Active-active cluster control method and control node

1. An active-active cluster control method implemented by a control node, wherein the active-active cluster control method comprises:

receiving, from a first network processing node in an active-active cluster, a first query request carrying first forwarding information of a first packet, wherein the first forwarding information records a first sending direction of the first packet as an outbound direction;

configuring an outbound forwarding rule based on the first forwarding information;

generating an inbound forwarding rule whose direction is opposite to that of the outbound forwarding rule;

recording the outbound forwarding rule and the inbound forwarding rule;

sending the outbound forwarding rule to the first network processing node;

receiving, from a second network processing node in the active-active cluster, a second query request carrying second forwarding information of a second packet, wherein the second forwarding information records a second sending direction of the second packet as an inbound direction;

determining that the second forwarding information matches the inbound forwarding rule;

obtaining, based on the second forwarding information, the inbound forwarding rule; and

sending the inbound forwarding rule to the second network processing node.

2. The active-active cluster control method of claim 1 , further comprising recording a public Internet Protocol (IP) address and a range of available public network ports, wherein the first forwarding information comprises a first source IP address of the first packet and a first source port of the first packet; wherein the configuring comprises selecting a public network port from the range of available public network ports, wherein the public network port corresponds in a one-to-one manner to the first source IP address and the first source port, wherein the outbound forwarding rule comprises a correspondence between the first source IP address and the first source port and the public IP address and the public network port, and wherein the outbound forwarding rule instructs a third network processing node, in the active-active cluster, that receives the outbound forwarding rule to modify a second source IP address of a third packet that comprises a third sending direction as the outbound direction to the public IP address and to modify a second source port of the third packet to the public network port.

3. The active-active cluster control method of claim 2 , further comprising further generating the inbound forwarding rule based on the correspondence that is recorded in the outbound forwarding rule, wherein the inbound forwarding rule comprises the correspondence, and wherein the inbound forwarding rule instructs a fourth network processing node, in the active-active cluster, that receives the inbound forwarding rule to modify a first destination IP address of a fourth packet that comprises a fourth sending direction as the inbound direction to the first source IP address and to modify a first destination port of the fourth packet to the first source port.

4. The active-active cluster control method of claim 3 , wherein the second forwarding information comprises a second destination IP address of the second packet and a second destination port of the second packet, and wherein determining that the second forwarding information matches the inbound forwarding rule comprises:

determining that the second destination IP address is the public IP address; and

determining that the second destination port is the public network port.

5. The active-active cluster method of claim 2 , wherein the first packet is received from a client to a server, wherein the client and the active-active cluster are set in a virtual private cloud (VPC) network, and wherein the public IP address is set in the VPC network.

6. The active-active cluster control method of claim 1 , wherein the first forwarding information comprises a first source network address of the first packet and a first destination network address of the first packet, and wherein the configuring comprises:

further configuring the outbound forwarding rule based on the first source network address and the first destination network address, wherein the outbound forwarding rule comprises a correspondence between the first source network address and the first destination network address, and wherein the outbound forwarding rule instructs a third network processing node, in the active-active cluster, that receives the outbound forwarding rule to determine whether a second destination network address of a third packet that comprises a third sending direction is as the outbound direction is a preset network address;

sending the third packet based on the second destination network address when the second destination network address is the preset network address; and

discarding the third packet when the second destination network address is not the preset network address.

7. The active-active cluster control method of claim 6 , wherein the generating comprises:

configuring the inbound forwarding rule based on the first source network address and the first destination network address in the outbound forwarding rule, wherein the inbound forwarding rule comprises the correspondence, and wherein the inbound forwarding rule instructs a fourth network processing node, in the active-active cluster, that receives the inbound forwarding rule to determine whether a third destination network address of a fourth packet that comprises a fourth sending direction as the inbound direction is the first source network address;

sending the fourth packet based on the third destination network address when the third destination network address is the first source network address; and

discarding the fourth packet when the third destination network address is not the first source network address.

8. The active-active cluster control method of claim 7 , wherein the second forwarding information comprises a fourth destination network address of the second packet, and wherein the determining further determining that the fourth destination network address is the first source network address.

9. A control node comprising:

a memory configured to store computer-executable instructions; and

a processor coupled to the memory, wherein when executed by the processor, the computer-executable instructions cause the control node to:

receive, from a first network processing node in an active-active cluster, a first query request carrying first forwarding information of a first packet, wherein the first forwarding information records a first sending direction of the first packet as an outbound direction;

configure an outbound forwarding rule based on the first forwarding information;

generate an inbound forwarding rule whose direction is opposite to that of the outbound forwarding rule;

record the outbound forwarding rule and the inbound forwarding rule;

send the outbound forwarding rule to the first network processing node;

receive, from a second network processing node in the active-active cluster, a second query request carrying second forwarding information of a second packet, wherein the second forwarding information records a second sending direction of the second packet as an inbound direction;

determine that the second forwarding information matches the inbound forwarding rule;

obtain, based on the second forwarding information, the inbound forwarding rule; and

send the inbound forwarding rule to the second network processing node.

10. The control node of claim 9 , wherein when executed by the processor, the computer-executable instructions cause the control node to;

record a public Internet Protocol (IP) address and a range of available public network ports, wherein the first forwarding information comprises a first source IP address of the first packet and a first source port of the first packet; and

select a public network port from the range of available public network ports, wherein the public network port corresponds in a one-to-one to the first source IP address and the first source port, wherein the outbound forwarding rule comprises a correspondence between the first source IP address and the first source port and the public IP address and the public network port, and wherein the outbound forwarding rule instructs a third network processing node, in the active-active cluster, that receives the outbound forwarding rule to modify a second source IP address of a third packet that comprises a third sending direction as the outbound direction to the public IP address and to modify a second source port of the third packet.

11. The control node of claim 10 , wherein when executed by the processor, the computer-executable instructions further cause the control node to further generate the inbound forwarding rule based on the correspondence wherein the inbound forwarding rule comprises the correspondence, and wherein the inbound forwarding rule is instructs a fourth network processing node, in the active-active cluster, that receives the inbound forwarding rule to modify a first destination IP address of a fourth packet that comprises a fourth sending direction as the inbound direction to the first source address and to modify a first destination port of the fourth packet to the first source port.

12. The control node of claim 11 , wherein the second forwarding information comprises a second destination IP address of the second packet and a second destination port of the second packet, and wherein when executed by the processor, the computer-executable instructions further cause the control node to:

determine that the second destination IP address is the public IP address; and

determine that the second destination port is the public network port.

13. The control node of claim 10 , wherein the first packet is rom a client to a server, wherein the client and the active-active cluster are set in a virtual private cloud (VPC) network, and wherein the public IP address is set in the VPC network.

14. The control node of claim 9 , wherein the first forwarding information comprises a first source network address of the first packet and a first destination network address of the first packet, and wherein when executed by the processor, the computer-executable instructions further cause the control node to:

further configure the outbound forwarding rule based on the first source network address and the first destination network address, wherein the outbound forwarding rule comprises a correspondence between the first source network address and the first destination network address, and wherein the outbound forwarding rule instructs a third network processing node, in the active-active cluster, that receives the outbound forwarding rule to determine whether a second destination network address of a third packet that comprises a third sending direction as the outbound direction is a preset network address;

send the third packet based on the second destination network address when the second destination network address is the preset network address; and

discard the third packet when the second destination network address is not the preset network address.

15. The control node of claim 14 , wherein when executed by the processor, the computer-executable instructions further cause the control node to:

configure the inbound forwarding rule based on the first source network address and the first destination network address in the outbound forwarding rule, wherein the inbound forwarding rule comprises the correspondence, and wherein the inbound forwarding rule instructs a fourth network processing node, in the active-active cluster, that receives the inbound forwarding rule to determine whether a third destination network address of a fourth packet that comprises a fourth sending direction as the inbound direction is the first source network address;

send the fourth packet based on the third destination network address when the third destination network address is the first source network address; and

discard the fourth packet when the third destination network address is not the first source network address.

16. The control node of claim 15 , wherein the second forwarding information comprises a fourth destination network address of the second packet, and wherein when executed by the processor, the computer-executable instructions further cause the control node to: determine that the fourth destination network address is the first source network address of the first packet.

17. A computer program product comprising computer-executable instructions that are stored on a non-transitory computer-readable medium and that, when executed by a processor, cause a control node to:

receive, from a first network processing node in an active-active cluster, a first query request carrying first forwarding information of a first packet, wherein the first forwarding information records a first sending direction of the first packet as an outbound direction;

configure an outbound forwarding rule based on the first forwarding information;

generate an inbound forwarding rule whose direction is opposite to that of the outbound forwarding rule;

record the outbound forwarding rule and the inbound forwarding rule;

send the outbound forwarding rule to the first network processing node;

receive, from a second network processing node in the active-active cluster, a second query request carrying second forwarding information of a second packet, wherein the second forwarding information records a second sending direction of the second packet as an inbound direction;

determine that the second forwarding information matches the inbound forwarding rule;

obtain, based on the second forwarding information, the inbound forwarding rule; and

send the inbound forwarding rule to the second network processing node.

18. The computer program product of claim 17 , wherein the computer-executable instructions further cause the control node to:

record a public Internet Protocol (IP) address and a range of available public network ports, wherein the first forwarding information comprises a first source IP address of the first packet and a first source port of the first packet; and

select a public network port from the range of available public network ports, wherein the public network port corresponds in a one-to-one to the first source IP address and the first source port, wherein the outbound forwarding rule comprises a correspondence between the first source IP address and the first source port and the public IP address and the public network port, and wherein the outbound forwarding rule instructs a third network processing node, in the active-active cluster, that receives the outbound forwarding rule to modify a second source IP address of a third packet that comprises a third sending direction as the outbound direction to the public IP address and to modify a second source port of the third packet.

19. The computer program product of claim 18 , wherein the computer-executable instructions further cause the control node to further generate the inbound forwarding rule based on the correspondence, wherein the inbound forwarding rule comprises the correspondence, and wherein the inbound forwarding rule instructs a fourth network processing node, in the active-active cluster, that receives the inbound forwarding rule to modify a first destination IP address of a fourth packet that comprises a fourth sending direction as the inbound direction to the first source address and to modify a first destination port of the fourth packet to the first source port.

20. The computer program product of claim 19 , wherein the second forwarding information comprises a second destination IP address of the second packet and a second destination port of the second packet, and wherein the computer-executable instructions further cause the control node to:

determine that the second destination IP address is the public IP address; and

determine that the second destination port is the public network port.