Method for virtual machine to access physical server in cloud computing system, apparatus, and system

1. A method for a virtual machine to access a physical server in a cloud computing system, the method comprising

allocating, by a cloud platform to a service, a publishing IP address and a publishing port;

recording a correspondence between the publishing IP address and the publishing port and an IP address and a port that are of a physical server hosting the service;

publishing the service;

receiving, by the cloud platform, a service application request from a virtual machine, and

sending a NAT (network address translation) rule to an access network element of the virtual machine, wherein the NAT rule comprises the correspondence between the publishing IP address and the publishing port and the IP address and the port of the physical server hosting the service;

receiving, by the access network element, a service access request from the virtual machine, wherein a destination address of the service access request includes the publishing IP address and the publishing port corresponding to the service;

replacing, by the access network element according to the NAT rule, the destination address of the service access request with the IP address and the port of the physical server;

routing the modified service access request to the physical server;

receiving, by the access network element, a service response message from the physical server; and

sending the service response message to the virtual machine.

2. The method according to claim 1 , wherein the publishing, by a cloud platform, the service comprises:

providing, by the cloud platform, a service presentation interface to the virtual machine, and

displaying service information, wherein the service information comprises an external display address of the service.

3. The method according to claim 2 , wherein the external display address comprises a domain name corresponding to the service, or the publishing IP address and the publishing port corresponding to the service.

4. The method according to claim 3 , wherein when the external display address of the service includes the domain name corresponding to the service, before the receiving, by the cloud platform, a service application request sent by a virtual machine, the method further comprises:

delivering, by the cloud platform, a correspondence between the domain name and the publishing IP address and the publishing port to a domain name system (DNS) server, so that when initiating a domain name parsing operation, the virtual machine obtains, based on the domain name, the publishing IP address and the publishing port corresponding to the service from the DNS server.

5. The method according to claim 2 , wherein after the receiving, by the cloud platform, a service application request from a virtual machine, the method further comprises:

returning, by the cloud platform, a service application response to the virtual machine, wherein the service application response includes the external display address.

6. The method according to claim 5 , wherein after the service application request is approved, the method further comprises:

recording, by the cloud platform, authorization information of a user to which the virtual machine belongs, wherein the authorization information of the user comprises a user identifier, a virtual machine identifier, and an account and a password that are allocated to the user.

7. The method according to claim 6 , further comprising:

receiving, by the cloud platform, a creation request of the virtual machine,

creating another virtual machine for the user, and

delivering the NAT rule to an access network element to which the another virtual machine connects.

8. The method according to claim 1 , further comprising:

terminating, by the cloud platform, service authorization for the virtual machine, and

sending a deletion message to the access network element, to instruct the access network element to delete the NAT rule of the virtual machine.

9. A cloud computing system, comprising:

a cloud platform;

a physical server having a service deployed therein; and

an access network element,

wherein the cloud platform is configured to:

allocate, to the service, a publishing IP address and a publishing port,

record a correspondence between the publishing IP address and the publishing port and an IP address and a port of the physical server,

publish the service,

receive a service application request from a virtual machine, and

send a NAT (network address translation) rule to the access network element, wherein the NAT rule comprises the correspondence between the publishing IP address and the publishing port and the IP address and the port of the physical server hosting the service, and

wherein the access network element is configured to

receive a service access request from the virtual machine, wherein a destination address of the service access request includes the publishing IP address and the publishing port that correspond to the service,

replace, according to the NAT rule, the destination address of the service access request with the IP address and the port of the physical server,

route the modified service access request to the physical server, and

receive a service response message from the physical server.

10. The system according to claim 9 , wherein

a source address of the service response message includes the IP address and the port of the physical server; and

the access network element is further configured to:

replace, according to the NAT rule, the source address of the service response message with the publishing IP address and the publishing port that correspond to the service, and

send the modified service response message to the virtual machine.

11. The system according to claim 9 , wherein the cloud platform is further configured to:

provide a service presentation interface to the virtual machine, and

display service information, wherein the service information comprises an external display address of the service.

12. The system according to claim 11 , wherein

the external display address comprises a domain name corresponding to the service, or the publishing IP address and the publishing port corresponding to the service.

13. The system according to claim 12 , wherein when the external display address of the service includes the domain name corresponding to the service:

the cloud platform is further configured to deliver, to a domain name system (DNS) server, a correspondence between the domain name and the publishing IP address and the publishing port; and

the virtual machine is configured to:

initiate a domain name parsing operation, and

obtain, based on the domain name, the publishing IP address and the publishing port that correspond to the service from the DNS server.

14. The system according to claim 11 , wherein

the cloud platform is further configured to return a service application response to the virtual machine, wherein the service application response includes the external display address.

15. The system according to claim 14 , wherein

the cloud platform is further configured to record authorization information of a user to which the virtual machine belongs, wherein the authorization information of the user comprises a user identifier, a virtual machine identifier, and an account and a password that are allocated to the user.

16. The system according to claim 15 , wherein the cloud platform is further configured to:

receive a creation request of the virtual machine,

create another virtual machine for the user, and

deliver the NAT rule to an access network element to which the another virtual machine connects.

17. The system according to claim 1 , wherein the cloud platform is further configured to:

terminate service authorization for the virtual machine, and

send a deletion message to the access network element, to instruct the access network element to delete the NAT rule of the virtual machine.

18. A method for a virtual machine to access a physical server in a cloud computing system, the method comprising

forwarding, by an access network element, a service application request of a virtual machine to a cloud platform;

receiving, by the access network element, a NAT (network address translation) rule of the virtual machine that is returned by the cloud platform, wherein the NAT rule comprises a correspondence between a publishing IP address and a publishing port and an IP address and a port of the physical server hosting the service;

receiving, by the access network element, a service access request from the virtual machine, wherein a destination address of the service access request includes the publishing IP address and the publishing port corresponding to the service;

replacing, by the access network element according to the NAT rule, the destination address of the service access request with the IP address and the port of the physical server;

routing the modified service access request to the physical server; and

receiving a service response message returned by the physical server.

19. The method according to claim 18 , wherein a source address of the service response message includes the IP address and the port that are of the physical server, and the method further comprises:

replacing, by the access network element according to the NAT rule, the source address of the service response message with the publishing IP address and the publishing port that correspond to the service, and

sending the modified service response message to the virtual machine.

20. An access apparatus, comprising:

a processor; and

a memory for storing instructions, which when executed by the processor, causing the processor to perform operations, the operations including:

forwarding a service application request associated with a service from a virtual machine to a cloud platform;

receiving a NAT (network address translation) rule of the virtual machine that is returned by the cloud platform after the cloud platform approves the service application request, wherein the NAT rule comprises a correspondence between the publishing IP address and the publishing port and an IP address and a port of the physical server hosting the service, wherein

receiving a service access request from the virtual machine, wherein a destination address of the service access request includes the publishing IP address and the publishing port that correspond to the service;

replacing, according to the NAT rule, the destination address of the service access request with the IP address and the port of the physical server;

routing the modified service access request to the physical server;

receiving a service response message from the physical server.