Data access method for cloud service, and computing cluster

Abstract

The present application relates to a data access method for a cloud service, and a computing cluster. The method comprises: receiving a data access request, which is sent by a user end, wherein the user end is located in a first available area, and a target server of the data access request is located in a second available area; according to a first scheduling unit which is pre-configured for the user end, forwarding the data access request to a second scheduling unit, which is pre-configured for the target server, wherein the first scheduling unit and the second scheduling unit are both located in a computing cluster, and cross-available-area communication is performed by means of a pre-configured local area network; and sending the data access request to the target server according to the second scheduling unit, so as to perform data access. Thus, the problem in the related art of it being impossible to perform cross-available-area communication by using a private network connection when a cloud service performs private network access is solved.

Description

Data access methods and computing clusters for cloud services

[0001] This application claims priority to the Chinese patent application filed with the China Patent Office on July 14, 2023, with application number 202310873410.6 and application name “Data access method and computing cluster for cloud services”, the entire contents of which are incorporated by reference into this application. Technical Field

[0002] The present application relates to the field of cloud service technology, and in particular to a data access method and computing cluster for cloud services. Background Art

[0003] In cloud service scenarios, networks can be divided into public clouds and private clouds. In public cloud environments, virtual private clouds (VPCs) are mostly used for isolation. Before VPCs, networks were completely isolated, and traditional data access could only be provided externally through API gateways and public networks.

[0004] Public network access requires exposing services to the public internet, which poses certain security risks. API gateways are expensive and complex to configure, and are configured on an API-by-API basis, making them cumbersome to use. Related technologies also offer data access through private network connections, but these connections are limited to accessing data within the same availability zone.

[0005] Therefore, there is a problem in related technologies that when cloud services are accessed through private networks, they cannot be accessed across availability zones using private network connections.

[0006] This section is intended to provide a background or context to the embodiments of the invention recited in the claims. No admission is made that what is described herein is prior art by its inclusion in this section.

[0007] Summary of the Invention

[0008] The embodiments of the present invention provide a cloud service data access method and computing cluster, which at least solve the problem in related technologies that cloud services cannot be accessed across availability zones using private network connections when accessing the cloud service through a private network.

[0009] An embodiment of the present invention provides a data access method for cloud services, which is applied to a computing cluster, and includes: receiving a data access request sent by a user terminal, wherein the user terminal is in a first availability zone and the target server of the data access request is in a second availability zone; forwarding the data access request to a second scheduling unit preconfigured for the target server according to a first scheduling unit preconfigured for the user terminal, wherein the first scheduling unit and the second scheduling unit are both within the computing cluster and communicate across availability zones through a preconfigured local area network; and sending the data access request to the target server according to the second scheduling unit to perform data access.

[0010] The beneficial effects of this embodiment are as follows: through a computing cluster interconnected with the user terminal and the target server, a first scheduling unit and a second scheduling unit that can be accessed are provided to the user terminal and the target server in different availability zones respectively, and a communication channel is established between the first scheduling unit and the second scheduling unit through a local area network, so that data access between the user terminal and the target server in different availability zones can be achieved using a private cloud.

[0011] As an optional embodiment, receiving a data access request sent by a user terminal includes: receiving a data access request sent by a user virtual switch of the user terminal through a user terminal network card of the first scheduling unit, wherein the user virtual switch is used to forward the data access request issued by the user terminal to the user terminal network card.

[0012] The user virtual switch at the user end provides a transmission route between the user end and the user end network card, so that the data access request at the user end can be effectively transmitted to the user end network card of the first scheduling unit, thereby realizing the transmission of the data access request to the first scheduling unit.

[0013] As an optional embodiment, according to the first scheduling unit pre-configured for the user terminal, forwarding the data access request to the second scheduling unit pre-configured for the target server includes: forwarding the data access request to the first virtual switch through the forwarding mode within the first scheduling unit, wherein the data access request is sent through the communication channel of the local area network; sending the data access request to the second virtual switch through the communication channel of the local area network through the first virtual switch, wherein the second virtual switch is used to send the data access request to the second scheduling unit.

[0014] Through the forwarding mode within the first scheduling unit, the data access request is forwarded from the user-side network card to the first virtual switch. The first virtual switch forwards the data access request to the second virtual switch of the second scheduling unit through the communication channel of the local area network, and then sends the data access request to the second scheduling unit.

[0015] As an optional embodiment, sending the data access request to the target server according to the second scheduling unit includes: forwarding the data access request received by the second virtual switch to the target end network card through the forwarding mode inside the second scheduling unit, wherein the target end network card is pre-set in the second scheduling unit for forwarding the data access request to the target server; and sending the data access request to the target server through the target end network card.

[0016] The second scheduling unit forwards the data access request received by the second virtual switch to the target end network card through the forwarding mode, and sends the data access request of the target end network card to the target server using the route provided by the target virtual switch of the target server.

[0017] As an optional embodiment, sending the data access request to the target server through the target-side network card includes: sending the data access request to the target virtual switch of the target server through the target-side network card; sending the data access request to the target server through the target virtual switch.

[0018] The target virtual switch of the target server provides a transmission route between the target server and the target end network card, so that the data access request of the target end network card can be effectively transmitted to the corresponding address of the target server, and then the data access request is sent to the target server for data access.

[0019] As an optional embodiment, before receiving the data access request sent by the user end, the method also includes: generating a first scheduling unit corresponding to the user end according to the user end of the data access request; and generating a second scheduling unit corresponding to the target server according to the target server of the data access request.

[0020] A first scheduling unit and a second scheduling unit are created for the user end and target server required for data access, and data access is performed in a point-to-point manner. Compared with the related technology in which the API gateway provides open access to all user ends and servers in the availability zone, it has higher security.

[0021] As an optional embodiment, the data access request includes a service subscription operation of the user end and a service access operation of the target server. According to the user end of the data access request, generating a first scheduling unit corresponding to the user end includes: responding to the service subscription operation, creating the first scheduling unit in the cloud service module of the first availability zone to which the user end belongs; according to the target server of the data access request, generating a second scheduling unit corresponding to the target server includes: responding to the service access operation, creating the second scheduling unit in the cloud service module of the second availability zone to which the target server belongs.

[0022] Before actual data access is performed, the creation of data access requires the user to subscribe to the service and the target server to access the service. Based on the user's service subscription, a first scheduling unit is created in the cloud service module in the first availability zone of the user. Based on the target server's service access, a second scheduling unit is created in the cloud service module in the second availability zone of the target server, preparing for the subsequent interactive process of data access requests.

[0023] As an optional embodiment, in response to the service subscription operation, creating a first scheduling unit in the cloud service module of the first availability zone to which the user terminal belongs includes: when the open application interface receives the service subscription operation, creating the first scheduling unit in the cloud service module of the first availability zone through the coordinator, wherein the open application interface and the coordinator are both management and control service services of the computing cluster; in response to the service access operation, creating a second scheduling unit in the cloud service module of the second availability zone to which the target server belongs includes: when the open application interface receives the service access operation, creating the second scheduling unit in the cloud service module of the second availability zone through the coordinator.

[0024] When creating the first scheduling unit, the computing cluster's coordinator controls the management and control agent of the cloud service module in the first availability zone, and the first scheduling unit is created in the cloud service module. When creating the second scheduling unit, the computing cluster's coordinator controls the management and control agent of the cloud service module in the second availability zone, and the second scheduling unit is created in the cloud service module.

[0025] As an optional embodiment, the method further includes: establishing the local area network between the first scheduling unit and the second scheduling unit, wherein the local area network includes multiple local area network communication channels.

[0026] After the first scheduling unit and the second scheduling unit are created, since they are in different availability zones and cannot communicate directly, a local area network is created within the computing cluster, and communication between the first scheduling unit and the second scheduling unit is achieved through the LAN's multiple LAN communication channels.

[0027] An embodiment of the present invention also provides a computing cluster that supports data access to cloud services, including: a first scheduling unit and a second scheduling unit, wherein the first scheduling unit is communicatively connected to a user terminal of a user terminal, and is used to receive a data access request sent by the user terminal and forward the data access request to the second scheduling unit; the second scheduling unit is communicatively connected to a target server, and is used to send the data access request to the target server for data access; wherein the first scheduling unit and the second scheduling unit communicate across availability zones through a pre-configured local area network; the user terminal is in the first availability zone, and the target server is in the second availability zone.

[0028] The beneficial effects of this embodiment are as follows: through a computing cluster interconnected with the user terminal and the target server, a first scheduling unit and a second scheduling unit that can be accessed are provided to the user terminal and the target server in different availability zones respectively, and a communication channel is established between the first scheduling unit and the second scheduling unit through a local area network, so that data access between the user terminal and the target server in different availability zones can be achieved using a private cloud.

[0029] As an optional embodiment, the first scheduling unit includes: a user-side network card, which is communicatively connected to the user virtual switch of the user side, and is used to receive a data access request sent by the user side through the user virtual switch; wherein the user virtual switch is used to forward the data access request issued by the user side to the user-side network card.

[0030] The user virtual switch at the user end provides a transmission route between the user end and the user end network card, so that the data access request at the user end can be effectively transmitted to the user end network card of the first scheduling unit, and then the data access request is transmitted to the first scheduling unit.

[0031] As an optional embodiment, the first scheduling unit also includes: a first virtual switch, the second scheduling unit includes: a second virtual switch, the first virtual switch is communicatively connected to the user-end network card through a preset forwarding mode, and is used to forward the data access request to the first virtual switch through the forwarding mode; the first virtual switch is also communicatively connected to the second virtual switch of the second scheduling unit through the communication channel of the local area network, and is used to send the data access request to the second virtual switch using the communication channel, wherein the second virtual switch is pre-set inside the second scheduling unit.

[0032] Through the forwarding mode within the first scheduling unit, the data access request is forwarded from the user-side network card to the first virtual switch. The first virtual switch forwards the data access request to the second virtual switch of the second scheduling unit through the communication channel of the local area network, and then sends the data access request to the second scheduling unit.

[0033] As an optional embodiment, the second scheduling unit also includes: a target-side network card, which is communicatively connected to the second virtual switch through a forwarding mode inside the second scheduling unit, and is used to forward the data access request received by the second virtual switch to the target-side network card; the target-side network card is also connected to the target virtual switch of the target server, and is used to forward the data access request to the target virtual switch of the target server, and send the data access request to the target server through the target virtual switch for data access.

[0034] The second scheduling unit forwards the data access request received by the second virtual switch to the target network card through a forwarding mode, and uses the routing provided by the target virtual switch of the target server to send the data access request from the target network card to the target server. The target virtual switch of the target server provides a transmission route between the target server and the target network card, so that the data access request from the target network card can be effectively transmitted to the address corresponding to the target server, and then the data access request is sent to the target server for data access.

[0035] An embodiment of the present invention also provides an electronic device, comprising: a processor, and a memory for storing a program, wherein the program includes instructions. An electronic device, comprising: a processor, and a memory for storing a program, wherein the program includes instructions, and when the instructions are executed by the processor, the processor executes a method according to any one of the above-mentioned methods.

[0036] An embodiment of the present invention also provides an electronic device, comprising: a processor, and a memory for storing a program, wherein the program includes instructions, and a non-transitory machine-readable medium storing computer instructions, wherein the computer instructions are used to enable the computer to execute any one of the methods described above.

[0037] The details of one or more embodiments of the invention are set forth in the accompanying drawings and the description below so that other features, objects, and advantages of the invention are more readily apparent. BRIEF DESCRIPTION OF THE DRAWINGS

[0038] To more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are only some embodiments of the present invention. For those skilled in the art, other embodiments can be derived from these drawings without inventive effort.

[0039] FIG1 is a flow chart of a data access method for a cloud service according to an embodiment of the present invention.

[0040] FIG2 is a flow chart of another cloud service data access method according to an embodiment of the present invention.

[0041] FIG3 is a flow chart of another method for accessing data of a cloud service according to an embodiment of the present invention.

[0042] FIG4 is a schematic diagram of a computing cluster supporting data access of cloud services according to an embodiment of the present invention.

[0043] FIG5 is a schematic diagram of a cloud service cross-availability zone data access architecture according to an embodiment of the present invention.

[0044] FIG6 is a schematic structural diagram of the electronic device of this embodiment. DETAILED DESCRIPTION

[0045] The following describes embodiments of the present invention in more detail with reference to the accompanying drawings. Although certain embodiments of the present invention are shown in the accompanying drawings, it should be understood that the present invention can be implemented in various forms and should not be construed as being limited to the embodiments described herein. Rather, these embodiments are provided to provide a more thorough and complete understanding of the present invention. It should be understood that the accompanying drawings and embodiments of the present invention are for illustrative purposes only and are not intended to limit the scope of protection of the present invention.

[0046] In related technologies, virtual private clouds (VPCs) are used in public cloud environments to provide external access through an API (Application Programming Interface) gateway. However, the tunnel IP address used by the API gateway's underlying layer only provides a proxy for Layer 7 services, providing support only for Layer 7 services and failing to support Layer 4 services, such as database services.

[0047] In addition, API Gateway also has the issues of high cost and complex configuration. Furthermore, the API Gateway provides a tunnel IP private network capability that is accessible to all VPCs in the region. By default, it is open to all availability zones in the same region. This is not a point-to-point secure connection solution and is therefore less secure.

[0048] There is also a private network connection Private Link that can provide secure private network interconnection for data access, but it can only be accessed within the same availability zone and cannot be accessed across availability zones.

[0049] To address the problem in related technologies where private network connections cannot be used to access cloud services across availability zones, embodiments of the present invention provide a cloud service data access method and computing cluster. This method provides independent access points, or scheduling units, in the same availability zone for both the target server's VPC and the client's VPC in a publicly connected computing cluster. These two scheduling units are then connected via a local area network (LAN) communication channel, enabling client-side data access to the target server's services.

[0050] Among them, the cloud service data access method provided in the embodiments of the present invention can be applied to electronic devices in computing clusters that manage cloud services. Such electronic devices may include computers, servers, etc. Of course, the cloud service data access method provided in this specification can also be applied to applications running on the above-mentioned electronic devices. For example, the cloud service data access method can be applied to browsers with instant messaging functions, or can also be applied to instant messaging software.

[0051] Figure 1 is a flow chart of a data access method for a cloud service according to an embodiment of the present invention. As shown in Figure 1, this embodiment provides a data access method for a cloud service, which is applied to a computing cluster and comprises the following steps:

[0052] Step S101: receiving a data access request sent by a user terminal, wherein the user terminal is in a first availability zone and a target server of the data access request is in a second availability zone;

[0053] Step S102: forwarding the data access request to a second scheduling unit preconfigured for the target server according to a first scheduling unit preconfigured for the user terminal, wherein both the first scheduling unit and the second scheduling unit are located within the computing cluster and communicate across availability zones via a preconfigured local area network;

[0054] Step S103: Send the data access request to the target server according to the second scheduling unit to access the data.

[0055] The data access method for the above-mentioned cloud service provided in an embodiment of the present invention provides a first scheduling unit and a second scheduling unit that can be accessed by the user terminal and the target server in different availability zones, respectively, through a computing cluster interconnected with the user terminal and the target server, and establishes a communication channel between the first scheduling unit and the second scheduling unit through a local area network, thereby realizing data access between the user terminal and the target server in different availability zones using a private cloud.

[0056] The user side can be equipped with a user virtual private cloud (VPC). This VPC provides an interface for user-side services and enables data communication with them. This means that users can access data through the VPC. This VPC can be accessed through an API gateway or private network connection. However, API gateways are only suitable for Layer 7 services and are costly and insecure. Private network connections also cannot provide cross-availability zone access.

[0057] The target server can be configured with a target VPC, which provides an interface for data communication with the target server's services. Its structure is similar to that of the user VPC, but it is located in a different availability zone than the user VPC. This means that the user end and the target server are not in the same availability zone.

[0058] Both the user VPC and the target VPC can effectively communicate with the computing cluster. This allows both the user and the target server to communicate with the computing cluster, and cross-availability zone communication between the user and the target server is achieved through the LAN within the computing cluster.

[0059] This embodiment provides a computing cluster, which may also be a virtual private cloud provided by a cloud service provider. The computing cluster includes a first scheduling unit and a second scheduling unit. The first scheduling unit is located in the same availability zone as a user terminal and can effectively communicate with the user terminal. The second scheduling unit is located in the same availability zone as a target server and can effectively communicate with the user server.

[0060] A local area network is configured between the first and second scheduling units for cross-availability zone communication. This establishes a data channel between the user VPC and the target VPC. This supports data access between user VPCs and target VPCs in different availability zones, enabling cross-availability zone data access between user terminals and target servers in different availability zones.

[0061] The computing cluster receives a data access request from a user. This data access request refers to the data range and request sent by the user using the user's virtual private cloud. Because the user's data traffic cannot be sent directly to the computing cluster, it must be delivered to the computing cluster through the user's virtual private cloud.

[0062] The user VPC is pre-configured before data access. Before data access is performed, the user can detect whether a VPC exists on the client side. If so, it is used directly. If not, a VPC is created directly.

[0063] Similarly, the target server cannot directly receive data traffic from the computing cluster and must rely on the target VPC. Before data access, a default check can be performed to determine whether the target VPC exists on the target server. If so, it will be used directly. If not, the target VPC can be created directly.

[0064] The user terminal is in the first availability zone, and the target server for the data access request is in the second availability zone. Here, the first availability zone and the second availability zone are different availability zones. In special cases, this method can also be applied to the same availability zone, that is, when the first availability zone and the second availability zone are the same availability zone, and data access can still be performed using this method.

[0065] However, if the client and the target server are in the same availability zone, data can be accessed directly using a private network connection. Therefore, this method is mainly used when the client and the target server are not in the same availability zone.

[0066] The first and second scheduling units are both located within the computing cluster and communicate across availability zones via a preconfigured local area network. Upon receiving a data access request, the first scheduling unit forwards the request to the second scheduling unit, which then forwards the request to the target virtual private cloud (VPC). The target VPC then uses this to access data on the target server.

[0067] The data architecture between the target virtual private cloud and the target server is similar to the data architecture between the user virtual private cloud and the user terminal. Therefore, data access to the target server is achieved by sending the traffic of the data access request to the target server through the target virtual private cloud.

[0068] As an optional embodiment, receiving a data access request sent by the user terminal includes: receiving a data access request sent by a user virtual switch of the user terminal through a user terminal network card of the first scheduling unit, wherein the user virtual switch is used to forward the data access request sent by the user terminal to the user terminal network card.

[0069] The user virtual switch at the user end provides a transmission route between the user end and the user end network card, so that the data access request at the user end can be effectively transmitted to the user end network card of the first scheduling unit, and then the data access request is transmitted to the first scheduling unit.

[0070] The first scheduling unit is equipped with a user-side network card (NIC), which primarily communicates with the user's virtual private cloud (VPCloud). The user's VPC is equipped with a user virtual switch (VS). After a user's data access request is transmitted to the VS via the default route, the VS forwards it to the user-side NIC in the first scheduling unit, thereby sending the data access request to the first scheduling unit.

[0071] Therefore, the computing cluster receiving the data access request sent by the user terminal may receive the data access request sent by the user terminal through the user terminal network card of the first scheduling unit.

[0072] FIG2 is a flow chart of another cloud service data access method according to an embodiment of the present invention. As shown in FIG2 , another cloud service data access method is also provided according to an embodiment of the present invention, which is applied to a computing cluster. Optionally, the cloud service data access method provided by an embodiment of the present invention can be used in step S102 provided in the above embodiment. In step S102, forwarding the data access request to the second scheduling unit pre-configured for the target server according to the first scheduling unit pre-configured for the user terminal includes:

[0073] Step S201: forwarding a data access request to a first virtual switch through a forwarding mode within a first scheduling unit, wherein the data access request is sent through a communication channel of a local area network;

[0074] Step S202: The data access request is sent to the second virtual switch through the communication channel of the local area network via the first virtual switch, wherein the second virtual switch is used to send the data access request to the second scheduling unit.

[0075] The data access method for the above-mentioned cloud service provided by an embodiment of the present invention forwards the data access request from the user-side network card to the first virtual switch through the forwarding mode inside the first scheduling unit. The first virtual switch forwards the data access request to the second virtual switch of the second scheduling unit through the communication channel of the local area network, and then sends the data access request to the second scheduling unit.

[0076] A forwarding mode is set in the above-mentioned first scheduling unit, and the forwarding mode can be modified and set by the management and control service of the computing cluster. After the first scheduling unit is created, the forwarding mode exists. After the user-side network card of the first scheduling unit receives a data access request, the forwarding mode is automatically triggered to forward the data access request of the user-side network card to the first virtual switch.

[0077] The forwarding mode can be routing forwarding between the user end network card and the first virtual switch network card. The first scheduling unit can be provided with a first virtual switch network card, which is used to provide routing for the first virtual switch and receive data access requests from the first virtual switch network card.

[0078] The first virtual switch primarily facilitates cross-availability zone communication with the second virtual switch. It is also a configuration device in the first scheduling unit. It can be created simultaneously with the first scheduling unit. When the first scheduling unit is created, it configures the first virtual switch network card and the user-side network card. To ensure efficient forwarding between the user-side network card and the first virtual switch network card, it also configures forwarding routes based on the forwarding requirements between the user-side network card and the first virtual switch network card.

[0079] The routing forwarding between the above-mentioned user-side network card and the first virtual switch network card is usually determined directly according to the address of the user-side network card and the address of the first virtual switch network card when it is created. Of course, when the address between the user-side network card or the first virtual switch network card changes, or when it needs to be modified, the forwarding route can also be modified accordingly to achieve the modification of the routing forwarding.

[0080] In a specific implementation, the above-mentioned routing forwarding can be Forword forwarding. After forwarding to the first virtual switch network card, the first virtual switch network card transmits it to the first virtual switch, and after data packaging, it uses the local area network to transmit it across available zones.

[0081] It should be noted that data packets can specifically be encapsulated in the form of VxLAN network packets, which is a data preprocessing method adapted to the VxLAN local area network. That is, if the VxLAN local area network is used for transmission, the data packet needs to be encapsulated in the form of VxLAN network packets before it can be transmitted through the VxLAN local area network.

[0082] It should be noted that the above-mentioned first virtual switch can be set in the cloud service module where the first scheduling unit is located. The first virtual switch is provided with a first virtual switch network card in the first scheduling unit. The above-mentioned forwarding mode forwards the data access request from the user-end network card to the first virtual switch network card, and the first virtual switch network card forwards the data request to the first virtual switch.

[0083] The first virtual switch then forwards the data access request to the second virtual switch using the local area network communication channel. The second virtual switch has a similar data architecture to the first virtual switch and includes a second virtual switch network card in the second scheduling module. The second virtual switch sends the data access request to the second scheduling unit via the second virtual switch network card.

[0084] The second virtual switch can also be set in the cloud service module where the second scheduling unit is located. It should be noted that the cloud service module where the first scheduling unit is located is in the same availability zone as the user terminal, and the cloud service module where the second scheduling unit is located is in the same availability zone as the target server.

[0085] In this case, when the first virtual switch uses the local area network communication channel to send a data access request to the second virtual switch, it must forward the data access request to the first cloud service network card of the cloud service module in which it resides. The first cloud service network card then forwards the data access request to the second cloud service network card using the local area network communication channel. The second cloud service network card is the network card of the cloud service module in which the second virtual switch resides. The second network card then forwards the data access request to the second virtual switch, thus forwarding the data access request from the first scheduling unit to the second scheduling unit.

[0086] As an optional embodiment, sending the data access request to the target server according to the second scheduling unit includes: forwarding the data access request received by the second virtual switch to the target end network card through the forwarding mode within the second scheduling unit, wherein the target end network card is pre-set in the second scheduling unit for forwarding the data access request to the target server; and sending the data access request to the target server through the target end network card.

[0087] The second scheduling unit forwards the data access request received by the second virtual switch to the target end network card through the forwarding mode, and sends the data access request of the target end network card to the target server using the route provided by the target virtual switch of the target server.

[0088] The second scheduling unit also has a forwarding mode, which is the same as the forwarding mode of the first scheduling unit. The only difference is that when forwarding, the first scheduling unit forwards from the user-side network card to the first virtual switch network card, while the second scheduling unit forwards from the second virtual switch network card to the target-side network card. The process is reversed, but the forwarding mode is the same.

[0089] The data architecture between the target network card and the target server is similar to the data architecture between the user network card and the user end. The target virtual private cloud is configured with a target virtual switch, which provides routing to the target server and routing between the target network card.

[0090] As an optional embodiment, sending the data access request to the target server through the target end network card includes: sending the data access request to the target virtual switch of the target server through the target end network card; sending the data access request to the target server through the target virtual switch.

[0091] The target virtual switch of the target server provides a transmission route between the target server and the target end network card, so that the data access request of the target end network card can be effectively transmitted to the corresponding address of the target server, and then the data access request is sent to the target server for data access.

[0092] After receiving the data access request, the target network card sends it to the target virtual switch, which then sends the data access request to the target server. Within the target virtual private cloud, the target virtual switch forwards the data access request to the corresponding address of the target server, enabling data access to the target server.

[0093] As an optional embodiment, the first virtual switch and the second virtual switch are both multi-layer virtual switches.

[0094] Both the first and second virtual switches are multi-layer virtual switches. Multi-layer virtual switches (OVS), also known as Open vSwitch, can provide data transmission channels for multi-layer service architectures. They are compatible with data access requests from various multi-layer service architectures, broadening the scope of data access. Compared to existing API gateways that only support Layer 7 services, they offer greater applicability.

[0095] FIG3 is a flow chart of another cloud service data access method according to an embodiment of the present invention. As shown in FIG3 , another cloud service data access method according to an embodiment of the present invention is also provided, which is applied to a computing cluster. Optionally, the cloud service data access method provided by an embodiment of the present invention can be used in the method provided by the above embodiment. In step S101 above, before receiving a data access request sent by a user terminal, the method further includes:

[0096] Step S301: generating a first scheduling unit corresponding to a user terminal according to a user terminal requesting data access;

[0097] Step S302: Generate a second scheduling unit corresponding to the target server according to the target server of the data access request.

[0098] The data access method for the above-mentioned cloud service provided in an embodiment of the present invention creates a first scheduling unit and a second scheduling unit for the user terminal and target server required for data access, and adopts a point-to-point approach to data access. Compared with the related technology in which the API gateway provides open access to all user terminals and servers in the available zone, it has higher security.

[0099] Since the first scheduling unit and the user end of the user terminal need to be in the same availability zone, a first scheduling unit corresponding to the user end can be generated based on the user end of the data access request. Similarly, since the second scheduling unit and the target server of the target server need to be in the same availability zone, a second scheduling unit corresponding to the target server can be generated based on the target server of the data access request.

[0100] It should be noted here that the interaction process of data traffic for data access can be data interaction on the data plane. Before the actual data plane interaction, the control plane can trigger the above-mentioned action of generating the first scheduling unit according to the user terminal and the action of generating the second scheduling unit according to the target server through instructions, so that there can be sufficient hardware support for data interaction on the data plane.

[0101] Furthermore, scheduling units are generated only for the origin of data traffic required for data access, i.e., the user end, and the destination of data traffic required for data access, i.e., the target server. Data traffic is transmitted in a point-to-point manner, improving data security. Compared to the aforementioned VPC approach, which opens access to all users and servers within the availability zone, this approach offers higher security, thereby enhancing data access security.

[0102] As an optional embodiment, the data access request includes a service subscription operation of the user end and a service access operation of the target server. According to the user end of the data access request, generating the first scheduling unit corresponding to the user end includes: responding to the service subscription operation, creating the first scheduling unit in the cloud service module of the first availability zone to which the user end belongs; according to the target server of the data access request, generating the second scheduling unit corresponding to the target server includes: responding to the service access operation, creating the second scheduling unit in the cloud service module of the second availability zone to which the target server belongs.

[0103] Before actual data access is performed, the creation of data access requires the user to subscribe to the service and the target server to access the service. Based on the user's service subscription operation, a first scheduling unit is created in the cloud service module in the first availability zone of the user. Based on the target server's service access operation, a second scheduling unit is created in the cloud service module in the second availability zone of the target server to prepare for the subsequent data access request interaction process.

[0104] The data access process can be broken down into a service subscription operation on the user side and a service access operation on the server side. When the service subscription operation on the user side is detected, a corresponding first scheduling unit can be created in the cloud service module of the first availability zone to which the user side belongs.

[0105] When a service access operation of the target server is detected, a corresponding second scheduling unit may be created in the cloud service module of the second available zone to which the target server belongs.

[0106] The aforementioned service subscription and service access operations can both be control plane instructions. Before data access, the cloud service module in the first availability zone to which the user belongs is controlled to generate a first scheduling unit. Furthermore, the cloud service module in the second availability zone of the target server is controlled to generate a second scheduling unit.

[0107] It should be noted that when creating the first and second scheduling units, they must rely on the cloud service module in the availability zone in which they are located. Therefore, the cloud service module must also be configured in advance. When creating the first or second scheduling unit, a default check can be performed to check whether the corresponding cloud service module exists. If so, the first or second scheduling unit can be created directly using the cloud service module. If not, the cloud service module is created first and then the first or second scheduling unit is created based on the cloud service module.

[0108] As an optional embodiment, in response to a service subscription operation, creating a first scheduling unit in the cloud service module of the first availability zone to which the user terminal belongs includes: when the open application interface receives the service subscription operation, creating the first scheduling unit in the cloud service module of the first availability zone through the coordinator, wherein the open application interface and the coordinator are both management and control service services of the computing cluster; in response to a service access operation, creating a second scheduling unit in the cloud service module of the second availability zone to which the target server belongs includes: when the open application interface receives the service access operation, creating the second scheduling unit in the cloud service module of the second availability zone through the coordinator.

[0109] When creating the first scheduling unit, the computing cluster's coordinator controls the management and control agent of the cloud service module in the first availability zone, and the first scheduling unit is created in the cloud service module. When creating the second scheduling unit, the computing cluster's coordinator controls the management and control agent of the cloud service module in the second availability zone, and the second scheduling unit is created in the cloud service module.

[0110] It should be noted that the cloud service module is controlled and managed by the management and control service of the computing cluster. The coordinator of the management and control service can use the management and control agent in the cloud service module to create a corresponding first scheduling unit or second scheduling unit in the cloud service module.

[0111] The management and control service of the computing cluster also includes a control interface, such as an Open API interface, which can receive instructions from the control plane, including the above-mentioned service subscription operations and service access operations, and then respond to the service subscription operation or service access operation, control the corresponding cloud service module through the coordinator, and generate the corresponding first scheduling unit or second scheduling unit.

[0112] As an optional embodiment, the method further includes: establishing a local area network between the first scheduling unit and the second scheduling unit, wherein the local area network includes multiple local area network communication channels.

[0113] After the first scheduling unit and the second scheduling unit are created, since they are in different availability zones and cannot communicate directly, a local area network LAN is created within the computing cluster between the cloud service module belonging to the first scheduling unit and the cloud service module belonging to the second scheduling unit. Through the multi-channel LAN communication channels of the LAN, communication between the cloud service module belonging to the first scheduling unit and the cloud service module belonging to the second scheduling unit is realized, thereby realizing communication between the first scheduling unit and the second scheduling unit across availability zones.

[0114] Figure 4 is a schematic diagram of a computing cluster that supports data access to cloud services according to an embodiment of the present invention. As shown in Figure 4, based on the above-mentioned data access method for cloud services provided by an embodiment of the present invention, an embodiment of the present invention further provides a computing cluster that supports data access to cloud services. The computing cluster includes: a first scheduling unit 41 and a second scheduling unit 42. The computing cluster is described in detail below.

[0115] The first scheduling unit 41 is connected to the user terminal of the user terminal for receiving a data access request sent by the user terminal and forwarding the data access request to the second scheduling unit 42; the second scheduling unit 42 is connected to the target server of the target server for sending the data access request to the target server for data access; wherein, the first scheduling unit 41 and the second scheduling unit 42 communicate across availability zones through a pre-configured local area network; the user terminal is in the first availability zone, and the target server is in the second availability zone.

[0116] The above-mentioned computing cluster provided in an embodiment of the present invention provides a first scheduling unit and a second scheduling unit that can be accessed by the user terminal and the target server in different availability zones through a computing cluster interconnected with the user terminal and the target server, respectively, and establishes a communication channel between the first scheduling unit and the second scheduling unit through a local area network, thereby realizing data access between the user terminal and the target server in different availability zones using a private cloud.

[0117] As an optional embodiment, the first scheduling unit includes: a user-side network card, which is communicatively connected to the user virtual switch of the user side and is used to receive data access requests sent by the user side through the user virtual switch; wherein the user virtual switch is used to forward the data access requests issued by the user side to the user-side network card.

[0118] The user virtual switch at the user end provides a transmission route between the user end and the user end network card, so that the data access request at the user end can be effectively transmitted to the user end network card of the first scheduling unit, and then the data access request is transmitted to the first scheduling unit.

[0119] As an optional embodiment, the first scheduling unit also includes: a first virtual switch, and the second scheduling unit includes: a second virtual switch, the first virtual switch is communicatively connected to the user-end network card through a preset forwarding mode, and is used to forward the data access request to the first virtual switch through the forwarding mode; the first virtual switch is also communicatively connected to the second virtual switch of the second scheduling unit through a communication channel of the local area network, and is used to send the data access request to the second virtual switch using the communication channel, wherein the second virtual switch is pre-set inside the second scheduling unit.

[0120] Through the forwarding mode within the first scheduling unit, the data access request is forwarded from the user-side network card to the first virtual switch. The first virtual switch forwards the data access request to the second virtual switch of the second scheduling unit through the communication channel of the local area network, and then sends the data access request to the second scheduling unit.

[0121] As an optional embodiment, the second scheduling unit also includes: a target-side network card, which is communicatively connected to the second virtual switch via a forwarding mode within the second scheduling unit, and is used to forward data access requests received by the second virtual switch to the target-side network card; the target-side network card is also connected to the target virtual switch of the target server, and is used to forward data access requests to the target virtual switch of the target server, and send the data access requests to the target server through the target virtual switch for data access.

[0122] The second scheduling unit forwards the data access request received by the second virtual switch to the target network card through a forwarding mode, and uses the routing provided by the target virtual switch of the target server to send the data access request from the target network card to the target virtual cloud. The target virtual switch of the target server provides a transmission route between the target server and the target network card, so that the data access request from the target network card can be effectively transmitted to the corresponding address of the target server, and then the data access request is sent to the target server for data access.

[0123] Figure 5 is a schematic diagram of a cloud service cross-availability zone data access architecture according to an embodiment of the present invention. As shown in Figure 5, this embodiment also provides a computing cluster for cross-availability zone data access, utilizing three virtual private clouds (VPCs): the service provider's target virtual private cloud (ISV VPC), the user virtual private cloud (user VPC) on the user access side, and the computing cluster virtual private cloud (computing cluster VPC) interconnecting the computing clusters.

[0124] The network segment allocated for the compute cluster virtual private cloud deployment is 10.0.0.0 / 8, and the cloud service modules (ECS Elastic Compute Service) are distributed in different availability zones (A and B). The compute cluster virtual private cloud has ECSs in availability zones A and B. For example, in Figure 5, the address of the cloud service module in availability zone A is 10.1.1.245, and the address of the cloud service module in availability zone B is 10.1.1.241. By creating a scheduling unit (Endpoint) and mounting the user virtual private cloud network card and the target virtual private cloud network card, the communication link between the user virtual private cloud and the target virtual private cloud is established.

[0125] The cloud service module in availability zone A and the cloud service module in availability zone B establish a VxLAN (Loxal Area Network) tunnel to open up communication between the first scheduling unit and the second scheduling unit dynamically created in availability zone A and availability zone B.

[0126] In Figure 5, the target server's service is deployed at 192.168.0.134, and the user needs to access the target server's service from the user service's 172.16.0.1.

[0127] Key Components: Open API: This is the externally accessible Open API for the compute cluster virtual private cloud's management and control services. This API enables service access and subscription. Service access creates an Egress Endpoint Pod, the second scheduling unit. Service subscription creates an Ingress Endpoint Pod, the first scheduling unit.

[0128] Coordinator: Interacts with the control agents on the cloud service modules in each availability zone to create interconnected containers (Pods) and host scheduling units.

[0129] Multilayer virtual switch OVS: Receives calls from the control agent to configure flow tables.

[0130] Control agent conn-mgr: Receives instructions from the coordinator to create access container Pods for the user end and target server, and configures internal routing strategies and forwarding mode strategies.

[0131] Based on the architecture shown in Figure 5, the following describes in detail the specific process of user-side traffic accessing the target server, passing through the computing cluster virtual private cloud to reach the target server. The steps are as follows:

[0132] S1. The traffic of the user's data access request is sent from the user's virtual private cloud and then sent to the user's virtual switch VSW (vSwitch) of the user's virtual private cloud through the default route.

[0133] S2. The traffic sent to the user virtual switch is sent to the user virtual private cloud network card in Figure 5 according to the address of the user virtual private cloud network card. The user virtual private cloud network card is created inside the first scheduling unit of the computing cluster virtual private cloud.

[0134] S3. Forwarding mode FULLNAT forwarding: This is the iptables (packet filter firewall) policy configured inside the first scheduling unit. At the same time, according to the routing policy, the traffic is forwarded to the multi-layer virtual switch network card on the user side.

[0135] S4. The multi-layer virtual switch OVS on the user side determines that the traffic needs to be transferred to the cloud service module (10.1.2.241) deployed in availability zone B based on the flow table configuration. At this time, after being encapsulated by the kernel's VxLAN (local area network) protocol, it is sent from the cloud service module network card in availability zone A to the cloud service module network card in availability zone B.

[0136] S5. Relying on the computing cluster virtual private cloud, cloud service modules across availability zones can interconnect with each other, and traffic can smoothly reach the cloud service modules in availability zone B.

[0137] S6. After reaching the cloud service module in availability zone B, the packet is unpacked by the kernel VxLAN service, transferred to the multi-layer virtual switch on the target server side, and then forwarded by the flow table to the second scheduling unit.

[0138] S7. Within the second scheduling unit, based on the routing policy, the traffic is forwarded through the target virtual private cloud network card.

[0139] S8. The traffic reaches the target virtual switch VSW of the target virtual private cloud.

[0140] S9. The target virtual switch forwards the traffic to the final service based on the destination address (192.168.0.134).

[0141] An embodiment of the present invention further provides an electronic device, comprising: at least one processor; and a memory communicatively connected to the at least one processor. The memory stores a computer program executable by the at least one processor, wherein the computer program, when executed by the at least one processor, causes the electronic device to perform the method of an embodiment of the present invention.

[0142] An embodiment of the present invention further provides a non-transitory machine-readable medium storing a computer program, wherein the computer program, when executed by a processor of a computer, is used to cause the computer to perform the method of the embodiment of the present invention.

[0143] An embodiment of the present invention further provides a computer program product, including a computer program, wherein when the computer program is executed by a processor of a computer, it is used to enable the computer to perform the method of the embodiment of the present invention.

[0144] With reference to Figure 6, the structural block diagram of an electronic device that can be used as a server or client of an embodiment of the present invention will now be described, which is an example of a hardware device that can be applied to various aspects of the present invention. Electronic devices are intended to represent various forms of digital electronic computer devices, such as laptop computers, desktop computers, workstations, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. Electronic devices can also represent various forms of mobile devices, such as personal digital processing, cellular phones, smart phones, wearable devices and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely examples and are not intended to limit the implementation of the present invention described and / or required herein.

[0145] As shown in Figure 6, the electronic device includes a computing unit 601, which can perform various appropriate actions and processes according to a computer program stored in a read-only memory (ROM) 602 or a computer program loaded from a storage unit 608 into a random access memory (RAM) 603. In RAM 603, various programs and data required for the operation of the electronic device can also be stored. The computing unit 601, ROM 602, and RAM 603 are connected to each other via a bus 604. An input / output (I / O) interface 605 is also connected to the bus 604.

[0146] Multiple components within the electronic device are connected to the I / O interface 605, including an input unit 606, an output unit 607, a storage unit 608, and a communication unit 609. The input unit 606 can be any type of device capable of inputting information into the electronic device. The input unit 606 can receive input numeric or character information and generate key signal inputs related to user settings and / or function control of the electronic device. The output unit 607 can be any type of device capable of presenting information and may include, but is not limited to, a display, a speaker, a video / audio output terminal, a vibrator, and / or a printer. The storage unit 608 may include, but is not limited to, a magnetic disk or an optical disk. The communication unit 609 allows the electronic device to exchange information / data with other devices via a computer network such as the Internet and / or various telecommunication networks, and may include, but is not limited to, a modem, a network card, an infrared communication device, a wireless communication transceiver, and / or a chipset, such as a Bluetooth device, a WiFi device, a WiMax device, a cellular communication device, and / or the like.

[0147] The computing unit 601 may be a variety of general and / or special processing components with processing and computing capabilities. Some examples of the computing unit 601 include, but are not limited to, a CPU, a graphics processing unit (GPU), various dedicated artificial intelligence (AI) computing chips, various computing units that run machine learning model algorithms, digital signal processors (DSPs), and any appropriate processors, controllers, microcontrollers, etc. The computing unit 601 performs the various methods and processes described above. For example, in some embodiments, the method embodiments of the present invention may be implemented as a computer program, which is tangibly contained in a machine-readable medium, such as a storage unit 608. In some embodiments, part or all of the computer program may be loaded and / or installed on an electronic device via a ROM 602 and / or a communication unit 609. In some embodiments, the computing unit 601 may be configured to perform the above-described method in any other appropriate manner (e.g., by means of firmware).

[0148] The computer programs for implementing the methods of the embodiments of the present invention may be written in any combination of one or more programming languages. These computer programs may be provided to a processor or controller of a general-purpose computer, a special-purpose computer, or other programmable data processing device, so that when the computer programs are executed by the processor or controller, the functions / operations specified in the flowcharts and / or block diagrams are implemented. The computer programs may be executed entirely on the machine, partially on the machine, as a stand-alone software package, partially on the machine and partially on a remote machine, or entirely on a remote machine or server.

[0149] In the context of an embodiment of the present invention, a machine-readable medium can be a tangible medium that can contain or store a program for use by an instruction execution system, device or equipment or used in combination with an instruction execution system, device or equipment. A machine-readable medium can be a machine-readable signal medium or a machine-readable storage medium. A machine-readable signal medium can include, but is not limited to, an electronic, magnetic, optical, electromagnetic, infrared or semiconductor system, device or equipment, or any suitable combination of the foregoing. A more specific example of a machine-readable storage medium can include an electrical connection based on one or more lines, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0150] It should be noted that the term "including" and its variations used in the embodiments of the present invention are open-ended, i.e., "including but not limited to." The term "based on" means "based at least in part on." The term "one embodiment" means "at least one embodiment"; the term "another embodiment" means "at least one other embodiment"; and the term "some embodiments" means "at least some embodiments." The modifications of "one" and "a plurality of" mentioned in the embodiments of the present invention are illustrative and non-restrictive. Those skilled in the art should understand that, unless the context clearly indicates otherwise, they should be understood as "one or more."

[0151] The user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in the embodiments of the present invention are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with the relevant laws, regulations and standards of relevant countries and regions, and provide corresponding operation entrances for users to choose to authorize or refuse.

[0152] The various steps described in the method implementation scheme provided in the embodiments of the present invention may be performed in different orders and / or in parallel. In addition, the method implementation scheme may include additional steps and / or omit the steps shown. The scope of protection of the present invention is not limited in this respect.

[0153] The term "embodiment" in this specification refers to specific features, structures, or characteristics described in conjunction with the embodiment that can be included in at least one embodiment of the present invention. The appearance of this phrase in various places in the specification does not necessarily mean the same embodiment, nor does it mean that it is mutually exclusive with other embodiments and is independent or optional. The various embodiments in this specification are described in a related manner, and the same or similar parts between the various embodiments are referenced to each other. In particular, for the embodiments of the device, equipment, and system, since they are basically similar to the method embodiments, the description is relatively simple, and the relevant parts are referred to the partial description of the method embodiment.

[0154] The above-described embodiments merely illustrate several implementations of the present invention. While the descriptions are relatively specific and detailed, they should not be construed as limiting the scope of the patent. It should be noted that a person skilled in the art would be able to make numerous variations and improvements without departing from the spirit of the present invention, all of which fall within the scope of the present invention. Therefore, the scope of the present invention shall be determined by the appended claims.

Claims

1. A data access method for a cloud service, applied to a computing cluster, comprising: Receiving a data access request sent by a user terminal, wherein the user terminal is in a first availability zone and a target server of the data access request is in a second availability zone; According to a first scheduling unit preconfigured for the user terminal, forwarding the data access request to a second scheduling unit preconfigured for the target server, wherein the first scheduling unit and the second scheduling unit are both located inside the computing cluster and communicate across availability zones through a preconfigured local area network; The data access request is sent to the target server according to the second scheduling unit to access the data.

2. The method according to claim 1, wherein: Receiving a data access request sent by a user includes: The data access request sent by the user virtual switch of the user end is received through the user end network card of the first scheduling unit, wherein the user virtual switch is used to forward the data access request of the user end to the user end network card.

3. The method according to claim 2, wherein: According to the first scheduling unit preconfigured for the user terminal, forwarding the data access request to the second scheduling unit preconfigured for the target server includes: Forwarding the data access request to the first virtual switch through a forwarding mode inside the first scheduling unit, wherein the first virtual switch is used to send the data access request through a communication channel of a local area network; The data access request is sent to the second virtual switch through the communication channel of the local area network via the first virtual switch, wherein the second virtual switch is used to send the data access request to the second scheduling unit.

4. The method according to claim 3, wherein: Sending the data access request to the target server according to the second scheduling unit includes: Forwarding the data access request received by the second virtual switch to the target end network card through the forwarding mode inside the second scheduling unit, wherein the target end network card is pre-set in the second scheduling unit and is used to forward the data access request to the target server; The data access request is sent to the target server through the target-side network card.

5. The method according to claim 4, wherein: Sending the data access request to the target server through the target end network card includes: Sending the data access request to the target virtual switch of the target server through the target end network card; The data access request is sent to the target server through the target virtual switch.

6. The method according to claim 1, wherein: Before receiving the data access request sent by the user terminal, the method further includes: Generate a first scheduling unit corresponding to the user end according to the user end of the data access request; According to the target server of the data access request, a second scheduling unit corresponding to the target server is generated.

7. The method according to claim 6, wherein: The data access request includes a service subscription operation of the user end and a service access operation of the target server. According to the user end of the data access request, generating a first scheduling unit corresponding to the user end includes: In response to the service subscription operation, creating a first scheduling unit in a cloud service module in a first availability zone to which the user terminal belongs; Generating, according to the target server of the data access request, a second scheduling unit corresponding to the target server includes: In response to the service access operation, a second scheduling unit is created in a cloud service module of a second availability zone to which the target server belongs.

8. The method according to claim 7, wherein: In response to the service subscription operation, in the cloud service module of the first available zone to which the user terminal belongs, creating a first scheduling unit includes: In the case where the open application program interface receives the service subscription operation, creating the first scheduling unit in the cloud service module of the first availability zone through the coordinator, wherein the open application program interface and the coordinator are both management and control service services of the computing cluster; In response to the service access operation, in the cloud service module of the second availability zone to which the target server belongs, creating a second scheduling unit includes: When the open application program interface receives the service access operation, the second scheduling unit is created in the cloud service module of the second availability zone through the coordinator.

9. A computing cluster supporting data access for cloud services, comprising: The first scheduling unit, the second scheduling unit, The first scheduling unit is in communication connection with the user terminal, and is used to receive a data access request sent by the user terminal, and forward the data access request to the second scheduling unit; The second scheduling unit is in communication with the target server and is used to send the data access request to the target server to access the data; The first scheduling unit and the second scheduling unit communicate across availability zones via a pre-configured local area network; the user terminal is in the first availability zone, and the target server is in the second availability zone.

10. The computing cluster according to claim 9, wherein: The first scheduling unit includes: a user-side network card, The user-side network card is in communication connection with the user virtual switch of the user side, and is used for receiving a data access request sent by the user side through the user virtual switch; The user virtual switch is used to forward the data access request sent by the user terminal to the user terminal network card.

11. The computing cluster according to claim 10, wherein: The first scheduling unit further includes: a first virtual switch, and the second scheduling unit includes: a second virtual switch, The first virtual switch is communicatively connected to the user-side network card via a preset forwarding mode, and is used to forward the data access request to the first virtual switch via the forwarding mode; The first virtual switch is also connected to the second virtual switch of the second scheduling unit through the communication channel of the local area network, and is used to send the data access request to the second virtual switch using the communication channel, wherein the second virtual switch is pre-set inside the second scheduling unit.

12. The computing cluster according to claim 11, wherein: The second scheduling unit further includes: a target end network card, The target-side network card is communicatively connected with the second virtual switch via a forwarding mode inside the second scheduling unit, and is used to forward the data access request received by the second virtual switch to the target-side network card; The target end network card is also connected to the target virtual switch of the target server, and is used to forward the data access request to the target virtual switch of the target server, and send the data access request to the target server through the target virtual switch for data access.

13. An electronic device comprising: A processor, and a memory storing a program, wherein the program comprises instructions which, when executed by the processor, cause the processor to perform the method according to any one of claims 1 to 8.

14. A non-transitory machine-readable medium storing computer instructions, wherein: The computer instructions are used to cause the computer to execute the method according to any one of claims 1 to 8.

Images