access switch;

[0086] The access switch maps the VLAN header in the second message to a VXLAN header, and transmits the mapped second message to the second dedicated line switch;

[0087] The second dedicated line switch adds a Layer 3 dedicated line VXLAN header to the mapped second message, and transmits the processed second message to the first dedicated line switch through the Layer 3 VXLAN tunnel;

[0088] The first dedicated line switch removes the VXLAN header of the three-layer dedicated line, and transmits the removed second message to the first virtual switch;

[0089] The first virtual switch removes the VXLAN header, obtains the second message, and transmits the second message to the first virtual machine.

[0090] In one example, referring to Figure 4, shows a schematic diagram of traffic forwarding provided in an embodiment of the present invention, wherein the part connected by arrows is the path of traffic forwarding, for example, 10.0.0.2 is a virtual machine in the cloud, 10.0.0.3 is a bare metal server in a traditional IDC computer room, and 10.0.0.4 is a virtual machine in a traditional IDC computer room. The SDN controller in the cloud and the IDC access switch in the private cloud establish an EVPN neighbor, the SDN controller encapsulates the relevant VTEP address of the OVS into a Class 2 route for establishing a vxlan tunnel with the IDC access switch, the SDN controller performs flow table and EVPN route conversion, converts the Class 5 routes of EVPN of 10.0.0.3 and 10.0.0.4 into flow tables and sends them to the corresponding OVS, and converts 10.0.0.2 into a Class 5 route of EVPN and publishes it to the IDC access switch.

[0091] Among them, if 10.0.0.4 wants to communicate with 10.0.0.2, the message of 10.0.0.4 first enters the ordinary virtualized OVS, and OVS adds a VLAN header vlan10 to the message, and then enters the interface of the IDC access switch. The IDC access switch performs a VLAN to VXLAN mapping from vlan10 to vxlan10, removes the VLAN header of the message, adds a vxlan header, and the vxlanID is 10. The traffic enters the dedicated line switch, and adds a layer of three-layer dedicated line vxlan header outside the message. The message arrives at the dedicated line access switch of the public cloud computer room, removes the vxlan header of the three-layer dedicated line, and then sends it to the corresponding OVS according to the destination address. On the OVS of the public cloud, the message header with vxlanID 10 is removed, and the message is directly sent to the virtual machine of 10.0.0.2 to complete the arrival of the traffic.

[0092] If 10.0.0.3 wants to communicate with 10.0.0.2, the message of 10.0.0.3 first enters the interface of the IDC access switch. This interface of the IDC access switch is configured as a truck Layer 2 port with a pvid of 10. The IDC access switch performs a vlan to vxlan mapping, mapping vlan10 to vxlan10. The message is added with a vxlan header with a vxlanID of 10. The traffic enters the dedicated line switch, and a layer of vxlan header of a Layer 3 dedicated line is added to the outside of the message. The message reaches the dedicated line access switch of the public cloud computer room, removes the vxlan header of the Layer 3 dedicated line, and then sends it to the corresponding OVS according to the destination address. On the OVS of the public cloud, the message header with a vxlanID of 10 is removed, and the message is directly sent to the virtual machine of 10.0.0.2 to complete the arrival of the traffic.

[0093] Through the above steps, physical access devices can be deployed, and the controller and physical access devices can establish BGPEVPN neighbors to convert the routing of the cloud network, so as to achieve the function of Layer 2 traffic interconnection between virtual machines in the cloud network and traditional IDC computer room services.

[0094] It should be noted that the embodiments of the present invention include but are not limited to the above examples. It is understandable that those skilled in the art can also make settings according to actual needs under the guidance of the ideas of the embodiments of the present invention, and the present invention is not limited to this.

[0095] In an embodiment of the present invention, by constructing a corresponding network communication architecture, the network communication architecture may include a public cloud computer room and a private cloud computer room communicating with the public cloud computer room, wherein the public cloud computer room includes an SDN controller, a first dedicated line switch connected to the SDN controller for communication, a Spine switch connected to the first dedicated line switch for communication, a Leaf switch connected to the Spine switch for communication, and a first device connected to the SDN controller and the Leaf switch for communication, respectively; the private cloud computer room includes at least a second dedicated line switch, an access switch connected to the second dedicated line switch for communication, and a second device connected to the access switch for communication; wherein a BGP EVPN session connection is established between the SDN controller and the access switch, the SDN controller is used to send the first routing information corresponding to the public cloud computer room to the private cloud computer room through the BGP EVPN session connection, and the access switch is used to send the first routing information corresponding to the public cloud computer room to the private cloud computer room through the BGP The EVPN session connection sends the second routing information corresponding to the private cloud computer room to the public cloud computer room; wherein, the first routing information is used to guide the devices in the private cloud computer room to forward traffic so as to transmit the traffic to the first device; the second routing information is used to guide the devices in the public cloud computer room to forward traffic so as to transmit the traffic to the second device, thereby converting the routing of the network within the cloud by deploying physical access devices, controllers, and physical access devices, etc., to achieve the function of Layer 2 traffic interconnection between virtual machines in the cloud network and traditional IDC computer room services, so that interconnection can be achieved between the on-cloud and off-cloud networks, thereby improving the versatility of the network communication architecture and ensuring flexible migration of services.

[0096] It should be noted that, for the sake of simplicity, the method embodiments are described as a series of action combinations, but those skilled in the art should be aware that the embodiments of the present invention are not limited by the order of the actions described, because according to the embodiments of the present invention, certain steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in the specification are all preferred embodiments, and the actions involved are not necessarily required by the embodiments of the present invention.

[0097] As for the method embodiment, since it is basically similar to the network architecture embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the network architecture embodiment.

[0098] In addition, an embodiment of the present invention further provides an electronic device, comprising: a processor, a memory, and a computer program stored in the memory and executable on the processor. When the computer program is executed by the processor, the various processes of the above-mentioned network communication method embodiment are implemented, and the same technical effect can be achieved. To avoid repetition, it will not be described here.

[0099] The embodiment of the present invention further provides a computer-readable storage medium, on which a computer program is stored, and when the computer program is executed by a processor, each process of the above-mentioned network communication method embodiment is implemented, and the same technical effect can be achieved. To avoid repetition, it is not repeated here. The computer-readable storage medium is, for example, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk.

[0100] The various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the various embodiments can be referenced to each other.

[0101] It should be understood by those skilled in the art that the embodiments of the embodiments of the present invention may be provided as methods, devices, or computer program products. Therefore, the embodiments of the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the embodiments of the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, EEPROM, Flash, and eMMC, etc.) containing computer-usable program codes.

[0102] The embodiments of the present invention are described with reference to the flowcharts and / or block diagrams of the methods, terminal devices (systems), and computer program products according to the embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of the processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing terminal device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing terminal device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1A device that provides the functions specified in a block or multiple blocks.

[0103] These computer program instructions may also be stored in a computer readable memory capable of directing a computer or other programmable data processing terminal device to operate in a specific manner, so that the instructions stored in the computer readable memory produce a manufactured product including an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0104] These computer program instructions can also be loaded onto a computer or other programmable data processing terminal device so that a series of operating steps are executed on the computer or other programmable terminal device to produce a computer-implemented process, thereby providing instructions for executing on the computer or other programmable terminal device to implement the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0105] Although the preferred embodiments of the present invention have been described, those skilled in the art may make additional changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the embodiments of the present invention.

[0106] Finally, it should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or terminal device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or terminal device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or terminal device including the elements.

[0107] The network communication architecture and the network communication method provided by the present invention are introduced in detail above. The principles and implementation methods of the present invention are explained in this article by using specific examples. The description of the above embodiments is only used to help understand the method of the present invention and its core idea. At the same time, for those skilled in the art, according to the idea of ​​the present invention, there will be changes in the specific implementation methods and application scopes. In summary, the content of this specification should not be understood as limiting the present invention.

Claims

1. A network communication architecture, characterized in that: The network communication architecture at least includes a public cloud computer room and a private cloud computer room communicating with the public cloud computer room; wherein, The public cloud computer room includes an SDN controller, a first dedicated line switch connected to the SDN controller for communication, a Spine switch connected to the first dedicated line switch for communication, a Leaf switch connected to the Spine switch for communication, and a first device connected to the SDN controller and the Leaf switch for communication, respectively; the private cloud computer room includes at least a second dedicated line switch, an access switch connected to the second dedicated line switch for communication, and a second device connected to the access switch for communication; Wherein, a BGP EVPN session connection is established between the SDN controller and the access switch, the SDN controller is used to send the first routing information corresponding to the public cloud computer room to the private cloud computer room through the BGP EVPN session connection, and the access switch is used to send the second routing information corresponding to the private cloud computer room to the public cloud computer room through the BGP EVPN session connection; Among them, the first routing information is used to guide the devices in the private cloud computer room to forward traffic so as to transmit the traffic to the first device; the second routing information is used to guide the devices in the public cloud computer room to forward traffic so as to transmit the traffic to the second device.

2. The network communication architecture according to claim 1, characterized in that: A first control connection is established between the SDN controller and the first dedicated line switch, and a second control connection is established between the SDN controller and the second dedicated line switch; The SDN controller sends first configuration information corresponding to the first dedicated line switch to the first dedicated line switch through the first control connection, and sends second configuration information corresponding to the second dedicated line switch to the second dedicated line switch through the second control connection.

3. The network communication architecture according to claim 2, characterized in that: The first configuration information and the second configuration information respectively include at least one of basic configuration, interface configuration, valn configuration, routing configuration, security configuration, Qos configuration, high availability configuration, and log and monitoring configuration.

4. The network communication architecture according to claim 1, 2 or 3, characterized in that: A layer 3 vxlan tunnel is established between the first dedicated line switch and the second dedicated line switch.

5. The network communication architecture according to claim 1, characterized in that: Establishing a third control connection between the SDN controller and the access switch; The SDN controller is used to send third configuration information corresponding to the access switch to the access switch through the third control connection.

6. The network communication architecture according to claim 5, characterized in that: The third configuration information at least includes configuration information related to the Ethernet virtual private network and configuration information related to the virtual extensible local area network tunnel; Among them, the configuration information related to the Ethernet virtual private network includes at least one of a neighbor IP address, a remote AS number, an update source interface, a multi-hop configuration, an activated address family, a virtual network instance, a routing identifier, a routing target, and a virtual tunnel endpoint address; the configuration information related to the virtual extensible LAN tunnel includes at least a VXLAN interface name, a VXLAN type, a remote IP address, a virtual network instance identifier, a flow table rule, a priority, an input port, an output port, and a VLAN tag processing.

7. A network communication method, characterized in that: The network communication architecture applied to any one of claims 1 to 6; wherein the first device includes at least a first virtual switch, the first virtual switch includes at least a first virtual machine, the second device includes at least a second virtual switch, the second virtual switch includes at least a second virtual machine, and the method includes: An EVPN neighbor relationship is established between the SDN controller and the access switch; The SDN controller obtains a virtual tunnel endpoint address corresponding to a first virtual switch located in a public cloud computer room, and encapsulates the virtual tunnel endpoint address into a Class 2 route; The SDN controller establishes a vxlan tunnel with the access switch based on the Class 2 routing; In response to detecting a first message transmitted by the second virtual machine, the second virtual switch adds a VLAN header to the first message and transmits the first message to the access switch; The access switch maps the VLAN header in the first message to a VXLAN header, and transmits the mapped first message to the second dedicated line switch; The second dedicated line switch adds a Layer 3 dedicated line VXLAN header to the mapped first message, and transmits the processed first message to the first dedicated line switch through the Layer 3 VXLAN tunnel; The first dedicated line switch removes the VXLAN header of the three-layer dedicated line, and transmits the removed first message to the first virtual switch; The first virtual switch removes the VXLAN header, obtains the first message, and transmits the first message to the first virtual machine.

8. The method according to claim 7, characterized in that The private cloud computer room also includes a physical server, the access switch is configured with a layer 2 port, and the method further includes: The access switch adds a VLAN header to the second message in response to detecting the second message transmitted by the physical server through the layer 2 port, and transmits the second message to the access switch; The access switch maps the VLAN header in the second message to a VXLAN header, and transmits the mapped second message to the second dedicated line switch; The second dedicated line switch adds a Layer 3 dedicated line VXLAN header to the mapped second message, and transmits the processed second message to the first dedicated line switch through the Layer 3 VXLAN tunnel; The first dedicated line switch removes the VXLAN header of the three-layer dedicated line, and transmits the removed second message to the first virtual switch; The first virtual switch removes the VXLAN header, obtains the second message, and transmits the second message to the first virtual machine.

9. An electronic device, characterized in that: It includes a processor, a communication interface, a memory and a communication bus, wherein the processor, the communication interface and the memory communicate with each other through the communication bus; The memory is used to store computer programs; The processor is used to implement the method according to any one of claims 7 or 8 when executing the program stored in the memory.

10. A computer-readable storage medium having instructions stored thereon, which, when executed by one or more processors, cause the processors to perform the method according to any one of claims 7 or 8.

Images