Cloud Service Packet Redirection Method and System and Cloud Gateway

• US 20140136675A1
• Filed: 10/04/2013
• Published: 05/15/2014
• Est. Priority Date: 11/12/2012
• Status: Active Grant

• Current Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Original Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Inventors: Yao, Ziyang, Zhang, Wei
• Granted Patent: US 9,325,565 B2
• Time in Patent Office: Days
• US Class Current: 709/223
• CPC Class Codes: H04L 41/00 Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
• CPC Class Codes: H04L 45/306 Route determination based on the nature of the carried application
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]

Abstract

The present invention provides a cloud service packet redirection method and system, and a cloud gateway, the method performed by the cloud gateway includes, if the cloud gateway determines that a DNS packet that is forwarded by a router in a redirection manner is a cloud service-related DNS packet, a record is maintained in a cloud IP table of the cloud gateway according to the DNS packet. Policy route configuration information is sent to the router according to the record maintained in the cloud IP table to instruct the router to maintain a policy route. The policy route instructs the router to redirect, to the cloud gateway, a cloud service packet that is indicated by the DNS packet.

Claims

1-12. -12. (canceled)

13. A cloud service packet redirection method, comprising:

receiving, by a cloud gateway, a domain name system (DNS) packet that is forwarded by a router in a redirection manner;

if the cloud gateway determines that the DNS packet is a cloud service-related DNS packet, maintaining, by the cloud gateway, a record in a cloud IP table of the cloud gateway according to the cloud service-related DNS packet, wherein one record in the cloud IP table corresponds to one or more policy routes of the router; and

sending, by the cloud gateway, policy route configuration information to the router according to information of the record maintained in the cloud IP table to instruct the router to maintain a policy route, wherein the policy route instructs the router to redirect, to the cloud gateway, a cloud service packet that is indicated by the cloud service-related DNS packet.

14. The method according to claim 13, wherein maintaining the record in a cloud IP table of the cloud gateway according to the cloud service-related DNS packet comprises:

obtaining, by the cloud gateway, domain name information, IP address information, and DNS entry survival time information of the cloud service-related DNS packet;

querying, by the cloud gateway, the record in the cloud IP table of the cloud gateway according to the domain name information and the IP address information of the cloud service-related DNS packet, wherein the record in the cloud IP table comprises domain name information, IP address information, DNS entry survival time information, and ACL entry identifier information, and the ACL entry identifier information is used to identify a policy route of the router that corresponds to the record in the cloud IP table;

if no record that corresponds to the domain name information and the IP address information of the cloud service-related DNS packet exists in the cloud IP table, adding, by the cloud gateway, a first record in the cloud IP table, wherein the first record comprises the domain name information, the IP address information, and the DNS entry survival time information of the cloud service-related DNS packet; and

if a record that corresponds to the domain name information and the IP address information of the cloud service-related DNS packet exists in the cloud IP table, updating, by the cloud gateway, DNS entry survival time information of the existing record according to the DNS entry survival time information of the cloud service-related DNS packet.

15. The method according to claim 14, wherein sending the policy route configuration information to the router according to information of the record maintained in the cloud IP table to instruct the router to maintain a policy route comprises:

if the cloud gateway adds the first record in the cloud IP table, sending, by the cloud gateway, first policy route configuration information to the router to instruct the router to add a policy route that corresponds to the first record, wherein the first policy route configuration information comprises action information indicating addition of the policy route, and IP address information and ACL entry identifier information of the first record.

16. The method according to claim 15, further comprising:

aging, by the cloud gateway, DNS entry survival time of all records in the cloud IP table with time; and

deleting, by the cloud gateway, a second record whose DNS entry survival time is 0 in the cloud IP table.

17. The method according to claim 16, wherein sending the policy route configuration information to the router comprises:

if the cloud gateway deletes the second record, sending, by the cloud gateway, second policy route configuration information to the router to instruct the router to delete a policy route that corresponds to the second record, wherein the second policy route configuration information comprises action information indicating deletion of the policy route, and IP address information and ACL entry identifier information of the second record.

18. The method according to claim 13, further comprising:

aging, by the cloud gateway, DNS entry survival time of all records in the cloud IP table with time; and

deleting, by the cloud gateway, a second record whose DNS entry survival time is 0 in the cloud IP table.

19. A cloud service packet redirection method, comprising:

receiving, by a cloud gateway, a domain name system (DNS) packet that is forwarded by a router in a redirection manner;

determining, by the cloud gateway, that the DNS packet is a cloud service-related DNS packet;

maintaining, by the cloud gateway, a record in a cloud IP table of the cloud gateway according to the cloud service-related DNS packet, wherein one record in the cloud IP table corresponds to one or more policy routes of the router; and

sending, by the cloud gateway, policy route configuration information to the router according to information of the record maintained in the cloud IP table to instruct the router to maintain a policy route, wherein the policy route instructs the router to redirect, to the cloud gateway, a cloud service packet that is indicated by the cloud service-related DNS packet.

20. The method according to claim 19, wherein maintaining the record in a cloud IP table of the cloud gateway according to the cloud service-related DNS packet comprises:

obtaining, by the cloud gateway, domain name information, IP address information, and DNS entry survival time information of the cloud service-related DNS packet;

querying, by the cloud gateway, the record in the cloud IP table of the cloud gateway according to the domain name information and the IP address information of the cloud service-related DNS packet, wherein the record in the cloud IP table comprises domain name information, IP address information, DNS entry survival time information, and ACL entry identifier information, and the ACL entry identifier information is used to identify a policy route of the router that corresponds to the record in the cloud IP table;

updating, by the cloud gateway, DNS entry survival time information of the existing record according to the DNS entry survival time information of the cloud service-related DNS packet when a record that corresponds to the domain name information and the IP address information of the cloud service-related DNS packet exists in the cloud IP table; and

adding, by the cloud gateway, a first record in the cloud IP table when no record that corresponds to the domain name information and the IP address information of the cloud service-related DNS packet exists in the cloud IP table, wherein the first record comprises the domain name information, the IP address information, and the DNS entry survival time information of the cloud service-related DNS packet.

21. The method according to claim 20, wherein the cloud gateway adds the first record in the cloud IP table and wherein sending, the policy route configuration information to the router comprises sending, by the cloud gateway, first policy route configuration information to the router to instruct the router to add a policy route that corresponds to the first record, wherein the first policy route configuration information comprises action information indicating addition of the policy route, and IP address information and ACL entry identifier information of the first record.

22. The method according to claim 21, further comprising:

aging, by the cloud gateway, DNS entry survival time of all records in the cloud IP table with time; and

deleting, by the cloud gateway, a second record whose DNS entry survival time is 0 in the cloud IP table.

23. The method according to claim 22, wherein the cloud gateway deletes the second record and wherein sending the policy route configuration information to the router comprises sending, by the cloud gateway, second policy route configuration information to the router to instruct the router to delete a policy route that corresponds to the second record, wherein the second policy route configuration information comprises action information indicating deletion of the policy route, and IP address information and ACL entry identifier information of the second record.

24. The method according to claim 19, further comprising:

aging, by the cloud gateway, DNS entry survival time of all records in the cloud IP table with time; and

deleting, by the cloud gateway, a second record whose DNS entry survival time is 0 in the cloud IP table.

25. A cloud gateway, comprising:

a receiving unit, configured to receive a domain name system DNS packet that is forwarded by a router in a redirection manner;

a determining unit, configured to determine whether the DNS packet received by the receiving unit is a cloud service-related DNS packet;

a maintaining unit, configured to, if the determining unit determines that the DNS packet is a cloud service-related DNS packet, maintain a record in a cloud IP table of the cloud gateway according to the cloud service-related DNS packet, wherein one record in the cloud IP table corresponds to one or more policy routes of the router; and

a sending unit, configured to send policy route configuration information to the router according to information of the record maintained in the cloud IP table to instruct the router to maintain a policy route, wherein the policy route instructs the router to redirect, to the cloud gateway, a cloud service packet that is indicated by the cloud service-related DNS packet.

26. The cloud gateway according to claim 25, wherein the maintaining unit is configured to:

obtain domain name information, IP address information, and DNS entry survival time information of the cloud service-related DNS packet;

query the record in the cloud IP table of the cloud gateway according to the domain name information and the IP address information of the cloud service-related DNS packet, wherein the record in the cloud IP table comprises domain name information, IP address information, DNS entry survival time information, and ACL entry identifier information, and the ACL entry identifier information is used to identify a policy route of the router that corresponds to the record in the cloud IP table;

add a first record in the cloud IP table when no record that corresponds to the domain name information and the IP address information of the cloud service-related DNS packet exists in the cloud IP table, wherein the first record comprises the domain name information, the IP address information, and the DNS entry survival time information of the cloud service-related DNS packet; and

update DNS entry survival time information of the existing record according to the DNS entry survival time information of the cloud service-related DNS packet when a record that corresponds to the domain name information and the IP address information of the cloud service-related DNS packet exists in the cloud IP table.

27. The cloud gateway according to claim 26, wherein the maintaining unit is further adapted to age DNS entry survival time of all records in the cloud IP table with time, and to delete a second record whose DNS entry survival time is 0 in the cloud IP table.

28. The cloud gateway according to claim 27, wherein the sending unit is configured to:

send first policy route configuration information to the router to instruct the router to add a policy route that corresponds to the first record when the maintaining unit adds the first record in the cloud IP table, wherein the first policy route configuration information comprises action information indicating addition of the policy route, and IP address information and ACL entry identifier information of the first record; and

send second policy route configuration information to the router to instruct the router to delete a policy route that corresponds to the second record when the maintaining unit deletes the second record, wherein the second policy route configuration information comprises action information indicating deletion of the policy route, and IP address information and ACL entry identifier information of the second record.

29. The cloud gateway according to claim 25, wherein the maintaining unit is further adapted to age DNS entry survival time of all records in the cloud IP table with time, and delete a second record whose DNS entry survival time is 0 in the cloud IP table.

30. A cloud service packet redirection system, comprising:

the cloud gateway according to claim 25; and

a router configured to forward a domain name system DNS packet to the cloud gateway in a redirection manner and to configure a policy route and redirect a cloud service packet to the cloud gateway according to the policy route.