NETWORK POLICY CONFIGURATION METHOD, MANAGEMENT DEVICE, AND NETWORK MANAGEMENT CENTER DEVICE

• US 20140133358A1
• Filed: 01/21/2014
• Published: 05/15/2014
• Est. Priority Date: 08/01/2011
• Status: Active Grant

• Current Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Original Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Inventors: Yin, Yue, Song, Wei, Li, Jin, Jiang, Xingfeng
• Granted Patent: US 8,774,054 B2
• Time in Patent Office: Days
• US Class Current: 370/254
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management
• CPC Class Codes: H04L 41/0895 Configuration of virtualised networks or elements, e.g. virtualised network function or OpenFlow elements
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 49/70 Virtual switches

Abstract

A network policy configuration method. The network policy configuration method includes: establishing correlation information between a virtual switch and physical network devices; when an operation event aimed at a virtual machine occurs, sending a first network policy configuration message aimed at the virtual machine to a virtual switch corresponding to the virtual machine, where the first network policy configuration message is used to instruct the virtual switch to perform network policy configuration; and acquiring, according to the correlation information, physical network devices correlated to the virtual switch, and sending second network policy configuration messages aimed at the virtual machine to the physical network devices correlated to the virtual switch, where the second network policy configuration messages are used to instruct the physical network devices to perform network policy configuration. The technical solution is capable of automatically configuring a network policy, thereby supporting the server virtualization technology.

Claims

1. A network policy configuration method, comprising:

establishing correlation information between a virtual switch and physical network devices;

sending a virtual network policy deletion message carrying the identifier information of the virtual machine to a source virtual switch corresponding to the virtual machine when a virtual machine migration event aimed at a virtual machine occurs, wherein the virtual network policy deletion message is used to instruct the source virtual switch to delete virtual network policy parameters that are previously configured for a first virtual port between the virtual machine and the source virtual switch;

sending a virtual network policy creation message carrying virtual network policy information and the identifier information of the virtual machine to a target virtual switch corresponding to the virtual machine when the virtual machine migration event occurs, wherein the virtual network policy creation message is used to instruct the target virtual switch to configure virtual network policy parameters for a second virtual port between the virtual machine and the target virtual switch according to the virtual network policy information;

acquiring, according to the correlation information, physical network devices correlated to the source virtual switch, and physical network devices correlated to the target virtual switch;

sending physical network policy deletion messages carrying the identifier information of the virtual machine to the physical network devices correlated to the source virtual switch, wherein the physical network policy deletion messages are used to instruct the physical network devices to delete physical network policy parameters that are previously configured for the first virtual port between the virtual machine and the source virtual switch; and

sending physical network policy creation messages carrying physical network policy information and the identifier information of the virtual machine to physical network devices correlated to the target virtual switch, wherein the physical network policy creation messages are used to instruct each of the physical network devices to configure physical network policy parameters for the second virtual port between the virtual machine and the target virtual switch on a local physical port corresponding to the virtual machine.

2. The network policy configuration method according to claim 1, wherein establishing correlation information between the virtual switch and the physical network devices comprises:

acquiring, by a management device, network topology information, wherein the network topology information comprises information about physical network devices on a network, information about a virtual switch on the network, information about paths between different physical network devices on the network, and information about paths between the physical network devices and the virtual switch on the network; and

establishing, by the management device, the correlation information between the virtual switch and the physical network devices according to the network topology information.

3. The network policy configuration method according to claim 1, wherein sending the virtual network policy deletion message carrying the identifier information of the virtual machine to a source virtual switch corresponding to the virtual machine comprises sending, by a management device, virtual network policy deletion message carrying the identifier information of the virtual machine to a source virtual switch corresponding to the virtual machine,

wherein sending the virtual network policy creation message carrying virtual network policy information and the identifier information of the virtual machine to the target virtual switch corresponding to the virtual machine comprises sending, by the management device, the virtual network policy creation message carrying virtual network policy information and the identifier information of the virtual machine to a target virtual switch corresponding to the virtual machine,

wherein acquiring, according to the correlation information, the physical network devices correlated to the source virtual switch, and the physical network devices correlated to the target virtual switch comprises:

acquiring, by the management device, the physical network devices correlated to the source virtual switch from the correlation information between the virtual switch and the physical network devices according to the identifier of the source virtual switch; and

acquiring, by the management device, the physical network devices correlated to the target virtual switch from the correlation information between the virtual switch and the physical network devices according to the identifier of the target virtual switch;

wherein sending the physical network policy deletion messages carrying the identifier information of the virtual machine to the physical network devices correlated to the source virtual switch comprises sending, by the management device, the physical network policy deletion messages carrying the identifier information of the virtual machine to the physical network devices correlated to the source virtual switch, and

wherein sending the physical network policy creation messages carrying the physical network policy information and the identifier information of the virtual machine to the physical network devices correlated to the target virtual switch comprises sending, by the management device, the physical network policy creation messages carrying the physical network policy information and the identifier information of the virtual machine to the physical network devices correlated to the target virtual switch.

4. The network policy configuration method according to claim 1, wherein sending the virtual network policy deletion message carrying the identifier information of the virtual machine to the source virtual switch corresponding to the virtual machine comprises sending, by a server management center device, the virtual network policy deletion message carrying the identifier information of the virtual machine to a source virtual switch corresponding to the virtual machine,

wherein sending the virtual network policy creation message carrying virtual network policy information and the identifier information of the virtual machine to the target virtual switch corresponding to the virtual machine comprises sending, by the server management center device, the virtual network policy creation message carrying virtual network policy information and the identifier information of the virtual machine to a target virtual switch corresponding to the virtual machine,

wherein before acquiring the physical network devices correlated to the source virtual switch, and the physical network devices correlated to the target virtual switch, the method further comprises sending, by the server management center device, a notification message that carries identifier information of the virtual machine, the identifier of the source virtual switch and the identifier of the target virtual switch, and the identifier of the virtual machine migration event to a network management center device,

wherein acquiring, according to the correlation information, the physical network devices correlated to the source virtual switch, and the physical network devices correlated to the target virtual switch comprises:

acquiring, by the network management center device, the physical network devices correlated to the source virtual switch from the correlation information between the virtual switch and the physical network devices according to the identifier of the source virtual switch; and

acquiring, by the network management center device, the physical network devices correlated to the target virtual switch from the correlation information between the virtual switch and the physical network devices according to the identifier of the target virtual switch,

wherein sending the physical network policy deletion messages carrying the identifier information of the virtual machine to the physical network devices correlated to the source virtual switch comprises sending, by the network management center device, the physical network policy deletion messages carrying the identifier information of the virtual machine to the physical network devices correlated to the source virtual switch, and

wherein sending the physical network policy creation messages carrying the physical network policy information and the identifier information of the virtual machine to the physical network devices correlated to the target virtual switch comprises sending, by the network management center device, the physical network policy creation messages carrying physical network policy information and the identifier information of the virtual machine to physical network devices correlated to the target virtual switch.

5. The network policy configuration method according to claim 1, wherein when the virtual machine migration event aimed at the virtual machine occurs and before the sending the virtual network policy deletion message and the virtual network policy creation message, the method further comprises sending, by a server management center device, a notification message that carries identifier information of the virtual machine, the identifier of the source virtual switch and the identifier of the target virtual switch, and the identifier of the virtual machine migration event to a network management center device,

wherein sending the virtual network policy deletion message carrying the identifier information of the virtual machine to the source virtual switch corresponding to the virtual machine comprises sending, by the network management center device, the virtual network policy deletion message carrying the identifier information of the virtual machine to a source virtual switch corresponding to the virtual machine,

wherein sending the virtual network policy creation message carrying virtual network policy information and the identifier information of the virtual machine to the target virtual switch corresponding to the virtual machine comprises sending, by the network management center device, the virtual network policy creation message carrying virtual network policy information and the identifier information of the virtual machine to a target virtual switch corresponding to the virtual machine,

wherein acquiring, according to the correlation information, the physical network devices correlated to the source virtual switch, and the physical network devices correlated to the target virtual switch comprises:

acquiring, by the network management center device, the physical network devices correlated to the source virtual switch from the correlation information between the virtual switch and the physical network devices according to the identifier of the source virtual switch; and

acquiring, by the network management center device, the physical network devices correlated to the target virtual switch from the correlation information between the virtual switch and the physical network devices according to the identifier of the target virtual switch,

wherein sending the physical network policy deletion messages carrying the identifier information of the virtual machine to the physical network devices correlated to the source virtual switch comprises sending, by the network management center device, the physical network policy deletion messages carrying the identifier information of the virtual machine to the physical network devices correlated to the source virtual switch, and

wherein the sending physical network policy creation messages carrying the physical network policy information and the identifier information of the virtual machine to the physical network devices correlated to the target virtual switch comprises sending, by the network management center device, the physical network policy creation messages carrying physical network policy information and the identifier information of the virtual machine to the physical network devices correlated to the target virtual switch.

6. A management device, comprising:

a processor;

a memory coupled to the processor; and

a data bus coupled to the processor, wherein the processor is configured to;

establish correlation information between a virtual switch and physical network devices;

send a virtual network policy deletion message carrying the identifier information of the virtual machine to a source virtual switch corresponding to the virtual machine when a virtual machine migration event aimed at a virtual machine occurs, wherein the virtual network policy deletion message is used to instruct the source virtual switch to delete virtual network policy parameters that are previously configured for a first virtual port between the virtual machine and the source virtual switch;

send a virtual network policy creation message carrying virtual network policy information and the identifier information of the virtual machine to a target virtual switch corresponding to the virtual machine when the virtual machine migration event occurs, wherein the virtual network policy creation message is used to instruct the target virtual switch to configure virtual network policy parameters for a second virtual port between the virtual machine and the target virtual switch according to the virtual network policy information;

acquire, according to the correlation information, physical network devices correlated to the source virtual switch, and physical network devices correlated to the target virtual switch;

send physical network policy deletion messages carrying the identifier information of the virtual machine to the physical network devices correlated to the source virtual switch, wherein the physical network policy deletion messages are used to instruct the physical network devices to delete physical network policy parameters that are previously configured for the first virtual port between the virtual machine and the source virtual switch; and

send physical network policy creation messages carrying physical network policy information and the identifier information of the virtual machine to physical network devices correlated to the target virtual switch, wherein the physical network policy creation messages are used to instruct each of the physical network devices to configure physical network policy parameters for the second virtual port between the virtual machine and the target virtual switch on a local physical port corresponding to the virtual machine.

7. The management device according to claim 6, wherein establishing correlation information between the virtual switch and the physical network devices comprises:

acquiring network topology information, wherein the network topology information comprises information about physical network devices on a network, information about a virtual switch on the network, information about paths between different physical network devices on the network, and information about paths between the physical network devices and the virtual switch on the network; and

establishing the correlation information between the virtual switch and the physical network devices according to the network topology information.

8. A network management center device, comprising:

a processor;

a memory coupled to the processor; and

a data bus coupled to the processor, wherein the processor is configured to;

establish correlation information between a virtual switch and physical network devices;

receive a notification message sending by a server management center device when a virtual machine migration event aimed at a virtual machine occurs, wherein the notification message carries identifier information of the virtual machine, the identifier of a source virtual switch corresponding to the virtual machine and the identifier of a target virtual switch corresponding to the virtual machine, and the identifier of the virtual machine migration event;

send a virtual network policy deletion message carrying the identifier information of the virtual machine to the source virtual switch, wherein the virtual network policy deletion message is used to instruct the source virtual switch to delete virtual network policy parameters that are previously configured for a first virtual port between the virtual machine and the source virtual switch;

send a virtual network policy creation message carrying virtual network policy information and the identifier information of the virtual machine to the target virtual switch, wherein the virtual network policy creation message is used to instruct the target virtual switch to configure virtual network policy parameters for a second virtual port between the virtual machine and the target virtual switch according to the virtual network policy information;

acquire, according to the correlation information, physical network devices correlated to the source virtual switch, and physical network devices correlated to the target virtual switch;

send physical network policy deletion messages carrying the identifier information of the virtual machine to the physical network devices correlated to the source virtual switch, wherein the physical network policy deletion messages are used to instruct the physical network devices to delete physical network policy parameters that are previously configured for the first virtual port between the virtual machine and the source virtual switch; and

send physical network policy creation messages carrying physical network policy information and the identifier information of the virtual machine to physical network devices correlated to the target virtual switch, wherein the physical network policy creation messages are used to instruct each of the physical network devices to configure physical network policy parameters for the second virtual port between the virtual machine and the target virtual switch on a local physical port corresponding to the virtual machine.