Packet processing method in cloud computing system, host, and system

A packet processing method in a cloud computing system comprising at least one host comprising a virtual machine monitor (VMM) including a virtual bridge and a virtual network function module, and at least one network interface card including switching equipment and at least two network ports, wherein a first network port supports a network interface card virtualization capability, the first network port corresponds to at least one physical function (PF) and multiple virtual functions (VFs), and a first virtual machine is connected to at least one VF of the first network port, the method comprising:

• determining, by the first virtual machine, a destination MAC address of a data packet to be sent, wherein the MAC address of the data packet is a MAC address of an uplink port of the virtual bridge;
• sending, by the first virtual machine, the data packet to a second virtual machine by using the VF connected to the first virtual machine, wherein a destination IP address carried in the data packet is an IP address of the second virtual machine, and the destination MAC address carried in the data packet is the MAC address of the uplink port of the virtual bridge;
• receiving, by the switching equipment, the data packet, and sending the data packet to the virtual bridge according to the destination MAC address of the data packet by using the uplink port of the virtual bridge;
• receiving, by the virtual bridge, the data packet, changing the destination MAC address of the data packet to a MAC address of the second virtual machine, and sending a changed data packet to the virtual network function module;
• and
• performing, by the virtual network function module, network function processing on the changed data packet, and sending a processed data packet, wherein a destination MAC address of the processed data packet is the MAC address of the second virtual machine.

A cloud computing system, comprising:

• at least one host, comprising:
• a virtual machine monitor (VMM) comprising a virtual bridge and a virtual network function module,
• at least one network interface card comprising switching equipment and at least two network ports, wherein a first network port supports a network interface card virtualization capability, the first network port is corresponding to at least one physical function (PF) and multiple virtual functions (VFs), and
• a first virtual machine connected to at least one VF of the first network port;
• a software-defined network (SDN) controller configured to receive an ARP request packet from the first virtual machine that is forwarded by the virtual bridge, and return a flow entry to the virtual bridge, wherein the flow entry comprises an ARP pickup setting and a MAC address setting for instructing the virtual bridge to construct an ARP response packet for the first virtual machine, and the ARP response packet carries a MAC address of an uplink port of the virtual bridge that is used as a destination MAC address of a data packet to be sent;
• wherein the first virtual machine is configured to send the data packet to a second virtual machine by using the VF that is connected to the first virtual machine, wherein a destination IP address carried in the data packet is an IP address of the second virtual machine, and the destination MAC address carried in the data packet is the MAC address of the uplink port of the virtual bridge;
• wherein the switching equipment is configured to receive the data packet, and send the data packet to the virtual bridge according to the destination MAC address of the data packet by using the uplink port of the virtual bridge;
• wherein the virtual bridge is configured to receive the data packet, change the destination MAC address of the data packet to a MAC address of the second virtual machine, and send a changed data packet to the virtual network function module;
• and
• wherein the virtual network function module is configured to perform network function processing on the changed data packet, and send the processed data packet, wherein a destination MAC address of the processed data packet is the MAC address of the second virtual machine.

A host, comprising:

• a first processor;
• a first memory;
• at least one network interface card comprising a second processor, a second memory, and at least two network ports, wherein a first network port supports a network interface card virtualization capability and corresponds to at least one physical (PF) and multiple virtual functions (VFs);
• wherein the first memory stores instructions which, when executed by the first processor, cause the host to:
• implement a function of a first virtual machine, wherein the first virtual machine is connected to at least one VF of the first network port,
• implement a function of a virtual bridge, and
• implement a function of a virtual network function module;
• wherein the second memory stores instructions which, when executed by the second processor, cause the host to:
• implement a function of switching equipment;
• wherein the first memory stores instructions, when executed by the first processor, cause the host to:
• determine a destination MAC address of a data packet to be sent, wherein the MAC address of the data packet is a MAC address of an uplink port of the virtual bridge, and
• send the data packet to a second virtual machine by using the VF that is connected to the first virtual machine, wherein a destination IP address carried in the data packet is an IP address of the second virtual machine, and the destination MAC address carried in the data packet is the MAC address of the uplink port of the virtual bridge;
• wherein the second memory stores instructions, when executed by the second processor, further cause the host to:
• receive the data packet, and send the data packet to the virtual bridge according to the destination MAC address of the data packet by using the uplink port of the virtual bridge;
• and
• wherein the first memory stores instructions, when executed by the first processor, cause the host to:
• receive the data packet, and change the destination MAC address of the data packet to a MAC address of the second virtual machine, and
• perform network function processing on a changed data packet, and send the processed data packet, wherein a destination MAC address of the processed data packet is the MAC address of the second virtual machine.