Background technology
Software defined network SDN (Software Defined Network) is a kind of realization method of network virtualization,Its core technology OpenFlow is by the way that network equipment control plane is separated with data surface, it is achieved thereby that the spirit of network trafficsControl living makes network become more intelligent as pipeline.This be one kind under physically or a virtually environment, by application program,Closely interaction (such as offer service, message and alarm), the framework that network is made to be optimised or simplify between the network equipment and drivingMode.The network concentrated in logic by the realization of SDN controllers controls.SDN controllers primarily serve the effect of coordination so that applicationProgram can also provide data with network equipment interactive communication, the network equipment to application program.Controller is answered by supportingTwo-way programming interface externally provides network function and the operation of abstract.
Unlike traditional network, SDN requirement centerized fusions, it is desirable that forwarding and control separation, it is desirable that network managementMember can directly operate the forwarding behavior of equipment, be not constrained that with any procotol to control forwarding behavior.Software in SDNCompletely as the organization design where administrator, administrator is allowed indiscriminately ad. as one wishes can to plan appointing in oneself network using softwareMeaning forwarding behavior, so being known as " software defined network ".SDN is not a specific detailed technology, but a frame, oneThe theory of network design.Its core demand is to realize that the automation of network service is allocated by software control network.SDN'sAppearance revolutionizes mode of the traditional network to data flow control.SDN from the device separates the control platform of each equipment,It is put on a unified controller, all devices is managed concentratedly by unified instruction.Controller will be seen that all requiredInformation, and provide API by the application program controlling on upper strata.Thus eliminating the need the processes of a large amount of manual configurations, add netThe flexibility of network increases overview of the administrator to the whole network, improves the efficiency of service deployment.
In field of cloud calculation, SDN is very important component, but most of public cloud and privately owned cloud systemAt this stage there is no network is built using SDN technologies completely, commercial case is few.There are many reason for generating such case, mostMain reasons is that SDN technologies are there is no unified standard, and network environment is extremely complex in cloud environment, there is various inhomogeneitiesThe network equipment of type, therefore the unified SDN controllers of neither one can manage so numerous and diverse network environment, be required for basisActual needs carries out exploitation customization.The SDN schemes of mainstream are divided into two kinds, and a kind of is the SDN schemes based on manufacturer, such as CiscoACI, the AC of Huawei；Another is the SDN schemes based on open source community, such as OpenDaylight and OpenContrail.ThisThe main distinction of two schemes is that the SDN schemes of manufacturer can consider to be compatible with its legacy network devices, therefore it is all to pass through APIOr log in traditional equipment and change its preparation to realize, some privately owned network functions can be supported.And the side of open source communityCase just without so much limitation, promotes mainly the scheme of OpenFlow, the south orientation driving of manufacturer is substantially for the support of manufacturerIt docks, but due to take into account each producer, therefore can only support the function of general character.In the case of non-mixed cloud, useSDN is not so urgent to build the demand of cloud network, but in the case of mixed cloud, the automation layout of network is askedTopic just seems extremely important, which determines the upper limit of mixed cloud.With the gradual maturation of cloud computing, more and more users openBegin to establish the cloud resource of oneself on each cloud storehouse and use every cloud service, this trend is more and more apparent.Present userThe independent log on resource of each cloud provider and independent maintenance to the service that provides are needed, lacks unified secure line and branchThe cloud management platform that multi-tenant network is simultaneously capable of flexible layout is held, applies for inefficiency, safeguards extremely complex.It is in addition, many publicThe network service that You Yun providers provide lacks the support of API, some network functions can not open, such as L2VPN functions can notIt provides, the functions such as virtual machine (vm) migration between different cloud storehouses can not also be realized.Under the overall background for using mixed cloud, theseProblem is required for solving.
The content of the invention
For in the prior art the defects of, the object of the present invention is to provide a kind of mixing cloud management system using SDN andMethod builds mixing cloud management system using SDN, and can solve mixing cloud platform can not unify to carry out network automatically volumeRow, improves the flexibility of Internet resources.
According to an aspect of the present invention, a kind of mixing cloud management system using SDN is provided, which is characterized in that including：
Authentication registration module, it is suitable by calling for various cloud storehouses to be carried out with authentication registration and open corresponding permissionWith drive module, the environment in mixing cloud management system and each cloud storehouse are carried out map bindings；
Drive module is adapted to, for docking each cloud storehouse；
Service release module, for unified offer service；
Configuration management module, for being managed configuration to the resource in different cloud storehouses；It is carried out by DevOps instrumentsShell-command and script push, parameter modification is carried out according to the demand of service release module, and calls adaptation drive module eachIt is disposed and is managed on cloud storehouse；
External service module for providing external service, is called by third party and provides service.
Preferably, the adaptation drive module is fitted including computing resource adapter, storage resource adapter and Internet resourcesOrchestration, wherein Internet resources adapter directly manage other SDN controllers and are set for managing the network equipment or directly management networkIt is standby；For the storehouse of no physical network device, when needing Internet resources in turn up service, void is disposed in a manner of virtual machineIntend the network equipment into cloud storehouse and to be managed；Computing resource adapter mainly manages generation virtual machine or container, can be withThe resources of virtual machine such as VMWARE, KVM are directly managed, the containers such as Docker, LXC can also be managed；Storage resource adapter is mainDirectly management storage control for managing memory source or directly generates storage resource, can dock the storage of management manufacturerResource such as EMC, NetApp resource can also manage Ceph etc. and increase income storage resource.
The present invention also provides a kind of mixed cloud management methods using SDN, which is characterized in that comprises the following steps：
Step 1：User logs in mixed cloud management platform and carries out authentication registration, and selects to need the cloud storehouse docked, fills inRelevant authentication registration information；
Step 2：User carries out certification and the synchronizing information of each cloud storehouse, and the configuration of environment is carried out in cloud platform is mixed,All relevant informations are bound and are unified under the user environment of mixing cloud management；
Step 3：Selection needs the service type disposed；
Step 4：Select relevant service request；
Step 5：The modification that can be defined script file if necessary to carry out personal settings and parameter is carried out to service；
Step 6：Service is disposed, platform is selected according to user and custom parameter is enterprising in the cloud storehouse of selectionRow deployment, is carried in a different manner, needs the service opened in network portion selection, platform can be according to the selection of userDynamic configuration is carried out to related network device, while platform also can distribute storage resource according to the selection of user；
Step 7：The modification for defining script file if necessary to carry out personal settings and parameter being carried out to service；
Step 8：User is managed service by management console or is directly accessed by address of service and port.
Compared with prior art, the present invention has following advantageous effect：
One, it, can be with by using the mixing cloud management system of SDN technologies when all cloud storehouse Internet resources are managedIt is managed by unified controller.Both can also be led to by the network equipment of the SDN controller managements manufacturer of manufacturerIt overdrives directly to manage the network equipment.Once there is the new network equipment to need to manage, it is only necessary to simply add the network element and both may be used.
Two, the mixing cloud management system of SDN technologies is used, to automate layout when net source service is providedMode build and provide, and changed by unified controller to carry out the deployment of related network device and parameter.AllDeployment strategy, redundancy scheme, monitoring information etc. are all uniformly managed configuration by controller by mixing cloud management system, carry outThe management of unified life cycle.
Three, when managing the net source service of system by using SDN technologies deployment mixed cloud, each connect can be unified inDuplicate net source service is established on the cloud storehouse entered.It, can for the network service that some public cloud storehouses are not supportedThe virtual network service of oneself is established in the inside of public cloud in a manner of by disposing virtual machine.It can unite in this wayOne opens VPN, QoS service between each storehouse etc., can be flexible after the network service that each business needs is providedIt realizes that virtual machine is migrated in each cloud storehouse, neatly each cloud storehouse Internet resources pond big as one is come into enforcementWith.Analysis can also be monitored in real time for entirely mixing cloud environment, and dynamic resource management is provided.
Specific embodiment
With reference to specific embodiment, the present invention is described in detail.Following embodiment will be helpful to the technology of this fieldPersonnel further understand the present invention, but the invention is not limited in any way.It should be pointed out that the ordinary skill to this fieldFor personnel, without departing from the inventive concept of the premise, various modifications and improvements can be made.These belong to the present inventionProtection domain.
The present invention includes using the mixing cloud management system of SDN：
Authentication registration module, it is suitable by calling for various cloud storehouses to be carried out with authentication registration and open corresponding permissionWith drive module, the environment in mixing cloud management system and each cloud storehouse are carried out map bindings, such as map role, user, powerLimit etc..
Drive module is adapted to, for docking each cloud storehouse.Including computing resource adapter, storage resource adapter andInternet resources adapter.Wherein Internet resources adapter can directly manage other SDN controllers for managing the network equipment,The network equipment can directly be managed.For the storehouse of no physical network device, when needing Internet resources in turn up service, withThe mode of virtual machine is disposed virtual network device into cloud storehouse and is managed.
Service release module, for unified offer service, including virtual machine service, storage service, network service, such as VPNService, QoS service etc..
Configuration management module, for being managed configuration to the resource in different cloud storehouses.By DevOps instruments, such asPuppet etc. carries out the push such as shell-command and script, and parameter modification, such as network are carried out according to the demand of service release moduleEtc. various parameters and mapping relations, and call adaptation drive module disposed and managed on each cloud storehouse.
External service module for providing external service, for example provides service in a manner of RESTAPI etc., can be by third partyIt is called and service is provided.
The adaptation drive module includes computing resource adapter, storage resource adapter and Internet resources adapter,Middle Internet resources adapter directly manages other SDN controllers for managing the network equipment or directly managing the network equipment；ForThere is no the storehouse of physical network device, when needing Internet resources in turn up service, virtual network is disposed in a manner of virtual machineEquipment is into cloud storehouse and is managed；Computing resource adapter mainly manages generation virtual machine or container, can directly manageThe resources of virtual machine such as VMWARE, KVM are managed, the containers such as Docker, LXC can also be managed；Storage resource adapter is mainly directly managedReason storage control for managing memory source or directly generates storage resource, can dock management manufacturer storage resource such asEMC, NetApp resource can also manage Ceph etc. and increase income storage resource.
The present invention comprises the following steps using the mixed cloud management method of SDN：
Step 1：User logs in mixed cloud management platform and carries out authentication registration, and selects to need the cloud storehouse docked, such asThe public clouds storehouse such as the private clounds such as VMware, OpenStack storehouse and Ali, Azure.Relevant authentication registration information is filled in, such asThe information such as user name, password, the authentication service address of each storehouse；
Step 2：User carries out certification and the synchronizing information of each cloud storehouse, and the configuration of environment is carried out in cloud platform is mixed,Such as role, user, the mapping relations of permission bind all relevant informations and are unified in the user of mixing cloud managementUnder environment；
Step 3：Selection needs the service type disposed, and can be PaaS services or IaaS services；
Step 4：Select relevant service request, such as load balancing service, the correlations such as type, the quantity of database serviceThe relevant parameters such as parameter, the relevant parameters such as type, the quantity of middleware services, OS Type, version, dependence；
Step 5：The modification that can be defined script file if necessary to carry out personal settings and parameter is carried out to service；
Step 6：Service is disposed, platform is selected according to user and custom parameter is enterprising in the cloud storehouse of selectionRow deployment, is carried, can be bare machine, virtual machine, container etc. in a different manner.Need what is opened in network portion selectionService, such as VPN services etc., platform can carry out dynamic configuration according to the selection of user to related network device.Platform simultaneouslyStorage resource can be distributed according to the selection of user；
Step 7：The modification that can be defined script file if necessary to carry out personal settings and parameter is carried out to service；
Step 8：User can be managed service by management console or directly be visited by address of service and portIt asks.Implementation example 1：
Fig. 1 is present invention mixing cloud management system structure diagram, and the entire cloud management system that mixes is mainly by two large divisionsComposition.First portion is mixed cloud management server 100, and management server is a cluster, can be with distributed deployment；SecondIt is divided into each cloud stack services device 200, these storehouses have public cloud and private clound, these storehouses can be in local, can also be remoteEnd or high in the clouds.The mixed cloud management server 100 includes authentication registration module 10, adaptation drive module 20, service are openedLogical module 30, configuration management module 40, external service module 50, wherein：The authentication registration module 10, is initially used for user and existsIt is registered in mixing cloud management system, and distributes corresponding permission.In addition it is also used for carrying out authentication registration to various cloud storehousesAnd open corresponding permission, be adapted to drive module 20 by calling, the environment in mixing cloud management system and each cloud storehouse intoRow map bindings, such as mapping role, user, permission.The adaptation drive module 20, for docking each cloud storehouse.Carrying is eachThe different adapter of kind, as shown in Fig. 2, being divided into computing resource adapter, Internet resources adapter and storage resource from major classAdapter.For the open interface of dynamic call difference cloud stack services device 200, it is called in a uniform manner.For netIf network resource directly will dispose virtual net on different cloud stack services devices 200 without open interface in a manner of virtual machineNetwork equipment provides network service.The configuration service release module 30, for unified offer service, including virtual machine service, is depositedStorage service, network service, such as VPN services, QoS service, while adaptation drive module 20 is called in each cloud stack services device 200Upper carry out service release, as the SDN controllers being located on server 200 is called to open network service or directly control private clound heapThe network equipment in stack opens network service.The configuration management module 40, for being managed configuration to different cloud storehouses.It is logicalDevOps instruments, such as Puppet are crossed, carries out the push such as shell-command and script, deployment services simultaneously change parameter, such as networkVarious parameters and mapping relations, and adaptation drive module 20 is called to be disposed and managed on each cloud stack services device 200.InstituteExternal service module 50 is stated, for providing external service.Service is provided in a manner of RESTAPI etc., can be called by third partyAnd provide service.
Implementation example 2：
Fig. 3 is the mixed cloud management method that the present invention applies SDN, can pass through mixing cloud management system as shown in Figure 1It realizes, has including step：
Step S201, user log in mixed cloud management server 100, are registered in cloud management system is mixed, and pointWith corresponding permission.Permission includes the information such as group, role, user name, password, the contact method of user.The content of this partBy external sync information and additions and deletions can be carried out by user change and look into.Step S202, user add the cloud storehouse for needing to dock, fill outWrite the information such as user name, password, address of service.Step S203, user carry out certification and the synchronizing information of each cloud storehouse, mixed cloudManagement server 100 fills in the relevant information of cloud storehouse using user and each cloud stack services device 200 is verified, passes through verificationIt establishes and connects with each cloud storehouse afterwards, synchronous relevant information, such as configuration template, resource quota, monitoring data information, and mixedIt closes and is shown in cloud management system.Step S204, user choose whether deployment PaaS services, if so then execute step S205, otherwisePerform step S209.Step S205 if user selects deployment PaaS services, selects relevant service request by user, such as loadsThe relevant parameters such as balancing service, the relevant parameters such as type, the quantity of database service, type, the quantity of middleware services, operationThe relevant parameters such as system type, version, dependence.Step S206, user choose whether to need to carry out personal settings, ifStep S207 is then performed, otherwise performs step S208.Step S207, in addition to the parameter that step S205 systems are provided, userIt is injected as needed using customized script file or introducing code.It can be using the instrument for having Agent such asPuppet is disposed, and the instrument such as Ansible of no Agent can also be used to be disposed.Step S208, mixing cloud management systemSystem disposes service, changes parameter according to the setting of user and is packaged the final deployment of generation.Step S209, platform according toFamily selects and custom parameter is disposed on the cloud stack services device 200 of selection.Different adapters is called to carry out relatedThe deployment of resource, if Internet resources are by calling SDN controllers.It is carried in a different manner in resource layer, can be nakedMachine, virtual machine, container etc..Step S210, user chooses whether to need to open network service, no if so then execute step S211Then perform step S215.Step S211, user selects the network service opened and fills in corresponding parameter, than if desired for open-mindedL2VPN is serviced, QoS service etc..For VPN services, it is necessary to fill in range of information, such as the IP at both ends, password of shaking hands.StepS212, after user selects turn up service and fills in parameter, whether system meeting automatic discrimination needs installation void on deployment storehouseIntend the network equipment and complete the open-minded of these services, if performing step S213, otherwise perform step S214.Step S213, systemVirtual network device is disposed in cloud storehouse by network SDN controllers, virtual machine will be disposed according to the demand of user to provide netNetwork service.Step S214, the service selected according to user and parameter configuration physics and virtual network device, and open network clothesBusiness.Step S210, user are managed service by mixed cloud management console or are directly visited by address of service and portIt asks.PaaS or the IaaS service that user can be disposed, while the network service needed for oneself can be opened.
Present invention application SDN mixes cloud management system to build, and can solve mixing cloud platform can not unify to carry out networkLayout is automated, improves the flexibility of Internet resources.The present invention builds mixed cloud management platform using SDN, the net providedNetwork resource service is prepared and provided in a manner of SDN, and neatly can be disposed and be changed according to the situation of business, can be with businessVisual angle carry out the management that Internet resources unify life cycle.By the present invention in that dispose mixing cloud management system with SDNInternet resources are decoupled with traditional network equipment, build unified network adaptation layer, can both have been managed various types ofSDN controllers can also manage various types of network equipments.Not only physical network device can be managed, but also can be managed virtualThe network equipment.As the module of mixing cloud system middle pipe reason network, future can very easily dilatation.By the present invention in that withThe Internet resources of SDN deployment mixing cloud management systems, can make multi-tenant Internet resources pond under mixing cloud environment.For usingFor person, no matter how many cloud storehouse under mixed cloud, for Internet resources, as a tenant, these storehouses are unified intoOne big Internet resources pond.In this context, user is easily similar is taken in a LAN using every cloudBusiness.
Specific embodiments of the present invention are described above.It is to be appreciated that the invention is not limited in above-mentionedParticular implementation, those skilled in the art can make various deformations or amendments within the scope of the claims, this not shadowRing the substantive content of the present invention.