WO2023115373A1

WO2023115373A1 - Heterogeneous convergence network and path consistency verification method therefor, and storage medium

Info

Publication number: WO2023115373A1
Application number: PCT/CN2021/140359
Authority: WO
Inventors: 雷凯; 伍楷舜; 李伟; 张良杰; 张梅梅; 张亚朋; 何晟; 易望; 陈佩淑
Original assignee: 北京大学深圳研究生院; 金蝶软件（中国）有限公司
Priority date: 2021-12-22
Filing date: 2021-12-22
Publication date: 2023-06-29
Also published as: CN115918037A

Abstract

The present application relates to a heterogeneous convergence network, a path consistency verification method therefor, and a storage medium. The heterogeneous convergence network comprises a data plane and a control plane, wherein the control plane constructs an explorer packet according to a preset communication protocol and issues multi-information combined explorer packets to the data plane; the data plane forwards the explorer packet according to an actual path forwarded by each switch and reports actual forwarding information to the control plane; the control plane generates a plurality of pieces of expected path information according to forwarding rule information, and forms the plurality of pieces of expected path information into expected path set information corresponding to the explorer packet; the control plane generates, according to the actual forwarding information, actual path information corresponding to the explorer packet; and the control plane determines whether the expected path set information contains expected path information consistent with the actual path information or not, and if yes, the path consistency of the expected path forwarded by the explorer packet and the actual path are verified.

Description

A heterogeneous fusion network and its path consistency verification method and storage medium

technical field

The present application relates to the technical field of network management, in particular to a heterogeneous fusion network and its path consistency verification method and storage medium.

Background technique

Software-defined networking (SDN) divides the network into a data plane and a control plane. The switches in the data plane forward data packets, and the controller in the control plane guides the forwarding behavior of the switches. Inconsistencies may occur between the data plane and the control plane, and at this time, it is necessary to perform consistency verification on the data packet forwarding paths of the control plane and the data plane.

For a data packet, the controller will generate an expected path for the data packet. After the data packet is forwarded by the switch on the data plane, an actual path will be generated. Path consistency detection is performed by comparing the actual path with the expected path. ; Path consistency verification can obtain the conclusion whether the control plane and the data plane are consistent by detecting whether the expected path of the data packet is consistent with the actual forwarding path of the data packet. However, in an SDN network that supports multiple protocols (i.e., an SDN heterogeneous converged network), the path consistency problem changes, and path detection becomes more complicated.

In the SDN heterogeneous converged network, the data plane may be composed of various types of switches, and different types of switches may support different protocols (such as switches supporting IP protocol, switches supporting ICN protocol, switches supporting Hybrid-ICN protocol ); then in the SDN heterogeneous integration scenario, the path consistency verification problem between the actual path and the expected path of data packet forwarding will become very complicated and difficult to solve. However, none of the existing path consistency detection schemes is aimed at the application of SDN heterogeneous converged networks, so it is necessary to propose a solution to the path consistency problem in the multi-protocol SDN scenario.

technical problem

The technical problem mainly solved by this application is: how to realize path consistency verification in the SDN heterogeneous converged network.

technical solution

In order to solve the above technical problems, the present application proposes a heterogeneous fusion network and its path consistency verification method and storage medium.

According to the first aspect, an embodiment provides a heterogeneous converged network, which includes: a data plane, including a plurality of switches connected topologically, and each switch can perform data forwarding according to at least one communication protocol; a control plane, and The switch in the data plane is connected to control the data forwarding path of the switch; wherein, the control plane constructs a multi-information combination detection packet according to a preset communication protocol, and sends it to the data plane The detection packet; the detection packet includes packet header information, and forwarding rule information of several switches that are expected to perform forwarding; the data layer forwards the detection packet according to the actual path forwarded by each switch, and sends to the control The layer reports the actual forwarding information; the control layer generates multiple pieces of expected path information according to the forwarding rule information, and uses the multiple pieces of expected path information to form the expected path set information corresponding to the detection packet; The actual forwarding information generates the actual path information corresponding to the detection packet; the control plane judges whether the expected path set information contains the expected path information consistent with the actual path information, and if so, through the detection packet Path consistency verification of forwarded expected path and actual path.

The data layer forwards the detection packet according to the actual forwarding path of each switch, and reports the actual forwarding information to the control layer, including: the data layer receives the distributed detection packet, and forwards the detection packet in each Forwarding between switches and forming an actual forwarding path; the switch that forwards the detection packet for the first time on the actual path is the ingress switch, the switch that forwards the detection packet last on the actual path is the egress switch, and the remaining switches on the actual path are intermediate switches ; The data plane utilizes an ingress switch on the actual path to insert an initial label value in the detection packet, and reports the initial label value to the control plane; the data plane utilizes an intermediate switch and an egress switch on the actual path The initial label value of the detection packet is updated; the data layer forms corresponding actual forwarding information with the header information of the detection packet according to the label value updated by any switch in the intermediate switch and the egress switch on the actual path and report to the control plane.

The data plane uses the intermediate switch and the egress switch on the actual path to update the initial label value of the detection packet, including: for the intermediate switch on the actual path, the intermediate switch uses its own feature matrix and the detection packet Perform matrix multiplication on the inserted initial label value to obtain the first label value; for the egress switch on the actual path, the egress switch performs matrix multiplication operation on its own characteristic matrix and the first label value to obtain the second label value value; in the matrix multiplication operation, a modulo calculation is performed on the feature matrix involved in the operation to prevent matrix multiplication from overflowing; both the first label value and the second label value are updated label values.

The control plane generates multiple pieces of expected path information according to the forwarding rule information, and uses the multiple pieces of expected path information to form the expected path set information corresponding to the detection packet, including: the control plane according to the forwarding rule information Constructing multiple expected paths; each expected path has one or more switches, and the ingress switch on the expected path is the ingress switch on the actual path; the control plane obtains the feature matrix that constitutes all the switches on each expected path, And obtain the initial label value reported by the ingress switch on the actual path; the control plane uses the characteristic matrix of one or more switches on each expected path to update and calculate the initial label value, and obtain the label corresponding to each expected path value; the control plane generates a piece of expected path information according to the header information of the detection packet and the label value corresponding to each expected path; the control plane counts the expected path information corresponding to each expected path to form the detection The expected path set information corresponding to the package.

The control plane also stores the desired path set information in a preset path table, and uses a Bloom filter in the path table to map and store label values corresponding to each desired path.

The control plane generates the actual path information corresponding to the detection packet according to the actual forwarding information, including: the control plane obtains the label values reported by the intermediate switch and the egress switch on the actual path of the detection packet respectively, and obtains The packet header information of the detection packet; the control plane determines the actual path for the detection packet to be forwarded between switches in the data plane according to the obtained label value, and according to the obtained label value and the packet header information of the detection packet Generate corresponding actual path information.

The control plane determines whether the expected path set information contains the expected path information consistent with the actual path information, including: the control plane acquires the packet header information and label value in the expected path set information, and acquires The packet header information and label value in the actual path information; the control plane compares the packet header information in the actual path information with the packet header information in the expected path set information, and performs path consistency when the packet header information matches Verification: the control plane judges whether there is a tag value identical to the actual path information in the expected path set information, and if so, passes the path consistency verification.

According to the second aspect, an embodiment provides a heterogeneous converged network, including a data plane and a control plane, the data plane includes a plurality of switches connected topologically, the controller is deployed in the control plane and the The controller is connected to each switch, and the controller includes: a path detection generation module, configured to construct a detection packet according to a preset communication protocol, and send the detection packet to the data layer; an expected path set generation module, It is used to generate corresponding expected path set information according to multiple expected paths forwarded by the detection packet among several switches in the data plane; a path consistency verification module is used to detect that the detection packet is in the data plane the actual path forwarded between the switches and generate corresponding actual path information; Path consistency verification of forwarded expected path and actual path.

The path detection generation module constructs a detection packet according to a preset communication protocol, and sends the detection packet to the data layer, including: the path detection generation module configures header information and expected execution according to a preset communication protocol The forwarding rules of several switches use the packet header information and the forwarding rule information to construct a detection packet combining multiple information; the path detection generation module sends the detection packet to the data plane, and the detection packet is in the Each switch in the data layer forwards and forms an actual forwarding path; the switch that forwards the detection packet for the first time on the actual path is an ingress switch, and the switch that forwards the detection packet last on the actual path is an egress switch, and the actual path The remaining switches on the actual path are intermediate switches; the ingress switch on the actual path is used to insert the initial label value in the detection packet and report it to the control plane, and the intermediate switch and the egress switch on the actual path are used to update the initial label, and report the updated label value and the header information of the detection packet to the control plane.

The expected path set generation module generates corresponding expected path set information according to multiple expected paths forwarded by the detection packet among several switches in the data plane, including: the expected path set generation module according to the forwarding rule The information constructs multiple expected paths; each expected path has one or more switches, and the ingress switch on the expected path is the ingress switch on the actual path; the expected path set generation module obtains all switches on each expected path feature matrix, and obtain the initial tag value reported by the ingress switch on the actual path; the expected path set generation module uses the feature matrix of one or more switches on each expected path to update and calculate the initial tag value, Obtain the tag value corresponding to each expected path; the expected path set generation module generates an expected path information according to the header information of the probe packet and the tag value corresponding to each expected path; the expected path set generation module counts each Expected path information corresponding to the expected paths respectively to form expected path set information corresponding to the detection packet.

The path consistency verification module detects the actual path forwarded by the detection packet between the switches in the data layer and generates corresponding actual path information, including: the path consistency verification module obtains the detection packet on the actual path The label values reported by the intermediate switch and the egress switch on the network respectively, and the header information of the detection packet; the path consistency verification module determines the forwarding of the detection packet between the switches in the data plane according to the obtained label value the actual path, and generate corresponding actual path information according to the obtained label value and the header information of the detection packet.

The path consistency verification module judges whether the expected path set information contains the expected path information consistent with the actual path information, and if so, passes the path consistency verification of the expected path forwarded by the probe packet and the actual path , including: the path consistency verification module obtains the packet header information and label value in the expected path set information, and obtains the packet header information and label value in the actual path information; the path consistency verification module obtains the actual path The packet header information in the information is compared with the packet header information in the expected path set information, and path consistency verification is performed when the packet header information matches; If the tag value of the actual path information is the same, it passes the path consistency verification.

According to the third aspect, an embodiment provides a heterogeneous converged network, including a data plane and a control plane, the data plane includes a plurality of switches connected topologically, and the control plane communicates with the switches in the data plane connected and used to control the data forwarding path of each of the switches, the data plane can receive the detection packets distributed by the control plane, and forward the detection packets among the switches to form an actual forwarding path; The switch that forwards the detection packet for the first time on the actual path is the ingress switch, the switch that forwards the detection packet last on the actual path is the egress switch, and the rest of the switches on the actual path are intermediate switches; The switch inserts an initial label value into the detection packet, and reports the initial label value to the control plane; the data plane uses the intermediate switch and the egress switch on the actual path to update the initial label value of the detection packet ; The data layer forms corresponding actual forwarding information based on the label value updated by any switch in the intermediate switch and the egress switch on the actual path, and the header information of the detection packet, and reports it to the control layer.

According to the fourth aspect, an embodiment provides a path consistency verification method for a heterogeneous converged network, the heterogeneous converged network includes a data plane and a control plane, and the data plane includes a plurality of switches connected topologically , the control plane is used to control the data forwarding path of each switch, and the path consistency verification method includes: constructing a detection packet according to a preset communication protocol, and sending the detection packet to the data plane; according to The plurality of expected paths forwarded by the detection packets among several switches in the data plane generate corresponding expected path set information; detect the actual paths forwarded by the probe packets among the switches in the data plane and generate corresponding Actual path information: judging whether the expected path set information contains expected path information consistent with the actual path information, and if so, verifying the path consistency between the expected path forwarded by the probe packet and the actual path.

Constructing a detection packet according to a preset communication protocol, sending the detection packet to the data plane, and generating corresponding expected Path aggregation information, including: configuring packet header information and forwarding rules of several switches expected to be executed according to a preset communication protocol, using the packet header information and the forwarding rule information to construct a detection packet combining multiple information; Issued to the data plane, the detection packet is forwarded among the switches in the data plane to form an actual path for forwarding; the switch that forwards the detection packet for the first time on the actual path is the ingress switch, and the last switch on the actual path The switch that forwards the detection packet is an egress switch, and the rest of the switches on the actual path are intermediate switches; the ingress switch on the actual path is used to insert an initial label value into the detection packet and report it to the control plane. The intermediate switch and the egress switch are used to update the initial label of the detection packet, and report the updated label value and the header information of the detection packet to the control plane; path; each expected path has one or more switches, and the ingress switch on the expected path is the ingress switch on the actual path; obtain the feature matrix of all switches on each expected path, and obtain the report of the ingress switch on the actual path The initial label value of each expected path; the characteristic matrix of one or more switches on each expected path is used to update and calculate the initial label value to obtain the corresponding label value of each expected path; according to the header information of the detection packet and The label value corresponding to each expected path generates a piece of expected path information; the expected path information corresponding to each expected path is counted to form the expected path set information corresponding to the detection packet.

The generating the actual path information corresponding to the detection packet according to the actual forwarding information includes: obtaining the label values reported by the intermediate switch and the egress switch of the detection packet on the actual path, and the header information of the detection packet ; Determine the actual path forwarded by the detection packet among the switches in the data plane according to the obtained label value, and generate corresponding actual path information according to the obtained label value and the header information of the detection packet.

The judging whether the expected path set information contains the expected path information consistent with the actual path information includes: obtaining the packet header information and label value in the expected path set information, and obtaining the packet header in the actual path information information and tag values; compare the header information in the actual path information with the header information in the expected path set information, and perform path consistency verification under the condition that the header information matches; judge the expected path set information Whether there is a tag value identical to the actual path information, and if so, pass the path consistency verification.

According to the fifth aspect, an embodiment provides a computer-readable storage medium, on which a program is stored, and the program can be executed by a processor to implement the path consistency verification described in the fourth aspect above method.

Beneficial effect

本申请的有益效果是：The beneficial effect of this application is:

A heterogeneous converged network and its path consistency verification method and storage medium according to the above-mentioned embodiments, wherein the heterogeneous converged network includes a data plane and a control plane, and the control plane constructs a detection packet according to a preset communication protocol and downloads it to the data plane. Send the detection packet; the data layer forwards the detection packet according to the actual path forwarded by each switch and reports the actual forwarding information to the control layer; the control layer generates multiple expected path information according to the forwarding rule information, and uses multiple expected path information to form a detection packet The corresponding expected path set information; the control layer generates the actual path information corresponding to the detection packet according to the actual forwarding information; the control layer judges whether the expected path set information contains the expected path information consistent with the actual path information, and if so, forwards the detection packet The path consistency verification of the expected path and the actual path. First, the technical solution proposes a generalized path consistency verification scheme based on labels and active detection, which is used to verify the consistency between the expected path on the control plane and the actual forwarding path of data packets on the data plane in the heterogeneous converged network The second point is that the technical solution uses an active detection mechanism to send a detection packet for a specific switch forwarding path. After receiving the detection packet, the switch will insert label information into the packet header of the data packet. By mining the path information compressed in the label information, the control level can verify whether the actual path that the data packet passes is consistent with the expected path; the third point, the technical solution essentially models the generalized path consistency problem as a set of expected paths and a set of actual paths that can pass the path consistency verification In the surjective model between , the actual forwarding path of the data packet does not need to be strictly equal to the expected path of the controller, as long as the actual forwarding path of the data packet is consistent with the expected path of the controller in terms of protocol semantics, it can pass the path consistency verification , so as to improve the verification efficiency; the fourth point, the label update process in the technical solution is realized by the multi-protocol switch on the data plane, which can be applied to various protocol scenarios. If the generalized path consistency verification scheme needs to be adapted to the new The network protocol certificate, the label update module of the multi-protocol switch and the path consistency verification module of the controller do not need to be changed, only the path detection module of the controller and the expected path set generation module need to be incrementally modified, thereby improving the Migration Adaptability of Path Consistency Verification Scheme in Heterogeneous Converged Networks.

Description of drawings

FIG. 1 is a structural diagram of a heterogeneous fusion network in an embodiment of the present application;

FIG. 2 is a structural diagram of a controller in an embodiment of the present application;

FIG. 3 is a flowchart of a path consistency verification method in an embodiment of the present application;

Fig. 4 is the flowchart of constructing detection bag;

Fig. 5 is the flow chart that generates expected route set information;

Fig. 6 is the flowchart of generating actual path information;

FIG. 7 is a flow chart of performing path consistency verification;

FIG. 8 is a structural diagram of a network control device in an embodiment of the present application.

Embodiments of the present invention

The present application will be described in further detail below through specific embodiments in conjunction with the accompanying drawings. Wherein, similar elements in different implementations adopt associated similar element numbers. In the following implementation manners, many details are described for better understanding of the present application. However, those skilled in the art can readily recognize that some of the features can be omitted in different situations, or can be replaced by other elements, materials, and methods. In some cases, some operations related to the application are not shown or described in the description, this is to avoid the core part of the application being overwhelmed by too many descriptions, and for those skilled in the art, it is necessary to describe these operations in detail Relevant operations are not necessary, and they can fully understand the relevant operations according to the description in the specification and general technical knowledge in the field.

In addition, the characteristics, operations or characteristics described in the specification can be combined in any appropriate manner to form various embodiments. At the same time, the steps or actions in the method description can also be exchanged or adjusted in a manner obvious to those skilled in the art. Therefore, the various sequences in the specification and drawings are only for clearly describing a certain embodiment, and do not mean a necessary sequence, unless otherwise stated that a certain sequence must be followed.

The serial numbers assigned to components in this document, such as "first", "second", etc., are only used to distinguish the described objects, and do not have any sequence or technical meaning. The "connection" and "connection" mentioned in this application include direct and indirect connection (connection) unless otherwise specified.

If the path consistency verification problem of software-defined network (SDN) is divided into strict path consistency and generalized path consistency, it can be considered that the path consistency verification problem in the multi-protocol heterogeneous converged network belongs to the generalized path consistency problem , then the technical solution of this application proposes a generalized path consistency verification scheme based on tags and active detection mechanisms for the generalized path consistency verification problem.

Embodiment one,

Please refer to FIG. 1. In this embodiment, a heterogeneous converged network is disclosed, which mainly includes a data plane 1 and a control plane 2, which will be described separately below.

The data layer 1 includes a plurality of switches connected topologically, such as switches 11, 12, 13, 14, 15, and 16. The switch 11 is connected to the switches 12 and 13 respectively, and the switch 12 is connected to the switches 13 and 14 respectively. Communicatively connected with switches 14, 15, and 16; and, each switch can perform data forwarding according to at least one communication protocol, that is, each switch has a multi-protocol data forwarding function, and can also be called a multi-protocol switch; the communication here Protocols include but are not limited to TCP/IP protocol, NetBEUI protocol, IPX/SPX protocol.

The control plane 2 is connected to the switches in the data plane 1, and is used to control the data forwarding path of each switch. For example, the control plane 2 may include at least one controller 21, and the controller 21 is respectively connected to the switches 11, 12, 13, 14, 15, and 16 in communication. The controller 21 can send control information to each switch, and can also receive feedback from each switch. report information, so as to realize the control of the data forwarding path of each switch.

It should be noted that the purpose of each switch in the data layer 1 is to provide network access between different hosts, for example, for the hosts 31, 32, 33, and 34 in Figure 1, the host 31 communicates with the switch 11, and the host 32 communicates with the switch 14 communication connection, the host 33 is connected to the switch 15, the host 34 is connected to the switch 16, and each host relies on each switch to realize the interconnection and intercommunication of the network.

In this embodiment, the process of the control plane 2 controlling the data forwarding path of each switch in the data plane 1 can be described as follows:

(1) In the first processing link, the control layer 2 constructs a detection packet combining multiple information according to the preset communication protocol, and sends the detection packet to the data layer. The communication protocol used to construct the detection packet can adopt the TCP/IP protocol, and the detection packet should include packet header information and forwarding rule information of several switches expected to perform forwarding, wherein the packet header information can include its own identification mark, ingress switch address, protocol Type and other information, forwarding rule information can be considered as packet body information, and can include addresses of several switches expected to perform forwarding (such as the respective addresses of switches 11, 12, 13, and 14). It can be understood that the function of the detection packet is to detect the data forwarding paths of the switches in the data plane 1 .

(2) In the second processing link, after the control layer 2 sends the detection packet to the data layer 1, the data layer 1 will respond, and the data layer 1 will forward the detection packet according to the actual path forwarded by each switch, and report to the control layer to actually forward the information. It can be understood that although the detection packet contains the forwarding rule information of several switches that are expected to perform forwarding, there may be a case where a switch forwards incorrectly during the actual data forwarding process, which will cause the actual forwarding path to be different from the expected path. When the inconsistency occurs, it is necessary to make each switch that actually participates in the forwarding record the actual forwarding path of the detection packet, so as to generate the actual forwarding information.

(3) In the third processing link, the control plane 2 generates multiple pieces of expected path information according to the forwarding rule information, and uses the multiple pieces of expected path information to form the expected path set information corresponding to the detection packet. Referring to FIG. 1, if the controller 21 expects to build a network path between the host 31 and the host 32 through the switches 11, 12, 13, and 14, the expected path information that can be generated includes switches 11-12-13-14, and switches 11 -13-14, and a switch 11-12-14, then these expected path information can constitute the expected path set information corresponding to the detection packet, for example, the expected path set information is recorded as Q.

(4) In the fourth processing link, the control plane 2 generates actual path information corresponding to the detection packet according to the actual forwarding information. Referring to FIG. 1, after the controller 21 sends the detection packet to the ingress switch 11, the detection packet starts to be forwarded in the data layer 1. If the actual forwarding path of the detection packet is recorded by the switch 11-13-14, then this The actual path information corresponding to the detection packet can be generated, for example, the actual path information can be recorded as s.

(5) In the fifth processing link, the control plane 2 judges whether the expected path set information contains the expected path information consistent with the actual path information, and if so, passes the path consistency verification of the expected path forwarded by the probe packet and the actual path. It can be understood that the control plane 2 is to judge whether the expected path set information Q contains the actual path information s, and pass the path consistency verification only when the actual path information is included.

In this embodiment, for the above second processing link, the process of forwarding the detection packet according to the actual path forwarded by each switch at the data plane 1 includes:

1) The data layer 1 receives the detection packets that are distributed, and forwards the detection packets between switches to form the actual forwarding path. In order to facilitate the understanding of the actual forwarding process, the switch that forwards the detection packet on the actual path for the first time can be regarded as the ingress switch. The switch that forwards the detection packet last on the actual path is the egress switch, and the remaining switches on the actual path are intermediate switches. For example, in Figure 1, the controller 21 sends the detection packet to the switch 11 of the data layer 1, and the switches 11, 12, 13, and 14 of the data layer 1 forward the detection packet, then the switch 11 is an ingress switch, and the switch 14 is an egress switch , the switches 12 and 13 are all intermediate switches.

2) The data plane 1 uses the ingress switch on the actual path to insert the initial label value into the detection packet, and reports the initial label value to the control plane.

In a specific embodiment, the initialization tag value may consist of a two-dimensional random vector (v ₁ , v ₂ ) and a 32-bit modulus p, wherein the two-dimensional random vector may include two 32-bit integers. The initial label value is used in subsequent label update calculations.

3) Data layer 1 updates the initial label value of the detection packet by using the intermediate switch and the egress switch on the actual path, and the label update module 111 in the switch may specifically execute the label update algorithm.

In a specific embodiment, the controller 21 can assign a matrix address to each switch and send it to the corresponding switch, so that each switch can have a unique 2*2 characteristic matrix (indicated by Mi), and The four values in the feature matrix are all 32-bit integers. Every time the detection packet passes through a switch (indicated by Si), the switch Si will perform matrix multiplication between the label value in the detection packet and the characteristic matrix Mi of the switch Si, so as to obtain a new label value to replace the original label value.

For example, the update process of the tag value refers to the following formula

p=p*det(Mi);

(v _2i+1 ,v _2i+2 )=(v _2i-1 ,v _2i )*Mi%p.

Among them, p is the modulus in the label value, det represents the matrix determinant, (v _2i+1 , v _2i+2 ), (v _2i-1 , v _2i ) both represent two-dimensional random vectors, and the subscript i represents the switch The serial number, % means modulo operation.

In a specific embodiment, the update process of the label value of the label update module 111 in the intermediate switch and the egress switch is as follows: a) For the intermediate switch on the actual path, the intermediate switch uses its own characteristic matrix and the initial label inserted in the detection packet Values are matrix multiplied to obtain the first label value; b) For the egress switch on the actual path, the egress switch performs a matrix multiplication operation on its own characteristic matrix and the first label value to obtain the second label value; c) In the matrix multiplication During the operation, a modulo calculation (such as Mi%p) is performed on the feature matrix involved in the operation to prevent matrix multiplication overflow, and both the first tag value and the second tag value are updated tag values, which need to be combined with the header information to form the actual Forward information.

It should be noted that, because the matrix multiplication has an irreversible property, the final result of the matrix multiplication can reflect the sequence of the switches that the probe packets actually pass through. In addition, in order to avoid overflow, in addition to the matrix multiplication operation, an additional modulo operation is added, and the result after the modulus is updated to the label as a new two-dimensional vector. In this way, the matrix can be avoided. Multiplication overflows. The value of the modulus p is related to the determinant of the characteristic matrix of the switch, and the value of the modulus will be continuously increased through the multiplication operation of the modulus and the determinant. It is important to note that because the update of the modulus is also a multiplication operation, there is also a risk of modulus overflow. In order to avoid this risk, the determinant size of the switch must be controlled within a reasonable range. As for the determinant The format size can be set according to the requirement.

4) The data layer 1 forms corresponding actual forwarding information based on the label value updated by any switch in the intermediate switch and the egress switch on the actual path, and the header information of the detection packet, and reports it to the control layer 2. It can be understood that since both the intermediate switch and the egress switch can update the tag value to obtain the updated tag value, then in order for the controller 21 to know the forwarding state of the detection packet, the intermediate switch and the egress switch can update the tag value The label value and the header information of the detection packet are formed into actual forwarding information, which is reported to the controller 21 .

In this embodiment, for the above third processing link, the control layer 2 generates multiple pieces of expected path information according to the forwarding rule information, and uses the multiple pieces of expected path information to form the expected path set information corresponding to the probe packet, including:

1) The control plane 2 constructs multiple expected paths according to the forwarding rule information, each expected path has one or more switches, and the ingress switch on the expected path is the ingress switch on the actual path. For example, in Fig. 1, if a network path between the host 31 and the host 32 is to be constructed, there are three expected paths, namely switch 11-12-13-14, switch 11-13-14, switch 11-12-14, Wherein the switch 11 is an ingress switch on the desired path.

2) The control plane 2 obtains the characteristic matrix of all switches on each expected path, and obtains the initial label value reported by the ingress switch on the actual path. For example, in Figure 1, for three expected paths (respectively switches 11-12-13-14, switches 11-13-14, and switches 11-12-14), the controller 21 can obtain the characteristics of switches 11, 12, 13, and 14 matrix, and obtain the initial label value of switch 11.

3) The control plane 2 uses the feature matrix of one or more switches on each expected path to update and calculate the initial label value, and obtain the label value corresponding to each expected path. For example, in Fig. 1, since the controller 21 has obtained the feature matrix of the switches 11, 12, 13, 14, and the initial label value of the switch 11, then the initial label value can be multiplied by the feature matrix of the switch 11 to obtain a new label value and then Multiply with the feature matrix of the switch 12 to get a new label value and then multiply it with the feature matrix of the switch 13 to get a new label value and then multiply it with the feature matrix of the switch 14, the final label value is the expected path (switch 11 -12-13-14); then similarly, the desired path (switch 11-13-14) and the label value of the desired path (switch 11-12-14) can be obtained.

4) The control plane 2 generates a piece of expected path information according to the header information of the detection packet and the label value corresponding to each expected path.

5) The control plane 2 counts the expected path information corresponding to each expected path, and then can form the expected path set information corresponding to the detection packet.

Further, in order to ensure the validity of the storage of the desired path set information, the controller 21 in the control plane 2 can store the desired path set information into a preset path table, and use a Bloom filter in the path table to filter each desired path The tag values corresponding to the paths are mapped and stored. It should be noted that the expected path set information stores the label values corresponding to each expected path, that is, the 1*2 vector corresponding to any expected path; in order to reduce the storage space required by the expected path set information, by The tag values corresponding to multiple expected paths are mapped to a fixed-length Bloom filter to save storage space. It can be understood that Bloom filters are usually used to quickly determine whether an element exists in a set, which consists of several independent hash functions and a binary vector; and, Bloom filters pass through multiple hash maps To determine whether an element is in the set, the hash function will map this element into several values, these values correspond to the subscripts of the Bloom filter, if the values corresponding to these subscripts of the Bloom filter are all 1, then The element belongs to this set; of course, if the values corresponding to these subscripts of the Bloom filter are not all 1, the element does not belong to this set.

In the fourth processing link above, the control plane 2 generates the actual path information corresponding to the detection packet according to the actual forwarding information, including:

1) The control plane 2 obtains the label values reported by the intermediate switch and the egress switch of the detection packet on the actual path, and obtains the header information of the detection packet. For example, in FIG. 1 , when the actual forwarding path is the switch 11-13-14, the switches 13 and 14 will respectively upload the updated label value and header information of the detection packet, and the controller 21 will receive the label value and header information.

2) The control plane 2 determines the actual path for the detection packet to be forwarded between the switches in the data plane according to the obtained label value, and generates the corresponding actual path information according to the obtained label value and the header information of the detection packet. The controller 21 has received the label value and packet header information. Since the label value is the result of calculating the characteristic matrix of the switch through matrix multiplication, the characteristic matrix of the switch can be obtained through the inverse matrix operation, so as to know which switch participated in the detection packet. The actual forwarding; and, the label value and packet header information reported by the egress switch can be used to generate the corresponding actual path information.

In this embodiment, for the above fifth processing link, the control plane 2 judges whether the expected route set information contains the expected route information consistent with the actual route information including:

1) The control plane 2 obtains the packet header information and label value in the expected path set information, and obtains the packet header information and label value in the actual path information. For example, in Figure 1, since the expected path set information includes multiple pieces of expected path information, each piece of expected path information includes the header information of the probe packet and the corresponding label value, and the actual path information also includes the header information of the probe packet and the corresponding label value, so the path consistency verification can be performed on the expected path information and the actual path information based on the packet header information and label value.

2) The control plane 2 compares the packet header information in the actual path information with the packet header information in the expected path set information, and performs path consistency verification when the packet header information matches. It can be understood that it is only meaningful to verify the consistency between the expected path and the actual path of the same detection packet. The header information of the detection packet is unique, so the matching judgment is made on the header information. Only when the header information matches can the path be determined. The object of the consistency verification is the actual path information and the expected path information of a probe packet.

3) The control plane 2 judges whether there is the same label value as the actual path information in the expected path set information, and if so, passes the path consistency verification. It can be understood that since the expected path set information includes multiple pieces of expected path information, each piece of expected path information includes a corresponding tag value, so the expected path set information includes multiple tag values with different values, as long as there is one If the label value is the same as the label value in the actual path information, it means that the sequence of switches expected to be forwarded by the same probe packet is consistent with the sequence of switches actually forwarded, and there is no switch forwarding error, so the path consistency verification has passed.

In this embodiment, the technical solution will construct the detection packet according to the forwarding rules, and then send the actively generated detection packet to the data layer, and judge whether it is consistent with the expected path of the detection packet by detecting the actual forwarding path of the detection packet, thereby Determine whether the data plane is consistent with the control plane. If the actual forwarding behavior of the detection packet is inconsistent with the expectation, it indicates that there is an inconsistency between the data plane and the control plane, and the faulty switch needs to be maintained.

In this embodiment, the technical solution is to realize the path consistency detection of lower layer data forwarding through the active detection mechanism of the upper layer controller. When a data packet (or detection packet) enters the network, if the ingress switch does not know how to forward the data packet, the ingress switch will send a Packet_In message to the controller, and the controller will calculate the route for the data packet after receiving the Packet_In message path, and deliver the corresponding flow table rules to the corresponding switches; then, the controller uses the active detection mechanism to generate detection packets on the corresponding path for path detection, so as to determine whether the flow table rules are correctly delivered and whether installed and implemented correctly by the switch.

In this embodiment, the actual forwarding path information that the detection packet passes is compressed and recorded through the label value. When the detection packet generated by the controller enters the data plane, the ingress switch will execute the label insertion algorithm to insert the initial label value into the detection packet. As the detection packet is forwarded in the data plane, the label value will be updated by the switch through the label update algorithm; when the detection packet reaches the end of the path, the egress switch will remove the label value and report it to the controller for path consistency verification. It should be noted that the storage, transmission and calculation overhead of label values should not be too large, and the limited space should be used to carry enough rich actual path information to provide assistance for generalized path consistency verification.

It should be noted that the data plane of the traditional SDN network is a single-protocol architecture, that is, the switches on the data plane can only support the forwarding of IPv4 protocol data packets, and the routing function of the network forwarding equipment is moved up to the control plane, and the controller It is responsible for the end-to-end routing calculation of data packets. However, the forwarding function of the network forwarding device is reserved on the switch on the data plane, and the switch has no cache function, which makes the path consistency verification problem easier. In the traditional technical solution, if the controller wants to perform path consistency verification on the path A-B-C-D, and the expected path of the controller is A-B-C-D, only when the actual forwarding path of the IPv4 data packet is strictly equal to A-B-C-D, the path consistency verification can pass . Therefore, the path consistency verification problem in the traditional SDN network belongs to strict path consistency, that is, the actual path of the data packet must be strictly equal to the expected path of the controller, so that the path consistency verification can pass. In the strict path consistency problem, there is only one expected path for data packets, and there is only one actual path that can pass path consistency verification, which is a one-to-one relationship. For intuitive description, the traditional strict path consistency problem can be modeled as a bijection model between the expected path set X and the actual path set Y that can make the path consistency verification pass. Bijection is a concept in mathematical sets. If The mapping f is a mapping from the set X to the set Y. If any element y in the set Y has only one element x in the set X, so that y=f(x), then the mapping f is considered to be the set X and the set Y between bijections.

Compared with the traditional way of verifying path consistency, technical improvements are made in this embodiment. In this embodiment, for a multi-protocol heterogeneous converged network (MPSDN), the multi-protocol switch on the data plane can simultaneously support the forwarding of IPv4 protocol, IPv6 protocol and NDN protocol data packets, and the routing function of the network forwarding device is activated Moved to the control plane, the controller is responsible for the end-to-end routing calculation of data packets. The forwarding function of the network forwarding device is reserved on the multi-protocol switch in the data plane. Because the data plane in MPSDN can support the forwarding of NDN protocol data packets, the multi-protocol switch on the data plane also has a cache function. It can be understood that in this scenario, the path consistency verification problem will become more complicated. The path consistency problem in the multi-protocol heterogeneous fusion network belongs to the generalized path consistency, that is, the actual forwarding path of the data packet (or detection packet) It is not necessary to be strictly equal to the expected path of the controller to pass the path consistency verification. As long as the actual forwarding path of the data packet is consistent with the expected path of the controller in terms of protocol semantics, it is considered that the path consistency verification is passed. In the generalized path consistency problem, there is only one expected path for a data packet, but there may be many actual paths that can make the path consistency verification pass, which is a one-to-many relationship. In this embodiment, the generalized path consistency problem is modeled as a surjective model between the expected path set X and the actual path set Y that can make the path consistency verification pass. The surjective is a concept in a mathematical set. If the mapping f is A mapping from a set X to a set Y, if any element y in the set Y has at least one element x corresponding to it in the set X, so that y=f(x), then the mapping f is considered to be between the set X and the set Y Full shot in between. Then, the generalized path consistency verification problem can be solved based on the mapping idea of this surjective model. In this embodiment, based on the detection principle of the detection packet, data traffic generated by the host (such as the host 31 ) may also be forwarded and detected. For example, when a data packet representing real traffic enters a heterogeneous converged network, an edge switch (such as an ingress switch) of the heterogeneous converged network will mark the header of the data packet by inserting label information. When the marked data packet is forwarded to a switch at the edge of the network (such as an egress switch), it will report the header information and label information of the data packet to the upper-layer controller, and the controller will obtain the actual forwarding path of the data packet through the label information , and then determine whether there is a rule inconsistency by comparing whether the actual path information of the data packet is consistent with the expected path.

In this embodiment, the controller can implement path consistency detection at the path granularity. When the data packet generated by the host enters the network, if the ingress switch does not know how to forward the data packet, the ingress switch will send a message to the controller. After receiving the message, the controller will calculate the routing path for the data packet, and then send the corresponding forwarding rules to the corresponding switch. The controller can use the active detection mechanism to generate a detection packet on the corresponding path for path detection, so as to judge whether the forwarding rule is correctly issued and whether it is correctly installed and executed by the switch.

Embodiment two,

Please refer to FIG. 1 and FIG. 2. This embodiment discloses a heterogeneous converged network, including a data plane 1 and a control plane 2. The data plane 1 includes a plurality of switches connected topologically, such as switches 11, 12, 13, 14, and 15. , 16, a controller 21 is deployed in the control plane 2, and the controller 21 is connected to each switch. Next, the path consistency verification process of the heterogeneous converged network will be described in detail from the perspective of the controller 21 .

It should be noted that the controller 21 may be an independent control device, or may be a functional component distributed on the cloud or on a local logical operation circuit. For example, related functions are given to the controller 21 by means of software design and program programming. Of course, the functions realized by the controller 21 can be embodied by running software, as long as the software can be executed on the processor.

The controller 21 includes a path detection generation module 211 , an expected path set generation module 212 , and a path consistency verification module 213 , which will be described separately below.

The role of the path detection generation module 211 is to construct a multi-information combined detection packet according to a preset communication protocol, and deliver the constructed detection packet to the ingress switch in the data plane 1 . The function of the detection packet is to detect the data forwarding path of each switch in the data layer 1.

The function of the expected path set generation module 212 is to generate the corresponding expected path set information according to the multiple expected paths forwarded by the probe packet among several switches in the data plane 1 .

The role of the path consistency verification module 213 is to detect the actual path forwarded between the switches in the data layer 1 and generate corresponding actual path information; If the expected path information is consistent with the actual path information, the path consistency verification of the expected path forwarded by the probe packet and the actual path is passed.

It should be noted that the communication protocols used to construct the detection packet include but are not limited to TCP/IP protocol, NetBEUI protocol, IPX/SPX protocol, NDN orchestration control protocol, blockchain on-chain/off-chain collaboration protocol. For example, the communication protocol used to construct the detection packet can adopt the TCP/IP protocol, and the detection packet should include packet header information and forwarding rule information of several switches that are expected to perform forwarding, wherein the packet header information can include its own identification mark, the address of the ingress switch , protocol type and other information, forwarding rule information can be considered as packet body information, and can include addresses of several switches expected to perform forwarding.

In one embodiment, the path detection generation module 211 configures header information and forwarding rules of several switches expected to be executed according to a preset communication protocol, and uses the packet header information and forwarding rule information to construct a detection packet; then, the path detection generation module 211 will The detection packet is delivered to the ingress switch in the data plane 1, and then the detection packet can be forwarded among the switches in the data plane 1 to form an actual forwarding path. In order to facilitate the understanding of the actual forwarding process, the switch that forwards the detection packet for the first time on the actual path is the ingress switch, the switch that forwards the detection packet last on the actual path is the egress switch, and the rest of the switches on the actual path are intermediate switches; the ingress switch on the actual path is represented by To insert the initial label value in the detection packet and report it to the control plane, the intermediate switch and the egress switch on the actual path are used to update the initial label value of the detection packet, and report the updated label value and the header information of the detection packet to the control plane. Controller 21 in Level 2.

In one embodiment, in order to generate the expected path set information, the expected path set generation module 212 constructs multiple expected paths according to the forwarding rule information, each expected path has one or more switches, and the ingress switches on the expected path are actual The entry switch on the path; then, the expected path set generation module 212 obtains the feature matrix of all switches on each expected path, and obtains the initial label value reported by the entry switch on the actual path; next, the expected path set generation module 212 utilizes The feature matrix of one or more switches on each expected path updates and calculates the initial label value to obtain the corresponding label value of each expected path; then, the expected path set generation module 212 is based on the header information of the probe packet and each The tag value corresponding to the expected path generates a piece of expected path information; thus, the expected path set generating module 212 counts the expected path information corresponding to each expected path, thus forming the expected path set information corresponding to the detection packet. For example, in Fig. 1, if a network path between the host 31 and the host 32 is to be constructed, there are three expected paths, namely switch 11-12-13-14, switch 11-13-14, switch 11-12-14, For these three expected paths, the controller 21 can obtain the characteristic matrix of the switch 11, 12, 13, 14, and obtain the initial label value of the switch 11; since the controller 21 has obtained the characteristic matrix of the switch 11, 12, 13, 14, and the initial tag value of switch 11, then the initial tag value can be multiplied with the feature matrix of switch 11 to obtain a new tag value and then multiplied with the feature matrix of switch 12 to obtain a new tag value and then be used with the feature matrix of switch 13. Multiplication, get the new label value and then multiply it with the feature matrix of the switch 14, the final label value is the label value of the expected path (switch 11-12-13-14); then similarly, you can get the expected path (switch 11 -13-14), and the label value of the expected path (switch 11-12-14); at this time, the controller 21 generates a piece of expected path information according to the header information of the detection packet and the label value corresponding to each expected path, and then counts each The expected path information corresponding to the expected paths respectively can be used to obtain the expected path set information.

In one embodiment, in order to generate the actual path information, the path consistency verification module 213 obtains the label value reported by the intermediate switch and the egress switch of the detection packet on the actual path, and the header information of the detection packet; then, the path consistency verification The module 213 determines the actual path forwarded by the detection packet among the switches in the data plane according to the obtained label value, and generates corresponding actual path information according to the obtained label value and header information of the detection packet. Such as Fig. 1, for the situation that the actual forwarding path is switches 11-13-14, switches 13, 14 will respectively upload updated tag values and packet header information of probe packets, and controller 21 will receive tag values and packet header information; It is the result of the characteristic matrix of the switch calculated by matrix multiplication, so the characteristic matrix of the switch can be obtained through the reverse matrix operation, so as to know which switch participated in the actual forwarding of the detection packet; and, the label value reported by the egress switch can be used Generate actual path information corresponding to the packet header information.

In one embodiment, in order to realize the path consistency verification of the expected path and the actual path, the path consistency verification module 213 obtains the packet header information and label value in the expected path set information, and obtains the packet header information and label value in the actual path information ; Then, the path consistency verification module 213 compares the packet header information in the actual path information with the packet header information in the expected path set information, and performs path consistency verification under the condition that the packet header information matches; Next, the path consistency verification module 213 Determine whether there is a tag value identical to the actual path information in the expected path set information, and if so, pass the path consistency verification. For example, in Figure 1, since the expected path set information includes multiple pieces of expected path information, each piece of expected path information includes the header information of the probe packet and the corresponding label value, and the actual path information also includes the header information of the probe packet and the corresponding label value, so the path consistency verification module 213 can perform path consistency verification on the expected path information and the actual path information based on the header information and the label value.

Embodiment three,

Please refer to FIG. 1 and FIG. 2. This embodiment discloses a heterogeneous converged network, including a data plane 1 and a control plane 2. The data plane 1 includes a plurality of switches connected topologically, such as switches 11, 12, 13, 14, and 15. , 16, a controller 21 is deployed in the control plane 2 and connected to each switch, and the controller 21 in the control plane 2 is used to control the data forwarding path of each switch in the data plane 1 . Next, the data forwarding process of the probe packet will be described from the perspective of data plane 1.

Since the controller 21 in the control plane 2 can construct a detection packet combining multiple information according to the preset communication protocol, and send the detection packet to the data plane 1, the data plane 1 can receive the detection packet sent by the control plane 2, and The probe packets are forwarded among the switches to form the actual forwarding path. It should be noted that the switch that first forwards the detection packet on the actual path is the ingress switch, the switch that forwards the detection packet last on the actual path is the egress switch, and the remaining switches on the actual path are intermediate switches. For example, in Figure 1, the controller 21 sends the detection packet to the switch 11 of the data layer 1, and the switches 11, 12, 13, and 14 of the data layer 1 forward the detection packet, then the switch 11 is an ingress switch, and the switch 14 is an egress switch , the switches 12 and 13 are all intermediate switches.

In the data plane 1, the data plane 1 uses the ingress switch on the actual path to insert the initial label value into the detection packet, and reports the initial label value to the control plane. For example, the initialization tag value may consist of a two-dimensional random vector (v ₁ , v ₂ ) and a 32-bit modulus p, wherein the two-dimensional random vector may include two 32-bit integers. The initial label value is used in subsequent label update calculations.

In the data plane 1, the data plane 1 uses the intermediate switch and the egress switch on the actual path to update the initial label value of the detection packet. For example, the controller 21 can assign a matrix address to each switch and send it to the corresponding switch, so that each switch can have a unique 2*2 feature matrix (represented by Mi), and the four in the feature matrix Both values are 32-bit integers. Every time the detection packet passes through a switch (indicated by Si), the switch Si will perform matrix multiplication between the label value in the detection packet and the characteristic matrix Mi of the switch Si, so as to obtain a new label value to replace the original label value. For example, the update process of the label value refers to the following formula p=p*det(Mi), (v _2i+1 ,v _2i+2 )=(v _2i-1 ,v _2i )*Mi%p, where p is the label The modulus in the value, det represents the matrix determinant, (v _2i+1 ,v _2i+2 ), (v _2i-1 ,v _2i ) both represent two-dimensional random vectors, the subscript i represents the serial number of the switch, % represents Modulo operation.

In the data layer 1, the data layer 1 forms corresponding actual forwarding information based on the label value updated by any switch in the intermediate switch and the egress switch on the actual path, and the header information of the detection packet, and reports it to the control layer in the control layer 2. Device 21.

In a specific embodiment, the update process of the tag value is as follows:

a) For the intermediate switch on the actual path, the intermediate switch performs a matrix multiplication operation on its own characteristic matrix and the initial label value inserted in the detection packet to obtain the first label value.

b) For the egress switch on the actual path, the egress switch performs a matrix multiplication operation on its own characteristic matrix and the first label value to obtain the second label value.

c) In the matrix multiplication operation, the modulus calculation (such as Mi%p) is performed on the feature matrix involved in the operation to prevent matrix multiplication overflow, and the first label value and the second label value are updated label values, which need to be compared with The header information together forms the actual forwarding information.

Embodiment four,

Based on the heterogeneous converged networks respectively disclosed in Embodiment 1, Embodiment 2, and Embodiment 3 above, this embodiment discloses a path consistency verification method for a heterogeneous converged network.

Referring to Figure 1, for the heterogeneous converged network here, it includes a data plane 1 and a control plane 2, and the data plane 1 includes multiple switches connected topologically, such as switches 11, 12, 13, 14, 15, 16, and the control plane 2 A controller 21 is deployed in and connected to each switch, and the controller 21 in the control plane 2 is used to control the data forwarding path of each switch in the data plane 1 .

In this embodiment, referring to FIG. 3 , the method for verifying path consistency includes steps 410-440, which will be described respectively below.

Step 410, the controller 21 constructs a detection packet combining multiple information according to a preset communication protocol, and delivers the detection packet to the data plane.

In step 420, the controller 21 generates corresponding expected path set information according to the multiple expected paths forwarded by the detection packet among several switches in the data plane.

In step 430, the controller 21 detects the actual path forwarded by the detection packet among the switches in the data plane and generates corresponding actual path information.

In step 440, the controller 21 judges whether the expected path set information contains expected path information consistent with the actual path information, and if so, passes the path consistency verification between the expected path forwarded by the probe packet and the actual path.

In this embodiment, the above step 410 is mainly related to the process of constructing a detection packet, so refer to FIG. 4 , this step 410 may specifically include steps 411-413, which are respectively described as follows.

In step 411, the controller 21 configures packet header information and forwarding rule information of several switches expected to be implemented according to a preset communication protocol. The communication protocol used for constructing the detection packet may adopt the TCP/IP protocol, the NetBEUI protocol or the IPX/SPX protocol. The packet header information of the detection packet can include information such as self-identification mark, entry switch address, protocol type, etc., and the forwarding rule information of the detection packet can be considered as packet body information, and can include the addresses of several switches expected to perform forwarding, such as switch 11, Addresses of 12, 13, and 14 respectively.

In step 412, the controller 21 uses the packet header information and forwarding rule information to construct a detection packet combining multiple information.

In step 413, the controller 21 sends the detection packet to the data plane 1, and the detection packet is forwarded among the switches in the data plane 1 to form an actual forwarding path. It should be noted that, in the data plane, the switch that forwards the detection packet for the first time on the actual path is the ingress switch, the switch that forwards the detection packet last on the actual path is the egress switch, and the rest of the switches on the actual path are intermediate switches; and, the actual path The ingress switch on the path is used to insert the initial label value in the detection packet and report it to the control plane 2, the intermediate switch and the egress switch on the actual path are used to update the initial label value of the detection packet, and compare the updated label value with the The header information of the detection packet is reported to the control plane 2 .

In this embodiment, the above step 420 is mainly related to the process of generating the expected path set information, so refer to FIG. 5 , this step 420 may specifically include steps 421-425, which are respectively described as follows.

In step 421, the controller 21 constructs multiple expected paths according to the forwarding rule information, and each expected path has one or more switches, and the ingress switch on the expected path is the ingress switch on the actual path. For example, in Fig. 1, if a network path between the host 31 and the host 32 is to be constructed, there are three expected paths, namely switch 11-12-13-14, switch 11-13-14, switch 11-12-14, Wherein the switch 11 is an ingress switch on the desired path.

In step 422, the controller 21 obtains the characteristic matrix of all switches on each expected path, and obtains the initial label value reported by the ingress switch on the actual path. For example, in Figure 1, for three expected paths (respectively switches 11-12-13-14, switches 11-13-14, and switches 11-12-14), the controller 21 can obtain the characteristics of switches 11, 12, 13, and 14 matrix, and obtain the initial label value of switch 11.

In step 423, the controller 21 uses the feature matrix of one or more switches on each expected path to update and calculate the initial label value, so as to obtain the label value corresponding to each expected path. For example, in Fig. 1, since the controller 21 has obtained the feature matrix of the switches 11, 12, 13, 14, and the initial label value of the switch 11, then the initial label value can be multiplied by the feature matrix of the switch 11 to obtain a new label value and then Multiply with the feature matrix of the switch 12 to get a new label value and then multiply it with the feature matrix of the switch 13 to get a new label value and then multiply it with the feature matrix of the switch 14, the final label value is the expected path (switch 11 -12-13-14); then similarly, the desired path (switch 11-13-14) and the label value of the desired path (switch 11-12-14) can be obtained.

In step 424, the controller 21 generates a piece of expected path information according to the header information of the detection packet and the label value corresponding to each expected path.

In step 425, the controller 21 collects the expected path information corresponding to each expected path, so as to form the expected path set information corresponding to the detection packet.

In this embodiment, the above step 430 is mainly related to the process of generating actual path information, so refer to FIG. 6 , this step 430 may specifically include steps 431-433, which are respectively described as follows.

In step 431, the controller 21 obtains the label values reported by the intermediate switch and the egress switch of the detection packet on the actual path, and the header information of the detection packet. For example, in FIG. 1 , when the actual forwarding path is the switch 11-13-14, the switches 13 and 14 will respectively upload the updated label value and header information of the detection packet, and the controller 21 will receive the label value and header information.

In step 432, the controller 21 determines the actual path for the detection packet to be forwarded among the switches in the data plane according to the obtained label value.

In step 433, the controller 21 generates corresponding actual path information according to the acquired tag value and header information of the detection packet. For example, in Figure 1, the controller 21 has received the label value and packet header information. Since the label value is the result of calculating the characteristic matrix of the switch through matrix multiplication, the characteristic matrix of the switch can be obtained through the inverse matrix operation, so as to know which switch Participated in the actual forwarding of the detection packet; and, can use the label value and packet header information reported by the egress switch to generate the corresponding actual path information.

In this embodiment, the above step 440 mainly involves the process of verifying path consistency, so refer to FIG. 7 , this step 440 may specifically include steps 441-443, which are respectively described as follows.

In step 441, the controller 21 obtains the packet header information and label value in the expected path set information, and obtains the packet header information and label value in the actual path information. For example, in Figure 1, since the expected path set information includes multiple pieces of expected path information, each piece of expected path information includes the header information of the probe packet and the corresponding label value, and the actual path information also includes the header information of the probe packet and the corresponding label value, so the path consistency verification can be performed on the expected path information and the actual path information based on the packet header information and label value.

In step 442, the controller 21 compares the packet header information in the actual path information with the packet header information in the expected path set information, and performs path consistency verification when the packet header information matches.

In step 443, the controller 21 judges whether there is a tag value identical to the actual path information in the expected path set information, and if so, passes the path consistency verification.

It should be noted that it is only meaningful to verify the consistency between the expected path and the actual path of the same detection packet. The header information of the detection packet is unique, so the matching judgment of the header information can only be performed when the header information matches. Determine the actual path information and expected path information of the same detection packet as the object of path consistency verification. Moreover, since the expected path set information includes multiple pieces of expected path information, each piece of expected path information includes a corresponding tag value, so the expected path set information includes multiple tag values with different values, as long as there is one tag value If the value is the same as the label value in the actual path information, it indicates that the sequence of switches expected to be forwarded by the same probe packet is consistent with the sequence of switches actually forwarded, and no switch forwarding errors occur, so the path consistency verification has passed.

Embodiment five,

On the basis of the path consistency verification method disclosed in Embodiment 4, this embodiment discloses a network control device, and the network control device 5 includes a memory 51 and a processor 52 .

In this embodiment, the memory 51 and the processor 52 are the main components of the network control device 5. Of course, the network control device 5 may also include some functional modules connected to the processor 52. For details, refer to the first embodiment above. Let's go into more detail.

Wherein, the memory 51 may be used as a computer-readable storage medium for storing a program here, and the program may be a program code corresponding to the path consistency verification method in Embodiment 4.

Wherein, the processor 52 is connected to the memory 51, and is used to execute the program stored in the memory 51 to implement the path consistency verification method disclosed in the fourth embodiment above. It should be noted that the functions implemented by the processor 52 can refer to the controller 21 in the first embodiment, and no detailed description is given here.

Those skilled in the art can understand that all or part of the functions of the various methods in the foregoing implementation manners can be realized by means of hardware, or by means of computer programs. When all or part of the functions in the above embodiments are implemented by means of a computer program, the program can be stored in a computer-readable storage medium, and the storage medium can include: read-only memory, random access memory, magnetic disk, optical disk, hard disk, etc., through The computer executes the program to realize the above-mentioned functions. For example, the program is stored in the memory of the device, and when the processor executes the program in the memory, all or part of the above-mentioned functions can be realized. In addition, when all or part of the functions in the above embodiments are realized by means of a computer program, the program can also be stored in a storage medium such as a server, another computer, a magnetic disk, an optical disk, a flash disk, or a mobile hard disk, and saved by downloading or copying. To the memory of the local device, or to update the version of the system of the local device, when the processor executes the program in the memory, all or part of the functions in the above embodiments can be realized.

The above uses specific examples to illustrate the present application, which is only used to help understand the technical solutions of the present application, and is not intended to limit the present application. For those skilled in the art, based on the idea of the present application, some simple deduction, deformation or replacement can also be made.

Claims

A heterogeneous fusion network, characterized in that it includes:

Data layer, including multiple switches connected topologically, each switch can forward data according to at least one communication protocol;

The control plane is connected to the switch in the data plane, and is used to control the data forwarding path of the switch; wherein,

The control plane constructs a detection packet combining multiple information according to a preset communication protocol, and sends the detection packet to the data plane; the detection packet includes header information and forwarding rules of several switches expected to perform forwarding information;

The data layer forwards the detection packet according to the actual path forwarded by each switch, and reports the actual forwarding information to the control layer;

The control plane generates multiple pieces of expected path information according to the forwarding rule information, and uses the multiple pieces of expected path information to form expected path set information corresponding to the detection packet;

The control plane generates actual path information corresponding to the probe packet according to the actual forwarding information;

The control plane judges whether the expected path set information contains the expected path information consistent with the actual path information, and if so, passes the path consistency verification of the expected path forwarded by the probe packet and the actual path.
The heterogeneous converged network according to claim 1, wherein the data layer forwards the detection packet according to the actual path forwarded by each switch, and reports the actual forwarding information to the control layer, including:

The data layer receives the probing packets that are distributed, and forwards the probing packets among the switches to form an actual forwarding path; the switch that forwards the probing packets for the first time on the actual path is the ingress switch, and the last forwarding packet on the actual path is the ingress switch. The switch of the detection packet mentioned above is the egress switch, and the remaining switches on the actual path are intermediate switches;

The data plane uses an ingress switch on the actual path to insert an initial label value into the detection packet, and reports the initial label value to the control plane;

The data plane updates the initial label value of the detection packet by using the intermediate switch and the egress switch on the actual path;

The data plane forms corresponding actual forwarding information based on the label value updated by any one of the intermediate switch and the egress switch on the actual path, and the header information of the detection packet, and reports it to the control plane.
The heterogeneous converged network according to claim 2, wherein the data plane uses an intermediate switch and an egress switch on the actual path to update the initial label value of the detection packet, including:

For the intermediate switch on the actual path, the intermediate switch performs matrix multiplication with its own characteristic matrix and the initial label value inserted in the detection packet to obtain the first label value;

For the egress switch on the actual path, the egress switch performs a matrix multiplication operation on its own feature matrix and the first label value to obtain a second label value;

In the matrix multiplication operation, a modulo calculation is performed on the feature matrices involved in the operation to prevent matrix multiplication from overflowing; both the first label value and the second label value are updated label values.
The heterogeneous converged network according to claim 2, wherein the control plane generates multiple pieces of expected path information according to the forwarding rule information, and uses the multiple pieces of expected path information to form the expected path corresponding to the detection packet. Path collection information, including:

The control plane constructs multiple expected paths according to the forwarding rule information; each expected path has one or more switches, and the ingress switch on the expected path is the ingress switch on the actual path;

The control plane obtains the characteristic matrix of all switches on each expected path, and obtains the initial label value reported by the ingress switch on the actual path;

The control plane uses the feature matrix of one or more switches on each expected path to update and calculate the initial label value to obtain the label value corresponding to each expected path;

The control plane generates a piece of expected path information according to the header information of the detection packet and the label value corresponding to each expected path;

The control plane collects the expected path information corresponding to each expected path to form the expected path set information corresponding to the detection packet.
The heterogeneous fusion network according to claim 4, wherein the control plane also stores the expected path set information into a preset path table, and uses a Bloom filter in the path table to The tag values corresponding to the expected paths are mapped and stored.
The heterogeneous fusion network according to claim 4, wherein the control plane generates actual path information corresponding to the probe packet according to the actual forwarding information, including:

The control plane obtains the label values reported by the intermediate switch and the egress switch of the detection packet on the actual path, and obtains the header information of the detection packet;

The control plane determines the actual path forwarded by the detection packet among the switches in the data plane according to the obtained label value, and generates corresponding actual path information according to the obtained label value and header information of the detection packet.
The heterogeneous converged network according to claim 6, wherein the control plane judges whether the expected path set information contains expected path information consistent with the actual path information, including:

The control plane acquires header information and label values in the desired path set information, and acquires header information and label values in actual path information;

The control plane compares the header information in the actual path information with the header information in the expected path set information, and performs path consistency verification when the header information matches;

The control plane judges whether there is a tag value identical to the actual path information in the expected path set information, and if so, passes the path consistency verification.
A heterogeneous converged network, including a data plane and a control plane, the data plane includes a plurality of switches connected topologically, the controller is deployed in the control plane and the controller is connected to each switch, characterized in that , the controller consists of:

A path detection generating module, configured to construct a detection packet according to a preset communication protocol, and deliver the detection packet to the data plane;

An expected path set generating module, configured to generate corresponding expected path set information according to multiple expected paths forwarded by the detection packet among several switches in the data plane;

The path consistency verification module is used to detect the actual path forwarded by the detection packet between the switches in the data plane and generate corresponding actual path information; If the expected path information is consistent with the actual path information, the verification of path consistency between the expected path forwarded by the probe packet and the actual path is passed.
The heterogeneous fusion network according to claim 8, wherein the path detection generation module constructs a detection packet according to a preset communication protocol, and sends the detection packet to the data layer, including:

The path detection generation module configures packet header information and forwarding rule information of several switches expected to be executed according to a preset communication protocol, and uses the packet header information and the forwarding rule information to construct a detection packet combining multiple information;

The path detection generation module sends the detection packet to the data layer, and the detection packet is forwarded between switches in the data layer to form an actual forwarding path;

The switch that forwards the detection packet for the first time on the actual path is an ingress switch, the switch that forwards the detection packet last on the actual path is an egress switch, and the rest of the switches on the actual path are intermediate switches; the ingress switch on the actual path is used to The initial label value is inserted into the detection packet and reported to the control plane, the intermediate switch and the egress switch on the actual path are used to update the initial label of the detection packet, and the updated label value and the detection packet The packet header information is reported to the control plane.
The heterogeneous converged network according to claim 9, wherein the expected path set generation module generates a corresponding expected path set according to multiple expected paths forwarded by the detection packet among several switches in the data plane information, including:

The expected path set generation module constructs multiple expected paths according to the forwarding rule information; each expected path has one or more switches, and the ingress switch on the expected path is the ingress switch on the actual path;

The expected path set generation module obtains the feature matrix of all switches on each expected path, and obtains the initial label value reported by the ingress switch on the actual path;

The expected path set generation module uses the feature matrix of one or more switches on each expected path to update and calculate the initial label value to obtain the corresponding label value of each expected path;

The expected path set generation module generates an expected path information according to the header information of the detection packet and the label value corresponding to each expected path;

The expected path set generation module counts the expected path information corresponding to each expected path to form the expected path set information corresponding to the detection packet.
The heterogeneous converged network according to claim 9, wherein the path consistency verification module detects the actual path forwarded by the detection packet between switches in the data plane and generates corresponding actual path information, including :

The path consistency verification module obtains the label values reported by the intermediate switch and the egress switch of the detection packet on the actual path, and the header information of the detection packet;

The path consistency verification module determines the actual path forwarded by the detection packet between switches in the data plane according to the obtained label value, and generates a corresponding actual path according to the obtained label value and the header information of the detection packet information.
The heterogeneous fusion network according to claim 11, wherein the path consistency verification module judges whether the expected path set information contains expected path information consistent with the actual path information, and if so, passes the The path consistency verification of the expected path forwarded by the probe packet and the actual path includes:

The path consistency verification module acquires header information and tag values in the expected path set information, and acquires header information and tag values in actual path information;

The path consistency verification module compares the header information in the actual path information with the header information in the expected path set information, and performs path consistency verification when the header information matches;

The path consistency verification module judges whether the expected path set information has the same tag value as the actual path information, and if so, passes the path consistency verification.
A heterogeneous converged network, including a data plane and a control plane, the data plane includes a plurality of switches connected topologically, the control plane is connected to the switches in the data plane and is used to control each of the switches The path of data forwarding is characterized in that,

The data plane can receive the detection packet sent by the control plane, and forward the detection packet between switches to form an actual forwarding path; the switch that forwards the detection packet on the actual path for the first time is the ingress switch, and the actual The switch that forwards the detection packet at last on the path is an egress switch, and the remaining switches on the actual path are intermediate switches;

The data plane uses an ingress switch on the actual path to insert an initial label value into the detection packet, and reports the initial label value to the control plane;

The data plane updates the initial label value of the detection packet by using the intermediate switch and the egress switch on the actual path;

The data plane forms corresponding actual forwarding information based on the label value updated by any one of the intermediate switch and the egress switch on the actual path, and the header information of the detection packet, and reports it to the control plane.
The heterogeneous converged network according to claim 13, wherein the data plane utilizes an intermediate switch and an egress switch on the actual path to update the initial label value of the detection packet, including:

For the intermediate switch on the actual path, the intermediate switch performs matrix multiplication with its own characteristic matrix and the initial label value inserted in the detection packet to obtain the first label value;

For the egress switch on the actual path, the egress switch performs a matrix multiplication operation on its own feature matrix and the first label value to obtain a second label value;

In the matrix multiplication operation, a modulo calculation is performed on the feature matrices involved in the operation to prevent matrix multiplication from overflowing; both the first label value and the second label value are updated label values.
A path consistency verification method for a heterogeneous converged network, the heterogeneous converged network includes a data plane and a control plane, the data plane includes a plurality of switches connected topologically, and the control plane is used to control each switch The data forwarding path is characterized in that the path consistency verification method includes:

Constructing a detection packet according to a preset communication protocol, and delivering the detection packet to the data plane;

generating corresponding expected path set information according to multiple expected paths forwarded by the detection packet among several switches in the data plane;

Detecting the actual path forwarded by the detection packet between switches in the data plane and generating corresponding actual path information;

Judging whether the expected path set information contains expected path information consistent with the actual path information, and if so, verifying the path consistency between the expected path forwarded by the probe packet and the actual path.
The method for verifying path consistency according to claim 15, wherein the detection packet is constructed according to a preset communication protocol, and the detection packet is sent to the data layer, and the detection packet is transmitted according to the detection packet in the Multiple expected paths forwarded between several switches in the data plane generate corresponding expected path set information, including:

Configuring packet header information and forwarding rule information of several switches expected to be executed according to a preset communication protocol, using the packet header information and the forwarding rule information to construct a detection packet combining multiple information;

Sending the detection packet to the data layer, the detection packet is forwarded among the switches in the data layer to form an actual forwarding path; the switch that forwards the detection packet for the first time on the actual path is an ingress switch , the switch that forwards the detection packet last on the actual path is the egress switch, and the remaining switches on the actual path are intermediate switches; the ingress switch on the actual path is used to insert the initial label value in the detection packet and report it to the control level, the intermediate switch and the egress switch on the actual path are used to update the initial label of the detection packet, and report the updated label value and the header information of the detection packet to the control plane;

Construct multiple expected paths according to the forwarding rule information; each expected path has one or more switches, and the ingress switch on the expected path is the ingress switch on the actual path;

Obtain the feature matrix of all switches on each expected path, and obtain the initial label value reported by the ingress switch on the actual path;

Using the feature matrix of one or more switches on each expected path to update and calculate the initial label value to obtain the label value corresponding to each expected path;

generating a piece of expected path information according to the header information of the detection packet and the label value corresponding to each expected path;

The expected path information corresponding to each expected path is counted to form the expected path set information corresponding to the detection packet.
The path consistency verification method according to claim 16, wherein said generating the actual path information corresponding to the probe packet according to the actual forwarding information comprises:

Acquiring the label values reported by the intermediate switch and the egress switch of the detection packet on the actual path, and the header information of the detection packet;

Determining the actual path forwarded by the detection packet among the switches in the data plane according to the obtained label value, and generating corresponding actual path information according to the obtained label value and header information of the detection packet.
The path consistency verification method according to claim 17, wherein said judging whether said expected path set information contains expected path information consistent with said actual path information comprises:

Acquiring header information and label values in the expected path set information, and acquiring header information and label values in actual path information;

Comparing the header information in the actual path information with the header information in the expected path set information, and verifying path consistency when the header information matches;

Judging whether there is a tag value identical to the actual path information in the expected path set information, and if so, passing the path consistency verification.
A computer-readable storage medium, wherein a program is stored on the medium, and the program can be executed by a processor to implement the path consistency verification method according to any one of claims 15-18.