With economic and social globalization, an increasing quantity of enterprises and organizations establish branches nationwide and even worldwide, and an increasing quantity of employees on business trips access headquarters' service systems from fixed locations. In addition, as services continuously expand and application becomes increasingly complex, an information technology (IT) infrastructure of an organization is developing toward centralized management, and setting up data centers and cloud services has been a trend of IT construction. An enterprise service gateway is an entrance to a data center and cloud service center. A throughput capability of the enterprise service gateway directly affects performance of the entire data center and cloud service center.
OPENFLOW, a new network switching model supporting network innovation researches, was put forward by Stanford University in the United States. The OPENFLOW protocol is gradually improved and successfully applied to an actual network, where application of the OPENFLOW protocol to a data center network is particularly prominent. As shown in FIG. 1, a topology structure of an OPENFLOW network includes an OPENFLOW controller 11, an OPENFLOW switch 12, a terminal 13, and links connecting the OPENFLOW controller 11, OPENFLOW switch 12, and terminal 13. The OPENFLOW controller 11 stores a topology structure of an entire network, generates a flow table for a data flow that needs to be forwarded, and delivers the flow table to a corresponding switch. The OPENFLOW switch 12 stores flow table information delivered by the OPENFLOW controller 11 and performs data forwarding between the OPENFLOW switches 12 and between the OPENFLOW switch 12 and the terminal 13.
A topology structure of the data center network is generally a tree structure. The enterprise service gateway, as the entrance (a root) to the data center, is responsible for network forwarding and further needs to perform particular processing on data, for example in terms of network security, to perform “encryption/decryption, Deep Packet Inspection (DPI), and the like” on the data, and to perform data compression and decompression, and the like. The processing includes the following steps:
1. The enterprise service gateway receives a client request and performs data processing such as security detection (Internet Protocol Security (IPSEC), and DPI) on data.
2. After the data processing is completed, a to-be-processed packet is forwarded to a back-end server according to a service type of the request.
3. The server performs processing, and forwards a result of the processing to the enterprise service gateway.
4. The enterprise service gateway receives service data, performs particular processing on the service data, and forwards an encapsulated packet to a client.
An enterprise service gateway serves as an entrance to an entire data center. When a to-be-processed data volume exceeds a capability of the enterprise service gateway, the enterprise service gateway becomes a bottleneck of an entire system, whereas a large quantity of computing resources on a back-end server are idle. Therefore, a method for resolving the bottleneck problem needs to be found.