Cloud Lessons | HUAWEI CLOUD KYON L2CG

Abstract: This article introduces KYON's original L2CG, which opens up a large second-tier network, supports enterprises to directly go to the cloud with private IP, enables agile business migration, and greatly reduces the complexity and cost of going to the cloud. At the same time, it supports the granular migration of virtual machines, so that the entire subnet does not need to be migrated during the enterprise's cloud migration.

This article is shared from the HUAWEI CLOUD community " [Cloud Small Lesson] Basic Services Lesson 75 HUAWEI CLOUD KYON L2CG ", the original author: Yun Xiaomeng.

HUAWEI CLOUD KYON (Keep Your Own Network) enterprise-level cloud network solution creates a simple and agile road to the cloud, and helps enterprises with minimal planning, agile migration, and seamless integration. It is the best choice for enterprises to go to the cloud. In the process of enterprise business migration, some IPs are hard-written in the configuration file and are difficult to modify, and large enterprises often need to migrate multiple times to complete the overall business to the cloud. During the migration process, the business faces the risk of network interruption.

Ah... this is really bald!

The considerate HUAWEI CLOUD has prepared KYON solutions for you, so that you can go to the cloud without worry!

KYON’s original creation of L2CG, opens up a large second-tier network, supports enterprises to carry private IPs directly to the cloud, enables agile business migration, and greatly reduces the complexity and cost of enterprises going to the cloud. At the same time, it supports the granular migration of virtual machines, so that the entire subnet does not need to be migrated during the enterprise's cloud migration. And based on the cloud-up and cloud-down two-tier interoperability, business continuity is guaranteed. When an unknown problem occurs in the migration, the reverse migration can be performed at any time.

What is the Layer 2 connection gateway?

The Layer 2 Connection Gateway (L2CG) is a virtual tunnel gateway that can establish a layer 2 network between the cloud and the cloud based on the cloud dedicated line network, and solve the problem of the layer 2 interconnection between the cloud and the cloud. , Allowing you to migrate part of the data center or private cloud host business to the cloud without changing the subnet and IP planning.

Through the cloud dedicated line, a three-layer network channel between the cloud and the cloud is established, and the subnet network segments on the cloud and the cloud are required to not overlap. When the data center and the cloud have the same subnet network segment, and the servers on the cloud and the cloud need to communicate on the same subnet network segment, you can connect to the gateway through the second layer to solve the second layer network communication between the cloud and the cloud. problem.

The network diagram of the second-tier connection gateway is shown in the figure:

As the tunnel gateway of the virtual private cloud, the Layer 2 connection gateway corresponds to the tunnel gateway on the side of the user's local data center. The Layer 2 network can be established between the virtual private cloud and the user data center based on the cloud dedicated line network.

The second-tier connection can connect the subnet of the virtual private cloud to the second-tier connection gateway, and specify the second-tier connection gateway to establish a connection with the tunnel gateway on the side of the enterprise data center, so that the subnet of the virtual private cloud is connected to the side of the enterprise data center. The subnet establishes Layer 2 communication.

Black technology capabilities of the second-tier connection gateway

HUAWEI CLOUD’s original L2CG large second-tier technology has many black technology capabilities, making the migration of enterprise applications to the cloud more convenient and safe.

give an example

Suppose you want to migrate an offline IDC server (10.0.0.3) to the cloud, you need to keep the IP address unchanged, and the servers on the cloud on the same subnet (10.0.0.0/24) can still maintain Layer 2 interoperability .

In traditional hybrid cloud network configuration, three-tier network interoperability can be achieved through dedicated lines/VPNs. However, if you need to migrate local services to the cloud, you can only migrate the subnets as a whole, and the network segments of the subnets on the cloud and the cloud cannot overlap. The same subnet under the cloud cannot communicate with each other.

At this time, you can use the black technology capabilities of L2CG to achieve the above purpose~

The preset resources are as follows:

What specific black technology capabilities does L2CG have? To summarize~

Black technology capability 1: Keep private IP unchanged

The cloud is connected to the cloud through the three-layer dedicated line. During the migration process, the cloud is not in the same subnet, and the application must change the IP and subnet. However, there are many old applications in the enterprise, and some IPs are hard-coded in the configuration files and are difficult to modify.

Through the second-tier technology, the cloud is on the same subnet as the cloud, and old applications can directly go to the cloud with their original IP!

Black technology capability 2: Migrate according to IP granularity

Multiple applications are distributed in a subnet. The traditional migration scheme is based on the overall migration of subnets, but if users need fine-grained control and migrate in batches, there is nothing that can be done.

Based on the L2CG large two-layer technology, it can realize migration according to the granularity of IP, and the virtual machines can be migrated one by one.

Black technology capability 3: Uninterrupted network during migration

Generally, in a subnet, there will be multiple associated applications at the same time, and there are requirements for Layer 2 communication between applications. If Layer 2 communication cannot be guaranteed during the migration process, then business continuity cannot be guaranteed.

Based on the large two-layer network technology, the migration process can still be maintained in the same subnet, and communication is not affected. After the migration is over, enter the hybrid cloud mode, part of which is applied on the cloud and part of the original data center, which can protect the data security of the data center and share the rich service capabilities and elastic resources on the cloud!

How to configure the Layer 2 connection gateway?

How to configure the online and offline large two-tier network? Only the following five steps are required:

first step: create a cloud dedicated line

Create a three-layer network channel on the cloud and under the cloud, which can be a Huawei cloud dedicated line.

Step 2: Purchase the Layer 2 connection gateway

Specify the local terminal network of the VPC and cloud dedicated line on the cloud to create a Layer 2 connection gateway to generate the local tunnel IP.

Step 3: Establish a connection

Specify the access subnet and remote tunnel IP on the cloud to create a Layer 2 connection.

Step 4: Configure remote tunnel

Configure the VXLAN tunnel on the gateway device of the data center under the cloud.

Step 5: Business migration

You can use Huawei Cloud Host Migration Service to migrate offline businesses to the cloud.

For more information about the Layer 2 connection gateway, please click here .

Click to follow, and learn about Huawei Cloud's fresh technology for the first time~