CN108173696B - Data packet processing method, apparatus, computer equipment and storage medium - Google Patents

Abstract

The present application relates to a data packet processing method, apparatus, computer equipment and storage medium. The method includes: sending an uplink data packet for a second user virtual machine through a first user virtual machine; creating a first virtual switch corresponding to the first user virtual machine, and receiving the uplink data packet through a first port of the first virtual switch ; By the first virtual switch, the virtual subnet identification corresponding to the first port is added to the upstream data packet, the updated upstream data packet is obtained, and the updated upstream data packet is sent; The configuration connected with the first virtual switch The second virtual switch receives the updated uplink data packet through the second port of the second virtual switch; the virtual subnet identifier range corresponding to the second port includes the virtual subnet identifier; the first user virtual machine, the first virtual switch and the second virtual switch The virtual switch is deployed on the same host; the updated uplink data packet is forwarded to the physical switch through the physical network card of the host where the first user virtual machine is located. Using this method can simplify the configuration of the virtual subnet corresponding to the user virtual machine.

Description

Data packet processing method, apparatus, computer equipment and storage medium

technical field

The present application relates to the field of computer technology, and in particular, to a data packet processing method, apparatus, computer device and storage medium.

Background technique

With the development of virtual network technology, Software Defined Network (SDN) technology has emerged. SDN is an implementation method of network virtualization, which can realize flexible control of network traffic. Currently, each node in an SDN network system is usually accessed by using a physical node. In order to save resources, a virtual machine is used to replace the physical node.

However, when building an SDN network in a Linux system, the native bridge of Linux only supports forwarding data packets of one virtual subnet, and does not support forwarding data packets of user virtual machines in different virtual subnets. Each user virtual machine is configured with a corresponding virtual subnet port to receive and send corresponding data packets. Obviously, if the number of user virtual machines belonging to different virtual subnets in the SDN network system exceeds a certain number, the method of configuring corresponding virtual subnet ports for each user virtual machine is not only very wasteful of resources, but also very complicated.

SUMMARY OF THE INVENTION

Based on this, it is necessary to provide a data packet processing method, apparatus, computer device and storage medium that can simplify the virtual subnet configuration corresponding to the user virtual machine in response to the above technical problems.

A data packet processing method, the method comprising:

Sending an uplink data packet for the second user virtual machine through the first user virtual machine; the first user virtual machine and the second user virtual machine are respectively deployed on different hosts, and the first user virtual machine and the second user virtual machine are respectively deployed on different hosts. The second user virtual machine corresponds to the same virtual subnet identifier;

Create a first virtual switch corresponding to the first user virtual machine, and receive the uplink data packet through a first port of the first virtual switch; the first port is in one-to-one correspondence with the first user virtual machine;

Through the first virtual switch, the virtual subnet identifier corresponding to the first port is added to the uplink data packet, an updated uplink data packet is obtained, and the updated uplink data packet is sent;

configuring a second virtual switch connected to the first virtual switch, and receiving the updated uplink data packet through a second port of the second virtual switch; the virtual subnet identifier range corresponding to the second port includes the virtual subnet identifier ; the first user virtual machine, the first virtual switch and the second virtual switch are deployed on the same host;

The updated uplink data packet is forwarded to the physical switch through the physical network card of the host where the first user virtual machine is located; the updated uplink data packet is used to instruct the physical switch to, according to the virtual subnet identifier, send The updated uplink data packet is forwarded to the host machine where the second user virtual machine is located.

The above-mentioned data packet processing method, device, computer equipment and storage medium, after the first user virtual machine sends out the upstream data packet for the second user virtual machine, the upstream data packet is received through the configured first port of the first virtual switch. data packet, and through the first virtual switch, add the virtual subnet identifier corresponding to the first port to the uplink data packet to obtain an updated uplink data packet, and then receive the updated uplink data through the second port of the second virtual switch Finally, through the physical network card of the host where the first user virtual machine is located, the updated uplink data packets collected to the second virtual switch are forwarded to the physical switch, because the virtual subnet identification range corresponding to the second port includes the corresponding virtual subnet of the first port. Therefore, there is no need to configure the port corresponding to the virtual subnet for the first user virtual machine, which simplifies the network configuration inside the user virtual machine, especially when the number of user virtual machines reaches a certain number, it can save resources .

A data packet processing device, the device comprising:

an uplink data packet sending module, configured to send an uplink data packet for the second user virtual machine through the first user virtual machine; the first user virtual machine and the second user virtual machine are respectively deployed on different hosts, and The first user virtual machine and the second user virtual machine correspond to the same virtual subnet identifier;

an uplink data packet receiving module, configured to create a first virtual switch corresponding to the first user virtual machine, and receive the uplink data packet through a first port of the first virtual switch; One-to-one correspondence between user virtual machines;

an uplink data packet update module, configured to add the virtual subnet identifier corresponding to the first port to the uplink data packet through the first virtual switch, obtain an updated uplink data packet, and send the updated uplink data packet the upstream data packets;

The updated uplink data packet receiving module is configured to configure a second virtual switch connected to the first virtual switch to receive the updated uplink data packet through a second port of the second virtual switch; The network identifier range includes the virtual subnet identifier; the first user virtual machine, the first virtual switch and the second virtual switch are deployed on the same host;

The updated uplink data packet sending module is used to forward the updated uplink data packet to the physical switch through the physical network card of the host where the first user virtual machine is located; the updated uplink data packet is used to indicate the physical The switch forwards the updated uplink data packet to the host machine where the second user virtual machine is located according to the virtual subnet identifier.

A data packet processing method, the method comprising:

The downlink data packet for the first user virtual machine forwarded by the physical switch is received through the second virtual switch; the downlink data packet is initiated by the second user virtual machine; the first user virtual machine and the second user virtual machine are respectively Deployed on different hosts, and the first user virtual machine and the second user virtual machine correspond to the same virtual subnet identifier;

According to the virtual subnet identifier in the downlink data packet, the downlink data packet is sent to the first virtual switch through the second port of the second virtual switch; the virtual subnet identifier range corresponding to the second port is Including the virtual subnet identifier; the first user virtual machine, the first virtual switch and the second virtual switch are deployed on the same host;

Remove the virtual subnet identifier from the downlink data packet by using the first virtual switch;

The downlink data packet from which the virtual subnet identifier has been removed is sent to the first user virtual machine through the first port of the first virtual switch that is in one-to-one correspondence with the first user virtual machine.

The above-mentioned data packet processing method, device, computer equipment and computer-readable storage medium, receive the downlink data packet for the first user virtual machine forwarded by the physical switch through the second virtual switch, and according to the virtual subnet identifier in the downlink data packet, The downlink data packet is sent to the first virtual switch through the second port of the second virtual switch, and then the virtual subnet identifier is removed from the downlink data packet by the first virtual switch, so that the downlink data from which the virtual subnet identifier has been removed can be removed. The packet is sent to the first user virtual machine through the first port of the first virtual switch that corresponds to the first user virtual machine one-to-one. Since the data packet that finally arrives at the first user virtual machine does not have a virtual subnet The first user virtual machine configures the corresponding virtual subnet to read the corresponding virtual subnet identifier inside the first user virtual machine, which simplifies the network configuration inside the user virtual machine.

A data packet processing device, the device comprising:

A downlink data packet receiving module is configured to receive, through the second virtual switch, a downlink data packet for the first user virtual machine forwarded by the physical switch; the downlink data packet is initiated by the second user virtual machine; the first user virtual machine is connected to The second user virtual machines are respectively deployed on different hosts, and the first user virtual machine and the second user virtual machine correspond to the same virtual subnet identifier.

a first sending module for downlink data packets, configured to send the downlink data packets to the first virtual switch through the second port of the second virtual switch according to the virtual subnet identifier in the downlink data packets; the The virtual subnet identifier range corresponding to the second port includes the virtual subnet identifier; the first user virtual machine, the first virtual switch, and the second virtual switch are deployed on the same host.

A culling module, configured to cull the virtual subnet identifier from the downlink data packet through the first virtual switch.

A second sending module for downlink data packets, configured to send the downlink data packets from which the virtual subnet identifier has been removed to the first port of the first virtual switch that corresponds to the first user virtual machine one-to-one. the first user virtual machine.

A computer device includes a memory, a processor, and a computer program stored in the memory and executable on the processor, and the processor implements the above data packet processing method when the processor executes the computer program.

A computer-readable storage medium on which a computer program is stored, and when the computer program is executed by a processor, implements the above-mentioned data packet processing method.

Description of drawings

1 is an application scenario diagram of a data packet processing method in an embodiment;

2 is a schematic flowchart of a data packet processing method in one embodiment;

3 is a schematic flowchart of a data packet processing method in another embodiment;

4 is a schematic flowchart of a data packet processing method in a specific embodiment;

5 is a schematic diagram of a framework for processing data packets sent by a first user virtual machine to a second user virtual machine in a specific embodiment;

6 is a structural block diagram of a data packet processing apparatus in one embodiment;

7 is a structural block diagram of a data packet processing apparatus in another embodiment;

8 is a structural block diagram of a data packet processing apparatus in one embodiment;

Figure 9 is a diagram of the internal structure of a computer device in one embodiment.

Detailed ways

In order to make the purpose, technical solutions and advantages of the present application more clearly understood, the present application will be described in further detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application, but not to limit the present application.

The data packet processing method provided in this application can be applied to the application environment shown in FIG. 1 . The first user virtual machine 102 establishes a connection with the first virtual switch 104; the first virtual switch 104 establishes a connection with the second virtual switch 106; the first user virtual machine 102, the first virtual switch 104 and the second virtual switch 106 are deployed On the first host machine 100; the first host machine 100 is connected to the physical switch 200 through a network to send data packets to the second host machine 300 where the second user virtual machine 302 is located; the first user virtual machine 102 is connected to the second host machine 300; The user virtual machines 302 belong to the same virtual subnet (Virtual Local Area Network, VLAN). The first host 100 and the second host 300 may be implemented by independent servers or a server cluster composed of multiple servers.

In one embodiment, as shown in FIG. 2, a data packet processing method is provided, and the method is applied to the first host 100 in FIG. 1 as an example for description, including the following steps:

S202, sending an uplink data packet for the second user virtual machine through the first user virtual machine; the first user virtual machine and the second user virtual machine are respectively deployed on different hosts, and the first user virtual machine and the second user virtual machine are The machines correspond to the same virtual subnet ID.

The uplink data packet is a data packet sent to the network by the host where the user virtual machine is located. The first user virtual machine and the second user virtual machine are virtual machines created on different host machines and used to provide computing resources and service resources for users. The first user virtual machine and the second user virtual machine are configured to belong to the same virtual subnet and are deployed on different hosts.

Specifically, after the first user virtual machine is created on the host machine, configure a corresponding virtual network card for the first user virtual machine, and configure a virtual subnet supported by the virtual network card, and send a message to the first user's virtual network card through the virtual network card of the first user. Two uplink data packets of user virtual machines.

S204: Create a first virtual switch corresponding to the first user virtual machine, and receive an uplink data packet through a first port of the first virtual switch; the first port is in one-to-one correspondence with the first user virtual machine.

Wherein, the first virtual switch is used for forwarding the data packets inside the supported virtual subnet. For example, if the virtual subnet supported by the first virtual switch ranges from VLAN 1000 to VLAN 2000, the first virtual switch can forward the received data packets within the virtual subnet range.

Specifically, by creating a virtual switch corresponding to the first user virtual machine, and configuring the first port of the first virtual switch to correspond to the virtual network card of the first user virtual machine, the first user is received through the first port of the first virtual switch. The uplink data packets sent by the virtual machine take over the uplink and downlink data packets of the first user virtual machine through the first port. A virtual switch corresponding to the first user virtual machine may be created by executing the ovs-vsctl add-br ovs-switch command.

In one embodiment, ports corresponding to each user virtual machine are configured for the first virtual switch, and each port corresponds to the virtual network card of each user virtual machine one-to-one, so that the first virtual switch can take over and communicate with each user virtual machine through the first virtual switch. related packets.

S206, through the first virtual switch, add the virtual subnet identifier corresponding to the first port into the uplink data packet, obtain an updated uplink data packet, and send the updated uplink data packet.

The virtual subnet identifier is used to uniquely reflect the information of the virtual subnet corresponding to the data packet. Data packets with the same virtual subnet ID can be transmitted in the same virtual subnet, while data packets with different virtual subnet IDs usually need to pass through a virtual machine switch to achieve transmission.

Specifically, the uplink data packet sent by the first user virtual machine does not carry the subnet identifier. After the first virtual switch receives the uplink data packet sent by the first user virtual machine through the corresponding virtual network card through the first port, because The first port is in one-to-one correspondence with the virtual network card of the first user virtual machine, and the virtual subnet identifier corresponding to the first port can be added to the uplink data packet to obtain an updated uplink data packet, and then the updated uplink data The packet is sent to the second virtual switch.

S208: Configure a second virtual switch connected to the first virtual switch, and receive the updated uplink data packet through the second port of the second virtual switch; the virtual subnet identifier range corresponding to the second port includes the virtual subnet identifier; the first user The virtual machine, the first virtual switch and the second virtual switch are deployed on the same host.

Wherein, the second virtual switch is used for forwarding the data packets transmitted between the first virtual switches. The virtual subnet range supported by the second port of the second virtual switch is a combined range of virtual subnet ranges supported by several first virtual switches.

Specifically, by configuring the virtual subnet range supported by the second port of the second virtual switch, the range includes the virtual subnet corresponding to the added virtual subnet identifier. After the first virtual machine adds the uplink data packet identified by the virtual subnet, the first virtual switch detects that the data packet can be continued to be delivered, and sends it to the second virtual switch, and the second virtual switch can pass the second port through the second virtual switch. An updated upstream packet is received.

It can be understood that the uplink data packets sent by all user virtual machines on the host can be collected to the second virtual switch, and forwarded by the second virtual switch to the physical network card or to other ports corresponding to the second virtual switch.

For example, the virtual subnet range supported by the egress port of the first virtual switch is:

VLAN1000-VLAN2000, then there is a port on the second virtual switch that supports receiving the uplink data packet sent by the first virtual switch from the egress port of the first virtual switch.

S210, forward the updated uplink data packet to the physical switch through the physical network card of the host where the first user virtual machine is located; the updated uplink data packet is used to instruct the physical switch to forward the updated uplink data packet according to the virtual subnet identifier to the host computer where the virtual machine of the second user resides.

Specifically, after the second virtual switch receives the updated uplink data packet to which the virtual subnet identifier is added, and checks that the uplink data packet can continue to be delivered, it sends the updated uplink data packet through the physical network card of the host. After going out, the physical switch forwards the updated uplink data packet to the host where the virtual machine of the second user is located according to the virtual subnet identifier in the updated uplink data packet.

In one embodiment, the physical network card A of the host machine where the first user virtual machine is located can be added to the second virtual switch by executing the brctl addif br1A instruction, so that the second user virtual machine will receive the updated uplink data Packets are sent to the network through the host's physical network card.

In the above data packet processing method, after the first user virtual machine sends an uplink data packet for the second user virtual machine, the uplink data packet is received through the first port of the configured first virtual switch, and the uplink data packet is sent through the first virtual machine. The switch adds the virtual subnet identifier corresponding to the first port to the uplink data packet to obtain an updated uplink data packet, and then receives the updated uplink data packet through the second port of the second virtual switch, and finally passes the first user virtual switch. The physical network card of the host where the host is located, forwards the updated uplink data packets collected to the second virtual switch to the physical switch. Since the virtual subnet ID corresponding to the second port includes the virtual subnet ID, it does not need to be the first virtual switch at all. The user virtual machine configures the port corresponding to the corresponding virtual subnet, which simplifies the internal network configuration of the user virtual machine, and can save resources especially when the number of user virtual machines reaches a certain number.

In one embodiment, the step of sending the updated uplink data packet specifically includes: querying the corresponding first network configuration file through the first virtual switch; querying the corresponding virtual network configuration file of each port of the first virtual switch according to the first network configuration file Subnet identifier; when a port corresponding to the same virtual subnet identifier as the first port is queried, an updated uplink data packet is sent through the queried port.

The first network configuration file is a file that stores the network configuration corresponding to the first virtual switch. The first network configuration file stores virtual subnet identifiers corresponding to each port on the first virtual switch.

Specifically, after receiving the uplink data packet sent by the first user virtual machine through the first port corresponding to the first virtual switch, add the virtual subnet identifier corresponding to the first port to the uplink data packet, and query the corresponding first network configuration file, the virtual subnet ID corresponding to each port is queried, and when the queried port corresponding to the same virtual subnet ID as the first port is passed, the updated uplink data packet is sent through the queried port.

For example, the first virtual switch finds that four ports A, B, C, and D correspond to the virtual subnet identifier corresponding to the first port, wherein the D port may also be a port that supports a virtual subnet range, and the range includes If the virtual subnet is identified, the first virtual switch can forward the updated uplink data packets to the four ports.

In one embodiment, when forwarding the updated uplink data packet, the first virtual switch does not forward the data packet to the first port of the first virtual switch.

In one embodiment, the host computer where the first user virtual machine is located has at least two physical network cards. One of the physical network cards is used to forward the received uplink and downlink data packets, and the other physical network card is used to receive the pushed network configuration file, and the network configuration file is used to modify the network configuration corresponding to the virtual switch and the user virtual machine. The first virtual switch may then receive the corresponding network configuration file through the physical network card for receiving the pushed network configuration file.

In this embodiment, the first virtual switch forwards the updated uplink data packet according to the port corresponding to the virtual subnet identifier corresponding to the first port by querying the virtual subnet identifier corresponding to each port, so as to realize the first user The uplink data packet sent by the virtual machine is delivered to the second virtual switch.

In one embodiment, receiving the updated uplink data packet through the second port of the second virtual switch specifically includes: querying the virtual subnet identification range corresponding to each port of the second virtual switch; The virtual subnet ID range where the virtual subnet ID is located; the updated uplink data packet is received through the second port corresponding to the determined virtual subnet ID range.

Wherein, each port of the second virtual switch corresponds to a virtual subnet identification range. For example, the port tap0 of the second virtual switch is used to receive uplink data packets sent by all user virtual machines in the computing node in the OpenStack environment, and the virtual subnet ID corresponding to the computing node ranges from VLAN100 to VLAN200; the port of the second virtual switch The tap1 is used to receive uplink data packets sent by all virtual controllers in the control node in the OpenStack environment, and the virtual subnet identifier corresponding to the control node ranges from VLAN300 to VLAN500.

Specifically, by configuring the corresponding virtual subnet identification range for each port of the second virtual switch, after the first virtual switch sends the updated uplink data packet, the first virtual subnet of each port of the second virtual switch is queried. network identification range, determine the virtual subnet identification range where the virtual subnet identification added in the updated uplink data packet is located, find the second port corresponding to the determined virtual subnet identification range, and then receive the virtual subnet identification through the second port. data pack.

In an embodiment, after receiving each updated uplink data packet, each port of the second virtual switch forwards the updated uplink data packet out according to the received sequence. For example, the updated data packets received first by the same port are forwarded first; the updated data packets received simultaneously by different ports are forwarded according to the preset priority of each port.

In this embodiment, the second virtual switch can be determined by querying the virtual subnet identifier range corresponding to each port of the second virtual switch, and determining the virtual subnet identifier range where the virtual subnet identifier in the updated uplink data packet is located. The port used to receive the updated uplink data packet, and the port corresponding to a virtual subnet identification range can implement communication between user virtual machines belonging to the same virtual subnet and deployed on different hosts.

As shown in Figure 3, in one embodiment, the data packet processing method further includes the following steps:

S302: Receive, through the second virtual switch, a downlink data packet directed to the virtual machine of the first user and forwarded by the physical switch; the downlink data packet is initiated by the virtual machine of the second user.

The downlink data packet is a data packet sent by the network to the host computer where the first user virtual machine is located. The downlink data packet for the first user virtual machine is a data packet carrying the virtual subnet identifier corresponding to the first user virtual machine. Specifically, by adding a second virtual switch to the physical network card of the host where the first user virtual machine is located, data packets arriving at the physical network card of the host can be received by the second virtual switch and forwarded to the first virtual switch.

S304: Send the downlink data packet to the first virtual switch through the second port of the second virtual switch according to the virtual subnet identifier in the downlink data packet.

The virtual subnet identifier corresponding to the downlink data packet belongs to the virtual subnet identifier range corresponding to the second port of the second virtual switch. Specifically, after receiving the downlink data packet carrying the virtual subnet identifier, the second virtual switch extracts the corresponding virtual subnet identifier from the downlink data packet, and sends the downlink data from the second port according to the extracted virtual subnet identifier. The packet is forwarded to the first virtual switch.

S306, remove the virtual subnet identifier from the downlink data packet through the first virtual switch.

Since the uplink data packet sent from the first user virtual machine does not have a virtual subnet identifier, similarly, the downlink data packet to reach the port of the first user virtual machine does not carry the virtual subnet identifier. Therefore, when the downlink data packet arrives Before the port of the first user virtual machine, the virtual subnet identifier in the data packet needs to be removed. In this way, it is not necessary to configure the identifier of how to identify the virtual subnet for the user virtual machine, and it is not necessary to determine whether to receive or forward downlink data packets in the user virtual machine, which simplifies the network configuration in the user virtual machine.

Specifically, after receiving the downlink data packet, the first virtual switch extracts the corresponding virtual subnet identifier from the downlink data packet, and removes the virtual subnet identifier from the downlink data packet.

S308: Send the downlink data packet from which the virtual subnet identifier has been removed to the first user virtual machine through the first port of the first virtual switch.

Specifically, after identifying the virtual subnet identifier corresponding to the downlink data packet, the first virtual switch queries the virtual subnet identifier corresponding to each port of the first virtual switch, and determines the first virtual subnet identifier that is the same as the virtual subnet identifier corresponding to the downlink data packet. A port for sending the downlink data packet from which the virtual subnet identifier has been removed to the first user virtual machine through the first port.

In this embodiment, after receiving the downlink data packet reported by the second virtual switch, the first virtual switch removes the virtual subnet identifier in the downlink data packet, so that the downlink data packet reaching the first user virtual machine is no longer available. Carry the virtual subnet ID.

In one embodiment, the step of sending the downlink data packet to the first virtual switch through the second port of the second virtual switch according to the virtual subnet identifier in the downlink data packet specifically includes: querying each port of the second virtual switch The corresponding virtual subnet identification range; determine the virtual subnet identification range where the virtual subnet identification in the downlink data packet is located; send the downlink data packet to the first port through the second port corresponding to the determined virtual subnet identification range virtual switch.

Wherein, since each port of the second virtual switch is configured to correspond to a virtual subnet ID range, the downlink data packet needs to be forwarded to the first virtual switch through the port including the virtual subnet ID in the downlink data packet.

Specifically, after the second virtual switch receives the downlink data packet, it queries the virtual subnet ID range corresponding to each port of the second virtual switch, and determines the virtual subnet ID range corresponding to the virtual subnet ID corresponding to the downlink data packet. the second port, and the downlink data packet is sent to the first virtual switch through the second port.

In one embodiment, if only the virtual subnet identifier range corresponding to the port on which the second virtual switch receives the downlink data packet is found to include the virtual subnet identifier of the downlink data packet, the downlink data packet is discarded.

In the above embodiment, after receiving the downlink data packet, the second virtual switch determines the virtual subnet identifier range where the virtual subnet identifier in the downlink data packet is located by querying the virtual subnet identifier range corresponding to the second virtual switch, Then, the downlink data packet can be forwarded to the first virtual switch through the second port corresponding to the virtual subnet identification range.

In one embodiment, the first port is an ACCESS type port; the second port is a TRUNK type port; the first user virtual machine and the second user virtual machine run on computing nodes in OpenStack.

Among them, the ACCESS (access connection) type port corresponds to only one VLAN. For example, the first port of the first virtual switch corresponding to the virtual network card of the first user virtual machine is an ACCESS type port. A TRUNK (convergence connection) type port corresponds to multiple VLANs, that is, corresponds to a virtual subnet identification range, and can receive and send data packets of multiple VLANs. For example, the second port of the second virtual switch is a trunk type port. The first user virtual machine and the second user virtual machine are virtual switches running on compute nodes in OpenStack. Multiple user virtual machines belonging to multiple VLANs may run on the computing node. The first virtual switch and the second virtual switch may be OVS switches in an OpenStack environment.

In one embodiment, there are multiple computing nodes on the host machine where the first user virtual machine is located, each computing node corresponds to a different virtual subnet identification range, and the virtual subnet identification range is the corresponding virtual subnet of each user in the computing node. The merged range of virtual subnet IDs for .

As shown in FIG. 4, a schematic flowchart of a data packet processing method in a specific embodiment. The data packet processing method specifically includes the following steps:

S401, sending an uplink data packet for a second user virtual machine through the first user virtual machine.

S402: Create a first virtual switch corresponding to the first user virtual machine, and receive an uplink data packet through a first port of the first virtual switch.

S403, through the first virtual switch, add the virtual subnet identifier corresponding to the first port into the uplink data packet to obtain an updated uplink data packet.

S404, query the corresponding first network configuration file through the first virtual switch.

S405 , through the first virtual switch, according to the first network configuration file, query the respective virtual subnet identifiers corresponding to each port of the first virtual switch.

S406, when a port corresponding to the same virtual subnet identifier as the first port is queried through the first virtual switch, send an updated uplink data packet through the queried port.

S407: Configure a second virtual switch connected to the first virtual switch, and query the virtual subnet identification range corresponding to each port of the second virtual switch through the second virtual switch.

S408: Determine, through the second virtual switch, a virtual subnet identifier range where the virtual subnet identifier in the updated uplink data packet is located.

S409: Receive an updated uplink data packet through the second port corresponding to the determined virtual subnet identification range.

S410, forward the updated uplink data packet to the physical switch through the physical network card of the host where the first user virtual machine is located.

S411. Receive, through the second virtual switch, a downlink data packet directed to the virtual machine of the first user and forwarded by the physical switch.

S412: Send the downlink data packet to the first virtual switch through the second port of the second virtual switch according to the virtual subnet identifier in the downlink data packet.

S413, remove the virtual subnet identifier from the downlink data packet through the first virtual switch.

S414: Send the downlink data packet from which the virtual subnet identifier has been removed to the first user virtual machine through the first port of the first virtual switch.

In the above data packet processing method, after the first user virtual machine sends an uplink data packet for the second user virtual machine, the uplink data packet is received through the configured first port of the first virtual switch, and the uplink data packet is sent through the first virtual switch. , add the virtual subnet identifier corresponding to the first port to the uplink data packet to obtain an updated uplink data packet, then receive the updated uplink data packet through the second port of the second virtual switch, and finally pass the first user virtual machine The physical network card of the host computer forwards the updated uplink data packets collected to the second virtual switch to the physical switch. Since the virtual subnet ID corresponding to the second port includes the virtual subnet ID, it does not need to be the first user at all. The virtual machine configures the port corresponding to the virtual subnet, which simplifies the internal network configuration of the user virtual machine, especially when the number of user virtual machines reaches a certain number, resources can be saved.

In one embodiment, a data packet processing method is provided, which is illustrated by taking the method applied to the second host 300 in FIG. 1 as an example, including the following steps: receiving, through the second virtual switch, a data packet forwarded by the physical switch for the first host computer. A downlink data packet of a user virtual machine; the downlink data packet is initiated by the second user virtual machine; the first user virtual machine and the second user virtual machine are respectively deployed on different hosts, and the first user virtual machine and the second user virtual machine are machine corresponds to the same virtual subnet identifier; according to the virtual subnet identifier in the downlink data packet, the downlink data packet is sent to the first virtual switch through the second port of the second virtual switch; the virtual subnet identifier corresponding to the second port The scope includes the virtual subnet identifier; the first user virtual machine, the first virtual switch and the second virtual switch are deployed on the same host; the virtual subnet identifier is removed from the downlink data packet through the first virtual switch; The first port corresponding to the first user virtual machine one-to-one sends the downlink data packet whose virtual subnet identifier has been removed to the first user virtual machine.

In this embodiment, the data packet processing method receives, through the second virtual switch, a downlink data packet for the first user virtual machine forwarded by the physical switch, and according to the virtual subnet identifier in the downlink data packet, through the second virtual switch The second port sends the downlink data packet to the first virtual switch, and then removes the virtual subnet identifier from the downlink data packet through the first virtual switch, so that the downlink data packet from which the virtual subnet identifier has been removed can pass through the first virtual switch The first port corresponding to the first user virtual machine one-to-one is sent to the first user virtual machine. Since the data packet that finally arrives at the first user virtual machine does not have a virtual subnet identifier, it does not need to be sent to the first user virtual machine. The corresponding virtual subnet is configured to read the corresponding virtual subnet identifier inside the first user virtual machine, which simplifies the network configuration inside the user virtual machine.

As shown in FIG. 5 , it is a schematic diagram of processing a data packet sent by a first user virtual machine and directed to a second user virtual machine in one embodiment. The virtual subnets corresponding to the first user virtual machine 102 and the second user virtual machine 302 are identified as VLAN 1000. Specifically, the first user virtual machine 102 sends the data packet to the first virtual switch 104 through the virtual network card 102a. The virtual subnet identifier corresponding to the port 104a on the virtual switch 104 is configured to be the same as the virtual subnet corresponding to the first user virtual machine 102. Therefore, the first virtual switch 104 receives the data packet through the port 104a; After 104 receives the data packet, it is checked that the data packet is received by port 104a, and the virtual subnet ID VLAN1000 corresponding to port 104a is added to the data packet, and the first virtual switch 104 checks the virtual subnet ID corresponding to port 104b. If the range includes VLAN1000, it is forwarded to the second virtual switch 106 through port 104b; since the virtual subnet ID corresponding to port 106a of the second virtual switch 106 is configured to include the virtual subnet ID range corresponding to 104b, it can be received through 106a. The data packet with the virtual subnet identifier is added, and the physical network card 100a of the first host 100 is added to the second virtual switch 106, so the second virtual switch can forward the data packet to the physical network card corresponding to the first host 100. 100a. It can be understood that the first virtual switch 104 and the second virtual switch 106 can implement aggregation and forwarding of data streams identified by different virtual subnets.

It can also be seen from the figure that the first host 100 can be configured with multiple computing nodes, each of which corresponds to a different virtual subnet identification range, and finally converges to the second virtual machine of the first host 100 switch 106.

The data packet is forwarded to the physical switch 200 through the physical network card 100a of the first host 100, and then forwarded by the physical switch to the second host 300 through the network, and the second virtual switch 306 corresponding to the second host 300 receives the After the data packet identified by the virtual subnet, search for the port 306a corresponding to the virtual subnet identification range containing the virtual subnet identifier, and forward the data packet from the port 306a to the first virtual switch 304 corresponding to the second host 300, and the A virtual switch 304 identifies the virtual subnet identifier VLAN 1000 carried in the data packet and removes the virtual subnet identifier from the data packet. Since the port 304a corresponding to the first virtual switch 304 is configured to correspond to the virtual subnet identifier VLAN 1000, it is possible to The data packet with the virtual subnet identifier removed is sent to the user virtual machine 302 through the port, and the entire processing process of the data packet is completed.

It should be understood that although the steps in the flowcharts of FIGS. 2-4 are shown in sequence according to the arrows, these steps are not necessarily executed in the sequence shown by the arrows. Unless explicitly stated herein, the execution of these steps is not strictly limited to the order, and these steps may be performed in other orders. Moreover, at least a part of the steps in FIGS. 2-4 may include multiple sub-steps or multiple stages. These sub-steps or stages are not necessarily executed at the same time, but may be executed at different times. These sub-steps or stages are not necessarily completed at the same time. The order of execution of the steps is not necessarily sequential, but may be performed alternately or alternately with other steps or at least part of sub-steps or stages of other steps.

In one embodiment, as shown in FIG. 6, a data packet processing apparatus 600 is provided, including: an uplink data packet sending module 602, an uplink data packet receiving module 604, an uplink data packet updating module 606, an updated uplink data packet The receiving module 608 and the updated uplink data packet sending module 610, wherein:

The uplink data packet sending module 602 is configured to send an uplink data packet for the second user virtual machine through the first user virtual machine; the first user virtual machine and the second user virtual machine are respectively deployed on different hosts, and the first user virtual machine The virtual machine and the virtual machine of the second user correspond to the same virtual subnet identifier;

The uplink data packet receiving module 604 is configured to create a first virtual switch corresponding to the first user virtual machine, and receive the uplink data packet through the first port of the first virtual switch; the first port corresponds to the first user virtual machine one-to-one;

The uplink data packet update module 606 is used to add the virtual subnet identifier corresponding to the first port to the uplink data packet through the first virtual switch, obtain the updated uplink data packet, and send the updated uplink data packet;

The updated uplink data packet receiving module 608 is configured to configure the second virtual switch connected to the first virtual switch to receive the updated uplink data packet through the second port of the second virtual switch; the virtual subnet identification range corresponding to the second port Including a virtual subnet identifier; the first user virtual machine, the first virtual switch and the second virtual switch are deployed on the same host;

The updated upstream data packet sending module 610 is used to forward the updated upstream data packet to the physical switch through the physical network card of the host where the first user virtual machine is located; the updated upstream data packet is used to instruct the physical switch to follow the virtual subnet. identifier, and forward the updated uplink data packet to the host machine where the virtual machine of the second user is located.

In one embodiment, as shown in FIG. 7 , the data packet processing apparatus 600 further includes:

A downlink data packet receiving module 702, configured to receive, through the second virtual switch, a downlink data packet for the first user virtual machine forwarded by the physical switch; the downlink data packet is initiated by the second user virtual machine;

The downlink data packet forwarding module 704 is configured to send the downlink data packet to the first virtual switch through the second port of the second virtual switch according to the virtual subnet identifier in the downlink data packet;

a virtual subnet identifier culling module 706, configured to remove the virtual subnet identifier from the downlink data packet through the first virtual switch;

The updated downlink data packet sending module 708 is configured to send the downlink data packet from which the virtual subnet identifier has been eliminated to the first user virtual machine through the first port of the first virtual switch.

In one embodiment, the downlink data packet forwarding module 704 is further configured to query the virtual subnet identification range corresponding to each port of the second virtual switch; determine the virtual subnet identification range where the virtual subnet identification in the downlink data packet is located; The downlink data packet is sent to the first virtual switch through the second port corresponding to the determined virtual subnet identification range.

In one embodiment, the first port is an ACCESS type port; the second port is a TRUNK type port; the first user virtual machine and the second user virtual machine run on computing nodes in OpenStack.

The above-mentioned data packet processing apparatus 600, after sending the uplink data packet for the second user virtual machine through the first user virtual machine, receives the uplink data packet through the first port of the configured first virtual switch, and sends the uplink data packet through the first virtual machine. The switch adds the virtual subnet identifier corresponding to the first port to the uplink data packet to obtain an updated uplink data packet, and then receives the updated uplink data packet through the second port of the second virtual switch, and finally passes the first user virtual switch. The physical network card of the host where the host is located, forwards the updated uplink data packets collected to the second virtual switch to the physical switch. Since the virtual subnet ID range corresponding to the second port includes the virtual subnet ID, it does not need to be the first virtual switch at all. The user virtual machine configures the port corresponding to the corresponding virtual subnet, which simplifies the internal network configuration of the user virtual machine, and can save resources especially when the number of user virtual machines reaches a certain number.

In one embodiment, as shown in FIG. 8, a data packet processing apparatus 800 is provided, including: a downlink data packet receiving module 802, a downlink data packet first sending module 804, a culling module 806, and a downlink data packet second sending module Module 808, wherein:

The downlink data packet receiving module 802 is configured to receive, through the second virtual switch, a downlink data packet for the first user virtual machine forwarded by the physical switch; the downlink data packet is initiated by the second user virtual machine; the first user virtual machine and the second user virtual machine The virtual machines are respectively deployed on different hosts, and the first user virtual machine and the second user virtual machine correspond to the same virtual subnet identifier.

The downlink data packet first sending module 804 is configured to send the downlink data packet to the first virtual switch through the second port of the second virtual switch according to the virtual subnet identifier in the downlink data packet; the virtual subnet corresponding to the second port The network identifier range includes a virtual subnet identifier; the first user virtual machine, the first virtual switch, and the second virtual switch are deployed on the same host.

The removing module 806 is configured to remove the virtual subnet identifier from the downlink data packet through the first virtual switch.

The second downlink data packet sending module 808 is configured to send the downlink data packet whose virtual subnet identifier has been removed to the first user virtual machine through the first port of the first virtual switch that corresponds to the first user virtual machine one-to-one .

The above-mentioned data packet processing apparatus 800 receives, through the second virtual switch, a downlink data packet for the first user virtual machine forwarded by the physical switch, and passes through the second port of the second virtual switch according to the virtual subnet identifier in the downlink data packet, The downlink data packet is sent to the first virtual switch, and then the virtual subnet identifier is removed from the downlink data packet through the first virtual switch, so that the downlink data packet from which the virtual subnet identifier has been removed can be passed through the first virtual switch and the first virtual switch. The first port corresponding to one user virtual machine is sent to the first user virtual machine. Since the data packet that finally arrives at the first user virtual machine does not have a virtual subnet identifier, there is no need to configure the corresponding virtual subnet for the first user virtual machine. The network can read the corresponding virtual subnet identifier inside the first user virtual machine, which simplifies the network configuration inside the user virtual machine.

For the specific limitation of the data packet processing apparatus, reference may be made to the above limitation on the data packet processing method, which will not be repeated here. Each module in the above-mentioned data packet processing apparatus may be implemented in whole or in part by software, hardware and combinations thereof. The above modules can be embedded in or independent of the processor in the computer device in the form of hardware, or stored in the memory in the computer device in the form of software, so that the processor can call and execute the operations corresponding to the above modules.

In one embodiment, a computer device is provided, and the computer device may be the first host machine 100 or the second host machine 300 , and the internal structure diagram thereof may be as shown in FIG. 9 . The computer device includes a processor, memory, and a network interface connected by a system bus. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium, an internal memory. The nonvolatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the execution of the operating system and computer programs in the non-volatile storage medium. The network interface of the computer device is used to communicate with an external host through a network connection. The computer program, when executed by a processor, implements a data packet processing method.

Those skilled in the art can understand that the structure shown in FIG. 9 is only a block diagram of a part of the structure related to the solution of the present application, and does not constitute a limitation on the computer equipment to which the solution of the present application is applied. Include more or fewer components than shown in the figures, or combine certain components, or have a different arrangement of components.

In one embodiment, a computer device is provided, including a memory, a processor, and a computer program stored in the memory and executable on the processor, and the processor implements the following steps when executing the computer program: using a first user virtual machine Sending an uplink data packet for the second user virtual machine; the first user virtual machine and the second user virtual machine are respectively deployed on different hosts, and the first user virtual machine and the second user virtual machine correspond to the same virtual subnet identifier ; Create a first virtual switch corresponding to the first user virtual machine, and receive the upstream data packet through the first port of the first virtual switch; the first port is in one-to-one correspondence with the first user virtual machine; The virtual subnet identifier corresponding to the first port is added to the upstream data packet, the updated upstream data packet is obtained, and the updated upstream data packet is sent; The second port receives the updated uplink data packet; the virtual subnet identifier range corresponding to the second port includes the virtual subnet identifier; the first user virtual machine, the first virtual switch and the second virtual switch are deployed on the same host; The physical network card of the host where the user virtual machine is located, forwards the updated uplink data packet to the physical switch; the updated uplink data packet is used to instruct the physical switch to forward the updated uplink data packet to the second user according to the virtual subnet identifier The host where the virtual machine is located.

In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored, and when the computer program is executed by a processor, the following steps are implemented: sending, by a first user virtual machine, uplink data for a second user virtual machine package; the first user virtual machine and the second user virtual machine are respectively deployed on different hosts, and the first user virtual machine and the second user virtual machine correspond to the same virtual subnet identifier; create a virtual machine corresponding to the first user virtual machine The first virtual switch receives uplink data packets through the first port of the first virtual switch; the first port is in one-to-one correspondence with the first user virtual machine; through the first virtual switch, the virtual subnet identifier corresponding to the first port is added In the upstream data packet, obtain the updated upstream data packet, and send the updated upstream data packet; configure the second virtual switch connected with the first virtual switch, receive the updated upstream data packet through the second port of the second virtual switch; The virtual subnet identifier range corresponding to the second port includes the virtual subnet identifier; the first user virtual machine, the first virtual switch and the second virtual switch are deployed on the same host; the physical network card of the host where the first user virtual machine is located , forward the updated uplink data packet to the physical switch; the updated uplink data packet is used to instruct the physical switch to forward the updated uplink data packet to the host where the second user virtual machine is located according to the virtual subnet identifier.

The above-mentioned computer equipment and computer-readable storage medium, after the first user virtual machine sends out the uplink data packet for the second user virtual machine, the uplink data packet is received through the first port of the configured first virtual switch, and the uplink data packet is sent through the first user virtual machine. The first virtual switch adds the virtual subnet identifier corresponding to the first port to the uplink data packet to obtain an updated uplink data packet, then receives the updated uplink data packet through the second port of the second virtual switch, and finally passes the first The physical network card of the host where the user virtual machine is located forwards the updated uplink data packets collected to the second virtual switch to the physical switch. Since the virtual subnet ID corresponding to the second port includes the virtual subnet ID, it is not required at all. Configuring the port corresponding to the corresponding virtual subnet for the first user virtual machine simplifies the network configuration inside the user virtual machine, especially when the number of user virtual machines reaches a certain number, resources can be saved.

In one embodiment, a computer device is provided, including a memory, a processor, and a computer program stored in the memory and executable on the processor, and the processor implements the following steps when executing the computer program: receiving through a second virtual switch The downlink data packet for the first user virtual machine forwarded by the physical switch; the downlink data packet is initiated by the second user virtual machine; the first user virtual machine and the second user virtual machine are respectively deployed on different hosts, and the first user virtual machine The virtual machine and the second user virtual machine correspond to the same virtual subnet identifier; according to the virtual subnet identifier in the downlink data packet, the downlink data packet is sent to the first virtual switch through the second port of the second virtual switch; the second port The corresponding virtual subnet identifier range includes a virtual subnet identifier; the first user virtual machine, the first virtual switch and the second virtual switch are deployed on the same host; the virtual subnet identifier is removed from the downlink data packet through the first virtual switch ; Send the downlink data packet whose virtual subnet identifier has been eliminated to the first user virtual machine through the first port of the first virtual switch that is in one-to-one correspondence with the first user virtual machine.

In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored, and when the computer program is executed by a processor, the following steps are implemented: receiving a virtual machine for a first user forwarded by a physical switch through a second virtual switch The downlink data packet is initiated by the second user virtual machine; the first user virtual machine and the second user virtual machine are respectively deployed on different hosts, and the first user virtual machine and the second user virtual machine correspond to the same The virtual subnet identifier; according to the virtual subnet identifier in the downlink data packet, the downlink data packet is sent to the first virtual switch through the second port of the second virtual switch; the virtual subnet identifier range corresponding to the second port includes the virtual subnet network identifier; the first user virtual machine, the first virtual switch and the second virtual switch are deployed on the same host; the virtual subnet identifier is removed from the downlink data packet through the first virtual switch; A first port corresponding to a user virtual machine one-to-one sends the downlink data packet whose virtual subnet identifier has been removed to the first user virtual machine.

The above-mentioned computer equipment and computer-readable storage medium receive the downlink data packet for the first user virtual machine forwarded by the physical switch through the second virtual switch, and according to the virtual subnet identifier in the downlink data packet, through the second virtual switch. The second port sends the downlink data packet to the first virtual switch, and then removes the virtual subnet identifier from the downlink data packet through the first virtual switch, so that the downlink data packet whose virtual subnet identifier has been removed can be passed through the first virtual switch. . The first port corresponding to the first user virtual machine is sent to the first user virtual machine. Since the data packet that finally arrives at the first user virtual machine does not have a virtual subnet identifier, it is not necessary to configure the first user virtual machine. The corresponding virtual subnet is used to read the corresponding virtual subnet identifier inside the first user virtual machine, which simplifies the network configuration inside the user virtual machine.

Those skilled in the art can understand that all or part of the processes in the methods of the above embodiments can be implemented by instructing relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium , when the computer program is executed, it may include the processes of the above-mentioned method embodiments. Wherein, any reference to memory, storage, database or other medium used in the various embodiments provided in this application may include non-volatile and/or volatile memory. Nonvolatile memory may include read only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM), or flash memory. Volatile memory may include random access memory (RAM) or external cache memory. By way of illustration and not limitation, RAM is available in various forms such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous chain Road (Synchlink) DRAM (SLDRAM), memory bus (Rambus) direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM), etc.

The technical features of the above embodiments can be combined arbitrarily. In order to make the description simple, all possible combinations of the technical features in the above embodiments are not described. However, as long as there is no contradiction in the combination of these technical features It is considered to be the range described in this specification.

The above examples only represent several embodiments of the present application, and the descriptions thereof are relatively specific and detailed, but should not be construed as a limitation on the scope of the invention patent. It should be noted that, for those skilled in the art, without departing from the concept of the present application, several modifications and improvements can be made, which all belong to the protection scope of the present application. Therefore, the scope of protection of the patent of the present application shall be subject to the appended claims.

Claims (10)

1. A method of packet processing, the method comprising:

sending an uplink data packet aiming at a second user virtual machine by a first user virtual machine; the first user virtual machine and the second user virtual machine are respectively deployed on different host machines, and the first user virtual machine and the second user virtual machine correspond to the same virtual subnet identifier;

creating a first virtual switch corresponding to the first user virtual machine, and receiving the uplink data packet through a first port of the first virtual switch; the first ports correspond to the first user virtual machines one by one;

adding the virtual subnet identification corresponding to the first port to the uplink data packet through the first virtual switch to obtain an updated uplink data packet, and sending the updated uplink data packet;

configuring a second virtual switch connected with the first virtual switch, and receiving the updated uplink data packet through a second port of the second virtual switch; the virtual subnet identification range corresponding to the second port comprises the virtual subnet identification corresponding to the first port; the first user virtual machine, the first virtual switch and the second virtual switch are deployed on the same host machine;

forwarding the updated uplink data packet to a physical switch through a physical network card of a host machine where the first user virtual machine is located; and the updated uplink data packet is used for instructing the physical switch to forward the updated uplink data packet to the host machine where the second user virtual machine is located according to the virtual subnet identifier.

2. The method of claim 1, wherein the sending the updated upstream packet comprises:

querying, by the first virtual switch, a corresponding first network profile;

inquiring the virtual subnet identifications corresponding to the ports of the first virtual switch according to the first network configuration file;

and when a port corresponding to the same virtual subnet identification as the first port is inquired, sending the updated uplink data packet through the inquired port.

3. The method of claim 1, wherein receiving the updated upstream packet through the second port of the second virtual switch comprises:

inquiring the virtual subnet identification range corresponding to each port of the second virtual switch;

determining the virtual subnet identification range where the virtual subnet identification in the updated uplink data packet is located;

and receiving the updated uplink data packet through the second port corresponding to the determined virtual subnet identification range.

4. The method of claim 1, further comprising:

receiving, by a second virtual switch, a downstream data packet for the first user virtual machine forwarded by the physical switch; the downlink data packet is initiated by the second user virtual machine;

according to the virtual subnet identification in the downlink data packet, sending the downlink data packet to the first virtual switch through the second port of the second virtual switch;

removing the virtual subnet identification from the downlink data packet through the first virtual switch;

and sending the downlink data packet with the virtual subnet identification removed to the first user virtual machine through the first port of the first virtual switch.

5. The method of claim 4, wherein the sending the downstream packet to the first virtual switch through the second port of the second virtual switch according to the virtual subnet identifier in the downstream packet comprises:

inquiring the virtual subnet identification range corresponding to each port of the second virtual switch;

determining the virtual subnet identification range where the virtual subnet identification in the downlink data packet is located;

and sending the downlink data packet to the first virtual switch through the determined second port corresponding to the virtual subnet identification range.

6. The method according to any of claims 1 to 5, wherein the first port is an ACCESS type port; the second port is a TRUNK type port; the first user virtual machine and the second user virtual machine run on a computing node in OpenStack.

7. A method of packet processing, the method comprising:

receiving a downlink data packet which is forwarded by the physical switch and aims at the first user virtual machine through a second virtual switch; the downlink data packet is initiated by a second user virtual machine; the first user virtual machine and the second user virtual machine are respectively deployed on different host machines, and the first user virtual machine and the second user virtual machine correspond to the same virtual subnet identifier;

according to the virtual subnet identification in the downlink data packet, the downlink data packet is sent to the first virtual switch through the second port of the second virtual switch; the virtual subnet identification range corresponding to the second port comprises the virtual subnet identification; the first user virtual machine, the first virtual switch and the second virtual switch are deployed on the same host machine;

removing the virtual subnet identification from the downlink data packet through the first virtual switch;

and sending the downlink data packet with the virtual subnet identifier removed to the first user virtual machine through a first port of the first virtual switch, which is in one-to-one correspondence with the first user virtual machine.

8. A packet processing apparatus, the apparatus comprising:

the uplink data packet sending module is used for sending an uplink data packet aiming at the second user virtual machine through the first user virtual machine; the first user virtual machine and the second user virtual machine are respectively deployed on different host machines, and the first user virtual machine and the second user virtual machine correspond to the same virtual subnet identifier;

an uplink data packet receiving module, configured to create a first virtual switch corresponding to the first user virtual machine, and receive the uplink data packet through a first port of the first virtual switch; the first ports correspond to the first user virtual machines one by one;

an uplink data packet updating module, configured to add, through the first virtual switch, the virtual subnet identifier corresponding to the first port to the uplink data packet to obtain an updated uplink data packet, and send the updated uplink data packet;

an updated uplink data packet receiving module, configured to configure a second virtual switch connected to the first virtual switch, and receive the updated uplink data packet through a second port of the second virtual switch; the virtual subnet identification range corresponding to the second port comprises the virtual subnet identification corresponding to the first port; the first user virtual machine, the first virtual switch and the second virtual switch are deployed on the same host machine;

the updated uplink data packet sending module is used for forwarding the updated uplink data packet to a physical switch through a physical network card of a host machine where the first user virtual machine is located; and the updated uplink data packet is used for instructing the physical switch to forward the updated uplink data packet to the host machine where the second user virtual machine is located according to the virtual subnet identifier.

9. A computer device comprising a memory, a processor and a computer program stored on the memory and executable on the processor, characterized in that the steps of the method of any of claims 1 to 7 are implemented when the computer program is executed by the processor.

10. A computer-readable storage medium, on which a computer program is stored, which, when being executed by a processor, carries out the steps of the method of any one of claims 1 to 7.

Images