Vxlan forwarding table self-learning method
By introducing the Zbit tagging mechanism of the central control center and vxlan message header in cloud computing scenarios, self-learning and security prevention of virtual machines and hosts is realized, and network pressure and security problems during virtual machines communication in cloud computing are solved.
Patent Information
- Application Number
- PCT/CN2024/138860
- Authority / Receiving Office
- WO · WO
- Patent Type
- Applications
- Current Assignee / Owner
- Priority Date
- 2023-12-12
- Filing Date
- 2024-12-12
- Publication Date
- 2025-06-19
AI Technical Summary
In cloud computing scenarios, when the number of hosts is large, virtual machine communication needs to notify a large number of hosts, resulting in high overhead generated by openflow notification and reducing network speed; at the same time, when communication between unlearned virtual machines, a large number of multicast messages will be generated, which puts pressure on the physical network and is prone to attack.
A vxlan forwarding and self-learning method is proposed. The corresponding relationship between the virtual machine and the host is saved through the central control center, and the Zbit tagging mechanism of the vxlan message header is used to realize the host's independent learning and prevention of unknown mac attacks.
This avoids the pressure on physical networks by multicast in traditional self-learning, improves network security, and optimizes the vxlan learning process through the central control center, reducing the resource overhead caused by unlearned unicast triggering broadcasts.
Smart Images

Figure CN2024138860_19062025_PF_FP_ABST
Abstract
Description
A vxlan forwarding table self-learning method
[0001] This application claims priority to Chinese patent application No. 2023117029928, filed on December 12, 2023, entitled “A vxlan forwarding table self-learning method,” the entire text of which is hereby incorporated by reference. Technical Field
[0002] The present invention relates to the field of cloud computing technology, and more specifically, to a vxlan forwarding table self-learning method. Background Art
[0003] The VXLAN protocol is a typical tunnel encapsulation protocol in cloud computing scenarios. It encapsulates Layer 2 packets as payloads within UDP packets, creating a virtual network (overlay) on top of the physical network (underlay). OpenVswitch (OVS) is a widely used virtual switch that forwards network packets for virtual machines. It supports the OpenFlow protocol, receives forwarding rules from the OpenFlow controller, and forwards packets based on these rules. The VXLAN forwarding table is a routing table that records the VNIs, MAC addresses, and corresponding IP addresses in the VXLAN network. It is used to determine the IP address corresponding to the destination MAC address in a VXLAN packet, ensuring correct forwarding of VXLAN packets.
[0004] As shown in Figure 1, currently, based on cloud computing technology, the main transmission process of virtual machine network data packets includes: the data packet sent by the virtual machine is first sent to OVS. At this time, OVS needs to send the data packet to the next hop. OVS queries the openflow rules to learn the location of the next hop. The next hop may be another virtual machine on the same host machine, or it may be a virtual machine or gateway on a remote server. If it is a virtual machine on the same host machine, OVS will directly transfer the data packet to the virtual machine according to the rules; if the next hop is a virtual machine or gateway on a remote server, OVS will use the vxlan tunnel to encapsulate the second-layer data packet sent by the virtual machine according to the openflow rules, and then transmit the data to the remote server through the physical network. After the remote service receives the vxlan message, it first performs vxlan decapsulation to obtain the data packet sent by the inner virtual machine, and then transfers it to the virtual machine on this server.
[0005] In the prior art, there are the following problems:
[0006] 1. When the number of hosts is very large, the frequency of VM creation becomes very high, and a large number of hosts need to be notified. In this case, the overhead of sending OpenFlow notifications is very high, which reduces the network speed.
[0007] 2. The Linux kernel implements a self-learning function. When receiving a VXLAN message from the other party, it learns the correspondence between the overlay source MAC and the underlay source IP (VXLAN forwarding table), which is equivalent to learning the correspondence between the virtual machine and the host. However, before learning this correspondence, if the virtual machines want to communicate with each other, they send a data packet to all hosts via multicast. After receiving the message, the correct host forwards it to the virtual machine, while other hosts discard it. When the host scale is large, this method will generate a large number of multicast messages, putting great pressure on the physical network and making it vulnerable to attacks. For example, a virtual machine constructs an attack message and deliberately sends a data packet to a non-existent MAC. Since the destination MAC does not belong to any virtual machine, the other party will not reply. The host cannot learn the other party's host information and will continue to send attack messages to all hosts via multicast, causing physical network failure. Summary of the Invention
[0008] In order to overcome the above-mentioned defects of the prior art, an embodiment of the present invention provides a vxlan forwarding table self-learning method to solve the problems raised in the above-mentioned background technology.
[0009] To achieve the above object, the present invention provides the following technical solution: a vxlan forwarding table self-learning method, comprising:
[0010] Define vxlan messages;
[0011] When a vxlan message is sent from a host machine, the vxlan message is processed; the host machine includes host machine A and host machine B;
[0012] When the host receives a vxlan message, it processes the vxlan message;
[0013] The central control center parses the vxlan message after receiving it;
[0014] Virtual machine A in host machine A communicates with virtual machine B in host machine B.
[0015] Furthermore, the vxlan message header contains 8 bytes (64 bits), of which the last byte is a reserved field, and one bit is used to mark the destination mac as unreachable, and the 63rd bit is marked as Zbit, indicating that the host machine learns the IP as 0.0.0.0 after receiving the vxlan message. If the host machine queries the vxlan forwarding table and the IP is 0.0.0.0, the vxlan message will be discarded and no further processing will be done.
[0016] Furthermore, the central control center saves the correspondence between all virtual machines and host machines. When the central control center receives a vxlan message, it forwards the vxlan message to the corresponding host machine according to the destination mac of the inner message. When a new virtual machine is created, the central control center makes corresponding updates.
[0017] Furthermore, the method for the host machine to process the vxlan message includes:
[0018] Query the vxlan forwarding table;
[0019] If the IP address corresponding to the inner message's destination MAC is found, check whether the IP address is 0.0.0.0;
[0020] If yes, the vxlan message is discarded and not sent;
[0021] If the IP address is not 0.0.0.0, the VXLAN message is encapsulated with the queried host IP and sent out, with the queried host IP address as the outer destination IP;
[0022] If the IP corresponding to the MAC is not found, the VXLAN message is encapsulated with the IP of the server where the central control center is located as the outer destination IP and sent to the central control center.
[0023] Furthermore, the method for the host machine to receive the vxlan message includes:
[0024] First, the vxlan message is parsed to obtain the inner message information and the outer message information, and the inner message information and the outer message information are marked as inner and outer layer information;
[0025] If the Zbit in the vxlan packet header is 1, add or update the vxlan forwarding table entry and set ftb[overlay_src_mac] = 0.0.0.0;
[0026] If the Zbit of the vxlan message header is 0, add or update the vxlan forwarding table entry, set ftb[overlay_src_mac] = underlay_src_ip, and forward the inner message to the virtual machine according to the forwarding rule.
[0027] Furthermore, the process of parsing the vxlan message received by the central control center includes:
[0028] After receiving the VXLAN message, the central control center parses it and queries the host information corresponding to the destination MAC of the inner message;
[0029] If the central control center finds the corresponding host information, it uses the found host IP as the Uderlay destination IP to encapsulate the VXLAN message and send it out; its host IP is the source host IP as the source IP of VXLAN. When the message is sent to the destination host, the destination host learns the correspondence between the sending virtual machine and the host;
[0030] If the corresponding host information cannot be found, the source host mac corresponding virtual machine is notified that it is unreachable, preventing the host from sending vxlan messages to the central control center again.
[0031] Furthermore, the steps of notifying the source host machine MAC that the virtual machine corresponding to the MAC address is unreachable include the following:
[0032] Swap the source and destination MAC addresses of the inner message;
[0033] The VXLAN message is encapsulated with the IP address of the source host as the VXLAN destination IP address and the VXLAN message is sent back to the source host.
[0034] Furthermore, VM A sends a message to OVS, which searches the vxlan forwarding table. If there is no host information corresponding to the destination VM B, the vxlan message is encapsulated and sent to the central control center.
[0035] The central control center queries the destination host B information, extracts the inner message, encapsulates it into a vxlan message and sends it to the destination host B;
[0036] The destination host B receives the vxlan message and extracts the inner and outer layer information. When it checks that the Zbit is 0, the destination host B learns the correspondence between the inner source MAC and the outer source IP, and forwards the vxlan message to virtual machine B based on the learned correspondence between the inner source MAC and the outer source IP.
[0037] VM B sends a reply packet, which is then transmitted to OVS. OVS queries the vxlan forwarding table. If it finds the forwarding information for VM A, it directly encapsulates the vxlan packet and sends it to host A.
[0038] After receiving the vxlan message, host A parses it, extracts the inner and outer layer information, learns the forwarding information of virtual machine B, and then sends the inner layer message to virtual machine A;
[0039] Virtual machine A sends a reply packet, which is transmitted to OVS. OVS queries the vxlan forwarding table. If it learns the forwarding information of virtual machine B, it encapsulates the vxlan message and sends it to host B.
[0040] In a second aspect, the present invention provides an electronic device, comprising: a processor and a memory, wherein the memory stores a computer program that can be called by the processor;
[0041] The processor executes the above-mentioned vxlan forwarding table self-learning method by calling the computer program stored in the memory.
[0042] In a third aspect, the present invention provides a computer-readable storage medium storing instructions, which, when executed on a computer, enables the computer to execute the above-mentioned vxlan forwarding table self-learning method.
[0043] Technical effects and advantages of the present invention:
[0044] 1. The present invention does not need to notify each host of the VXLAN forwarding table. The host completes autonomous learning, avoiding the problem of multicast putting pressure on the physical network in traditional self-learning implementation. It also prevents attacks from unknown MAC addresses by defining the 0.0.0.0 forwarding table entry mechanism, thereby improving network security.
[0045] 2. The present invention improves the self-learning process of vxlan. By adding a central control center, it solves the problem of large-scale multicast in the physical network caused by traditional vxlan learning. By introducing the Zbit bit mark of vxlan, it solves the resource overhead caused by malicious, invalid and unknown MAC. Compared with the existing arp gateway proxy, the present invention can not only proxy broadcast messages such as arp, but also proxy unicast messages, avoiding the network resource overhead caused by unlearned unicast triggering broadcast. BRIEF DESCRIPTION OF THE DRAWINGS
[0046] FIG1 is a diagram of a virtual machine network data flow according to the present invention;
[0047] Figure 2 is a schematic diagram of the vxlan header message format of Example 1;
[0048] Figure 3 is a host vxlan sending flow chart of Example 1;
[0049] Figure 4 is a host vxlan receiving flow chart of Example 1;
[0050] FIG5 is a flowchart of the central control center workflow of Example 1;
[0051] FIG6 is a flow chart of data packet forwarding based on the central control center in Example 1;
[0052] FIG7 is a schematic structural diagram of an electronic device according to Example 3. DETAILED DESCRIPTION
[0053] The following will provide a clear and complete description of the technical solutions in the embodiments of the present invention in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. All other embodiments obtained by ordinary technicians in this field based on the embodiments of the present invention without making any creative efforts shall fall within the scope of protection of the present invention.
[0054] In addition, the accompanying drawings are merely schematic illustrations of the present invention and are not necessarily drawn to scale. Identical reference numerals in the figures denote identical or similar parts, and thus repetitive descriptions thereof will be omitted. Some of the block diagrams shown in the accompanying drawings are functional entities that do not necessarily correspond to physically or logically separate entities. These functional entities may be implemented in software, in one or more hardware modules or integrated circuits, or in different network and / or processor and / or microcontroller approaches.
[0055] It should be understood that although the terms "first," "second," and the like may be used herein to describe various elements, these elements should not be limited by these terms. These terms are used solely to distinguish one element from another. For example, a first element may be referred to as a second element, and similarly, a second element may be referred to as a first element, without departing from the scope of the exemplary embodiments. The term "and / or" as used herein includes any and all combinations of one or more of the listed associated items.
[0056] Install multiple hosts and a central control machine; configure the IP address of the VXLAN control center on the host, do not configure VXLAN multicast, and create virtual machines A and B on host A and host B respectively; establish a TCP link from one virtual machine to another virtual machine, and the TCP link within the virtual machine is established normally; at this time, check the VXLAN forwarding table on the two hosts and learn each other's forwarding information.
[0057] Example 1
[0058] This embodiment discloses a VXLAN forwarding table self-learning method, including:
[0059] Define vxlan messages;
[0060] When a vxlan message is sent from a host machine, the vxlan message is processed; the host machine includes host machine A and host machine B;
[0061] When the host receives a vxlan message, it processes the vxlan message;
[0062] The central control center parses the vxlan message after receiving it;
[0063] Virtual machine A in host machine A communicates with virtual machine B in host machine B.
[0064] 1. Define the vxlan message.
[0065] Please refer to Figure 2. The vxlan message header contains 8 bytes (64 bits), of which the last byte is a reserved field, and one bit is used to mark the destination mac as unreachable. The 63rd bit is marked as Zbit, indicating that the host machine learns the IP as 0.0.0.0 after receiving the vxlan message. If the host machine queries the vxlan forwarding table and the IP is 0.0.0.0, the vxlan message will be discarded and no further processing will be carried out to save network resources and reduce the pressure on the central control center.
[0066] It should be noted that the central control center saves the correspondence between all virtual machines and host machines. When the central control center receives a vxlan message, it forwards the vxlan message to the corresponding host machine according to the destination mac of the inner message. When a new virtual machine is created, the central control center makes corresponding updates.
[0067] As shown in FIG3 , the method for a host machine to send a vxlan message includes:
[0068] Query the vxlan forwarding table;
[0069] If the IP address corresponding to the inner message's destination MAC is found, check whether the IP address is 0.0.0.0;
[0070] If yes, the vxlan message is discarded and not sent;
[0071] If the IP address is not 0.0.0.0, the VXLAN message is encapsulated with the queried host IP and sent out, with the queried host IP address as the outer destination IP;
[0072] If the IP corresponding to the MAC is not found, the VXLAN message is encapsulated with the IP of the server where the central control center is located as the outer destination IP and sent to the central control center.
[0073] Referring to FIG4 , the method for receiving a vxlan message on a host machine includes:
[0074] First, the vxlan message is parsed to obtain the inner message information and the outer message information, and the inner message information and the outer message information are marked as inner and outer layer information;
[0075] If the Zbit in the vxlan packet header is 1, add or update the vxlan forwarding table entry and set ftb[overlay_src_mac] = 0.0.0.0;
[0076] If the Zbit of the vxlan message header is 0, add or update the vxlan forwarding table entry, set ftb[overlay_src_mac] = underlay_src_ip, and forward the inner message to the virtual machine according to the forwarding rule.
[0077] As shown in Figure 5, the process of parsing the VXLAN message received by the central control center includes:
[0078] After receiving the VXLAN message, the central control center parses it and queries the host information corresponding to the destination MAC of the inner message;
[0079] If the central control center finds the corresponding host information, it uses the found host IP as the Uderlay destination IP to encapsulate the VXLAN message and send it out. It should be noted that the host IP is the source host IP as the source IP of VXLAN. When the message is sent to the destination host, the destination host learns the correspondence between the sending virtual machine and the host;
[0080] If the corresponding host information cannot be found, the source host mac corresponding virtual machine is notified that it is unreachable, preventing the host from sending vxlan messages to the central control center again.
[0081] Specifically, the steps for notifying the source host MAC that the virtual machine corresponding to the MAC address is unreachable include the following:
[0082] Swap the source and destination MAC addresses of the inner message;
[0083] The VXLAN message is encapsulated with the IP address of the source host as the VXLAN destination IP address and the VXLAN message is sent back to the source host.
[0084] As shown in Figure 6, the communication process between virtual machines A and B is as follows:
[0085] VM A sends a message to OVS. OVS searches the vxlan forwarding table. If there is no host information corresponding to the destination VM B, it encapsulates the vxlan message and sends it to the central control center.
[0086] The central control center queries the destination host B information, extracts the inner message, encapsulates it into a vxlan message and sends it to the destination host B;
[0087] The destination host B receives the vxlan message and extracts the inner and outer layer information. When it checks that the Zbit is 0, the destination host B learns the correspondence between the inner source MAC and the outer source IP, and forwards the vxlan message to virtual machine B based on the learned correspondence between the inner source MAC and the outer source IP.
[0088] VM B sends a reply packet, which is then transmitted to OVS. OVS queries the vxlan forwarding table. If it finds the forwarding information for VM A, it directly encapsulates the vxlan packet and sends it to host A.
[0089] After receiving the vxlan message, host A parses it, extracts the inner and outer layer information, learns the forwarding information of virtual machine B, and then sends the inner layer message to virtual machine A;
[0090] Virtual machine A sends a reply packet, which is transmitted to OVS. OVS queries the vxlan forwarding table. If it learns the forwarding information of virtual machine B, it encapsulates the vxlan message and sends it to host B.
[0091] This embodiment does not need to notify each host vxlan forwarding table. The host completes autonomous learning, avoiding the problem of multicast putting pressure on the physical network in traditional self-learning implementations. It also implements prevention of attacks against unknown macs by defining the 0.0.0.0 forwarding table entry mechanism, thereby improving network security.
[0092] Example 2
[0093] Referring to FIG. 7 , this embodiment provides an electronic device, including: a processor and a memory, wherein the memory stores a computer program that can be called by the processor;
[0094] The processor executes a vxlan forwarding table self-learning method of Example 1 by calling a computer program stored in the memory.
[0095] Example 3
[0096] This embodiment provides a computer-readable storage medium storing instructions. When the instructions are executed on a computer, the computer executes a vxlan forwarding table self-learning method of embodiment 1.
[0097] The above embodiments can be implemented in whole or in part by software, hardware, firmware or any other combination. When implemented using software, the above embodiments can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions or computer programs. When the computer instructions or computer program are loaded or executed on a computer, the process or function described in the embodiment of the present application is generated in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions can be stored in a computer-readable storage medium or transmitted from one computer-readable storage medium to another computer-readable storage medium. For example, the computer instructions can be transmitted from one website, computer, server or data center to another website, computer, server or data center via a wired network. The computer-readable storage medium can be any available medium that can be accessed by a computer or a data storage device such as a server or data center that contains one or more available media sets. The available medium can be a magnetic medium (for example, a floppy disk, a hard disk, a tape), an optical medium (for example, a DVD), or a semiconductor medium. The semiconductor medium can be a solid-state drive.
[0098] Those skilled in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this application.
[0099] Those skilled in the art will clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.
[0100] In the several embodiments provided in this application, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are merely schematic. For example, the division of the units is only one type. In actual implementation, there may be other division methods, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.
[0101] The units described as separate components may or may not be physically separate, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed across multiple network units. Some or all of these units may be selected to achieve the purpose of this embodiment according to actual needs.
[0102] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.
[0103] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art or the part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes several instructions for enabling a computer device (which can be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: various media that can store program codes, such as a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk.
[0104] The above description is merely a specific embodiment of the present application, but the scope of protection of the present application is not limited thereto. Any changes or substitutions that can be easily conceived by a person skilled in the art within the technical scope disclosed in this application should be included in the scope of protection of this application. Therefore, the scope of protection of this application should be based on the scope of protection of the claims.
[0105] Finally, the above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention should be included in the scope of protection of the present invention.
Claims
1. A vxlan forwarding table self-learning method, characterized in that: include: Define the vxlan message; When a vxlan message is sent on a host machine, the vxlan message is processed; the host machine includes a host machine A and a host machine B; When the host receives a vxlan message, it processes the vxlan message; The central control center parses the vxlan message after receiving it; Virtual machine A in host machine A communicates with virtual machine B in host machine B.
2. A vxlan forwarding table self-learning method according to claim 1, characterized in that: The vxlan message header contains 8 bytes, or 64 bits, of which the last byte is a reserved field, and one bit is used to mark the destination mac as unreachable. The 63rd bit is marked as Zbit, indicating that the host learns the IP as 0.0.0.0 after receiving the vxlan message. If the host queries the vxlan forwarding table and the IP is 0.0.0.0, the vxlan message is discarded and no further processing is done.
3. A vxlan forwarding table self-learning method according to claim 2, characterized in that: The central control center saves the correspondence between all virtual machines and host machines. When the central control center receives a vxlan message, it forwards the vxlan message to the corresponding host machine according to the destination mac of the inner message. When a new virtual machine is created, the central control center makes corresponding updates.
4. A vxlan forwarding table self-learning method according to claim 3, characterized in that: The method for a host machine to send and process a vxlan message includes: Query the vxlan forwarding table; If the IP address corresponding to the inner message destination MAC is found, check whether the IP address is 0.0.0.0; If yes, the vxlan message is discarded and not sent; If the IP address is not 0.0.0.0, the VXLAN message is encapsulated with the queried host IP and sent out, where the queried host IP address is used as the outer destination IP; If the IP corresponding to the MAC is not found, the VXLAN message is encapsulated with the IP of the server where the central control center is located as the outer destination IP and sent to the central control center.
5. A vxlan forwarding table self-learning method according to claim 4, characterized in that: The method for a host machine to receive a vxlan message includes: First, parse the vxlan message to obtain the inner message information and the outer message information, and mark the inner message information and the outer message information as inner and outer layer information; If the Zbit of the vxlan packet header is 1, add or update the vxlan forwarding table entry and set ftb[overlay_src_mac]=0.0.0.0; If the Zbit of the vxlan message header is 0, add or update the vxlan forwarding table entry, set ftb[overlay_src_mac] = underlay_src_ip, and forward the inner message to the virtual machine according to the forwarding rule.
6. A vxlan forwarding table self-learning method according to claim 5, characterized in that: The process of receiving and parsing the vxlan message at the central control center includes: After receiving the vxlan message, the central control center parses it and queries the host information corresponding to the destination mac of the inner message; If the central control center finds the corresponding host information, it uses the found host IP as the uderlay destination IP to encapsulate the VXLAN message and send it out; its host IP is the source host IP as the source IP of VXLAN. When the message is sent to the destination host, the destination host learns the corresponding relationship between the sending virtual machine and the host; If the corresponding host information cannot be found, the source host mac is notified that the virtual machine corresponding to it is unreachable, preventing the host from sending vxlan messages to the central control center again.
7. A vxlan forwarding table self-learning method according to claim 6, characterized in that: The steps to notify the source host mac that the virtual machine corresponding to it is unreachable include the following: Swap the source and destination MAC addresses of the inner message; The vxlan message is encapsulated with the ip of the source host as the vxlan destination ip, and the vxlan message is sent back to the source host.
8. A vxlan forwarding table self-learning method according to claim 7, characterized in that: Virtual machine A sends a message to OVS. OVS searches the vxlan forwarding table. If there is no host information corresponding to the destination virtual machine B, it encapsulates the vxlan message and sends it to the central control center. The central control center queries the destination host B information, extracts the inner message, encapsulates the vxlan message and sends it to the destination host B; The destination host B receives the vxlan message and extracts the inner and outer layer information. When it is checked that Zbit is 0, the destination host B learns the correspondence between the inner source mac and the outer source ip, and forwards the vxlan message to virtual machine B based on the learned correspondence between the inner source mac and the outer source ip. Virtual machine B sends a reply packet, which is transmitted to OVS. OVS queries the vxlan forwarding table. If it learns the forwarding information of virtual machine A, it directly encapsulates the vxlan message and sends it to host A. After receiving the vxlan message, host A performs parsing, extracts the inner and outer layer information, learns the forwarding information of virtual machine B, and then sends the inner layer message to virtual machine A; Virtual machine A sends a reply packet, which is transmitted to OVS. OVS queries the vxlan forwarding table. If it learns the forwarding information of virtual machine B, it encapsulates the vxlan message and sends it to host B.
9. An electronic device, characterized in that: include: A processor and a memory, wherein the memory stores a computer program that can be called by the processor; The processor executes a vxlan forwarding table self-learning method described in any one of claims 1-8 by calling the computer program stored in the memory.
10. A computer-readable storage medium, characterized in that: Instructions are stored, and when the instructions are executed on a computer, the computer executes a vxlan forwarding table self-learning method as described in any one of claims 1-8.
Citation Information
Patent Citations
System and method for monitoring two-layer traffic among virtual machines
CN106034052A
Packet transmission method, information processing method, and related device
CN109245984A
Method and device for forwarding VXLAN message
CN110545230A
Two-layer intercommunication method and device for vxlan virtual network and vlan network
CN113904986A
Vxlan forwarding table self-learning method
CN118041859A
Cited By
Public network traffic forwarding method and device for cloud computing system, equipment and medium
CN120956691A