Network construction method, device, equipment, medium and product

Abstract

The invention relates to the technical field of communication, and particularly discloses a network construction method, device, equipment, medium and product, the method is used for SDN network target networking, the target networking comprises an edge service area, a cloud data center and an SDN controller, and the method comprises the following steps: constructing a virtual extended local area network two-layer tunnel between convergence equipment; an exit router of a cloud data center and an interface of each convergence device are configured to be a port convergence port, the port convergence port is configured to allow a plurality of virtual links to be communicated, and a virtual private line service two-layer tunnel is constructed between the exit router and a first-level edge computing power device. And splicing the two-layer tunnel of the virtual extended local area network with the two-layer tunnel of the virtual private line service. The data of the convergence device can be directly transmitted to the egress router through the virtual extended local area network two-layer tunnel, and the egress router directly forwards the data through the virtual private line service two-layer tunnel, so that two-layer intercommunication without deploying a high-performance switch is realized.

Description

Technical Field

[0001] The present invention relates to the field of communication technology, and specifically discloses a network construction method, device, equipment, medium and product. Background Art

[0002] In the future network construction, there will be the construction of backbone nodes and edge sites. The backbone nodes are cloud data centers, and the edge sites are usually small data centers or integrated devices with storage, computing power, and forwarding capabilities.

[0003] Data centers and edge nodes usually provide network interconnection of computing resource virtual machines from the center to the edge for future network users, that is, Layer 2 and Layer 3 interconnection of east-west traffic between the center and the edge. Layer 3 interconnection carries IP services and is usually achieved through routing. The purpose of Layer 2 interconnection is to conduct non-IP network experiments based on MAC addressing and forwarding. The closest solution at present is the traditional large Layer 2 network scenario, which is the DCI scenario and the multi-Fabric scenario. The solution is based on VXLAN overlay technology, SDN network controller manages the border network equipment, and realizes Layer 2 interconnection of virtual machines in two data centers by planning VXLAN ID and mapping VXLAN ID on two border network devices, so as to realize dynamic migration of virtual machines over a large range or even across regions.

[0004] However, in the above solution, the border network devices use high-performance switches. When the border network devices cannot be deployed, Layer 2 intercommunication cannot be achieved. Summary of the invention

[0005] In view of this, the present application provides a network construction method, device, equipment, medium and product, which can achieve Layer 2 intercommunication without deploying high-performance switches. The technical solution is as follows.

[0006] In a first aspect, a network construction method is provided, the method is used for a target network; the target network is an SDN network; the target network includes an edge service area, a cloud data center, and an SDN controller; the edge service area includes a first-level edge computing device and a second-level edge computing device; the cloud data center includes a backbone device and a convergence device, the method is executed by the SDN controller, and the method includes:

[0007] Build a virtual extended LAN Layer 2 tunnel between each aggregation device;

[0008] The interfaces of the egress routers of the cloud data center and each aggregation device are configured as port aggregation ports, and are configured to allow the connection of multiple virtual links;

[0009] A virtual private line service layer 2 tunnel is constructed between the egress router and the first-level edge computing device to splice the virtual extended LAN layer 2 tunnel with the virtual private line service layer 2 tunnel.

[0010] In a second aspect, a target networking system is provided, wherein the target networking is an SDN network; the target networking includes an edge business area, a cloud data center, and an SDN controller; the edge business area includes a primary edge computing device and a secondary edge computing device; the cloud data center includes a backbone device and a convergence device;

[0011] A virtual extended LAN Layer 2 tunnel is built between each aggregation device; the interface between the egress router of the cloud data center and each aggregation device is configured as a port aggregation port and is configured to allow the connection of multiple virtual links; a virtual dedicated line service Layer 2 tunnel is built between the egress router and the first-level edge computing device.

[0012] In a third aspect, a network construction device is provided, which is applied to a target network; the target network is an SDN network; the target network includes an edge service area, a cloud data center, and an SDN controller; the edge service area includes a first-level edge computing device and a second-level edge computing device; the cloud data center includes a backbone device and a convergence device, and the device is arranged in the SDN controller, and the device includes:

[0013] A first tunnel building module is used to build a virtual extended LAN layer 2 tunnel between various aggregation devices;

[0014] A configuration module, configured to configure the interfaces of the egress router of the cloud data center and each aggregation device as port aggregation ports, and configured to allow the connection of multiple virtual links;

[0015] The second tunnel construction module is used to build a virtual private line service layer 2 tunnel between the egress router and the first-level edge computing device to splice the virtual extended local area network layer 2 tunnel with the virtual private line service layer 2 tunnel.

[0016] In a fourth aspect, a computer device is provided, the computer device comprising a processor and a memory, the memory storing at least one instruction, the at least one instruction being loaded and executed by the processor to implement the above-mentioned network construction method.

[0017] In a fifth aspect, a computer-readable storage medium is provided, wherein at least one instruction is stored in the storage medium, and the at least one instruction is loaded and executed by a processor to implement the above-mentioned network construction method.

[0018] In a sixth aspect, a computer program product or a computer program is provided, wherein the computer program product or the computer program includes computer instructions, and the computer instructions are stored in a computer-readable storage medium. A processor of a computer device reads the computer instructions from the computer-readable storage medium, and the processor executes the computer instructions, so that the computer device executes the above-mentioned network construction method.

[0019] The technical solution provided by this application may have the following beneficial effects:

[0020] When there are edge business areas and cloud data centers in the target network of the present application, the edge business area includes first-level edge computing equipment and second-level edge computing equipment, the cloud data center includes backbone equipment and aggregation equipment, and the target network is an SDN network, the SDN controller can build a virtual extended LAN Layer 2 tunnel between each aggregation device, and configure the interface between the egress router and the aggregation device as a port aggregation port, so that the virtual links of each aggregation device can transmit data through the egress router; and the SDN controller also builds a virtual dedicated line service Layer 2 tunnel between the egress router and the first-level edge computing equipment, thereby realizing the splicing of the virtual extended LAN Layer 2 tunnel and the virtual dedicated line service Layer 2 tunnel, that is, the data of the aggregation device can be directly transmitted to the egress router through the virtual extended LAN Layer 2 tunnel, and the egress router directly forwards data through the virtual dedicated line service Layer 2 tunnel, thereby realizing Layer 2 intercommunication without deploying a high-performance switch. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] In order to more clearly illustrate the specific implementation methods of the present invention or the technical solutions in the prior art, the drawings required for use in the specific implementation methods or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some implementation methods of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0022] Figure 1 The present invention is a flowchart of a network construction method according to an exemplary embodiment.

[0023] Figure 2 The diagram is a schematic diagram of a system architecture of a target networking system according to an exemplary embodiment.

[0024] Figure 3 The figure is a schematic diagram showing the structure of a network construction device according to an exemplary embodiment.

[0025] Figure 4 It is a structural schematic diagram of a computer device provided by an optional embodiment of the present invention. DETAILED DESCRIPTION

[0026] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative work are within the scope of protection of the present invention.

[0027] In the description of the embodiments of the present application, the term "corresponding" may indicate a direct or indirect correspondence between two items, or an association relationship between the two items, or a relationship between indication and being indicated, configuration and being configured, and the like.

[0028] In the context of future network construction, large Layer 2 network scenarios are DCI scenarios and multi-Fabric scenarios. The solution is based on VXLAN overlay technology. The SDN network controller manages the border network devices. By planning the VXLAN ID and mapping the VXLAN ID on the two border network devices, the Layer 2 intercommunication of the virtual machines in the two data centers can be achieved, and the dynamic migration of virtual machines in a large range or even across regions can be realized.

[0029] However, the above solution requires high-performance border network equipment, which is very expensive and cannot be deployed in some cases, making it impossible to achieve Layer 2 interoperability.

[0030] According to an embodiment of the present invention, an embodiment of a network construction method is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0031] In this embodiment, a network construction method is provided, which can be used for a target network, wherein the target network is an SDN network; the target network includes an edge service area, a cloud data center, and an SDN controller; the edge service area includes a primary edge computing device and a secondary edge computing device; the cloud data center includes a backbone device and an aggregation device, and the method is executed by the SDN controller. Figure 1 is a flow chart of a network construction method according to an embodiment of the present invention. Figure 1 As shown, the process includes the following steps:

[0032] Step S101, constructing a virtual extended LAN layer 2 tunnel between various aggregation devices.

[0033] Specifically, first, VXLAN-related parameters are configured on the SDN controller to establish a VXLAN tunnel between aggregation devices. The parameters may optionally include an allocation range, a tunnel endpoint, and the like.

[0034] It can be understood that the aggregation device is the leaf switch in the cloud data center.

[0035] Further, the leaf switch establishes a neighbor relationship with the neighbor leaf switch through the EVPN (Ethernet Virtual Private Network) protocol or other related protocols. The SDN controller automatically creates a VXLAN tunnel between each leaf switch according to the configured VXLAN parameters and neighbor relationship.

[0036] Furthermore, the mapping relationship between VLAN and VXLAN ID is configured on the leaf switch so that when the virtual machine sends data, the data is encapsulated into the corresponding VXLAN tunnel according to the VLAN to which it belongs.

[0037] Step S102: The interfaces between the egress router of the cloud data center and each aggregation device are configured as port aggregation ports, and are configured to allow the connection of multiple virtual links.

[0038] Specifically, first, identify and determine the interfaces connected to each leaf switch on the cloud data center egress router. On the egress router, configure these interfaces to port aggregation mode. Port aggregation, i.e., link aggregation, is the process of binding multiple physical interfaces into one logical interface to achieve parallel transmission of multiple physical links and improve data transmission efficiency and fault tolerance.

[0039] Furthermore, it is necessary to configure VLAN (Virtual Local Area Network) on the interface connecting the egress router and the leaf switch. At the same time, the interface needs to be configured in Trunk mode and allow traffic from multiple VLANs to pass through, to ensure that the virtual machines within the data center can communicate through different VLANs, and that VLAN traffic can be correctly encapsulated and transmitted to the edge business area.

[0040] Step S103, construct a virtual private line service layer 2 tunnel between the egress router and the first-level edge computing device to splice the virtual extended LAN layer 2 tunnel with the virtual private line service layer 2 tunnel.

[0041] Specifically, the devices at both ends of the tunnel are clearly defined as the egress router of the cloud data center and the first-level edge computing device, and the physical interface or sub-interface on each device that will be used to establish the tunnel is determined.

[0042] Furthermore, necessary parameters are configured for the VPWS tunnel on the WAN controller or a corresponding network management system.

[0043] Furthermore, unique RD and RT values ​​are planned and allocated for the VPWS tunnel to be established to ensure the correct propagation and identification of routing information within the tunnel. Specifically, in the EVPN environment, RD (Route Distinguisher) and RT (RouteTarget) values ​​are used to distinguish and import different VPN routing information.

[0044] In an optional implementation, the above step S203 includes:

[0045] The tunnel configuration is sent to the egress router and the first-level edge computing device respectively to build a virtual private line service Layer 2 tunnel between the egress router and the first-level edge computing device; the tunnel configuration includes endpoint devices, physical interfaces, and virtual links.

[0046] Specifically, the tunnel configuration includes an endpoint device, a physical interface, and a virtual link, and optionally, also includes a tunnel type, a tunnel identification ID, a VLAN ID, and the like.

[0047] Next, the configured tunnel parameters, RD / RT values ​​and other information are sent to both ends of the tunnel, that is, the egress router and the first-level edge computing device. The device will automatically establish a tunnel connection based on the received configuration information.

[0048] In summary, the network construction method of the embodiment of the present invention realizes an efficient, flexible and scalable network connection between the cloud data center and the edge business area. Specifically, within the cloud data center, a standard SPINE-LEAF architecture is adopted to build a highly scalable and flexible network topology structure, wherein the SPINE device acts as a core switch, responsible for high-speed data forwarding, and the leaf switch acts as an access switch, responsible for connecting to servers or other terminal devices. In order to realize the Layer 2 communication between virtual machines in the cloud, a virtual extended LAN Layer 2 tunnel, namely a VXLAN tunnel, is constructed between each leaf switch. The SDN controller can intelligently create and manage VXLAN tunnels on the leaf switches. These tunnels logically form a huge Layer 2 network, allowing virtual machines located in different physical locations to communicate as if they were in the same LAN.

[0049] Next, after achieving Layer 2 communication between virtual machines in the cloud, these virtual machines are connected to the external network (i.e., the edge business area). Therefore, it is necessary to configure the interfaces of the egress router of the cloud data center and each leaf switch as port aggregation ports, i.e., Trunk ports, and allow them to connect multiple virtual links (i.e., VLANs). This ensures that the data packets sent from the virtual machines in the cloud can pass through the leaf switch and then be correctly forwarded to the edge business area through the egress router. At the same time, since the port aggregation port supports the transmission of multiple VLANs, different VLANs can be assigned to different virtual machines, thereby achieving more detailed and flexible network traffic management.

[0050] Finally, it is necessary to build a virtual private line service Layer 2 tunnel (VPWS tunnel) between the egress router of the cloud data center and the primary edge computing device in the edge business area. This connects the VXLAN tunnel in the cloud with the network in the edge business area, and realizes Layer 2 intercommunication between the virtual machines in the cloud and the virtual machines in the edge business area. In order to realize the construction and splicing of the tunnel, it is necessary to use the WAN controller (or the corresponding network management system) for configuration and management. The WAN controller can intelligently identify and manage the devices, interfaces and VLAN information in the network, and automatically establish the VPWS tunnel based on this information. At the same time, by planning tunnel parameters such as RD / RT values, the WAN controller can also ensure the correct propagation and identification of routing information in the tunnel. After the splicing is completed, the virtual machines in the cloud and the virtual machines in the edge business area can communicate as if they were in the same LAN, which not only improves the flexibility and scalability of the network, but also provides strong support for the experiment of new services and applications such as 5G and virtual reality. At the same time, by supporting experimental verification of non-IP services, this method also lays a solid foundation for the development of future network infrastructure equipment.

[0051] In some optional implementations, the method further includes:

[0052] The MPLS protocol and the LDP protocol are configured for each first-level edge computing device and each second-level edge computing device in the edge service area, so that each first-level edge computing device and each second-level edge computing device in the edge service area can establish EVPN neighbors with each other.

[0053] Enable MPLS on each primary and secondary edge computing device, and configure the routing protocol required by the MPLS label distribution protocol (such as LDP) to ensure that routing information can be correctly exchanged between devices. Configure the LDP protocol to distribute MPLS labels between edge computing devices. After establishing an LDP session, the device will allocate MPLS labels to each prefix or traffic class based on the routing information and label distribution policy, configure the MPLS forwarding table to forward packets based on the MPLS label, and configure the MPLS label binding and forwarding policy on the device's interface to ensure that the device's MPLS forwarding path is consistent with the expected traffic path to avoid traffic forwarding errors. Next, configure the LDP session on each primary and secondary edge computing device. After the LDP session is established, distribute MPLS labels to each prefix or traffic class. Finally, enable the EVPN function on each primary and secondary edge computing device, configure the EVPN neighbor discovery mechanism, and discover EVPN neighbors between edge computing devices by specifying the IP address of the EVPN neighbor and configuring the authentication information of the EVPN neighbor. After establishing the EVPN neighbor, the devices will exchange EVPN routing information based on the EVPN routing information exchange policy.

[0054] In some optional implementations, the first-level edge computing device is a router device equipped with a computing power board.

[0055] In the future network construction, there will be the construction of backbone nodes and edge sites. The backbone nodes are cloud data centers, and the edge sites are usually small data centers or integrated devices with storage, computing power, and forwarding capabilities. The devices that carry edge sites can be hyper-converged devices, which can be edge computing servers plus network forwarding devices, or routers with computing power functions. This article mainly designs for the third form, inserting X86 computing power boards into frame routers to provide virtualization functions. The routers themselves provide forwarding capabilities. Between data centers and edge nodes, network interconnection of computing resource virtual machines from the center to the edge is usually provided for future network users, that is, the second and third layer interconnection of east-west traffic from the center to the edge. The third layer interconnection carries IP-type services, which is usually achieved through routing. The purpose of the second layer interconnection is to conduct non-IP network experiments based on MAC addressing and forwarding.

[0056] In some optional implementations, the method further includes:

[0057] Create a first virtual machine in a server in a cloud data center, and create a second virtual machine on a first-level edge computing device;

[0058] Setting the same network parameters for the first virtual machine and the second virtual machine;

[0059] After the configuration of the virtual extended LAN layer 2 tunnel and the virtual private line service layer 2 tunnel is completed, messages are forwarded between the first virtual machine and the second virtual machine to determine the interoperability of the target network.

[0060] In the server of the cloud data center, a virtual machine instance is created through a management platform or virtualization software, such as VMware, Hyper-V, etc., and the operating system, memory, CPU, storage and other resources of the first virtual machine are configured, and an IP address is assigned to ensure that it is in the same network or a communicable network with other devices in the cloud data center. Then, in the management interface or management platform of the first-level edge computing router, a virtual machine instance is created on the router or a device connected to it through virtualization software or specific tools.

[0061] Set the same network parameters for the first virtual machine and the second virtual machine, including ensuring that the IP addresses of VM1 and VM2 are in the same subnet or in different subnets that can access each other through routing, setting the same subnet mask for VM1 and VM2, setting the same DNS server address for VM1 and VM2, and if the cloud data center and edge business area use VLAN to isolate different network traffic, configure the same VLAN ID for VM1 and VM2 to ensure that they can be in the same virtual LAN.

[0062] Finally, create a network test tool or script on VM1 to send ICMP Echo requests to the IP address of VM2. At the same time, set up a corresponding network test tool or script on VM2 to receive and respond to ICMP Echo requests, observe and record the test results. If VM1 can successfully connect to VM2 and the response time is reasonable, it means that Layer 2 intercommunication has been achieved between the virtual machines in the target network.

[0063] The embodiment of the present invention also provides a target networking system, such as Figure 2 As shown, the target network is an SDN network; the target network includes an edge business area, a cloud data center, and an SDN controller; the edge business area includes a first-level edge computing device and a second-level edge computing device; the cloud data center includes a backbone device and a convergence device, that is, a leaf switch;

[0064] A virtual extended LAN Layer 2 tunnel is built between each leaf switch; the interface between the egress router of the cloud data center and each leaf switch is configured as a port aggregation port and is configured to allow the connection of multiple virtual links; a virtual private line service Layer 2 tunnel is built between the egress router and the first-level edge computing device.

[0065] The target networking system of this embodiment is automatically completed by the data center SDN network (Software-Defined Networking) controller. The SDN controller can intelligently create and manage VXLAN tunnels on LEAF devices. These tunnels logically form a huge Layer 2 network. By setting the parameters of the VXLAN tunnel, including the tunnel endpoint, VTEP (VXLAN Tunnel End Point) address, etc., and configuring the EVPN neighbor relationship between the leaf switches, virtual machines located in different physical locations can communicate as if they are in the same LAN.

[0066] In the embodiments of the present application, a network construction device is also provided, which is used to implement the above-mentioned embodiments and preferred implementation modes, and the descriptions that have been made will not be repeated. As used below, the term "module" can implement a combination of software and / or hardware of a predetermined function. Although the devices described in the following embodiments are preferably implemented in software, the implementation of hardware, or a combination of software and hardware, is also possible and conceived.

[0067] The present application embodiment provides a network construction device, Figure 3 : is a schematic diagram of a network construction device provided in an embodiment of the present application, the device comprising:

[0068] The first tunnel construction module 301 is used to construct a virtual extended LAN layer 2 tunnel between various aggregation devices;

[0069] Configuration module 302, configured to configure the interfaces of the egress router of the cloud data center and each aggregation device as port aggregation ports, and configured to allow the connection of multiple virtual links;

[0070] The second tunnel construction module 303 is used to construct a virtual private line service layer 2 tunnel between the egress router and the first-level edge computing device to splice the virtual extended LAN layer 2 tunnel with the virtual private line service layer 2 tunnel.

[0071] In a possible implementation, the second tunnel building module 303 further includes:

[0072] The sending submodule is used to send the tunnel configuration to the egress router and the first-level edge computing device respectively, so as to build a virtual private line service Layer 2 tunnel between the egress router and the first-level edge computing device; the tunnel configuration includes endpoint devices, physical interfaces and virtual links.

[0073] In a possible implementation, the device further includes:

[0074] The second configuration module is used to configure the MPLS protocol and the LDP protocol for each first-level edge computing device and the second-level edge computing device in the edge service area, so that each first-level edge computing device and the second-level edge computing device in the edge service area can establish EVPN neighbors with each other.

[0075] In a possible implementation, the device further includes:

[0076] A creation module, used to create a first virtual machine in a server in a cloud data center and create a second virtual machine on a first-level edge computing device;

[0077] A parameter setting module, used to set the same network parameters for the first virtual machine and the second virtual machine;

[0078] The verification module is used to forward messages between the first virtual machine and the second virtual machine after completing the configuration of the virtual extended LAN layer 2 tunnel and the virtual dedicated line service layer 2 tunnel to determine the interoperability of the target network.

[0079] The further functional description of each of the above modules and units is the same as that of the above corresponding embodiments and will not be repeated here.

[0080] The network construction device in this embodiment is presented in the form of a functional unit, where the unit refers to an ASIC (Application Specific Integrated Circuit) circuit, a processor and memory that executes one or more software or fixed programs, and / or other devices that can provide the above functions.

[0081] The embodiment of the present invention also provides a computer device having the above Figure 3 The network construction device shown.

[0082] See also Figure 4 , Figure 4 is a schematic diagram of the structure of a computer device provided by an optional embodiment of the present invention, such as Figure 4As shown, the computer device includes: one or more processors 10, a memory 20, and interfaces for connecting various components, including high-speed interfaces and low-speed interfaces. Various components are connected to each other using different buses for communication, and can be installed on a common mainboard or installed in other ways as needed. The processor can process instructions executed in the computer device, including instructions stored in or on the memory to display graphic information in a graphical user interface on an external input / output device (such as a display device coupled to an interface). In some optional embodiments, if necessary, multiple processors and / or multiple buses can be used together with multiple memories and multiple memories. Similarly, multiple computer devices can be connected, and each device provides some necessary operations (for example, as a server array, a group of blade servers, or a multi-processor system). Figure 4 A processor 10 is taken as an example.

[0083] The processor 10 may be a central processing unit, a network processor or a combination thereof. The processor 10 may further include a hardware chip. The hardware chip may be a dedicated integrated circuit, a programmable logic device or a combination thereof. The programmable logic device may be a complex programmable logic device, a field programmable gate array, a general purpose array logic or any combination thereof.

[0084] The memory 20 stores instructions executable by at least one processor 10, so that the at least one processor 10 executes the method shown in the above embodiment.

[0085] The memory 20 may include a program storage area and a data storage area, wherein the program storage area may store an operating system, an application required for at least one function; the data storage area may store data created according to the use of the computer device, etc. In addition, the memory 20 may include a high-speed random access memory, and may also include a non-transient memory, such as at least one disk storage device, a flash memory device, or other non-transient solid-state storage device. In some optional embodiments, the memory 20 may optionally include a memory remotely arranged relative to the processor 10, and these remote memories may be connected to the computer device via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0086] The memory 20 may include a volatile memory, such as a random access memory; the memory may also include a non-volatile memory, such as a flash memory, a hard disk or a solid state drive; the memory 20 may also include a combination of the above types of memory.

[0087] The computer device further comprises a communication interface 30 for the computer device to communicate with other devices or a communication network.

[0088] The embodiment of the present invention also provides a computer-readable storage medium. The method according to the embodiment of the present invention can be implemented in hardware, firmware, or can be implemented as a computer code that can be recorded in a storage medium, or can be implemented as a computer code that is originally stored in a remote storage medium or a non-temporary machine-readable storage medium and will be stored in a local storage medium through a network download, so that the method described herein can be stored in such software processing on a storage medium using a general-purpose computer, a dedicated processor, or programmable or dedicated hardware. Among them, the storage medium can be a magnetic disk, an optical disk, a read-only storage memory, a random access memory, a flash memory, a hard disk or a solid-state hard disk, etc.; further, the storage medium can also include a combination of the above types of memories. It can be understood that a computer, a processor, a microprocessor controller, or programmable hardware includes a storage component that can store or receive software or computer code. When the software or computer code is accessed and executed by a computer, a processor, or hardware, the method shown in the above embodiment is implemented.

[0089] A part of the present invention may be applied as a computer program product, such as a computer program instruction, which, when executed by a computer, can call or provide the method and / or technical solution according to the present invention through the operation of the computer. Those skilled in the art should understand that the existence of computer program instructions in computer-readable media includes, but is not limited to, source files, executable files, installation package files, etc., and accordingly, the way in which computer program instructions are executed by a computer includes, but is not limited to: the computer directly executes the instruction, or the computer compiles the instruction and then executes the corresponding compiled program, or the computer reads and executes the instruction, or the computer reads and installs the instruction and then executes the corresponding installed program. Here, the computer-readable medium may be any available computer-readable storage medium or communication medium accessible to the computer.

[0090] Although the embodiments of the present invention have been described in conjunction with the accompanying drawings, those skilled in the art may make various modifications and variations without departing from the spirit and scope of the present invention. Such modifications and variations are all within the scope defined by the present invention.

Claims

1. A network construction method, characterized in that: The method is used for target networking; the target networking is an SDN network; the target networking includes an edge service area, a cloud data center and an SDN controller; the edge service area includes a first-level edge computing device and a second-level edge computing device; the cloud data center includes a backbone device and a convergence device, and the method is executed by the SDN controller, and the method includes: Build a virtual extended LAN Layer 2 tunnel between each aggregation device; Configuring the interfaces of the egress router of the cloud data center and each aggregation device as port aggregation ports, and configuring the ports to allow the connection of multiple virtual links; A virtual private line service layer 2 tunnel is constructed between the egress router and the first-level edge computing device to splice the virtual extended LAN layer 2 tunnel with the virtual private line service layer 2 tunnel.

2. The method according to claim 1, characterized in that The step of constructing a virtual private line service layer 2 tunnel between the egress router and the first-level edge computing device includes: The tunnel configuration is sent to the egress router and the first-level edge computing device respectively to build a virtual private line service layer 2 tunnel between the egress router and the first-level edge computing device; the tunnel configuration includes an endpoint device, a physical interface, and a virtual link.

3. The method according to claim 2, characterized in that The method further comprises: The MPLS protocol and the LDP protocol are configured for each first-level edge computing device and each second-level edge computing device in the edge service area, so that each first-level edge computing device and each second-level edge computing device in the edge service area establish EVPN neighbors in pairs.

4. The method according to claim 2, characterized in that: The first-level edge computing device is a router device equipped with a computing board.

5. The method according to any one of claims 1 to 3, characterized in that: The method further comprises: Creating a first virtual machine in a server in a cloud data center, and creating a second virtual machine on the first-level edge computing device; Setting the same network parameters for the first virtual machine and the second virtual machine; After the configuration of the virtual extended LAN layer 2 tunnel and the virtual private line service layer 2 tunnel is completed, messages are forwarded between the first virtual machine and the second virtual machine to determine the interoperability of the target network.

6. A target networking system, characterized in that: The target network is an SDN network; the target network includes an edge service area, a cloud data center and an SDN controller; the edge service area includes a first-level edge computing device and a second-level edge computing device; the cloud data center includes a backbone device and a convergence device; A virtual extended LAN Layer 2 tunnel is built between each aggregation device; the interface between the egress router of the cloud data center and each aggregation device is configured as a port aggregation port and is configured to allow the connection of multiple virtual links; a virtual dedicated line service Layer 2 tunnel is built between the egress router and the first-level edge computing device.

7. A network construction device, characterized in that: The device is applied to a target network; the target network is an SDN network; the target network includes an edge service area, a cloud data center, and an SDN controller; the edge service area includes a first-level edge computing device and a second-level edge computing device; the cloud data center includes a backbone device and a convergence device, and the device is arranged in the SDN controller, and the device includes: A first tunnel building module is used to build a virtual extended LAN layer 2 tunnel between various aggregation devices; A configuration module, configured to configure the interfaces of the egress router of the cloud data center and each aggregation device as port aggregation ports, and configured to allow the connection of multiple virtual links; The second tunnel construction module is used to build a virtual private line service layer 2 tunnel between the egress router and the first-level edge computing device to splice the virtual extended local area network layer 2 tunnel with the virtual private line service layer 2 tunnel.

8. A computer device, characterized in that: include: A memory and a processor, wherein the memory and the processor are communicatively connected to each other, the memory stores computer instructions, and the processor executes the network construction method according to any one of claims 1 to 5 by executing the computer instructions.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a computer to execute any one of the network construction methods in claims 1 to 5.

10. A computer program product, characterized in that The method comprises computer instructions, wherein the computer instructions are used to enable a computer to execute the network construction method according to any one of claims 1 to 5.

Images