Network construction method, apparatus, device, medium, and product

Abstract

The application relates to the technical field of communication, and particularly discloses a network construction method, device, equipment, medium and product, which are used for SDN network target networking, and the target networking comprises an edge service area, a cloud data center and an SDN controller. The method comprises the following steps: a virtual extended local area network layer 2 tunnel is constructed between each convergence device; an interface of an export router of the cloud data center and each convergence device is configured as a port convergence port, and is configured to allow multiple virtual links to be connected; a virtual private line service layer 2 tunnel is constructed between the export router and a first-level edge computing power device, so as to splice the virtual extended local area network layer 2 tunnel and the virtual private line service layer 2 tunnel. The data of the convergence device can be directly transmitted to the export router through the virtual extended local area network layer 2 tunnel, and the export router directly forwards data through the virtual private line service layer 2 tunnel, so that layer 2 interconnection without deploying high-performance switches is realized.

Description

Technical Field

[0001] This invention relates to the field of communication technology, and specifically discloses a network construction method, apparatus, device, medium, and product. Background Technology

[0002] Future network construction will involve the construction of backbone nodes and edge sites. Backbone nodes are cloud data centers, while edge sites are typically small data centers or integrated devices with storage, computing power, and forwarding capabilities.

[0003] Data centers and edge nodes typically provide network connectivity for virtual machines (VMs) of computing resources from the center to the edge for future network users. This involves Layer 2 and Layer 3 connectivity for east-west traffic between the center and the edge. Layer 3 connectivity carries IP-based services, usually implemented through routing. Layer 2 connectivity is used for non-IP network experiments, based on MAC addressing and forwarding. The closest current solution is for traditional large Layer 2 network scenarios such as DCI and multi-Fabric scenarios. The solution is based on VXLAN overlay technology. The SDN network controller manages the edge network devices. By planning VXLAN IDs and mapping them on the two edge network devices, Layer 2 connectivity for VMs within the two data centers is achieved, enabling large-scale and even cross-regional dynamic migration of VMs.

[0004] However, the above solution uses high-performance switches for the border network devices, which cannot achieve Layer 2 interconnection when it is not possible to deploy border network devices. Summary of the Invention

[0005] In view of this, this application provides a network construction method, apparatus, device, medium and product that can achieve Layer 2 interconnection without the need to deploy high-performance switches. The technical solution is as follows.

[0006] Firstly, a network construction method is provided for a target network; the target network is an SDN network; the target network includes an edge service area, a cloud data center, and an SDN controller; the edge service area includes primary edge computing devices and secondary edge computing devices; the cloud data center includes backbone equipment and aggregation equipment; the method is executed by the SDN controller, and the method includes:

[0007] Build virtual extended LAN Layer 2 tunnels between various aggregation devices;

[0008] Configure the interfaces of the cloud data center's egress router and each aggregation device as port aggregation ports, and configure them to allow connections to multiple virtual links;

[0009] A virtual private line service layer 2 tunnel is constructed between the export router and the first-level edge computing device to splice the virtual extended local area network layer 2 tunnel and the virtual private line service layer 2 tunnel.

[0010] In a second aspect, a target networking system is provided, and the target networking system is an SDN network. The target networking system includes an edge service area, a cloud data center, and an SDN controller. The edge service area includes a first-level edge computing device and a second-level edge computing device. The cloud data center includes backbone devices and aggregation devices.

[0011] Virtual extended local area network layer 2 tunnels are constructed between the aggregation devices. Interfaces of export routers of the cloud data center and the aggregation devices are configured as port aggregation interfaces and are configured to allow multiple virtual links to be connected. Virtual private line service layer 2 tunnels are constructed between the export routers and the first-level edge computing device.

[0012] In a third aspect, a network construction apparatus is provided, and the apparatus is applied to a target networking system. The target networking system is an SDN network. The target networking system includes an edge service area, a cloud data center, and an SDN controller. The edge service area includes a first-level edge computing device and a second-level edge computing device. The cloud data center includes backbone devices and aggregation devices. The apparatus is arranged in the SDN controller, and the apparatus includes:

[0013] A first tunnel construction module is configured to construct virtual extended local area network layer 2 tunnels between the aggregation devices.

[0014] A configuration module is configured to configure interfaces of export routers of the cloud data center and the aggregation devices as port aggregation interfaces and to allow multiple virtual links to be connected.

[0015] A second tunnel construction module is configured to construct virtual private line service layer 2 tunnels between the export routers and the first-level edge computing device to splice the virtual extended local area network layer 2 tunnels and the virtual private line service layer 2 tunnels.

[0016] In a fourth aspect, a computer device is provided, and the computer device includes a processor and a memory. The memory stores at least one instruction, and the at least one instruction is loaded and executed by the processor to implement the network construction method described above.

[0017] In a fifth aspect, a computer readable storage medium is provided, and the storage medium stores at least one instruction. The at least one instruction is loaded and executed by a processor to implement the network construction method described above.

[0018] In a sixth aspect, a computer program product or computer program is provided, which includes computer instructions stored in a computer readable storage medium. A processor of a computer device reads the computer instructions from the computer readable storage medium, and the processor executes the computer instructions to cause the computer device to perform the network construction method described above.

[0019] The technical solutions provided in the present application can include the following beneficial effects:

[0020] When the target network of the present application exists edge service area and cloud data center, the edge service area includes primary edge computing device and secondary edge computing device, the cloud data center includes backbone device and aggregation device, and the target network is an SDN network, the SDN controller can construct a virtual extended local area network layer 2 tunnel between each aggregation device, and configure the interface of the export router and the aggregation device as a port aggregation port, and make the virtual link of each aggregation device can transmit data through the export router; and the SDN controller also constructs a virtual private line service layer 2 tunnel between the export router and the primary edge computing device, thereby realizing the splicing of the virtual extended local area network layer 2 tunnel and the virtual private line service layer 2 tunnel, that is, the data of the aggregation device can be transmitted directly through the virtual extended local area network layer 2 tunnel to the export router, and the export router directly transmits data through the virtual private line service layer 2 tunnel, so that layer 2 interconnection can be realized without deploying high-performance switches. BRIEF DESCRIPTION OF DRAWINGS

[0021] In order to more clearly illustrate the specific embodiments of the present application or the technical solutions in the prior art, the following will briefly introduce the drawings needed to be used in the specific embodiments or prior art description. Obviously, the drawings described below are some embodiments of the present application, and those skilled in the art can also obtain other drawings according to these drawings without creative labor.

[0022] Figure 1 It is a method flow chart of a network construction method according to an exemplary embodiment.

[0023] Figure 2 It is a system architecture schematic diagram of a target network system according to an exemplary embodiment.

[0024] Figure 3 It is a structure schematic diagram of a network construction device according to an exemplary embodiment.

[0025] Figure 4 It is a structure schematic diagram of a computer device provided in an optional embodiment of the present application. DETAILED DESCRIPTION

[0026] In order to make the objects, technical solutions and advantages of the embodiments of the present application clearer, the technical solutions in the embodiments of the present application will be described clearly and completely below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are some but not all of the embodiments of the present application. Based on the embodiments in the present application, all other embodiments obtained by a person of ordinary skill in the art without creative work fall within the protection scope of the present application.

[0027] In the description of the embodiments of the present application, the term "corresponding" can represent a direct or indirect corresponding relationship between the two, can also represent an associated relationship between the two, or can be indicative of the relationship between the indicated and the configured.

[0028] In the background of future network construction, the large Layer 2 network scenario is the DCI scenario and the multi-Fabric scenario, and the solution is the overlay technology based on VXLAN, the SDN network controller manages the border network device, and the Layer 2 interconnection of virtual machines in two data centers is realized by planning VXLAN ID and mapping VXLAN ID on two border network devices.

[0029] However, the above solution requires high-performance border network devices, which is very costly, and in some cases cannot be deployed, so Layer 2 interconnection cannot be realized.

[0030] According to the embodiments of the present application, a network construction method embodiment is provided. It should be noted that the steps shown in the flowchart of the drawings can be executed in a computer system such as a group of computer executable instructions, and although the logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0031] A network construction method is provided in the present embodiment, which can be used for target networking, and the target networking is an SDN network. The target networking includes an edge service area, a cloud data center and an SDN controller. The edge service area includes a first-level edge computing device and a second-level edge computing device. The cloud data center includes a backbone device and a convergence device. The method is executed by the SDN controller, Figure 1 The flowchart of the network construction method according to the embodiments of the present application is shown in Figure 1 The flowchart includes the following steps:

[0032] Step S101, a virtual extended local area network Layer 2 tunnel is constructed between each convergence device.

[0033] Specifically, first, VXLAN related parameters are configured on the SDN controller, which are used to establish VXLAN tunnels between the aggregation devices. The parameters can optionally include an allocation range, a tunnel endpoint, etc.

[0034] It can be understood that the aggregation device is a leaf switch in the cloud data center.

[0035] Further, then, the leaf switch establishes a neighbor relationship with a neighbor leaf switch through an EVPN (Ethernet Virtual Private Network) protocol or other related protocols. The SDN controller automatically creates VXLAN tunnels between the leaf switches according to the configured VXLAN parameters and the neighbor relationship.

[0036] Further, the leaf switch is configured with a mapping relationship between a VLAN and a VXLAN ID, so that when a virtual machine sends data, the data will be encapsulated into the corresponding VXLAN tunnel according to the VLAN to which it belongs.

[0037] Step S102, the interfaces of the cloud data center's exit router and each aggregation device are configured as port aggregation interfaces, and are configured to allow multiple virtual links to be connected.

[0038] Specifically, first, the interfaces connected to each leaf switch on the cloud data center exit router are identified and determined. On the exit router, these interfaces are configured in port aggregation (Port Aggregation) mode. Port aggregation, that is, link aggregation, is a process of binding multiple physical interfaces into a logical interface to achieve parallel transmission of multiple physical links, thereby improving the efficiency and fault tolerance of data transmission.

[0039] Further, the interfaces connected to the leaf switch on the exit router need to be configured with a VLAN (Virtual Local Area Network), and the interfaces also need to be configured in Trunk mode and allowed to pass through multiple VLAN traffic, to ensure that the virtual machines inside the data center can communicate through different VLANs, and the VLAN traffic can be correctly encapsulated and transmitted to the edge service area.

[0040] Step S103, a virtual private line service layer 2 tunnel is constructed between the exit router and the first-level edge computing device to splice the virtual extended local area network layer 2 tunnel and the virtual private line service layer 2 tunnel.

[0041] Specifically, the devices at both ends of the tunnel are the exit router of the cloud data center and the first-level edge computing device, and the physical interfaces or sub-interfaces on each device that will be used to establish the tunnel are determined.

[0042] Further, the necessary parameters are configured for the VPWS tunnel on the wide area network controller or the corresponding network management system.

[0043] Further, the RD and RT values are planned and allocated for the to-be-established VPWS tunnel, so as to ensure the correct propagation and identification of the routing information in the tunnel, and specifically, in the EVPN environment, the RD (Route Distinguisher) and RT (Route Target) values are used to distinguish and import different VPN routing information.

[0044] In an optional implementation, the step S103 comprises:

[0045] The tunnel configuration is respectively sent to the egress router and the primary edge computing device, so as to build a virtual private line service layer 2 tunnel between the egress router and the primary edge computing device; the tunnel configuration comprises an endpoint device, a physical interface and a virtual link.

[0046] Specifically, the tunnel configuration comprises an endpoint device, a physical interface and a virtual link, and optionally, the tunnel type, the tunnel identification ID and the VLAN ID.

[0047] Then, the configured tunnel parameters, RD / RT values and other information are issued to both ends of the tunnel, i.e., the egress router and the primary edge computing device, and the devices will automatically establish the tunnel connection according to the received configuration information.

[0048] In summary, the network construction method of the embodiment of the application realizes the efficient, flexible and scalable network connection between the cloud data center and the edge service area, and specifically, in the cloud data center, a standard SPINE-LEAF architecture is adopted to construct a highly scalable and flexible network topology structure, wherein the SPINE device serves as a core switch and is responsible for high-speed data forwarding, and the leaf switch serves as an access switch and is responsible for connecting servers or other terminal devices; in order to realize the layer 2 communication between the virtual machines in the cloud, a virtual extension local area network layer 2 tunnel, i.e., a VXLAN tunnel, is constructed between the leaf switches; the SDN controller can intelligently create and manage the VXLAN tunnel on the leaf switch, and these tunnels logically form a huge layer 2 network, so that the virtual machines located in different physical positions can communicate like in the same local area network.

[0049] Then, after realizing the layer 2 communication between the virtual machines in the cloud, the virtual machines are connected with the external network (i.e. the edge service area), so the interface of the exit router of the cloud data center and each leaf switch needs to be configured as a port aggregation port (i.e. a Trunk port) and allow it to connect multiple virtual links (i.e. VLANs). This ensures that the data packets sent from the virtual machines in the cloud can pass through the leaf switch and then be correctly forwarded to the edge service area through the exit router. At the same time, since the port aggregation port supports the transmission of multiple VLANs, different VLANs can be allocated to different virtual machines, thereby realizing more detailed and flexible network traffic management.

[0050] Finally, a virtual private line service layer 2 tunnel (VPWS tunnel) needs to be built between the exit router of the cloud data center and the primary edge computing device of the edge service area. To connect the VXLAN tunnel in the cloud with the network of the edge service area and realize the layer 2 intercommunication between the virtual machines in the cloud and the edge service area. In order to realize the construction and splicing of the tunnel, the wide area network controller (or the corresponding network management system) needs to be configured and managed. The wide area network controller can intelligently identify and manage the device, interface and VLAN information in the network, and automatically establish the VPWS tunnel according to these information. At the same time, by planning the tunnel parameters such as RD / RT value, the wide area network controller can also ensure the correct propagation and identification of routing information in the tunnel. After splicing is completed, the virtual machines in the cloud and the virtual machines in the edge service area can communicate like in the same local area network, which not only improves the flexibility and scalability of the network, but also provides strong support for the trial of new services and new applications such as 5G and virtual reality. At the same time, through the experimental verification of supporting non-IP type services, this method also lays a solid foundation for the development of future network infrastructure equipment.

[0051] In some optional embodiments, the method further comprises:

[0052] The MPLS protocol and the LDP protocol are configured for each primary edge computing device and secondary edge computing device in the edge service area, so that each primary edge computing device and secondary edge computing device in the edge service area establishes an EVPN neighbor.

[0053] MPLS is enabled on each primary and secondary edge computing device, and the routing protocol required for MPLS label distribution protocol (such as LDP) is configured to ensure that the devices can correctly exchange routing information. The LDP protocol is configured to distribute MPLS labels between edge computing devices. After the LDP session is established, the device will assign MPLS labels for each prefix or traffic class according to the routing information and label distribution strategy. The MPLS forwarding table is configured to forward packets according to the MPLS label. The binding and forwarding strategy of the MPLS label on the interface of the device ensures that the MPLS forwarding path of the device is consistent with the expected traffic path, so as to avoid traffic forwarding errors. Then, the LDP session is configured on each primary and secondary edge computing device. After the LDP session is established, MPLS labels are distributed for each prefix or traffic class. Finally, the EVPN function is enabled on each primary and secondary edge computing device, and the EVPN neighbor discovery mechanism is configured to discover EVPN neighbors between edge computing devices by specifying the IP address of the EVPN neighbor, configuring authentication information of the EVPN neighbor, etc. After the EVPN neighbor is established, the device will exchange EVPN routing information according to the EVPN routing information exchange strategy.

[0054] In some optional embodiments, the primary edge computing device is a router device provided with a computing board card.

[0055] In future network construction, there are backbone nodes and edge sites. The backbone nodes are cloud data centers, and the edge sites are usually small data centers or integrated devices with storage, computing, and forwarding capabilities. The edge site device can be a hyper-converged device, which can be an edge computing server plus a network forwarding device, or a router with computing function. This paper mainly designs for the third form, inserts an X86 computing board card in a frame router to provide virtualization function, and the router itself provides forwarding capability. Between the data center and the edge node, the network interconnection of the computing resource virtual machine from the center to the edge is usually provided for the future network users, that is, the two-layer and three-layer interconnection of the east-west traffic of the center-edge. The three-layer interconnection carries IP type services, which are usually realized by routing. The purpose of the two-layer interconnection is to carry out non-IP type network experiments based on MAC addressing and forwarding.

[0056] In some optional embodiments, the method further comprises:

[0057] A first virtual machine is created in a server of a cloud data center, and a second virtual machine is created on a primary edge computing device;

[0058] The same network parameters are set for the first virtual machine and the second virtual machine;

[0059] When the configuration of the virtual extended local area network layer 2 tunnel and the virtual private line service layer 2 tunnel is completed, a message is forwarded between the first virtual machine and the second virtual machine to determine the interworking of the target networking.

[0060] In the server of the cloud data center, a virtual machine instance is created by a management platform or virtualization software such as VMware, Hyper-V, etc., and the operating system, memory, CPU, storage, etc. of the first virtual machine are configured, and an IP address is allocated to ensure that it is in the same network or a communicable network with other devices in the cloud data center. Then, in the management interface or management platform of the first-level edge computing power router, a virtual machine instance is created on the router or the device connected thereto through virtualization software or a specific tool.

[0061] The same network parameters are set for the first virtual machine and the second virtual machine, including ensuring that the IP addresses of VM1 and VM2 are in the same subnet or different subnets that can be accessed by routing, setting the same subnet mask for VM1 and VM2, setting the same DNS server address for VM1 and VM2, and if the cloud data center and the edge service area use VLAN to isolate different network traffic, the same VLAN ID needs to be configured for VM1 and VM2 to ensure that they are in the same virtual local area network.

[0062] Finally, a network test tool or script is created on VM1 for sending an ICMP Echo request to the IP address of VM2, and a corresponding network test tool or script is set on VM2 for receiving and responding to the ICMP Echo request, and the test results are observed and recorded. If VM1 can successfully connect to VM2 and the response time is reasonable, it means that the virtual machines in the target networking have realized layer 2 interworking.

[0063] The embodiment of the application also provides a target networking system, as shown in Figure 2 The target networking is an SDN network; the target networking includes an edge service area, a cloud data center and an SDN controller; the edge service area includes a first-level edge computing power device and a second-level edge computing power device; the cloud data center includes backbone devices and aggregation devices, i.e. leaf switches;

[0064] A virtual extended local area network layer 2 tunnel is constructed between each leaf switch; the interfaces of the export router of the cloud data center and each leaf switch are configured as port aggregation interfaces and are configured to allow multiple virtual links to be connected; a virtual private line service layer 2 tunnel is constructed between the export router and the first-level edge computing power device.

[0065] The target networking system of the embodiment is automatically completed by a data center SDN (Software-Defined Networking) controller, the SDN controller can intelligently create and manage VXLAN tunnels on the LEAF device, the tunnels logically form a huge layer 2 network, by setting parameters of the VXLAN tunnel, including tunnel endpoints, VTEP (VXLAN Tunnel End Point) addresses, and the like, configuring EVPN neighbor relationships between leaf switches, so that virtual machines located in different physical locations can communicate like in the same local area network.

[0066] The network building device is used for implementing the above-mentioned embodiments and preferred embodiments, and has been described above. As used below, the term "module" can be a combination of software and / or hardware that implements a predetermined function. Although the device described in the following embodiments is preferably implemented in software, hardware, or a combination of software and hardware is also possible and is contemplated.

[0067] The network building device is used for implementing the above-mentioned embodiments and preferred embodiments, and has been described above. As used below, the term "module" can be a combination of software and / or hardware that implements a predetermined function. Although the device described in the following embodiments is preferably implemented in software, hardware, or a combination of software and hardware is also possible and is contemplated. Figure 3 The network building device is used for implementing the above-mentioned embodiments and preferred embodiments, and has been described above. As used below, the term "module" can be a combination of software and / or hardware that implements a predetermined function. Although the device described in the following embodiments is preferably implemented in software, hardware, or a combination of software and hardware is also possible and is contemplated.

[0068] The first tunnel building module 301 is configured to build a virtual extended local area network layer 2 tunnel between each aggregation device.

[0069] The configuration module 302 is configured to configure an interface of an egress router of a cloud data center and an interface of each aggregation device as a port aggregation port, and configured to allow communication of multiple virtual links.

[0070] The second tunnel building module 303 is configured to build a virtual private line service layer 2 tunnel between the egress router and the primary edge computing device, to splice the virtual extended local area network layer 2 tunnel and the virtual private line service layer 2 tunnel.

[0071] In a possible implementation, the second tunnel building module 303 further includes:

[0072] The sending sub-module is configured to send a tunnel configuration to the egress router and the primary edge computing device, respectively, to build a virtual private line service layer 2 tunnel between the egress router and the primary edge computing device; the tunnel configuration includes an endpoint device, a physical interface, and a virtual link.

[0073] In a possible implementation, the device further includes:

[0074] The second configuration module is configured to configure MPLS protocol and LDP protocol for each first-level edge computing power device and second-level edge computing power device in the edge service area, so as to establish EVPN neighbors between each first-level edge computing power device and second-level edge computing power device in the edge service area.

[0075] In a possible implementation, the apparatus further includes:

[0076] The creating module is configured to create a first virtual machine in a server of the cloud data center and create a second virtual machine on the first-level edge computing power device;

[0077] The setting parameter module is configured to set the same network parameters for the first virtual machine and the second virtual machine.

[0078] The verifying module is configured to forward a packet between the first virtual machine and the second virtual machine after completing configuration of the virtual extended local area network layer 2 tunnel and the virtual private line service layer 2 tunnel, to determine the interworking of the target networking.

[0079] Further function descriptions of the above-mentioned modules and units are the same as those of the corresponding embodiments, and will not be repeated here.

[0080] The network building apparatus in the embodiment is presented in the form of a functional unit, where the unit refers to an ASIC (Application Specific Integrated Circuit, Application Specific Integrated Circuit) circuit, a processor and a memory executing one or more software or fixed programs, and / or other devices that can provide the above functions.

[0081] The embodiment of the application further provides a computer device with the above Figure 3 network building apparatus.

[0082] Please refer to Figure 4 , Figure 4 is a structural schematic diagram of a computer device provided by an optional embodiment of the application, as Figure 4As shown, the computer device includes one or more processors 10, memory 20, and interfaces 30 for external devices such as a keyboard and a mouse and peripheral devices such as disk devices or other storage devices. One or more busses 10 can be used to implement the interface between the various internal and external components and can be implemented using any one or more of a variety of bus technologies including a System bus, PCI bus, SCSI bus, USB bus, Advanced Graphics Port (AGP) bus, and an 1394 bus configuration. The various components communicate over the busses using various protocols and protocols that can be employed include, but are not limited to, I2C, SPI, 1-Wire and other protocols. Figure 4 The processor 10 is used in the embodiments below as an example.

[0083] The processor 10 can be a central processing unit, a network processor, or a combination thereof. The processor 10 can further include a hardware chip. The hardware chip can be an application specific integrated circuit, a programmable logic device, or a combination thereof. The programmable logic device can be a complex programmable logic device, a field programmable logic device, a general array logic, or any combination thereof.

[0084] The memory 20 stores instructions that can be executed by the at least one processor 10 to cause the at least one processor 10 to perform the methods described in the above embodiments.

[0085] The memory 20 can include a program storage area and a data storage area. The program storage area can store an operating system and applications required by at least one function. The data storage area can store data created by the computer device, etc. In addition, the memory 20 can include a high-speed random access memory, and can further include a non-volatile memory, such as at least one disk storage device, a flash memory device, or other non-volatile solid-state storage device. In some alternative embodiments, the memory 20 can optionally include a memory that is remotely located with respect to the processor 10, and these remote memories can be connected to the computer device through a network. Examples of the network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and a combination thereof.

[0086] The memory 20 can include a volatile memory, such as a random access memory, and can also include a non-volatile memory, such as at least one disk storage device, a flash memory device, or other non-volatile solid-state storage device. The memory 20 can also include a combination of the above-mentioned types of memories.

[0087] The computer device further includes a communication interface 30 for communicating with other devices or communication networks.

[0088] The embodiments of the present application further provide a computer readable storage medium, and the method according to the embodiments of the present application can be implemented in hardware, firmware, or recorded in a storage medium, or stored in a remote storage medium or a non-transitory machine readable storage medium and downloaded to a local storage medium through network, so that the method described herein can be processed by such software on a storage medium using a general purpose computer, a special purpose processor, or programmable or special hardware. The storage medium can be a magnetic disk, an optical disk, a read-only memory, a random access memory, a flash memory, a hard disk, or a solid state disk, etc. Further, the storage medium can also include a combination of the above-mentioned memories. It can be understood that the computer, the processor, the microprocessor controller, or the programmable hardware includes a storage component that can store or receive software or computer code, when the software or computer code is accessed and executed by the computer, the processor, or the hardware, the method shown in the above embodiments is implemented.

[0089] Part of the present application can be applied as a computer program product, for example, computer program instructions, when executed by a computer, the operation of the computer can invoke or provide the method and / or technical solutions according to the present application. Those skilled in the art should understand that the form of computer program instructions in computer readable medium includes but is not limited to source file, executable file, installation package file, etc. Correspondingly, the way of computer program instructions executed by computer includes but is not limited to: the computer directly executes the instructions, or the computer compiles the instructions and then executes the corresponding compiled program, or the computer reads and executes the instructions, or the computer reads and installs the instructions and then executes the corresponding installed program. Here, the computer readable medium can be any available computer readable storage medium or communication medium accessible to the computer.

[0090] Although the embodiments of the present application are described in conjunction with the accompanying drawings, various modifications and changes can be made by those skilled in the art without departing from the spirit and scope of the present application, and such modifications and changes fall within the scope defined by the present application.

Claims

1. A network construction method characterized by comprising: The method is used for target networking; the target networking is an SDN network; the target networking comprises an edge service area, a cloud data center and an SDN controller; the edge service area comprises primary edge computing devices and secondary edge computing devices; the cloud data center comprises backbone devices and aggregation devices; the method is executed by the SDN controller, and the method comprises: constructing a virtual extended local area network layer 2 tunnel between each aggregation device, i.e. a leaf switch in the cloud data center; configuring an interface of an egress router of the cloud data center and each aggregation device as a port aggregation port, and allowing multiple virtual links to be connected, configuring a VLAN on an interface of the egress router connected to the leaf switch, configuring the interface as a Trunk mode and allowing traffic of multiple VLANs to pass through; constructing a virtual private line service layer 2 tunnel between the egress router and the primary edge computing device to splice the virtual extended local area network layer 2 tunnel and the virtual private line service layer 2 tunnel.

2. The method of claim 1, wherein, The method of constructing the virtual private line service layer 2 tunnel between the egress router and the primary edge computing device comprises: sending a tunnel configuration to the egress router and the primary edge computing device respectively to construct the virtual private line service layer 2 tunnel between the egress router and the primary edge computing device; the tunnel configuration comprises an endpoint device, a physical interface and a virtual link.

3. The method of claim 2, wherein, The method further comprises: configuring MPLS protocol and LDP protocol for each primary edge computing device and secondary edge computing device in the edge service area to establish EVPN neighbors between each primary edge computing device and secondary edge computing device in the edge service area.

4. The method of claim 2, wherein, The primary edge computing device is a router device provided with a computing board.

5. The method according to any one of claims 1 to 3, characterized in that, The method further comprises: creating a first virtual machine in a server of the cloud data center and creating a second virtual machine on the primary edge computing device; setting the same network parameters for the first virtual machine and the second virtual machine; after completing the configuration of the virtual extended local area network layer 2 tunnel and the virtual private line service layer 2 tunnel, forwarding a packet between the first virtual machine and the second virtual machine to determine the interworking of the target networking.

6. A target networking system, characterized by, The target networking is an SDN network; the target networking comprises an edge service area, a cloud data center and an SDN controller; the edge service area comprises primary edge computing devices and secondary edge computing devices; the cloud data center comprises backbone devices and aggregation devices; A virtual extended local area network layer 2 tunnel is built between each of the aggregation devices; interfaces of an egress router of the cloud data center and each of the aggregation devices are configured as port aggregation ports and are configured to allow communication of multiple virtual links; a virtual private line service layer 2 tunnel is built between the egress router and the primary edge computing device, the aggregation device being a leaf switch in the cloud data center, the interfaces of the egress router of the cloud data center and each of the aggregation devices being configured as port aggregation ports, a VLAN being configured on the interfaces connected between the egress router and the leaf switch, the interfaces being configured in a Trunk mode and being allowed to pass traffic of multiple VLANs.

7. A network building apparatus characterized by comprising: The device is applied to a target network; the target network is an SDN network; the target network includes an edge service area, a cloud data center and an SDN controller; the edge service area includes a primary edge computing device and a secondary edge computing device; the cloud data center includes backbone devices and aggregation devices; the device is arranged in the SDN controller, and the device includes: A first tunnel building module configured to build a virtual extended local area network layer 2 tunnel between each of the aggregation devices, the aggregation device being a leaf switch in the cloud data center; A configuration module configured to configure interfaces of an egress router of the cloud data center and each of the aggregation devices as port aggregation ports and configured to allow communication of multiple virtual links, the interfaces of the egress router of the cloud data center and each of the aggregation devices being configured as port aggregation ports, a VLAN being configured on the interfaces connected between the egress router and the leaf switch, the interfaces being configured in a Trunk mode and being allowed to pass traffic of multiple VLANs; A second tunnel building module configured to build a virtual private line service layer 2 tunnel between the egress router and the primary edge computing device, so as to splice the virtual extended local area network layer 2 tunnel and the virtual private line service layer 2 tunnel.

8. A computer device, comprising: It includes: A memory and a processor, which are communicatively connected to each other, the memory stores computer instructions, and the processor executes the computer instructions to perform the network building method of any one of claims 1 to 5.

9. A computer-readable storage medium, characterized in that, The computer readable storage medium stores computer instructions for causing a computer to perform the network building method of any one of claims 1 to 5.

10. A computer program product, characterised in that, The computer instructions are used to cause a computer to perform the network building method of any one of claims 1 to 5.

Images