CN111371608A - A method, device and medium for deploying SFC service chain - Google Patents
A method, device and medium for deploying SFC service chainDownload PDFInfo
- Publication number
- CN111371608A CN111371608ACN202010130061.5ACN202010130061ACN111371608ACN 111371608 ACN111371608 ACN 111371608ACN 202010130061 ACN202010130061 ACN 202010130061ACN 111371608 ACN111371608 ACN 111371608A
- Authority
- CN
- China
- Prior art keywords
- service
- virtual machine
- target
- virtual
- chain
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Images
Classifications
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/08—Configuration management of networks or network elements
- H04L41/0803—Configuration setting
- H04L41/0823—Configuration setting characterised by the purposes of a change of settings, e.g. optimising configuration for enhancing reliability
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/08—Configuration management of networks or network elements
- H04L41/0893—Assignment of logical groups to network elements
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Stored Programmes (AREA)
Abstract
Translated fromChinese
Description
Translated fromChinese技术领域technical field
本发明涉及业务处理技术领域，特别是涉及一种部署SFC业务链的方法、装置和计算机可读存储介质。The present invention relates to the technical field of service processing, and in particular, to a method, an apparatus and a computer-readable storage medium for deploying an SFC service chain.
背景技术Background technique
传统业务节点的部署，通常都是基于物理拓扑，通过手工配置多种策略，将上述的服务设备串联到业务流量路径当中。传统网络的服务链在变更、扩容时，都需要改动网络拓扑，重新进行网络设备的配置。这种部署和运维的模式存在诸多问题，网络设备之间耦合性大，导致业务部署不灵活，报文转发效率低，服务设备无法共享。The deployment of traditional service nodes is usually based on the physical topology. By manually configuring various policies, the above-mentioned service devices are connected in series to the service traffic path. When the service chain of the traditional network is changed or expanded, the network topology needs to be changed and the network equipment needs to be reconfigured. There are many problems in this mode of deployment and operation and maintenance. The coupling between network devices is large, resulting in inflexible service deployment, low packet forwarding efficiency, and inability to share service devices.
业务链(Service Function Chain，SFC)是一种给应用层提供有序服务的技术。SFC用来将网络设备上的服务在逻辑层面上联接起来，从而形成一个有序的服务组合。其概念类似于策略路由，即SFC使网络报文流量走特定的路径，而不是通过IP目的地址来查看路由表得到最终目的地。Service Function Chain (SFC) is a technology that provides ordered services to the application layer. SFC is used to logically connect services on network devices to form an ordered service composition. Its concept is similar to policy routing, that is, SFC makes network packet traffic follow a specific path, instead of looking at the routing table through the IP destination address to obtain the final destination.
在传统的网络架构下，SFC技术利用虚拟网络将服务业务更好的融合进来，很好的解决了上述问题。SFC服务链一般具有如下角色：流分类节点和服务节点。其中，流分类节点作为原始数据报文的接入节点，按照定义的流分类规则匹配数据报文，对报文做服务链的Overlay封装，并将其转发到服务链中进行处理。服务节点做为资源被分配使用，它的物理位置可以是任意的、分散的，通过控制器对服务链的定义和引流串联，完成预定义工作。Under the traditional network architecture, the SFC technology utilizes the virtual network to better integrate the service business, which solves the above problems well. The SFC service chain generally has the following roles: flow classification node and service node. The flow classification node, as the access node of the original data message, matches the data message according to the defined flow classification rule, performs the Overlay encapsulation of the service chain on the message, and forwards it to the service chain for processing. The service node is allocated and used as a resource, and its physical location can be arbitrary and decentralized, and the predefined work is completed through the controller's definition of the service chain and the connection of traffic diversion.
但是在常规应用中，SFC中的流分类节点一般都使用硬件接入交换机或OVS虚拟交换机来承担，硬件接入交换机需要使用额外的硬件设备来承担，增加了部署成本。而OVS虚拟交换机转发性能有限，导致业务处理效率较低。However, in conventional applications, the flow classification nodes in the SFC are generally undertaken by hardware access switches or OVS virtual switches. The hardware access switches need to be undertaken by additional hardware devices, which increases the deployment cost. However, the forwarding performance of the OVS virtual switch is limited, resulting in low service processing efficiency.
可见，如何在不增加的硬件设备的同时，提升业务处理效率，是本领域技术人员需要解决的问题。It can be seen that how to improve service processing efficiency without adding additional hardware devices is a problem to be solved by those skilled in the art.
发明内容SUMMARY OF THE INVENTION
本发明实施例的目的是提供一种部署SFC业务链的方法、装置和计算机可读存储介质，可以在不增加的硬件设备的同时，提升业务处理效率。The purpose of the embodiments of the present invention is to provide a method, an apparatus and a computer-readable storage medium for deploying an SFC service chain, which can improve service processing efficiency without adding hardware equipment.
为解决上述技术问题，本发明实施例提供一种部署SFC业务链的方法，包括：In order to solve the above technical problems, an embodiment of the present invention provides a method for deploying an SFC service chain, including:
根据虚拟化指令中携带的业务进程数目，在网卡上构建相应数目的虚拟机；Build a corresponding number of virtual machines on the network card according to the number of business processes carried in the virtualization instruction;
依据目标业务进程所对应的功能属性，对目标虚拟机配置相应个数的虚拟接口；其中，所述目标虚拟机为所有虚拟机中的任意一台虚拟机；目标业务进程为目标虚拟机所对应的业务进程；According to the function attribute corresponding to the target business process, configure a corresponding number of virtual interfaces on the target virtual machine; wherein, the target virtual machine is any virtual machine in all virtual machines; the target business process is corresponding to the target virtual machine business process;
按照各所述业务进程的执行顺序，建立各所述虚拟机的连接关系，以利用各所述虚拟机完成业务链的报文业务。According to the execution sequence of each of the service processes, a connection relationship of each of the virtual machines is established, so as to use each of the virtual machines to complete the message service of the service chain.
可选地，还包括：Optionally, also include:
当接收到所述业务链的业务删除指令时，在所述网卡上删除与所述业务删除指令中携带的业务进程标识相对应的虚拟机。When the service deletion instruction of the service chain is received, the virtual machine corresponding to the service process identifier carried in the service deletion instruction is deleted on the network card.
可选地，还包括：Optionally, also include:
当接收到所述业务链的业务添加指令时，在所述网卡上构建与所述业务添加指令中携带的业务进程相对应的虚拟机。When the service addition instruction of the service chain is received, a virtual machine corresponding to the service process carried in the service addition instruction is constructed on the network card.
可选地，所述虚拟机包括执行报文识别的虚拟机、执行报文分发的虚拟机以及对报文进行业务处理的虚拟机。Optionally, the virtual machine includes a virtual machine that performs message identification, a virtual machine that performs message distribution, and a virtual machine that performs service processing on messages.
可选地，在所述依据目标业务进程所对应的功能属性，对目标虚拟机配置相应个数的虚拟接口之后还包括：Optionally, after configuring a corresponding number of virtual interfaces on the target virtual machine according to the function attribute corresponding to the target service process, the method further includes:
根据Hypervisor管理界面接收到的配置数量，调整所述目标虚拟机的虚拟接口的个数。Adjust the number of virtual interfaces of the target virtual machine according to the number of configurations received by the hypervisor management interface.
本发明实施例还提供了一种部署SFC业务链的装置，包括构建单元、配置单元和连接单元；The embodiment of the present invention also provides a device for deploying an SFC service chain, including a construction unit, a configuration unit and a connection unit;
所述构建单元，用于根据虚拟化指令中携带的业务进程数目，在网卡上构建相应数目的虚拟机；The construction unit is used to construct a corresponding number of virtual machines on the network card according to the number of business processes carried in the virtualization instruction;
所述配置单元，用于依据目标业务进程所对应的功能属性，对目标虚拟机配置相应个数的虚拟接口；其中，所述目标虚拟机为所有虚拟机中的任意一台虚拟机；目标业务进程为目标虚拟机所对应的业务进程；The configuration unit is configured to configure a corresponding number of virtual interfaces for the target virtual machine according to the function attributes corresponding to the target service process; wherein, the target virtual machine is any virtual machine among all virtual machines; the target service The process is the business process corresponding to the target virtual machine;
所述连接单元，用于按照各所述业务进程的执行顺序，建立各所述虚拟机的连接关系，以利用各所述虚拟机完成业务链的报文业务。The connection unit is configured to establish a connection relationship of each of the virtual machines according to the execution sequence of each of the service processes, so as to use each of the virtual machines to complete the message service of the service chain.
可选地，还包括删除单元；Optionally, it also includes a deletion unit;
所述删除单元，用于当接收到所述业务链的业务删除指令时，在所述网卡上删除与所述业务删除指令中携带的业务进程标识相对应的虚拟机。The deletion unit is configured to delete the virtual machine corresponding to the service process identifier carried in the service deletion instruction on the network card when receiving the service deletion instruction of the service chain.
可选地，还包括添加单元；Optionally, it also includes an adding unit;
所述添加单元，用于当接收到所述业务链的业务添加指令时，在所述网卡上构建与所述业务添加指令中携带的业务进程相对应的虚拟机。The adding unit is configured to construct, on the network card, a virtual machine corresponding to the service process carried in the service adding instruction when receiving the service adding instruction of the service chain.
可选地，所述虚拟机包括执行报文识别的虚拟机、执行报文分发的虚拟机以及对报文进行业务处理的虚拟机。Optionally, the virtual machine includes a virtual machine that performs message identification, a virtual machine that performs message distribution, and a virtual machine that performs service processing on messages.
可选地，还包括调整单元；Optionally, it also includes an adjustment unit;
所述调整单元，用于根据Hypervisor管理界面接收到的配置数量，调整所述目标虚拟机的虚拟接口的个数。The adjustment unit is configured to adjust the number of virtual interfaces of the target virtual machine according to the number of configurations received by the hypervisor management interface.
本发明实施例还提供了一种部署SFC业务链的装置，包括：The embodiment of the present invention also provides a device for deploying an SFC service chain, including:
存储器，用于存储计算机程序；memory for storing computer programs;
处理器，用于执行所述计算机程序以实现如上述任意一项所述部署SFC业务链的方法的步骤。A processor for executing the computer program to implement the steps of the method for deploying the SFC service chain described in any one of the above.
本发明实施例还提供了一种计算机可读存储介质，所述计算机可读存储介质上存储有计算机程序，所述计算机程序被处理器执行时实现如上述任一项所述部署SFC业务链的方法的步骤。An embodiment of the present invention further provides a computer-readable storage medium, where a computer program is stored on the computer-readable storage medium, and when the computer program is executed by the processor, the SFC service chain is deployed as described in any of the above. steps of the method.
由上述技术方案可以看出，根据虚拟化指令中携带的业务进程数目，在网卡上构建相应数目的虚拟机；不同的虚拟机用于执行不同的业务进程。每个业务进程所需实现的功能不同，因此可以依据目标业务进程所对应的功能属性，对目标虚拟机配置相应个数的虚拟接口；其中，目标虚拟机为所有虚拟机中的任意一台虚拟机；目标业务进程为目标虚拟机所对应的业务进程，按照目标虚拟机的处理方式，可以完成对所有虚拟机的接口配置，保证业务进程的顺利执行。业务链上不同业务进程之间需要交互，按照各业务进程的执行顺序，建立各虚拟机的连接关系，以利用各虚拟机完成业务链的报文业务。该技术方案既不用增加额外的外部硬件设备，也可以得益于高性能网卡的物理转发性能有效解决OVS虚拟交换机转发性能的影响，有效的提升了业务处理效率。It can be seen from the above technical solutions that according to the number of service processes carried in the virtualization instruction, a corresponding number of virtual machines are constructed on the network card; different virtual machines are used to execute different service processes. The functions that each business process needs to implement are different, so according to the function attributes corresponding to the target business process, a corresponding number of virtual interfaces can be configured for the target virtual machine; wherein, the target virtual machine is any virtual machine among all the virtual machines. The target business process is the business process corresponding to the target virtual machine. According to the processing method of the target virtual machine, the interface configuration of all virtual machines can be completed to ensure the smooth execution of the business process. Interaction between different business processes on the business chain is required. According to the execution sequence of each business process, the connection relationship of each virtual machine is established, so as to use each virtual machine to complete the message service of the business chain. The technical solution does not need to add additional external hardware devices, and can also benefit from the physical forwarding performance of the high-performance network card to effectively solve the impact of the forwarding performance of the OVS virtual switch, and effectively improve the service processing efficiency.
附图说明Description of drawings
为了更清楚地说明本发明实施例，下面将对实施例中所需要使用的附图做简单的介绍，显而易见地，下面描述中的附图仅仅是本发明的一些实施例，对于本领域普通技术人员来讲，在不付出创造性劳动的前提下，还可以根据这些附图获得其他的附图。In order to explain the embodiments of the present invention more clearly, the following will briefly introduce the accompanying drawings that need to be used in the embodiments. Obviously, the accompanying drawings in the following description are only some embodiments of the present invention, which are not relevant to ordinary skills in the art. As far as personnel are concerned, other drawings can also be obtained from these drawings on the premise of no creative work.
图1为本发明实施例提供的一种部署SFC业务链的方法的流程图；1 is a flowchart of a method for deploying an SFC service chain provided by an embodiment of the present invention;
图2为本发明实施例提供的一种SFC、SFF和SF交互的示意图；2 is a schematic diagram of the interaction of a SFC, SFF, and SF provided by an embodiment of the present invention;
图3为本发明实施例提供的一种部署SFC业务链的装置的结构示意图；3 is a schematic structural diagram of an apparatus for deploying an SFC service chain according to an embodiment of the present invention;
图4为本发明实施例提供的一种部署SFC业务链的装置的硬件结构示意图。FIG. 4 is a schematic diagram of a hardware structure of an apparatus for deploying an SFC service chain according to an embodiment of the present invention.
具体实施方式Detailed ways
下面将结合本发明实施例中的附图，对本发明实施例中的技术方案进行清楚、完整地描述，显然，所描述的实施例仅仅是本发明一部分实施例，而不是全部实施例。基于本发明中的实施例，本领域普通技术人员在没有做出创造性劳动前提下，所获得的所有其他实施例，都属于本发明保护范围。The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention. Obviously, the described embodiments are only a part of the embodiments of the present invention, but not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative work fall within the protection scope of the present invention.
为了使本技术领域的人员更好地理解本发明方案，下面结合附图和具体实施方式对本发明作进一步的详细说明。In order to make those skilled in the art better understand the solution of the present invention, the present invention will be further described in detail below with reference to the accompanying drawings and specific embodiments.
接下来，详细介绍本发明实施例所提供的一种部署SFC业务链的方法。图1为本发明实施例提供的一种部署SFC业务链的方法的流程图，该方法包括：Next, a method for deploying an SFC service chain provided by an embodiment of the present invention is introduced in detail. 1 is a flowchart of a method for deploying an SFC service chain provided by an embodiment of the present invention, and the method includes:
S101：根据虚拟化指令中携带的业务进程数目，在网卡上构建相应数目的虚拟机。S101: Build a corresponding number of virtual machines on the network card according to the number of service processes carried in the virtualization instruction.
在本发明实施例中，利用高性能网卡的SRIOV特性，将高性能网卡进行虚拟化，提供对于IO虚拟化所需要的硬件加速支持。其中，高性能网卡可以采用PCIe设备。In the embodiment of the present invention, the SRIOV feature of the high-performance network card is utilized to virtualize the high-performance network card to provide hardware acceleration support required for IO virtualization. Among them, the high-performance network card can adopt PCIe device.
业务链包含有多个业务进程，每个业务进程执行的操作有所不同，在本发明实施例中，可以针对于每个业务进程设置一个虚拟机(Virtual Machine，VM)，每台虚拟机有其承载的业务进程。The business chain includes multiple business processes, and each business process performs different operations. In this embodiment of the present invention, a virtual machine (Virtual Machine, VM) may be set for each business process, and each virtual machine has The business process it carries.
根据业务链上业务的执行流程，虚拟机可以包含有三种类型：执行报文识别的虚拟机(Service Function Chain，SFC)、执行报文分发的虚拟机(Service FunctionForwarder，SFF)以及对报文进行业务处理的虚拟机(Service Function，SF)。According to the execution process of the service on the service chain, the virtual machine can include three types: a virtual machine that performs message identification (Service Function Chain, SFC), a virtual machine that performs message distribution (Service Function Forwarder, SFF), and a virtual machine that performs message processing. A virtual machine (Service Function, SF) for business processing.
如图2所示为本发明实施例提供的一种SFC、SFF和SF交互的示意图，SFC用于对接收到的报文进行识别，然后通过SFF将不同类型的报文分发到相应的SF上，以便于SF对报文执行业务处理。FIG. 2 is a schematic diagram of interaction between SFC, SFF, and SF provided by an embodiment of the present invention. SFC is used to identify received packets, and then distribute different types of packets to corresponding SFs through SFF. , so that the SF can perform service processing on the packet.
S102：依据目标业务进程所对应的功能属性，对目标虚拟机配置相应个数的虚拟接口。S102: Configure a corresponding number of virtual interfaces for the target virtual machine according to the function attribute corresponding to the target service process.
不同虚拟机之间可以通过虚拟接口进行连接。Virtual interfaces can be used to connect different virtual machines.
每台虚拟机的处理方式类似，在本发明实施例中，以所有虚拟机中的任意一台虚拟机即目标虚拟机为例展开介绍，目标虚拟机上的业务进程称作目标业务进程。The processing methods of each virtual machine are similar. In the embodiment of the present invention, any virtual machine among all virtual machines, that is, the target virtual machine, is used as an example for introduction, and the service process on the target virtual machine is called the target service process.
不同的业务进程所对应的功能属性有所不同，功能属性用于表征业务进程所需执行的操作步骤。例如，防火墙(FireWall，FW)、负载均衡(Load Balancer，LB)、入侵防御系统(Intrusion Prevention System，IPS)等。The functional attributes corresponding to different business processes are different, and the functional attributes are used to represent the operation steps to be performed by the business process. For example, a firewall (FireWall, FW), a load balancer (Load Balancer, LB), an intrusion prevention system (Intrusion Prevention System, IPS) and the like.
每台虚拟机可以支持一个物理功能(Physical Function，PF)和多个虚拟功能(Virtual Function，VF)。每个虚拟功能则是一个简化版的虚拟接口，在具体实现中，管理人员可以通过Hypervisor管理界面来配置VF的数量。Each virtual machine can support one physical function (Physical Function, PF) and multiple virtual functions (Virtual Function, VF). Each virtual function is a simplified version of the virtual interface. In the specific implementation, the administrator can configure the number of VFs through the hypervisor management interface.
以目标虚拟机为例，在设置好目标虚拟机的VF数量之后。随着业务需求的变化，管理人员也可以通过Hypervisor管理界面输入目标虚拟机所对应的VF的配置数量，从而调整目标虚拟机的虚拟接口的个数。Take the target virtual machine as an example, after setting the number of VFs of the target virtual machine. As business requirements change, administrators can also input the number of VF configurations corresponding to the target virtual machine through the hypervisor management interface, thereby adjusting the number of virtual interfaces of the target virtual machine.
S103：按照各业务进程的执行顺序，建立各虚拟机的连接关系，以利用各虚拟机完成业务链的报文业务。S103: Establish a connection relationship of each virtual machine according to the execution sequence of each service process, so as to use each virtual machine to complete the message service of the service chain.
当业务数据报文在网络中传递时，需要经过各种各样的业务节点即虚拟机，这样才能保证网络能够按照设计要求，提供给用户安全、快速、稳定的网络服务。When a service data packet is transmitted in the network, it needs to pass through various service nodes, namely virtual machines, so as to ensure that the network can provide users with safe, fast and stable network services according to the design requirements.
因此，在本发明实施例中，需要按照各业务进程的执行顺序，建立各虚拟机的连接关系。在虚拟机中启用业务进程可以实现SFC的功能，之后通过相关联的虚拟接口在网卡内部依赖于SRIOV功能特性，实现各虚拟机之间的转发互通。Therefore, in the embodiment of the present invention, it is necessary to establish the connection relationship of each virtual machine according to the execution sequence of each service process. Enabling the service process in the virtual machine can realize the SFC function, and then rely on the SRIOV function and characteristic inside the network card through the associated virtual interface to realize the forwarding and interworking between the virtual machines.
由上述技术方案可以看出，根据虚拟化指令中携带的业务进程数目，在网卡上构建相应数目的虚拟机；不同的虚拟机用于执行不同的业务进程。每个业务进程所需实现的功能不同，因此可以依据目标业务进程所对应的功能属性，对目标虚拟机配置相应个数的虚拟接口；其中，目标虚拟机为所有虚拟机中的任意一台虚拟机；目标业务进程为目标虚拟机所对应的业务进程，按照目标虚拟机的处理方式，可以完成对所有虚拟机的接口配置，保证业务进程的顺利执行。业务链上不同业务进程之间需要交互，按照各业务进程的执行顺序，建立各虚拟机的连接关系，以利用各虚拟机完成业务链的报文业务。该技术方案既不用增加额外的外部硬件设备，也可以得益于高性能网卡的物理转发性能有效解决OVS虚拟交换机转发性能的影响，有效的提升了业务处理效率。It can be seen from the above technical solutions that according to the number of service processes carried in the virtualization instruction, a corresponding number of virtual machines are constructed on the network card; different virtual machines are used to execute different service processes. The functions that each business process needs to implement are different, so according to the function attributes corresponding to the target business process, a corresponding number of virtual interfaces can be configured for the target virtual machine; wherein, the target virtual machine is any virtual machine among all the virtual machines. The target business process is the business process corresponding to the target virtual machine. According to the processing method of the target virtual machine, the interface configuration of all virtual machines can be completed to ensure the smooth execution of the business process. Interaction between different business processes on the business chain is required. According to the execution sequence of each business process, the connection relationship of each virtual machine is established, so as to use each virtual machine to complete the message service of the business chain. The technical solution does not need to add additional external hardware devices, and can also benefit from the physical forwarding performance of the high-performance network card to effectively solve the impact of the forwarding performance of the OVS virtual switch, and effectively improve the service processing efficiency.
在实际应用中，当业务链上的业务进程发生改变时，为了保证业务链上业务进程的顺利执行，需要相适应的调整网卡上的虚拟机。In practical applications, when the business process on the business chain changes, in order to ensure the smooth execution of the business process on the business chain, the virtual machine on the network card needs to be adjusted accordingly.
具体的，当接收到业务链的业务删除指令时，在网卡上删除与业务删除指令中携带的业务进程标识相对应的虚拟机。当接收到业务链的业务添加指令时，在网卡上构建与业务添加指令中携带的业务进程相对应的虚拟机。Specifically, when the service deletion instruction of the service chain is received, the virtual machine corresponding to the service process identifier carried in the service deletion instruction is deleted on the network card. When a service addition instruction of the service chain is received, a virtual machine corresponding to the service process carried in the service addition instruction is constructed on the network card.
在本发明实施例中，每台虚拟机有其承载的业务进程，为了便于区分不同虚拟机上的业务进程，可以针对不同的业务进程设置相应的业务进程标识。In the embodiment of the present invention, each virtual machine has a service process carried by it. In order to facilitate distinguishing service processes on different virtual machines, corresponding service process identifiers may be set for different service processes.
其中，业务进程标识可以采用数字或字母或者两者组合的形式。在本发明实施例中，对于业务进程标识的具体形式不做限定，只要能够区分不同的业务进程即可。The business process identifier may be in the form of numbers or letters or a combination of the two. In this embodiment of the present invention, the specific form of the service process identifier is not limited, as long as different service processes can be distinguished.
通过增加或删除虚拟机，可以满足不同的业务需求，提升了业务部署的灵活性，降低了业务链在变更、扩容时操作的难度。By adding or deleting virtual machines, different business needs can be met, the flexibility of business deployment is improved, and the difficulty of operating the business chain during changes and expansions is reduced.
图3为本发明实施例提供的一种部署SFC业务链的装置的结构示意图，包括构建单元31、配置单元32和连接单元33；3 is a schematic structural diagram of an apparatus for deploying an SFC service chain provided by an embodiment of the present invention, including a
构建单元31，用于根据虚拟化指令中携带的业务进程数目，在网卡上构建相应数目的虚拟机；A
配置单元32，用于依据目标业务进程所对应的功能属性，对目标虚拟机配置相应个数的虚拟接口；其中，目标虚拟机为所有虚拟机中的任意一台虚拟机；目标业务进程为目标虚拟机所对应的业务进程；The
连接单元33，用于按照各业务进程的执行顺序，建立各虚拟机的连接关系，以利用各虚拟机完成业务链的报文业务。The
可选地，还包括删除单元；Optionally, it also includes a deletion unit;
删除单元，用于当接收到业务链的业务删除指令时，在网卡上删除与业务删除指令中携带的业务进程标识相对应的虚拟机。The deletion unit is configured to delete the virtual machine corresponding to the service process identifier carried in the service deletion instruction on the network card when the service deletion instruction of the service chain is received.
可选地，还包括添加单元；Optionally, it also includes an adding unit;
添加单元，用于当接收到业务链的业务添加指令时，在网卡上构建与业务添加指令中携带的业务进程相对应的虚拟机。The adding unit is configured to construct a virtual machine corresponding to the service process carried in the service adding instruction on the network card when receiving the service adding instruction of the service chain.
可选地，虚拟机包括执行报文识别的虚拟机、执行报文分发的虚拟机以及对报文进行业务处理的虚拟机。Optionally, the virtual machines include a virtual machine that performs packet identification, a virtual machine that performs packet distribution, and a virtual machine that performs service processing on the packets.
可选地，还包括调整单元；Optionally, it also includes an adjustment unit;
调整单元，用于根据Hypervisor管理界面接收到的配置数量，调整目标虚拟机的虚拟接口的个数。The adjustment unit is used to adjust the number of virtual interfaces of the target virtual machine according to the number of configurations received by the hypervisor management interface.
图3所对应实施例中特征的说明可以参见图1所对应实施例的相关说明，这里不再一一赘述。For the description of the features in the embodiment corresponding to FIG. 3 , reference may be made to the related description of the embodiment corresponding to FIG. 1 , which will not be repeated here.
由上述技术方案可以看出，根据虚拟化指令中携带的业务进程数目，在网卡上构建相应数目的虚拟机；不同的虚拟机用于执行不同的业务进程。每个业务进程所需实现的功能不同，因此可以依据目标业务进程所对应的功能属性，对目标虚拟机配置相应个数的虚拟接口；其中，目标虚拟机为所有虚拟机中的任意一台虚拟机；目标业务进程为目标虚拟机所对应的业务进程，按照目标虚拟机的处理方式，可以完成对所有虚拟机的接口配置，保证业务进程的顺利执行。业务链上不同业务进程之间需要交互，按照各业务进程的执行顺序，建立各虚拟机的连接关系，以利用各虚拟机完成业务链的报文业务。该技术方案既不用增加额外的外部硬件设备，也可以得益于高性能网卡的物理转发性能有效解决OVS虚拟交换机转发性能的影响，有效的提升了业务处理效率。It can be seen from the above technical solutions that according to the number of service processes carried in the virtualization instruction, a corresponding number of virtual machines are constructed on the network card; different virtual machines are used to execute different service processes. The functions that each business process needs to implement are different, so according to the function attributes corresponding to the target business process, a corresponding number of virtual interfaces can be configured for the target virtual machine; wherein, the target virtual machine is any virtual machine among all the virtual machines. The target business process is the business process corresponding to the target virtual machine. According to the processing method of the target virtual machine, the interface configuration of all virtual machines can be completed to ensure the smooth execution of the business process. Interaction between different business processes on the business chain is required. According to the execution sequence of each business process, the connection relationship of each virtual machine is established, so as to use each virtual machine to complete the message service of the business chain. The technical solution does not need to add additional external hardware devices, and can also benefit from the physical forwarding performance of the high-performance network card to effectively solve the impact of the forwarding performance of the OVS virtual switch, and effectively improve the service processing efficiency.
图4为本发明实施例提供的一种部署SFC业务链的装置40的硬件结构示意图，包括：FIG. 4 is a schematic diagram of the hardware structure of a
存储器41，用于存储计算机程序；
处理器42，用于执行所述计算机程序以实现如上述任意实施例所述的部署SFC业务链的方法的步骤。The
本发明实施例还提供了一种计算机可读存储介质，所述计算机可读存储介质上存储有计算机程序，所述计算机程序被处理器执行时实现如上述任意实施例所述的部署SFC业务链的方法的步骤。Embodiments of the present invention further provide a computer-readable storage medium, where a computer program is stored on the computer-readable storage medium, and when the computer program is executed by a processor, the deployment of the SFC service chain described in any of the foregoing embodiments is implemented. steps of the method.
以上对本发明实施例所提供的一种部署SFC业务链的方法、装置和计算机可读存储介质进行了详细介绍。说明书中各个实施例采用递进的方式描述，每个实施例重点说明的都是与其他实施例的不同之处，各个实施例之间相同相似部分互相参见即可。对于实施例公开的装置而言，由于其与实施例公开的方法相对应，所以描述的比较简单，相关之处参见方法部分说明即可。应当指出，对于本技术领域的普通技术人员来说，在不脱离本发明原理的前提下，还可以对本发明进行若干改进和修饰，这些改进和修饰也落入本发明权利要求的保护范围内。The method, apparatus, and computer-readable storage medium for deploying an SFC service chain provided by the embodiments of the present invention have been described in detail above. The various embodiments in the specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments, and the same and similar parts between the various embodiments can be referred to each other. As for the device disclosed in the embodiment, since it corresponds to the method disclosed in the embodiment, the description is relatively simple, and the relevant part can be referred to the description of the method. It should be pointed out that for those skilled in the art, without departing from the principle of the present invention, several improvements and modifications can also be made to the present invention, and these improvements and modifications also fall within the protection scope of the claims of the present invention.
专业人员还可以进一步意识到，结合本文中所公开的实施例描述的各示例的单元及算法步骤，能够以电子硬件、计算机软件或者二者的结合来实现，为了清楚地说明硬件和软件的可互换性，在上述说明中已经按照功能一般性地描述了各示例的组成及步骤。这些功能究竟以硬件还是软件方式来执行，取决于技术方案的特定应用和设计约束条件。专业技术人员可以对每个特定的应用来使用不同方法来实现所描述的功能，但是这种实现不应认为超出本发明的范围。Professionals may further realize that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two, in order to clearly illustrate the possibilities of hardware and software. Interchangeability, the above description has generally described the components and steps of each example in terms of functionality. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Skilled artisans may implement the described functionality using different methods for each particular application, but such implementations should not be considered beyond the scope of the present invention.
结合本文中所公开的实施例描述的方法或算法的步骤可以直接用硬件、处理器执行的软件模块，或者二者的结合来实施。软件模块可以置于随机存储器(RAM)、内存、只读存储器(ROM)、电可编程ROM、电可擦除可编程ROM、寄存器、硬盘、可移动磁盘、CD-ROM、或技术领域内所公知的任意其它形式的存储介质中。The steps of a method or algorithm described in conjunction with the embodiments disclosed herein may be directly implemented in hardware, a software module executed by a processor, or a combination of the two. A software module can be placed in random access memory (RAM), internal memory, read only memory (ROM), electrically programmable ROM, electrically erasable programmable ROM, registers, hard disk, removable disk, CD-ROM, or any other in the technical field. in any other known form of storage medium.
Claims (10)
Translated fromChinesePriority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202010130061.5ACN111371608B (en) | 2020-02-28 | 2020-02-28 | A method, apparatus and medium for deploying SFC service chain |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202010130061.5ACN111371608B (en) | 2020-02-28 | 2020-02-28 | A method, apparatus and medium for deploying SFC service chain |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN111371608Atrue CN111371608A (en) | 2020-07-03 |
| CN111371608B CN111371608B (en) | 2022-07-22 |
Family
ID=71211006
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202010130061.5AActiveCN111371608B (en) | 2020-02-28 | 2020-02-28 | A method, apparatus and medium for deploying SFC service chain |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN111371608B (en) |
Cited By (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN112367267A (en)* | 2020-09-30 | 2021-02-12 | 新华三大数据技术有限公司 | Virtual machine management method and device |
| CN112511432A (en)* | 2020-11-12 | 2021-03-16 | 中国科学院计算技术研究所 | Method and system for configuring and transmitting virtualization SFC (Small form factor) route of Overlay network |
| CN112822059A (en)* | 2021-02-09 | 2021-05-18 | 江苏省未来网络创新研究院 | Service chain arrangement management system and method for intelligent network card |
Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN108306832A (en)* | 2018-01-29 | 2018-07-20 | 北京启明星辰信息安全技术有限公司 | A kind of network flow quantity shunting method and device |
| CN108463989A (en)* | 2016-01-25 | 2018-08-28 | 华为技术有限公司 | It is linked across the business function of multiple sub-networks |
| CN109952746A (en)* | 2016-11-14 | 2019-06-28 | 华为技术有限公司 | Physics and virtual network function are integrated in business chain network environment |
- 2020
- 2020-02-28CNCN202010130061.5Apatent/CN111371608B/enactiveActive
Patent Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN108463989A (en)* | 2016-01-25 | 2018-08-28 | 华为技术有限公司 | It is linked across the business function of multiple sub-networks |
| CN109952746A (en)* | 2016-11-14 | 2019-06-28 | 华为技术有限公司 | Physics and virtual network function are integrated in business chain network environment |
| CN108306832A (en)* | 2018-01-29 | 2018-07-20 | 北京启明星辰信息安全技术有限公司 | A kind of network flow quantity shunting method and device |
Cited By (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN112367267A (en)* | 2020-09-30 | 2021-02-12 | 新华三大数据技术有限公司 | Virtual machine management method and device |
| CN112367267B (en)* | 2020-09-30 | 2022-03-29 | 新华三大数据技术有限公司 | Virtual machine management method and device |
| CN112511432A (en)* | 2020-11-12 | 2021-03-16 | 中国科学院计算技术研究所 | Method and system for configuring and transmitting virtualization SFC (Small form factor) route of Overlay network |
| CN112822059A (en)* | 2021-02-09 | 2021-05-18 | 江苏省未来网络创新研究院 | Service chain arrangement management system and method for intelligent network card |
| CN112822059B (en)* | 2021-02-09 | 2022-08-16 | 江苏省未来网络创新研究院 | Service chain arrangement management system and method facing intelligent network card |
Also Published As
| Publication number | Publication date |
|---|---|
| CN111371608B (en) | 2022-07-22 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US12218956B2 (en) | Providing a virtual security appliance architecture to a virtual cloud infrastructure | |
| CN111355604B (en) | System and method for user customization and automation operations on software defined networks | |
| US10187306B2 (en) | System and method for improved service chaining | |
| CN114338606B (en) | A public cloud network configuration method and related equipment | |
| CN111817961B (en) | Open vSwitch kernel flow table-based distributed routing method and device in Overlay network | |
| WO2021135344A1 (en) | Virtual private cloud and non-public cloud data center communication method, virtual private cloud and non-public cloud data center communication configuration method, and related apparatuses | |
| EP3782333A1 (en) | Cross-regional virtual network peering | |
| CN109981493B (en) | Method and device for configuring virtual machine network | |
| CN111371608B (en) | A method, apparatus and medium for deploying SFC service chain | |
| US11265224B1 (en) | Logical network visualization | |
| WO2016159113A1 (en) | Control device, control method, and program | |
| CN113783781A (en) | Method and device for interworking between virtual private clouds | |
| WO2017162089A1 (en) | Service configuration method and device for network service | |
| CN104270464A (en) | A cloud computing virtualization network architecture and optimization method | |
| CN106850459A (en) | A kind of method and device for realizing virtual network load balancing | |
| JP2024541998A (en) | Secure two-way network connection system between private networks | |
| CN112491789A (en) | OpenStack framework-based virtual firewall construction method and storage medium | |
| CN115118585A (en) | Service deployment method, device and system | |
| WO2025092706A1 (en) | Virus detection and removal drilling method and apparatus, device, and storage medium | |
| CN115242597B (en) | Information processing methods, equipment and storage media | |
| CN108886493B (en) | Virtual exchange model based on topological structure and provided with pluggable flow management protocol | |
| CN112968879B (en) | Method and equipment for realizing firewall management | |
| CN109947534A (en) | An SDN-based cloud security function scheduling system | |
| US12425312B2 (en) | Method, apparatus, and system for deploying service | |
| JP5063726B2 (en) | Configuration control method for virtual node device |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant | ||
| CP03 | Change of name, title or address | Address after:Building 9, No.1, guanpu Road, Guoxiang street, Wuzhong Economic Development Zone, Wuzhong District, Suzhou City, Jiangsu Province Patentee after:Suzhou Yuannao Intelligent Technology Co.,Ltd. Country or region after:China Address before:Building 9, No.1, guanpu Road, Guoxiang street, Wuzhong Economic Development Zone, Wuzhong District, Suzhou City, Jiangsu Province Patentee before:SUZHOU LANGCHAO INTELLIGENT TECHNOLOGY Co.,Ltd. Country or region before:China |