Multistage flow table management and control method and system for virtual machine

Abstract

The invention discloses a multistage flow table management and control method and system for a virtual machine. The multistage flow table management and control method for the virtual machine comprises the following steps: generating a port-mac binding flow table rule, and issuing the port-mac binding flow table rule to a flow table 0; registering an idle flow table N, and issuing the port-mac binding flow table rule to the flow table N; generating a multi-level flow table distribution rule, and issuing the multi-level flow table distribution rule to the flow table 1; and when the message enters the Openflow switch, when it is determined that the message is sent by a virtual machine according to a port-mac binding flow table rule of a flow table 0, forwarding the flow table of the messageto a corresponding flow table N according to a multi-stage flow table distribution rule of a flow table 1. According to the management and control method and system provided by the invention, the flowtable of the Openflow switch and the Mac address of the virtual machine access network card are used as unique identifiers of virtual machine network resources; according to the method, rapid indexing and resource allocation of the SDN controller are realized, and the virtual machine Mac address is used as a key matching item for multistage flow table distribution, so that the effect of preventing the virtual machine from maliciously modifying the Mac address can be achieved.

Description

technical field [0001] The invention belongs to the field of network communication equipment, in particular to a virtual machine-oriented multi-level flow table management and control method and system. Background technique [0002] OpenFlow switches that follow the OpenFlow standard have built-in multi-level flow table processing logic, and each level of flow table contains multiple flow table rules. The F multi-level flow table is arranged in numerical order, and the starting index number starts from 0. Any message entering the OpenFlow switch will be processed from Table 0. According to the Openflow standard protocol, the available range of the Flow Table ID of the Openflow switch is 0-253 , a total of 254 Flow Tables. [0003] When a packet enters the flow table for processing, the packet will be matched with all the flow table rules in the flow table one by one according to the Priority (priority). When a flow table rule that matches successfully is found, the flow tab...

AI Technical Summary

Problems solved by technology

[0011] The business functions of the cloud network, such as security groups, ACL, Subnet, NAT, Vpc, Route, etc., are allocated to different Flow Tables through pipelines. This solution can improve the management of the cloud network However, it is still unable to solve the flow table rules of a certain virtual machine, which causes the network forwarding performance of other virtual machines to be damaged.

Images