Cloud private line and SD-WAN fusion method and system

Abstract

The embodiment of the invention provides a cloud private line and SD-WAN fusion method and system, and the method comprises the steps: enabling a cloud private line composer to determine the DC information of a POP point after operation and maintenance log in a yacos account; the yacos generates an SD-WAN Edge order according to the DC information; the SD-WAN controller activates the Edge, and the Edge is bound with the SD-WAN; and when the SD-WAN user creates an Edge branch site, the Edge is bound with the SD-WAN, and the Edge is bound with the cloud private line. According to the method, the Edge is activated through the DC information of the POP point, and the Edge is bound with the SD-WAN to realize stable migration and fusion of the cloud private line to the SD-WAN, so that the cloud private line user can stably join the SD-WAN. And reversely binding the SD-WAN through the Edge, and binding the Edge with the cloud private line, so that the SD-WAN user is bound with the cloud private line, and the SD-WAN user is fused with the cloud private line.

Description

Technical Field

[0001] The present invention relates to the field of network technology, and in particular to a cloud dedicated line and SD-WAN fusion method and a cloud dedicated line and SD-WAN fusion system. Background Art

[0002] With the popularization of cloud computing, many applications have been migrated to the cloud, and traditional private lines have also been migrated to cloud private lines. For large enterprises with multiple branches, the diversity of business determines the diversity of their network requirements. In order to meet the diverse needs of customers, cloud vendors provide hybrid cloud and private cloud scenarios.

[0003] A common cloud network is SD-WAN (software-defined networking in a wide area network), which is a network technology that uses software-defined networking (SDN) principles to manage and optimize the performance of wide area networks (WANs) and is applied in various scenarios.

[0004] SD-WAN has its cost advantage, and cloud dedicated line has its link quality advantage. They have their own advantages and cannot be replaced. When users who have already opened cloud dedicated lines expand their business, they cannot discard the already created dedicated line links and use SD-WAN alone. SD-WAN cannot meet the scenarios with higher link quality requirements. Therefore, the integration of cloud dedicated lines and SD-WAN is needed. Summary of the invention

[0005] The embodiment of the present invention provides a method and system for integrating cloud dedicated line and SD-WAN to solve the problem of integrating cloud dedicated line and SD-WAN.

[0006] The embodiment of the present invention discloses a method for integrating cloud dedicated line and SD-WAN, including:

[0007] After the operation and maintenance personnel log in to the yacos account, the cloud dedicated line orchestrator calls the monitoring operation and maintenance system to determine the DC information of the point-to-point POP point; yacos generates a SD-WAN Edge order based on the DC information; the SD-WAN controller responds to the SD-WAN Edge order, activates the Edge, and binds the SD-WAN;

[0008] When an SD-WAN user creates an Edge branch site, the Edge is bound to the SD-WAN and the Edge is bound to the cloud dedicated line.

[0009] Optionally, the cloud dedicated line orchestrator calls the monitoring operation and maintenance system to determine the DC information of the POP point, including:

[0010] The cloud dedicated line orchestrator calls the monitoring and operation system based on the cloud dedicated line information;

[0011] The monitoring operation and maintenance system determines the location information of the cloud dedicated line switch;

[0012] The monitoring and operation system determines the candidate POP points based on the location information; determines the connectivity quality between each candidate POP point and the cloud dedicated switch and the number of POP point access edges; determines the access POP point from the candidate POP points based on the connectivity quality and the number of access edges; and after obtaining the DC information of the access POP point, feeds back the DC information.

[0013] Optionally, the SD-WAN Controller, in response to the SD-WAN Edge order, activates the Edge, including:

[0014] The SD-WAN controller establishes a dedicated line link between the Edge and the cloud dedicated line switch;

[0015] The SD-WAN controller establishes the SD-WAN link between the Edge and the POP point;

[0016] The SD-WAN controller establishes a master-slave relationship between the Edge and the original cloud dedicated line client.

[0017] Optionally, the SD-WAN controller establishes a dedicated line link between the Edge and the cloud dedicated line switch, including:

[0018] The SD-WAN controller configures the interface and BGP peer information of the Edge dedicated line link WAN, and establishes a BGP link from the Edge to the cloud dedicated line switch.

[0019] Optionally, the SD-WAN controller establishes a master-slave relationship between the Edge and the original cloud dedicated line client, including:

[0020] The SD-WAN controller uses the cloud dedicated line orchestrator to determine whether the original cloud dedicated line client supports the virtual routing redundancy protocol VRRP;

[0021] If VRRP is supported, the SD-WAN controller configures the Edge as a VRRP backup device, and configures the Edge as a VRRP master device when the master device fails;

[0022] If VRRP is not supported, the SD-WAN controller configures the Edge as a VRRP backup device. When the MAC address of the original cloud dedicated line client cannot be learned, the Edge is configured as the master device.

[0023] Optionally, bundle SD-WAN, including:

[0024] The SD-WAN controller creates the POP point-to-VPC gateway configuration and the POP point-to-cloud dedicated line switch configuration based on the VPC information in the cloud;

[0025] Cloud dedicated line orchestrator, create cloud dedicated line switch to POP point configuration.

[0026] Optionally, Edge is bound to a cloud dedicated line, including:

[0027] The SD-WAN controller and cloud dedicated line orchestrator establish a dedicated line link between the POP point and the cloud dedicated line switch;

[0028] The SD-WAN controller and cloud dedicated line orchestrator establish the SD-WAN link between the cloud dedicated line switch and the Edge.

[0029] Optionally, the SD-WAN controller and cloud dedicated line orchestrator establish a dedicated line link between the POP point and the cloud dedicated line switch, including:

[0030] The SD-WAN controller creates the POP point-to-cloud dedicated line switch configuration and BGP peer information;

[0031] The cloud dedicated line orchestrator creates the cloud dedicated line switch to the POP point configuration and BGP peer information;

[0032] The SD-WAN controller and cloud dedicated line orchestrator establish the SD-WAN link between the cloud dedicated line switch and the Edge, including:

[0033] The SD-WAN controller configures the interface and BGP peer information of the Edge dedicated line link WAN based on the dedicated line name;

[0034] The cloud dedicated line orchestrator specifies the remote address when creating the line and creates the cloud dedicated line switch to the Edge configuration.

[0035] Optionally, it also includes:

[0036] The preferred link is the dedicated line link or the SD-WAN link with better quality.

[0037] The embodiment of the present invention also discloses a cloud dedicated line and SD-WAN fusion system, including: yacos, a monitoring and operation system, a cloud dedicated line orchestrator, and a software-defined wide area network SD-WAN controller;

[0038] yacos, used to execute the steps executed by yacos in the method described in the embodiment of the present invention;

[0039] A monitoring operation and maintenance system, used to execute the steps performed by the monitoring operation and maintenance system in the method according to the embodiment of the present invention;

[0040] A cloud dedicated line orchestrator, used to execute the steps executed by the cloud dedicated line orchestrator in the method according to the embodiment of the present invention;

[0041] An SD-WAN controller is used to execute the steps performed by the SD-WAN controller in the method described in an embodiment of the present invention.

[0042] The embodiments of the present invention include the following advantages:

[0043] The embodiment of the present invention provides a method and system for integrating cloud dedicated line and SD-WAN, the method comprising: after the operation and maintenance logs in to the yacos account, the cloud dedicated line orchestrator calls the monitoring operation and maintenance system to determine the DC information of the POP point; yacos generates an SD-WAN Edge order according to the DC information; the SD-WAN controller responds to the SD-WAN Edge order, activates the Edge, and binds the SD-WAN; when the SD-WAN user creates an Edge branch site, the Edge is bound to the SD-WAN, and the Edge is bound to the cloud dedicated line. The method provided by the embodiment of the present invention activates the Edge through the DC information of the POP point, and binds the SD-WAN to achieve smooth migration and integration of the cloud dedicated line to the SD-WAN, so that the cloud dedicated line users can smoothly join the SD-WAN. In the reverse direction, the Edge is bound to the SD-WAN, and the Edge is bound to the cloud dedicated line, so that the SD-WAN user is bound to the cloud dedicated line, and the SD-WAN user integrates the cloud dedicated line, and one network connects the existing cloud dedicated line with the SD-WAN. BRIEF DESCRIPTION OF THE DRAWINGS

[0044] Figure 1 It is a structural diagram of a cloud dedicated line and SD-WAN fusion system provided in an embodiment of the present invention;

[0045] Figure 2 It is a structural diagram of another cloud dedicated line and SD-WAN fusion system provided in an embodiment of the present invention;

[0046] Figure 3 It is a flowchart of the steps of a method for integrating cloud dedicated line and SD-WAN provided in an embodiment of the present invention;

[0047] Figure 4 This is a flowchart of the steps of a process of smoothly migrating a cloud dedicated line to join an SD-WAN provided in an embodiment of the present invention;

[0048] Figure 5 It is a schematic diagram of a general topology diagram of a process of smooth migration of a cloud dedicated line to join an SD-WAN provided in an embodiment of the present invention;

[0049] Figure 6 It is a schematic diagram of a process of determining and feeding back DC information of an access POP point by a monitoring operation and maintenance system provided in an embodiment of the present invention;

[0050] Figure 7 This is a flowchart of another step of a process of smoothly migrating a cloud dedicated line to join an SD-WAN provided in an embodiment of the present invention;

[0051] Figure 8 It is a schematic diagram of a general topology diagram of a SD-WAN binding cloud dedicated line process provided in an embodiment of the present invention;

[0052] Fig. 9 It is a flowchart of a process of binding a SD-WAN to a cloud dedicated line provided in an embodiment of the present invention;

[0053] Fig.10 It is a schematic diagram of a process of intelligent routing provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0054] In order to make the above-mentioned objects, features and advantages of the present invention more obvious and easy to understand, the present invention is further described in detail below with reference to the accompanying drawings and specific embodiments.

[0055] In the process of implementing the present invention, the inventors found that SD-WAN has its cost advantage, and cloud dedicated line has its link quality advantage, and each has its own advantages and cannot be replaced. When users who have already opened cloud dedicated lines expand their services, they cannot discard the already created dedicated line links and use SD-WAN alone. SD-WAN cannot meet the scenarios with higher link quality requirements. Therefore, it is necessary to migrate cloud dedicated lines to SD-WAN.

[0056] The embodiment of the present invention provides a method and system for integrating cloud dedicated line and SD-WAN, the method comprising: after the operation and maintenance logs in to the yacos account, the cloud dedicated line orchestrator calls the monitoring operation and maintenance system to determine the DC information of the POP point; yacos generates an SD-WAN Edge order according to the DC information; the SD-WAN controller responds to the SD-WAN Edge order, activates the Edge, and binds the SD-WAN; when the SD-WAN user creates an Edge branch site, the Edge is bound to the SD-WAN, and the Edge is bound to the cloud dedicated line. The method provided by the embodiment of the present invention activates the Edge through the DC information of the POP point, and binds the SD-WAN to achieve smooth migration and integration of the cloud dedicated line to the SD-WAN, so that the cloud dedicated line users can smoothly join the SD-WAN. In the reverse direction, the Edge is bound to the SD-WAN, and the Edge is bound to the cloud dedicated line, so that the SD-WAN user is bound to the cloud dedicated line, and the SD-WAN user integrates the cloud dedicated line, and one network connects the existing cloud dedicated line with the SD-WAN.

[0057] This embodiment provides a method for integrating cloud dedicated line and SD-WAN. The method can be executed by a cloud dedicated line and SD-WAN integration system to achieve the integration of cloud dedicated line and SD-WAN.

[0058] Among them, the relevant terms involved in SD-WAN (Software-Defined WAN) are explained as follows:

[0059] Cloud dedicated line: A dedicated line VPN developed based on cloud platform cloud computing technology, providing customers with high-quality VPN dedicated lines.

[0060] SD-WAN service: SD-WAN tenants can create multiple SD-WAN services. Each SD-WAN can be bound to multiple intelligent gateway Edges, and the Edges on the same SD-WAN service can be interconnected to form branch interconnections. The SD-WAN controller assigns a unique vni to each SD-WAN, where vni is a virtual network identifier used to distinguish and manage different virtual networks to ensure the correct routing and isolation of data during transmission. Each vni represents an independent virtual network that can carry different business or application traffic, thereby achieving network flexibility and scalability, so vni can be used for traffic isolation. The SD-WAN controller can manage and configure SD-WAN information, including SD-WAN network elements including: POP (Point of Presence, access point), Edge (edge ​​device) configuration, etc.

[0061] Edge: Such as the intelligent gateway device in SD-WAN service, hardware or software intelligent gateway for WAN access.

[0062] POP: The access gateway POP points distributed in various resource pools in SD-WAN services.

[0063] Cloud Private Line Orchestrator: The controller component of Cloud Private Line. Cloud Private Line Orchestrator can manage the configuration of Cloud Private Line switches and Cloud Private Line information.

[0064] SD-WAN Controller: The controller component of SD-WAN.

[0065] See also Figure 1 The cloud dedicated line and SD-WAN fusion system includes: yacos, monitoring and operation system, cloud dedicated line orchestrator, and SD-WAN controller.

[0066] Among them, yacos is an operation and maintenance system, which is used to execute the steps performed by yacos in the cloud dedicated line and SD-WAN integration method provided in this embodiment.

[0067] The monitoring and operation and maintenance system is used to execute the steps performed by the monitoring and operation and maintenance system in the cloud dedicated line and SD-WAN integration method provided in this embodiment.

[0068] The cloud dedicated line orchestrator is used to execute the steps performed by the cloud dedicated line orchestrator in the cloud dedicated line and SD-WAN integration method provided in this embodiment.

[0069] The SD-WAN controller is used to execute the steps performed by the SD-WAN controller in the cloud dedicated line and SD-WAN integration method provided in this embodiment.

[0070] In specific implementation, the cloud dedicated line and SD-WAN fusion system will also include a cloud platform and various product controllers, such as Figure 2 As shown, Figure 2 Only the cloud platform is shown, and various product controllers are not shown.

[0071] At this time, the cloud platform, yacos, monitoring and operation system and various product controllers constitute a cloud computing platform, which is a unified management platform.

[0072] Among them, the cloud platform is the user interface.

[0073] Yacos connects the cloud platform and the lower-level controller and order system.

[0074] The monitoring and operation system can collect data information, network element information, and monitoring information from various product lines and resource pools, and analyze and process the data. The integrated data facilitates big data online analysis and processing (OLAP)

[0075] The SD-WAN controller can manage and configure SD-WAN information, including the configuration of SD-WAN network elements, POPs, and Edges.

[0076] The cloud dedicated line orchestrator can manage the configuration of the cloud dedicated line switch and cloud dedicated line information.

[0077] The cloud dedicated line and SD-WAN integration method provided in this embodiment can enable users who have activated the cloud dedicated line first to smoothly migrate the cloud dedicated line to join the SD-WAN, and enable users who have activated the SD-WAN first to bind the SD-WAN to the cloud dedicated line.

[0078] See also Figure 3 The implementation process of the cloud dedicated line and SD-WAN integration method provided in this embodiment is as follows:

[0079] (I) Smooth migration of cloud dedicated lines to SD-WAN

[0080] See also Figure 4 A flowchart showing the implementation process of the process can be shown. The process can be based on Figure 5 The overall topology diagram shown is implemented, in which a dedicated line link has been created (see the solid black line), enabling dedicated line clients to access resources in the cloud.

[0081] 401. After the operation and maintenance personnel log in to the yacos account, the cloud dedicated line orchestrator calls the monitoring operation and maintenance system to determine the DC (Data Center) information of the POP point.

[0082] The implementation process of step 401 is as follows:

[0083] 401-1, the cloud dedicated line orchestrator calls the monitoring and operation system based on the cloud dedicated line information.

[0084] For example, the operation and maintenance personnel log in to the yacos account, select Cloud Private Line, and request to add Edge client backup. The Cloud Private Line orchestrator starts asynchronous processing and calls the monitoring operation and maintenance system based on the Cloud Private Line information.

[0085] Since the operation and maintenance monitoring system integrates monitoring data, equipment information, and database analysis system, the operation and maintenance monitoring system can return the optimal access POP point DC information through data processing in steps 401-2 to 401-6.

[0086] 401-2, the monitoring and operation system determines the location information of the cloud dedicated line switch.

[0087] For example, the monitoring and operation system uses the cloud dedicated line switch management IP to obtain the cloud dedicated line switch location information (x, y).

[0088] 401-3, the monitoring and operation system determines the candidate POP points according to the location information.

[0089] The number of candidate POP points is preset, such as 5.

[0090] For example, there may be multiple situations in which location information finds a group of POP points. If there is no POP in the same data center, 5 groups of nearby POP points are returned.

[0091] If there are multiple POPs in the same data center, for example, Beijing 1 Beijing Logic 2 Beijing Logic 3, 5 groups of POPs are returned.

[0092] The order of SD-WAN POP selection is: first in the same data center, then across data centers. And the distance is prioritized when selecting. Then return to the Top 5 POP points

[0093] 401-4, the monitoring and operation system determines the connectivity quality between each candidate POP point and the cloud dedicated line switch and the number of POP points connected to the Edge.

[0094] For example, the monitoring and operation system calculates the link quality, such as the connectivity between each POP point and the cloud dedicated line switch, and obtains the link quality and the number of edges connected to the POP switch.

[0095] 401-5, monitor the comprehensive connectivity quality and the number of access edges of the operation and maintenance system, and determine the access POP point from the candidate POP points.

[0096] For example, monitor the comprehensive link quality of the operation and maintenance system, the number of edges accessed by the POP switch, and determine the optimal POP point from the candidate POP points as the access POP point.

[0097] For example, the best centroid is determined by combining POP monitoring information, comprehensive link quality, and the number of edges accessed by the POP switch, and then the access POP point is obtained.

[0098] 401-6, after the monitoring and operation system obtains the DC information of the access POP point, it feeds back the DC information.

[0099] DC information such as DC ID.

[0100] The monitoring and operation system integrates various monitoring and information, including SD-WAN monitoring information, resource pool POP point location information, status, usage status, etc., and uses its huge data source and integrated data analysis system to be an advantageous platform for big data processing. For example, after receiving the call information of the get-SD-WAN-dc interface of the dedicated line orchestrator, after obtaining the DC information of the access POP point by executing steps 401-2 to 401-6, the DC information is fed back and the DC ID of the data center closest to the cloud dedicated line switch and with the best link quality is returned.

[0101] Since the operation and maintenance monitoring system manages all data center information, in order to improve efficiency, the data center can be pre-calculated in advance, divided into reasonable areas, and then the DC information of the access POP point can be determined and fed back. Figure 6 As shown, the specific process is:

[0102] 1. The monitoring and operation system performs pre-calculations and carries out national zoning.

[0103] 2. Obtain data based on the data center of the cloud dedicated line switch.

[0104] 3. Return the top 5 DC IDs.

[0105] 4. Comprehensive calculation based on distance and link quality.

[0106] 5. Obtain and feedback the optimal access SD-WAN POP DC ID.

[0107] In addition, this data center also supports manual specification and customization.

[0108] 402, yacos generates SD-WAN Edge order based on DC information.

[0109] After obtaining the asynchronous processing results and the fed-back DC information, yacos generates Edge order information with a dedicated line link.

[0110] If a SD-WAN Edge order is generated after the cloud dedicated line requests to bind the SD-WAN Edge, you can log in to the SD-WAN interface to activate it after the order is shipped.

[0111] 403, SD-WAN controller responds to SD-WAN Edge order and activates Edge.

[0112] SD-WAN User Interface For the above Edge, the DC ID has been set when the SD-WAN Edge order is generated, and the link type is set to one dedicated line, the smart gateway supports dual WAN, and the other supports setting up SD-WAN links.

[0113] by Figure 5 For example, when the cloud dedicated line generates an Edge order, it allocates IP 30.0.0.3 to the Edge and sets the Edge BGPAS, and sends the Edge information to the cloud dedicated line switch, bgp peer 30.0.0.3.

[0114] The SD-WAN controller activates the Edge in response to the SD-WAN Edge order, generating Figure 5 Link (2) and link (3) in the SD-WAN link (where link (3) is the SD-WAN link and link (2) is the dedicated line link), and then establish a primary-backup relationship with the original dedicated line link to support smooth migration.

[0115] For example, when the SD-WAN controller activates Edge, the SD-WAN controller sends down three configurations:

[0116] 1. Establish a dedicated line link from Edge to the cloud dedicated line switch. Figure 5 Link (2) in .

[0117] 2. Establish an SD-WAN link from Edge to POP. Figure 5 Links in (3)

[0118] 3. Establish a master-slave relationship between Edge and the original dedicated line client.

[0119] Therefore, the following three sub-steps are performed in this step:

[0120] 403-1, the SD-WAN controller establishes a dedicated line link between the Edge and the cloud dedicated line switch.

[0121] For example, the SD-WAN controller configures the interface and BGP peer information of the Edge dedicated line link WAN, and establishes a BGP link from the Edge to the cloud dedicated line switch.

[0122] like Figure 5 As shown in the figure, the SD-WAN controller can query the Edge locap_IP based on the dedicated line name, and the Edge AS returned by the cloud dedicated line stores and configures the interface IP 30.0.0.3 / 24 and BGP peer information of the Edge dedicated line link WAN1. Establish a BGP link from the Edge to the cloud dedicated line switch, that is, Figure 5 Link (2) in .

[0123] 403-2, the SD-WAN controller establishes an SD-WAN link between the Edge and the POP point.

[0124] For example, the SD-WAN controller configures the Edge to POP ipsec and establishes a BGP link, that is Figure 5 Link (3) in .

[0125] 403-3, the SD-WAN controller establishes a master-slave relationship between the Edge and the original cloud dedicated line client.

[0126] The SD-WAN controller determines whether the original cloud dedicated line client supports VRRP (Virtual Router Redundancy Protocol) through the cloud dedicated line orchestrator.

[0127] If VRRP is supported, the SD-WAN controller configures the Edge as a VRRP backup device, and configures the Edge as a VRRP master device when the master device is abnormal.

[0128] If VRRP is not supported, the SD-WAN controller configures the Edge as a VRRP backup device. When the MAC address of the original cloud dedicated line client cannot be learned, the Edge is configured as the master device.

[0129] For example, the SD-WAN controller queries the cloud dedicated line orchestrator to return whether the original client model supports the configuration of VRRP. If it supports it, the cloud dedicated line is bound to the Edge and the original dedicated line client is configured as the VRRP master device. The SD-WAN controller configures the Edge as a normal VRRP and the virtual ip 30.0.0.2 / 24 VRRP backup device. When the master device is abnormal, the Edge is upgraded to the master and the WAN1 dedicated line port IP 30.0.0.2 is set to achieve smooth migration of the original cloud dedicated line to the SD-WAN Edge.

[0130] If the original client model does not support VRRP configuration, the SD-WAN controller configures Edge VRRP to monitor the 30.0.0.2 mac address as a trace condition, and virtual ip 30.0.0.2 / 24 is the VRRP backup device. When the original dedicated line client mac address cannot be learned, update Edge as the main device and set the loop port virtual ip 30.0.0.2. The mac address is unique, which can solve the problem that the original dedicated line client does not support VRRP configuration.

[0131] 404, bind SD-WAN.

[0132] For example, the SD-WAN controller creates the POP point-to-VPC gateway configuration and the POP point-to-cloud dedicated switch configuration based on the virtual private cloud VPC information in the cloud.

[0133] Cloud dedicated line orchestrator, create cloud dedicated line switch to POP point configuration.

[0134] In step 404, the activated Edge can be bound to the SD-WAN service.

[0135] In the specific implementation, if the activated Edge has successfully established a link to the dedicated line (2), if only the dedicated line link of the Edge is used, step 404 can be skipped. If you want to establish interconnection with more SD-WAN branches and continue to bind SD-WAN services, you need to execute step 404, that is:

[0136] 1. The SD-WAN controller creates a POP to VPC gateway configuration based on the dedicated line cloud information, that is, the VPC information in the cloud. For example, vxlan connects the cloud to the POP and establishes a BGP neighbor. Figure 5 Link (5) configuration in.

[0137] 2. The SD-WAN controller SD-WAN creates a POP point-to-cloud dedicated line gateway configuration based on the cloud dedicated line gateway information, including vxlan and BGP configuration. Figure 5 Link (4) configuration in.

[0138] 3. Call the cloud dedicated line orchestrator interface, pass the SD-WAN parameters to configure the cloud dedicated line switch to the POP, including vxlan and BGP configuration, and update the vni information of the cloud dedicated line switch to the Edge link (2).

[0139] After binding SD-WAN successfully, it will be successfully established Figure 5 Links (4) and (5) in

[0140] At this point, the cloud dedicated line has been successfully added to SD-WAN. This Edge can establish interconnection with more Edge branches in SD-WAN, such as Figure 5 The link (6) configuration in .

[0141] See below Figure 7 , the process of smoothly migrating cloud dedicated lines to SD-WAN is explained again:

[0142] 1. Yacos chooses cloud dedicated line.

[0143] 2. Call the cloud dedicated line orchestrator.

[0144] 3. Select the dedicated line to bind to Edge.

[0145] At this time, the optimal POP point DC will be returned through the operation and maintenance monitoring system OLAP.

[0146] 4. Generate SD-WAN Edge order.

[0147] 5. The SD-WAN controller activates the Edge based on the Edge DC and dedicated line information.

[0148] At this time, 1) a master-slave relationship will be established between the Edge and the original dedicated line client; 2) an Edge to POP SD-WAN link will be established; 3) an Edge to dedicated line switch link will be established.

[0149] 6. Edge is bound to SD-WAN.

[0150] At this time, 1) the SD-WAN controller will configure the POP to the dedicated switch vxlan and the POP to the vpc gateway vxlan in the cloud; 2) the cloud dedicated line orchestrator will configure the dedicated switch to the POP vxlan.

[0151] 7. Edge is successfully bound to SD-WAN.

[0152] Afterwards, Edge can be unbundled with SD-WAN services or joined into more branches of SD-WAN.

[0153] (II) SD-WAN Binding Cloud Private Line Process

[0154] SD-WAN is bound to cloud dedicated line, which is the opposite of adding cloud dedicated line to SD-WAN. It adds cloud dedicated line branches for users who already have SD-WAN services. The SD-WAN link has been created (see the solid blue line), enabling SD-WAN to access cloud resources or interconnection.

[0155] by Figure 8Taking the overall topology diagram shown in the figure as an example, the implementation process of this process is as follows: when an SD-WAN user creates an Edge branch site, the Edge is bound to the SD-WAN, and the Edge is bound to the cloud dedicated line.

[0156] For example, Fig. 9 The specific implementation steps of the SD-WAN binding cloud dedicated line process shown are:

[0157] 1. SD-WAN users create new Edge branch sites.

[0158] 2. Set up a dedicated line link or a dedicated line link + SD-WAN link at the site.

[0159] 3. An SD-WAN link needs to be activated. No action is necessary.

[0160] 4. The Edge site is bound to SD-WAN, and the Edge is bound to the cloud dedicated line.

[0161] Among them, when selecting the data center, SD-WAN is binding the cloud dedicated line process. Since the dedicated line is opened later and the dedicated line link needs to be laid for opening, it is not as widely distributed as POP points with multiple options. They are all designated data centers and do not require other processing.

[0162] For example, 1) If you only want to establish a dedicated line link when adding an Edge branch site, select the data center when binding the dedicated line, filter out only the dedicated line gateway of this data center, and bind the cloud dedicated line. 2) Add an Edge branch site, establish a dedicated line and SD-WAN link, and the data center is the data center specified when activating the Edge.

[0163] In addition, when activating Edge, the Edge is an Edge with SD-WAN link. Activate Edge to configure SD-WAN link, such as SD-WAN binding Fig. 9 In the middle link (1), establish the Edge to POP IPsec connection and configure the BGP neighbor.

[0164] At this point, the BGP AS has been assigned to the edge.

[0165] In addition, the process of binding Edge to cloud dedicated line is as follows:

[0166] 801, the SD-WAN controller and the cloud dedicated line orchestrator establish a dedicated line link between the POP point and the cloud dedicated line switch.

[0167] Specifically, the SD-WAN controller creates the configuration of the POP point to the cloud dedicated line switch and BGP peer information. The cloud dedicated line orchestrator creates the configuration of the cloud dedicated line switch to the POP point and BGP peer information.

[0168] For example, the SD-WAN controller configures the vxlan and BGP peer information from the POP to the cloud dedicated line switch based on the service port. The cloud dedicated line orchestrator configures the vxlan and BGP peer information from the cloud dedicated line switch to the POP based on the SD-WAN parameters in the parameters. Fig. 9 The link (2) in the network successfully establishes BGP neighbor communication.

[0169] 802, the SD-WAN controller and the cloud dedicated line orchestrator establish an SD-WAN link between the cloud dedicated line switch and the Edge.

[0170] Specifically, the SD-WAN controller configures the interface and BGP peer information of the Edge dedicated line link WAN based on the dedicated line name. The cloud dedicated line orchestrator specifies the remote address when creating the cloud dedicated line switch to create the Edge configuration.

[0171] For example, the SD-WAN controller queries the Edge locap_IP based on the dedicated line name and configures the interface IP 30.0.0.2 / 24 and BGP peer information of the Edge dedicated line link WAN1. The cloud dedicated line orchestrator specifies the remote address 30.0.0.2 / 24 when creating a dedicated line, and configures the configuration of the cloud dedicated line switch to the Edge when binding the cloud dedicated line.

[0172] When Edge is bound to SD-WAN, first determine the vni, then bind the cloud dedicated line. After the binding is successful, SD-WAN is established, and link (2) and link (3) in 9 are bound to establish a connection from POP to the cloud dedicated line switch and from the cloud dedicated line switch to Edge1.

[0173] Among them, link (2) is the dedicated link between the POP point and the cloud dedicated switch established in step 801, and this link is a POP to dedicated gateway link.

[0174] Link (3) is the SD-WAN link between the cloud dedicated switch and the Edge established in step 802, which is the link from the Edge to the dedicated gateway.

[0175] In addition, after establishing the dedicated line link (i.e., cloud dedicated line link) and the SD-WAN link, intelligent routing can be performed, such as intelligent switching between the SD-WAN link and the cloud dedicated line link. That is, the preferred link is the dedicated line link (i.e., cloud dedicated line link) and the SD-WAN link with better quality.

[0176] by Figure 5Taking the architecture shown in the figure as an example, after adding the SD-WAN Edge client to the dedicated link (i.e., cloud dedicated link) -> Activation -> Binding SD-WAN successfully, there are multiple links in the VPC in the cloud, and the priority settings of the links are as follows:

[0177] 1) The original dedicated line client and Edge1 are VRRP master-slave. Link (1) has a higher priority than link (2) and can only work on one link. If SD-WAN is added, the original dedicated line client needs to be offline and smoothly migrated to Edge1.

[0178] 2) Link (2) has a higher priority than SD-WAN link (3).

[0179] a. Inbound cloud traffic:

[0180] First priority link: Edge1—dedicated line gateway (cloud dedicated line switch)—intra-cloud vpc.

[0181] Second priority link: Edge1—POP—VPC within the cloud.

[0182] b. SD-WAN interconnection traffic:

[0183] like Figure 5 As shown in the figure, Edge1 and Edge2 are interconnected.

[0184] The SD-WAN links are: link (3) - link (6).

[0185] The dedicated line links are: link (2) - link (4) - link (6).

[0186] Leased line links have better quality but require more hops.

[0187] In specific implementation, SD-WAN supports enabling the intelligent routing function, which is not enabled by default.

[0188] like Fig.10 As shown in the figure, when intelligent routing is not enabled, the default dedicated line link quality is better. Most dedicated lines select POP points in the same data center, and the dedicated line quality is still better. At this time, the SD-WAN controller adds the Edge SD-WAN link (3) configuration, and adds an as-prepend to the BGP ipsec link to lengthen the AS path length of ipsec. The return traffic from the POP will not take link (3) first because the link (3) path is short.

[0189] When intelligent path selection is enabled, whether to deliver the Edge ipsec bgp as-prepend parameter is determined based on the link quality parameters.

[0190] The cloud dedicated line and SD-WAN integration method provided in this embodiment is a method for smooth migration of cloud dedicated line to SD-WAN and intelligent integration of SD-WAN and cloud dedicated line, which specifically includes two parts. For users who first open the cloud dedicated line, the cloud dedicated line is smoothly migrated to join SD-WAN. For users who first open SD-WAN, SD-WAN is bound to the cloud dedicated line. The cloud dedicated line and SD-WAN integration method provided in this embodiment can be based on the existing cloud dedicated line network and SD-WAN network to achieve smooth migration and integration of cloud dedicated line to SD-WAN, reduce network interruption time, select the optimal SD-WAN POP point, and make full use of the opened dedicated line resources. Reverse SD-WAN users can also bind cloud dedicated lines to achieve SD-WAN user integration of cloud dedicated lines.

[0191] The cloud dedicated line and SD-WAN integration method provided in this embodiment can build a network that connects the existing cloud dedicated line and SD-WAN.

[0192] The cloud dedicated line and SD-WAN fusion method provided in this embodiment supports the fusion of two products: forward and reverse bidirectional SD-WAN and cloud dedicated line. Through the cloud dedicated line and SD-WAN fusion method provided in this embodiment, when the cloud dedicated line and SD-WAN links coexist, intelligent routing can be performed based on link quality. In addition, the cloud dedicated line and SD-WAN fusion method provided in the embodiment can make intelligent selections for data centers when adding SD-WAN devices (binding SD-WAN Edge) to the cloud dedicated line, and obtain the data center based on the operation and maintenance monitoring system calculation, which can more flexibly give play to the characteristics of multiple POP distribution and wide telecommunications network than a single designated data center.

[0193] The cloud dedicated line and SD-WAN fusion method provided in this embodiment, when adding SD-WAN to the cloud dedicated line, sets the Edge and the original cloud dedicated line client to form a primary and backup device for smooth migration. For dedicated line client devices that do not support VRRP configuration, add SD-WAN Edge VRRP trace mac to form a primary and backup device.

[0194] It should be noted that, for the sake of simplicity, the method embodiments are described as a series of action combinations, but those skilled in the art should be aware that the embodiments of the present invention are not limited by the order of the actions described, because according to the embodiments of the present invention, certain steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in the specification are all preferred embodiments, and the actions involved are not necessarily required by the embodiments of the present invention.

[0195] The embodiment of the present invention provides a method for integrating cloud dedicated line and SD-WAN. After the operation and maintenance logs in to the yacos account, the cloud dedicated line orchestrator calls the monitoring operation and maintenance system to determine the DC information of the POP point; yacos generates an SD-WAN Edge order based on the DC information; the SD-WAN controller responds to the SD-WAN Edge order, activates the Edge, and binds the SD-WAN; when the SD-WAN user creates an Edge branch site, the Edge is bound to the SD-WAN, and the Edge is bound to the cloud dedicated line. The method provided by the embodiment of the present invention activates the Edge through the DC information of the POP point, and binds the SD-WAN to achieve smooth migration and integration of the cloud dedicated line to the SD-WAN, so that the cloud dedicated line users can smoothly join the SD-WAN. In the reverse direction, the Edge is bound to the SD-WAN, and the Edge is bound to the cloud dedicated line, so that the SD-WAN user is bound to the cloud dedicated line, and the SD-WAN user integrates the cloud dedicated line, and one network connects the existing cloud dedicated line with the SD-WAN.

[0196] In the above embodiments, it can be implemented in whole or in part by software, hardware, firmware or any combination thereof. When implemented by software, it can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, the process or function described in the embodiment of the present invention is generated in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions can be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium. For example, the computer instructions can be transmitted from a website site, computer, server or data center to another website site, computer, server or data center by wired (e.g., coaxial cable, optical fiber, digital subscriber line (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.). The computer-readable storage medium can be any available medium that a computer can access or a data storage device such as a server or data center that includes one or more available media integrated. The available medium can be a magnetic medium (e.g., a floppy disk, a hard disk, a tape), an optical medium (e.g., a DVD), or a semiconductor medium (e.g., a solid-state hard disk Solid State Disk (SSD)), etc.

[0197] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or device including the elements.

[0198] Each embodiment in this specification is described in a related manner, and the same or similar parts between the embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the system embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0199] The above description is only a preferred embodiment of the present invention and is not intended to limit the protection scope of the present invention. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention are included in the protection scope of the present invention.

Claims

1. A method for integrating cloud dedicated line and SD-WAN, characterized in that: include: After the operation and maintenance personnel log in to the yacos account, the cloud dedicated line orchestrator calls the monitoring operation and maintenance system to determine the DC information of the data center of the access point POP; Yacos generates a software-defined wide area network edge device SD-WAN Edge order based on the DC information; the software-defined wide area network SD-WAN controller responds to the SD-WAN Edge order, activates the edge device Edge, and the Edge is bound to the SD-WAN; When an SD-WAN user creates an Edge branch site, the Edge is bound to the SD-WAN and the Edge is bound to the cloud dedicated line.

2. The method according to claim 1, characterized in that: The cloud dedicated line orchestrator calls the monitoring and operation system to determine the DC information of the POP point, including: The cloud dedicated line orchestrator calls the monitoring operation and maintenance system according to the cloud dedicated line information; The monitoring and operation and maintenance system determines the location information of the cloud dedicated line switch; The monitoring and operation and maintenance system determines the candidate POP points based on the location information; determines the connectivity quality between each candidate POP point and the cloud dedicated switch and the number of POP point access edges; determines the access POP point from the candidate POP points based on the connectivity quality and the number of access edges; and after obtaining the DC information of the access POP point, feeds back the DC information.

3. The method according to claim 1, characterized in that The SD-WAN controller activates the Edge in response to the SD-WANEdge order, including: The SD-WAN controller establishes a dedicated line link between the Edge and the cloud dedicated line switch; The SD-WAN controller establishes an SD-WAN link between the Edge and the POP point; The SD-WAN controller establishes a master-slave relationship between the Edge and the original cloud dedicated line client.

4. The method according to claim 3, characterized in that The SD-WAN controller establishes a dedicated line link between the Edge and the cloud dedicated line switch, including: The SD-WAN controller configures the interface and BGP peer information of the Edge dedicated line link WAN, and establishes a link between the Edge and the cloud dedicated line switch BGP.

5. The method according to claim 3, characterized in that: The SD-WAN controller establishes a master-slave relationship between the Edge and the original cloud dedicated line client, including: The SD-WAN controller determines whether the original cloud dedicated line client supports the virtual routing redundancy protocol VRRP through the cloud dedicated line orchestrator; If VRRP is supported, the SD-WAN controller configures the Edge as a VRRP backup device, and configures the Edge as a VRRP master device when the master device is abnormal; If VRRP is not supported, the SD-WAN controller configures Edge as a VRRP backup device. When the mac address of the original cloud dedicated line client cannot be learned, Edge is configured as a master device.

6. The method according to claim 1, characterized in that The binding SD-WAN includes: The SD-WAN controller creates a POP point-to-VPC gateway configuration and a POP point-to-cloud dedicated line switch configuration based on the virtual private cloud VPC information in the cloud; The cloud dedicated line orchestrator creates a cloud dedicated line switch to POP point configuration.

7. The method according to claim 1, characterized in that The Edge is bound to the cloud dedicated line, including: The SD-WAN controller and the cloud dedicated line orchestrator establish a dedicated line link between the POP point and the cloud dedicated line switch; The SD-WAN controller and the cloud dedicated line orchestrator establish an SD-WAN link between the cloud dedicated line switch and the Edge.

8. The method according to claim 7, characterized in that The SD-WAN controller and the cloud dedicated line orchestrator establish a dedicated line link between the POP point and the cloud dedicated line switch, including: The SD-WAN controller creates the POP point-to-cloud dedicated line switch configuration and BGP peer information; The cloud dedicated line orchestrator creates the cloud dedicated line switch to POP point configuration and BGP peer information; The SD-WAN controller and the cloud dedicated line orchestrator establish an SD-WAN link between the cloud dedicated line switch and the Edge, including: The SD-WAN controller configures the interface and BGP peer information of the Edge dedicated line link WAN based on the dedicated line name; The cloud dedicated line orchestrator specifies the remote address when creating it and creates the cloud dedicated line switch to the Edge configuration.

9. The method according to claim 3 or 7, characterized in that: Also includes: The preferred link is the dedicated line link or the SD-WAN link with better quality.

10. A cloud dedicated line and SD-WAN fusion system, characterized in that: include: yacos, monitoring and operation system, cloud dedicated line orchestrator, software-defined wide area network SD-WAN controller; The yacos is used to perform the steps performed by the yacos in any one of claims 1 to 9; The monitoring and operation and maintenance system is used to perform the steps performed by the monitoring and operation and maintenance system as claimed in any one of claims 1 to 9; The cloud dedicated line orchestrator is used to execute the steps executed by the cloud dedicated line orchestrator as claimed in any one of claims 1 to 9; The SD-WAN controller is used to execute the steps performed by the SD-WAN controller in any one of claims 1 to 9.

Images