A method for migrating a service of a data center, comprising the following steps: receiving, by a tunnel processing device, a message notifying that an active data center is faulty, and disabling a locally-saved tunnel entry of a server in the active data center, wherein the tunnel entry of the server in the active data center comprises an IP address of a tunnel processing module deployed on the server in the active data center; receiving, by the tunnel processing device, a service access request packet sent by a customer edge router, wherein the service access request packet carries a destination IP address, and the destination IP address is an IP address of a destination virtual machine deployed in the active data center; acquiring, by the tunnel processing device according to the IP address of the destination virtual machine, an IP address of a tunnel processing module deployed on a server in a standby data center, and encapsulating the service access request packet, wherein an outer destination IP address of an encapsulated packet is the IP address of the tunnel processing module of the server in the standby data center, and a virtual machine corresponding to the IP address of the destination virtual machine is deployed on the server in the standby data center; and sending, by the tunnel processing device, the encapsulated packet to the customer edge router, so that the customer edge router sends the encapsulated packet to the tunnel processing module of the server in the standby data center according to the outer destination IP address of the encapsulated packet, to implement migration of a data center service from the active data center to the standby data center. receiving, by a tunnel processing device, a message notifying that an active data center is faulty, and disabling a locally-saved tunnel entry of a server in the active data center, wherein the tunnel entry of the server in the active data center comprises an IP address of a tunnel processing module deployed on the server in the active data center; receiving, by the tunnel processing device, a service access request packet sent by a customer edge router, wherein the service access request packet carries a destination IP address, and the destination IP address is an IP address of a destination virtual machine deployed in the active data center; acquiring, by the tunnel processing device according to the IP address of the destination virtual machine, an IP address of a tunnel processing module deployed on a server in a standby data center, and encapsulating the service access request packet, wherein an outer destination IP address of an encapsulated packet is the IP address of the tunnel processing module of the server in the standby data center, and a virtual machine corresponding to the IP address of the destination virtual machine is deployed on the server in the standby data center; and sending, by the tunnel processing device, the encapsulated packet to the customer edge router, so that the customer edge router sends the encapsulated packet to the tunnel processing module of the server in the standby data center according to the outer destination IP address of the encapsulated packet, to implement migration of a data center service from the active data center to the standby data center.