Services execution

1. A method for executing a service, comprising:

receiving, by an edge switch, a virtual machine (VM) classification policy and an executing policy corresponding to each VM class distributed by a policy controller, the executing policy comprising information of each service node for processing a message and an executing sequence of the each service node, wherein a virtual Extensible LAN (VXLAN) Tunnel End Point (VTEP) function and an Internet Protocol GateWay (IPGW) function are enabled on the edge switch, and a VTEP IP address, an IPGW IP address and an MAC address are configured for the edge switch;

receiving a message sent by a VM connected to the edge switch;

determining a VM class corresponding to the message according to the VM classification policy, and determining an executing policy corresponding to the VM class;

encapsulating the message according to information of each service node to be executed by a VM of the VM class and an executing sequence, and sending the message, so that the message is sequentially sent to the each service node to be executed by the VM of the VM class to execute a service policy;

wherein, sending the message comprises:

if the edge switch does not find an IP address of the first service node to be executed by the VM of the VM class in a local layer-2 MAC forwarding table, encapsulating, by the edge switch, an outer layer IP header and an outer layer MAC header into the message; in the outer layer IP header, an outer layer source IP address being the VTEP IP address of the edge switch or an IP address of the VM, and an outer layer destination IP address being the IP address of the first service node to be executed by the VM of the VM class; in the outer layer MAC header, an outer layer destination MAC address being the MAC address of the edge switch;

starting, by the edge switch, to perform forwarding processing for the message; discovering that the outer layer destination MAC address is a gateway MAC address; and determining to perform layer-3 forwarding processing; wherein the layer-3 forwarding processing comprises: searching, by the edge switch, for a VTEP according to the outer layer destination IP address of the message, and performing VXLAN encapsulation for the message according to the found VTEP; in a VXLAN header, a source IP address and a source MAC address being the VTEP IP address and the MAC address of the edge switch respectively, and a destination IP address and a destination MAC address being a found VTEP IP address and a found MAC address respectively; sending out the message.

2. The method of claim 1 , further comprising:

updating, by the edge switch, a VM classification policy stored by the edge switch, after receiving a updated VM classification policy distributed by the policy controller; or

updating, by the edge switch, an executing policy corresponding to one VM class stored by the edge switch, after receiving a updated executing policy corresponding to the VM class distributed by the policy controller.

3. The method of claim 1 , wherein encapsulating the message according to the information of each service node to be executed by the VM of the VM class and an executing sequence comprises:

encapsulating information of each service node to be executed by the VM of the VM class and information of each executed service node in an outer service information layer of the message according to the executing sequence;

encapsulating an address of a first service node to be executed by the VM of the VM class in an outer layer address header of the message as a destination address of the message.

4. An apparatus for executing a service, located at an edge switch, comprising:

a policy receiving module, to receive a VM classification policy and an executing policy corresponding to each VM class distributed by a policy controller; the executing policy comprising information of each service node for processing a message and an executing sequence of the each service node, wherein a virtual Extensible LAN (VXLAN) Tunnel End Point (VTEP) function and an Internet Protocol GateWay (IPGW) function are enabled on the edge switch, and a VTEP IP address, an IPGW IP address and an MAC address are configured for the edge switch;

a message processing module, to receive a message sent by a VM connected to the edge switch, determine a VM class corresponding to the message according to the VM classification policy, determine an executing policy corresponding to the VM class, encapsulate the message according to information of each service node to be executed by a VM of the VM class and an executing sequence, and sending the message, so that the message is sequentially sent to the each service node to be executed by the VM of the class to execute a service policy; and

when sending the message, the message processing module is to,

encapsulate an outer layer IP header and an outer layer MAC header into the message if the message processing module does not find an IP address of the first service node to be executed by the VM of the VM class in a local layer-2 MAC forwarding table; in the outer layer IP header, an outer layer source IP address being the VTEP IP address of the edge switch or an IP address of the VM, and an outer layer destination IP address being the IP address of the first service node to be executed by the VM of the VM class; in the outer layer MAC header, an outer layer destination MAC address being the MAC address of the edge switch;

start to perform forwarding processing for the message, discover that the outer layer destination MAC address is a gateway MAC address, and determine to perform layer-3 forwarding processing; in the layer-3 forwarding processing, the message processing module is to search for a VTEP according to the outer layer destination IP address of the message, and perform VXLAN encapsulation for the message according to the found VTEP; in a VXLAN header, a source IP address and a source MAC address being the VTEP IP address and the MAC address of the edge switch respectively, and a destination IP address and a destination MAC address being a found VTEP IP address and a found MAC address respectively; send the message.

5. The apparatus of claim 4 , wherein the policy receiving module is further to,

update a VM classification policy stored by the edge switch after receiving a updated VM classification policy distributed by the policy controller; or

update an executing policy corresponding to one VM class stored by the edge switch, after receiving a updated executing policy corresponding to the VM class distributed by the policy controller.

6. The apparatus of claim 4 , wherein when the message processing module encapsulates the message according to the information of each service node to be executed by the VM of the VM class and the executing sequence, the message processing module is to

encapsulate information of each service node to be executed by the VM of the VM class and information of each executed service node in an outer service information layer of the message according to the executing sequence, encapsulate an address of a first service node to be executed by the VM of the VM class into an outer layer address header of the message as a destination address of the message.