40 results about "Virtual Extensible LAN" patented technology

The invention discloses a method for sending an ARP (Address Resolution Protocol) message in a VxLAN (Virtual Extensible LAN), a VTEP (VxLAN Tunnel Endpoint) and a VxLAN controller so that a problem that resource waste is generated because messages are sent in a multicast method is eliminated. The method for sending the ARP message mainly includes that: a source VTEP receives an ARP message of a source virtual machine (VM), wherein the APP message is used for requesting a media access control MAC address of a target VM and the ARP message carries the IP address of the target VM; the IP address of the target VM, carried in the APP message is acquired; a query request is sent to the VxLAN controller so as to acquire the IP address of a target VTEP, wherein the query request carries the IP address of the target VM; the IP address of the target VTEP is acquired from the VxLAN controller; the APP message is packaged according to the IP address of the target VTEP so that a VxLAM message is generated; and the VxLAM message is sent to the target VTEP.

The invention provides a fault processing method and apparatus. The fault processing method and apparatus are characterized in that CE (Customer Edge) equipment in an EVPN (Ethernet Virtual Private Network) is connected with more than 2 VTEPs (VXLAN (Virtual eXtensible LAN) Tunnel End Point) in a distributed aggregation system; the more than 2 VTEPs respectively establish a neighborhood with gateway equipment; and the VTEPs are connected through an IPL (Intra Portal Link). The fault processing method is applied to any one VTEP of the more than two VTEPs, and includes the steps: receiving a data message sent from the gateway equipment; and after determining that the received data message is required to sent to the CE equipment through the IPL, sending a redirection message to the gateway equipment so as to enable the gateway equipment to send the data message which is required to sent to the CE equipment to the other VTEPs except the current VTEP.

One embodiment of the present invention provides a switch that is a member of a fabric switch. The switch includes a keepalive response module that identifies a keepalive response packet that does not correspond to any keepalive packet previously transmitted by the switch. The switch also includes a switch identifier extraction module that extracts a switch identifier from a payload of the keepalive response packet, where the switch identifier corresponds to another member switch in the fabric switch. The switch further includes a forwarding module that constructs a packet that includes the payload and is destined to the other member switch.

The invention provides a method and network card for a physical machine to access to a virtual network. The method comprises: utilizing the network card of a physical machine to package the original data packet sent by the physical machine to a virtual network to form a VXLAN(Virtual Extensible LAN) data packet, and to send the VXLAN data packet to the virtual network; utilizing the network card of the physical machine to disassemble the VXLAN data packet sent to the physical machine by the virtual network to obtain the original data packet in the VXLAN data packet, and to send the obtained original data packet to the physical machine; and building an address mapping table used for displaying the address mapping relation between an IP address and an MAC address in the network card of the physical machine. According to the invention, the network card of the physical machine is equivalent to a virtual tunnel port to realizes functions, and directly replaces the virtual tunnel port, thereby allowing the physical machine to access to a virtual network; in addition, compared with a special-purpose software gateway, the network card has better performances, and is much cheaper than an SDN TOR switch.

The invention provides a fault processing method and apparatus. The fault processing method includes the steps: when detecting that an AC (Attachment Circuit) link between a VTEP (VXLAN Tunnel End Point) and CE (Customer Edge) equipment is unavailable, determining an AC interface corresponding to the AC link and a VXLAN (Virtual eXtensible LAN) corresponding to the AC interface, and determining a corresponding MAC address according to the AC interface and the VXLAN; and sending a link fault message carrying the ID of the VXLAN and the MAC address to gateway equipment so as to enable the gateway equipment to determine the corresponding VXLAN tunnel according to the ID of the VXLAN and the MAC address, and stopping using the link between the gateway equipment corresponding to the VXLAN tunnel and the VTEP.

The invention discloses a message forwarding method and device. The method comprises the following steps: when a public network channel between first virtual extensible local area network tunnel endpoint VTEP equipment and remote VTEP equipment in a distributed link aggregation group has faults, establishing a first virtual extensible local area network VXLAN (Virtual eXtensible LAN) tunnel according to an acquired address of the remote VTEP equipment, wherein the next hop of the first VXLAN tunnel is the address of second VTEP equipment in the distributed link aggregation group; associating afirst service on the first VTEP equipment with the first VXLAN tunnel; and transmitting a received message of the first service to the remote VTEP equipment through the first VXLAN tunnel. The message forwarding method provided by the invention establishes the new VXLAN tunnel under the condition that the public network tunnel between the first VTEP equipment and the remote VTEP equipment has thefaults, so that normal forwarding of service messages is guaranteed, and the network reliability is provided.

The invention discloses a method and system for enabling a VXLAN (Virtual eXtensible LAN) message to traverse NAT (Network Address Translation) equipment. The method comprises the steps of: receivinga first VXLAN message which is from a source VTEP (VXLAN Tunnel End Point) on a private network side and is sent to a target VTEP on a public network side; if an NAT rule matched with the first VXLANmessage exists, after carrying out public network conversion on a source IP address and a source port number of the first VXLAN message, sending to the target VTEP; receiving a second VXLAN message which is from the target VTEP and is sent to the source VTEP; and after determining that the second VXLAN message is matched with the NAT rule, after carrying out private network conversion on a targetIP address and a target port number of the second VXLAN message, sending back to the source VTEP. The invention can avoid the problem that the VXLAN message sent from equipment on the public network side cannot traverse the NAT equipment.

The invention discloses a method and system for implementing sub-network intercommunication, and relates to the field of communications. When a first virtual machine of a tenant sends an IP message to a second virtual machine, the IP message is sent to first VTEP (Virtual Extensible LAN Tunneling End Point) equipment; the first VTEP equipment packages the IP message into a first VxLAN (Virtual Extensible LAN) message and forwards the first VxLAN message to a VxLAN gateway; if a VxLAN MAC table comprises an MAC address table item of the second virtual machine, a VNI (VxLAN Network Identifier) number of the second virtual machine is extracted from the VxLAN MAC table; and if the VNI numbers of the second virtual machine and the first virtual machine belong to the same tenant, the first VxLAN message is repackaged to generate a second VxLAN message and the second VxLAN message is forwarded to second VTEP equipment so as to send the IP message to the second virtual machine. According to the method and the system which are disclosed by the invention, by constructing a tenant VxLAN set table, intercommunication of the same tenant in different VxLAN networks or three layers of sub-networks can be implemented, and network isolation between different tenants is kept.

The invention aims at providing a method and device for sending and receiving a message. The method for sending and receiving the message comprises firstly, receiving an internet protocol message to be sent from a source virtual machine, then removing a target media access control address in the internet protocol message in order to generate a virtual extensible LAN message, and finally sending the virtual extensible LAN message to a switch corresponding to a target virtual machine according to a preset address list recorded with the mapping relation between the internet protocol address of the target virtual machine and the internet protocol address of a host machine. The media access control address learning problem is solved, at the same time, the virtual extensible LAN message gettingrid of the redundant media access control address is employed, the message is forwarded completely based on the internet protocol address of the target virtual machine, the bandwidth utilization rateis effectively increased, and good scalability is achieved at the same time.

The invention provides a message transmission method and device and is used for solving the problem that a message cannot pass through an NAT (Network Address Translation) apparatus when communicationis carried out between VTEPs (VXLAN Tunnel End Points) through the NAT apparatus. The method is applied to a VXLAN (Virtual Extensible LAN). The VXLAN comprises a first VTEP, a second VTEP and the NAT apparatus. The first VTEP communicates with the second VTEP through the NAT apparatus. The first VTEP is in a public network. The second VTEP is in a private network. The method comprises the stepsthat the first VTEP carries out VXLAN packaging on a first message to obtain a second message; the first VTEP sends the second message to the second VTEP through the NAT apparatus; and the second VTEPcarries out VXLAN unpackaging on the received second message, thereby obtaining the first message, wherein the first message is a to-be-sent message of the first VTEP, a destination port number of the second message is obtained according to a destination IP (Internet Protocol) address of the second message, and a source port number of the second message is a preset port number.

The invention discloses an establishment method and system for a virtual extensible local area network tunnel and an authentication server and relates to the technical field of communication. According to the method, the system and the related device, in a dial-up Internet access process of a user side device, VxLAN (Virtual Extensible LAN) tunnel configuration information such as address information of a network side tunnel device and a virtual extensible local area network identity is sent to the user side device, so the user side device can establish the VxLAN tunnel according to the configuration information. The realization method is simple and the efficiency is high. The method provided by the invention is applicable to automatic configuration of the VxLAN tunnel under the conditionthat the user side device is a home or enterprise gateway. Devices in a home network or an enterprise network can share the VxLAN tunnel. Moreover, the gateway has destination address identification capability, so guide configuration of traffic can be realized through utilization of a control instruction. The tunnel can be established without a VxLAN network card and the user side device is changed a little, so the establishment complexity of the VxLAN tunnel is further reduced, and the efficiency is improved.

The invention provides a message forwarding method and device. When source MAC addresses of multiple downlink devices are the same, the method includes the following steps: when a first message sent by the downlink devices to an uplink device is received for the first time, acquiring a VLAN (Virtual eXtensible LAN) label of the first message, and creating a first forwarding entry containing a corresponding relationship between the VLAN label and a first output port; acquiring a destination MAC address of the first message, searching for a second output port corresponding to the destination MACaddress, and forwarding the first message to the uplink device from the second output port; and when a second message sent by the uplink device to the downlink devices is received, acquiring a VLAN label of the second message, searching for the first forwarding entry, acquiring the first output port corresponding to the VLAN label, and forwarding the second message to the downlink devices from the first output port. Therefore, according to the message forwarding method provided by the invention, the MAC address migration problem caused by MAC address conflict is avoided, and normal forwardingof the messages can be guaranteed.

The embodiment of the invention provides a network node switching method and device. A SDN (Software Defined Network) controller is connected with a control node; the control node is connected with at least two network nodes; between a switch connected with each network node and a switch connected with each computing node, a tunnel established by using a VTEP-IP (Virtual eXtensible LAN Tunnel End Point-Internet Protocol) address corresponding to the network node exists; a first network node sends a first VTEP-IP address corresponding to the first network node to the control node; the control node sends the first VTEP-IP address to the SDN controller; the SDN controller respectively generates a forwarding flow table for the switch connected with each computing node according to the first VTEP-IP address and issues the forwarding flow tables to the corresponding switches; and the forwarding flow tables are used for indicating to send messages to the switch connected with the first network node by a target IP address for the tunnel with the first VTEP-IP address. By applying the network node switching method and device provided by the embodiment of the invention, current-off time in the network node switching process is reduced.

The invention provides a route management method. The method is applied to a first ED (Edge Device) of a first DC (Data Center). The first ED and a second ED belong to an ED group. The method comprises the steps of receiving a fault advertisement message sent by the second ED, wherein the fault advertisement message is used for indicating that a fault occurs in a VXLAN (Virtual Extensible LAN) tunnel from the second ED to a third ED, the third ED is the edge device of a second DC, and the fault advertisement message carries an address of the third ED; for a received IP / MAC (Internet Protocol / Medium Access Control) advertisement route which takes the address of the third ED as a next hop, modifying a next hop address of the IP / MAC advertisement route as a private address of the first ED, and forwarding the modified IP / MAC advertisement route to a VTEP (Virtual Extensible LAN Tunnel End Point) device in the first DC; and enabling the VTEP device in the first DC to generate a forwarding table entry based on the modified IP / MAC advertisement route and forward a message sent to the second DC through the first ED based on the generated forwarding table entry.

The embodiment of the invention provides a method and device of flooding suppression, which are used in VXLAN (Virtual eXtensible LAN). The VXLAN includes VTEPs (VXLAN Tunnel End Point) and VMs (virtual machine). The method includes steps as follows: an ARP (Address Resolution Protocol) request message sent by a VM is received and parsed by a VTEP; according to the parsed ARP request message, gratuitous ARP messages are sent to the VM in the form of unicast; when a response from the VM aiming at the gratuitous ARP messages is received, a first ARP flooding suppression list item is established; and the ARP request message is encapsulated as a VXLAN-encapsulated ARP request message, and sent to the other VTEPs in the VXLAN, wherein the first ARP flooding suppression list item includes the source IP address and the source MAC address corresponding to the ARP request message. Thus the correctness of the established ARP list items is guaranteed. The forwarding of flow by mistake is prevented.

The invention provides a network connection method and system of a far-end virtual machine in desktop cloud, and relates to the field of a computer and a network. The method and the system are used for solving the problem of how to bring network resources back to a server. The method comprises following steps of establishing a corresponding network bridge when the server is started; establishing the corresponding network bridge by the far-end virtual machine when the terminal is started; obtaining the IP (Internet Protocol) address of the terminal and establishing a VXLAN (virtual Extensible LAN) tunnel with the terminal by the server; obtaining the IP address of the server and establishing the VXLAN tunnel with the server by the terminal; obtaining the starting parameters of the virtual machine by the terminal; and configuring the starting parameters on the network bridge established by the terminal. The system comprises the server which is connected with a router by a first switch; the terminal which is connected with the router through a second switch; the router which is also connected with a network firewall; and the VXLAN tunnel connection which is established between the server and the terminal.

The invention discloses a network element management method and system based on a VXLAN (Virtual Extensible LAN) tunnel, and relates to the technical field of network communication. Three layers of VXLAN tunnels are adopted in the invention; furthermore, management IP addresses are distributed to a network management server and a gateway network element in a unified manner; management IP address distribution and bearer network IP address distribution are mutually independent; therefore, an IP bearer network and a transmission network are well isolated; the security problem due to the fact thatstrict routing isolation between the IP bearer network and the transmission network is not done in the traditional scheme is solved; simultaneously, operation and maintenance are simplified; mutuallyindependent gateway network element routing domains between the gateway network element and each non-gateway network element are created according to the management IP addresses; furthermore, management information is transmitted; and thus, the network element management efficiency is increased.

The invention discloses a network quality testing tool based on a virtual extensible LAN; a client end and a server end build vxlan connection; the client end forms data packages according to the RFC 5357 standard; a first NTP server adds a series number for each transmitting data package in each time; a first VTP terminal uses a vxlan protocol to package the data package; a second VTP terminal checks vni fields in the data package, uses vni to distinguish the Lan and parse the data package, and sends the data package to a second NTP server in the Lan according to inner layer IP and MAC addresses; the server end turns and returns source object IP / MAC to the client end in an original path. The testing tool uses RFC5357 as exploitation and measure standards, can test network link conditions without using a fixed port, can simultaneously support physics and virtual link detection, can send data packages one by one without using link bandwidth, is high in data package transmission efficiency, high in measuring precision, uses bidirectional measurement, and a graphical operation interface is coupled.

The invention provides a method for detecting a network link state and network equipment. The method comprises the following steps: a first device sends a first message to the second device through avirtual local area network extension scheme VXLAN tunnel between the first device and the second device, the first message carries a payload and feedback indication information, and the feedback indication information is used for indicating the second device to forward the payload to the first device; and the first device determines a network link state between the first device and the second device according to whether a second message carrying the payload sent by the second device is received. According to the technical scheme, the network link state detection can be realized only by configuring the network link fault detection protocol for the first equipment and forwarding the message by the second device.

The invention provides a fault analysis method and device applied to a VXLAN (Virtual eXtensible LAN). By setting a VXLAN mirroring dedicated tunnel, data messages which are received by VXLAN access equipment and need mirroring can be conveniently and uniformly mirrored to VXLAN core equipment, and the data messages are finally forwarded to traffic monitoring equipment for fault analysis by the VXLAN core equipment, so that the fault in the VXLAN can be simply and effectively checked.

The invention provides address allocation methods and device. The method and the device are applied to a controller in VXLAN (Virtual eXtensible LAN) networking. A method comprises the steps of issuing a processing rule for a current IP address if it is determined that the current IP address of target user equipment is attacked by traffic, thereby enabling traffic of which destination address is the current IP address is discarded and determining a new IP address for the target user equipment; and sending the new IP address to the target user equipment according to a received address obtainingrequest sent by the target user equipment. Through application of the design, business of the target user equipment can be operated normally.

Examples described herein relate to a switch configured to allocate packet processing resources, from a pool of packet processing resources, to multiple applications, wherein the pool of packet processing resources comprise configurable packet processing pipelines of one or more network devices and packet processing resources of one or more servers. In some examples, the configurable packet processing pipelines and the packet processing resources are to perform one or more of: network switch operations, microservice communications, and / or block storage operations. In some examples, the network switch operations comprise one or more of: application of at least one access control list (ACL), packet forwarding, packet routing, and / or Virtual Extensible LAN (VXLAN) or GENEVE termination. In some examples, the microservice communications comprise one or more of: packet routing between microservices and / or load balancing of utilized microservices.

The invention discloses an establishment method and system for a virtual extensible local area network tunnel and an authentication server and relates to the technical field of communication. According to the method, the system and the related device, in a dial-up Internet access process of a user side device, VxLAN (Virtual Extensible LAN) tunnel configuration information such as address information of a network side tunnel device and a virtual extensible local area network identity is sent to the user side device, so the user side device can establish the VxLAN tunnel according to the configuration information. The realization method is simple and the efficiency is high. The method provided by the invention is applicable to automatic configuration of the VxLAN tunnel under the conditionthat the user side device is a home or enterprise gateway. Devices in a home network or an enterprise network can share the VxLAN tunnel. Moreover, the gateway has destination address identification capability, so guide configuration of traffic can be realized through utilization of a control instruction. The tunnel can be established without a VxLAN network card and the user side device is changed a little, so the establishment complexity of the VxLAN tunnel is further reduced, and the efficiency is improved.

The invention provides a fault analysis method and device applied to a VXLAN (Virtual eXtensible LAN). By setting a VXLAN mirroring dedicated tunnel, data messages which are received by VXLAN access equipment and need mirroring can be conveniently and uniformly mirrored to VXLAN core equipment, and the data messages are finally forwarded to traffic monitoring equipment for fault analysis by the VXLAN core equipment, so that the fault in the VXLAN can be simply and effectively checked.

The embodiment of the invention discloses a communication method and device between terminals. The method comprises the steps of receiving a VXLAN (Virtual Extensible LAN) encapsulated first broadcast message from a VXLAN; decapsulating the VXLAN encapsulated first broadcast message into the first broadcast message; broadcasting the first broadcast message to a local terminal; encapsulating the first broadcast message into a VPLS encapsulated first broadcast message according to a VPLS (Virtual Private LAN Services) network associated with a subordinate virtual forwarding instance of the VXLAN; and broadcasting the VPLS encapsulated first broadcast message in the VPLS network. Through application of the technical scheme provided by the embodiment of the method and the device, the occupied link resources are reduced.

The invention discloses a resource scheduling method and system for a heterogeneous network, and relates to the field of software-defined networks. The method includes: the controller receives the MAC address of the physical server and the IP address of the physical gateway switch reported by the physical gateway switch, wherein the physical gateway switch obtains the MAC address of the subordinate physical server; the controller reports the physical server's address to the cloud management platform The MAC address and the IP address of the physical gateway switch; the cloud management platform sends the MAC address of the physical server and the IP address of the physical gateway switch to the subordinate virtual scalable LAN tunnel terminal VTEP, so that the virtual machine VM under the VTEP can pass the MAC address of the physical server. The address and the IP address of the physical gateway switch realize the resource scheduling of the physical server. Therefore, in the heterogeneous network environment, the network units in the cloud resource pool can schedule the resources in the physical resource pool, so as to realize the effective utilization of resources.

The invention relates to a method, device and equipment for providing a cloud host clock synchronization service, a medium and a program product. The method comprises the following steps: issuing an NTP forwarding flow table to an OVS of a computing node through an SDN controller; replacing a source IP address of a first message sent by the cloud host with a virtual extensible local area network tunnel endpoint VTEP address of the computing node according to the NTP forwarding flow table; sending the first message to a gateway of a VTEP address by a route configured by the computing node, and transmitting the first message to an NTP service node through a three-layer route; the NTP service node generates a second message and routes the second message to the computing node; replacing the destination IP address of the second message with the IP address of the virtual machine, and replacing the destination MAC address with the MAC address of the virtual machine; and finally, sending the second message to the cloud host. Therefore, a clock does not need to be built, the synchronization cost is reduced, and the precision and accuracy of clock synchronization time service can be ensured.

The invention provides a fault processing method and apparatus. The fault processing method includes the steps: when detecting that an AC (Attachment Circuit) link between a VTEP (VXLAN Tunnel End Point) and CE (Customer Edge) equipment is unavailable, determining an AC interface corresponding to the AC link and a VXLAN (Virtual eXtensible LAN) corresponding to the AC interface, and determining a corresponding MAC address according to the AC interface and the VXLAN; and sending a link fault message carrying the ID of the VXLAN and the MAC address to gateway equipment so as to enable the gateway equipment to determine the corresponding VXLAN tunnel according to the ID of the VXLAN and the MAC address, and stopping using the link between the gateway equipment corresponding to the VXLAN tunnel and the VTEP.

This disclosure provides a VXLAN message processing device, which is arranged at the network node that terminates the VXLAN message, including: a mapping table creation component, which obtains all VXLAN tunnel IPs and network identifiers VNI in the specified network, and provides each group of VXLAN tunnel IPs and network Identify the VNI and the corresponding VXLAN encapsulation header information to create a mapping entry, and store all the mapping entries as a mapping table in the mapping table storage unit; the parsing unit parses the received message and obtains the header information of the message; the mapping table lookup component , querying the mapping table based on the obtained header information, and obtaining a mapping entry corresponding to the header information; and an encapsulation and decapsulation unit, based on the queried mapping entry, encapsulating or decapsulating the message.

The invention relates to a server management method and device, equipment, a storage medium and a program product, and the method is suitable for a center node, and comprises the steps: obtaining the first network configuration information of switches in at least two subnetworks where bare metal servers in different regions are located, and building a virtual extensible local area network tunnel between each switch; receiving state information of each bare metal server based on the virtual extensible local area network tunnel; and in response to the server management task, sending a server management instruction to a first switch corresponding to the task based on the virtual extensible local area network tunnel, so that the first switch forwards the server management instruction to a corresponding first bare metal server. According to the method and the device, the virtual extensible local area network tunnel connection between the central node and the switch in each subnet is established, the state information of the bare metal server is acquired based on the tunnel, and the server management instruction is sent, so that the bare metal servers in each region can be managed in a unified manner, and the management cost of an enterprise is reduced.