Method for managing floating IP under distributed gateway based on OVN

Abstract

The invention provides a method for managing a floating IP under a distributed gateway based on an OVN, and the method comprises the steps: when a virtual machine configures the floating IP, the virtual machine sends an ARP response message to a local gateway, and maps and updates the floating IP and an MAC address of the local gateway to an ARP table of the local gateway. And copying the ARP response message corresponding to the floating IP through a multicast management mechanism, performing general network virtualization packaging, and forwarding the packaged floating IP to all distributed gateways in the virtual private cloud. And each distributed gateway receiving the ARP response message updates a corresponding ARP table according to the ARP response message, so that MAC addresses of floating IPs in the ARP tables of all the distributed gateways are consistent. According to the method provided by the invention, the floating IP under the distributed gateway can be efficiently managed in a large-scale cloud computing environment.

Description

Technical Field

[0001] The present application relates to the field of data processing technology, and in particular to a method for managing floating IPs under a distributed gateway based on OVN. Background Art

[0002] With the continuous development of science and technology, network technology has also made great progress. OVN is a network virtualization solution based on OVS (Open Virtual Switch), which is widely used in SDN networks, especially for the construction of VPC (Virtual Private Cloud) networks. Floating IP (VIP) is often used in high-availability architectures to ensure business continuity by migrating IP addresses from one virtual machine to another. However, in an OVN-based distributed gateway environment, when the VIP is migrated, how to synchronize the ARP table information in all distributed gateways becomes a problem. Traditional centralized database solutions have performance bottlenecks and cannot meet the needs of large-scale cloud computing environments.

[0003] Therefore, how to efficiently manage floating IPs under distributed gateways in a large-scale cloud computing environment has become a technical problem that technical personnel in this field urgently need to solve. Summary of the invention

[0004] Based on the above problems, the present application provides a management method for floating IP under a distributed gateway based on OVN, which can efficiently manage floating IP under a distributed gateway in a large-scale cloud computing environment.

[0005] The present application provides a method for managing floating IP under a distributed gateway based on OVN, the method comprising the following steps:

[0006] When a virtual machine is configured with a floating IP, the virtual machine sends an ARP reply message to the local gateway, and updates the mapping between the floating IP and the MAC address of the local gateway into the ARP table of the local gateway;

[0007] The ARP reply message corresponding to the floating IP is copied through the multicast management mechanism, and a general network virtualization encapsulation is performed, and the encapsulated floating IP is forwarded to all distributed gateways in the virtual private cloud;

[0008] Each distributed gateway that receives the ARP reply message updates the corresponding ARP table according to the ARP reply message, so that the MAC addresses of the floating IPs in the ARP tables of all the distributed gateways are consistent.

[0009] In a possible implementation manner, the ARP reply message is sent in a manner including:

[0010] When the floating IP is assigned to the first virtual machine, the first virtual machine sends a unicast ARP reply message to the local gateway, the target MAC address of the unicast ARP reply message is the local gateway MAC address, and the source MAC address of the unicast ARP reply message is the MAC address of the first virtual machine;

[0011] When the floating IP is switched, the ARP reply message is sent by broadcasting, and the ARP reply message notifies the gateways and virtual machines in all subnets to update the MAC address of the floating IP to the switched MAC address.

[0012] In a possible implementation manner, it is characterized in that the general network virtualization encapsulation is specifically used for:

[0013] The ARP reply message is transmitted between different physical servers. The universal network virtualization encapsulation carries the subnet information of the VPC. The ARP reply message is routed to the correct subnet through the subnet information. The server that receives the ARP reply message finds the corresponding subnet and gateway according to the tunnel information in the message, thereby updating the ARP table.

[0014] In a possible implementation manner, each distributed gateway that receives the ARP reply message updates a corresponding ARP table according to the ARP reply message, including:

[0015] The distributed gateway receiving the ARP reply message identifies a gateway interface index according to the tunnel information in the ARP reply message;

[0016] The ARP table is updated according to the gateway interface index.

[0017] A management device for a floating IP under a distributed gateway based on OVN, the device comprising:

[0018] A sending module, used for, when a virtual machine is configured with a floating IP, the virtual machine sends an ARP reply message to a local gateway, and updates the mapping between the floating IP and the MAC address of the local gateway into the ARP table of the local gateway;

[0019] A forwarding module, used to copy the ARP reply message corresponding to the floating IP through the multicast management mechanism, perform universal network virtualization encapsulation, and forward the encapsulated floating IP to all distributed gateways in the virtual private cloud;

[0020] The updating module is used for each distributed gateway that receives the ARP reply message to update the corresponding ARP table according to the ARP reply message, so that the MAC addresses of the floating IPs in the ARP tables of all the distributed gateways are consistent.

[0021] In a possible implementation, the sending module is specifically configured to:

[0022] When the floating IP is assigned to the first virtual machine, the first virtual machine sends a unicast ARP reply message to the local gateway, the target MAC address of the unicast ARP reply message is the local gateway MAC address, and the source MAC address of the unicast ARP reply message is the MAC address of the first virtual machine;

[0023] When the floating IP is switched, the ARP reply message is sent by broadcasting, and the ARP reply message notifies the gateways and virtual machines in all subnets to update the MAC address of the floating IP to the switched MAC address.

[0024] The present application also provides an electronic device, the electronic device comprising a processor and a memory:

[0025] The memory is used to store a computer program and transmit the computer program to the processor;

[0026] The processor is used to execute the steps of the above-mentioned method for managing floating IP under a distributed gateway based on OVN according to the instructions in the computer program.

[0027] The present application also provides a computer-readable storage medium, which is used to store a computer program. When the computer program is executed by an electronic device, the steps of the above-mentioned method for managing floating IP under a distributed gateway based on OVN are implemented.

[0028] Compared with the prior art, this application has the following beneficial effects:

[0029] In the traditional distributed gateway architecture, the migration of floating IP often leads to inconsistent ARP table information between different servers or gateways, thus affecting the normal access of the business. Especially when the floating IP is switched, only the local gateway or certain virtual machines can update the ARP table in time, resulting in the inability of other distributed gateways to synchronously update the ARP information, and then access interruption or packet loss occurs. The management method of floating IP under the distributed gateway based on OVN provided in the present application ensures that the ARP reply message can be received and the ARP table is updated in time by all distributed gateways through the multicast management mechanism, thereby maintaining the consistency of the MAC address of the floating IP in the ARP table of each gateway, greatly improving the stability and reliability of the network. In the traditional distributed gateway architecture, when the floating IP is migrated to a new virtual machine, it is usually necessary to rely on the virtual machine to actively send free ARP messages or other complex mechanisms to notify other gateways, resulting in a complex and untimely ARP synchronization process, which seriously affects the switching efficiency of the floating IP. In contrast, the present invention adopts a multicast management mechanism and a universal network virtualization encapsulation, which can enable ARP reply messages to be quickly and widely propagated to all distributed gateways, ensuring that the business after the floating IP switch can return to normal in a very short time, avoiding business interruption. Although the traditional centralized database synchronization solution can ensure the update consistency of the ARP table, it limits the scalability of the VPC network due to the existence of performance bottlenecks, and when the centralized database fails, it may cause large-scale network failures. The present invention adopts a distributed multicast mechanism and a universal network virtualization encapsulation technology, which not only avoids the performance bottleneck of the centralized database, but also can efficiently and stably synchronize ARP information in a large-scale distributed network environment, support larger-scale cloud computing environment deployment, and improve the fault tolerance of the system. BRIEF DESCRIPTION OF THE DRAWINGS

[0030] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative labor.

[0031] Figure 1 A flowchart of a method for managing a floating IP under a distributed gateway based on OVN provided in an embodiment of the present application;

[0032] Figure 2 A schematic diagram of the device structure of a floating IP under an OVN-based distributed gateway provided in an embodiment of the present application. DETAILED DESCRIPTION

[0033] As described above, OVN is a network virtualization solution based on OVS (Open Virtual Switch), which is widely used in SDN networks, especially for building VPC (Virtual Private Cloud) networks. Floating IP (VIP) is often used in high-availability architectures to ensure business continuity by migrating IP addresses from one virtual machine to another. However, in an OVN-based distributed gateway environment, when a VIP is migrated, how to synchronize the ARP table information in all distributed gateways becomes a problem. Traditional centralized database solutions have performance bottlenecks and cannot meet the needs of large-scale cloud computing environments.

[0034] In order to enable those skilled in the art to better understand the solution of the present application, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0035] It is understandable that the method provided in the present application can be applied to a processing device, which is a processing device that can copy the ARP reply message corresponding to the floating IP through a multicast management mechanism, for example, a terminal device or server that can copy the ARP reply message corresponding to the floating IP through a multicast management mechanism. The method provided in the present application can be executed independently by a terminal device or a server, and can also be applied to a network scenario in which a terminal device and a server communicate, and is executed by the cooperation of a terminal device and a server. Among them, the terminal device can be a computer, a mobile phone and other devices. The server can be understood as an application server or a Web server. In actual deployment, the server can be an independent server or a cluster server.

[0036] Figure 1 A flowchart of a method for managing a floating IP under a distributed gateway based on OVN provided in this application, the method comprising the following steps:

[0037] S101: When a virtual machine is configured with a floating IP, the virtual machine sends an ARP reply message to a local gateway, and updates the mapping between the floating IP and the MAC address of the local gateway into the ARP table of the local gateway.

[0038] When the virtual machine configures a floating IP, the virtual machine sends an ARP reply message to the local gateway, and then the virtual machine updates the mapping between the floating IP and the MAC address of the local gateway into the ARP table of the local gateway.

[0039] The virtual machine can ensure that the local gateway can correctly identify and associate the virtual machine's floating IP with its MAC address. When configuring a floating IP, the virtual machine first sends an ARP reply message to its local gateway to inform the local gateway of the MAC address corresponding to its floating IP. In this way, the local gateway's ARP table will be updated, so that network traffic sent to the floating IP can be correctly forwarded.

[0040] In one possible implementation, when the floating IP is assigned to the first virtual machine, the first virtual machine sends a unicast ARP reply message to the local gateway. The destination MAC address of the unicast ARP reply message is the MAC address of the gateway, and the source MAC address is the MAC address of the virtual machine. At this time, the ARP message is unicast, ensuring that only the local gateway receives the message and updates the ARP table.

[0041] S102: The ARP reply message corresponding to the floating IP is copied through the multicast management mechanism, and is encapsulated by general network virtualization, and the encapsulated floating IP is forwarded to all distributed gateways in the virtual private cloud.

[0042] The virtual machine copies the ARP reply message corresponding to the floating IP through the multicast management mechanism, and then the virtual machine performs general network virtualization encapsulation and forwards the encapsulated floating IP to all distributed gateways in the virtual private cloud.

[0043] The virtual machine can broadcast the updated ARP message to all distributed gateways in the entire virtual private cloud (VPC). Through the multicast management mechanism, the ARP message will be replicated and transmitted through a common network virtualization encapsulation (such as Geneve tunnel). This encapsulation can transmit data between different physical servers, ensuring that each distributed gateway can receive the latest ARP reply message in time, thereby updating its ARP table.

[0044] In one possible implementation, universal network virtualization encapsulation enables ARP messages to be transmitted across physical servers. By carrying VPC subnet information in the message, it can be ensured that the ARP message is routed to the correct subnet, and the server receiving the message can identify the corresponding subnet and gateway based on the tunnel information, and further update the ARP table.

[0045] S103: Each distributed gateway that receives the ARP reply message updates the corresponding ARP table according to the ARP reply message, so that the MAC addresses of the floating IPs in the ARP tables of all distributed gateways are consistent.

[0046] When a distributed gateway receives an encapsulated ARP packet, it identifies the index of the gateway interface based on the tunnel information in the packet and updates the ARP table based on the index. In this way, the ARP tables of all distributed gateways are synchronized, ensuring that they all have the latest mapping of floating IP addresses to MAC addresses.

[0047] In a possible implementation, each distributed gateway that receives the ARP reply message will identify the gateway interface index based on the tunnel information in the message and update the ARP table based on the index. This means that the ARP tables of all distributed gateways will be updated with consistent floating IP and MAC address mappings.

[0048] Through the above three steps, the management method of the present invention solves the ARP table synchronization problem of floating IP in a distributed gateway environment. When a virtual machine configures a floating IP, the local gateway first updates its ARP table, and then transmits the updated ARP message to all distributed gateways through the multicast mechanism and the Geneve tunnel. After receiving the ARP message, these distributed gateways update their respective ARP tables, thereby maintaining the consistency of the ARP tables of all gateways in the entire VPC network, ensuring the high availability and business continuity of the floating IP.

[0049] In the traditional distributed gateway architecture, the migration of floating IP often leads to inconsistent ARP table information between different servers or gateways, thus affecting the normal access of the business. Especially when the floating IP is switched, only the local gateway or certain virtual machines can update the ARP table in time, resulting in the inability of other distributed gateways to synchronously update the ARP information, and then access interruption or packet loss occurs. The management method of floating IP under the distributed gateway based on OVN provided in the present application ensures that the ARP reply message can be received and the ARP table is updated in time by all distributed gateways through the multicast management mechanism, thereby maintaining the consistency of the MAC address of the floating IP in the ARP table of each gateway, greatly improving the stability and reliability of the network. In the traditional distributed gateway architecture, when the floating IP is migrated to a new virtual machine, it is usually necessary to rely on the virtual machine to actively send free ARP messages or other complex mechanisms to notify other gateways, resulting in a complex and untimely ARP synchronization process, which seriously affects the switching efficiency of the floating IP. In contrast, the present invention adopts a multicast management mechanism and a universal network virtualization encapsulation, which can enable ARP reply messages to be quickly and widely propagated to all distributed gateways, ensuring that the business after the floating IP switch can return to normal in a very short time, avoiding business interruption. Although the traditional centralized database synchronization solution can ensure the update consistency of the ARP table, it limits the scalability of the VPC network due to the existence of performance bottlenecks, and when the centralized database fails, it may cause large-scale network failures. The present invention adopts a distributed multicast mechanism and a universal network virtualization encapsulation technology, which not only avoids the performance bottleneck of the centralized database, but also can efficiently and stably synchronize ARP information in a large-scale distributed network environment, support larger-scale cloud computing environment deployment, and improve the fault tolerance of the system.

[0050] The present application also provides a Figure 2 The schematic diagram of the structure of the management device of the floating IP under the distributed gateway based on OVN is shown, and the management device 200 of the floating IP under the distributed gateway based on OVN includes the following modules:

[0051] A sending module, used for, when a virtual machine is configured with a floating IP, the virtual machine sends an ARP reply message to a local gateway, and updates the mapping between the floating IP and the MAC address of the local gateway into the ARP table of the local gateway;

[0052] A forwarding module, used to copy the ARP reply message corresponding to the floating IP through the multicast management mechanism, perform universal network virtualization encapsulation, and forward the encapsulated floating IP to all distributed gateways in the virtual private cloud;

[0053] The updating module is used for each distributed gateway that receives the ARP reply message to update the corresponding ARP table according to the ARP reply message, so that the MAC addresses of the floating IPs in the ARP tables of all the distributed gateways are consistent.

[0054] In a possible implementation, the sending module is specifically configured to:

[0055] When the floating IP is assigned to the first virtual machine, the first virtual machine sends a unicast ARP reply message to the local gateway, the target MAC address of the unicast ARP reply message is the local gateway MAC address, and the source MAC address of the unicast ARP reply message is the MAC address of the first virtual machine;

[0056] When the floating IP is switched, the ARP reply message is sent by broadcasting, and the ARP reply message notifies the gateways and virtual machines in all subnets to update the MAC address of the floating IP to the switched MAC address.

[0057] In the traditional distributed gateway architecture, the migration of floating IP often leads to inconsistent ARP table information between different servers or gateways, thus affecting the normal access of the service. Especially when the floating IP is switched, only the local gateway or certain virtual machines can update the ARP table in time, resulting in the inability of other distributed gateways to synchronously update the ARP information, and then the access interruption or packet loss occurs. The management device of the floating IP under the distributed gateway based on OVN provided in the present application ensures that the ARP reply message can be received and the ARP table is updated in time by all distributed gateways through the multicast management mechanism, thereby maintaining the consistency of the MAC address of the floating IP in the ARP table of each gateway, greatly improving the stability and reliability of the network. In the traditional distributed gateway architecture, when the floating IP is migrated to a new virtual machine, it is usually necessary to rely on the virtual machine to actively send free ARP messages or other complex mechanisms to notify other gateways, resulting in a complex and untimely ARP synchronization process, which seriously affects the switching efficiency of the floating IP. In contrast, the present invention adopts a multicast management mechanism and a universal network virtualization encapsulation, which can enable ARP reply messages to be quickly and widely propagated to all distributed gateways, ensuring that the business after the floating IP switch can return to normal in a very short time, avoiding business interruption. Although the traditional centralized database synchronization solution can ensure the update consistency of the ARP table, it limits the scalability of the VPC network due to the existence of performance bottlenecks, and when the centralized database fails, it may cause large-scale network failures. The device of the present invention not only avoids the performance bottleneck of the centralized database by adopting a distributed multicast mechanism and universal network virtualization encapsulation technology, but also can efficiently and stably synchronize ARP information in a large-scale distributed network environment, support larger-scale cloud computing environment deployment, and improve the fault tolerance of the system.

[0058] An embodiment of the present application also provides a management device for a floating IP under a distributed gateway based on OVN, wherein the device includes a memory and a processor, the memory is used to store instructions or codes, and the processor is used to execute the instructions or codes so that the device performs the steps of the management method for a floating IP under a distributed gateway based on OVN described in any embodiment of the present application.

[0059] In practical applications, the computer-readable storage medium may be any combination of one or more computer-readable media, which may be a computer-readable signal medium or a computer-readable storage medium.

[0060] The computer-readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination thereof. More specific examples of computer-readable storage media (a non-exhaustive list) include: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination thereof. In the present embodiment, the computer-readable storage medium may be any tangible medium containing or storing a program that may be used by or in conjunction with an instruction execution system, device, or device.

[0061] Computer-readable signal media may include data signals propagated in baseband or as part of a carrier wave, which carry computer-readable program code. Such propagated data signals may take a variety of forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the above. Computer-readable signal media may also be any computer-readable medium other than a computer-readable storage medium, which may send, propagate, or transmit a program for use by or in conjunction with an instruction execution system, apparatus, or device.

[0062] The program code embodied on the computer readable medium may be transmitted using any appropriate medium, including but not limited to wireless, wireline, optical fiber cable, RF, etc., or any suitable combination of the foregoing.

[0063] Computer program code for performing the operations of the present invention may be written in one or more programming languages ​​or a combination thereof, including object-oriented programming languages ​​such as Java, Smalltalk, C++, and conventional procedural programming languages ​​such as "C" or similar programming languages. The program code may be executed entirely on the user's computer, partially on the user's computer, as a separate software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., via the Internet using an Internet service provider).

[0064] It should be noted that each embodiment in this specification is described in a progressive manner, and the same or similar parts between the embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment. The device embodiment described above is merely schematic, in which the unit described as a separate component may or may not be physically separated, and the component prompted as a unit may or may not be a physical unit, that is, it may be located in one place, or it may be distributed on multiple network units. Some or all of the modules can be selected according to actual needs to achieve the purpose of the scheme of this embodiment. Ordinary technicians in this field can understand and implement it without paying creative work.

[0065] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any changes or substitutions that can be easily thought of by a person skilled in the art within the technical scope disclosed in the present application should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

1. A method for managing floating IP under a distributed gateway based on OVN, characterized in that: include: When a virtual machine is configured with a floating IP, the virtual machine sends an ARP reply message to the local gateway, and updates the mapping between the floating IP and the MAC address of the local gateway into the ARP table of the local gateway; The ARP reply message corresponding to the floating IP is copied through the multicast management mechanism, and a general network virtualization encapsulation is performed, and the encapsulated floating IP is forwarded to all distributed gateways in the virtual private cloud; Each distributed gateway that receives the ARP reply message updates the corresponding ARP table according to the ARP reply message, so that the MAC addresses of the floating IPs in the ARP tables of all the distributed gateways are consistent.

2. The method according to claim 1, characterized in that The ARP reply message is sent in the following manner: When the floating IP is assigned to the first virtual machine, the first virtual machine sends a unicast ARP reply message to the local gateway, the target MAC address of the unicast ARP reply message is the local gateway MAC address, and the source MAC address of the unicast ARP reply message is the MAC address of the first virtual machine; When the floating IP is switched, the ARP reply message is sent by broadcasting, and the ARP reply message notifies the gateways and virtual machines in all subnets to update the MAC address of the floating IP to the switched MAC address.

3. The method according to claim 1, characterized in that: The general network virtualization encapsulation is specifically used for: The ARP reply message is transmitted between different physical servers. The universal network virtualization encapsulation carries the subnet information of the VPC. The ARP reply message is routed to the correct subnet through the subnet information. The server that receives the ARP reply message finds the corresponding subnet and gateway according to the tunnel information in the message, thereby updating the ARP table.

4. The method according to claim 1, characterized in that Each distributed gateway that receives the ARP reply message updates the corresponding ARP table according to the ARP reply message, including: The distributed gateway receiving the ARP reply message identifies a gateway interface index according to the tunnel information in the ARP reply message; The ARP table is updated according to the gateway interface index.

5. A management device for floating IP under a distributed gateway based on OVN, characterized in that: include: A sending module, used for, when a virtual machine is configured with a floating IP, the virtual machine sends an ARP reply message to a local gateway, and updates the mapping between the floating IP and the MAC address of the local gateway into the ARP table of the local gateway; A forwarding module, used to copy the ARP reply message corresponding to the floating IP through the multicast management mechanism, perform universal network virtualization encapsulation, and forward the encapsulated floating IP to all distributed gateways in the virtual private cloud; The updating module is used for each distributed gateway that receives the ARP reply message to update the corresponding ARP table according to the ARP reply message, so that the MAC addresses of the floating IPs in the ARP tables of all the distributed gateways are consistent.

6. The device according to claim 5, characterized in that The sending module is specifically used for: When the floating IP is assigned to the first virtual machine, the first virtual machine sends a unicast ARP reply message to the local gateway, the target MAC address of the unicast ARP reply message is the local gateway MAC address, and the source MAC address of the unicast ARP reply message is the MAC address of the first virtual machine; When the floating IP is switched, the ARP reply message is sent by broadcasting, and the ARP reply message notifies the gateways and virtual machines in all subnets to update the MAC address of the floating IP to the switched MAC address.

7. An electronic device, characterized in that: comprising a memory and a processor, wherein: The memory is used to store the computer program; The processor is used to execute the computer program to implement the method for managing a floating IP under an OVN-based distributed gateway as described in any one of claims 1-4.

8. A computer-readable storage medium, characterized in that: Used to store a computer program, wherein when the computer program is executed by a processor, the method for managing a floating IP under an OVN-based distributed gateway is implemented as described in any one of claims 1-4.

Images