Dynamic cloud connection method and device applied to VPC, equipment and medium

Abstract

The technical scheme of the invention comprises the following steps: establishing a shared cloud connection instance on a cloud platform; in response to a cloud connection establishment request of a target VPC virtual machine in a target VPC, establishing a connection between the shared cloud connector instance and the target VPC virtual machine; and in response to a cloud connection request of the target VPC virtual machine, performing connection configuration according to a connection target of the cloud connection request so as to realize connection between the target VPC virtual machine and the connection target. According to the technical scheme of the invention, a plurality of cloud connections of the cloud platform can share the same cloud connector instance, are isolated from one another in a network isolation manner and do not influence one another, and can be dynamically expanded and contracted according to the number of connections, so that the purpose of saving resources is achieved. The cloud connection can support multiple cloud connection modes in the same cloud connection instance, different cloud connection access modes are selected according to different networking, and the cloud connection instance establishes different connection channels and provides multiple dynamic connection modes.

Description

Technical Field

[0001] The present invention relates to the field of computer technology, and in particular to a dynamic cloud connection method, device, equipment and medium applied to VPC. Background Art

[0002] VPC (Virtual Private Cloud) is a customized logically isolated network space on the cloud, which is a network space that can be customized by tenants. VPCs are completely isolated from each other, which ensures the logical isolation of the second layer. Tenants can flexibly customize the network environment, subnet segments, routing tables, etc. Multiple subnets can be established in a VPC. Tenant virtual machines in the same VPC can communicate with each other, but tenant virtual machines in different VPCs cannot communicate.

[0003] Depending on business needs, virtual machines in a VPC need to be able to access resources on other clouds and off-clouds, and Cloud Connect can provide a network capability to build a high-speed and stable connection between a virtual private network (VPC) on the cloud and other VPCs on the cloud and multiple data centers off the cloud. The current mainstream cloud connection methods of cloud vendors, such as peer-to-peer connection, cloud dedicated line, and VPN, are relatively simple, and each connection will occupy a certain amount of cloud platform resources.

[0004] In summary, a method is needed to implement dynamic cloud connections with multiple connection methods within a VPC. Summary of the invention

[0005] The embodiments of the present invention provide a dynamic cloud connection method, apparatus, device and medium applied to VPC, which can realize dynamic cloud connection in multiple connection modes within VPC.

[0006] According to one aspect of the present invention, a dynamic cloud connection method applied to a VPC is provided, comprising:

[0007] Establish a shared cloud connection instance on the cloud platform;

[0008] In response to a cloud connection establishment request of a target VPC virtual machine in a target VPC, establishing a connection between the shared cloud connector instance and the target VPC virtual machine;

[0009] In response to the cloud connection request of the target VPC virtual machine, connection configuration is performed according to the connection target of the cloud connection request to achieve connection between the target VPC virtual machine and the connection target.

[0010] Optionally, establishing a connection between the shared cloud connector instance and the target VPC virtual machine includes:

[0011] Create an additional target network segment in the target VPC;

[0012] Allocate a network card in the target network segment to the cloud connection instance, and establish a connection between the cloud connection instance and the target VPC virtual machine.

[0013] Optionally, when the connection target is within a first VPC in the same region as the target VPC, performing connection configuration according to the connection target of the cloud connection request includes:

[0014] Creating a new first namespace in the cloud connection instance and additionally creating the target network segment in the first VPC;

[0015] Allocate a network card in the target network segment to hang on the cloud connection instance;

[0016] Adding the network card of the target VPC and the network card of the first VPC on the cloud connection instance to the first namespace;

[0017] A connection channel between the target VPC and the first VPC is established through routing.

[0018] Optionally, when the connection target is in a second VPC in a different region from the target VPC, performing connection configuration according to the connection target of the cloud connection request includes:

[0019] Start a cloud connector in each region where the target VPC is located and the region where the second VPC is located, and create the target network segment in each of the target VPC and the second VPC;

[0020] Allocate a network card in the target network segment to the cloud connection instance, and create a second namespace in the cloud connection instance;

[0021] A connection channel between the target VPC and the second VPC is established according to the routing information in the BGP routing table.

[0022] Optionally, when the connection target is a VPN of another data center, performing connection configuration according to the connection target of the cloud connection request includes:

[0023] Starting a VPN process in the cloud connection instance;

[0024] Create a new network card in the cloud connection instance and configure a public IP, and establish a tunnel connection with the offline VPN through the public network or dedicated line.

[0025] Optionally, when the connection target is a dedicated line of an offline data center, performing connection configuration according to the connection target of the cloud connection request includes:

[0026] Create a new namespace in the cloud connection instance and add a network card, where the network card is located in a dedicated network interconnected with the offline data center, and add a dedicated interconnection route entry to the hybrid cloud peer in the routing table of the target VPC and the namespace of the cloud connection instance;

[0027] At the dedicated Internet exit of the hybrid cloud peer, add a dedicated interconnection routing entry to the local end and establish a dedicated connection with the offline data center through IGP notification.

[0028] Optionally, the method further includes:

[0029] In response to the connection deletion request, the network card, namespace, and route corresponding to the connection request in the cloud connection instance are deleted.

[0030] According to another aspect of the present invention, a dynamic cloud connection device applied to a VPC is provided, comprising:

[0031] An establishing unit, used for establishing a shared cloud connection instance on a cloud platform;

[0032] A connection unit, configured to establish a connection between the shared cloud connector instance and the target VPC virtual machine in response to a cloud connection establishment request of the target VPC virtual machine in the target VPC;

[0033] A configuration unit is used to respond to the cloud connection request of the target VPC virtual machine and perform connection configuration according to the connection target of the cloud connection request to achieve connection between the target VPC virtual machine and the connection target.

[0034] According to another aspect of the present invention, there is provided an electronic device, the electronic device comprising:

[0035] At least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores a computer program executable by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can execute the dynamic cloud connection method applied to VPC as described in any embodiment of the present invention.

[0036] According to another aspect of the present invention, a computer-readable storage medium is provided, wherein the computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a processor to implement the dynamic cloud connection method applied to VPC described in any embodiment of the present invention when executed.

[0037] The technical solution of the embodiment of the present invention includes: establishing a shared cloud connection instance on the cloud platform; in response to a cloud connection establishment request of a target VPC virtual machine in a target VPC, establishing a connection between the shared cloud connector instance and the target VPC virtual machine; in response to a cloud connection request of the target VPC virtual machine, performing connection configuration according to the connection target of the cloud connection request to achieve the connection between the target VPC virtual machine and the connection target. The technical solution of the embodiment of the present invention is that multiple cloud connections on a cloud platform can share the same cloud connector instance, and are isolated from each other by network isolation so that they do not affect each other, and can be dynamically scaled according to the number of connections, thereby achieving the purpose of saving resources. The cloud connection can support multiple cloud connection modes in the same cloud connection instance. Different cloud connection access modes are selected according to different networking. The cloud connection instance will establish different connection channels and provide multiple dynamic connection modes.

[0038] It should be understood that the contents described in this section are not intended to identify the key or important features of the embodiments of the present invention, nor are they intended to limit the scope of the present invention. Other features of the present invention will become easily understood through the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0039] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0040] Figure 1 is a flow chart of a dynamic cloud connection method applied to a VPC provided by an embodiment of the present invention;

[0041] Figure 2 This is a basic architecture diagram of a dynamic cloud connection method for VPC provided by an embodiment of the present invention;

[0042] Figure 3 It is a data plane flow chart provided by an embodiment of the present invention;

[0043] Figure 4 It is a structural schematic diagram of a dynamic cloud connection device applied to VPC provided by an embodiment of the present invention;

[0044] Figure 5 It is a structural diagram of an electronic device that implements the dynamic cloud connection method applied to VPC according to an embodiment of the present invention. DETAILED DESCRIPTION

[0045] In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, rather than all the embodiments. Based on the embodiments in the present invention, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of the present invention.

[0046] It should be noted that the terms "first", "second", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0047] The present invention aims to solve the problems that the current cloud connection mode is relatively single, cannot dynamically adapt to multiple networking modes, has complex routing configuration, and occupies a large amount of platform resources, and proposes a dynamic cloud connector implementation method based on shared instances. Multiple cloud connections on a cloud platform can share the same cloud connector instance, and are isolated from each other by network isolation so that they do not affect each other, and can be dynamically scaled according to the number of connections, thereby achieving the purpose of saving resources. The cloud connection can support multiple cloud connection modes in the same cloud connection instance, such as dedicated line connection, VPN connection, peer-to-peer connection, public network connection, etc.

[0048] Figure 1 is a flow chart of a dynamic cloud connection method applied to VPC provided by an embodiment of the present invention, such as Figure 1 As shown, the method includes:

[0049] S110. Establish a shared cloud connection instance on the cloud platform.

[0050] A shared cloud connection instance is established on the cloud platform. The cloud connection instance can be packaged into a mirror in advance and controlled by the control layer, and can be quickly created and destroyed.

[0051] S120. In response to a cloud connection establishment request of a target VPC virtual machine in a target VPC, establish a connection between the shared cloud connector instance and the target VPC virtual machine.

[0052] In an embodiment of the present invention, establishing a connection between the shared cloud connector instance and the target VPC virtual machine includes:

[0053] Create an additional target network segment in the target VPC;

[0054] Allocate a network card in the target network segment to the cloud connection instance, and establish a connection between the cloud connection instance and the target VPC virtual machine.

[0055] When a virtual machine in a VPC needs to establish a cloud connection, the control layer service will create an additional 11.0.0.0 / 24 network segment in the VPC and allocate a network card in the 11.0.0.0 / 24 network segment to the cloud connection instance. Through this method, the cloud connection instance establishes a connection with the target VPC virtual machine.

[0056] S130. In response to the cloud connection request of the target VPC virtual machine, perform connection configuration according to the connection target of the cloud connection request to achieve connection between the target VPC virtual machine and the connection target.

[0057] In an embodiment of the present invention, when the connection target is in a first VPC in the same region as the target VPC, performing connection configuration according to the connection target of the cloud connection request includes:

[0058] Creating a new first namespace in the cloud connection instance and additionally creating the target network segment in the first VPC;

[0059] Allocate a network card in the target network segment to hang on the cloud connection instance;

[0060] Adding the network card of the target VPC and the network card of the first VPC on the cloud connection instance to the first namespace;

[0061] A connection channel between the target VPC and the first VPC is established through routing.

[0062] If the target VPC VM wants to establish a connection with another VPC in the same region, a new namespace is created in the cloud connection instance, and an additional 11.0.0.0 / 24 network segment is created in another VPC. A network card in the 11.0.0.0 / 24 network segment is allocated to the cloud connection instance. Both network cards on the cloud connection instance are added to the namespace, and a connection channel is established between the two VPCs through routing.

[0063] In an embodiment of the present invention, when the connection target is in a second VPC in a different region from the target VPC, performing connection configuration according to the connection target of the cloud connection request includes:

[0064] Start a cloud connector in each region where the target VPC is located and the region where the second VPC is located, and create the target network segment in each of the target VPC and the second VPC;

[0065] Allocate a network card in the target network segment to the cloud connection instance, and create a second namespace in the cloud connection instance;

[0066] A connection channel between the target VPC and the second VPC is established according to the routing information in the BGP routing table.

[0067] For VPCs that need to be interconnected across regions, a cloud connector needs to be started in each region, and an additional 11.0.0.0 / 24 network segment is created in each VPC. A network card in the 11.0.0.0 / 24 network segment will be allocated to the cloud connection instance. A namespace will be created in the cloud connection instance, and a BGP process will be started in the cloud connection instance. The BGP dynamic routing protocol will be issued through the control layer, and the routing update mechanism of the BGP protocol will be used to maintain the routing reachability between each virtual network on each cloud in real time. The cloud connection instance will encapsulate the message through the tunnel based on the routing information in the BGP routing table and send it to the cloud connection instance in the virtual network on the target cloud, and then it will be decapsulated and delivered to the target host.

[0068] In an embodiment of the present invention, when the connection target is a VPN of another data center, performing connection configuration according to the connection target of the cloud connection request includes:

[0069] Starting a VPN process in the cloud connection instance;

[0070] Create a new network card in the cloud connection instance and configure a public IP, and establish a tunnel connection with the offline VPN through the public network or dedicated line.

[0071] If the VM in the target VPC wants to establish a VPN connection with another data center, start the VPN process in the cloud connection instance, create a new network card in the cloud connection instance and configure a public IP, and establish a tunnel connection with the offline VPN through the public network or dedicated line.

[0072] In an embodiment of the present invention, when the connection target is a dedicated line of an offline data center, performing connection configuration according to the connection target of the cloud connection request includes:

[0073] Create a new namespace in the cloud connection instance and add a network card, where the network card is located in a dedicated network interconnected with the offline data center, and add a dedicated interconnection route entry to the hybrid cloud peer in the routing table of the target VPC and the namespace of the cloud connection instance;

[0074] At the dedicated Internet exit of the hybrid cloud peer, add a dedicated interconnection routing entry to the local end and establish a dedicated connection with the offline data center through IGP notification.

[0075] If the virtual machine in the VPC wants to establish a dedicated line connection with other data centers, a new namespace is created in the cloud connection instance, and another network card is added. The network card is located in the dedicated network that can be interconnected with the offline data center. In the routing table (qrouter) of the vpc and the namespace of the cloud connection instance, a dedicated line interconnection route entry to the hybrid cloud peer is added; at the dedicated line Internet exit of the hybrid cloud peer, a dedicated line interconnection route entry to the local end is added and announced through IGP. In this way, a dedicated line connection with the offline data center is achieved.

[0076] In an embodiment of the present invention, the method further includes: in response to a connection deletion request, deleting the network card, namespace, and route corresponding to the connection request in the cloud connection instance.

[0077] In a preferred embodiment, Figure 2 This is a basic architecture diagram of a dynamic cloud connection method for VPC provided by an embodiment of the present invention. The method can be implemented by the following components: 1) northbound interface; 2) configuration database; 3) cloud connection management module; 5) routing management module.

[0078] Northbound interface: Provides a northbound interface to the cloud computing management platform or third-party platform to provide functions such as creation, modification, deletion, cloud connection network, deployment of services, and issuance of policies.

[0079] Configuration database: used to manage cloud connection, routing and other data.

[0080] Cloud connection management module: By processing the instructions of the northbound interface, it is responsible for the management functions of cloud connection instance network cards, namespaces, addition, modification, deletion, and the startup and destruction of BGP processes and VPN processes.

[0081] Routing management module: responsible for the management of all routing rules of cloud connection instances.

[0082] Cloud connection agent: Started inside the cloud connection instance, receives instructions from the cloud connection management module and the routing management module, and manages network cards, namespaces, routing rules, etc. inside the cloud connection instance.

[0083] Figure 3 is a data plane flow chart provided by an embodiment of the present invention, such as Figure 3 As shown:

[0084] For VPCs in the same region that need to be interconnected, create an additional 11.0.0.0 / 24 network segment in each VPC, allocate a network card in the 11.0.0.0 / 24 network segment and hang it on the cloud connection instance. Create a namespace in the cloud connection instance, add the network cards of the VPCs that need to be interconnected to the namespace, and establish connection channels between multiple VPCs through routing. Maintain the routing policy between different VPC subnets in the namespace, and point the next hop of the route through the network card of the cloud connector. As shown in Table 1, the subnet 192.168.1.0 / 24 in VPC1 and the subnet 192.168.2.0 / 24 in VPC2 are interconnected. The network card address of the cloud connector that is interconnected with VPC1 is IP1, and the network card address of the cloud connector that is interconnected with VPC2 is IP2. The connection channel is opened through the namespace routing.

[0085] For VPCs that need to be interconnected across regions, a cloud connector needs to be started in each region, and an additional 11.0.0.0 / 24 network segment is created in each VPC. A network card in the 11.0.0.0 / 24 network segment will be allocated to the cloud connection instance. A namespace will be created in the cloud connection instance, and a BGP process will be started in the cloud connection instance. The BGP dynamic routing protocol will be issued through the control layer, and the routing update mechanism of the BGP protocol will be used to maintain the routing reachability between each virtual network on each cloud in real time. The cloud connection instance will encapsulate the message through the tunnel based on the routing information in the BGP routing table and send it to the cloud connection instance in the virtual network on the target cloud, and then it will be decapsulated and delivered to the target host.

[0086] If the VMs in the VPC want to establish VPN connections with other data centers, an additional 11.0.0.0 / 24 network segment is created in each VPC, and a network card in the 11.0.0.0 / 24 network segment is allocated to the cloud connection instance. The VPN process is started in the cloud connection instance, and a new network card is created in the cloud connection instance and a public IP is configured. A tunnel connection with the offline VPN is established through the public IP or a dedicated line.

[0087] If the virtual machine in the VPC wants to establish a dedicated line connection with other data centers, a new namespace is created in the cloud connection instance, and another network card is added. The network card is located in the dedicated line network that can be interconnected with the offline data center. The dedicated line interconnection route entry to the hybrid cloud peer is added in the VPC routing table (qrouter) and the namespace of the cloud connection instance; the dedicated line interconnection route entry to the local end is added at the dedicated line Internet exit of the hybrid cloud peer and announced through IGP. In this way, a dedicated line connection with the offline data center is achieved.

[0088] The present invention aims at the problems that the current cloud connection mode is relatively single, cannot dynamically adapt to multiple networking modes, has complex routing configuration, and occupies a large amount of platform resources, and proposes a dynamic cloud connector implementation method based on shared instances. Multiple cloud connections on a cloud platform can share the same cloud connector instance, and are isolated from each other through network isolation so that they do not affect each other, and can be dynamically scaled according to the number of connections, thereby achieving the purpose of saving resources. The cloud connection can support multiple cloud connection modes in the same cloud connection instance, such as dedicated line connection, VPN connection, peer connection, public network connection, etc., without the need for routing configuration, and automatic routing learning is issued through dynamic BGP, thereby reducing complex routing configuration. At the same time, according to different networking, different cloud connection access methods are selected, and the cloud connection instance will establish different connection channels, and each connection channel is isolated from each other.

[0089] Figure 4 is a structural diagram of a dynamic cloud connection device applied to VPC provided by an embodiment of the present invention, such as Figure 4 As shown, the device comprises:

[0090] An establishing unit 410 is used to establish a shared cloud connection instance on the cloud platform;

[0091] A connection unit 420 is configured to establish a connection between the shared cloud connector instance and the target VPC virtual machine in response to a cloud connection establishment request of the target VPC virtual machine in the target VPC;

[0092] The configuration unit 430 is used to respond to the cloud connection request of the target VPC virtual machine and perform connection configuration according to the connection target of the cloud connection request to achieve connection between the target VPC virtual machine and the connection target.

[0093] It is to be understood that the structure illustrated in the embodiment of the present invention does not constitute a specific limitation on the dynamic cloud connection device applied to VPC. In other embodiments of the present invention, the dynamic cloud connection applied to VPC may include more or fewer components than shown in the figure, or combine some components, or split some components, or arrange the components differently. The components shown in the figure may be implemented in hardware, software, or a combination of software and hardware.

[0094] The information interaction, execution process and other contents between the units in the above-mentioned device are based on the same concept as the embodiment of the method of the present invention. For specific contents, please refer to the description in the embodiment of the method of the present invention, and no further description is given here.

[0095] Figure 5A schematic diagram of the structure of an electronic device 10 that can be used to implement an embodiment of the present invention is shown. The electronic device is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workstations, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device can also represent various forms of mobile devices, such as personal digital processing, cellular phones, smart phones, wearable devices (such as helmets, glasses, watches, etc.) and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely examples and are not intended to limit the implementation of the present invention described and / or required herein.

[0096] like Figure 5 As shown, the electronic device 10 includes at least one processor 11, and a memory connected to the at least one processor 11, such as a read-only memory (ROM) 12, a random access memory (RAM) 13, etc., wherein the memory stores a computer program that can be executed by at least one processor, and the processor 11 can perform various appropriate actions and processes according to the computer program stored in the read-only memory (ROM) 12 or the computer program loaded from the storage unit 18 to the random access memory (RAM) 13. In the RAM 13, various programs and data required for the operation of the electronic device 10 can also be stored. The processor 11, the ROM 12, and the RAM 13 are connected to each other through a bus 14. An input / output (I / O) interface 15 is also connected to the bus 14.

[0097] A number of components in the electronic device 10 are connected to the I / O interface 15, including: an input unit 16, such as a keyboard, a mouse, etc.; an output unit 17, such as various types of displays, speakers, etc.; a storage unit 18, such as a disk, an optical disk, etc.; and a communication unit 19, such as a network card, a modem, a wireless communication transceiver, etc. The communication unit 19 allows the electronic device 10 to exchange information / data with other devices through a computer network such as the Internet and / or various telecommunication networks.

[0098] The processor 11 may be a variety of general and / or special processing components with processing and computing capabilities. Some examples of the processor 11 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various special artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, a digital signal processor (DSP), and any appropriate processor, controller, microcontroller, etc. The processor 11 executes the various methods and processes described above, such as a dynamic cloud connection method applied to a VPC.

[0099] In some embodiments, the dynamic cloud connection method applied to VPC can be implemented as a computer program, which is tangibly contained in a computer-readable storage medium, such as a storage unit 18. In some embodiments, part or all of the computer program can be loaded and / or installed on the electronic device 10 via the ROM 12 and / or the communication unit 19. When the computer program is loaded into the RAM 13 and executed by the processor 11, one or more steps of the dynamic cloud connection method applied to VPC described above can be performed. Alternatively, in other embodiments, the processor 11 can be configured to execute the dynamic cloud connection method applied to VPC in any other appropriate manner (for example, by means of firmware).

[0100] Various implementations of the systems and techniques described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard products (ASSPs), systems on chips (SOCs), load programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various implementations can include: being implemented in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which can be a special purpose or general purpose programmable processor that can receive data and instructions from a storage system, at least one input device, and at least one output device, and transmit data and instructions to the storage system, the at least one input device, and the at least one output device.

[0101] Computer programs for implementing the methods of the present invention may be written in any combination of one or more programming languages. These computer programs may be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, so that when the computer program is executed by the processor, the functions / operations specified in the flow chart and / or block diagram are implemented. The computer program may be executed entirely on the machine, partially on the machine, partially on the machine and partially on a remote machine as a stand-alone software package, or entirely on a remote machine or server.

[0102] In the context of the present invention, a computer-readable storage medium may be a tangible medium that may contain or store a computer program for use by or in combination with an instruction execution system, device or equipment. A computer-readable storage medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, devices or equipment, or any suitable combination of the foregoing. Alternatively, a computer-readable storage medium may be a machine-readable signal medium. A more specific example of a machine-readable storage medium may include an electrical connection based on one or more lines, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0103] To provide interaction with a user, the systems and techniques described herein may be implemented on an electronic device having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and a pointing device (e.g., a mouse or trackball) through which the user can provide input to the electronic device. Other types of devices may also be used to provide interaction with the user; for example, the feedback provided to the user may be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user may be received in any form (including acoustic input, voice input, or tactile input).

[0104] The systems and techniques described herein may be implemented in a computing system that includes backend components (e.g., as a data server), or a computing system that includes middleware components (e.g., an application server), or a computing system that includes frontend components (e.g., a user computer with a graphical user interface or a web browser through which a user can interact with implementations of the systems and techniques described herein), or a computing system that includes any combination of such backend components, middleware components, or frontend components. The components of the system may be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include: a local area network (LAN), a wide area network (WAN), a blockchain network, and the Internet.

[0105] A computing system may include a client and a server. The client and the server are generally remote from each other and usually interact through a communication network. The client and server relationship is generated by computer programs running on the corresponding computers and having a client-server relationship with each other. The server may be a cloud server, also known as a cloud computing server or cloud host, which is a host product in the cloud computing service system to solve the defects of difficult management and weak business scalability in traditional physical hosts and VPS services.

[0106] It should be understood that the various forms of processes shown above can be used to reorder, add or delete steps. For example, the steps described in the present invention can be executed in parallel, sequentially or in different orders, as long as the desired results of the technical solution of the present invention can be achieved, and this document does not limit this.

[0107] The above specific implementations do not constitute a limitation on the protection scope of the present invention. It should be understood by those skilled in the art that various modifications, combinations, sub-combinations and substitutions can be made according to design requirements and other factors. Any modification, equivalent substitution and improvement made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

Claims

1. A dynamic cloud connection method applied to VPC, characterized in that: include: Establish a shared cloud connection instance on the cloud platform; In response to a cloud connection establishment request of a target VPC virtual machine in a target VPC, establishing a connection between the shared cloud connector instance and the target VPC virtual machine; In response to the cloud connection request of the target VPC virtual machine, connection configuration is performed according to the connection target of the cloud connection request to achieve connection between the target VPC virtual machine and the connection target.

2. The method according to claim 1, characterized in that The establishing a connection between the shared cloud connector instance and the target VPC virtual machine includes: Create an additional target network segment in the target VPC; Allocate a network card in the target network segment to the cloud connection instance, and establish a connection between the cloud connection instance and the target VPC virtual machine.

3. The method according to claim 2, characterized in that When the connection target is within a first VPC in the same region as the target VPC, performing connection configuration according to the connection target of the cloud connection request includes: Creating a new first namespace in the cloud connection instance and additionally creating the target network segment in the first VPC; Allocate a network card in the target network segment to hang on the cloud connection instance; Adding the network card of the target VPC and the network card of the first VPC on the cloud connection instance to the first namespace; A connection channel between the target VPC and the first VPC is established through routing.

4. The method according to claim 3, characterized in that: When the connection target is in a second VPC in a different region from the target VPC, performing connection configuration according to the connection target of the cloud connection request includes: Start a cloud connector in each region where the target VPC is located and the region where the second VPC is located, and create the target network segment in each of the target VPC and the second VPC; Allocate a network card in the target network segment to the cloud connection instance, and create a second namespace in the cloud connection instance; A connection channel between the target VPC and the second VPC is established according to the routing information in the BGP routing table.

5. The method according to claim 1, characterized in that When the connection target is a VPN of another data center, performing connection configuration according to the connection target of the cloud connection request includes: Starting a VPN process in the cloud connection instance; Create a new network card in the cloud connection instance and configure a public IP, and establish a tunnel connection with the offline VPN through the public network or dedicated line.

6. The method according to claim 1, characterized in that When the connection target is a dedicated line of an offline data center, performing connection configuration according to the connection target of the cloud connection request includes: Create a new namespace in the cloud connection instance and add a network card, where the network card is located in a dedicated network interconnected with the offline data center, and add a dedicated interconnection route entry to the hybrid cloud peer in the routing table of the target VPC and the namespace of the cloud connection instance; At the dedicated Internet egress of the hybrid cloud peer, add a dedicated interconnection routing entry to the local end and establish a dedicated connection with the offline data center through IGP notification.

7. The method according to claim 4, characterized in that Further including: In response to the connection deletion request, the network card, namespace, and route corresponding to the connection request in the cloud connection instance are deleted.

8. A dynamic cloud connection device applied to a VPC, characterized in that: include: An establishing unit, used for establishing a shared cloud connection instance on a cloud platform; A connection unit, configured to establish a connection between the shared cloud connector instance and the target VPC virtual machine in response to a cloud connection establishment request of the target VPC virtual machine in the target VPC; A configuration unit is used to respond to the cloud connection request of the target VPC virtual machine and perform connection configuration according to the connection target of the cloud connection request to achieve connection between the target VPC virtual machine and the connection target.

9. An electronic device, characterized in that include: at least one processor; And a memory communicatively connected to the at least one processor; wherein the memory stores a computer program executable by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can execute the dynamic cloud connection method applied to VPC as described in any one of claims 1-7.

10. A computer readable medium, characterized in that The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a processor to implement the dynamic cloud connection method applied to VPC according to any one of claims 1 to 7 when executed.

Images