-
公开(公告)号:US09565033B2
公开(公告)日:2017-02-07
申请号:US14702306
申请日:2015-05-01
Applicant: Huawei Technologies Co., Ltd.
Inventor: Yudong Kang
CPC classification number: H04L12/4633 , H04L12/18 , H04L12/1886 , H04L12/4641 , H04L12/4675
Abstract: A multicast processing method, apparatus and system. A Virtual eXtensible Local Area Network (VXLAN) tunnel end point (VTEP) receives configuration information sent by a management layer; and receives a multicast packet sent by a VM managed by the VTEP; when performing VXLAN encapsulation on the multicast packet after determining that the virtual machine (VM) matches the VM tenant identifier, the VTEP encapsulates a destination address of the multicast packet into the multicast address on a layer 3 network according to a mapping relationship between a VM multicast address and a multicast address on the layer 3 network, and encapsulates a VXLAN source address of the multicast packet into a layer 3 network multicast source address according to a mapping relationship between a VM multicast source address and a layer 3 network multicast source address; and sends an encapsulated multicast packet to the layer 3 network.
Abstract translation: 多播处理方法,装置和系统。 虚拟可扩展局域网(VXLAN)隧道终点(VTEP)接收管理层发送的配置信息; 并接收由VTEP管理的VM发送的组播报文; 在确定虚拟机(VM)与VM租户标识符匹配后,在组播数据包上执行VXLAN封装时,VTEP根据虚拟机的映射关系将组播数据包的目的地址封装到第3层网络上的组播地址 组播地址和组播地址,并根据VM组播源地址和第3层网络组播源地址之间的映射关系,将组播数据包的VXLAN源地址封装为第3层网络组播源地址; 并将封装的组播数据包发送到第3层网络。
-
公开(公告)号:US20150236871A1
公开(公告)日:2015-08-20
申请号:US14702306
申请日:2015-05-01
Applicant: Huawei Technologies Co., Ltd.
Inventor: Yudong Kang
CPC classification number: H04L12/4633 , H04L12/18 , H04L12/1886 , H04L12/4641 , H04L12/4675
Abstract: A multicast processing method, apparatus and system. A Virtual eXtensible Local Area Network (VXLAN) tunnel end point (VTEP) receives configuration information sent by a management layer; and receives a multicast packet sent by a VM managed by the VTEP; when performing VXLAN encapsulation on the multicast packet after determining that the virtual machine (VM) matches the VM tenant identifier, the VTEP encapsulates a destination address of the multicast packet into the multicast address on a layer 3 network according to a mapping relationship between a VM multicast address and a multicast address on the layer 3 network, and encapsulates a VXLAN source address of the multicast packet into a layer 3 network multicast source address according to a mapping relationship between a VM multicast source address and a layer 3 network multicast source address; and sends an encapsulated multicast packet to the layer 3 network.
Abstract translation: 多播处理方法,装置和系统。 虚拟可扩展局域网(VXLAN)隧道终点(VTEP)接收管理层发送的配置信息; 并接收由VTEP管理的VM发送的组播报文; 在确定虚拟机(VM)与VM租户标识符匹配后,在组播数据包上执行VXLAN封装时,VTEP根据虚拟机的映射关系将组播数据包的目的地址封装到第3层网络上的组播地址 组播地址和组播地址,并根据VM组播源地址和第3层网络组播源地址之间的映射关系,将组播数据包的VXLAN源地址封装为第3层网络组播源地址; 并将封装的组播数据包发送到第3层网络。
-
3.
公开(公告)号:US09515987B2
公开(公告)日:2016-12-06
申请号:US14481149
申请日:2014-09-09
Applicant: Huawei Technologies Co., Ltd.
Inventor: Yudong Kang , Yingjie Gu
CPC classification number: H04L61/2575 , G06F9/45533 , G06F9/45558 , G06F2009/4557 , H04L61/2514 , H04L61/2528 , H04L61/2532 , H04L67/34
Abstract: A method, an apparatus, and a system for network address translation related to the field of communications technologies. A NAT control apparatus receives a network address migration message after a first data center migrates a NAT mapping entry corresponding to a migrated virtual machine VM to a second data center, verifies the network address migration message, and updates home information of the NAT mapping entry in a network address mapping table from the first data center to the second data center according to the network address migration message. In this way, NAT address resources in each data center can be properly planned, and a release attack problem caused by a fact that applying and using of a VM are not performed in a same data center can be solved.
Abstract translation: 一种与通信技术领域相关的网络地址转换的方法,装置和系统。 NAT控制装置在第一数据中心将与迁移的虚拟机VM相对应的NAT映射条目迁移到第二数据中心之后接收网络地址迁移消息,验证网络地址迁移消息,并更新NAT映射条目的归属信息 根据网络地址迁移消息,从第一数据中心到第二数据中心的网络地址映射表。 通过这种方式,可以适当地规划每个数据中心的NAT地址资源,并且不会在同一数据中心中执行由应用和使用虚拟机的事实引起的释放攻击问题。
-
4.
公开(公告)号:US20150012665A1
公开(公告)日:2015-01-08
申请号:US14481149
申请日:2014-09-09
Applicant: Huawei Technologies Co., Ltd.
Inventor: Yudong Kang , Yingjie Gu
CPC classification number: H04L61/2575 , G06F9/45533 , G06F9/45558 , G06F2009/4557 , H04L61/2514 , H04L61/2528 , H04L61/2532 , H04L67/34
Abstract: A method, an apparatus, and a system for network address translation related to the field of communications technologies. A NAT control apparatus receives a network address migration message after a first data center migrates a NAT mapping entry corresponding to a migrated virtual machine VM to a second data center, verifies the network address migration message, and updates home information of the NAT mapping entry in a network address mapping table from the first data center to the second data center according to the network address migration message. In this way, NAT address resources in each data center can be properly planned, and a release attack problem caused by a fact that applying and using of a VM are not performed in a same data center can be solved.
Abstract translation: 一种与通信技术领域相关的网络地址转换的方法,装置和系统。 NAT控制装置在第一数据中心将与迁移的虚拟机VM相对应的NAT映射条目迁移到第二数据中心之后接收网络地址迁移消息,验证网络地址迁移消息,并更新NAT映射条目的归属信息 根据网络地址迁移消息,从第一数据中心到第二数据中心的网络地址映射表。 通过这种方式,可以适当地规划每个数据中心的NAT地址资源,并且不会在同一数据中心中执行由应用和使用虚拟机的事实引起的释放攻击问题。
-
-
-