CN103780467B - communication connection method, communication device and communication system - Google Patents

Abstract

The embodiment of the invention discloses a communication connection method, a communication device and a communication system. The method includes: a first request message sent by a network station point when the load of the network station point is higher than a first load is received, wherein the first request message includes a VPC (Virtual Private Cloud) establishment request, an ID (Identity) of the network station point and first tunnel attribute information; a target VPC is established according to the VPC establishment request; the target VPC and a first PE (Provider Edge) are connected; the ID of the network station point and the first tunnel attribute information are sent to the first PE so that the first PE is enabled to acquire second VPN (Virtual Private Network) configuration information and an address of a second PE according to the ID of the network station point, and determine first VPN configuration information according to the second VPN configuration information and establish VPN connection and channel connection with the second PE according to the first VPN configuration information, the address of the second PE and the first tunnel attribute information so that communication connection between the target VPC and the network station point is realized. The communication connection method, the communication device and the communication system are capable of realizing timely communication connection according to the needs of the network station point so that connection efficiency is improved.

Description

Communication connection method, communication device and communication system

technical field

The present invention relates to the communication field, in particular to a communication connection method, a communication device and a communication system.

Background technique

Cloud computing technology is a technology that uses the cloud to process data of a network site (such as an enterprise computer system, etc.), and returns the processing results to the network site.

When applying cloud computing technology, the network site rents equipment in the cloud to form a virtual private cloud (Virtual Private Cloud, VPC). When the data processing capability of the network site cannot meet the requirements, establish a connection between the network site and the VPC, and use the VPC for data processing; and maintenance costs.

However, in the existing method, the connection between the network site and the VPC is usually manually controlled by a network manager, and the connection efficiency needs to be improved.

Contents of the invention

Embodiments of the present invention provide a communication connection method, a communication device, and a communication system, which can improve connection efficiency.

The embodiment of the present invention adopts following technical scheme:

In the first aspect, a communication connection method is provided, including:

Receiving a first request message sent by a network site when the load of the network site is higher than the first load, the first request message includes a request for creating a VPC, an identifier (IDentity, ID) of the network site, and a first tunnel Attribute information; create a target VPC according to the request for creating a VPC; connect the target VPC with a first provider edge device (provider edge, PE); send the ID of the network site and the first PE to the first PE Tunnel attribute information, so that the first PE obtains second virtual private network (Virtual Private Network, VPN) configuration information and the address of the second PE according to the ID of the network site, and determines the the first VPN configuration information matching the second VPN configuration information, and according to the first VPN configuration information, the address of the second PE, and the first tunnel attribute information, establish a connection with the second PE VPN connection and tunnel connection between, thereby realizing the communication connection between the target VPC and the network site, the second VPN configuration information is the VPN configuration information of the second PE, and the second PE is the VPN configuration information of the Access equipment at a network site.

In a first possible implementation manner of the first aspect, the connecting the target VPC and the first operator edge device (PE) includes: creating a virtual customer edge device (virtual customer edge, PE) corresponding to the target VPC. VCE); connect to the first PE through the VCE.

With reference to the first aspect, or the first possible implementation manner of the first aspect, in the second possible implementation manner of the first aspect, the method further includes: receiving the second request message, the second request message includes a request for updating the communication connection, second tunnel attribute information, and the ID of the network site; after determining that the network site needs to update the communication connection according to the request for updating the communication connection, send the The first PE sends the second tunnel attribute information and the ID of the network site, so that the first PE according to the ID of the network site, the address of the second PE, and the second tunnel attribute information, Updating the attribute of the tunnel between the first PE and the second PE, so as to update the attribute of the communication connection between the target VPC and the network site.

In a second aspect, another communication connection method is provided, including: connecting to a target VPC located in the cloud; receiving the ID of the network site and the first tunnel attribute information sent by the cloud, the ID of the network site and the first tunnel The attribute information is sent by the network site when the load of the network site is higher than the first load; the second VPN configuration information and the address of the second PE are obtained according to the ID of the network site, and the second VPN configuration information is VPN configuration information of the second PE, where the second PE is an access device of the network site; determining first VPN configuration information matching the second VPN configuration information according to the second VPN configuration information ; According to the first VPN configuration information, the address of the second PE, and the first tunnel attribute information, establish a VPN connection and a tunnel connection with the second PE, so as to realize the connection between the target VPC and the Communication link between network sites.

In a first possible implementation manner of the second aspect, the obtaining the second VPN configuration information and the address of the second PE according to the ID of the network site includes: using the ID of the network site, querying the database for the The second VPN configuration information and the address of the second PE, the database pre-stores the address of the second PE corresponding to the ID of the network site and the second VPN configuration information corresponding to the ID of the network site.

In combination with the second aspect, or the first possible implementation of the second aspect, in the second possible implementation of the second aspect, it further includes: receiving the ID of the website sent by the cloud and second tunnel attribute information; according to the ID of the network site, the address of the second PE, and the second tunnel attribute information, update the tunnel attribute between the first PE and the second PE, thereby updating The attribute of the communication connection between the target VPC and the network site.

In a third possible implementation manner of the second aspect, the connecting to the target VPC located in the cloud includes: connecting to the target VPC through a VCE located in the cloud.

In a third aspect, a cloud device is provided, including: a first receiving module, configured to receive a first request message sent by a network site when the load of the network site is higher than the first load, the first request message includes creating The request of the VPC, the ID of the network site and the first tunnel attribute information; the creation module is used to create a target VPC according to the request for creating a VPC; the connection module is used to connect the target VPC and the first PE; the first A sending module, configured to send the ID of the network site and the first tunnel attribute information to the first PE, so that the first PE obtains the second VPN configuration information and the second PE according to the ID of the network site and determine the first VPN configuration information matching the second VPN configuration information according to the second VPN configuration information, and determine the first VPN configuration information according to the first VPN configuration information, the address of the second PE, and the The first tunnel attribute information is to establish a VPN connection and a tunnel connection with the second PE, so as to realize the communication connection between the target VPC and the network site, and the second VPN configuration information is the second PE VPN configuration information, the second PE is an access device of the network site.

In a first possible implementation manner of the third aspect, the connection module includes: a creation unit, configured to create a VCE corresponding to the target VPC; a connection unit, configured to connect the first PE through the VCE .

With reference to the third aspect, or the first possible implementation manner of the third aspect, in a second possible implementation manner of the third aspect, it further includes: a second receiving module, configured to receive the network The second request message sent by the station, the second request message includes a request to update the communication connection, the second tunnel attribute information and the ID of the network station; the second sending module is configured to determine according to the request for updating the communication connection After the network station needs to update the communication connection, it sends the second tunnel attribute information and the ID of the network station to the first PE, so that the first PE The PE address and the second tunnel attribute information update the tunnel attribute between the first PE and the second PE, thereby updating the communication connection attribute between the target VPC and the network site.

In a fourth aspect, a communication device is provided, including: a first connection module, configured to connect to a target VPC located in the cloud; a first receiving module, configured to receive the ID of the network site and the first tunnel attribute information sent by the cloud, The ID of the network site and the first tunnel attribute information are sent by the network site when the load of the network site is higher than the first load; the obtaining module is used to obtain the second VPN according to the ID of the network site Configuration information and the address of the second PE, the second VPN configuration information is the VPN configuration information of the second PE, and the second PE is the access device of the network site; the determining module is configured to, according to the The second VPN configuration information determines the first VPN configuration information that matches the second VPN configuration information; the second connection module is configured to, according to the first VPN configuration information, the address of the second PE, and the first VPN configuration information, A tunnel attribute information, establishing a VPN connection and a tunnel connection with the second PE, so as to realize the communication connection between the target VPC and the network site.

In a first possible implementation manner of the fourth aspect, the acquiring module is specifically configured to query a database for the second VPN configuration information and the address of the second PE by using the ID of the network site, so The database pre-stores the address of the second PE corresponding to the ID of the network site and the second VPN configuration information corresponding to the ID of the network site.

In combination with the fourth aspect, or the first possible implementation of the fourth aspect, in the second possible implementation of the fourth aspect, it further includes: a second receiving module, configured to receive the The ID of the network site and the second tunnel attribute information; a third connection module, configured to update the first PE according to the ID of the network site, the address of the second PE, and the second tunnel attribute information and the tunnel attribute between the second PE, so as to update the communication connection attribute between the target VPC and the network site.

In a third possible implementation manner of the fourth aspect, the first connection module is specifically configured to connect to the target VPC through a virtual customer edge device (VCE) located in the cloud.

In a fifth aspect, a communication system is provided, including the cloud device provided in any possible implementation manner of the third aspect and the communication device provided in any possible implementation manner of the fourth aspect.

In the communication connection method, communication device, and communication system provided by the embodiments of the present invention, after the receiving network site automatically sends a request message including the request for creating a VPC, the ID of the network site, and the first tunnel attribute information, the VPC is created according to the request for creating a VPC. The target VPC connects the target VPC and the first PE, sends the ID of the network site and the first tunnel attribute information to the first PE, so that the first PE obtains the second VPN configuration information and the address of the second PE according to the ID of the network site, and According to the second VPN configuration information, the matching first VPN configuration information is obtained, and according to the first VPN configuration information, the address of the second PE and the first tunnel attribute information, a VPN connection and a tunnel connection with the second PE are established to realize The communication connection between the target VPC and the network site. Since the request message is automatically sent by the network site, it is possible to establish a communication connection in time according to the needs of the network site, thereby improving connection efficiency.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings that need to be used in the description of the embodiments will be briefly introduced below. Obviously, the drawings in the following description are only some embodiments of the present invention. For those skilled in the art, other drawings can also be obtained based on these drawings without creative effort.

FIG. 1 is a flowchart of a communication connection method 100 provided by an embodiment of the present invention;

FIG. 2 is a flowchart of another communication connection method 100 provided by an embodiment of the present invention;

FIG. 3 is a flowchart of a communication connection method 200 provided by an embodiment of the present invention;

FIG. 4 is a flowchart of another communication connection method 200 provided by an embodiment of the present invention;

FIG. 5 is a schematic diagram of an application scenario of a data transmission method according to an embodiment of the present invention;

FIG. 6 is a schematic flow diagram of implementing a communication connection according to an embodiment of the present invention;

FIG. 7 is a schematic flow diagram of updating a communication connection according to an embodiment of the present invention;

FIG. 8 is a schematic structural diagram of a cloud device provided by an embodiment of the present invention;

FIG. 9 is a schematic structural diagram of another cloud device provided by an embodiment of the present invention;

FIG. 10 is a schematic structural diagram of another cloud device provided by an embodiment of the present invention;

FIG. 11 is a schematic structural diagram of a communication device provided by an embodiment of the present invention;

FIG. 12 is a schematic structural diagram of another communication device provided by an embodiment of the present invention;

FIG. 13 is a schematic structural diagram of a communication system provided by an embodiment of the present invention;

FIG. 14 is a schematic structural diagram of another cloud device provided by an embodiment of the present invention;

FIG. 15 is a schematic structural diagram of another communication device provided by an embodiment of the present invention.

detailed description

In order to make the object, technical solution and advantages of the present invention clearer, the implementation manner of the present invention will be further described in detail below in conjunction with the accompanying drawings.

In the embodiment of the present invention, the website is a website that can use the cloud for data processing. For example, the website can be a computer (such as a personal computer), or a computer system (such as an enterprise computer system).

An embodiment of the present invention provides a communication connection method 100. As shown in FIG. 1, the method 100 may include:

110. Receive a first request message sent by a network site when the load of the network site is higher than the first load, where the first request message includes a request for creating a VPC, an ID of the network site, and first tunnel attribute information.

Wherein, the ID of the network site is used to identify the network site, and the request for creating a VPC may be identified by using a data segment in the first request message.

Specifically, the network site can detect the load in real time, and when the load is higher than the first load, send the first request message to the cloud, that is, the network site autonomously controls sending of the first request message. Wherein, the first load can be set and changed according to different scenarios. In addition, according to different application scenarios, the network station may also send the first request message according to the sending instruction.

120. Create a target VPC according to the request for creating a VPC.

Wherein, the target VPC is the VPC corresponding to the network site.

130. Connect the target VPC to the first PE.

140. Send the ID of the network site and the first tunnel attribute information to the first PE, so that the first PE obtains the second VPN configuration information and the address of the second PE according to the ID of the network site, and obtains the second VPN configuration information according to the second The VPN configuration information determines the first VPN configuration information that matches the second VPN configuration information, and establishes a connection with the second PE according to the first VPN configuration information, the address of the second PE, and the first tunnel attribute information. VPN connection and tunnel connection, so as to realize the communication connection between the target VPC and the network site, the second VPN configuration information is the VPN configuration information of the second PE, and the second PE is the access device of the network site.

Wherein, the VPN configuration information is related to the type of the VPN connection to be established. For example, when the VPN connection to be established is a Layer 3 protocol-based VPN (Layer 3VPN), the second VPN configuration information may be information such as the input routing target (Route Target, RT) and output RT of the second PE; When the type of VPN connection to be established is a virtual leased line (Virtual Leased Line, VLL) in a Layer 2 protocol-based VPN (Layer 2VPN), the second VPN configuration information may be a virtual circuit (Virtual Circuit, VC) ID, etc. information. Wherein, the address of the second PE may be the IP address of the second PE.

In the embodiment of the present invention, a communication connection of a one-way tunnel or a two-way tunnel may be established between the target VPC and the network site.

The foregoing first PE and second PE are divided for the convenience of distinguishing different PEs during expression, and do not constitute a limitation to the embodiment of the present invention. The above-mentioned first VPN configuration information and second VPN configuration information are divided for the convenience of distinguishing different VPN configuration information when expressing, and do not constitute a limitation to the embodiment of the present invention.

The execution subject of the above 110-140 may be a cloud device, and the cloud device may be located in the cloud. In addition, the cloud device can be divided into different modules and distributed in multiple devices, can also be integrated into the same device, and can also be used as an independent device.

The communication connection method 100 of the embodiment of the present invention creates a target VPC according to the VPC creation request, and connects the target VPC and the first PE by receiving the VPC creation request automatically sent by the network site, the network site ID, and the first tunnel attribute information, Send the ID of the network site and the first tunnel attribute information to the first PE, so that the first PE obtains the second VPN configuration information and the address of the second PE according to the ID of the network site, and obtains the matching second VPN configuration information according to the second VPN configuration information. A VPN configuration information, and according to the first VPN configuration information, the address of the second PE and the first tunnel attribute information, establish a VPN connection and a tunnel connection with the second PE to realize the communication connection between the target VPC and the network site. Since the request message is automatically sent by the network site, it is possible to establish a communication connection in time according to the needs of the network site, thereby improving connection efficiency.

In the embodiment of the present invention, optionally, when connecting the VPC and the first PE in the above 130, a VCE corresponding to the target VPC may be created, and the first PE is connected through the VCE.

Wherein, the VCE is connected to the first PE refers to setting the VCE so that the VCE can communicate with the first PE. For example, when the communication between the VCE and the first PE is based on a layer-3 routing protocol, the running routing protocol on the VCE is set so that the route on the VCE can communicate with the route on the first PE. For another example, when the routing protocol running on the VCE and the first PE is Border Gateway Protocol (Border Gateway Protocol, BGP), set the BGP peer of the VCE to be the first PE. For another example, when the communication between the VCE and the first PE is based on a Layer 2 protocol, such as in the case of a virtual local area network (Virtual Local Area Network, VLAN), set the VLAN ID on the VCE to be connected to the first PE. The VLAN ID of the interface accessing the VCE is the same, so that the VCE can be in the same VLAN as the interface accessing the VCE on the first PE.

As shown in Figure 2, in this embodiment of the present invention, optionally, after the above 140, it may further include:

150. Receive a second request message sent by the network station, where the second request message includes a request for updating a communication connection, second tunnel attribute information, and an ID of the network station.

Specifically, the network station may autonomously control the sending of the second request message, for example, sending the second request message when it detects that the current communication connection needs to be updated. In addition, according to different application scenarios, the network station may also send the second request message according to the sending instruction.

160. After determining that the network site needs to update the communication connection according to the request for updating the communication connection, send the second tunnel attribute information and the ID of the network site to the first PE, so that the first PE according to the ID of the network site, The address of the second PE and the second tunnel attribute information update the tunnel attribute between the first PE and the second PE, thereby updating the communication connection attribute between the target VPC and the network site.

In this way, the communication connection between the target VPC and the network site can be adjusted in real time as required.

In the embodiment of the present invention, the first tunnel attribute information and the second tunnel attribute information may include a communication tunnel bandwidth value between the network site and the cloud.

In the embodiment of the present invention, by receiving the request for creating a VPC automatically sent by the network site, the ID of the network site, and the first tunnel attribute information, the target VPC is created according to the request for creating a VPC, the target VPC is connected to the first PE, and the network is sent to the first PE. The ID of the site and the first tunnel attribute information, so that the first PE obtains the second VPN configuration information and the address of the second PE according to the ID of the network site, and obtains the matching first VPN configuration information according to the second VPN configuration information, and According to the first VPN configuration information, the address of the second PE and the first tunnel attribute information, a VPN connection and a tunnel connection with the second PE are established to realize the communication connection between the target VPC and the network site. Since the request message is automatically sent by the network site, it is possible to establish a communication connection in time according to the needs of the network site, thereby improving connection efficiency.

Another communication connection method 200 provided by an embodiment of the present invention, as shown in FIG. 3 , the method 200 may include:

210. Connect to the target VPC located in the cloud.

Wherein, the target VPC is created by the cloud.

220. Receive the network site ID and first tunnel attribute information sent by the cloud, where the network site ID and the first tunnel attribute information are sent by the network site when the load of the network site is higher than the first load.

230. Obtain second VPN configuration information and an address of a second PE according to the ID of the network site, where the second VPN configuration information is VPN configuration information of the second PE, and the second PE is an access device of the network site.

Wherein, the access device may be a network device with a routing function, such as a router.

240. Determine first VPN configuration information that matches the second VPN configuration information according to the second VPN configuration information.

Wherein, the VPN configuration information is related to the type of the VPN connection to be established. For example, when the VPN connection to be established is a Layer 3 VPN (Layer 3VPN), the second VPN configuration information can be information such as the input routing target (Route Target, RT) and output RT of the network site; When the type of established VPN connection is a virtual leased line (Virtual Leased Line, VLL) in a Layer 2 protocol-based VPN (Layer 2VPN), the second VPN configuration information may be virtual circuit (Virtual Circuit, VC) ID and other information . Wherein, the address of the second PE may be the IP address of the second PE.

250. Establish a VPN connection and a tunnel connection with the second PE according to the first VPN configuration information, the address of the second PE, and the first tunnel attribute information, so as to realize the communication between the target VPC and the network site connect.

In the embodiment of the present invention, a communication connection of a one-way tunnel or a two-way tunnel may be established between the target VPC and the network site.

The foregoing first VPN configuration information and second VPN configuration information are divided for the convenience of distinguishing different VPN configuration information, which does not constitute a limitation to the embodiment of the present invention. The execution subject of the above-mentioned 210-250 may be a communication device, and the communication device is a network device with a routing function, such as a router.

The communication connection method 200 of the embodiment of the present invention connects to the target VPC located in the cloud, receives the ID of the network site and the first tunnel attribute information sent by the cloud, and obtains the second VPN configuration information and the second PE according to the ID of the network site. address, and obtain matching first VPN configuration information according to the second VPN configuration information, and establish a VPN connection with the second PE according to the first VPN configuration information, the address of the second PE, and the first tunnel attribute information, and The tunnel connection realizes the communication connection between the target VPC and the network site. Since the network station ID and the first tunnel attribute information are automatically sent by the network station, the communication connection can be established in time according to the needs of the network station, thereby improving the connection efficiency.

In the embodiment of the present invention, optionally, when obtaining the second VPN configuration information and the address of the second PE according to the ID of the network site in the above 230, the ID of the network site may be used to query the database for the second VPN configuration information and the address of the second PE, the database pre-stores the address of the second PE corresponding to the ID of the network site and the second VPN configuration information corresponding to the ID of the network site.

In this way, the second VPN configuration information and the address of the second PE can be automatically obtained from the database according to the ID of the network site, and the connection with the second PE and the cloud can be realized, and the connection efficiency can be improved.

In the embodiment of the present invention, the database can use the format shown in Table 1 to store the ID of the network site, the address of the second PE, and the configuration information of the second VPN.

Table 1

ID of the website Secondary VPN configuration information The address of the second PE

In Table 1, the ID of the network site, the configuration information of the second VPN and the address of the second PE correspond to each other. Wherein, the ID of the network site is used to identify the network site, the second VPN configuration information is the VPN configuration information of the second PE, and the address of the second PE may be the IP address of the second PE.

In the embodiment of the present invention, when the second VPN configuration information is the input RT and output RT of the second PE, when the first VPN configuration information matching the second VPN configuration information is determined in the above 240, the second The input RT of the network station in the VPN configuration information is used as the output RT of the first VPN configuration information, and the output RT of the network station in the second VPN configuration information is used as the input RT of the first VPN configuration information. When the second VPN configuration information is a VC ID, when the first VPN configuration information matching the second VPN configuration information is determined in 240 above, the value of the VC ID in the first VPN configuration information is consistent with the second VPN configuration information. The value of the VC ID in the information is the same.

In the embodiment of the present invention, optionally, when connecting to the target VPC located in the cloud, the target VPC may be connected through the VCE located in the cloud.

For example, when connecting to the target VPC through the VCE located in the cloud, local parameters may be set to realize the connection with the VCE located in the cloud. The setting method of local parameters is similar to the setting method of VCE parameters in 130 above, please refer to .

As shown in Figure 4, in this embodiment of the present invention, optionally, after the above 250, it may further include:

260. Receive the ID of the website and the second tunnel attribute information sent by the cloud.

270. Update the tunnel attribute between the first PE and the second PE according to the network site ID, the address of the second PE, and the second tunnel attribute information, thereby updating the communication connection between the target VPC and the network site Attributes.

In this way, the communication connection between the target VPC and the network site can be adjusted in real time as required.

Specifically, the second tunnel attribute information may include a bidirectional communication tunnel bandwidth value. Similarly, the communication connection here may be a communication connection of a unidirectional tunnel or a bidirectional tunnel, or may be a communication connection of a bidirectional tunnel.

In the embodiment of the present invention, the first tunnel attribute information and the second tunnel attribute information may include a communication tunnel bandwidth value between the network site and the cloud.

In the embodiment of the present invention, by connecting to the target VPC located in the cloud, the ID of the network site and the first tunnel attribute information sent by the cloud are received, the second VPN configuration information and the address of the second PE are obtained according to the ID of the network site, and the second VPN configuration information and the address of the second PE are obtained according to the second The first VPN configuration information that matches the VPN configuration information is obtained, and according to the first VPN configuration information, the address of the second PE, and the first tunnel attribute information, a VPN connection and a tunnel connection with the second PE are established to realize the target VPC and Communication link between network sites. Since the network station's ID and the first tunnel attribute information are automatically sent by the network station, it is possible to establish a communication connection in time according to the needs of the network station, thereby improving connection efficiency.

FIG. 5 shows an application scenario of the communication connection method according to the embodiment of the present invention. In FIG. 5 , it includes a network site, an operator network and a cloud. The network site includes a network site management module and a network site customer edge device (customer edge, CE). The network site management module is used to detect the network site load and send messages to the cloud; the network site CE can be the outlet of the network site data center A router is connected to the network site PE. The operator's network includes network site PEs, cloud PEs, and databases. Among them, the network site PE (the second PE) is provided by the operator network and is used to connect the network site to the access device (such as a router, etc.) of the operating network. The network site PE maintains a format as shown in Table 2 association table. The cloud PE (the first PE) is an access device (such as a router, etc.) provided by the operator network for connecting the cloud to the operator network. The cloud PE maintains an association table in the format shown in Table 3 (see below for details). The database is connected to the cloud PE, and the database stores an information table in the format shown in Table 1. The cloud includes a cloud management module, a cloud gateway router (CGR) and a public cloud, where the CGR can be an egress router of the cloud, connected to the cloud PE.

Taking the application scenario shown in FIG. 5 as an example, the specific implementation process of the communication connection method in the embodiment of the present invention will be described in detail in combination with the interaction process shown in FIG. 6. It should be understood that FIG. 5 is only an application of the embodiment of the present invention The scene is an exemplary description for the convenience of understanding the embodiment of the present invention, and should not be regarded as a limitation to the embodiment of the present invention. In addition, in FIG. 5 , the VPN connection is a Layer 3VPN connection as an example, but it is not limited thereto. For example, the VPN connection may also be a Layer 2VPN connection.

In the scenario shown in FIG. 5 , before realizing the communication connection between the website and the cloud, the website registers the ID of the website with the operator, and the ID of the website is used to distinguish different websites. Establish a VPN instance on the network site PE, configure the input RT and output RT (configuration information) on the network site PE, and save the network site ID and The input RT and output RT (the second VPN configuration information) and the address of the network site PE. Record the ID of the network site and the corresponding VPN ID in the association table maintained by the network site PE in the format shown in Table 2. Before the tunnel connection is established, the Tunnel (tunnel) ID is empty. After the tunnel connection is established, the Tunnel ID is recorded in Table 2 (refer to the method for obtaining the tunnel ID of the reverse tunnel in 507 in FIG. 6 below).

Table 2

ID of the website Network site VPN ID Tunnel ID

In Table 2, the ID of the network site, the VPN ID of the network site, and the TunnelID correspond to each other.

The bidirectional tunnel mentioned in the embodiment of the present invention includes a forward tunnel and a reverse tunnel. The tunnel from the cloud PE (the first PE) to the network site PE (the second PE) is a forward tunnel, and the tunnel from the network site PE to the cloud PE for the reverse tunnel.

Fig. 6 is a schematic diagram of information interaction for realizing a communication connection in the scene of Fig. 5, including:

501. The cloud management module receives a connection request message (first request message) sent by the network site management module. The connection request message includes a request to create a VPC (target VPC), the ID of the network site, and a bidirectional tunnel bandwidth value (the first tunnel attribute information), the cloud management module creates a VPC (target VPC) according to the VPC creation request.

For example, an indication field may be added to the connection request message to identify a request for creating a VPC and instruct the cloud to create a VPC.

Wherein, the connection request message is automatically sent by the network site when the load of the network site is higher than the first load, and the bidirectional tunnel bandwidth value includes a forward tunnel bandwidth value and a reverse tunnel bandwidth value.

502. The cloud management module sends the ID of the network site and the bandwidth value of the bidirectional tunnel to the CGR.

503. The CGR creates a VCE corresponding to the VPC, and connects to the cloud PE through the VCE.

At this time, the cloud PE is also connected to the VCE.

504. The CGR sends the ID of the network site and the bandwidth value of the bidirectional tunnel to the cloud PE.

Specifically, the CGR may carry the ID of the network site and the bandwidth of the bidirectional tunnel in an extended Border Gateway Protocol (Border Gateway Protocol, BGP) update signaling attribute and send it to the cloud PE.

505. The cloud PE uses the ID of the network site to acquire the input RT and output RT configured by the network site PE and the address of the network site PE from the database.

506. The cloud PE applies the input RT and output RT (the first VPN configuration information) configured by the network site PE to establish a VPN instance, generates a cloud VPN ID, connects the VCE to the VPN instance, and establishes an association table maintained by the cloud PE (such as table 3) to record the ID of the network site and the cloud VPN ID. In Table 3, the Tunnel (tunnel) ID column is left blank, and will be stored in the table after the TunnelID is determined in 507 below.

table 3

ID of the website Cloud VPN ID Tunnel ID

In Table 3, the ID of the network site, the cloud VPN ID, and the Tunnel ID correspond to each other.

507. The cloud PE uses the address of the network site PE to initiate a bidirectional tunnel connection to the network site PE, and uses the bidirectional bandwidth value to determine the bidirectional bandwidth.

Wherein, the bidirectional tunnel includes a forward tunnel (from the cloud PE to the network site PE) and a reverse tunnel (from the network site PE to the cloud PE). Correspondingly, the bidirectional tunnel bandwidth value includes a forward tunnel bandwidth value and a reverse tunnel bandwidth value. For example, the cloud PE creates a forward tunnel. After creating the forward tunnel, the tunnel ID of the forward tunnel is obtained and recorded in the entry corresponding to the network site ID in the association table (Table 3) maintained by the cloud PE. After the forward tunnel creation information of the PE arrives at the network site PE, it triggers the network site PE to create a reverse tunnel. After the reverse tunnel is created, the network site PE obtains the tunnel ID of the reverse tunnel and records it in the association table maintained by the network site PE ( Table 2) in the entry corresponding to the ID of the network site.

508. The cloud PE binds the tunnel ID of the forward tunnel with the cloud VPN ID according to the network site ID in the association table (Table 3) maintained by the cloud PE.

509. The network site PE binds the tunnel ID of the reverse tunnel with the network site VPN ID according to the network site ID in the association table (Table 2) maintained by the network site PE.

It should be understood that the embodiment of the present invention may also initiate a one-way tunnel connection, and for a specific implementation method, please refer to the above-mentioned two-way tunnel connection method, and details are not repeated here.

So far, the communication connection between the VPC and the data center of the network site is realized.

In addition, in the embodiment of the present invention, after the bidirectional tunnel connection is established between the cloud PE and the network site PE, the bidirectional tunnel connection may be updated according to the new bandwidth value of the bidirectional tunnel according to the request of the network site. See Figure 7, including:

601. The cloud management module receives an update request message (second request message) sent by the network site management module. The update request message includes a request for updating a two-way tunnel (a request for updating a communication connection), an ID of the network site, and a two-way tunnel bandwidth value ( second tunnel attribute information).

For example, an indication field may be added in the update request message to identify the request for updating the bidirectional tunnel and instruct the cloud to update the bidirectional tunnel. The update request message is sent by the network station when it detects that the tunnel bandwidth needs to be changed, or by the network station according to an instruction, and the bidirectional tunnel bandwidth value may include a forward tunnel bandwidth value and a reverse tunnel bandwidth value.

After receiving the bidirectional tunnel bandwidth request, go to 602 .

602. The cloud management module sends the ID of the network site and the bandwidth value of the bidirectional tunnel to the CGR.

603. The CGR sends the ID of the network site and the bandwidth value of the bidirectional tunnel to the cloud PE.

Similarly, here the CGR can carry the ID of the network site and the bidirectional tunnel bandwidth value in the extended BGP update signaling attribute and send it to the cloud PE.

604. According to the ID of the network site, the cloud PE queries the tunnel ID of the forward tunnel corresponding to the ID of the network site in the locally maintained association table (Table 3), and changes the forward tunnel bandwidth value according to the two-way tunnel bandwidth value. bandwidth to the tunnel.

605. The cloud PE sends the network site ID and the reverse tunnel bandwidth value to the network site PE.

Specifically, the cloud PE may send the network site ID and the reverse tunnel bandwidth value to the network site PE through extended Resource Reservation Protocol-Traffic Engineering (RSVP-TE) signaling.

606. The network site PE queries the stored network site ID corresponding to the reverse tunnel tunnel ID in the locally maintained association table (Table 2) through the network site ID, and changes the reverse tunnel bandwidth according to the reverse tunnel bandwidth value.

So far, the two-way tunnel connection between the updated cloud PE and the network site PE is realized.

In the embodiment of the present invention, the network site automatically sends a request for creating a VPC, the ID of the network site, and a two-way tunnel bandwidth value to the cloud, and the cloud creates a target VPC according to the request for creating a VPC, connects the target VPC and the cloud PE, and sends the network site to the cloud PE. ID and the attribute information of the first tunnel, the cloud PE obtains the input RT and output RT configured by the network site PE and the address of the second PE according to the ID of the network site, and establishes a VPN according to the input RT and output RT configured by the network site PE, and according to The VPN, the address of the network site PE and the bandwidth value of the bidirectional tunnel establish a VPN connection and a tunnel connection with the network site PE to realize the communication connection between the target VPC and the network site. Since the request message is automatically sent by the network site, it is possible to establish a communication connection in time according to the needs of the network site, thereby improving connection efficiency. In addition, the embodiment of the present invention can also adjust the communication connection between the target VPC and the network site in real time as required.

As shown in FIG. 8 , an embodiment of the present invention provides a cloud device, which may include: a first receiving module 810, a creation module 820, a connection module 830, and a first sending module 840, wherein:

The first receiving module 810 is configured to receive a first request message sent by the network site when the load of the network site is higher than the first load, the first request message includes a request for creating a VPC, an ID of the network site, and first tunnel attribute information.

The creation module 820 is configured to create a target VPC according to the VPC creation request.

A connection module 830, configured to connect the target VPC and the first PE.

The first sending module 840 is configured to send the ID of the network site and the first tunnel attribute information to the first PE, so that the first PE obtains the second VPN configuration information and the address of the second PE according to the ID of the network site, and obtains the second VPN configuration information and the address of the second PE according to the second The first VPN configuration information that matches the VPN configuration information is obtained, and according to the first VPN configuration information, the address of the second PE, and the first tunnel attribute information, a VPN connection and a tunnel connection with the second PE are established, so as to realize the target VPC For the communication connection with the network site, the second VPN configuration information is the VPN configuration information of the second PE, and the second PE is the access device of the network site.

Preferably, as shown in FIG. 9, the connection module 830 may include:

A creating unit 831, configured to create a VCE corresponding to the target VPC;

The connecting unit 832 is configured to connect to the first PE through the VCE.

Preferably, as shown in FIG. 10 , another cloud device in the embodiment of the present invention may further include: a second receiving module 850 and a second sending module 860, wherein:

The second receiving module 850 is configured to receive a second request message sent by the network station, where the second request message includes a request for updating the communication connection, second tunnel attribute information, and an ID of the network station.

The second sending module 860 is configured to send the second tunnel attribute information and the ID of the network site to the first PE after determining that the network site needs to update the communication connection according to the request for updating the communication connection, so that the first PE according to the ID of the network site, the second The addresses of the two PEs and the second tunnel attribute information update the tunnel attributes between the first PE and the second PE, thereby updating the communication connection attributes between the target VPC and the network site.

In this way, the communication connection between the target VPC and the network site can be adjusted in real time as required.

The constituent modules of the cloud device in the embodiment of the present invention can be distributed in different devices, or can be integrated in the same device, multiple modules can be used in combination, a single module can also be used or used separately, and can realize their respective functions That's it. For example, the first receiving module 810 and the creating module 820 can be combined into a cloud management module in FIG. 5 to implement corresponding functions. The function of each module in the above-mentioned cloud device is only briefly described. For detailed description, please refer to the embodiment of the above-mentioned communication connection method 100 . In addition, the above-mentioned cloud device can execute the corresponding steps in the above-mentioned embodiment of the communication connection method 100 .

The cloud device in the embodiment of the present invention receives a request message including a request for creating a VPC, an ID of the network site, and first tunnel attribute information automatically sent by the network site, creates a target VPC according to the request for creating a VPC, and connects the target VPC to the first PE, Send the ID of the network site and the first tunnel attribute information to the first PE, so that the first PE obtains the second VPN configuration information and the address of the second PE according to the ID of the network site, and obtains the matching second VPN configuration information according to the second VPN configuration information. A VPN configuration information, and according to the first VPN configuration information, the address of the second PE and the first tunnel attribute information, establish a VPN connection and a tunnel connection with the second PE to realize the communication connection between the target VPC and the network site. Since the request message is automatically sent by the network site, it is possible to establish a communication connection in time according to the needs of the network site, thereby improving connection efficiency.

As shown in FIG. 11 , an embodiment of the present invention provides a communication device, which may include: a first connection module 910, a first receiving module 920, an acquisition module 930, a determination module 940, and a second connection module 950, wherein:

The first connection module 910 is configured to connect to the target VPC located in the cloud.

The first receiving module 920 is configured to receive the ID of the network site and the first tunnel attribute information sent by the cloud. The ID of the network site and the first tunnel attribute information are generated by the network site when the load of the data center of the network site is higher than the first load. send.

The obtaining module 930 may be configured to obtain second VPN configuration information and the address of the second PE according to the ID of the network site, the second VPN configuration information is the VPN configuration information of the second PE, and the second PE is an access device of the network site.

A determining module 940, configured to determine, according to the second VPN configuration information, first VPN configuration information that matches the second VPN configuration information.

The second connection module 950 is configured to establish a VPN connection and a tunnel connection with the second PE according to the first VPN configuration information, the address of the second PE, and the first tunnel attribute information, so as to realize the communication between the target VPC and the network site connect.

Preferably, the obtaining module 930 is specifically configured to use the ID of the network site to query the database for the second VPN configuration information and the address of the second PE, and the database pre-stores the address of the second PE corresponding to the ID of the network site and the ID of the network site Corresponding second VPN configuration information.

Preferably, as shown in FIG. 12, another cloud device in the embodiment of the present invention may further include: a second receiving module 960 and a third connecting module 970, wherein:

The second receiving module 960 is configured to receive the ID of the network site and the second tunnel attribute information sent by the cloud.

The third connection module 970 is configured to update the tunnel attribute between the first PE and the second PE according to the ID of the network site, the address of the second PE, and the second tunnel attribute information, so as to update the communication connection attribute between the target VPC and the network site .

Preferably, the first receiving module is connected to the target VPC through the VCE located in the cloud.

The communication device in this embodiment of the present invention may be a network device with a routing function, such as a router. In addition, the components of the communication device can be distributed in different devices, or can be integrated in the same device, multiple modules can be used in combination, a single module can also be used or used separately, as long as they can realize their respective functions .

The function of each module in the above-mentioned communication device is only briefly described. For a detailed description, please refer to the embodiment of the above-mentioned communication connection method 200 . In addition, the above-mentioned communication device can execute corresponding steps in the above-mentioned embodiment of the communication connection method 200 .

The communication device of the embodiment of the present invention receives the ID of the network site and the first tunnel attribute information sent by the cloud by connecting to the target VPC located in the cloud, obtains the second VPN configuration information and the address of the second PE according to the ID of the network site, and According to the second VPN configuration information, the matching first VPN configuration information is obtained, and according to the first VPN configuration information, the address of the second PE and the first tunnel attribute information, a VPN connection and a tunnel connection with the second PE are established to realize The communication connection between the target VPC and the network site. Since the network station ID and the first tunnel attribute information are automatically sent by the network station, the communication connection can be established in time according to the needs of the network station, thereby improving the connection efficiency.

As shown in FIG. 13, an embodiment of the present invention provides a communication system, including: a cloud device S1 and a communication device S2, wherein:

The cloud device S1 may be used to receive a first request message sent by the network site when the load of the network site is higher than the first load, the first request message includes a request for creating a VPC, the identification ID of the network site, and first tunnel attribute information; Create a target VPC according to the request to create a VPC; connect the target VPC and the first PE; send the ID of the network site and the first tunnel attribute information to the first PE, so that the first PE obtains the second VPN configuration information and the first tunnel according to the ID of the network site. the address of the second PE, and determine the first VPN configuration information that matches the second VPN configuration information according to the second VPN configuration information, and establish a connection with the first VPN configuration information, the address of the second PE, and the first tunnel attribute information according to the first VPN configuration information, the address of the second PE, and the first tunnel attribute information. The VPN connection and the tunnel connection between the second PEs realize the communication connection between the target VPC and the network site, the second VPN configuration information is the VPN configuration information of the second PE, and the second PE is an access device of the network site.

The communication device S2 may be used to connect to the target VPC located in the cloud; receive the ID of the network site and the first tunnel attribute information sent by the cloud, and the ID of the network site and the first tunnel attribute information are provided by the network site in the Send when the load of the network site is higher than the first load; obtain the second VPN configuration information and the address of the second PE according to the ID of the network site, and the second VPN configuration information is the VPN configuration information of the second PE , the second PE is an access device of the network site; determining first VPN configuration information matching the second VPN configuration information according to the second VPN configuration information; according to the first VPN configuration information , the address of the second PE and the first tunnel attribute information, and establish a VPN connection and a tunnel connection with the second PE, so as to realize the communication connection between the target VPC and the network site.

Specifically, the constituent modules of the cloud device S1 and the specific functions of each module are the same as those of the above cloud device implementing the embodiment of the present invention, please refer to. The constituent modules of the communication device S2 and the specific functions of each module are the same as those of the above-mentioned communication device according to the embodiment of the present invention, please refer to.

In the communication system of the embodiment of the present invention, the cloud device receives the request for creating a VPC automatically sent by the network site, the ID of the network site, and the first tunnel attribute information, creates a target VPC according to the request for creating a VPC, connects the target VPC and the first PE, and sends The first PE sends the ID of the network site and the first tunnel attribute information, so that the first PE obtains the second VPN configuration information and the address of the second PE according to the ID of the network site, and obtains the matching first tunnel address according to the second VPN configuration information. VPN configuration information, and according to the first VPN configuration information, the address of the second PE and the first tunnel attribute information, establish a VPN connection and a tunnel connection with the second PE, so as to realize the communication connection between the target VPC and the network site. Since the request message is automatically sent by the network site, it is possible to establish a communication connection in time according to the needs of the network site, thereby improving connection efficiency.

As shown in FIG. 14 , an embodiment of the present invention also provides a cloud device, which may include: a bus 144 and an interface 141 connected to the bus 144, a processor 142, and a memory 143, wherein:

The interface 141 is used to receive the first request message sent by the network site when the load of the network site is higher than the first load, the first request message includes the request to create a VPC, the ID of the network site and the first tunnel attribute information;

The memory 143 is used to store instructions, and the processor 142 executes the instructions in the memory 143 to create a target VPC according to the request for creating a VPC; connect the target VPC and the first PE; send the ID of the network site and the first tunnel attribute information to the first PE , so that the first PE obtains the second VPN configuration information and the address of the second PE according to the ID of the network site, and determines the first VPN configuration information matching the second VPN configuration information according to the second VPN configuration information, and according to the first VPN configuration information The VPN configuration information, the address of the second PE, and the first tunnel attribute information establish a VPN connection and a tunnel connection with the second PE, so as to realize the communication connection between the target VPC and the network site. The second VPN configuration information is the second PE VPN configuration information, the second PE is the access device of the network site.

Preferably, the processor 142 executing the instructions in the memory 143 for connecting the VPC and the first PE includes: creating a VCE corresponding to the target VPC; and connecting the first PE through the VCE.

Preferably, the processor 142 executes the instructions in the memory 143 and is also used to receive a second request message sent by the network site, the second request message includes a request to update the communication connection, the second tunnel attribute information and the ID of the network site; according to the update After the request for the communication connection determines that the network site needs to update the communication connection, it sends the second tunnel attribute information and the ID of the network site to the first PE, so that the first PE , updating the attribute of the tunnel between the first PE and the second PE, thereby updating the attribute of the communication connection between the target VPC and the network site.

The cloud device in the embodiment of the present invention receives a request message including a request for creating a VPC, an ID of the network site, and first tunnel attribute information automatically sent by the network site, creates a target VPC according to the request for creating a VPC, and connects the target VPC to the first PE, Send the ID of the network site and the first tunnel attribute information to the first PE, so that the first PE obtains the second VPN configuration information and the address of the second PE according to the ID of the network site, and obtains the matching second VPN configuration information according to the second VPN configuration information. A VPN configuration information, and according to the first VPN configuration information, the address of the second PE and the first tunnel attribute information, establish a VPN connection and a tunnel connection with the second PE to realize the communication connection between the target VPC and the network site. Since the request message is automatically sent by the network site, it is possible to establish a communication connection in time according to the needs of the network site, thereby improving connection efficiency.

As shown in FIG. 15, an embodiment of the present invention also provides a communication device, which may include: a bus 154, an interface 151 connected to the bus 154, a processor 152, and a memory 153, wherein:

The interface 151 is used to receive the ID of the network site and the first tunnel attribute information sent by the cloud, and the ID of the network site and the first tunnel attribute information are sent by the network site when the load of the network site is higher than the first load;

The memory 153 is used to store instructions, and the processor 152 executes the instructions in the memory 153 to connect to the target VPC located in the cloud; obtain the second VPN configuration information and the address of the second PE according to the ID of the network site, and the second VPN configuration information is the first The VPN configuration information of two PEs, the second PE is the access device of the network site; determine the first VPN configuration information matching the second VPN configuration information according to the second VPN configuration information; according to the first VPN configuration information, the second PE address and the first tunnel attribute information, establish a VPN connection and a tunnel connection with the second PE, so as to realize the communication connection between the target VPC and the network site.

Preferably, the processor 152 executes the instructions in the memory 153 to obtain the second VPN configuration information and the address of the second PE according to the ID of the network site, including: using the ID of the network site, querying the database for the second VPN configuration information and the second PE. For the address of the second PE, the database pre-stores the address of the second PE corresponding to the ID of the network site and the second VPN configuration information corresponding to the ID of the network site.

Preferably, the processor 152 executes the instructions in the memory 153 and is also used to receive the ID of the network site and the second tunnel attribute information sent by the cloud; according to the ID of the network site, the address of the second PE, and the second tunnel attribute information, update The attribute of the tunnel between the first PE and the second PE, so as to update the attribute of the communication connection between the target VPC and the network site.

Preferably, the processor 152 executing the instructions in the memory 153 to connect to the target VPC in the cloud includes: connecting to the target VPC through the VCE in the cloud.

The communication device of the embodiment of the present invention receives the ID of the network site and the first tunnel attribute information sent by the cloud by connecting to the target VPC located in the cloud, obtains the second VPN configuration information and the address of the second PE according to the ID of the network site, and According to the second VPN configuration information, the matching first VPN configuration information is obtained, and according to the first VPN configuration information, the address of the second PE and the first tunnel attribute information, a VPN connection and a tunnel connection with the second PE are established to realize The communication connection between the target VPC and the network site. Since the network station ID and the first tunnel attribute information are automatically sent by the network station, the communication connection can be established in time according to the needs of the network station, thereby improving the connection efficiency.

It should be noted that: the data sending device and the data receiving device provided by the above-mentioned embodiments are only described by using the division of the above-mentioned functional modules as examples. In practical applications, the above-mentioned functions can be assigned to different function modules according to needs Module completion means that the internal structure of the device is divided into dial-up functional modules to complete all or part of the above functions. In addition, the device provided by the above embodiment and the corresponding method belong to the same idea, and the specific implementation process thereof is detailed in the method embodiment, and will not be repeated here.

Those of ordinary skill in the art can understand that all or part of the steps for implementing the above embodiments can be completed by hardware, and can also be completed by instructing related hardware through a program. The program can be stored in a computer-readable storage medium. The above-mentioned The storage medium mentioned may be a read-only memory, a magnetic disk or an optical disk, and the like.

Each embodiment in this specification is described in a progressive manner, the same and similar parts of each embodiment can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, as for the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and for relevant parts, please refer to part of the description of the method embodiment. The device embodiments described above are only illustrative, and the units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in One place, or it can be distributed to multiple network elements. Part or all of the modules can be selected according to actual needs to achieve the purpose of the solution of this embodiment. It can be understood and implemented by those skilled in the art without creative effort.

Those skilled in the art can appreciate that the units and algorithm steps of the examples described in conjunction with the embodiments disclosed herein can be implemented by electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are executed by hardware or software depends on the specific application and design constraints of the technical solution. Skilled artisans may use different methods to implement the described functions for each specific application, but such implementation should not be regarded as exceeding the scope of the present invention.

Those skilled in the art can clearly understand that for the convenience and brevity of the description, the specific working process of the above-described system, device and unit can refer to the corresponding process in the foregoing method embodiment, which will not be repeated here.

In the several embodiments provided in this application, it should be understood that the disclosed systems, devices and methods may be implemented in other ways. For example, the device embodiments described above are only illustrative. For example, the division of the units is only a logical function division. In actual implementation, there may be other division methods. For example, multiple units or components can be combined or May be integrated into another system, or some features may be ignored, or not implemented. In another point, the mutual coupling or direct coupling or communication connection shown or discussed may be through some interfaces, and the indirect coupling or communication connection of devices or units may be in electrical, mechanical or other forms.

The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place, or may be distributed to multiple network units. Part or all of the units can be selected according to actual needs to achieve the purpose of the solution of this embodiment.

In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, each unit may exist separately physically, or two or more units may be integrated into one unit.

If the functions described above are realized in the form of software function units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the essence of the technical solution of the present invention or the part that contributes to the prior art or the part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including Several instructions are used to make a computer device (which may be a personal computer, a server, or a network device, etc.) execute all or part of the steps of the methods described in various embodiments of the present invention. The aforementioned storage media include: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), magnetic disk or optical disk, and other media that can store program codes. .

Through the description of the above embodiments, those skilled in the art can clearly understand that the present invention can be realized by means of software plus necessary general-purpose hardware. The general-purpose hardware includes general-purpose integrated circuits, general-purpose CPUs, general-purpose memories, general-purpose components, etc. , Of course, it can also be realized by dedicated hardware including application-specific integrated circuits, dedicated CPUs, dedicated memories, dedicated components, etc., but in many cases the former is a better implementation. Based on this understanding, the essence of the technical solution of the present invention or the part that contributes to the prior art can be embodied in the form of a software product, and the computer software product is stored in a readable storage medium, such as a floppy disk of a computer , a hard disk or an optical disk, etc., including several instructions to make a computer device (which may be a personal computer, a server, or a network device, etc.) execute the methods of various embodiments of the present invention.

The above are only preferred embodiments of the present invention, and are not intended to limit the present invention. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principles of the present invention shall be included in the protection scope of the present invention Inside.

Claims (15)

1. a kind of communication connecting method, it is characterised in that include：

The first request message that reception website sends when the load of the website is higher than the first load, described first Request message includes creating request, mark ID of the website and the first tunnel attribute information of virtual private cloud VPC；

Target VPC is created according to the request of the establishment VPC；

Connect target VPC and the first provider edge equipment PE；

Send the ID and the first tunnel attribute information of the website to a PE so that a PE according to The ID of the website obtains the address of the second virtual private network configuration information and the 2nd PE, and according to the 2nd VPN Configuration information determines the VPN configuration informations matched with the 2nd VPN configuration informations, and is matched somebody with somebody according to a VPN Confidence breath, the address of the 2nd PE and the first tunnel attribute information, set up and the VPN connections between the 2nd PE and tunnel Road connects, and so as to realize the communication connection between target VPC and the website, the 2nd VPN configuration informations are institute The VPN configuration informations of the 2nd PE are stated, the 2nd PE is the access device of the website, a VPN configuration informations It is the other VPN configuration informations with the difference of the 2nd VPN configuration informations.

2. method according to claim 1, it is characterised in that connection target VPC and the first Provider Edge Equipment PE includes：

Create Virtual User edge device VCE corresponding with target VPC；

First PE is connected by the VCE.

3. method according to claim 1 and 2, it is characterised in that also include：

The second request message that the website sends is received, second request message includes updating asking for communication connection Ask, the ID of the second tunnel attribute information and the website；

Determine that the website need to be updated after communication connection according to the request for updating communication connection, send out to a PE Send the ID of the second tunnel attribute information and the website so that a PE according to the ID of the website, The address of the 2nd PE and the second tunnel attribute information, update the tunnel category between a PE and the 2nd PE Property, so as to update the communication connection attribute of target VPC and the website.

4. a kind of communication connecting method, it is characterised in that include：

Destination virtual specific cloud VPC of the connection positioned at high in the clouds；

Receive mark ID and the first tunnel attribute information of the website that high in the clouds sends, the ID of the website and described the One tunnel attribute information is sent by the website when the load of the website is higher than the first load；

Second virtual private network configuration information and the second provider edge equipment PE are obtained according to the ID of the website Address, the 2nd VPN configuration informations are the VPN configuration informations of the 2nd PE, and the 2nd PE is the website Access device；

The VPN configuration informations matched with the 2nd VPN configuration informations are determined according to the 2nd VPN configuration informations, The first VPN configuration informations are the other VPN configuration informations with the difference of the 2nd VPN configuration informations；

According to a VPN configuration informations, the address of the 2nd PE and the first tunnel attribute information, set up with it is described VPN connections and tunnel connection between the 2nd PE, so as to realize the communication connection between target VPC and the website.

5. method according to claim 4, it is characterised in that described that 2nd VPN is obtained according to the ID of the website The address of configuration information and the 2nd PE includes：

Using the ID of the website, to the address of the 2nd VPN configuration informations and the 2nd PE described in data base querying, institute State data base prestore the website corresponding 2nd PE of ID the corresponding institutes of the ID of address and the website State the 2nd VPN configuration informations.

6. the method according to claim 4 or 5, it is characterised in that also include：

Receive the ID and the second tunnel attribute information of the website that the high in the clouds sends；

ID, the address of the 2nd PE and the second tunnel attribute information according to the website, update a PE with Tunnel attribute between the 2nd PE, so as to update the communication connection attribute of target VPC and the website.

7. method according to claim 4, it is characterised in that the connection is located at the destination virtual specific cloud in the high in the clouds VPC, including：

Target VPC is connected by the Virtual User edge device VCE positioned at the high in the clouds.

8. a kind of high in the clouds device, it is characterised in that include：

First receiver module, for receiving website sends when the load of the website is higher than the first load first Request message, first request message includes creating the request of virtual private cloud VPC, mark ID of the website and the One tunnel attribute information；

Creation module, for creating target VPC according to the request of the establishment VPC；

Link block, for connecting target VPC and the first provider edge equipment PE；

First sending module, for sending the ID and the first tunnel attribute information of the website to a PE, So that a PE obtains the ground of the second virtual private network configuration information and the 2nd PE according to the ID of the website Location, and the VPN configuration informations matched with the 2nd VPN configuration informations are determined according to the 2nd VPN configuration informations, And according to a VPN configuration informations, the address of the 2nd PE and the first tunnel attribute information, set up and described the VPN connections and tunnel connection between two PE, so as to realize the communication connection between target VPC and the website, institute The VPN configuration informations that the 2nd VPN configuration informations are the 2nd PE are stated, the 2nd PE is that the access of the website sets Standby, a VPN configuration informations are the other VPN configuration informations with the difference of the 2nd VPN configuration informations.

9. device according to claim 8, it is characterised in that the link block includes：

Creating unit, for creating Virtual User edge device VCE corresponding with target VPC；

Connection unit, for connecting a PE by the VCE.

10. device according to claim 8 or claim 9, it is characterised in that also include：

Second receiver module, for receiving the second request message that the website sends, second request message includes Update the ID of the request, the second tunnel attribute information and the website of communication connection；

Second sending module, for determining that the website need to update communication connection according to the request for updating communication connection Afterwards, the ID of the second tunnel attribute information and the website is sent to a PE so that a PE according to The ID of the website, the address of the 2nd PE and the second tunnel attribute information, update the PE with it is described Tunnel attribute between the 2nd PE, so as to update the communication connection attribute of target VPC and the website.

11. a kind of communicators, it is characterised in that include：

First link block, for destination virtual specific cloud VPC that connection is located at high in the clouds；

First receiver module, for receiving mark ID and the first tunnel attribute information of the website that the high in the clouds sends, institute State the ID and the first tunnel attribute information of website by the website the website load higher than the Send during one load；

Acquisition module, for obtaining the second virtual private network configuration information and the second operation according to the ID of the website The address of business edge device PE, the 2nd VPN configuration informations are the VPN configuration informations of the 2nd PE, and the 2nd PE is The access device of the website；

Determining module, for determining match with the 2nd VPN configuration informations first according to the 2nd VPN configuration informations VPN configuration informations, a VPN configuration informations are the other VPN configuration informations with the difference of the 2nd VPN configuration informations；

Second link block, for being belonged to according to a VPN configuration informations, the address of the 2nd PE and first tunnel Property information, set up and the 2nd PE between VPN connection and tunnel connection, so as to realize target VPC with the network Communication connection between website.

12. devices according to claim 11, it is characterised in that the acquisition module is specifically for using the network The ID of website, to the address of the 2nd VPN configuration informations and the 2nd PE described in data base querying, the data base prestores described Corresponding 2nd VPN of the ID of address and the website of corresponding 2nd PE of ID of website match somebody with somebody confidence Breath.

13. devices according to claim 11 or 12, it is characterised in that also include：

Second receiver module, for receiving the ID and the second tunnel attribute information of the website that the high in the clouds sends；

3rd link block, for according to the ID of the website, the address of the 2nd PE and second tunnel attribute Information, updates the tunnel attribute between a PE and the 2nd PE, logical with the website so as to update target VPC Letter connection attribute.

14. devices according to claim 11, it is characterised in that first link block is specifically for by being located at The Virtual User edge device VCE in the high in the clouds connects target VPC.

15. a kind of communication systems, it is characterised in that include the high in the clouds device as any one of claim 8-10 and such as weigh Profit requires the communicator any one of 11-14.