CN103152256B - Virtual routing network design method based on cloud computing data center - Google Patents

Abstract

The invention provides a virtual routing network design method based on a cloud computing data center. The method comprises the following steps that a virtual router (vRouter) is arranged in a virtual routing network and used for realizing routing between different network segments and realizing various flexible network strategies including DHCP (Dynamic Host Configuration Protocol) service, gateway service, DNS (Domain Name System) service, address mapping service, flow control service, flow balancing service, VPN (Virtual Private Network) service and access control service, the virtual router (vRouter) is a virtual machine essentially, and a user remotely and flexibly configures and operates the virtual router (vRouter) to realize various flexible network requirements.

Description

A Design Method of Routing Virtual Network Based on Cloud Computing Data Center

technical field

The invention relates to the fields of computer software, computer network and cloud computing, in particular to a method for designing a routing virtual network based on a cloud computing data center.

Background technique

Compared with the traditional data center network, the computing data center network mainly has the following changes. The cloud data center network requires higher bandwidth and lower latency; the cloud data center network server nodes and VM scale have increased significantly, especially the number of VMs; new cloud Management of communication between VMs in the data center network; Layer 2 interconnection between data center sites to carry virtual machine migration, etc.

These changes brought about by the cloud data center network have made the cloud data center network scale very large and the applications it carries become very complex. There have been many problems to be solved in the cloud data center network, such as malicious attacks, viruses and Trojan horses causing losses of hundreds of billions of yuan each year; the scale-free feature allows the entire network to The emergence of p2p and other applications once caused the network congestion of major ISPs, seriously affecting traditional normal access and so on. In order to achieve a certain degree of data isolation and data security, general enterprises will create VLANs in the data center and distribute VMs in different VLANs. When VMs need to actively provide services to the outside, they need the support of a routing network.

Cloud computing data center virtual network includes software and hardware level virtualization. Network virtualization at the hardware level requires the support of specific devices, so a certain amount of hardware cost is added but the performance may be better. Network virtualization at the software level is more flexible, and a routing network that meets various needs can be constructed by combining a private bridge vSwitch and a virtual router. Therefore, the present invention designs a routing virtual network design method based on a cloud computing data center. This method can easily create an external virtual router (vRouter) through software in the cloud data center network. After creation, users can easily configure the external virtual router. The network communication mode of vRouter is based on the external virtual router. vRouter users can easily customize personalized network services and security policies.

Contents of the invention

The purpose of the present invention is to provide a routing virtual network design method based on cloud computing data center.

The purpose of the present invention is achieved in the following manner, specifically comprising the following contents;

Set an external virtual router vRouter in the routing virtual network. The external virtual router vRouter is used to implement routing between different network segments and implement various flexible network policies, including DHCP service, gateway service, DNS service, address mapping service, traffic Control service, traffic balancing service, VPN service and access control service. The essence of the external virtual router vRouter is a virtual machine. Users can configure and operate the external virtual router vRouter remotely and flexibly to meet various flexible network requirements;

The external virtual router vRouter runs on a computing node. The computing node where the external virtual router vRouter is located runs an Agent program. The Agent program is used to receive and feed back user network operation requests. The Agent process communicates with the external virtual The router vRouter communicates, and the private bridge vSwitch is an ordinary virtual switch, but the private bridge vSwitch is not bound to the physical network card and can only be used for internal communication. The communication between the private bridge vSwitch and the external virtual router vRouter is realized through the private network card in the external vRouter. This private network card is specially used for the management of the external virtual router vRouter. The specific implementation of the management of the external virtual router vRouter is through the Tools process in the external virtual router vRouter. Finish;

After the external virtual router vRouter is configured, the corresponding network policy will take effect. The external virtual router vRouter interacts with the private bridge vSwitch of the computing node and the internal network card pNIC through a common vNIC to provide user-customized network services;

The process of creating and configuring a routed virtual network is as follows:

1) How to create a routing virtual network

(1) When users create an external virtual router vRouter virtual network from a template, they first need to randomly select a computing node;

(2) The user creates a private bridge vSwitch on the computing node, a private bridge vSwitch not bound to a physical network card that is physically isolated internally, and configures a private IP. The private bridge vSwitch is used to provide dnsmasq DHCP monitoring service;

(3) The user chooses to create a port group on the default private bridge vSwitch. The name of the port group corresponding to the virtual network name cannot be duplicated, and a VLAN ID is assigned to the port group. The VLAN ID cannot be 0;

(4) The user creates an external virtual router vRouter through the external virtual router vRouter template. The external virtual router vRouter is configured with three network cards, one internal network card, one external network card and one private network card. The private network card is connected to the dnsmasq listening port or private bridge of computing node A vSwitch, the internal network card is used to connect to the internal network segment or virtual network name, that is, the port group, the external network card is used to connect to the external network segment, and the external virtual router vRouter performs routing selection between the internal and external network cards;

(5) The user sets the corresponding relationship between the MAC-IP or private IP of the external virtual router vRouter's private network card in the dnsmasq configuration file of the computing node, and configures the dnsmasq service process to perform DHCP monitoring on the private bridge vSwitch;

(6) The user restarts the dnsmasq service process on the computing node, and starts the external virtual router vRouter to perform subsequent configuration during the startup process of the virtual machine;

(7) Hot add the ISO image of installing Tools for the external virtual router vRouter, and enter the virtual machine to install the Tools configuration tool;

(8) If the external virtual router vRouter starts successfully, the administrator configures the external virtual router through Tools vRouter, the configuration information includes setting the internal network IP and external network IP of the external virtual router vRouter and routing, setting iptables forwarding table, enable inter-network forwarding, enable iptables NAT forwarding table, configure dnsmasq DHCP IP address Range and mask, configure DNS;

(9) After the configuration is complete, the external virtual router vRouter virtual network is created successfully;

2) Configuration process of routing virtual network

(1) The user sends a network operation request to the computing node Agent through an RPC remote call;

(2) The computing node Agent realizes the RPC interaction with Tools through the private bridge vSwitch and the private network card in the external virtual router vRouter;

(3) Tools accept the request and execute the configuration of the external virtual router vRouter, the configuration information includes setting the intranet IP and external network IP and routing, set iptables forwarding table, enable forwarding between network cards, enable iptables NAT forwarding table, Configure the DHCP IP address range and mask of dnsmasq, configure DNS, address mapping service, flow control service, and traffic balancing services, VPN services and access control services;

(4) After the Tools operation is completed, the execution result will be returned in the same way.

The beneficial effects of the present invention are: there is an external virtual router vRouter in the routing virtual network, and the external virtual router vRouter is used to realize routing between different network segments, and realize various flexible network strategies, including DHCP service, gateway service, DNS services, address mapping services, traffic control services, traffic balancing services, VPN services, and access control services. The essence of the external virtual router vRouter is a virtual machine. The present invention provides a method for flexible management and control of the external virtual router vRouter. Users can remotely and flexibly configure and operate the external virtual router vRouter to achieve various flexible network requirements.

1) Users can easily create an external virtual router vRouter through software in the cloud data center network. After creation, users can easily configure the network communication mode of the external virtual router vRouter. Based on the external virtual router vRouter, users can easily customize personalized networks and security strategy.

2) Users quickly create an external virtual router vRouter based on the external virtual router vRouter template. The external virtual router vRouter template is made in advance, and the tools for configuring the external virtual router vRouter will be pre-built when making the external virtual router vRouter template.

3) When the user template creates the external virtual router vRouter, configure a private network card for the external virtual router vRouter. The Tools in the external virtual router vRouter will communicate with the Agent on the physical node running on the external virtual router vRouter through the private network card, so as to realize the user's communication with the external Remote management configuration of the virtual router vRouter.

4) After the user configures and starts the external virtual router vRouter, it can be changed and configured remotely through Tools Configure an external virtual router vRouter, customize various network services and security policies, including setting internal IP and external IP and Routing, set iptables forwarding table, enable forwarding between network cards, enable iptables NAT forwarding table, configure dnsmasq DHCP IP address range and mask, configure DNS, address mapping service, traffic control service, traffic balancing service, VPN service and access control services and so on.

Description of drawings

Figure 1 is a flowchart of the structure and management of the external virtual router vRouter.

detailed description

The method of the present invention is described in detail below with reference to the accompanying drawings.

The present invention designs a routing virtual network design method based on a cloud computing data center, which specifically includes the following contents.

The system structure of the routing virtual network in the present invention is shown in FIG. 1 . The external virtual router vRouter runs on a computing node, and the computing node where the external virtual router vRouter is located runs an Agent program, which is used to receive and feed back user network operation requests. The Agent process communicates with the external virtual router vRouter through the private bridge vSwitch on the computing node. The private bridge vSwitch is an ordinary virtual switch, but the private bridge vSwitch is not bound to the physical network card and can only be used for internal communication. The communication between the private bridge vSwitch and the external virtual router vRouter is realized through the private network card in the external virtual router vRouter. The private network card is specially used for the management of the external virtual router vRouter. The specific implementation of the management of the external virtual router vRouter is through the Tools in the external virtual router vRouter process to complete.

After the external virtual router vRouter is configured, the corresponding network policy will take effect. The external virtual router vRouter interacts with the private bridge vSwitch and pNIC of the computing node through common vNIC to provide user-customized network services.

Example

The creation and configuration process of the routing virtual network is shown in Figure 1, and the detailed process is as follows:

1) How to create a routing virtual network

(1) When users create an external virtual router vRouter virtual network from a template, they first need to randomly select a computing node;

(2) The user creates a private bridge vSwitch (vSwitch with internal physical isolation, not bound to a physical network card) on the computing node, and configures a private IP. The private bridge vSwitch is used to provide dnsmasq DHCP monitoring service;

(3) The user chooses to create a port group on the default private bridge vSwitch. The port group name (corresponding to the virtual network name) cannot be the same name, and a VLAN ID is assigned to the port group. The VLAN ID cannot be 0

(4) The user creates an external virtual router vRouter through the external virtual router vRouter template, and the external virtual router vRouter is configured with three network cards, one internal network card, one external network card and one private network card. The private network card is connected to the dnsmasq listening port (private bridge) of computing node A, the internal network card is used to connect to the internal network segment (virtual network name, that is, the port group), the external network card is used to connect to the external network segment, and the external virtual router vRouter is connected to the internal and external network card routing between

(5) The user sets the MAC-IP (private IP) correspondence of the external virtual router vRouter private network card in the dnsmasq configuration file of the computing node, and configures the dnsmasq service process to perform DHCP monitoring on the private bridge vSwitch;

(6) The user restarts the dnsmasq service process on the computing node, and starts the external virtual router vRouter (subsequent configuration can be performed during the startup of the virtual machine);

(7) Hot add the ISO image of installing Tools for the external virtual router vRouter, and enter the virtual machine to install the Tools configuration tool;

(8) If the external virtual router vRouter starts successfully, the administrator configures the external virtual router through Tools vRouter, the configuration information includes setting the internal network IP and external network IP of the external virtual router vRouter and routing, setting iptables forwarding table, enable inter-network forwarding, enable iptables NAT forwarding table, configure dnsmasq DHCP IP address Ranges and masks, configuring DNS, etc.;

(9) After the configuration is complete, the external virtual router vRouter virtual network is created successfully;

Configuration process of routed virtual network

(1) The user sends a network operation request to the computing node Agent through an RPC remote call;

(2) The computing node Agent realizes the RPC interaction with Tools through the private bridge vSwitch and the private network card in the external virtual router vRouter;

(3) Tools accept the request and execute the configuration of the external virtual router vRouter, the configuration information includes setting the intranet IP and external network IP and routing, set iptables forwarding table, enable forwarding between network cards, enable iptables NAT forwarding table, Configure the DHCP IP address range and mask of dnsmasq, configure DNS, address mapping service, flow control service, and traffic balancing services, VPN services and access control services, etc.;

(4) After the Tools operation is completed, the execution result will be returned in the same way.

Except for the technical features described in the instructions, all are known technologies by those skilled in the art.

Claims (1)

1. the virtual network design method of a kind of route based on cloud computation data center, it is characterised in that specifically comprising following interior Hold；

One external Virtual router vRouter is set in route virtual network, and external Virtual router vRouter is used for real Route between existing different segment, and realize various flexible network strategies, including DHCP service, gateway service, DNS service, Location mapping services, flow control service, flow equalization service, VPN services and access control service, external Virtual router The essence of vRouter is a virtual machine, user by long-range flexible configuration and operate external Virtual router vRouter with Realize various flexible network demands；

External Virtual router vRouter runs on certain calculate node, the calculate node that external Virtual router vRouter is located On run Agent programs, Agent programs are used to receive and the network operation of feedback user is asked, and Agent processes are by calculating Privately owned bridge vSwitch communicates with external Virtual router vRouter on node, and privately owned bridge vSwitch is one common virtual Switch, simply the privately owned bridge vSwitch do not bind with physical network card, be only used for intercommunication, privately owned bridge vSwitch with it is outer The communication of portion virtual router vRouter is realized by the privately owned network interface card in external Virtual router vRouter, the privately owned net Block the management dedicated for external Virtual router vRouter, implementing for external Virtual router vRouter management passes through Tools processes in external Virtual router vRouter are completing；

After the completion of external Virtual router vRouter configurations, corresponding network strategy will come into force, external Virtual router VRouter is interacted to provide use by common outer network interface card vNIC with the privately owned bridge vSwitch and interior network interface card pNIC of calculate node The network service of family customization；

The establishment of route virtual network and configuration process are as follows：

1) it route the establishment mode of virtual network

（1）User from masterplate create external Virtual router vRouter virtual networks when, it is necessary first to randomly choose a calculating Node；

（2）User creates privately owned bridge vSwitch in calculate node, and privately owned bridge vSwitch is isolated with internal physical, Physical Network Card is not bound, and configures private ip, and the privately owned bridge vSwitch is used to provide dnsmasq DHCP monitoring services；

（3）User selects to create port set on the privately owned bridge vSwitch of acquiescence, and the port group name of correspondence virtual network title is not Can bear the same name, and distribute VLAN ID for port set, VLAN ID can not be 0；

（4）User creates external Virtual router vRouter, external Virtual road by external Virtual router vRouter masterplates Three pieces of network interface cards, network interface card pNIC, one piece of outer network interface card vNIC and one piece of privately owned network interface card, privately owned network interface card in one piece are configured by device vRouter The dnsmasq listening ports or privately owned bridge vSwitch, interior network interface card pNIC of connection calculate node A is used to connect the Intranet network segment or void Intend network name, i.e. port set, outer network interface card vNIC is used to connect the outer network segment, and external Virtual router vRouter is in inside and outside network interface card Between be routed；

（5）User arranges the MAC- of the privately owned network interface cards of external Virtual router vRouter in calculate node dnsmasq configuration file The corresponding relation of IP or private ip, and configure dnsmasq service processes DHCP monitorings are carried out to privately owned bridge vSwitch；

（6）User restarts dnsmasq service processes in calculate node, and starts the external Virtual router vRouter virtual machines Subsequent configuration is carried out in start-up course；

（7）The ISO mirror images of Tools are installed for external Virtual router vRouter heat additions, and Tools is installed into virtual machine Configuration tool；

（8）If external Virtual router vRouter starts successfully, keeper configures external Virtual router by Tools VRouter, configuration information includes arranging external Virtual router vRouter Intranets IP and outer net IP and route, arranges Iptables forward tables, open and forwarded between network interface card, open iptables NAT forward tables, configure the DHCP IP address of dnsmasq Scope and mask, configure DNS；

（9）External Virtual router vRouter virtual networks are created successfully after the completion of configuration；

2) it route the configuration flow of virtual network

（1）User sends network operation and asks to calculate node Agent by RPC far calls；

（2）Calculate node Agent is realized by the privately owned network interface card in privately owned bridge vSwitch and external Virtual router vRouter Interact with the RPC of Tools；

（3）Tools receive ask and perform configuration external Virtual router vRouter, configuration information include arrange Intranet IP and Outer net IP and route, arrange iptables forward tables, open and forwarded between network interface card, open iptables NAT forward tables, configuration The DHCP IP address ranges of dnsmasq and mask, configure DNS, address mapping services, flow control service, flow equalization clothes Business, VPN services and access control service；

（4）After the completion of Tools operations and by implementing result backtracking.