Method for virtual machine to access physical server in cloud computing system, apparatus, and system

Patent metadata

Field	Value
Publication number	US-11418512-B2
Application number	US-202015931217-A
Country	US
Kind code	B2
Filing date	May 13, 2020
Priority date	Aug 9, 2016
Publication date	Aug 16, 2022
Grant date	Aug 16, 2022

Abstract

In a method for providing access to a service provided by a physical server in a cloud computing system, a cloud platform allocates to the service a publishing IP address and a publishing port, and sends a NAT rule to an access network element associated with the virtual machine. Upon receiving a service access request from the virtual machine for accessing the service, the access network element modifies, according to the NAT rule, a destination address of the service access request into the IP address and the port of the physical server that provides the service, and routes the modified service access request to the physical server.

First claim

What is claimed is:

1. A method for providing access to a service in a cloud computing system by a virtual machine, the method comprising
receiving, by a cloud platform, a service application request associated with a service from a virtual machine;
allocating, by the cloud platform to the service, a publishing IP address and a publishing port;
recording, by the cloud platform, a correspondence between the publishing IP address and the publishing port and an IP address and a port of the service;
sending, by the cloud platform, a network address translation (NAT) rule to an access network element of the virtual machine, wherein the NAT rule comprises the correspondence between the publishing IP address and the publishing port and the IP address and the port of the service;
receiving, by the access network element, a service access request from the virtual machine, wherein a destination address of the service access request includes the publishing IP address and the publishing port corresponding to the service;
replacing, by the access network element according to the NAT rule, the destination address of the service access request with the IP address and the port of the service to generate a modified service access request; and
routing, by the access network element, the modified service access request to the IP address and the port of the service.

2. The method according to claim 1 , further comprising:
displaying, by the cloud platform, service information on a service presentation interface, wherein the service information comprises an external display address of the service.

3. The method according to claim 2 , wherein the external display address comprises a domain name corresponding to the service, or the publishing IP address and the publishing port corresponding to the service.

4. The method according to claim 3 , wherein the cloud platform further comprising a physical server for deploying the service, the IP address and the port of the service is an IP address and a port of the physical server.

5. The method according to claim 2 , wherein after receiving the service application request from the virtual machine, the method further comprises:
returning, by the cloud platform, a service application response to the virtual machine, wherein the service application response includes the external display address.

6. The method according to claim 5 , further comprising:
creating, by the cloud platform, a second virtual machine for a user to which the virtual machine belongs, and
delivering, by the cloud platform, the NAT rule to an access network element to which the second virtual machine connects.

7. The method according to claim 1 , further comprising:
terminating, by the cloud platform, service authorization for the virtual machine, and
sending, by the cloud platform, a deletion message to the access network element, to instruct the access network element to delete the NAT rule of the virtual machine.

8. A cloud computing system, comprising:
at least one hardware processor;
at least one memory;
a cloud platform; and
an access network element,
wherein the cloud platform is configured to:
receive a service application request associated with a service from a virtual machine;
allocate, to the service, a publishing IP address and a publishing port;
record a correspondence between the publishing IP address and the publishing port and an IP address and a port of the service; and
send a network address translation (NAT) rule to the access network element, wherein the NAT rule comprises the correspondence between the publishing IP address and the publishing port and the IP address and the port of the service,
wherein the access network element is configured to:
receive a service access request from the virtual machine, wherein a destination address of the service access request includes the publishing IP address and the publishing port that correspond to the service;
replace, according to the NAT rule from the cloud platform, the destination address of the service access request with the IP address and the port of the service to generate a modified service access request; and
route the modified service access request to the IP address and the port of the service.

9. The system according to claim 8 , wherein the access network element is further configured to:
receive a service response message in response to the service access request from a physical server running the service, wherein a source address of the service response message includes the IP address and the port of the service;
replace, according to the NAT rule, the source address of the service response message with the publishing IP address and the publishing port to generate a modified service response message; and
send the modified service response message to the virtual machine.

10. The system according to claim 8 , wherein the cloud platform is further configured to:
display service information on a service presentation interface, wherein the service information comprises an external display address of the service.

11. The system according to claim 10 , wherein the external display address comprises a domain name corresponding to the service, or the publishing IP address and the publishing port corresponding to the service.

12. The system according to claim 10 , wherein the cloud platform is further configured to return a service application response to the virtual machine, wherein the service application response includes the external display address.

13. The system according to claim 12 , wherein the cloud platform is further configured to:
create a second virtual machine for a user to which the virtual machine belongs, and
deliver the NAT rule to an access network element to which the second virtual machine connects.

14. The system according to claim 8 , wherein the cloud platform comprises a physical server for deploying the service.

15. The system according to claim 14 , wherein the IP address and the port of the service is an IP address and a port of the physical server.

16. The system according to claim 8 , wherein the cloud platform is further configured to:
terminate service authorization for the virtual machine, and
send a deletion message to the access network element, to instruct the access network element to delete the NAT rule of the virtual machine.

17. A method performed by an access network element for processing access to a service in a cloud computing system by a virtual machine, comprising
forwarding a service application request sent by the virtual machine to a cloud platform;
receiving a network address translation (NAT) rule for the virtual machine from the cloud platform, wherein the NAT rule comprises a correspondence between a publishing IP address and a publishing port and an IP address and a port of the service;
receiving a service access request from the virtual machine, wherein a destination address of the service access request includes the publishing IP address and the publishing port corresponding to the service;
replacing, according to the NAT rule, the destination address of the service access request with the IP address and the port of the service to generate a modified service access request; and
routing the modified service access request to the IP address and the port of the service.

18. The method according to claim 17 , further comprising:
receiving a service response message in response to the service access request, wherein a source address of the service response message includes the IP addres

Assignees

• Huawei Tech Co Ltd

Inventors

• Li Junwu
• Shen Si

Classifications

• H04L61/00

  Network arrangements, protocols or services for addressing or naming · CPC title

• H04L67/10 Primary

  in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46) · CPC title

• G06F2009/45587

  Isolation or security of virtual machine instances · CPC title

• H04L61/4511

  using domain name system [DNS] · CPC title

• G06F9/45558

  Hypervisor-specific management and integration aspects · CPC title