32 results about "Virtual Extensible LAN" patented technology

The invention discloses a method for sending an ARP (Address Resolution Protocol) message in a VxLAN (Virtual Extensible LAN), a VTEP (VxLAN Tunnel Endpoint) and a VxLAN controller so that a problem that resource waste is generated because messages are sent in a multicast method is eliminated. The method for sending the ARP message mainly includes that: a source VTEP receives an ARP message of a source virtual machine (VM), wherein the APP message is used for requesting a media access control MAC address of a target VM and the ARP message carries the IP address of the target VM; the IP address of the target VM, carried in the APP message is acquired; a query request is sent to the VxLAN controller so as to acquire the IP address of a target VTEP, wherein the query request carries the IP address of the target VM; the IP address of the target VTEP is acquired from the VxLAN controller; the APP message is packaged according to the IP address of the target VTEP so that a VxLAM message is generated; and the VxLAM message is sent to the target VTEP.

The invention provides a fault processing method and apparatus. The fault processing method and apparatus are characterized in that CE (Customer Edge) equipment in an EVPN (Ethernet Virtual Private Network) is connected with more than 2 VTEPs (VXLAN (Virtual eXtensible LAN) Tunnel End Point) in a distributed aggregation system; the more than 2 VTEPs respectively establish a neighborhood with gateway equipment; and the VTEPs are connected through an IPL (Intra Portal Link). The fault processing method is applied to any one VTEP of the more than two VTEPs, and includes the steps: receiving a data message sent from the gateway equipment; and after determining that the received data message is required to sent to the CE equipment through the IPL, sending a redirection message to the gateway equipment so as to enable the gateway equipment to send the data message which is required to sent to the CE equipment to the other VTEPs except the current VTEP.

One embodiment of the present invention provides a switch that is a member of a fabric switch. The switch includes a keepalive response module that identifies a keepalive response packet that does not correspond to any keepalive packet previously transmitted by the switch. The switch also includes a switch identifier extraction module that extracts a switch identifier from a payload of the keepalive response packet, where the switch identifier corresponds to another member switch in the fabric switch. The switch further includes a forwarding module that constructs a packet that includes the payload and is destined to the other member switch.

The invention provides a method and network card for a physical machine to access to a virtual network. The method comprises: utilizing the network card of a physical machine to package the original data packet sent by the physical machine to a virtual network to form a VXLAN(Virtual Extensible LAN) data packet, and to send the VXLAN data packet to the virtual network; utilizing the network card of the physical machine to disassemble the VXLAN data packet sent to the physical machine by the virtual network to obtain the original data packet in the VXLAN data packet, and to send the obtained original data packet to the physical machine; and building an address mapping table used for displaying the address mapping relation between an IP address and an MAC address in the network card of the physical machine. According to the invention, the network card of the physical machine is equivalent to a virtual tunnel port to realizes functions, and directly replaces the virtual tunnel port, thereby allowing the physical machine to access to a virtual network; in addition, compared with a special-purpose software gateway, the network card has better performances, and is much cheaper than an SDN TOR switch.

The invention discloses a message forwarding method and device. The method comprises the following steps: when a public network channel between first virtual extensible local area network tunnel endpoint VTEP equipment and remote VTEP equipment in a distributed link aggregation group has faults, establishing a first virtual extensible local area network VXLAN (Virtual eXtensible LAN) tunnel according to an acquired address of the remote VTEP equipment, wherein the next hop of the first VXLAN tunnel is the address of second VTEP equipment in the distributed link aggregation group; associating afirst service on the first VTEP equipment with the first VXLAN tunnel; and transmitting a received message of the first service to the remote VTEP equipment through the first VXLAN tunnel. The message forwarding method provided by the invention establishes the new VXLAN tunnel under the condition that the public network tunnel between the first VTEP equipment and the remote VTEP equipment has thefaults, so that normal forwarding of service messages is guaranteed, and the network reliability is provided.

The invention discloses a method and system for implementing sub-network intercommunication, and relates to the field of communications. When a first virtual machine of a tenant sends an IP message to a second virtual machine, the IP message is sent to first VTEP (Virtual Extensible LAN Tunneling End Point) equipment; the first VTEP equipment packages the IP message into a first VxLAN (Virtual Extensible LAN) message and forwards the first VxLAN message to a VxLAN gateway; if a VxLAN MAC table comprises an MAC address table item of the second virtual machine, a VNI (VxLAN Network Identifier) number of the second virtual machine is extracted from the VxLAN MAC table; and if the VNI numbers of the second virtual machine and the first virtual machine belong to the same tenant, the first VxLAN message is repackaged to generate a second VxLAN message and the second VxLAN message is forwarded to second VTEP equipment so as to send the IP message to the second virtual machine. According to the method and the system which are disclosed by the invention, by constructing a tenant VxLAN set table, intercommunication of the same tenant in different VxLAN networks or three layers of sub-networks can be implemented, and network isolation between different tenants is kept.

The invention aims at providing a method and device for sending and receiving a message. The method for sending and receiving the message comprises firstly, receiving an internet protocol message to be sent from a source virtual machine, then removing a target media access control address in the internet protocol message in order to generate a virtual extensible LAN message, and finally sending the virtual extensible LAN message to a switch corresponding to a target virtual machine according to a preset address list recorded with the mapping relation between the internet protocol address of the target virtual machine and the internet protocol address of a host machine. The media access control address learning problem is solved, at the same time, the virtual extensible LAN message gettingrid of the redundant media access control address is employed, the message is forwarded completely based on the internet protocol address of the target virtual machine, the bandwidth utilization rateis effectively increased, and good scalability is achieved at the same time.

The invention provides a message transmission method and device and is used for solving the problem that a message cannot pass through an NAT (Network Address Translation) apparatus when communicationis carried out between VTEPs (VXLAN Tunnel End Points) through the NAT apparatus. The method is applied to a VXLAN (Virtual Extensible LAN). The VXLAN comprises a first VTEP, a second VTEP and the NAT apparatus. The first VTEP communicates with the second VTEP through the NAT apparatus. The first VTEP is in a public network. The second VTEP is in a private network. The method comprises the stepsthat the first VTEP carries out VXLAN packaging on a first message to obtain a second message; the first VTEP sends the second message to the second VTEP through the NAT apparatus; and the second VTEPcarries out VXLAN unpackaging on the received second message, thereby obtaining the first message, wherein the first message is a to-be-sent message of the first VTEP, a destination port number of the second message is obtained according to a destination IP (Internet Protocol) address of the second message, and a source port number of the second message is a preset port number.

The invention provides a message forwarding method and device. When source MAC addresses of multiple downlink devices are the same, the method includes the following steps: when a first message sent by the downlink devices to an uplink device is received for the first time, acquiring a VLAN (Virtual eXtensible LAN) label of the first message, and creating a first forwarding entry containing a corresponding relationship between the VLAN label and a first output port; acquiring a destination MAC address of the first message, searching for a second output port corresponding to the destination MACaddress, and forwarding the first message to the uplink device from the second output port; and when a second message sent by the uplink device to the downlink devices is received, acquiring a VLAN label of the second message, searching for the first forwarding entry, acquiring the first output port corresponding to the VLAN label, and forwarding the second message to the downlink devices from the first output port. Therefore, according to the message forwarding method provided by the invention, the MAC address migration problem caused by MAC address conflict is avoided, and normal forwardingof the messages can be guaranteed.

The embodiment of the invention provides a network node switching method and device. A SDN (Software Defined Network) controller is connected with a control node; the control node is connected with at least two network nodes; between a switch connected with each network node and a switch connected with each computing node, a tunnel established by using a VTEP-IP (Virtual eXtensible LAN Tunnel End Point-Internet Protocol) address corresponding to the network node exists; a first network node sends a first VTEP-IP address corresponding to the first network node to the control node; the control node sends the first VTEP-IP address to the SDN controller; the SDN controller respectively generates a forwarding flow table for the switch connected with each computing node according to the first VTEP-IP address and issues the forwarding flow tables to the corresponding switches; and the forwarding flow tables are used for indicating to send messages to the switch connected with the first network node by a target IP address for the tunnel with the first VTEP-IP address. By applying the network node switching method and device provided by the embodiment of the invention, current-off time in the network node switching process is reduced.

The invention provides a route management method. The method is applied to a first ED (Edge Device) of a first DC (Data Center). The first ED and a second ED belong to an ED group. The method comprises the steps of receiving a fault advertisement message sent by the second ED, wherein the fault advertisement message is used for indicating that a fault occurs in a VXLAN (Virtual Extensible LAN) tunnel from the second ED to a third ED, the third ED is the edge device of a second DC, and the fault advertisement message carries an address of the third ED; for a received IP/MAC (Internet Protocol/Medium Access Control) advertisement route which takes the address of the third ED as a next hop, modifying a next hop address of the IP/MAC advertisement route as a private address of the first ED, and forwarding the modified IP/MAC advertisement route to a VTEP (Virtual Extensible LAN Tunnel End Point) device in the first DC; and enabling the VTEP device in the first DC to generate a forwarding table entry based on the modified IP/MAC advertisement route and forward a message sent to the second DC through the first ED based on the generated forwarding table entry.

The embodiment of the invention provides a method and device of flooding suppression, which are used in VXLAN (Virtual eXtensible LAN). The VXLAN includes VTEPs (VXLAN Tunnel End Point) and VMs (virtual machine). The method includes steps as follows: an ARP (Address Resolution Protocol) request message sent by a VM is received and parsed by a VTEP; according to the parsed ARP request message, gratuitous ARP messages are sent to the VM in the form of unicast; when a response from the VM aiming at the gratuitous ARP messages is received, a first ARP flooding suppression list item is established; and the ARP request message is encapsulated as a VXLAN-encapsulated ARP request message, and sent to the other VTEPs in the VXLAN, wherein the first ARP flooding suppression list item includes the source IP address and the source MAC address corresponding to the ARP request message. Thus the correctness of the established ARP list items is guaranteed. The forwarding of flow by mistake is prevented.

The invention provides a network connection method and system of a far-end virtual machine in desktop cloud, and relates to the field of a computer and a network. The method and the system are used for solving the problem of how to bring network resources back to a server. The method comprises following steps of establishing a corresponding network bridge when the server is started; establishing the corresponding network bridge by the far-end virtual machine when the terminal is started; obtaining the IP (Internet Protocol) address of the terminal and establishing a VXLAN (virtual Extensible LAN) tunnel with the terminal by the server; obtaining the IP address of the server and establishing the VXLAN tunnel with the server by the terminal; obtaining the starting parameters of the virtual machine by the terminal; and configuring the starting parameters on the network bridge established by the terminal. The system comprises the server which is connected with a router by a first switch; the terminal which is connected with the router through a second switch; the router which is also connected with a network firewall; and the VXLAN tunnel connection which is established between the server and the terminal.

The invention discloses a network element management method and system based on a VXLAN (Virtual Extensible LAN) tunnel, and relates to the technical field of network communication. Three layers of VXLAN tunnels are adopted in the invention; furthermore, management IP addresses are distributed to a network management server and a gateway network element in a unified manner; management IP address distribution and bearer network IP address distribution are mutually independent; therefore, an IP bearer network and a transmission network are well isolated; the security problem due to the fact thatstrict routing isolation between the IP bearer network and the transmission network is not done in the traditional scheme is solved; simultaneously, operation and maintenance are simplified; mutuallyindependent gateway network element routing domains between the gateway network element and each non-gateway network element are created according to the management IP addresses; furthermore, management information is transmitted; and thus, the network element management efficiency is increased.

The invention discloses a network quality testing tool based on a virtual extensible LAN; a client end and a server end build vxlan connection; the client end forms data packages according to the RFC 5357 standard; a first NTP server adds a series number for each transmitting data package in each time; a first VTP terminal uses a vxlan protocol to package the data package; a second VTP terminal checks vni fields in the data package, uses vni to distinguish the Lan and parse the data package, and sends the data package to a second NTP server in the Lan according to inner layer IP and MAC addresses; the server end turns and returns source object IP/MAC to the client end in an original path. The testing tool uses RFC5357 as exploitation and measure standards, can test network link conditions without using a fixed port, can simultaneously support physics and virtual link detection, can send data packages one by one without using link bandwidth, is high in data package transmission efficiency, high in measuring precision, uses bidirectional measurement, and a graphical operation interface is coupled.

The invention provides a method for detecting a network link state and network equipment. The method comprises the following steps: a first device sends a first message to the second device through avirtual local area network extension scheme VXLAN tunnel between the first device and the second device, the first message carries a payload and feedback indication information, and the feedback indication information is used for indicating the second device to forward the payload to the first device; and the first device determines a network link state between the first device and the second device according to whether a second message carrying the payload sent by the second device is received. According to the technical scheme, the network link state detection can be realized only by configuring the network link fault detection protocol for the first equipment and forwarding the message by the second device.

The invention provides a fault analysis method and device applied to a VXLAN (Virtual eXtensible LAN). By setting a VXLAN mirroring dedicated tunnel, data messages which are received by VXLAN access equipment and need mirroring can be conveniently and uniformly mirrored to VXLAN core equipment, and the data messages are finally forwarded to traffic monitoring equipment for fault analysis by the VXLAN core equipment, so that the fault in the VXLAN can be simply and effectively checked.

The invention provides address allocation methods and device. The method and the device are applied to a controller in VXLAN (Virtual eXtensible LAN) networking. A method comprises the steps of issuing a processing rule for a current IP address if it is determined that the current IP address of target user equipment is attacked by traffic, thereby enabling traffic of which destination address is the current IP address is discarded and determining a new IP address for the target user equipment; and sending the new IP address to the target user equipment according to a received address obtainingrequest sent by the target user equipment. Through application of the design, business of the target user equipment can be operated normally.

The present invention provides a silent device detection method and device. The method comprises: after an access switching device receives a first detection message sent by an SDN (Software Defined Network) controller, obtaining an exit interface list carried in the first detection message; sending out the first detection message through a corresponding exit interface according to the exit interface list; when a response message returned by the silent device according to the first detection message is received, sending the response message to the SDN controller; and receiving forwarding configuration information determined by the SDN controller according to a VlanID carried by the response message, and configuring an interface for receiving the response message on a device according to the forwarding configuration information. The silent device detection method and device can actively detect a silent device so as to ensure communication between each host in an SDN and a silent devicethrough an established Vxlan (Virtual Extensible Lan) tunnel.