CN103200069B - A kind of method and apparatus of Message processing - Google Patents

Abstract

Provided are a message processing method and device, relating to the technical field of communications. A gateway agent is set in the NVO3 network, and the gateway in the NVO3 network is connected to the gateway agent. The gateway agent is used to provide the encapsulation technology of the traditional layer 2 message and the encapsulation technology of NVO3, so as to realize the situation without changing the hardware configuration of the original gateway. Next, realize NVO3 technology.

Description

Method and device for message processing

technical field

The present invention relates to the technical field of communications, in particular to a method and device for message processing.

Background technique

In the data center, server virtualization is more and more widely used. After server virtualization, each physical server can support multiple VMs (Virtual Machines, virtual machines), and each VM independently runs its own operating system, middleware and application. In order to improve the utilization efficiency of data center hardware resources and service reliability, it is necessary to allow free migration of VMs within the data center.

Using server virtualization technology, the same physical data center can provide services such as server hosting for different tenants. A tenant is a user of data center resources, corresponding to a virtual network or a management entity of multiple virtual networks. Different tenants can belong to different companies or different departments. In order to ensure the data security of tenants, traffic between different tenants needs to be isolated through virtual networks. This requires that the internal physical network of the data center can be divided into different virtual networks.

In order to realize the free migration of VMs in the data center and the division of different virtual networks in the physical network of the data center, NVO3 (NetworkVirtualizationoverLayer3, three-layer network virtualization) technology is provided in the existing technology, and the VM is realized through MacInIP tunnel encapsulation. For migration across IP networks, the IP address does not change after migration. For example, Mac (MediaAccessControl, Media Access Control) InIP (InternetProtocol, Internet Protocol) can specifically be MacInUDP (UserDatagramProtocol, User Datagram Protocol), or MacInGRE (GenericRoutingEncapsulation, general routing encapsulation), or MacInTCP (TransmissionControlProtocol, transmission control protocol). NVO3's message encapsulation contains tenant identification, and the tenant ID identification is 24bit (bit), so it can support up to 16M tenants, which can meet the needs of multi-tenant numbers in the cloud computing era. The working principle of this technology includes: the packet sent from the VM is searched by the first-hop network device for the MAC forwarding table. If the destination VM needs to cross the IP network, the first-hop network device needs to perform NVO3 encapsulation. The destination IP address in the encapsulated message header is the destination IP address of the NVO3 remote tunnel. After the message is sent from the first-hop network device, the remaining network devices forward it hop-by-hop according to the outer destination IP address, regardless of the internal load. After arriving at the destination device, it is decapsulated and sent to the destination VM. The first-hop network device may be a traditional switch, a router, or a VS (Virtual Switch, virtual switch) in a server. In addition, the tenant is identified by adding a VNID (VirtualNetworkIdentifier, virtual network identifier) between the layer-3 IP header and the original layer-2 message. Each VNID corresponds to a Layer 2 broadcast domain. Traffic in different Layer 2 broadcast domains is isolated from each other.

The virtual network can be constructed using any of the technologies in VXLAN (VirtualExtensibleLocalAreaNetwork, virtual extended local area network), NVGRE (NetworkVirtualizationusingGenericRoutingEncapsulation, network virtualization using generic routing encapsulation), and STT (StatelessTransportTunneling, stateless transmission tunnel). The NVO3 encapsulation can be any of VXLAN encapsulation, NVGRE encapsulation, and STT encapsulation. The following uses VXLAN as an example for illustration. The VXLAN technology is used to encapsulate the packets sent by the VM and to decapsulate the encapsulated packets. This VXLAN technology is different from the VLAN technology used in the general Layer 2 bridged network, and also different from the VLAN technology used in the Layer 3 network. Ethernet technology. However, the gateway in the prior art only supports the VLAN technology and the Ethernet technology, and cannot realize the VXLAN technology. That is to say, the hardware configuration of the gateway must be updated to realize the NVO3 technology, and the cost is high.

Contents of the invention

Embodiments of the present invention provide a message processing method, gateway agent and NVE, which are used to solve the problem in the prior art that the NVO3 technology can only be realized by updating the hardware configuration of the gateway, thereby reducing costs.

In order to achieve the above object, embodiments of the present invention are according to the following technical solutions:

In the first aspect, this embodiment provides a method for processing data packets, which is applied to a three-layer network virtualization NVO3 network, where a gateway is set in the NVO3 network, and the NVO3 network communicates with external networks through the gateway , the NVO3 network is also provided with a gateway agent, the gateway agent is connected with the gateway, and the method includes:

The gateway agent receives the first message sent by the gateway, wherein the first message is a message encapsulated according to the first encapsulation identifier;

If the first message is a data message, the gateway agent decapsulates the first message to obtain a second message and the first encapsulation identifier;

According to the first encapsulation identifier, the gateway agent obtains the second encapsulation identifier corresponding to the first encapsulation identifier by looking up the mapping relationship between the virtual network identifier VNID and the virtual local area network identifier VLANID; wherein when the first encapsulation identifier is VNID , the second encapsulation identifier is VLANID, and when the first encapsulation identifier is VLANID, the second encapsulation identifier is VNID;

Encapsulating the second packet according to the second encapsulation identifier to form a third packet;

Send the third packet to the gateway.

In combination with the first aspect, in a first possible implementation manner, if the first message is an ARP (Address Resolution Protocol, address resolution protocol) request message, the gateway agent adopts the first message as a datagram The first packet is processed in the same manner as the first packet.

With reference to the first aspect, in a second possible implementation, if the first message is an ARP request message, and the second message is an ARP request message, the method further includes:

The gateway agent obtains the media access control MAC address requested by the second message by searching the ARP table, wherein the gateway agent stores the ARP table;

The gateway agent generates a first ARP response message according to the MAC address;

The gateway agent encapsulates the first ARP response message according to the first encapsulation identifier to form a fourth message;

The gateway agent sends the fourth packet to the gateway according to the MAC forwarding information corresponding to the first encapsulation identifier.

With reference to the second possible implementation of the first aspect, in the third possible implementation, before the gateway agent obtains the MAC address requested by the second message by searching the ARP table, the method further includes: The gateway agent determines whether the gateway is an active gateway;

The operation of the gateway proxy obtaining the MAC address requested by the second packet by searching the ARP table is performed when it is determined that the gateway is the active gateway.

In combination with the first aspect or any one of the first three possible implementations of the first aspect, in a fourth possible implementation, the NVO3 network further includes a server, and the server includes a network virtualization edge NVE, The NVE is used to manage virtual machines in the server, and the method also includes:

The NVE receives the fifth message sent by the virtual machine;

When the fifth message is an ARP request message, obtain the MAC address requested by the fifth message by searching the ARP table stored in the NVE;

If the MAC address requested by the fifth message is found, the NVE carries the found MAC address in the second ARP response message and sends it to the virtual machine;

If the MAC address requested by the fifth message is not found, then according to the VNID corresponding to the virtual machine, the fifth message is encapsulated to obtain a sixth message, and the sixth message is sent to the gateway.

In the second aspect, this embodiment also provides a gateway agent, which is applied in a three-layer network virtualization NVO3 network, the gateway agent is connected to a gateway, and the NVO3 network communicates with an external network through the gateway, and the gateway Agents include:

A receiving unit, configured to receive the first message sent by the gateway, where the first message is a message encapsulated according to the first encapsulation identifier;

A decapsulating unit, configured to decapsulate the first message received by the receiving unit when the first message is a data message, to obtain a second message and the first encapsulation identifier;

A search unit, configured to search for a mapping relationship between VNID and VLANID according to the first encapsulation identifier to obtain a corresponding second encapsulation identifier; wherein when the first encapsulation identifier is VNID, the second encapsulation identifier is VLANID, when When the first encapsulation identifier is VLANID, the second encapsulation identifier is VNID;

An encapsulation unit, configured to encapsulate the second packet according to the second encapsulation identifier found by the search unit to form a third packet;

a sending unit, configured to send the third message to the gateway.

With reference to the second aspect, in a first possible implementation manner, if the first message is an address resolution protocol ARP request message, the decapsulation unit, the search unit, the encapsulation unit, and the sending The unit processes the first packet in the same manner as when the first packet is a data packet.

In conjunction with the second aspect, in a second possible implementation, if the first message is an ARP request message, then the second message is an ARP request message, and the gateway proxy further includes: a storage unit , used to store the ARP table;

The search unit is further configured to search the MAC address requested by the second message from the ARP table stored in the storage unit when the second message is an ARP request message;

The gateway agent also includes a generation unit, configured to generate a first ARP response message according to the MAC address found by the search unit;

The encapsulating unit is further configured to encapsulate the first ARP response message generated by the generating unit according to the first encapsulation identifier to form a fourth message;

The sending unit is further configured to send the fourth message to the gateway according to the MAC forwarding information corresponding to the first encapsulation identifier.

With reference to the second possible implementation of the second aspect, in a third possible implementation, the gateway proxy further includes a judging unit, configured to judge whether the gateway is the active gateway;

The searching unit is specifically configured to search the MAC address requested by the second message from the ARP table stored in the storage unit when the judging unit determines that the gateway is the active gateway.

In a third aspect, this embodiment also provides a kind of NVE, and the NVE is applied in a three-layer network virtualization NVO3 network, a server and a gateway are arranged in the NVO3 network, and the NVO3 network communicates with the external network through the gateway Intercommunication, the gateway is connected to a gateway agent, the NVE is located in the server, and the NVE is used to manage virtual machines in the server, and the NVE includes:

A storage unit for saving the ARP table;

a receiving unit, configured to receive the fifth message sent by the virtual machine;

A search unit, configured to search the MAC address requested by the fifth message from the ARP table stored in the storage unit when the fifth message received by the receiving unit is an ARP request message;

A sending unit, configured to carry the found MAC address in an ARP response message and send it to the virtual machine when the search unit finds the MAC address requested by the fifth message; When the search unit does not find the MAC address requested by the fifth message, it encapsulates the fifth message according to the VNID corresponding to the virtual machine to obtain a sixth message, and sends the sixth message to the gateway.

The embodiment of the present invention provides a message processing method, a gateway agent and a network virtualization edge, the gateway agent is configured in the NOV3 network, and the gateway agent is connected to the gateway. Use the gateway agent to NVO3 encapsulate the message sent by the gateway to the network device inside the NOV3 network, and perform NOV3 decapsulation on the message sent to the gateway by the network device inside the NOV3 network, so that the gateway does not support NVO3 encapsulation and decapsulation technology Under the circumstances, it can still process the messages between the NOV3 network and the external network, so that the NVO3 technology can be realized without changing the hardware configuration of the gateway in the existing network.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only These are some embodiments of the present invention. Those skilled in the art can also obtain other drawings based on these drawings without creative work.

Fig. 1 is the composition block diagram of a kind of NVO3 network in the embodiment of the present invention;

FIG. 2 is a flow chart of a method for message processing in an embodiment of the present invention;

FIG. 3 is a flow chart of another message processing method in an embodiment of the present invention;

FIG. 4 is a flow chart of another message processing method in an embodiment of the present invention;

FIG. 5 is a flow chart of another message processing method in an embodiment of the present invention;

FIG. 6 is a flow chart of another message processing method in an embodiment of the present invention;

FIG. 7 is a flow chart of another message processing method in an embodiment of the present invention;

FIG. 8 is a block diagram of a gateway agent in an embodiment of the present invention;

Fig. 9 is a composition block diagram of another gateway agent in the embodiment of the present invention;

FIG. 10 is a composition block diagram of another gateway proxy in the embodiment of the present invention;

FIG. 11 is a block diagram of an NVE in an embodiment of the present invention;

Fig. 12 is a composition block diagram of another gateway proxy provided by the embodiment of the present invention;

Fig. 13 is a composition block diagram of another NVE provided by an embodiment of the present invention.

detailed description

The following will clearly and completely describe the technical solutions in the embodiments of the present invention with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only some, not all, embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without creative efforts fall within the protection scope of the present invention.

The technical solution provided by the embodiment of the present invention can be applied to the NVO3 network, and the NVO3 network can include a server and a gateway. Optionally, the server may include NVE (network virtualization edge, network virtualization edge). As an edge logic entity implementing network virtualization based on overlay technology, NVE can hide the real address (such as MAC and/or IP address) of tenants, and can encapsulate and decapsulate NVO3 packets. For example, a server can be connected to the gateway through an NVO3 network composed of access switches and core switches. One or more virtual machines run in the server, and the virtual machines in the same server are managed by the NVE in the server. The gateway may not support the NVO3 encapsulation technology, and the NVO3 network communicates with external networks through the gateway. In this NVO3 network, gateways are connected with gateway agents. For example, gateways and gateway agents can be connected directly. Optionally, the gateway and the gateway proxy can be connected through a layer-2 network. The mapping relationship between VNID and VLANID is configured on the gateway proxy to indicate that the gateway proxy can implement Ethernet encapsulation and Ethernet decapsulation, as well as NOV3 encapsulation and NOV3 decapsulation.

The NVO3 encapsulation can be any of VXLAN encapsulation, NVGRE encapsulation, and STT encapsulation. The following uses VXLAN as an example for illustration. For example, as shown in FIG. 1 , the network architecture includes a gateway, and the gateway is connected with a gateway agent. The gateway connects the external network and the two core switches. The NVO3 network includes two core switches and four access switches. Each access switch is connected to a server, namely server 1-server 4, and each server runs two virtual machines, among which virtual machines VM1, VM3, VM5, and VM7 belong to vxlan1, and virtual machines VM2, VM4, and VM6 , VM8 belongs to vxlan2.

Based on the above network as shown in FIG. 1 , an embodiment of the present invention provides a method for packet processing. As shown in FIG. 2 , the method includes the following operations.

201. The gateway agent receives the first packet sent by the gateway.

Wherein, the first packet is a packet encapsulated according to the first encapsulation identifier. Optionally, the first packet may be a data packet, or an ARP request packet, or other request packets. The first encapsulation identifier may be a VNID or a VLANID.

Among them, a VNID corresponds to a Layer 2 broadcast domain, which isolates the traffic of different tenants. Different virtual machines belonging to the same virtual network instance (virtual network instance, VNI) may have the same VNID.

The first message sent by the gateway to the gateway agent may be a message initiated by the gateway, or may be a message sent by other network devices to the gateway agent via the gateway.

202. The gateway agent decapsulates the first packet to obtain the second packet and the first encapsulation identifier.

Wherein, if the first packet is an Ethernet-encapsulated packet, the gateway agent uses Ethernet decapsulation to obtain the second packet and the VLAN ID. If the first message is a message encapsulated by NVO3, the gateway proxy uses VXLAN decapsulation to obtain the second message and the VNID.

The VXLAN encapsulation technology is one of the NVO3 encapsulation technologies, and its encapsulation format is shown in Table 1 below.

Table 1

Wherein, the source IP address of the tunnel: the IP address of the NVE.

The destination IP address of the tunnel: for unicast, it is the IP address of the peer NVE; for multicast, it is the multicast group address. There is a one-to-one correspondence between VXLAN ID and multicast group address.

Outer layer destination MAC address: the next hop MAC address when using the outer layer tunnel for IP forwarding. When the packet is forwarded in the NVO3 network, the outer layer destination MAC address changes hop by hop.

Outer layer source MAC address: The source MAC address when using the outer layer tunnel for IP forwarding. When the packet is forwarded in the NVO3 network, the outer layer source MAC address changes hop by hop.

VXLANID: It is VNID.

203. The gateway agent searches for a mapping relationship between a VNID and a VLANID according to the first encapsulation identifier to obtain a second encapsulation identifier corresponding to the first encapsulation identifier.

Wherein, when the first encapsulation identifier is VNID, the second encapsulation identifier is VLANID, and when the first encapsulation identifier is VLANID, the second encapsulation identifier is VNID.

Wherein, the mapping relationship between the VNID and the VLANID may be pre-configured in the gateway agent to indicate the corresponding relationship between the VXLAN and the VLAN.

204. Encapsulate the second packet according to the second encapsulation identifier to obtain a third packet, and send the third packet to the gateway.

For example, when the gateway receives the NOV3 message sent by the server in the vxlan network, the first message sent by the gateway to the gateway agent is the NOV3 message. The gateway agent performs vxlan decapsulation on sending the first message. Optionally, when the gateway receives a message from a device outside the vxlan network, the gateway sends the first message to a gateway agent, and the gateway agent performs Ethernet decapsulation and vxlan encapsulation on the first message. Therefore, devices outside the vxlan network can communicate with devices inside the vxlan network.

The embodiment of the present invention provides a message processing method. A gateway agent is set in the NOV3 network, and the gateway agent is connected to the gateway. The gateway agent performs NVO3 encapsulation on the message sent by the gateway to the network device in the NOV3 network, and performs NOV3 network decapsulation on the message sent by the network device in the NOV3 network to the gateway, so that the gateway does not support NVO3 encapsulation technology. , can still process messages from or to the NOV3 network, so that the NVO3 technology can be realized without changing the hardware configuration of the gateway in the existing network.

In the technical solution shown in FIG. 2 above, when the gateway receives the ARP request message from the server, the gateway sends the ARP request message to the gateway agent. At this time, the above-mentioned first message is the ARP request message, and the gateway proxy performs NOV3 decapsulation on the ARP request message, and then sends it to the gateway. The gateway generates an ARPreply (response) message, and sends the ARPreply message back to the server via the gateway agent. In this case, the embodiment of the present invention also provides a method for message processing. The gateway agent provides ARPproxy (agent), which can alleviate the pressure on the gateway to answer the ARP request. As shown in Figure 3, the method includes:

301. When the second packet is an ARP request packet, the gateway agent obtains the MAC address requested by the second packet by searching an ARP table stored by the gateway agent.

Wherein, the method for the gateway agent to determine whether the second packet is an ARP request packet may refer to the judgment method of the gateway, for example, judge by the MAC address of the gateway interface corresponding to the second packet.

Wherein, the ARP table may be preset on the gateway agent. Or, the gateway agent learns to obtain the ARP table by listening to the ARP message forwarded by the gateway agent.

302. The gateway agent generates a first ARP response packet according to the obtained MAC address.

303. The gateway agent encapsulates the first ARP response packet according to the first encapsulation identifier to form a fourth packet.

304. The gateway agent sends the fourth packet to the gateway according to the MAC forwarding information corresponding to the first encapsulation identifier.

For example, in this embodiment, the ARP request message that the gateway agent responds to can be a request message sent by a virtual machine in the server to request the MAC address of the gateway, or a request message sent by the gateway in the vxlan The request packet of the MAC address of the network device.

Optionally, when the gateway proxy fails to respond, it is still necessary to combine the technical solutions described in steps 203 to 204, the gateway proxy processes the ARP request message, and then sends it to the gateway, which then performs an ARP response.

In this embodiment, the gateway agent saves the ARP table and realizes the function of responding to the ARP request message sent by the gateway, so that when the gateway agent can perform an ARP response, it replaces the gateway to send the ARP response message, thereby reducing the need for the gateway to answer the ARP request. At the same time, it can also reduce the message interaction between the gateway and the gateway agent, and can save the bandwidth between the gateway and the gateway agent.

For example, in order to ensure the service reliability of the NVO3 network, two gateways can be set up, one is the active gateway and the other is the standby gateway, and the gateway proxy connected to the active gateway provides the function of ARPproxy. The method shown in FIG. 4 includes 401-405.

401. The gateway agent determines whether the gateway is an active gateway. If it is determined that the gateway is the active gateway, then step 402 is performed. If it is determined that the gateway is a standby gateway, no response is made. The operations of 402-405 are the same as those of 301-304 in the embodiment shown in FIG. 3 , and will not be repeated here.

Wherein, the judging whether the gateway is an active gateway can be performed by listening to a VRRP (VirtualRouterRedundancyProtocol, virtual router redundancy protocol) message, and determining which gateway is an active gateway from the working state of the gateway indicated by the VRRP message .

Optionally, the embodiment of the present invention also provides a method for message processing, so as to reduce the burden of the gateway proxy or the gateway to respond to the ARP request message. The method shown in FIG. 5 can be implemented by the NVE in the server, including:

502. The NVE in the server receives the fifth packet sent by the virtual machine.

504. When the fifth packet is an ARP request packet, obtain the MAC address requested by the fifth packet by searching the ARP table stored in the NVE. If the MAC address requested by the fifth packet is found, go to step 506. If the MAC address requested by the fifth packet is not found, go to step 508.

Wherein, the method for establishing the ARP table and the searching method of the NVE are the same as the relevant methods of the gateway agent. I won't repeat them here.

506. The NVE in the server sends the found MAC address in a second ARP response packet to the virtual machine.

508. The NVE in the server encapsulates the fifth packet to obtain a sixth packet according to the VNID corresponding to the virtual machine, and sends the sixth packet to the gateway.

In this embodiment, the NVE of the server can respond to the ARP request message. When the NVE fails to respond, it sends the ARP request message to the gateway. The gateway can send the ARP request to the gateway agent so that the gateway agent can answer it; or it can be processed by the gateway agent and then forwarded to the gateway for the gateway to answer. Number of ARP packets on the network.

In combination with the network architecture shown in FIG. 1 , the embodiment of the present invention takes the forwarding process of the message sent by VM1 to the external network and the forwarding process of the message sent by the device of the external network to VM1 as an example, and specifically describes that the embodiment of the present invention provides technical solutions.

Taking the NOV3 network using VXLAN technology as an example, Figure 6 shows the forwarding process of the message sent by VM1 to the external network, including:

601. VM1 sends an ARP request message to NVE1 of server 1, and the ARP request message carries a VLAN ID;

602. NVE1 determines a corresponding VNID according to the VLAN ID, and performs VXLAN encapsulation on the ARP request message.

Wherein, the VNID of VXLAN1 is used for VXLAN encapsulation, and the outer destination IP address is the multicast IP address corresponding to the VNID, and the source IP address is the IP address of server 1.

603. NVE1 sends the encapsulated ARP request message to the gateway.

604. The gateway searches for a multicast forwarding entry according to the outer destination IP address, and sends the multicast packet to a gateway proxy connected to the gateway.

605. The gateway agent decapsulates the VXLAN to obtain the ARP request message and the VNID.

606. The gateway agent searches for the mapping relationship between the VNID and the VLANID according to the VNID to obtain the corresponding VLANID.

607. The gateway agent performs Ethernet encapsulation on the ARP request packet according to the corresponding VLANID.

608. The gateway proxy sends the Ethernet-encapsulated ARP request message to the gateway.

609. The gateway performs Ethernet decapsulation on the Ethernet-encapsulated ARP request message, and determines that the received message is an ARP request message.

610. The gateway generates an ARP response message and performs Ethernet encapsulation. The destination IP address of the ARP reply message is the IP address of VM1.

611. The gateway sends the encapsulated ARP response packet to the gateway agent.

612. The gateway agent performs Ethernet decapsulation on the received ARP reply message to obtain the ARP reply message and the VLAN ID.

613. The gateway agent searches for a corresponding VNID according to the VLANID.

614. The gateway agent searches the MAC forwarding table according to the VNID and the MAC address of VM1, and performs VXLAN encapsulation on the ARP response message. The destination IP address of the encapsulated ARP response message is the IP address of NVE1.

615. The gateway proxy sends to NVE1 through the three-layer network.

The NVE1 performs VXLAN decapsulation on the encapsulated ARP response message, and then forwards the decapsulated ARP response message to VM1.

After this, unicast traffic from VM1 can be sent to the gateway. Other VMs can also use the same process to send packets.

As shown in Figure 7, the packet forwarding process sent by a device outside the vxlan network to VM1 in the vxlan network includes:

701. The gateway receives a packet sent by a device outside the vxlan network, and the gateway performs Ethernet encapsulation on the packet according to the ARP table to obtain a first packet.

702. The gateway sends the first packet to a gateway proxy.

703. The gateway agent performs Ethernet decapsulation on the received first packet to obtain the second packet and the VLAN ID.

704. The gateway agent searches for a mapping relationship between VLANIDs and VLANIDs according to the VLANID to obtain a corresponding VNID.

705. The gateway agent performs VXLAN encapsulation on the second packet according to the VNID and the MAC forwarding table in the virtual network corresponding to the VNID to obtain a third packet.

706. The gateway agent sends the third packet to the gateway; the gateway forwards the third packet to NVE1 through the three-layer network.

707. NVE1 judges that the destination IP of the third packet is itself, and the UDP port number is a special port number, and performs VXLAN decapsulation on the third packet to obtain a fourth packet.

708. NVE1 searches the MAC forwarding table of the virtual network corresponding to the VNID according to the destination MAC address of the fourth packet, and sends the fourth packet to VM1.

The embodiment of the present invention also provides a gateway agent, which is applied in the NVO3 network, the gateway agent is connected to the gateway, and the NVO3 network communicates with the external network through the gateway. As shown in Figure 8, the gateway agent 800 includes:

The receiving unit 801 is configured to receive the first packet sent by the gateway, where the first packet is a packet encapsulated according to the first encapsulation identifier.

A decapsulation unit 802, configured to decapsulate the first packet received by the receiving unit 801 when the first packet is a data packet, to obtain a second packet and the first packet logo.

A search unit 803, configured to search for a mapping relationship between a VNID and a VLANID according to the first encapsulation identifier to obtain a second encapsulation identifier corresponding to the first encapsulation identifier; wherein when the first encapsulation identifier is a VNID, the second The second encapsulation identifier is VLANID, and when the first encapsulation identifier is VLANID, the second encapsulation identifier is VNID.

The encapsulating unit 804 is configured to encapsulate the second packet according to the second encapsulation identifier found by the searching unit 803 to obtain a third packet.

A sending unit 806, configured to send the third packet to the gateway.

Optionally, if the first message is an address resolution protocol ARP request message, the decapsulation unit 802, the search unit 803, the encapsulation unit 804 and the sending unit 806 use the same method as the first The first packet is processed in the same manner as when the packet is a data packet.

Optionally, if the first packet is an ARP request packet, then the second packet is an ARP request packet. The gateway proxy 900 shown in FIG. 9 further includes: a storage unit 908 : used to save the ARP table. For example, the storage unit 908 may also be used to store the mapping relationship between VNID and VLANID.

The search unit 803 is further configured to search the MAC address requested by the second message from the ARP table stored in the storage unit 908 when the second message is an ARP request message.

The gateway agent further includes: a generating unit 905, configured to generate a first ARP response message according to the MAC address found by the searching unit 803.

The encapsulating unit 804 is further configured to encapsulate the first ARP response packet generated by the generating unit 905 according to the first encapsulation identifier to form a fourth packet.

The sending unit 806 is further configured to send the fourth packet to the gateway according to the MAC forwarding information corresponding to the first encapsulation identifier.

Optionally, the gateway proxy 1000 shown in Figure 10 also includes:

A judging unit 1007, configured to judge whether the gateway is an active gateway.

The searching unit 803 is specifically configured to search the MAC address requested by the ARP request message from the ARP table stored in the storage unit 908 when the judging unit 1007 determines that the gateway is the active gateway.

The embodiment of the present invention also provides an NVE, which is applied in the NVO3 network, and the NVO3 network is provided with a server and a gateway. The NVO3 network communicates with external networks through the gateway. The gateway is connected with a gateway agent. The NVE is located in the server. The NVE is used to manage the virtual machines in the server, as shown in Figure 11, NVE1100 includes:

The storage unit 1104 is configured to save the ARP table.

The receiving unit 1101 is configured to receive the fifth packet sent by the virtual machine.

The searching unit 1102 is configured to, when the fifth packet received by the receiving unit 1101 is an ARP request packet, search the MAC address requested by the fifth packet from the ARP table stored in the storage unit 1104 .

The sending unit 1103 is configured to, when the searching unit 1102 finds the MAC address requested by the fifth message, carry the found MAC address in the ARP response message and send it to the virtual machine; When the search unit 1102 does not find the MAC address requested by the fifth message, it encapsulates the fifth message according to the VNID corresponding to the virtual machine to obtain a sixth message, and sends the The sixth packet is sent to the gateway.

The embodiment of the present invention also provides a server, including the NVE1100 shown in FIG. 11 .

The embodiment of the present invention provides a gateway proxy and NVE. The gateway in the NOV3 network is connected to the gateway agent, and uses the gateway agent to perform NVO3 encapsulation on the message sent by the gateway to the network device in the NOV3 network, and to perform NOV3 decapsulation on the message sent to the gateway by the device in the NOV3 network, so that In the case that the gateway does not support the NVO3 encapsulation technology, it can still process the messages between the NOV3 network and the external network, so that the NVO3 technology can be realized without changing the hardware configuration of the gateway in the existing network.

The embodiment of the present invention provides a gateway proxy, which is applied to a three-layer network virtualization NVO3 network, and a gateway is set in the NVO3 network. The NVO3 network communicates with the external network through the gateway. The gateway is connected with a gateway agent. The gateway agent 1200 shown in FIG. 12 includes an input-output circuit 1201 , a processor 1202 and a memory 1203 . The memory 1203 is configured to store codes, and is configured to store a mapping relationship between a VNID and a VLANID. The processor 1202 is configured to read the code to implement the method flow implemented by the gateway agent in the above method embodiment. The input-output circuit 1201, the processor 1202 and the memory 1203 communicate through a bus.

The input and output circuit 1201 is configured to receive a first packet sent by a gateway, wherein the first packet is a packet encapsulated according to a first encapsulation identifier.

The processor 1202, when the first packet is a data packet, is configured to decapsulate the first packet to obtain a second packet and a first encapsulation identifier; according to the first encapsulation identifier Find the mapping relationship between VNID and VLANID to obtain the second encapsulation identifier corresponding to the first encapsulation identifier; wherein when the first encapsulation identifier is VNID, the second encapsulation identifier is VLANID, and when the first encapsulation identifier is When it is a VLAN ID, the second encapsulation identifier is a VNID; and the second packet is encapsulated according to the second encapsulation identifier to obtain a third packet. The input-output circuit is also used to send the third message to the gateway.

Optionally, the processor 1202 is further configured to, when the second message is an ARP request message, search for the MAC address requested by the second message from the ARP table stored in the memory 1203; Generate a first ARP response packet based on the found MAC address; encapsulate the first ARP response packet according to the first encapsulation identifier to obtain a fourth packet; The MAC forwards information, and sends the fourth packet to the gateway.

The memory 1203 is also used to store the ARP table and MAC forwarding information.

Optionally, the processor 1201 is further configured to determine whether the gateway is an active gateway before looking up the MAC address requested by the ARP request message in the ARP table stored in the memory 1203; if it is determined that the If the gateway is the active gateway, the operation of searching the MAC address requested by the second message from the ARP table stored in the memory 1203 is performed.

An embodiment of the present invention provides an NVE, which is applied to an NVO3 network, and a server and a gateway are set in the NVO3 network. The NVO3 network communicates with external networks through the gateway. The gateway is connected with a gateway agent. The NVE is located in the server, and the NVE is used to manage virtual machines in the server. The NVE 1300 shown in Figure 13 includes a processor 1301, a memory 1302, and a transmitter 1303, the memory 1302 is configured to store codes, and the processor 1301 is used to read the codes to realize the implementation by the NVE in the above method embodiments method flow. For example, the processor 1301, the memory 1302, and the transceiver 1303 communicate through a bus.

The sender and receiver 1303 are configured to receive the fifth message sent by the virtual machine;

The processor 1301 is configured to search the MAC address requested by the fifth message from the ARP table stored in the memory 1302 when the fifth message is an ARP request message; if the fifth message is found Requested MAC address, then control the sending and receiving receiver 1303 to carry the found MAC address in the ARP response message and send it to the virtual machine; if the MAC address requested by the fifth message is not found, then according to The VNID corresponding to the virtual machine encapsulates the fifth packet to obtain a sixth packet.

The transceiver 1303 is further configured to send the sixth packet to the gateway.

The memory 1302 is also used to store the ARP table.

The embodiment of the present invention provides a gateway agent and NVE, and the gateway agent is connected with a gateway. The gateway agent performs NVO3 encapsulation on the message sent by the gateway to the network device in the NOV3 network, and performs NOV3 decapsulation on the message sent to the gateway by the network device in the NOV3 network, so that the gateway does not support the NVO3 encapsulation technology. It can still process the messages between the NOV3 network and the external network, so that the NVO3 technology can be realized without changing the hardware configuration of the gateway in the existing network.

Through the above description of the implementation manners, those skilled in the art can clearly understand that the present invention can be implemented by means of software plus necessary hardware, and of course can also be implemented by hardware. Based on this understanding, all or part of the technical solutions of the present invention can be embodied in the form of software products, which are stored in readable storage media, such as computer floppy disks, hard disks or optical disks, etc., including several instructions It is used to make a computer device (which may be a personal computer, a server, or a network device, etc.) execute the methods described in various embodiments of the present invention.

The above is only a specific embodiment of the present invention, but the scope of protection of the present invention is not limited thereto. Anyone skilled in the art can easily think of changes or substitutions within the technical scope disclosed in the present invention. Should be covered within the protection scope of the present invention. Therefore, the protection scope of the present invention should be determined by the protection scope of the claims.

Claims (10)

1. A method for message processing, applied in a three-layer network virtualization NVO3 network, a gateway is provided in the NVO3 network, and the NVO3 network communicates with an external network through the gateway, it is characterized in that the NVO3 A gateway agent is also provided in the network, and the gateway agent is connected to the gateway, and the method includes: The gateway agent receives the first message sent by the gateway, wherein the first message is a message encapsulated according to the first encapsulation identifier; If the first message is a data message, the gateway agent decapsulates the first message to obtain a second message and the first encapsulation identifier; According to the first encapsulation identifier, the gateway agent obtains the second encapsulation identifier corresponding to the first encapsulation identifier by looking up the mapping relationship between the virtual network identifier VNID and the virtual local area network identifier VLANID; wherein when the first encapsulation identifier is VNID , the second encapsulation identifier is VLANID, and when the first encapsulation identifier is VLANID, the second encapsulation identifier is VNID; Encapsulating the second packet according to the second encapsulation identifier to form a third packet; Send the third packet to the gateway. 2. The method according to claim 1, wherein, if the first message is an Address Resolution Protocol (ARP) request message, the gateway agent adopts the same method as when the first message is a data message. The first packet is processed in a manner. 3. The method according to claim 1, wherein if the first message is an ARP request message, and the second message is an ARP request message, the method further comprises: The gateway agent obtains the media access control MAC address requested by the second message by searching the ARP table, wherein the gateway agent stores the ARP table; The gateway agent generates a first ARP response message according to the MAC address; The gateway agent encapsulates the first ARP response message according to the first encapsulation identifier to form a fourth message; The gateway agent sends the fourth packet to the gateway according to the MAC forwarding information corresponding to the first encapsulation identifier. 4. The method according to claim 3, wherein, before the gateway agent obtains the MAC address requested by the second message by searching the ARP table, further comprising: the gateway agent judging that the gateway Whether it is the active gateway; The operation of the gateway proxy obtaining the MAC address requested by the second packet by searching the ARP table is performed when it is determined that the gateway is the active gateway. 5. The method according to any one of claims 1-4, the NVO3 network also includes a server, the server includes a network virtualization edge NVE, and the NVE is used to manage virtual machines in the server, wherein In that, the method also includes: The NVE receives the fifth message sent by the virtual machine; When the fifth message is an ARP request message, obtain the MAC address requested by the fifth message by searching the ARP table stored in the NVE; If the MAC address requested by the fifth message is found, the NVE carries the found MAC address in the second ARP response message and sends it to the virtual machine; If the MAC address requested by the fifth message is not found, then according to the VNID corresponding to the virtual machine, the fifth message is encapsulated to obtain a sixth message, and the sixth message is sent to the gateway. 6. a gateway agent, applied in three-layer network virtualization NVO3 network, it is characterized in that, described gateway agent is connected with gateway, and described NVO3 network communicates with external network by described gateway, and described gateway agent comprises: A receiving unit, configured to receive the first message sent by the gateway, where the first message is a message encapsulated according to the first encapsulation identifier; A decapsulating unit, configured to decapsulate the first message received by the receiving unit when the first message is a data message, to obtain a second message and the first encapsulation identifier; A search unit, configured to search for a mapping relationship between a virtual network identifier VNID and a VLANID according to the first encapsulation identifier to obtain a corresponding second encapsulation identifier; wherein when the first encapsulation identifier is VNID, the second encapsulation identifier is VLANID, when the first encapsulation identifier is VLANID, the second encapsulation identifier is VNID; An encapsulation unit, configured to encapsulate the second packet according to the second encapsulation identifier found by the search unit to form a third packet; a sending unit, configured to send the third message to the gateway. 7. The gateway agent according to claim 6, wherein if the first message is an address resolution protocol (ARP) request message, the decapsulation unit, the search unit, the encapsulation unit and the The sending unit processes the first packet in the same manner as when the first packet is a data packet. 8. The gateway agent according to claim 6, wherein if the first message is an ARP request message, then the second message is an ARP request message, and the gateway agent also includes: storing unit, used to store the ARP table; The search unit is further configured to search the MAC address requested by the second message from the ARP table stored in the storage unit when the second message is an ARP request message; The gateway agent also includes a generation unit, configured to generate a first ARP response message according to the MAC address found by the search unit; The encapsulating unit is further configured to encapsulate the first ARP response message generated by the generating unit according to the first encapsulation identifier to form a fourth message; The sending unit is further configured to send the fourth message to the gateway according to the MAC forwarding information corresponding to the first encapsulation identifier. 9. The gateway agent according to claim 8, further comprising a judging unit for judging whether the gateway is an active gateway; The searching unit is specifically configured to search the MAC address requested by the second message from the ARP table stored in the storage unit when the judging unit determines that the gateway is the active gateway. 10. A network virtual edge NVE, characterized in that the NVE is applied to a three-layer network virtualization NVO3 network, a server and a gateway are arranged in the NVO3 network, and the NVO3 network communicates with an external network through the gateway , the gateway is connected to a gateway proxy, the NVE is located in the server, and the NVE is used to manage virtual machines in the server, and the NVE includes: The storage unit is used to save the address resolution protocol ARP table; a receiving unit, configured to receive the fifth message sent by the virtual machine; A search unit, configured to search the MAC address requested by the fifth message from the ARP table stored in the storage unit when the fifth message received by the receiving unit is an ARP request message; A sending unit, configured to carry the found MAC address in an ARP response message and send it to the virtual machine when the search unit finds the MAC address requested by the fifth message; When the search unit does not find the MAC address requested by the fifth packet, it encapsulates the fifth packet according to the virtual network identifier VNID corresponding to the virtual machine to obtain a sixth packet, and sends the sixth packet The message is sent to the gateway.