Method and system for realizing cross-cloud platform two-layer break-through

Abstract

The invention discloses a method and system for realizing cross-cloud platform two-layer break-through, and belongs to the technical field of government affair cloud platforms, cross-cloud platform two-layer break-through is realized based on a VXLAN gateway, the VXLAN gateway encapsulates two-layer Ethernet frames in UDP messages, a virtual two-layer network is constructed on a three-layer network, and cross-region and large-scale network expansion is realized; implementations of the method include: a control plane: automatically discovering and managing endpoints in a VXLAN network using a VXLAN control protocol; the control plane is responsible for distributing VXLAN network identifiers and establishing a tunnel between VTEPs (Virtual Extensible Local Area Network); and in the data plane, the VTEP is responsible for encapsulating and de-encapsulating the VXLAN message. A powerful expansion mode is provided for the data center network, cross-region and large-scale two-layer network connection can be achieved, and service continuity and data safety guarantee are facilitated.

Description

Technical Field

[0001] The present invention relates to the technical field of government cloud platforms, and in particular to a method and system for achieving cross-cloud platform two-layer connectivity. Background Art

[0002] The government cloud platform integrates the information resources of various government departments, realizes data sharing and business collaboration, and improves the government's work efficiency and service level. However, the government cloud platform also faces various risks and challenges.

[0003] The government cloud platform stores a large amount of government data, and establishing a disaster recovery platform is a necessary measure to ensure the data security of the government cloud platform.

[0004] The government cloud platform carries the key business systems of various government departments, such as administrative approval, public services, emergency command, etc. Once these business systems are interrupted, it will affect the normal operation of the government and the stability of society. Therefore, establishing a disaster recovery platform is an important means to ensure the business continuity of the government cloud platform.

[0005] At the same time, the network security level protection system requires that critical information infrastructure should implement key protection on the basis of the network security level protection system, including establishing data backup and disaster recovery mechanisms.

[0006] With the continuous development of cloud computing, big data, artificial intelligence and other technologies, the scale and complexity of government cloud platforms are also increasing. At the same time, various security threats such as natural disasters, man-made damage, and cyber attacks are becoming increasingly severe. Therefore, how to establish a disaster recovery platform to adapt to technological development trends and respond to security threats, and to ensure government information security and business continuity is an issue that needs to be solved urgently. Summary of the invention

[0007] The technical task of the present invention is to address the above shortcomings and provide a method and system for achieving cross-cloud platform layer 2 connectivity, which helps to ensure business continuity and data security.

[0008] The technical solution adopted by the present invention to solve its technical problem is:

[0009] A method for realizing cross-cloud platform Layer 2 connectivity is based on a VXLAN gateway. The VXLAN gateway encapsulates a Layer 2 Ethernet frame in a UDP message to build a virtual Layer 2 network on a Layer 3 network, breaking through the limitations of a traditional Layer 2 network and realizing cross-regional, large-scale network expansion. The implementation of this method includes:

[0010] Control plane: Uses the VXLAN control protocol to automatically discover and manage endpoints (VTEP, VXLAN Tunnel End Point) in the VXLAN network;

[0011] The control plane is responsible for allocating VXLAN network identifiers (VNI) and establishing tunnels between VTEPs.

[0012] Data plane: VTEP is responsible for encapsulating and decapsulating VXLAN packets.

[0013] The method of realizing cross-cloud platform Layer 2 connectivity based on VXLAN gateway is more conducive to business continuity and data security. Establishing a disaster recovery platform for the government cloud platform is a necessary measure to ensure government information security, business continuity and meet legal and regulatory requirements.

[0014] Furthermore, the VXLAN control protocol includes an EVPN protocol.

[0015] Furthermore, the VTEP encapsulates and decapsulates the VXLAN message:

[0016] When a VTEP receives an Ethernet frame from the local Layer 2 network, it encapsulates the frame in a VXLAN message and sends it to other VTEPs through the tunnel;

[0017] The VTEP at the receiving end decapsulates the VXLAN message and forwards the original Ethernet frame to the local Layer 2 network.

[0018] Furthermore, the specific implementation steps of the method include:

[0019] 1) Network planning:

[0020] Determine the size and topology of the VXLAN network;

[0021] Allocate VNI to ensure isolation between different virtual networks;

[0022] 2) Equipment configuration:

[0023] Configure VXLAN functions on network devices;

[0024] Configure VXLAN control protocols, such as EVPN, to enable automatic discovery and management;

[0025] 3) Tunnel establishment:

[0026] Establish IP tunnels between VTEPs.

[0027] and ensure the reliability and performance of the tunnel;

[0028] 4) Layer 2 network connection:

[0029] Connect the local Layer 2 network to the VTEP to ensure that Ethernet frames can be encapsulated and decapsulated correctly;

[0030] Configure VLAN-to-VNI mapping so that different VLANs can communicate in the VXLAN network.

[0031] Furthermore, the VXLAN function is configured on the network device, including the IP address and VNI parameters of the VTEP.

[0032] Furthermore, by using GRE and VXLAN over IP technologies, IP tunnels are established between VTEPs;

[0033] The reliability and performance of the tunnel are ensured by adopting multi-path and load balancing technologies.

[0034] Furthermore, an interconnection VLAN (such as VLAN 200) and address prefix (such as 200.0.0.0 / 24) are planned on the service core, and the VLAN is permitted on all ToR switches;

[0035] Open up the IP layer of the interconnected VLAN address segment with the telecom-side VTEP. Assuming the telecom-side VTEP address segment is 100.0.0.0 / 24, you need to open up segments 100 and 200.

[0036] The deployment method to implement this method is as follows:

[0037] Create a new Linux virtual machine (such as centos7) in the VPC that needs to be connected as the VXLAN Gateway, 2C4G is enough;

[0038] Create a new VLAN network and subnet on the underlying platform, such as VLAN200 and 200.0.0.0 / 24;

[0039] Connect a VLAN port to the VXLAN Gateway.

[0040] Disable port security on both ports of the VXLAN Gateway.

[0041] Create a new ovs bridge br-L2 in VXLAN Gateway;

[0042] Connect the network card of the vxlan network in the VXLAN Gateway to the br-L2 bridge;

[0043] Create a new VXLAN tunnel port for br-L2. The local IP of the tunnel is the network card IP of the VLAN network of the VXLAN Gateway, and the remote IP is the IP of the VTEP on the opposite telecom side.

[0044] Add a flow table in br-L2 to encapsulate and send the traffic from the vxlan network card through the VXLAN tunnel port;

[0045] The test platform is opened as follows:

[0046] Create a new VPC and subnet with the same CIDR on the China Telecom and China Unicom sides, and use different subnet gateway addresses (if different addresses cannot be guaranteed, the China Unicom subnet needs to be removed from the virtual router in the background);

[0047] Create two new virtual machines on the telecommunications side, set to 192.168.1.101 and 192.168.1.102;

[0048] Create two new virtual machines on the Unicom side, set them to 192.168.1.103 and 192.168.1.104, and point the default gateway to the VPC subnet gateway on the Telecom side;

[0049] Ping the Unicom side's 192.168.1.103 and 192.168.1.104 from the Telecom side's 192.168.1.101, both are successful;

[0050] Pinging from 192.168.1.103 on the Unicom side to 192.168.1.101 and 192.168.1.102 on the Telecom side is successful;

[0051] Bind the floating IP and EIP to 192.168.1.102 on the telecommunications side to ensure that 192.168.1.102 can access the public network;

[0052] Create a new 192.168.1.102 on the Unicom side, shut down the 192.168.1.102 on the Telecom side, and ping 192.168.1.102 from the Telecom side 192.168.1.101. The ping is successful.

[0053] Ping the public network from 192.168.1.102 on the Unicom side. The ping is successful. The EIP of 192.168.1.102 can also be accessed from the public network.

[0054] The present invention also claims a system for realizing cross-cloud platform Layer 2 connectivity, which is based on a VXLAN gateway to realize cross-cloud platform Layer 2 connectivity. The VXLAN gateway encapsulates a Layer 2 Ethernet frame in a UDP message to build a virtual Layer 2 network on a Layer 3 network.

[0055] The system specifically connects the cloud platforms through the above-mentioned method of achieving cross-cloud platform layer 2 connection.

[0056] The present invention also claims a device for realizing cross-cloud platform layer 2 connection, comprising: at least one memory and at least one processor;

[0057] The at least one memory is used to store a machine-readable program;

[0058] The at least one processor is used to call the machine-readable program to implement the above method.

[0059] The present invention also claims protection for a computer-readable medium having computer instructions stored thereon, which can implement the above method when executed by a processor.

[0060] Compared with the prior art, the method and system for realizing cross-cloud platform layer 2 connection of the present invention have the following beneficial effects:

[0061] Strong scalability: The scale of the Layer 2 network can be easily expanded to meet the needs of large-scale data centers.

[0062] High flexibility: Supports multi-tenant environments, and different virtual networks can be managed and configured independently.

[0063] Simplified network management: Through automated management of the control plane, the workload of manual configuration is reduced.

[0064] The VXLAN Layer 2 connectivity technology solution provides a powerful expansion method for data center networks, which can achieve cross-regional, large-scale Layer 2 network connections. BRIEF DESCRIPTION OF THE DRAWINGS

[0065] Figure 1 This is a logical diagram for realizing the second-layer connection across cloud platforms provided by an embodiment of the present invention;

[0066] Figure 2 It is a diagram of the internal logic of a VTEP provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0067] The present invention will be further described below in conjunction with the accompanying drawings and specific embodiments.

[0068] The embodiment of the present invention provides a method for realizing cross-cloud platform Layer 2 connectivity, which is based on the VXLAN gateway. The VXLAN gateway encapsulates the Layer 2 Ethernet frame in a UDP message to build a virtual Layer 2 network on a Layer 3 network. It can break through the limitations of the traditional Layer 2 network and realize cross-regional, large-scale network expansion.

[0069] The implementation of this method includes:

[0070] Control Plane:

[0071] Use VXLAN control protocols (such as EVPN) to automatically discover and manage endpoints (VTEP, VXLANTunnel End Point) in the VXLAN network;

[0072] The control plane is responsible for allocating VXLAN network identifiers (VNI) and establishing tunnels between VTEPs.

[0073] Data plane:

[0074] VTEP is responsible for encapsulating and decapsulating VXLAN packets. When a VTEP receives an Ethernet frame from the local Layer 2 network, it encapsulates the frame in a VXLAN packet and sends it to other VTEPs through the tunnel;

[0075] The VTEP at the receiving end decapsulates the VXLAN message and forwards the original Ethernet frame to the local Layer 2 network.

[0076] The specific implementation steps of this method include:

[0077] 1. Network planning:

[0078] Determine the size and topology of the VXLAN network;

[0079] Assign VNIs to ensure that different virtual networks are isolated from each other.

[0080] 2. Equipment configuration:

[0081] Configure VXLAN functions on network devices, including VTEP IP addresses, VNI and other parameters;

[0082] Configure VXLAN control protocols, such as EVPN, to enable automatic discovery and management.

[0083] 3. Tunnel establishment:

[0084] Establish IP tunnels between VTEPs, using technologies such as GRE and VXLAN over IP;

[0085] To ensure the reliability and performance of the tunnel, technologies such as multipath and load balancing can be used.

[0086] 4. Layer 2 network connection:

[0087] Connect the local Layer 2 network to the VTEP to ensure that Ethernet frames can be encapsulated and decapsulated correctly;

[0088] Configure VLAN-to-VNI mapping so that different VLANs can communicate in the VXLAN network.

[0089] The method of realizing cross-cloud platform Layer 2 connectivity based on VXLAN gateway is more conducive to business continuity and data security. Establishing a disaster recovery platform for the government cloud platform is a necessary measure to ensure government information security, business continuity and meet legal and regulatory requirements.

[0090] The following is combined with Figure 1 and 2 , further details the specific deployment of implementing this method.

[0091] Plan an interconnection VLAN (such as VLAN 200) and address prefix (such as 200.0.0.0 / 24) on the service core, and permit this VLAN on all ToR switches;

[0092] Open up the address segment of the interconnected VLAN and the IP layer of the VTEP on the telecom side. Assuming that the VTEP address segment on the telecom side is 100.0.0.0 / 24, you need to open up segments 100 and 200.

[0093] The deployment method to implement this method is as follows:

[0094] Create a new Linux virtual machine (such as centos7) in the VPC that needs to be connected as the VXLAN Gateway, 2C4G is enough;

[0095] Create a new VLAN network and subnet on the underlying platform, such as VLAN200 and 200.0.0.0 / 24;

[0096] Connect a VLAN port to the VXLAN Gateway.

[0097] Disable port security on both ports of the VXLAN Gateway.

[0098] Create a new ovs bridge br-L2 in VXLAN Gateway;

[0099] Connect the network card of the vxlan network in the VXLAN Gateway to the br-L2 bridge;

[0100] Create a new VXLAN tunnel port for br-L2. The local IP of the tunnel is the network card IP of the VLAN network of the VXLAN Gateway, and the remote IP is the IP of the VTEP on the opposite telecom side.

[0101] Add a flow table in br-L2 to encapsulate and send the traffic from the vxlan network card through the VXLAN tunnel port;

[0102] The test platform is opened as follows:

[0103] Create a new VPC and subnet with the same CIDR on the China Telecom and China Unicom sides, and use different subnet gateway addresses (if different addresses cannot be guaranteed, the China Unicom subnet needs to be removed from the virtual router in the background);

[0104] Create two new virtual machines on the telecommunications side, such as 192.168.1.101 and 192.168.1.102;

[0105] Create two new virtual machines on the China Unicom side, such as 192.168.1.103 and 192.168.1.104, and point the default gateway to the VPC subnet gateway on the China Telecom side;

[0106] Ping 192.168.1.103 and 192.168.1.104 on the China Unicom side from 192.168.1.101 on the China Telecom side. Both pings should be successful.

[0107] Pinging the China Telecom side 192.168.1.101 and 192.168.1.102 from China Unicom side 192.168.1.103 should be successful;

[0108] Bind the floating IP and EIP to 192.168.1.102 on the telecommunications side to ensure that 192.168.1.102 can access the public network;

[0109] Create a new 192.168.1.102 on the Unicom side, and shut down the 192.168.1.102 on the Telecom side. Ping 192.168.1.102 from 192.168.1.101 on the Telecom side, and it should be ping-able.

[0110] Ping the public network from 192.168.1.102 on the Unicom side. The ping should be successful. The EIP of 192.168.1.102 can also be accessed from the public network.

[0111] The government cloud platform stably operates the business systems and data of various commissions, offices and bureaus. The security and stability of business systems and data are of vital importance. Disaster recovery measures are the key guarantee to ensure that the government cloud platform can continue to provide services in the face of various disasters and emergencies. In terms of disaster recovery, a multi-level disaster recovery system has been established. Including data backup and recovery system, regular backup of important data to ensure rapid recovery when data is lost or damaged; network redundancy design to ensure high availability of the network, even if some network nodes fail, it can ensure the normal operation of the system; emergency response mechanism, can be quickly started when a disaster occurs, and coordinate resources from all parties for emergency disposal. Based on the connection of the second-layer network, the government cloud platform and the disaster recovery platform can communicate through the underlying layer, and the government cloud platform and the disaster recovery platform deploy the same business system. When the government cloud platform is operating normally, the data on the government cloud platform is transmitted to the disaster recovery platform through the second-layer network for secondary storage, which improves the security of the data. When the government cloud platform fails and the business system cannot be used, the business system on the disaster recovery platform can continue to provide services as the main platform, and the data generated by the business system of the disaster recovery platform can continue to be saved to the disaster recovery platform, preventing the loss of business data. When the business platform returns to normal, it can switch back to the government cloud platform to provide services, ensuring business continuity and data integrity.

[0112] An embodiment of the present invention also provides a system for achieving cross-cloud platform layer two connectivity, involving a government cloud platform, a disaster recovery platform, business systems of various commissions and bureaus, business data of various commissions and bureaus, business cloud resources of the government cloud platform, and business cloud resources of the disaster recovery platform; the system specifically connects the cloud platform through the method for achieving cross-cloud platform layer two connectivity as described in the above embodiment.

[0113] The system implements Layer 2 connectivity across cloud platforms based on the VXLAN gateway. The VXLAN gateway encapsulates Layer 2 Ethernet frames in UDP packets to build a virtual Layer 2 network on the Layer 3 network. Its implementation includes:

[0114] Control Plane:

[0115] Use VXLAN control protocols (such as EVPN) to automatically discover and manage endpoints (VTEP, VXLANTunnel End Point) in the VXLAN network;

[0116] The control plane is responsible for allocating VXLAN network identifiers (VNI) and establishing tunnels between VTEPs.

[0117] Data plane:

[0118] VTEP is responsible for encapsulating and decapsulating VXLAN packets. When a VTEP receives an Ethernet frame from the local Layer 2 network, it encapsulates the frame in a VXLAN packet and sends it to other VTEPs through the tunnel;

[0119] The VTEP at the receiving end decapsulates the VXLAN message and forwards the original Ethernet frame to the local Layer 2 network.

[0120] The system implementation steps include:

[0121] 1. Network planning:

[0122] Determine the size and topology of the VXLAN network;

[0123] Assign VNIs to ensure that different virtual networks are isolated from each other.

[0124] 2. Equipment configuration:

[0125] Configure VXLAN functions on network devices, including VTEP IP addresses, VNI and other parameters;

[0126] Configure VXLAN control protocols, such as EVPN, to enable automatic discovery and management.

[0127] 3. Tunnel establishment:

[0128] Establish IP tunnels between VTEPs, using technologies such as GRE and VXLAN over IP;

[0129] To ensure the reliability and performance of the tunnel, technologies such as multipath and load balancing can be used.

[0130] 4. Layer 2 network connection:

[0131] Connect the local Layer 2 network to the VTEP to ensure that Ethernet frames can be encapsulated and decapsulated correctly;

[0132] Configure VLAN-to-VNI mapping so that different VLANs can communicate in the VXLAN network.

[0133] An embodiment of the present invention further provides a device for realizing cross-cloud platform layer 2 connection, comprising: at least one memory and at least one processor;

[0134] The at least one memory is used to store a machine-readable program;

[0135] The at least one processor is used to call the machine-readable program to implement the method for achieving cross-cloud platform layer 2 connectivity described in the above embodiment.

[0136] The embodiment of the present invention further provides a computer-readable medium, on which computer instructions are stored, and when the computer instructions are executed by a processor, the method for realizing the second layer connection across cloud platforms described in the above embodiment can be realized. Specifically, a system or device equipped with a storage medium can be provided, on which software program codes for realizing the functions of any of the above embodiments are stored, and a computer (or CPU or MPU) of the system or device can read and execute the program code stored in the storage medium.

[0137] In this case, the program code itself read from the storage medium can realize the function of any one of the above-mentioned embodiments, and thus the program code and the storage medium storing the program code constitute a part of the present invention.

[0138] The storage medium embodiments for providing the program code include a floppy disk, a hard disk, a magneto-optical disk, an optical disk (such as CD-ROM, CD-R, CD-RW, DVD-ROM, DVD-RAM, DVD-RW, DVD+RW), a magnetic tape, a non-volatile memory card, and a ROM. Alternatively, the program code can be downloaded from a server computer by a communication network.

[0139] In addition, it should be clear that the functions of any of the above embodiments can be implemented not only by executing the program code read by the computer, but also by enabling an operating system operating on the computer to complete part or all of the actual operations based on instructions from the program code.

[0140] In addition, it can be understood that the program code read from the storage medium is written to a memory provided in an expansion board inserted into the computer or written to a memory provided in an expansion unit connected to the computer, and then based on the instructions of the program code, a CPU installed on the expansion board or the expansion unit is enabled to perform part or all of the actual operations, thereby realizing the functions of any of the above-mentioned embodiments.

[0141] The present invention is shown and described in detail above through the accompanying drawings and preferred embodiments. However, the present invention is not limited to these disclosed embodiments. Based on the above multiple embodiments, those skilled in the art can know that the code review methods in the above different embodiments can be combined to obtain more embodiments of the present invention, and these embodiments are also within the protection scope of the present invention.

Claims

1. A method for achieving cross-cloud platform layer 2 connectivity, characterized in that: The VXLAN gateway is used to achieve cross-cloud platform Layer 2 connectivity. The VXLAN gateway encapsulates Layer 2 Ethernet frames in UDP packets to build a virtual Layer 2 network on the Layer 3 network, thus achieving cross-regional and large-scale network expansion. The implementation of this method includes: Control plane: Use the VXLAN control protocol to automatically discover and manage endpoints (VTEP, VXLANTunnel End Point) in the VXLAN network; The control plane is responsible for allocating VXLAN network identifiers (VNI) and establishing tunnels between VTEPs. Data plane: VTEP is responsible for encapsulating and decapsulating VXLAN packets.

2. According to claim 1, a method for realizing cross-cloud platform layer 2 connection is characterized in that: The VXLAN control protocol includes the EVPN protocol.

3. A method for realizing cross-cloud platform layer 2 connection according to claim 1, characterized in that: The VTEP encapsulates and decapsulates VXLAN packets: When a VTEP receives an Ethernet frame from the local Layer 2 network, it encapsulates the frame in a VXLAN message and sends it to other VTEPs through the tunnel; The VTEP at the receiving end decapsulates the VXLAN message and forwards the original Ethernet frame to the local Layer 2 network.

4. According to claim 1, a method for realizing cross-cloud platform layer 2 connection is characterized in that: The specific implementation steps of this method include: 1) Network planning: Determine the size and topology of the VXLAN network; Allocate VNI to ensure isolation between different virtual networks; 2) Equipment configuration: Configure VXLAN functions on network devices; Configure VXLAN control protocols to enable automatic discovery and management; 3) Tunnel establishment: Establish IP tunnels between VTEPs. and ensure the reliability and performance of the tunnel; 4) Layer 2 network connection: Connect the local Layer 2 network to the VTEP to ensure that Ethernet frames can be encapsulated and decapsulated correctly; Configure VLAN-to-VNI mapping so that different VLANs can communicate in the VXLAN network.

5. A method for realizing cross-cloud platform layer 2 connection according to claim 4, characterized in that: The VXLAN function is configured on the network device, including the IP address and VNI parameters of the VTEP.

6. A method for realizing cross-cloud platform layer 2 connection according to claim 4, characterized in that: By using GRE and VXLAN over IP technologies, IP tunnels are established between VTEPs; The reliability and performance of the tunnel are ensured by adopting multi-path and load balancing technologies.

7. A method for realizing cross-cloud platform layer 2 connection according to claim 1, characterized in that: Plan an interconnection VLAN and address prefix on the service core, and permit the VLAN on all ToR switches; Connect the address segment of the interconnected VLAN to the IP layer of the telecom-side VTEP; The deployment method to implement this method is as follows: Create a new Linux virtual machine in the VPC that needs to be connected as the VXLAN Gateway; Create a new VLAN network and subnet on the underlying platform; Connect a VLAN port to the VXLAN Gateway. Disable port security on both ports of the VXLAN Gateway. Create a new ovs bridge br-L2 in VXLAN Gateway; Connect the network card of the vxlan network in the VXLAN Gateway to the br-L2 bridge; Create a new VXLAN tunnel port for br-L2. The local IP of the tunnel is the network card IP of the VLAN network of the VXLAN Gateway, and the remote IP is the IP of the VTEP on the opposite telecom side. Add a flow table in br-L2 to encapsulate and send the traffic from the vxlan network card through the VXLAN tunnel port; The test platform is opened as follows: Create new VPCs and subnets with the same CIDR on the China Telecom and China Unicom sides, and use different subnet gateway addresses; Create two new virtual machines on the telecommunications side and set them to 192.168.1.101 and 192.168.1.102; Create two new virtual machines on the China Unicom side, set them to 192.168.1.103 and 192.168.1.104, and point the default gateway to the VPC subnet gateway on the China Telecom side; Ping the Unicom side's 192.168.1.103 and 192.168.1.104 from the Telecom side's 192.168.1.101, both are successful; Pinging from 192.168.1.103 on the Unicom side to 192.168.1.101 and 192.168.1.102 on the Telecom side is successful; Bind the floating IP and EIP to 192.168.1.102 on the telecommunications side to ensure that 192.168.1.102 can access the public network; Create a new 192.168.1.102 on the Unicom side, shut down the 192.168.1.102 on the Telecom side, and ping 192.168.1.102 from the Telecom side 192.168.1.

101. The ping is successful. Ping the public network from 192.168.1.102 on the Unicom side. The ping is successful. The EIP of 192.168.1.102 can also be accessed from the public network.

8. A system for achieving cross-cloud platform layer 2 connectivity, characterized in that: The VXLAN gateway is used to achieve cross-cloud platform Layer 2 connectivity. The VXLAN gateway encapsulates Layer 2 Ethernet frames in UDP packets to build a virtual Layer 2 network on the Layer 3 network. The system specifically connects the cloud platforms through the method for achieving cross-cloud platform layer 2 connection as described in any one of claims 1 to 7.

9. A device for realizing cross-cloud platform layer 2 connection, characterized in that: include: at least one memory and at least one processor; The at least one memory is used to store a machine-readable program; The at least one processor is used to call the machine-readable program to implement the method described in any one of claims 1 to 7.

10. A computer-readable medium, characterized in that The computer readable medium stores computer instructions, which, when executed by a processor, can implement the method described in any one of claims 1 to 7.

Images