Network high availability method of traffic forwarding gateway between cloud platforms

Abstract

The invention provides a network high-availability method of a flow forwarding gateway between cloud platforms, belongs to the technical field of internet cloud networks, and provides robustness of network communication by using an ECMP and high-availability software to perform on-cloud communication and inter-cloud communication respectively. By monitoring the state of the flow forwarding gateway in real time, a notification event can be provided, and the cluster node can be repaired by manual intervention under the condition that the user service is not influenced.

Description

Technical Field

[0001] The present invention relates to the field of Internet cloud network technology, and in particular to a network high availability method for a traffic forwarding gateway between cloud platforms. Background Art

[0002] Cloud computing is one of the hottest topics in the field of IT infrastructure in recent years. Its virtualization abstraction of various resources such as computing, network, and storage provides users with extremely convenient resource usage and flexible resource expansion capabilities. Current cloud platforms use traffic forwarding gateways to implement some traffic forwarding between virtual private networks (VPCs) or between cloud platforms. When the gateway is a single node, the failure of the gateway instance will cause the forwarded network traffic to be interrupted, thereby affecting the communication of the entire link. Therefore, the survival of the gateway instance becomes a bottleneck on the entire link, and a technical solution needs to be provided for the high availability of the traffic forwarding gateway. Summary of the invention

[0003] In order to solve the above technical problems, the present invention provides a network high availability method for traffic forwarding gateways between cloud platforms, based on a high availability framework (the open source high availability software keepalived is taken as an example in this solution) and equal cost routing (ECMP) and other technologies, as well as survivability detection of instances of the traffic forwarding gateway cluster, to achieve high availability of the traffic forwarding gateway cluster.

[0004] The technical solution of the present invention is:

[0005] A method for high network availability of traffic forwarding gateways between cloud platforms, which implements multi-active links of traffic forwarding gateway cluster instances in a virtual private network, from cloud servers to virtual routers to traffic forwarding gateways, through the equal-cost routing (ECMP) technology implemented on the virtual routers. This can achieve high availability of network traffic in the virtual private network. Traffic from the traffic transit gateway to the peer network is also transmitted in multiple paths using the equal-cost routing technology. Reverse messages are implemented using virtual IPs using high-availability tools, so that external devices on the cloud platform ignore the real cluster IPs hidden behind the virtual IPs, and communication can be achieved by sending network traffic to the virtual IPs.

[0006] On the cloud platform, multi-path communication from the cloud virtual private network to the traffic transfer gateway cluster is achieved through the equal-cost routing (ECMP) technology supported by the virtual router. Equal-cost routing technology is a technology that can use multiple different routing paths with equal cost values ​​(Cost values) to the same destination address in the network for data transmission. The technical principle of this technology is:

[0007] 1. Path discovery and cost calculation: Router link status information, the router calculates the shortest path to each destination address and determines the cost value of each path. When multiple paths with equal cost values ​​are found to reach the same destination address, these paths are considered equal-cost routes.

[0008] 2. Packet distribution: When a router needs to send a packet to a destination address, if there are multiple equal-cost routes, the router will distribute the packet to these paths based on a certain algorithm (such as a hash algorithm).

[0009] 3. Dynamic adjustment: When the network topology changes (such as link failure, device failure, etc.), the router will recalculate the shortest path and cost value. If the original equivalent route no longer exists or the cost value changes, the router will adjust the data packet distribution strategy accordingly.

[0010] By using equal-cost routing technology, when a transit gateway on a link fails, the traffic from the cloud server to the traffic transit gateway can be quickly switched to other links on the equal-cost route to ensure the uninterrupted overall network communication.

[0011] High-availability software (such as Keepalived) provides high-availability capabilities for external requests to access the internal virtual private network. By using high-availability software, an external access IP is provided for the traffic transit gateway cluster, and the real IP address of the gateway instance in the cluster is shielded. The high-availability software detects the survivability of the gateway cluster, and when a node fails, the virtual IP drifts from the failed node to the surviving node to ensure the availability of the external access node.

[0012] The basic logic of the present invention is to expand the original single-node traffic forwarding gateway into a traffic forwarding gateway cluster, and by using equal-cost routing technology and high-availability tools, achieve the robustness of the cluster in terms of overall network traffic transmission between multi-cloud platforms. The detailed steps of the solution are introduced below.

[0013] 1. Create a traffic forwarding gateway cluster.

[0014] 2. Create a subnet for the virtual private network of the cloud center, and mount the subnet gateway on the virtual router. And mount the network card of the subnet for the traffic forwarding gateway in the cluster.

[0015] 3. Deploy high-availability software for the nodes in the traffic forwarding gateway cluster, associate a separate elastic network card with it, and configure a virtual IP address for external access.

[0016] 4. The health check interface of the traffic forwarding gateway instance is used to monitor the survival of the cluster instance. When the health check of the instance in the cluster fails, the service will automatically remove the instance from the equivalent route through the interface. If the virtual IP is on the instance, the high availability software will drift the virtual IP to other nodes. When the failed node recovers, the service will automatically configure the equivalent route of the virtual router for the instance when it is discovered through the detection interface.

[0017] After completing the above steps, the high availability requirements of the communication traffic forwarding gateway cluster between cloud platforms can be met.

[0018] The network traffic flow of this cluster is:

[0019] From the local cloud center to the peer cloud center, high availability can be achieved in load balancing mode or active-standby redundancy mode, depending on the implementation of virtual router equivalent routing technology.

[0020] When communicating from the peer cloud center to the local cloud center, the peer cloud center accesses the virtual IP address exposed by the local cloud center to achieve high availability in the master-slave mode.

[0021] The beneficial effects of the present invention are

[0022] The present invention realizes high availability of traffic forwarding gateways between virtual private networks in a cloud platform and between cloud platforms, thereby improving the robustness of the network.

[0023] The present invention can monitor the status of the traffic forwarding gateway in real time through high-availability software, and the automatic fault recovery function can save the time required for manual intervention and repair. BRIEF DESCRIPTION OF THE DRAWINGS

[0024] Figure 1 It is the routing configuration link diagram of the traffic transit gateway when communicating between cloud centers. DETAILED DESCRIPTION

[0025] In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, rather than all the embodiments. Based on the embodiments in the present invention, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of the present invention.

[0026] According to the following Figure 1 Describe the complete high availability solution.

[0027] 1. Create a traffic forwarding gateway cluster, including two instances GW1 and GW2.

[0028] 2. Create a connection subnet 11.0.103.0 / 24 under the virtual private network of Cloud Center 1, and associate the gateway 11.0.103.1 with the virtual router router. Associate eth1 (11.0.103.100) for GW1 and eth2 (11.0.103.101) for GW2. Configure the route destination to Cloud Center 2 on the virtual router as 192.168.1.0 / 24, and the next hops are eth1 and eth2 respectively. After the configuration is completed, these two routes are equal-cost routes.

[0029] 3. Associate the network cards eth3 (12.0.0.11 / 24) and eth4 (12.0.0.12 / 24) for external network access on GW1 and GW2 respectively, and configure the high availability software to use the IP address 12.0.0.10 / 24 in the same network segment as the virtual IP.

[0030] 4. When GW1 in the cluster is the master node identified by the high-availability software, the virtual IP drifts to the instance. When the instance fails, the health check finds the failure and the virtual IP drifts to the GW2 node. The service receives the failure notification and removes the route pointing to GW1 from the virtual router, and the traffic changes from load balancing to pointing to GW2. When the failure is restored, the service receives the node recovery notification and adds the route pointing to GW1 back to the virtual router, and the traffic returns to the load balancing mode of equal-cost routing.

[0031] The above process ensures that when a node in the traffic forwarding gateway cluster fails, the end-to-end communication link will not be terminated. The outbound traffic will be sent through the normal gateway nodes in the cluster. Since the inbound traffic uses virtual IP drift, external access is not aware of node failures, and the traffic can be forwarded normally into the cloud platform.

[0032] The above description is only a preferred embodiment of the present invention, which is only used to illustrate the technical solution of the present invention, and is not used to limit the protection scope of the present invention. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention are included in the protection scope of the present invention.

Claims

1. A network high availability method for a traffic forwarding gateway between cloud platforms, characterized in that: The links from the cloud server to the virtual router to the traffic forwarding gateway in the virtual private network are connected by the equivalent routing technology implemented on the virtual router to realize the multi-active links of the traffic forwarding gateway cluster instance, so as to achieve high availability of network traffic in the virtual private network. The traffic from the traffic transit gateway to the peer network is also transmitted in multiple paths using equal-cost routing technology. The reverse message is implemented using a virtual IP using high-availability tools, so that the cloud platform's external devices ignore the real cluster IP hidden behind the virtual IP. Communication can be achieved by sending network traffic to the virtual IP.

2. The method according to claim 1, characterized in that Router link state information, the router calculates the shortest path to each destination address and determines the cost value of each path. When several paths with equal cost values ​​are found to reach the same destination address, these paths are considered equal-cost routes.

3. The method according to claim 2, characterized in that When a router needs to send a data packet to a destination address, if there are several equal-cost routes, the router will distribute the data packet to these paths according to the algorithm.

4. The method according to claim 3, characterized in that When the network topology changes, the router will recalculate the shortest path and cost value; if the original equal-cost route no longer exists or the cost value changes, the router will adjust the data packet distribution strategy accordingly.

5. The method according to claim 4, characterized in that By using equal-cost routing technology, when a transit gateway on a link fails, the traffic from the cloud server to the traffic transit gateway can be quickly switched to other links on the equal-cost route to ensure the uninterrupted overall network communication.

6. The method according to claim 5, characterized in that High-availability software provides high-availability capabilities for external requests to access the virtual private network. By using high-availability software, an external access IP is provided for the traffic transit gateway cluster, shielding the real IP addresses of the gateway instances in the cluster.

7. The method according to claim 6, characterized in that The high-availability software detects the survivability of the gateway cluster, and when a node fails, the virtual IP is drifted from the failed node to the surviving node to ensure the availability of the external access node.

8. The method according to claim 7, characterized in that The detailed steps are as follows: 1) Create a traffic forwarding gateway cluster; 2) Create a connection subnet for the virtual private network of the cloud center and hang the subnet gateway on the virtual router; And mount the network card connected to the subnet for the traffic forwarding gateway in the cluster; 3) Deploy high-availability software for nodes in the traffic forwarding gateway cluster, associate separate elastic network cards with them, and configure virtual IP addresses for external access; 4) Monitor the survivability of cluster instances through the health detection interface of the traffic forwarding gateway instance. When the health check of an instance in the cluster fails, the service will automatically remove the instance from the equivalent route through the interface. If the virtual IP is on the instance, the high availability software will drift the virtual IP to other nodes. When the failed node recovers, the service will automatically configure the instance with the equivalent route of the virtual router when it is discovered through the detection interface.

9. The method according to claim 8, characterized in that The network traffic flow of the cluster is from the local cloud center to the peer cloud center. According to the implementation of the virtual router equivalent routing technology, high availability is achieved in load balancing mode or active-standby redundancy mode. When traveling from the peer cloud center to the local cloud center, the peer cloud center accesses the virtual IP address exposed by the local cloud center to achieve high availability in active-standby mode.

Images