Operator management method and device of virtual network, electronic equipment and readable medium

Abstract

The embodiment of the invention provides an operator management method and device of a virtual network, electronic equipment and a readable medium, which are applied to a network controller, the virtual network is in communication connection with at least one network operator, and a priority relationship of a user for the at least one network operator is obtained; obtaining a communication connection state between the virtual network and a network operator through a load balancer; when the virtual network obtains first traffic sent by any network operator, determining a target network operator in the at least one network operator based on the first traffic, the communication connection state and the priority relationship; obtaining an address of a target network operator through a domain name system, and forming a target mapping session on the Internet gateway based on the address; the target mapping session is used for determining a target address of a second flow when the virtual network sends the second flow for the first flow; the target address is the address of the target network operator, providing a multi-operator link exit for the client and performing link health detection.

Description

Technical Field

[0001] The present invention relates to the field of network technology, and in particular to a virtual network operator management method, a virtual network operator management device, an electronic device and a computer-readable medium. Background Art

[0002] In the related art, in the private cloud environment of the cloud platform, when a user needs to bind an externally accessible EIP (Elastic IP, Elastic Internet Protocol address) to a virtual machine, only an EIP address with specific network attributes can be bound, such as an EIP address with the network plane attributes of China Telecom 163. This means that if users need to access the networks of other operators, such as China Mobile or China Unicom, they may not be able to directly use the EIP addresses with the network plane attributes of these operators. Summary of the invention

[0003] The embodiments of the present invention provide a method, device, electronic device and computer-readable storage medium for managing an operator of a virtual network to solve the problem that in a private cloud environment of a cloud platform, when a user needs to bind an externally accessible EIP (Elastic IP, Elastic Internet Protocol address) to a virtual machine, only an EIP address with specific network attributes can be bound. If the user needs to access the network of other operators, they may not be able to directly use the network plane attribute EIP addresses of these operators.

[0004] An embodiment of the present invention discloses a method for managing an operator of a virtual network, which is applied to a network controller of a virtual network, wherein the virtual network includes a domain name system, an Internet gateway, and a load balancer; the virtual network is communicatively connected with at least one network operator, and the method includes:

[0005] Obtaining a priority relationship of a user for the at least one network operator, and obtaining a communication connection status between the virtual network and the network operator through the load balancer;

[0006] When the virtual network obtains the first traffic sent by any of the network operators, determining a target network operator from among the at least one network operator based on the first traffic, the communication connection state and the priority relationship;

[0007] The address of the target network operator is obtained through the domain name system, and based on the address of the target network operator, a target mapping session is formed on the Internet gateway; the target mapping session is used to determine the target address of the second traffic when the virtual network sends the second traffic for the first traffic; the target address is the address of the target network operator.

[0008] Optionally, determining a target network operator from the at least one network operator based on the first traffic, the communication connection state, and the priority relationship includes:

[0009] Based on the first traffic, obtaining a to-be-processed network operator that sends the first traffic;

[0010] Based on the communication connection status, determining whether there is an abnormality in the communication connection between the virtual network and the to-be-processed network operator;

[0011] If so, a target network operator is determined from the at least one network operator based on the priority relationship.

[0012] Optionally, determining a target network operator from the at least one network operator based on the first traffic, the communication connection state, and the priority relationship includes:

[0013] If there is no abnormality in the communication connection between the virtual network and the network operator to be processed, the network operator to be processed is used as the target network operator.

[0014] Optionally, obtaining the communication connection status between the virtual network and the network operator through the load balancer includes:

[0015] configuring a virtual Internet Protocol address for the load balancer;

[0016] For any of the network operators, controlling the load balancer to use the virtual Internet Protocol address as a source address to send a connection request to the network operator;

[0017] Through the connection request, it is determined whether there is an abnormality in the communication connection between the virtual network and the network operator.

[0018] Optionally, judging, by the connection request, whether there is an abnormality in the communication connection between the virtual network and the network operator includes:

[0019] If the load balancer receives a response to the connection request sent by the network operator, it confirms that the communication connection between the virtual network and the network operator is normal;

[0020] If the load balancer does not receive a response to the connection request sent by the network operator, it is confirmed that there is an abnormality in the communication connection between the virtual network and the network operator.

[0021] Optionally, there is a preset private network address in the virtual network; and forming a target mapping session on the Internet gateway based on the address of the target network operator includes:

[0022] The target mapping session is formed on the Internet gateway by converting the private network address into the address of the target network operator.

[0023] Optionally, the virtual network is a private cloud network.

[0024] The embodiment of the present invention further discloses an operator management device for a virtual network, which is applied to a network controller of a virtual network, wherein the virtual network includes a domain name system, an Internet gateway, and a load balancer; the virtual network is communicatively connected with at least one network operator, and the device includes:

[0025] a priority relationship acquisition module, configured to acquire a priority relationship of a user with respect to the at least one network operator, and to acquire a communication connection status between the virtual network and the network operator through the load balancer;

[0026] a target network operator determination module, configured to determine a target network operator from among the at least one network operator based on the first traffic, the communication connection state and the priority relationship when the virtual network obtains the first traffic sent by any of the network operators;

[0027] An address acquisition module is used to obtain the address of the target network operator through the domain name system, and form a target mapping session on the Internet gateway based on the address of the target network operator; the target mapping session is used to determine the target address of the second traffic when the virtual network sends the second traffic for the first traffic; the target address is the address of the target network operator.

[0028] Optionally, the target network operator determination module includes:

[0029] A to-be-processed network operator acquisition submodule, configured to acquire, based on the first traffic, a to-be-processed network operator that sends the first traffic;

[0030] An abnormality judgment submodule, used for judging whether there is an abnormality in the communication connection between the virtual network and the to-be-processed network operator based on the communication connection state;

[0031] The target network operator determination submodule is configured to determine a target network operator from the at least one network operator based on the priority relationship, if any.

[0032] Optionally, the target network operator determination module includes:

[0033] The target network operator is used as a module to use the network operator to be processed as the target network operator if there is no abnormality in the communication connection between the virtual network and the network operator to be processed.

[0034] Optionally, the priority relationship acquisition module includes:

[0035] A configuration submodule, configured to configure a virtual Internet Protocol address for the load balancer;

[0036] a request sending submodule, for controlling the load balancer to send a connection request to any of the network operators using the virtual Internet Protocol address as a source address;

[0037] The abnormality judgment submodule is used to judge whether there is an abnormality in the communication connection between the virtual network and the network operator through the connection request.

[0038] Optionally, the abnormality judgment submodule includes:

[0039] a normal confirmation unit, configured to confirm that the communication connection between the virtual network and the network operator is normal if the load balancer receives a response to the connection request sent by the network operator;

[0040] An abnormality confirmation unit is used to confirm that there is an abnormality in the communication connection between the virtual network and the network operator if the load balancer does not receive a response to the connection request sent by the network operator.

[0041] Optionally, there is a preset private network address in the virtual network; the address acquisition module includes:

[0042] The target mapping session forming submodule is used to form the target mapping session on the Internet gateway by converting the private network address into the address of the target network operator.

[0043] Optionally, the virtual network is a private cloud network.

[0044] The embodiment of the present invention further discloses an electronic device, comprising a processor, a communication interface, a memory and a communication bus, wherein the processor, the communication interface and the memory communicate with each other via the communication bus;

[0045] The memory is used to store computer programs;

[0046] The processor is used to implement the method described in the embodiment of the present invention when executing the program stored in the memory.

[0047] The embodiment of the present invention further discloses one or more computer-readable media on which instructions are stored. When executed by one or more processors, the processors are enabled to execute the method described in the embodiment of the present invention.

[0048] The embodiments of the present invention include the following advantages:

[0049] In an embodiment of the present invention, a virtual network includes a domain name system, an Internet gateway and a load balancer; the virtual network is connected to at least one network operator. The priority relationship of the user for at least one network operator is obtained, and the communication connection status between the virtual network and the network operator is obtained through the load balancer; when the virtual network obtains the first traffic sent by any network operator, the target network operator is determined in at least one network operator based on the first traffic, the communication connection status and the priority relationship; the address of the target network operator is obtained through the domain name system, and a target mapping session is formed on the Internet gateway based on the address of the target network operator; the target mapping session is used to determine the target address of the second traffic when the virtual network sends the second traffic for the first traffic; the target address is the address of the target network operator. A solution is proposed in which a multi-operator link exit is provided to customers in a virtual network scenario and link health detection is performed, and customers can choose the weight of the operator exit by themselves, so as to provide customers with a solution of multi-operator exit link reliability. BRIEF DESCRIPTION OF THE DRAWINGS

[0050] Figure 1 It is a flowchart of the steps of a virtual network operator management method provided in an embodiment of the present invention;

[0051] Figure 2 is a schematic diagram of a virtual network provided in an embodiment of the present invention;

[0052] Figure 3 is a schematic diagram of multi-egress deployment of an operator provided in an embodiment of the present invention;

[0053] Figure 4 is a schematic diagram of a network element node provided in an embodiment of the present invention;

[0054] Figure 5 It is a structural block diagram of an operator management device for a virtual network provided in an embodiment of the present invention;

[0055] Figure 6 is a block diagram of an electronic device provided in an embodiment of the present invention;

[0056] Figure 7 is a schematic diagram of a computer-readable medium provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0057] In order to make the above-mentioned objects, features and advantages of the present invention more obvious and easy to understand, the present invention is further described in detail below with reference to the accompanying drawings and specific embodiments.

[0058] To facilitate understanding of the technical solutions and technical effects of the embodiments of the present invention, the prior art of the present invention is briefly described below.

[0059] In the related technologies, the cloud platform has the ability to layout resources in multiple AZs (Availability Zones), supports ultra-large-scale clusters (a single AZ can accommodate more than 10,000 servers), and realizes deep collaboration of software and hardware resources. The core functions of the resource pool can meet the needs of ultra-large-scale, high-performance, secure and reliable cloud services. The resource pool management and scheduling capabilities of the IaaS (Infrastructure as a Service) platform have been further enhanced to cope with the network construction and multi-AZ architecture requirements of ultra-large-scale data centers. The resource pool now has the ability to manage a network with a scale of 5,000 nodes. Each AZ can support the operating scale of 5,000 servers, and the overall scale of the Region has increased by more than 10 times, fully meeting the business needs of users in terms of multi-active deployment, disaster recovery and other aspects of two-site three-center deployment.

[0060] The cloud platform has been fully commercialized and deployed in the actual network environment. As an independent and controllable cloud infrastructure under the strategy of "one cloud with multiple forms and one cloud with multiple cores", it provides a high-performance, high-availability and high-reliability basic cloud network foundation.

[0061] However, there are at least the following problems in the cloud platform:

[0062] First, in the private cloud environment of the cloud platform, when users need to bind an externally accessible EIP (Elastic IP, Elastic Internet Protocol address) to a virtual machine, they can only bind an EIP address with specific network attributes, such as the EIP address of the 163 network plane attribute of China Telecom. This means that if users need to access the networks of other operators, such as China Mobile or China Unicom, they may not be able to directly use the EIP addresses of the network plane attributes of these operators.

[0063] Second, when the cloud platform is connected to multiple operator networks, the cloud platform lacks a mechanism to automatically handle problems when a certain operator link occurs.

[0064] Third, in the cloud platform, it is necessary to select the optimal path for traffic, which usually includes selecting the best operator network among multiple operator networks connected to the cloud platform. In public cloud services, routes are usually learned by establishing BGP (Border Gateway Protocol) neighbor relationships with multiple operators to achieve the optimal path selection for traffic. However, for private cloud users, the cost of purchasing links that can establish BGP neighbor relationships is high.

[0065] Reference Figure 1 , shows a flowchart of a method for managing an operator of a virtual network provided in an embodiment of the present invention, which is applied to a network controller of a virtual network, wherein the virtual network includes a domain name system, an Internet gateway, and a load balancer; the virtual network is connected to at least one network operator in communication, and specifically may include the following steps:

[0066] Step 101, obtaining a priority relationship of a user for the at least one network operator, and obtaining a communication connection status between the virtual network and the network operator through the load balancer;

[0067] In the embodiment of the present invention, the network controller is an SDN (Software-Defined Networking) controller. The virtual network controlled by the SDN controller is divided into three layers.

[0068] Reference Figure 2 , showing a schematic diagram of a virtual network provided in an embodiment of the present invention. The virtual network is divided into three layers. The first layer is the TC (Traffic Control) area, which is responsible for accessing the external network including external network traffic, NAS (Network Attached Storage) traffic, dedicated line POP (Point of Presence), cloud-to-cloud high-speed equipment, VPN (Virtual Private Network) equipment, etc. These devices are all multi-active access. The network elements deployed in this area are AGW (Access Gateway) and SGW (Service Gateway). AGW is responsible for publishing public network CIDR (Classless Inter-Domain Routing), and SGW is responsible for speed limiting. Figure 2It also includes DCGW (Data Center Gateway), CGW (Customer Gateway), VPNGW (Virtual Private Network Gateway), and BLeaf (Border Leaf). The second layer is the network element service area. The deployed service area in this area provides tenants with 3-layer to 7-layer network services, including dedicated lines, IGW (Internet Gateway), NAT (Network Address Translation), VPN (Virtual Private Network) access, LB (Load Balancer), etc. The third layer is the resource access layer, which is responsible for providing virtual network access services for VMs, containers, and bare metal. The network element types are DVR and SmartNIC. VM is a computing node, bare metal is bare metal, and DVR is OVS (open source virtual switch).

[0069] In an embodiment of the present invention, the virtual network is connected to at least one network operator for communication. Figure 3 , shows a schematic diagram of the multi-exit deployment of operators provided in an embodiment of the present invention. Multiple operator export physical lines are connected to the core switch, and each operator provides an interface IP address for health detection of each link and as the entry IP address for traffic entry, such as China Telecom 10.1.1.1, China Unicom 10.1.1.2, and China Mobile 10.1.1.3. The network element node is the node in the network service layer.

[0070] In an embodiment of the present invention, the virtual network includes a domain name system, an Internet gateway, and a load balancer. Figure 4 , shows a schematic diagram of a network element node provided in an embodiment of the present invention. The network element nodes included in the virtual network mainly include IGW (Internet Gateway), LB (Load Balancer) and DNS (Domain Name System).

[0071] In the embodiment of the present invention, the network controller may obtain the priority relationship of the user to at least one network operator, and obtain the communication connection status between the virtual network and the network operator through the load balancer.

[0072] In some embodiments of the present invention, obtaining the communication connection status between the virtual network and the network operator through the load balancer includes:

[0073] configuring a virtual Internet Protocol address for the load balancer;

[0074] For any of the network operators, controlling the load balancer to use the virtual Internet Protocol address as a source address to send a connection request to the network operator;

[0075] Through the connection request, it is determined whether there is an abnormality in the communication connection between the virtual network and the network operator.

[0076] In the embodiment of the present invention, a virtual IP address, such as 20.1.1.1, is started on the load balancer, and then the TCP health detection of the LB is started using the virtual IP address and the interface address of the operator. Specifically, the load balancer uses the configured virtual IP address (20.1.1.1) as the source address to send a TCP connection request to the interface address provided by the operator to detect the health of the link and determine whether there is an abnormality in the communication connection.

[0077] In some embodiments of the present invention, judging whether there is an abnormality in the communication connection between the virtual network and the network operator through the connection request includes:

[0078] If the load balancer receives a response to the connection request sent by the network operator, it confirms that the communication connection between the virtual network and the network operator is normal;

[0079] If the load balancer does not receive a response to the connection request sent by the network operator, it is confirmed that there is an abnormality in the communication connection between the virtual network and the network operator.

[0080] In an embodiment of the present invention, if the load balancer receives a response to the TCP connection request sent by the network operator, it is confirmed that the communication connection between the virtual network and the network operator is normal; if the load balancer does not receive a response to the TCP connection request sent by the network operator, it is confirmed that there is an abnormality in the communication connection between the virtual network and the network operator.

[0081] Step 102, when the virtual network obtains the first traffic sent by any of the network operators, based on the first traffic, the communication connection state and the priority relationship, determining a target network operator from the at least one network operator;

[0082] In an embodiment of the present invention, when the virtual network obtains the first traffic sent by any network operator, the network controller can determine the target network operator from at least one network operator based on the first traffic, the communication connection state and the priority relationship.

[0083] In some embodiments of the present invention, determining a target network operator from among the at least one network operator based on the first traffic, the communication connection state, and the priority relationship includes:

[0084] Based on the first traffic, obtaining a to-be-processed network operator that sends the first traffic;

[0085] Based on the communication connection status, determining whether there is an abnormality in the communication connection between the virtual network and the to-be-processed network operator;

[0086] If so, a target network operator is determined from the at least one network operator based on the priority relationship.

[0087] In an embodiment of the present invention, the network controller may obtain the to-be-processed network operator that sends the first traffic. Based on the communication connection state, it is determined whether there is an abnormality in the communication connection between the virtual network and the to-be-processed network operator. If there is, a target network operator is determined from at least one network operator based on a priority relationship.

[0088] In some embodiments of the present invention, determining a target network operator from among the at least one network operator based on the first traffic, the communication connection state, and the priority relationship comprises:

[0089] If there is no abnormality in the communication connection between the virtual network and the network operator to be processed, the network operator to be processed is used as the target network operator.

[0090] In the embodiment of the present invention, if there is no abnormality in the communication connection between the virtual network and the network operator to be processed, the network controller may use the network operator to be processed as the target network operator.

[0091] In the embodiment of the present invention, for the second traffic, it is necessary to perform NAT address conversion on the IGW network element for each operator's egress, for example, deploy the IP address segment of the network operator of the egress according to the following table.

[0092] Operators Egress address segment telecommunications 100.0.0.0 / 24 China Unicom 100.0.1.0 / 24 move 100.0.2.0 / 24

[0093] When the second traffic is sent out, the corresponding NAT rules are sent to the IGW through the SDN controller to convert the private network address in the cloud into the corresponding operator's export address, so that the traffic can use multiple operator exports, and which export is prioritized. The NAT mapping session will be formed on the IGW based on which export the user traffic comes from. In this way, when the traffic goes out, the corresponding operator export will be selected according to this session. When the traffic goes out actively, the routing policy weights for the three exports can be configured on the SDN controller, and then this routing policy can be sent down to the IGW network element through the SDN controller. The IGW network element can send down the priority of the NAT address mapping, so that the intranet traffic can choose which operator export to go first according to different strategies, and other exports can also be used as backup.

[0094] Step 103: Acquire the address of the target network operator through the domain name system, and form a target mapping session on the Internet gateway based on the address of the target network operator; the target mapping session is used to determine the target address of the second traffic when the virtual network sends the second traffic for the first traffic; the target address is the address of the target network operator.

[0095] In an embodiment of the present invention, when the first traffic enters the resource pool, the first traffic will first be directed to the DNS network element. The customer can configure the DNS domain name resolution on the SDN controller to determine which domain names need to be resolved to provide services in the cloud, and the DNS network element will perform domain name resolution based on the traffic. The SDN controller can monitor the traffic from which operator link it comes in. In this way, the DNS server will resolve the domain name to the IP address of the corresponding target operator's export address segment. When the IGW forms a NAT session, a session is directly created for the target operator's export IP address and the intranet address of the first traffic, which can guide the second traffic to find the corresponding target operator's export link when forwarding it out of the cloud.

[0096] When a link exit of an operator fails, the LB health check will immediately discover the TCP health check session interruption and report this message to the SDN controller. At this time, for the incoming traffic, the SDN controller will immediately notify the DNS server to switch the link address for domain name address resolution, and select the highest priority link exit with normal health check for DNS domain name resolution according to the customer configuration. At the same time, the SDN controller notifies the IGW to change the existing NAT session information and form a new NAT session table entry for the exit link, so that the outgoing traffic can also be switched to the exit link without failure.

[0097] In some embodiments of the present invention, there is a preset private network address in the virtual network; and forming a target mapping session on the Internet gateway based on the address of the target network operator includes:

[0098] The target mapping session is formed on the Internet gateway by converting the private network address into the address of the target network operator.

[0099] In the embodiment of the present invention, there is a preset private network address in the virtual network, and a target mapping session can be formed on the Internet gateway by converting the private network address into the address of the target network operator.

[0100] In some embodiments of the present invention, the virtual network is a private cloud network.

[0101] In an embodiment of the present invention, a virtual network includes a domain name system, an Internet gateway and a load balancer; the virtual network is connected to at least one network operator. The priority relationship of the user for at least one network operator is obtained, and the communication connection status between the virtual network and the network operator is obtained through the load balancer; when the virtual network obtains the first traffic sent by any network operator, the target network operator is determined in at least one network operator based on the first traffic, the communication connection status and the priority relationship; the address of the target network operator is obtained through the domain name system, and a target mapping session is formed on the Internet gateway based on the address of the target network operator; the target mapping session is used to determine the target address of the second traffic when the virtual network sends the second traffic for the first traffic; the target address is the address of the target network operator. A solution is proposed in which a multi-operator link exit is provided to customers in a virtual network scenario and link health detection is performed, and customers can choose the weight of the operator exit by themselves, so as to provide customers with a solution of multi-operator exit link reliability.

[0102] It should be noted that, for the sake of simplicity, the method embodiments are described as a series of action combinations, but those skilled in the art should be aware that the embodiments of the present invention are not limited by the order of the actions described, because according to the embodiments of the present invention, certain steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in the specification are all preferred embodiments, and the actions involved are not necessarily required by the embodiments of the present invention.

[0103] Reference Figure 5 , shows a structural block diagram of an operator management device for a virtual network provided in an embodiment of the present invention, which is applied to a network controller of a virtual network, wherein the virtual network includes a domain name system, an Internet gateway, and a load balancer; the virtual network is connected to at least one network operator in communication, and specifically may include the following modules:

[0104] The priority relationship acquisition module 501 is used to obtain the priority relationship of the user for the at least one network operator, and obtain the communication connection status between the virtual network and the network operator through the load balancer;

[0105] A target network operator determination module 502, configured to determine a target network operator from among the at least one network operator based on the first traffic, the communication connection state and the priority relationship when the virtual network obtains the first traffic sent by any of the network operators;

[0106] The address acquisition module 503 is used to obtain the address of the target network operator through the domain name system, and form a target mapping session on the Internet gateway based on the address of the target network operator; the target mapping session is used to determine the target address of the second traffic when the virtual network sends the second traffic for the first traffic; the target address is the address of the target network operator.

[0107] In an optional embodiment of the present invention, the target network operator determination module includes:

[0108] A to-be-processed network operator acquisition submodule, configured to acquire, based on the first traffic, a to-be-processed network operator that sends the first traffic;

[0109] An abnormality judgment submodule, used for judging whether there is an abnormality in the communication connection between the virtual network and the to-be-processed network operator based on the communication connection state;

[0110] The target network operator determination submodule is configured to determine a target network operator from the at least one network operator based on the priority relationship, if any.

[0111] In an optional embodiment of the present invention, the target network operator determination module includes:

[0112] The target network operator is used as a module to use the network operator to be processed as the target network operator if there is no abnormality in the communication connection between the virtual network and the network operator to be processed.

[0113] In an optional embodiment of the present invention, the priority relationship acquisition module includes:

[0114] A configuration submodule, configured to configure a virtual Internet Protocol address for the load balancer;

[0115] a request sending submodule, for controlling the load balancer to send a connection request to any of the network operators using the virtual Internet Protocol address as a source address;

[0116] The abnormality judgment submodule is used to judge whether there is an abnormality in the communication connection between the virtual network and the network operator through the connection request.

[0117] In an optional embodiment of the present invention, the abnormality judgment submodule includes:

[0118] a normal confirmation unit, configured to confirm that the communication connection between the virtual network and the network operator is normal if the load balancer receives a response to the connection request sent by the network operator;

[0119] An abnormality confirmation unit is used to confirm that there is an abnormality in the communication connection between the virtual network and the network operator if the load balancer does not receive a response to the connection request sent by the network operator.

[0120] In an optional embodiment of the present invention, there is a preset private network address in the virtual network; the address acquisition module includes:

[0121] The target mapping session forming submodule is used to form the target mapping session on the Internet gateway by converting the private network address into the address of the target network operator.

[0122] In an optional embodiment of the present invention, the virtual network is a private cloud network.

[0123] As for the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0124] In addition, an embodiment of the present invention further provides an electronic device, such as Figure 6 As shown, it includes a processor 601, a communication interface 602, a memory 603 and a communication bus 604, wherein the processor 601, the communication interface 602, and the memory 603 communicate with each other through the communication bus 604.

[0125] Memory 603, used for storing computer programs;

[0126] The processor 601 is used to execute the program stored in the memory 603 to implement the following steps:

[0127] Obtaining a priority relationship of a user for the at least one network operator, and obtaining a communication connection status between the virtual network and the network operator through the load balancer;

[0128] When the virtual network obtains the first traffic sent by any of the network operators, determining a target network operator from among the at least one network operator based on the first traffic, the communication connection state and the priority relationship;

[0129] The address of the target network operator is obtained through the domain name system, and based on the address of the target network operator, a target mapping session is formed on the Internet gateway; the target mapping session is used to determine the target address of the second traffic when the virtual network sends the second traffic for the first traffic; the target address is the address of the target network operator.

[0130] In an optional embodiment of the present invention, determining a target network operator from the at least one network operator based on the first traffic, the communication connection state, and the priority relationship includes:

[0131] Based on the first traffic, obtaining a to-be-processed network operator that sends the first traffic;

[0132] Based on the communication connection status, determining whether there is an abnormality in the communication connection between the virtual network and the to-be-processed network operator;

[0133] If so, a target network operator is determined from the at least one network operator based on the priority relationship.

[0134] In an optional embodiment of the present invention, determining a target network operator from among the at least one network operator based on the first traffic, the communication connection state, and the priority relationship includes:

[0135] If there is no abnormality in the communication connection between the virtual network and the network operator to be processed, the network operator to be processed is used as the target network operator.

[0136] In an optional embodiment of the present invention, obtaining the communication connection status between the virtual network and the network operator through the load balancer includes:

[0137] configuring a virtual Internet Protocol address for the load balancer;

[0138] For any of the network operators, controlling the load balancer to use the virtual Internet Protocol address as a source address to send a connection request to the network operator;

[0139] Through the connection request, it is determined whether there is an abnormality in the communication connection between the virtual network and the network operator.

[0140] In an optional embodiment of the present invention, judging whether there is an abnormality in the communication connection between the virtual network and the network operator through the connection request includes:

[0141] If the load balancer receives a response to the connection request sent by the network operator, it confirms that the communication connection between the virtual network and the network operator is normal;

[0142] If the load balancer does not receive a response to the connection request sent by the network operator, it is confirmed that there is an abnormality in the communication connection between the virtual network and the network operator.

[0143] In an optional embodiment of the present invention, there is a preset private network address in the virtual network; and forming a target mapping session on the Internet gateway based on the address of the target network operator includes:

[0144] The target mapping session is formed on the Internet gateway by converting the private network address into the address of the target network operator.

[0145] In an optional embodiment of the present invention, the virtual network is a private cloud network.

[0146] The communication bus mentioned in the above terminal can be a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus, etc. The communication bus can be divided into an address bus, a data bus, a control bus, etc. For ease of representation, only one thick line is used in the figure, but it does not mean that there is only one bus or one type of bus.

[0147] The communication interface is used for communication between the above terminal and other devices.

[0148] The memory may include a random access memory (RAM) or a non-volatile memory, such as at least one disk memory. Optionally, the memory may also be at least one storage device located away from the aforementioned processor.

[0149] The above-mentioned processor can be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it can also be a digital signal processor (DSP), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components.

[0150] like Figure 7 As shown, in another embodiment provided by the present invention, a computer-readable storage medium 701 is also provided, in which instructions are stored. When the computer-readable storage medium 701 is run on a computer, the computer executes a virtual network operator management method described in the above embodiment.

[0151] In another embodiment of the present invention, a computer program product including instructions is provided. When the computer program product is executed on a computer, the computer executes the operator management method of a virtual network described in the above embodiment.

[0152] In the above embodiments, it can be implemented in whole or in part by software, hardware, firmware or any combination thereof. When implemented by software, it can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, the process or function described in the embodiment of the present invention is generated in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions can be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium. For example, the computer instructions can be transmitted from a website site, computer, server or data center to another website site, computer, server or data center by wired (e.g., coaxial cable, optical fiber, digital subscriber line (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.). The computer-readable storage medium can be any available medium that a computer can access or a data storage device such as a server or data center that includes one or more available media integrated. The available medium can be a magnetic medium (e.g., a floppy disk, a hard disk, a tape), an optical medium (e.g., a DVD), or a semiconductor medium (e.g., a solid-state hard disk Solid State Disk (SSD)), etc.

[0153] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or device including the elements.

[0154] Each embodiment in this specification is described in a related manner, and the same or similar parts between the embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the system embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0155] The above description is only a preferred embodiment of the present invention and is not intended to limit the protection scope of the present invention. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention are included in the protection scope of the present invention.

Claims

1. A method for managing a virtual network operator, characterized in that: A network controller applied to a virtual network, the virtual network comprising a domain name system, an Internet gateway, and a load balancer; the virtual network is communicatively connected to at least one network operator, the method comprising: Obtaining a priority relationship of a user for the at least one network operator, and obtaining a communication connection status between the virtual network and the network operator through the load balancer; When the virtual network obtains the first traffic sent by any of the network operators, determining a target network operator from among the at least one network operator based on the first traffic, the communication connection state and the priority relationship; The address of the target network operator is obtained through the domain name system, and based on the address of the target network operator, a target mapping session is formed on the Internet gateway; the target mapping session is used to determine the target address of the second traffic when the virtual network sends the second traffic for the first traffic; the target address is the address of the target network operator.

2. The method according to claim 1, characterized in that The determining a target network operator from the at least one network operator based on the first traffic, the communication connection state, and the priority relationship includes: Based on the first traffic, obtaining a to-be-processed network operator that sends the first traffic; Based on the communication connection status, determining whether there is an abnormality in the communication connection between the virtual network and the to-be-processed network operator; If so, a target network operator is determined from the at least one network operator based on the priority relationship.

3. The method according to claim 2, characterized in that The determining a target network operator from the at least one network operator based on the first traffic, the communication connection state, and the priority relationship comprises: If there is no abnormality in the communication connection between the virtual network and the network operator to be processed, the network operator to be processed is used as the target network operator.

4. The method according to claim 1, characterized in that: The obtaining, through the load balancer, the communication connection status between the virtual network and the network operator comprises: configuring a virtual Internet Protocol address for the load balancer; For any of the network operators, controlling the load balancer to use the virtual Internet Protocol address as a source address to send a connection request to the network operator; Through the connection request, it is determined whether there is an abnormality in the communication connection between the virtual network and the network operator.

5. The method according to claim 4, characterized in that The determining, through the connection request, whether there is an abnormality in the communication connection between the virtual network and the network operator includes: If the load balancer receives a response to the connection request sent by the network operator, it confirms that the communication connection between the virtual network and the network operator is normal; If the load balancer does not receive a response to the connection request sent by the network operator, it is confirmed that there is an abnormality in the communication connection between the virtual network and the network operator.

6. The method according to claim 1, characterized in that There is a preset private network address in the virtual network; and forming a target mapping session on the Internet gateway based on the address of the target network operator includes: The target mapping session is formed on the Internet gateway by converting the private network address into the address of the target network operator.

7. The method according to claim 1, characterized in that The virtual network is a private cloud network.

8. A virtual network operator management device, characterized in that: A network controller applied to a virtual network, the virtual network including a domain name system, an Internet gateway, and a load balancer; the virtual network is communicatively connected to at least one network operator, the device comprising: a priority relationship acquisition module, configured to acquire a priority relationship of a user with respect to the at least one network operator, and to acquire a communication connection status between the virtual network and the network operator through the load balancer; a target network operator determination module, configured to determine a target network operator from among the at least one network operator based on the first traffic, the communication connection state and the priority relationship when the virtual network obtains the first traffic sent by any of the network operators; An address acquisition module is used to obtain the address of the target network operator through the domain name system, and form a target mapping session on the Internet gateway based on the address of the target network operator; the target mapping session is used to determine the target address of the second traffic when the virtual network sends the second traffic for the first traffic; the target address is the address of the target network operator.

9. An electronic device, characterized in that: It includes a processor, a communication interface, a memory and a communication bus, wherein the processor, the communication interface and the memory communicate with each other through the communication bus; The memory is used to store computer programs; The processor is used to implement the method according to any one of claims 1 to 7 when executing the program stored in the memory.

10. One or more computer-readable media having instructions stored thereon, which when executed by one or more processors cause the processors to perform the method according to any one of claims 1 to 7.

Images