WO2024066964A1

WO2024066964A1 - Implementation method and apparatus for ioam encapsulation of virtualized tunnel network

Info

Publication number: WO2024066964A1
Application number: PCT/CN2023/117054
Authority: WO
Inventors: 杨裕栋; 刘雪峰; 陈爱东; 毕以峰
Original assignee: 中兴通讯股份有限公司
Priority date: 2022-09-29
Filing date: 2023-09-05
Publication date: 2024-04-04
Also published as: CN117834342A

Abstract

Embodiments of the present disclosure relate to an implementation method and apparatus for IOAM encapsulation of a virtualized tunnel network. The method comprises: receiving tunnel packet information corresponding to a target data stream forwarded by a virtual switch, wherein the tunnel packet information comprises inner packet information and outer packet information, the inner packet information stores first user configuration information corresponding to the target data stream, and the outer packet information stores a data stream code corresponding to the first user configuration information and second user configuration information corresponding to the virtual switch; obtaining preset mark information, and selecting a target IOAM encapsulation object from the data stream code and the second user configuration information on the basis of a verification result for the mark information; and encapsulating the obtained IOAM information to the target IOAM encapsulation object, generating a first IOAM packet, and forwarding the first IOAM packet to a physical switch corresponding to the next-level forwarding node.

Description

Method and device for implementing IOAM encapsulation of virtualized tunnel network

Technical Field

The embodiments of the present disclosure relate to the field of communication technology, and in particular to a method and device for implementing IOAM encapsulation of a virtualized tunnel network.

Background technique

In related technologies, virtual machines, virtual network cards, virtual switches, physical network ports, and physical switches are used to build the corresponding network. The switch is a bridge for network communication service interaction. The stability of the switch can ensure the reliability of upper-layer service interaction. If a port of the switch fails, the services between virtual machines will be unable to communicate, which will have a great impact on the business.

In the related technologies, in-band operation, administration, and maintenance (IOAM) technology can realize real-time perception and monitoring of the operating status of the switch network and is being widely used. In the virtualized network of the related technologies, virtual switches and physical switches are used as corresponding forwarding nodes to forward data streams, but the forwarding nodes communicate with each other using a tunnel network, and the virtual switches in the virtualized network only support tunnel message encapsulation but not IOAM encapsulation. After the virtual switch performs tunnel message encapsulation, the subsequent IOAM encapsulation of the physical switch cannot take effect, thereby making the virtualized network unable to realize the IOAM function. At the same time, the material switch in the virtualized network only supports parsing of the outer layer message but cannot parse the inner layer message. In the virtualized network communication, the valid information forwarded by each forwarding node (for example: source MAC address, destination MAC address, source IP address, destination IP address, protocol number) is in the inner layer message. Since the physical switch cannot perform IOAM encapsulation and cannot parse the inner layer message, the virtualized network cannot realize the IOAM function.

Regarding the problem that the virtualized tunnel network in the related technology cannot realize the IOAM function, there is still a lack of better technical solutions.

Summary of the invention

The embodiments of the present disclosure provide a method, device, physical switch and storage medium for implementing IOAM encapsulation of a virtualized tunnel network, so as to at least solve the problem in the related art that the virtualized tunnel network cannot implement the IOAM function.

In a first aspect, an embodiment of the present disclosure provides an implementation method of IOAM encapsulation of a virtualized tunnel network, which is applied to a first physical switch, comprising: receiving tunnel message information corresponding to a target data flow forwarded by a virtual switch, wherein the tunnel message information comprises inner message information and outer message information, wherein the inner message information stores first user configuration information corresponding to the target data flow, and the outer message information stores first user configuration information corresponding to the first user configuration information. The method comprises the steps of: obtaining a data stream encoding and second user configuration information corresponding to the virtual switch; obtaining preset flag information, and selecting a target IOAM encapsulation object from the data stream encoding and the second user configuration information based on a verification result of the flag information, wherein the flag information is used to characterize the validity of the data stream encoding; encapsulating the obtained IOAM information into the target IOAM encapsulation object, generating a first IOAM message, and forwarding the first IOAM message to a physical switch corresponding to a next-level forwarding node.

In a second aspect, an embodiment of the present disclosure provides a device for implementing IOAM encapsulation of a virtualized tunnel network, which is applied to a first physical switch, including:

A receiving module, configured to receive tunnel message information corresponding to a target data flow forwarded by a virtual switch, wherein the tunnel message information includes inner message information and outer message information, the inner message information stores first user configuration information corresponding to the target data flow, and the outer message information stores a data flow code corresponding to the first user configuration information and second user configuration information corresponding to the virtual switch;

a determination module, configured to obtain preset flag information, and select a target IOAM encapsulation object from the data stream encoding and the second user configuration information based on a verification result of the flag information, wherein the flag information is used to characterize the validity of the data stream encoding;

The encapsulation module is configured to encapsulate the acquired IOAM information into the target IOAM encapsulation object, generate a first IOAM message, and forward the first IOAM message to a physical switch corresponding to a next-level forwarding node.

In a third aspect, an embodiment of the present disclosure provides a method for implementing IOAM encapsulation of a virtualized tunnel network, which is applied to an intermediate physical switch, including: receiving a second IOAM message forwarded by a physical switch at a previous level, wherein an outer message corresponding to the second IOAM message stores first IOAM encapsulation information; obtaining the IOAM information collected by this node, and adding the IOAM information to the first IOAM encapsulation information, generating a corresponding third IOAM message, and forwarding the third IOAM message to the physical switch corresponding to the forwarding node at the next level.

In a fourth aspect, an embodiment of the present disclosure provides a device for implementing IOAM encapsulation of a virtualized tunnel network, which is applied to an intermediate physical switch, including:

A receiving module, configured to receive a second IOAM message forwarded by a physical switch at a previous level, wherein the outer message corresponding to the second IOAM message stores the first IOAM encapsulation information;

The adding module is configured to obtain the IOAM information collected by the node, add the IOAM information to the first IOAM encapsulation information, generate a corresponding third IOAM message, and forward the third IOAM message to the physical switch corresponding to the next-level forwarding node.

In a fifth aspect, the present disclosure provides a method for implementing IOAM encapsulation of a virtualized tunnel network, which is applied to a terminal. The method comprises: after receiving an IOAM decapsulation instruction sent by a preset analyzer, obtaining a fourth IOAM message forwarded by the physical switch corresponding to the previous-level forwarding node, wherein the outer message corresponding to the fourth IOAM message stores the corresponding second IOAM encapsulation information; removing the second IOAM encapsulation information from the outer message corresponding to the fourth IOAM message, and forwarding the obtained tunnel message information to the virtual switch located at the next-level node.

In a sixth aspect, an embodiment of the present disclosure provides a device for implementing IOAM encapsulation of a virtualized tunnel network, which is applied to a last-position physical switch, including:

an acquisition module, configured to acquire, after receiving the IOAM decapsulation instruction issued by the preset analyzer, a fourth IOAM message forwarded by the physical switch corresponding to the previous-level forwarding node, wherein the outer layer message corresponding to the fourth IOAM message stores the corresponding second IOAM encapsulation information;

a decapsulation module configured to remove the second IOAM encapsulation information from the outer message corresponding to the fourth IOAM message, and forward the obtained tunnel message information to a virtual switch located at a subsequent node;

In a seventh aspect, a physical switch is provided, comprising a processor, a communication interface, a memory and a communication bus, wherein the processor, the communication interface and the memory communicate with each other via the communication bus;

a memory arranged to store a computer program;

The processor is configured to implement the steps of the method for implementing IOAM encapsulation of the virtualized tunnel network as described in any one of the embodiments of the first aspect, the third aspect and the fifth aspect when executing the program stored in the memory.

In an eighth aspect, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the steps of the method for implementing IOAM encapsulation of a virtualized tunnel network as described in any one of the embodiments of the first aspect, the third aspect and the fifth aspect are implemented.

BRIEF DESCRIPTION OF THE DRAWINGS

The accompanying drawings herein are incorporated in and constitute a part of the specification, illustrate embodiments consistent with the present disclosure, and together with the description, serve to explain the principles of the embodiments of the present disclosure.

In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, for ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative labor.

FIG1 is a flow chart of a method for implementing IOAM encapsulation of a virtualized tunnel network provided by an embodiment of the present disclosure;

FIG2 is a flow chart of another method for implementing IOAM encapsulation of a virtualized tunnel network provided by an embodiment of the present disclosure;

FIG3 is a flow chart of another method for implementing IOAM encapsulation of a virtualized tunnel network provided in an embodiment of the present disclosure;

FIG4 is a schematic diagram of a virtualized tunnel network operation according to a preferred embodiment of the present disclosure;

FIG5 is a timing diagram of the operation of a virtualized tunnel network according to a preferred embodiment of the present disclosure;

FIG6 is a schematic diagram of the structure of a device for implementing IOAM encapsulation of a virtualized tunnel network provided by an embodiment of the present disclosure;

7 is a schematic diagram of the structure of another device for implementing IOAM encapsulation of a virtualized tunnel network provided by an embodiment of the present disclosure;

8 is a schematic diagram of the structure of another device for implementing IOAM encapsulation of a virtualized tunnel network provided in an embodiment of the present disclosure;

FIG. 9 is a schematic diagram of the structure of a physical switch provided in an embodiment of the present disclosure.

Detailed ways

In order to make the purpose, technical solution and advantages of the embodiments of the present disclosure clearer, the technical solution in the embodiments of the present disclosure will be clearly and completely described below in conjunction with the drawings in the embodiments of the present disclosure. Obviously, the described embodiments are part of the embodiments of the present disclosure, not all of the embodiments. Based on the embodiments in the present disclosure, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of the present disclosure.

Before describing the embodiments of the present disclosure, the names of related technologies involved in the embodiments of the present disclosure are explained as follows:

In-band Operation, Administration, and Maintenance (IOAM) is a new data communication network operation, administration, and maintenance (OAM) technology proposed by the industry. The technology is currently in a rapid development stage under the joint promotion of the industry, and is being standardized by the Internet Engineering Task Force (IETF) of the International Organization for Standardization. In the IOAM proposed by IETF, in-band OAM is sent together with data packets, and no additional control plane packets are required to send OAM data. In-band OAM is generally deployed in a specific domain. IOAM can implement complex OAM such as multiple path tracking, path verification, and service level agreement (SLA) verification.

The technical solutions in the embodiments of the present disclosure will be described below in conjunction with the drawings in the embodiments of the present disclosure.

FIG1 is a flow chart of a method for implementing IOAM encapsulation of a virtualized tunnel network provided by an embodiment of the present disclosure. As shown in FIG1 , an embodiment of the present disclosure provides a method for implementing IOAM encapsulation of a virtualized tunnel network, which is applied to a first physical switch, and the method includes the following steps:

Step S101, receiving tunnel message information corresponding to the target data flow forwarded by the virtual switch, wherein the tunnel message information includes inner message information and outer message information, the inner message information stores first user configuration information corresponding to the target data flow, and the outer message information stores data flow coding corresponding to the first user configuration information and second user configuration information corresponding to the virtual switch.

In this embodiment, the subject that executes the IOAM encapsulation method of the disclosed embodiment is the physical switch located at the first position in the virtualized tunnel network. In the virtualized tunnel network in this embodiment, the virtual switch and the physical switch coexist and serve as corresponding forwarding nodes respectively. At the same time, the virtual switch and the physical switch are also connected to the analyzer for statistics and analysis of IOAM information for communication. The analyzer can generate a data flow code flowid according to the five-tuple information in the received user configuration information (corresponding to the first user configuration information) according to the preset rules (for example, performing hash operation). The generated data flow code matches the value of the Differentiated Services Code Point (DSCP) in the outer message information of the tunnel message. At the same time, the analyzer also generates flag information indicating that the flowid value matches the DSCP value (using FlowidMatchDscp table). ); in this embodiment, after the analyzer generates the flowid and the corresponding flag information, it will send the flag information to the first physical switch and the virtual switch located at the previous node of the first physical switch; in this embodiment, the analyzer uses a command line to store the flag information in the database of the virtual switch; the analyzer also sends the flowid to the corresponding virtual switch, and after the corresponding virtual switch receives the flag information, when encapsulating the tunnel message information, the received flowid is used as the DSCP value in the outer message of the tunnel message information, and is added to the outer message to generate the corresponding tunnel message information; after encapsulating the tunnel message information, the corresponding virtual switch sends the corresponding tunnel message information to the first physical switch; in this embodiment, the analyzer also sends an instruction to perform IOAM encapsulation to the first physical switch, and after receiving the instruction and the flag information, the first physical switch will perform IOAM encapsulation on the received tunnel message information.

In this embodiment, the data stream encoding is in the outer layer message information of the tunnel message information. At the same time, the data stream encoding is also a mapping of the first user configuration information (corresponding to a five-tuple information consisting of a source MAC address, a destination MAC address, a source IP address, a destination IP address and a protocol number) in the inner layer message of the tunnel message information and the IOAM message generated after the subsequent IOAM encapsulation is completed. Then, through the mapping of the inner and outer layer messages, the forwarded data flow and the operating status of the virtualized tunnel network are monitored.

In this embodiment, the outer layer messages of the tunnel message information and the IOAM message information also include corresponding user configuration information (that is, the second user configuration information), which is used to characterize the configuration information corresponding to the virtual switch located at the previous level node of the first physical switch (for example: source MAC address, destination MAC address, source IP address, target IP address and protocol number), but the user configuration information corresponding to the outer layer message is not the configuration information corresponding to the data flow that the user needs to monitor.

Step S102, obtaining preset flag information, and selecting a target IOAM encapsulation object from the data stream encoding and the second user configuration information based on a verification result of the flag information, wherein the flag information is used to characterize the validity of the data stream encoding.

In this embodiment, after the first physical switch receives the tunnel message information after tunnel encapsulation, it first reads the stored flag information FlowidMatchDscp and determines the value of the FlowidMatchDscp. If the value of the FlowidMatchDscp is correct, the outer message information of the tunnel message information is directly parsed, and IOAM encapsulation is performed according to the dscp value of the IP layer in the outer message information, and IOAM information is added; if the value of the FlowidMatchDscp is wrong, the second user configuration information is directly encapsulated with IOAM.

Step S103: encapsulate the acquired IOAM information into a target IOAM encapsulation object, generate a first IOAM message, and forward the first IOAM message to a physical switch corresponding to a next-level forwarding node.

In this embodiment, the first physical switch will collect or obtain the IOAM information corresponding to the forwarding node, which includes but is not limited to the input and output ports of the target data flow, forwarding delay, timestamp, queue depth information, and collection sequence number input device timestamp information.

In this embodiment, after completing the IOAM information encapsulation and generating the IOAM message, it is forwarded to the physical switch at the next level; in this embodiment, the physical switch of the next-level forwarding node can be the middle physical switch of the virtualized tunnel network, or it can be the last physical switch in the virtualized tunnel network; when the physical switch of the next-level forwarding node is the middle physical switch, the IOAM information of this node is added, and then forwarded to the corresponding physical switch of the next-level forwarding node; when the physical switch of the next-level forwarding node is the last physical switch, IOAM decapsulation is performed, the IOAM information encapsulated and added by the first switch is removed, and the corresponding message is sent to the virtual switch of the next-level forwarding node.

Through the above steps S101 to S103, tunnel message information corresponding to the target data flow forwarded by the virtual switch is received, wherein the tunnel message information includes inner message information and outer message information, the inner message information stores the first user configuration information corresponding to the target data flow, and the outer message information stores the data flow code corresponding to the first user configuration information and the second user configuration information corresponding to the virtual switch; the preset flag information is obtained, and based on the verification result of the flag information, the target IOAM encapsulation object is selected from the data flow code and the second user configuration information, wherein the flag information is used to characterize the validity of the data flow code; the obtained IOAM information is encapsulated into the target IOAM encapsulation object, a first IOAM message is generated, and the first IOAM message is forwarded to the physical switch corresponding to the next-level forwarding node, so as to solve the problem that the virtualized tunnel network cannot realize the IOAM function in the related art, and IOAM encapsulation is realized in the virtualized tunnel network by using the inner and outer layer message mapping method, so as to achieve the beneficial effect of improving the IOAM for network fault location and processing capabilities.

In some embodiments, before receiving the tunnel message information corresponding to the target data flow forwarded by the virtual switch, the following steps are further implemented: receiving the IOAM encapsulation instruction and the flag issued by the preset analyzer according to the preset network configuration protocol; information.

In this embodiment, the network configuration protocol includes but is not limited to the Netconf protocol; in this embodiment, the analyzer sends an IOAM encapsulation instruction and flag information FlowidMatchDscp to the first physical switch, so that the first physical switch performs corresponding IOAM encapsulation by determining whether the flag information is a preset valid value.

In some embodiments, based on the verification result of the flag information, the target IOAM encapsulation object is selected from the data stream encoding and the second user configuration information, which is implemented by the following steps:

Step 21, determine the parameter value of the flag information, and determine whether the parameter value is a preset valid value, wherein the preset valid value is used to characterize that the value of the data stream coding matches the differential service code point DSCP value in the outer message information, and the data stream coding is generated by a preset analyzer performing calculations on the multi-target information corresponding to the first user configuration information according to a preset calculation algorithm.

Step 22: When it is determined that the parameter value is a preset valid value, the data stream is encoded as a target IOAM encapsulation object.

Step 23: When it is determined that the parameter value is not a preset valid value, the second user configuration information is used as the target IOAM encapsulation object.

In this embodiment, after the first physical switch receives the tunnel message information after tunnel encapsulation, it first reads the parameter value of the stored flag information FlowidMatchDscp, and determines whether the parameter value is a preset valid value (for example: true). If the parameter value is the preset valid value, the data stream encoding is used as the target IOAM encapsulation corresponding to the target, that is, the outer message information of the tunnel message information is directly parsed, and the IOAM encapsulation is performed according to the dscp value of the IP layer in the outer message information, and the IOAM information is added; if the parameter value is not a preset valid value (for example: flase), the second user configuration information is used as the target IOAM encapsulation object, that is, the second user configuration information is directly encapsulated with IOAM.

It should be noted that when the second user configuration information is used as the target IOAM encapsulation object, although the IOAM encapsulation is completed, it cannot be associated with the target data flow, so that the reported IOAM information cannot correctly feedback the network status corresponding to a forwarding node. For example: when the packet loss corresponding to the first physical switch is M, and when the second user configuration information is used for IOAM encapsulation, after the analyzer completes the analysis, the packet loss corresponding to the first physical switch will be N. This will cause incorrect monitoring and analysis of the virtualized tunnel network.

By determining the parameter value of the flag information in the above steps, and judging whether the parameter value is a preset valid value; when judging that the parameter value is a preset valid value, determining that the data stream is encoded as a target IOAM encapsulation object; when judging that the parameter value is not a preset valid value, using the second user configuration information as the target IOAM encapsulation object, it is possible to judge whether the inner and outer layer message mappings match, thereby improving the accuracy of IOAM encapsulation, and further improving the IOAM's ability to locate and handle network faults.

FIG. 2 is a flow chart of another method for implementing IOAM encapsulation of a virtualized tunnel network provided by an embodiment of the present disclosure. As shown in FIG. 2 , an embodiment of the present disclosure provides a method for implementing IOAM encapsulation of a virtualized tunnel network, which is applied to an intermediate physical switch. The method includes the following steps:

Step S201: Receive a second IOAM message forwarded by a physical switch at a previous stage, wherein the outer message corresponding to the second IOAM message stores first IOAM encapsulation information.

Step S202: Acquire the IOAM information collected by the node, add the IOAM information to the first IOAM encapsulation information, generate a corresponding third IOAM message, and forward the third IOAM message to the physical switch corresponding to the next-level forwarding node.

In this embodiment, the previous-level physical switch can be a first-level physical switch or an intermediate-level physical switch; when it is the first-level physical switch, the second IOAM message received is an IOAM message generated by IOAM encapsulation and adding IOAM information to the first-level physical switch; when it is an intermediate-level physical switch, the second IOAM message received is an IOAM message generated by IOAM encapsulation and adding IOAM information to the first-level physical switch, with the IOAM information of the previous-level physical switch added to it.

In this embodiment, after receiving the corresponding IOAM message, the intermediate physical switch adds the collected IOAM information to generate the corresponding IOAM message.

In this embodiment, after receiving the corresponding message forwarded by the physical switch at the previous level, the intermediate physical switch will determine whether there is a corresponding IOAM encapsulation in the corresponding message, that is, determine whether there is corresponding IOAM information. If so, the IOAM information corresponding to its own node is added. Otherwise, the virtualized tunnel network is determined to perform the IOAM function.

Through the above steps S201 to S202, the second IOAM message forwarded by the physical switch of the previous level is received, wherein the outer message corresponding to the second IOAM message stores the first IOAM encapsulation information; the IOAM information collected by the current node is obtained, and the IOAM information is added to the first IOAM encapsulation information, a corresponding third IOAM message is generated, and the third IOAM message is forwarded to the physical switch corresponding to the forwarding node of the next level, so as to solve the problem that the virtualized tunnel network in the related technology cannot realize the IOAM function, and achieve the beneficial effect of improving the IOAM for network fault location and processing capabilities.

FIG3 is a flow chart of another implementation method of IOAM encapsulation of a virtualized tunnel network provided by an embodiment of the present disclosure. As shown in FIG3, an implementation method of IOAM encapsulation of a virtualized tunnel network provided by an embodiment of the present disclosure is applied to the last physical switch, and the method includes the following steps:

Step S301: after receiving the IOAM decapsulation instruction sent by the preset analyzer, obtain the fourth IOAM message forwarded by the physical switch corresponding to the previous-level forwarding node, wherein the outer layer message corresponding to the fourth IOAM message stores the corresponding second IOAM encapsulation information.

Step S302: remove the second IOAM encapsulation information from the outer message corresponding to the fourth IOAM message, and forward the obtained tunnel message information to the virtual switch located at the next-level node.

In this embodiment, the physical switch corresponding to the previous-level forwarding node can be the first physical switch or the middle physical switch; in this embodiment, before the last physical switch performs IOAM decapsulation, the analyzer will send an IOAM decapsulation instruction to it, for example: through the netconf configuration method, send the IOAM decapsulation instruction; in this embodiment, the last physical switch performs IOAM decapsulation after receiving the fourth IOAM message, removes the IOAM information added by the first physical switch or the middle physical switch, and sends the tunnel message information generated after IOAM decapsulation to the virtual switch of the next-level node.

Through the above steps S301 to S302, after receiving the IOAM decapsulation instruction issued by the preset analyzer, the fourth IOAM message forwarded by the physical switch corresponding to the previous-level forwarding node is obtained, wherein the outer message corresponding to the fourth IOAM message stores the corresponding second IOAM encapsulation information; the second IOAM encapsulation information is removed from the outer message corresponding to the fourth IOAM message, and the obtained tunnel message information is forwarded to the virtual switch located at the next-level node, thereby realizing IOAM decapsulation of the virtualized tunnel network, solving the problem that the virtualized tunnel network cannot realize the IOAM function in the related technology, and achieving the beneficial effect of improving the IOAM for network fault location and processing capabilities.

FIG4 is a schematic diagram of the operation of the virtualized tunnel network in the preferred embodiment of the present disclosure; FIG5 is a timing diagram of the operation of the virtualized tunnel network in the preferred embodiment of the present disclosure. With reference to FIG4 to FIG5, the operations performed by each network element in the IOAM encapsulation of the virtualized tunnel network in the preferred embodiment of the present disclosure are described as follows:

In the virtualized tunnel network of the preferred embodiment of the present disclosure, the virtual switch and the physical switch coexist, and also include an analyzer, wherein the analyzer receives user configuration information, generates a flowid according to a certain rule based on the five-tuple information in the user configuration information (refer to the MAC, IP, TCP/UDP, and payload corresponding to the original information in FIG4 ), and the flowid needs to match the dscp value; the analyzer sends the flowid and dscp matching flag information to the virtual switch and the first physical switch; the virtual switch obtains the flowid and dscp matching flag information, adds the corresponding flowid as the dscp value to the outer message information of the tunnel message information, completes the tunnel message encapsulation and sends it to the first physical switch; the first physical switch performs IOAM encapsulation according to the dscp value in the outer message information (refer to the IP corresponding to the tunnel message encapsulation in FIG4 ); the intermediate physical switch is responsible for adding the IOAM information of the node and forwarding it, and the last physical switch performs IOAM decapsulation; the first physical switch, the intermediate physical switch, and the last physical switch also regularly push IOAM collection information to the analyzer.

With reference to FIG. 4 and FIG. 5 , the implementation process of implementing IOAM encapsulation in a virtualized tunnel network according to a preferred embodiment of the present disclosure is described as follows:

Step 1. Analyzer receives the configuration information entered by the user, and generates a flowid value that meets the dscp range through a hash algorithm based on the five-tuple information mac address, ip address, and protocol number, ensuring that the flowids that exist at the same time are unique.

Step 2: Analyzer defines the flag information FlowidMatchDscp, and the analyzer sends the flag information FlowidMatchDscp to the virtual machine switch. The analyzer sends the IOAM encapsulation and flag information to the first physical switch. FlowidMatchDscp, analyzer sends IOAM decapsulation to the last physical switch.

In this embodiment, the analyzer sends the IOAM encapsulation instruction and the flag information FlowidMatchDscpanalyze through netconf; in this embodiment, if the value of the sent flag information FlowidMatchDscp is true, it means that the flowid and dscp values corresponding to the target data flow match.

Step 3: When the virtual switch receives the message, it needs to perform tunnel message encapsulation.

In this embodiment, the virtual switch first reads the stored flag information FlowidMatchDscp and determines the value of the flag information FlowidMatchDscp. If it is true, the flowid value in the previous tunnel message is added as the dscp value to the outer IP layer of the tunnel message during encapsulation. If it is false, this operation is not required.

Step 4. The first physical switch receives the tunnel message information after tunnel encapsulation. First, it reads the stored flag information FlowidMatchDscp and determines the value of the flag information FlowidMatchDscp. If it is true, it directly parses the outer message information of the tunnel message information, performs IOAM encapsulation according to the dscp value of the IP layer, and adds IOAM information; if it is false, it directly performs IOAM encapsulation on the five-tuple information of the outer message information of the tunnel message information.

Step 5: The intermediate physical switch is responsible for adding the IOAM information of the local node to the IOAM message from the encapsulation node and forwarding it.

Step 6: After receiving the corresponding IOAM message, the last physical switch performs IOAM decapsulation, removes the IOAM information added by the first switch, and sends the decapsulated tunnel message information to the subsequent virtual switch.

Step 7: The virtual switch decapsulates the tunnel message and removes the tunnel message information;

Step 8: The first physical switch, the middle physical switch, and the last physical switch report IOAM collection information periodically.

In this embodiment, the IOAM collection information includes the ingress and egress ports of the data flow, forwarding delay, timestamp, queue depth information, and the collection sequence number entry device timestamp.

Step 9: The analyzer receives the reported IOAM information and performs analysis and processing.

The embodiments of the present disclosure also provide an implementation device for IOAM encapsulation of a virtualized tunnel network, which is used to implement the above embodiments and preferred implementation modes, and will not be repeated hereafter. The terms "module", "unit", "sub-unit", etc. used below may implement a combination of software and/or hardware for a predetermined function. Although the devices described in the following embodiments are preferably implemented in software, implementation in hardware, or a combination of software and hardware, is also possible and conceivable.

FIG6 is a schematic diagram of the structure of a device for implementing IOAM encapsulation of a virtualized tunnel network provided in an embodiment of the present disclosure. As shown in FIG6 , the device for implementing IOAM encapsulation of a virtualized tunnel network provided in this embodiment is applied to a first physical switch, and the device includes:

The receiving module 61 is configured to receive tunnel message information corresponding to the target data flow forwarded by the virtual switch, wherein the tunnel message information includes inner message information and outer message information, the inner message information stores the first user configuration information corresponding to the target data flow, and the outer message information stores the data flow code corresponding to the first user configuration information and the second user configuration information corresponding to the virtual switch;

The determination module 62 is coupled to the receiving module 61 and configured to obtain preset flag information, and select a target IOAM encapsulation object from the data stream encoding and the second user configuration information based on a verification result of the flag information, wherein the flag information is used to characterize the validity of the data stream encoding;

The encapsulation module 63 is coupled to the determination module 62 and is configured to encapsulate the acquired IOAM information into a target IOAM encapsulation object, generate a first IOAM message, and forward the first IOAM message to a physical switch corresponding to a next-level forwarding node.

Through the implementation device of IOAM encapsulation of the virtualized tunnel network in the embodiment of the present disclosure, tunnel message information corresponding to the target data flow forwarded by the virtual switch is received, wherein the tunnel message information includes inner message information and outer message information, the inner message information stores the first user configuration information corresponding to the target data flow, and the outer message information stores the data flow code corresponding to the first user configuration information and the second user configuration information corresponding to the virtual switch; the preset flag information is obtained, and based on the verification result of the flag information, the target IOAM encapsulation object is selected from the data flow code and the second user configuration information, wherein the flag information is used to characterize the validity of the data flow code; the obtained IOAM information is encapsulated into the target IOAM encapsulation object, a first IOAM message is generated, and the first IOAM message is forwarded to the physical switch corresponding to the next-level forwarding node, so as to solve the problem that the virtualized tunnel network in the related technology cannot realize the IOAM function, and IOAM encapsulation is realized in the virtualized tunnel network by using the inner and outer layer message mapping method, so as to achieve the beneficial effect of improving the IOAM for network fault location and processing capabilities.

In some of the embodiments, before receiving the tunnel message information corresponding to the target data flow forwarded by the virtual switch, the IOAM encapsulation implementation device of the virtualized tunnel network receives the IOAM encapsulation instruction and flag information issued by the preset analyzer according to the preset network configuration protocol.

In some of these embodiments, the network configuration protocol includes the Netconf protocol.

In some of the embodiments, the determination module 62 is further used to determine a parameter value of the flag information and to determine whether the parameter value is a preset valid value, wherein the preset valid value is used to characterize that the value of the data stream encoding matches the differential services code point DSCP value in the outer message information, and the data stream encoding is generated by a preset analyzer performing operations on the multi-target information corresponding to the first user configuration information according to a preset operation algorithm; when it is determined that the parameter value is a preset valid value, the data stream encoding is determined as the target IOAM encapsulation object; when it is determined that the parameter value is not a preset valid value, the second user configuration information is used as the target IOAM encapsulation object.

FIG. 7 is a schematic diagram of the structure of another device for implementing IOAM encapsulation of a virtualized tunnel network provided in an embodiment of the present disclosure. As shown in FIG. 7 , the device for implementing IOAM encapsulation of a virtualized tunnel network provided in this embodiment is applied to an intermediate physical switch, and the device includes:

The receiving module 71 is configured to receive a second IOAM message forwarded by a physical switch at a previous stage, wherein the outer message corresponding to the second IOAM message stores the first IOAM encapsulation information;

The adding module 72 is coupled to the receiving module 71, and is configured to obtain the IOAM information collected by the node, add the IOAM information to the first IOAM encapsulation information, generate a corresponding third IOAM message, and forward the third IOAM message to the physical switch corresponding to the next-level forwarding node.

Through the implementation device of IOAM encapsulation of the virtualized tunnel network in the embodiment of the present disclosure, a second IOAM message forwarded by a physical switch at the previous level is received, wherein the outer message corresponding to the second IOAM message stores the first IOAM encapsulation information; the IOAM information collected by this node is obtained, and the IOAM information is added to the first IOAM encapsulation information to generate a corresponding third IOAM message, and the third IOAM message is forwarded to the physical switch corresponding to the next-level forwarding node, thereby solving the problem that the virtualized tunnel network in the related technology cannot realize the IOAM function, and achieving the beneficial effect of improving the IOAM for network fault location and processing capabilities.

FIG8 is a schematic diagram of the structure of another device for implementing IOAM encapsulation of a virtualized tunnel network provided in an embodiment of the present disclosure. As shown in FIG8 , the device for implementing IOAM encapsulation of a virtualized tunnel network provided in this embodiment is applied to a last physical switch, and the device includes:

The acquisition module 81 is configured to acquire, after receiving the IOAM decapsulation instruction sent by the preset analyzer, the fourth IOAM message forwarded by the physical switch corresponding to the previous-level forwarding node, wherein the outer layer message corresponding to the fourth IOAM message stores the corresponding second IOAM encapsulation information;

The decapsulation module 82 is coupled to the acquisition module 81 and is configured to remove the second IOAM encapsulation information from the outer message corresponding to the fourth IOAM message, and forward the obtained tunnel message information to the virtual switch located at the next-level node.

Through the implementation device of IOAM encapsulation of the virtualized tunnel network in the embodiment of the present invention, after receiving the IOAM decapsulation instruction issued by the preset analyzer, the fourth IOAM message forwarded by the physical switch corresponding to the previous level forwarding node is obtained, wherein the outer layer message corresponding to the fourth IOAM message stores the corresponding second IOAM encapsulation information; the second IOAM encapsulation information is removed from the outer layer message corresponding to the fourth IOAM message, and the obtained tunnel message information is forwarded to the virtual switch located at the next level node, thereby realizing IOAM decapsulation of the virtualized tunnel network, solving the problem that the virtualized tunnel network cannot realize the IOAM function in the related technology, and achieving the beneficial effect of improving the IOAM for network fault location and processing capabilities.

FIG. 9 is a schematic diagram of the structure of a physical switch provided in an embodiment of the present disclosure. As shown in FIG. 9 , the present disclosure embodiment provides A physical switch is provided, including a processor 91, a communication interface 92, a memory 93 and a communication bus 94, wherein the processor 91, the communication interface 92 and the memory 93 communicate with each other through the communication bus 94.

A memory 93, configured to store computer programs;

The processor 91 is configured to implement the method steps in FIG. 1 , FIG. 2 and FIG. 3 when executing the program stored in the memory 93 .

The processor 91 in the physical switch implements the method steps in Figures 1, 2 and 3, and the technical effects brought about are consistent with the technical effects of the implementation method of IOAM encapsulation of the virtualized tunnel network in Figures 1, 2 and 3 executed in the above-mentioned embodiment, and will not be repeated here.

The communication bus mentioned in the above base station can be a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus. The communication bus can be divided into an address bus, a data bus, a control bus, etc. For ease of representation, only one thick line is used in FIG9, but it does not mean that there is only one bus or one type of bus.

The communication interface is used for communication between the above terminal and other devices.

The memory may include a random access memory (RAM) or a non-volatile memory, such as at least one disk storage. Optionally, the memory may also be at least one storage device located away from the aforementioned processor.

The above-mentioned processors can be general-purpose processors, including central processing units (CPU), network processors (NP), etc.; they can also be digital signal processors (DSP), application specific integrated circuits (ASIC), field programmable gate arrays (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components.

The embodiments of the present disclosure also provide a computer-readable storage medium having a computer program stored thereon. When the computer program is executed by a processor, the steps of the method for implementing IOAM encapsulation of a virtualized tunnel network as provided in any of the aforementioned method embodiments are implemented.

In another embodiment provided by the present disclosure, a computer program product including instructions is also provided, which, when executed on a computer, enables the computer to execute the steps of the method for implementing IOAM encapsulation of a virtualized tunnel network as described in any of the above embodiments.

It should be noted that, in this article, relational terms such as "first" and "second" are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply that there is any relationship between these entities or operations. In addition, the terms "comprises", "comprising" or any other variation thereof are intended to cover non-exclusive inclusion, so that a process, method, article or apparatus comprising a series of elements includes not only those elements, but also other elements not explicitly listed, or elements inherent to such process, method, article or apparatus. In the absence of further limitations, an element defined by the phrase "comprising a ..." does not exclude the presence of additional identical elements in the process, method, article or apparatus comprising the element.

The above description is only a specific implementation of the present disclosure, so that those skilled in the art can understand or implement the embodiments of the present disclosure. Various modifications to these embodiments will be apparent to those skilled in the art, and the general principles defined herein can be implemented in other embodiments without departing from the spirit or scope of the embodiments of the present disclosure. Therefore, the present disclosure will not be limited to the embodiments shown herein, but will conform to the widest scope consistent with the principles and novel features disclosed herein.

Claims

A method for implementing in-band operation management and maintenance (IOAM) encapsulation of a virtualized tunnel network, applied to a first-tier physical switch, comprising:

Receive tunnel message information corresponding to a target data flow forwarded by a virtual switch, wherein the tunnel message information includes inner message information and outer message information, the inner message information stores first user configuration information corresponding to the target data flow, and the outer message information stores a data flow code corresponding to the first user configuration information and second user configuration information corresponding to the virtual switch;

Acquire preset flag information, and select a target IOAM encapsulation object from the data stream encoding and the second user configuration information based on a verification result of the flag information, wherein the flag information is used to characterize the validity of the data stream encoding;

The obtained IOAM information is encapsulated into the target IOAM encapsulation object, a first IOAM message is generated, and the first IOAM message is forwarded to a physical switch corresponding to a next-level forwarding node.
According to the implementation method of claim 1, before receiving the tunnel message information corresponding to the target data flow forwarded by the virtual switch, the implementation method also includes: receiving the IOAM encapsulation instruction and the flag information issued by the preset analyzer according to the preset network configuration protocol.
The implementation method according to claim 2, wherein the network configuration protocol comprises the Netconf protocol.
The implementation method according to claim 2, wherein, based on the verification result of the flag information, selecting the target IOAM encapsulation object from the data stream encoding and the second user configuration information comprises:

determining a parameter value of the flag information, and judging whether the parameter value is a preset valid value, wherein the preset valid value is used to indicate that the value of the data stream code matches the differential service code point DSCP value in the outer message information, and the data stream code is generated by the preset analyzer calculating the multi-target information corresponding to the first user configuration information according to a preset calculation algorithm;

When it is determined that the parameter value is a preset valid value, the data stream is determined to be encoded as the target IOAM encapsulation object.
According to the implementation method of claim 4, wherein, when it is determined that the parameter value is not a preset valid value, the second user configuration information is used as the target IOAM encapsulation object.
A device for implementing IOAM encapsulation of a virtualized tunnel network, applied to a first physical switch, comprising:

A receiving module is configured to receive tunnel message information corresponding to a target data flow forwarded by a virtual switch, wherein the tunnel message information includes inner message information and outer message information, and the inner message information is stored in There is first user configuration information corresponding to the target data flow, and the outer message information stores the data flow code corresponding to the first user configuration information and second user configuration information corresponding to the virtual switch;

a determination module, configured to obtain preset flag information, and select a target IOAM encapsulation object from the data stream encoding and the second user configuration information based on a verification result of the flag information, wherein the flag information is used to characterize the validity of the data stream encoding;

The encapsulation module is configured to encapsulate the acquired IOAM information into the target IOAM encapsulation object, generate a first IOAM message, and forward the first IOAM message to a physical switch corresponding to a next-level forwarding node.
A method for implementing IOAM encapsulation of a virtualized tunnel network, applied to an intermediate physical switch, comprising:

receiving a second IOAM message forwarded by a physical switch at a previous level, wherein the outer message corresponding to the second IOAM message stores the first IOAM encapsulation information;

The IOAM information collected by the node is obtained, and the IOAM information is added to the first IOAM encapsulation information, a corresponding third IOAM message is generated, and the third IOAM message is forwarded to a physical switch corresponding to a next-level forwarding node.
A device for implementing IOAM encapsulation of a virtualized tunnel network, applied to an intermediate physical switch, comprising:

A receiving module, configured to receive a second IOAM message forwarded by a physical switch at a previous level, wherein the outer message corresponding to the second IOAM message stores the first IOAM encapsulation information;

The adding module is configured to obtain the IOAM information collected by the node, add the IOAM information to the first IOAM encapsulation information, generate a corresponding third IOAM message, and forward the third IOAM message to the physical switch corresponding to the next-level forwarding node.
A method for implementing IOAM encapsulation of a virtualized tunnel network, applied to a last-position physical switch, comprising:

After receiving the IOAM decapsulation instruction sent by the preset analyzer, a fourth IOAM message forwarded by the physical switch corresponding to the previous-level forwarding node is obtained, wherein the outer layer message corresponding to the fourth IOAM message stores the corresponding second IOAM encapsulation information;

The second IOAM encapsulation information is removed from the outer message corresponding to the fourth IOAM message, and the obtained tunnel message information is forwarded to the virtual switch located at the next-level node.
A device for implementing IOAM encapsulation of a virtualized tunnel network, applied to a last-position physical switch, comprising:

an acquisition module, configured to acquire, after receiving the IOAM decapsulation instruction issued by the preset analyzer, a fourth IOAM message forwarded by the physical switch corresponding to the previous-level forwarding node, wherein the outer layer message corresponding to the fourth IOAM message stores the corresponding second IOAM encapsulation information;

The decapsulation module is configured to remove the second IOAM encapsulation information from the outer message corresponding to the fourth IOAM message, and forward the obtained tunnel message information to a virtual switch located at a subsequent node.
A physical switch includes a processor, a communication interface, a memory and a communication bus, wherein the processor, the communication interface and the memory communicate with each other through the communication bus;

a memory arranged to store a computer program;

The processor is configured to, when executing a program stored in a memory, implement the steps of the method for implementing IOAM encapsulation of a virtualized tunnel network as described in any one of claims 1 to 5, implement the steps of the method for implementing IOAM encapsulation of a virtualized tunnel network as described in claim 7, and implement the steps of the method for implementing IOAM encapsulation of a virtualized tunnel network as described in claim 9.
A computer-readable storage medium having a computer program stored thereon, wherein when the computer program is executed by a processor, the steps of the method for implementing IOAM encapsulation of a virtualized tunnel network as described in any one of claims 1 to 5, the steps of the method for implementing IOAM encapsulation of a virtualized tunnel network as described in claim 7, and the steps of the method for implementing IOAM encapsulation of a virtualized tunnel network as described in claim 9 are implemented.