Network interface card, computing device, and data packet processing method

Abstract

This application discloses a data packet processing method applied to a computing device in software-defined networking. After receiving a data packet of a data flow, a NIC in the computing device queries a flow table set according to matching information of the data packet; and if a flow table is obtained from the flow table set, the NIC processes the data packet according to the flow table; or if no flow table can be obtained from the flow table set, the NIC sends the data packet to a virtual switch, and the virtual switch obtains a flow table corresponding to the data flow, and saves the flow table into the flow table set, so that the NIC can directly process a subsequent data packet of the data flow. An operating load of the virtual switch is reduced, and operating efficiency of the computing device is improved.

What is claimed is: 
     
         1 . A data packet processing method, comprising:
 receiving, a network interface card (NIC) of a computing device, a first data packet of a data flow, the computing device further including a virtual switch;   querying, by the NIC, a flow table set according to matching information of the first data packet;   forwarding, by the NIC, the first data packet to the virtual switch when matching is failed;   receiving, by the virtual switch, the first data packet;   obtaining, by the virtual switch, the flow table corresponding to the data flow from a software-defined networking (SDN) controller;   updating the flow table set by storing, by the virtual switch, the flow table corresponding to the data flow into the flow table set;   sending, by the virtual switch, the first data packet to a target virtual machine (VM) according to data packet routing information of the flow table corresponding to the data flow.   
     
     
         2 . The data packet processing method according to  claim 1 , wherein at least one virtual switch port is configured on the virtual switch, one of the at least one virtual switch port corresponding to one of the at least one VM, and the method further comprises:
 receiving, by the NIC, configuration information; and   configuring, by the NIC, a NIC port on the NIC according to the configuration information, wherein the NIC port connects to the VM.   
     
     
         3 . The data packet processing method according to  claim 2 , wherein the NIC port connects, using a single-root input/output virtualization (SR-I/OV) technology, to the VM. 
     
     
         4 . The data packet processing method according to  claim 1 , further comprising:
 performing, by the NIC, a security group check on the first data packet.   
     
     
         5 . A computing device, comprising: a processor, a storage device, and network interface card (NIC), wherein program code is stored in the storage device and executed by the processor to run a virtual switch and at least one virtual machine (VM),
 wherein the NIC is configured to:
 receive a first data packet of a data flow; 
 query a flow table set according to matching information of the first data packet; 
 forward the first data packet to the virtual switch when matching is failed; 
   the virtual switch is configured to:
 receive the first data packet; 
 obtain the flow table corresponding to the data flow from a software-defined networking (SDN) controller; 
 update the flow table set by storing the flow table corresponding to the data flow into the flow table set; 
 send the first data packet to a target VM according to data packet routing information of the flow table corresponding to the data flow. 
   
     
     
         6 . The computing device according to  claim 5 , wherein at least one virtual switch port is configured on the virtual switch, one of the at least one virtual switch port corresponding to one of the at least one VM, and the NIC is further configured to:
 receive configuration information; and   configure a NIC port on the NIC according to the configuration information, wherein the NIC port connects to the VM.   
     
     
         7 . The computing device according to  claim 6 , wherein the NIC port connects, using a single-root input/output virtualization (SR-I/OV) technology, to the VM. 
     
     
         8 . The computing device according to  claim 5 , wherein the NIC is further configured to:
 perform a security group check on the first data packet.   
     
     
         9 . A data packet processing method, comprising:
 receiving, by a virtual switch of a computing device, a data packet forwarded by a network interface card (NIC);   obtaining, by the virtual switch, a flow table corresponding to the data flow from a software-defined networking (SDN) controller;   storing, by the virtual switch, the flow table corresponding to the data flow into a NIC-accessible flow table set;   sending, by the virtual switch, the data packet to a destination according to data packet routing information of the flow table corresponding to the data flow.