Granted Patent B2

US 12,495,000 · App. 18/685,218 · Granted Dec 9, 2025

Inventors: Shunmin Zhu (Hangzhou, CN); Yisong Qiao (Hangzhou, CN); Nianbing Yu (Hangzhou, CN); Zikang Chen (Hangzhou, CN)

Assignee: Hangzhou AliCloud Feitian Information Technology Co., Ltd.

H04L45/76H04L45/02H04L45/745

Abstract

Claims (101)

1 . A method for controlling a flow entry applied to a source host machine in which a target virtual machine is located before the target virtual machine is migrated to a target host machine, comprising:

receiving a data message sent by a user;

determining a target flow entry that is matched with the data message,

wherein the target flow entry is one of at least one flow entry corresponding to the target virtual machine in the source host machine,

wherein a first version number of the target virtual machine is in the target flow entry, and

wherein, in response to the target virtual machine being migrated to the target host machine, a second version number of the target virtual machine is generated; and

in response to the first version number of the target virtual machine in the target flow entry being inconsistent with the second version number of the target virtual machine recorded in the source host machine:

deleting a flow entry comprising the first version number in the source host machine, and

sending the data message to the target host machine through a virtual switch on the source host machine.

2 . The method according to claim 1 , further comprising:

before receiving the data message sent by the user, generating the first version number of the target virtual machine and adding the first version number to the at least one flow entry;

determining that the target virtual machine is migrated from the source host machine to the target host machine; and

in response to determining that the target virtual machine is migrated from the source host machine to the target host machine, recording the second version number of the target virtual machine after migration.

3 . The method for according to claim 1 , further comprising:

in response to the target flow entry that is matched with the data message not being found:

generating a first flow entry according to the data message through the virtual switch, and

adding the first version number to the first flow entry.

4 . The method according to claim 3 , wherein the generating the first flow entry according to the data message through the virtual switch comprises:

establishing a long connection data channel with a client of the user according to a client identifier of the user comprised in the data message through the virtual switch, and

constructing the first flow entry according to a result of establishment of the long connection data channel through the virtual switch, wherein the first flow entry comprises interface configuration information of the long connection data channel.

5 . The method according to claim 1 , further comprising:

in response to the first version number of the target virtual machine in the target flow entry being inconsistent with the second version number of the target virtual machine recorded in the source host machine:

generating a second flow entry corresponding to the data message through the virtual switch,

adding the second version number to the second flow entry through the virtual switch,

performing forwarding processing on the data message according to the second flow entry through the virtual switch, and

delivering the second flow entry to the target host machine through the virtual switch.

6 . The method according to claim 5 , wherein the generating the second flow entry corresponding to the data message through the virtual switch comprises:

establishing a long connection data channel between the target host machine and a client of the user according to a client identifier of the user comprised in the data message through the virtual switch, and

constructing the second flow entry according to a result of establishment of the long connection data channel through the virtual switch, wherein the second flow entry comprises interface configuration information of the long connection data channel.

7 . The method according to claim 1 , further comprising:

in response to the first version number of the target virtual machine in the target flow entry being consistent with the second version number of the target virtual machine recorded in the source host machine:

determining an attribute identifier of the data message,

determining, in the target flow entry, a set of actions corresponding to the attribute identifier, and

forwarding the data message according to the set of actions.

8 . The method according to claim 1 , wherein the determining the target flow entry that is matched with the data message comprises:

determining, according to a user identifier of the user, the target virtual machine associated with the user in the source host machine,

determining the at least one flow entry corresponding to the target virtual machine, and

determining the target flow entry that is matched with the data message according to tuple data comprised in a header field of each flow entry.

9 . The method according to claim 1 , wherein, in response to the first version number of the target virtual machine comprised in the target flow entry being consistent with the second version number of the target virtual machine recorded in the source host machine, determining that the target flow entry is a hit; and

in response to the target flow entry being a hit, the method further comprises:

counting a number of hits of the target flow entry within a target time interval, and

in response to the number of hits being less than a preset number threshold, deleting the flow entry comprising the first version number in the source host machine.

10 . A non-transitory computer-readable storage medium, having computer-executable instructions stored thereon, wherein in response to the computer-executable instructions being executed by a processor, the steps of the method according to claim 1 are implemented.

11 . A network interface card in a source host machine in which a target virtual machine is located before the target virtual machine is migrated to a target host machine, comprising:

a memory and a processor,

wherein the memory is configured to store computer-executable instructions,

wherein the processor is configured to execute the computer-executable instructions, and

wherein, in response to the computer-executable instructions being executed by the processor, the processor is configured to:

receive a data message sent by a user, and

determine a target flow entry that is matched with the data message,

wherein the target flow entry is one of at least one flow entry corresponding to the target virtual machine in the source host machine,

wherein a first version number of the target virtual machine is in the target flow entry,

wherein, in response to the target virtual machine being migrated to the target host machine, a second version number of the target virtual machine is generated, and

wherein, in response to the first version number of the target virtual machine in the target flow entry being inconsistent with the second version number of the target virtual machine recorded in the source host machine, the processor is further configured to:

 delete a flow entry comprising the first version number in the source host machine, and

 send the data message to the target host machine through a virtual switch on the source host machine.

12 . The network interface card according to claim 11 , wherein the processor is further configured to:

before receiving the data message sent by the user, generate the first version number of the target virtual machine and add the first version number to the at least one flow entry; and

in response to determining that the target virtual machine is migrated from the source host machine to the target host machine, record the second version number of the target virtual machine after migration.

13 . The network interface card according to claim 11 , wherein the processor is further configured to:

in response to the target flow entry that is matched with the data message not being found,

generate a first flow entry according to the data message through the virtual switch, and

add the first version number to the first flow entry.

14 . The network interface card according to claim 13 , wherein the processor is configured to:

establish a long connection data channel with a client of the user according to a client identifier of the user comprised in the data message through the virtual switch, and

construct the first flow entry according to a result of establishment of the long connection data channel through the virtual switch, wherein the first flow entry comprises interface configuration information of the long connection data channel.

15 . The network interface card according to claim 11 , wherein the processor is further configured to:

in response to the first version number of the target virtual machine comprised in the target flow entry being inconsistent with the second version number of the target virtual machine recorded in the source host machine:

generate a second flow entry corresponding to the data message through the virtual switch,

add the second version number to the second flow entry through the virtual switch,

perform forwarding processing on the data message according to the second flow entry through the virtual switch, and

deliver the second flow entry to the target host machine through the virtual switch.

16 . The network interface card according to claim 15 , wherein the processor is configured to:

establish a long connection data channel between the target host machine and a client of the user according to a client identifier of the user comprised in the data message through the virtual switch, and

construct the second flow entry according to a result of establishment of the long connection data channel through the virtual switch, wherein the second flow entry comprises interface configuration information of the long connection data channel.

17 . The network interface card according to claim 11 , wherein the processor is further configured to:

in response to the first version number of the target virtual machine comprised in the target flow entry being consistent with the second version number of the target virtual machine recorded in the source host machine:

determine an attribute identifier of the data message,

determine, in the target flow entry, a set of actions corresponding to the attribute identifier, and

forward the data message according to the set of actions.

18 . The network interface card according to claim 11 , wherein the processor is configured to:

determine, according to a user identifier of the user, the target virtual machine associated with the user in the source host machine,

determine the at least one flow entry corresponding to the target virtual machine, and

determine the target flow entry that is matched with the data message according to tuple data comprised in a header field of each flow entry.

19 . The network interface card according to claim 11 , wherein in response to the first version number of the target virtual machine in the target flow entry being consistent with the second version number of the target virtual machine recorded in the source host machine, determining that the target flow entry is a hit;

in response to the target flow entry being a hit, the processor is further configured to:

count a number of hits of the target flow entry within a target time interval; and

in response to the number of hits being less than a preset number threshold, delete the flow entry comprising the first version number in the source host machine.

20 . A computing device in a source host machine in which a target virtual machine is located before the target virtual machine is migrated to a target host machine, comprising:

a memory and a processor,

wherein the memory is configured to store computer-executable instructions,

wherein the processor is configured to execute the computer-executable instructions, and

wherein, in response to the computer-executable instructions being executed by the processor, the processor is configured to:

receive a data message sent by a user, and

determine a target flow entry that is matched with the data message,

wherein the target flow entry is one of at least one flow entry corresponding to the target virtual machine in the source host machine,

wherein a first version number of the target virtual machine is in the target flow entry,

wherein, in response to the target virtual machine being migrated to the target host machine, a second version number of the target virtual machine is generated, and

wherein, in response to the first version number of the target virtual machine in the target flow entry being inconsistent with the second version number of the target virtual machine recorded in the source host machine, the processor is further configured to:

 delete a flow entry comprising the first version number in the source host machine, and

 send the data message to the target host machine through a virtual switch run on the source host machine.

Assignments (2)

Priority Claims (1)

Continuity (1)

References Cited (26)