Summary of the invention
In view of this, the invention provides a kind of operation flow adjusting device, be applied on the network equipment, wherein this network equipment comprises OAA plate and master control borad, and described OAA plate comprises the OAA front card and transmits back card/back board; Described OAA front card is used for that the message that receives is carried out OAA to be processed, and wherein, this device comprises:
Whether OAA plate detecting unit is the OAA plate for detection of the veneer that inserts the network equipment;
The rule downloading unit, be used for after the OAA plate is inserted into the network equipment, issue this plate rule that refluxes by the control channel between master control borad and the OAA plate to the OAA front card, wherein this this plate message of rule after being used for by passage between plate the OAA front card being processed that reflux sends to transmit on the back card/back board and processes.
The present invention also provides a kind of operation flow method of adjustment, is applied on the network equipment, and wherein this network equipment comprises OAA plate and master control borad, and described OAA plate comprises the OAA front card and transmits back card/back board; Described OAA front card is used for that the message that receives is carried out OAA to be processed, and the method may further comprise the steps:
Whether the veneer that the network equipment is inserted in steps A, detection is the OAA plate;
Step B, after the OAA plate is inserted into the network equipment, issue this plate rule that refluxes by the control channel between master control borad and the OAA plate to the OAA front card, wherein this this plate message of rule after being used for by communication between plates mechanism the OAA front card being processed that reflux sends to transmit on the back card/back board and processes.
The present invention takes full advantage of the business processing resources on the forwarding back card/back board that has existed on the OAA plate, and the network equipment just no longer needs an extra OAA agency board to serve the OAA front card, decrease the manufacturing cost of the network equipment; And simplified the general handling process of message, improved the treatment effeciency of message.
Embodiment
In the OAA framework, traditional network equipment is as a platform (being commonly referred to NFC), and this platform can integrated other manufacturers be developed various application plug-in cards (being commonly referred to IAC), such as IPS plug-in card etc.Communication pattern between NFC and the IAC generally includes four kinds: host mode, mirror image pattern, redirect mode and penetrate pattern.The related application that the introduction of more OAA technology can the REFERENCE TO RELATED people proposes is such as WO/2008/037159 and as the multinomial Chinese patent application of the basis for priority of this PCT application.
In the OAA framework, in four kinds of communication patterns of NFC and IAC, redirect mode is a kind of tightly coupled pattern, and other patterns then are tight couplings comparatively speaking.In redirect mode, message enters from the general service port of NFC, hit redirected rule and can be redirected on the OAA plate (comprising IAC), carry out turning back to NFC after OAA processes (such as network applications such as safety filtering or network speed limits) at the OAA plate and proceed traditional message repeating.
Please refer to Fig. 1, comprise master control borad, forwarding service plate, OAA agency board, network board and OAA plate based on the legacy network devices of OAA system.Wherein the OAA plate generally includes the OAA front card and transmits back card/back board.The list item of considering upper each forwarding service plate of NFC may there are differences and the versatility of scheme, in the prior art, guarantee the forwarding of message in order correctly to table look-up, what the message that needs to force OAA close coupling plate to return was gone to appointment acts on behalf of the veneer forwarding of tabling look-up.When configuration OAA plate return flow, need to specify special forward mode (L2-enhanced), also need to preserve configuration after the appointment and restart to allow configuration take-effective.In the scheme of Fig. 1, the network equipment need to provide separately the high standard veneer with agent capability (such as the forwarding service plate), this is so that the cost up of the whole realization of OAA framework, and the development cost of a common high standard veneer and Material Cost are quite significant.And the whole handling process of message is also long, at first message enters from the forwarding service plate, arrive the forwarding back card/back board of OAA plate through network board, arrive the OAA front card by the physical interface of transmitting between back card/back board and the OAA front card again, the OAA front card carries out delivering to the forwarding back card/back board by aforementioned physical interface again after the OAA processing, transmit back card/back board and determine that according to the communication between plates head message will be forwarded to the OAA agency board, message arrives after the OAA agency board, and the forwarding-table item that the OAA agency board is searched on the plate is carried out the message repeating flow process.The handling process of whole message can be with reference to the lines with arrow among the figure 1.
Please refer to the logic diagram that the present invention shown in Figure 2 uses the network equipment of OAA system, wherein the network equipment comprises master control borad, forwarding service plate, network board and OAA plate.Wherein the OAA plate generally includes the OAA front card and transmits back card/back board.Network board provides data channel and the control channel of communication between plates for whole OAA internal system.In the present invention, no longer need additionally to provide separately an OAA agency board to come to be the service of tightly coupled OAA plate.The present invention a kind of preferred embodiment in, realize the operation flow method of adjustment of the invention described above by the computer program on the transformation master control borad, wherein the CPU of master control borad reads this computer program and operation from memory, and the general processing procedure of this program may further comprise the steps:
Step 101 detects whether the OAA plate that inserts the network equipment is OAA close coupling plate;
Step 102, when detecting OAA close coupling plate, the order that refluxes of user oriented this plate of OAA close coupling plate is revised as open visible state from the shielding invisible mode, so that the user can issue the rule that refluxes and is back to forwarding back card/back board on the OAA plate with the message of control OAA close coupling plate by inputting this this plate backflow command triggers master control borad;
Step 103, after OAA close coupling plate was inserted into the network equipment, master control borad issued this plate backflow rule by control channel to the OAA front card, and the message after wherein this this plate backflow rule indication OAA front card will be processed sends to the forwarding back card/back board on the OAA plate.
Need to prove that step 102 is not the necessary step of the present invention, because the pattern that the OAA system also can adopt automatic detection to issue, such as it is regular to be designed to issue the backflow of this plate from trend OAA front card when master control borad detects the OAA close coupling plate insertion network equipment, thereby dispenses the step of the manual intervention as step 102.Certainly allowing the user to issue the rule that refluxes by control command is to embody suitable flexibility at some application scenarios.After OAA close coupling plate was inserted in the system, master control borad can be found according at least a default testing mechanism the insertion of OAA close coupling plate, and this testing mechanism can cover the detection of bottom hardware and even the various levels of upper layer software (applications).
Before not having the OAA close coupling plate insertion network equipment, the order that refluxes of this plate can be designed as and masks in other words this order to the user is invisible, because this moment, this plate refluxed order to user's meaning not, the order that refluxes of open this this plate also may cause user error to operate this order causing system's run-time error.After OAA close coupling plate inserted, master control borad can carry out the negotiation of various levels with OAA close coupling plate, and the backflow order can be open to the user after consulting to finish.Take the network equipment be the 75E series of switch that provides of H3C company as example, the order that refluxes of this plate can be: switch-mode OAA slot xx.Wherein xx represents the slot number on backboard (not shown) of Target Board.In preferred embodiment, the compatibility of support of the present invention and prior art, if such as the user wishes to continue to use the agency board in the prior art scheme, it can issue corresponding agency order that refluxes, take the 75E series of switch of H3C company as example, this agency refluxes and orders can be switch-mode l2-enhanced, the user issues after this order, master control borad can be correspondingly issues agency corresponding to the order rule that refluxes that refluxes with this agency to the OAA plate, carries out forward process on the agency board so that can be back to through the message after the processing of OAA front card.
In fact in the typical network equipment, distributed network equipment especially, various veneers all are inserted on the backboard, and the slot on the backboard is the sign of each veneer normally.Wherein the xx in " slot xx " represents the slot number of OAA plate.Although OAA plate physical specification is identical with other veneers, yet the OAA plate is a special veneer, and two daughter boards are arranged on it, i.e. OAA front card and forwarding back card/back board.Its repeating back card/back board is inserted into a groove position of backboard and gets on, and the OAA front card forms passage between plate with transmitting between the back card/back board to link to each other by connector, that is to say that the message inflow and outflow of OAA front card all can be through the forwarding back card/back board.This shows, the order expression that refluxes of above-mentioned plate is the groove position of the destination that OAA refluxes being revised as the OAA plate at self place, and namely the Target Board that refluxes of message is for transmitting back card/back board.
After this plate that receives user's input refluxes and orders, master control borad refluxes to order correspondingly according to this plate and issues corresponding this plate backflow rule by control channel to the OAA front card, such as issuing a redirected ACL(Access Control List (ACL)), after this redirected ACL was issued to the OAA front card, the message that the OAA front card carries out after OAA processes will be redirected on the forwarding back card/back board by this ACL.After normal service message is entered by the service port of certain forwarding service plate of the network equipment, if this message hits processing rule (such as some acl rules), then can be redirected on the OAA front card and process.Process (processing such as upper layer application such as intrusion detections) at OAA front card finishing service afterwards, message then can hit aforementioned plate and reflux regular when refluxing.Hit the reflux message of rule of this plate and then can be redirected to the reflux forwarding back card/back board of regular appointment of this plate.
Transmit on the back card/back board because message is redirected to, the forwarding resource of transmitting back card/back board just can be utilized.Suppose that message is the IP message, transmit back card/back board and just can obtain down hop and corresponding outgoing interface according to purpose IP address search route table items, then inquire about the encapsulation that the ARP list item is finished the two layer message head, the outgoing interface corresponding from down hop sends.Whole process is transparent for transmitting back card/back board, and it does not need to do any change, as long as backflow is come to carry out normal professional the forwarding through the message that front card is processed.Please refer among Fig. 2 the expression message flow to band arrow lines, message enters from a forwarding service plate, arrive the forwarding back card/back board through network board, arrive the OAA front card by the physical interface of transmitting between back card/back board and the OAA front card again, the OAA front card is finished OAA processing (diverse network that is generally on the OAA front card is used) and is delivered to the forwarding back card/back board by aforementioned physical interface more afterwards, owing to the destination address that is attached to the communication between plates head between the header is to transmit back card/back board, therefore transmitting back card/back board can carry out aforesaid forward process to the message of receiving.In contrast to the message handling process of Fig. 1, message handling process of the present invention is more succinct, and efficient is higher.
Correspondingly, the present invention also provides the adjusting device of the operation flow in a kind of open architecture, and a kind of operation flow adjusting device is applied on the network equipment, wherein this network equipment comprises OAA plate and master control borad, and described OAA plate comprises the OAA front card and transmits back card/back board; Described OAA front card is used for that the message that receives is carried out OAA to be processed, and this device comprises:
Whether OAA plate detecting unit is the OAA plate for detection of the veneer that inserts the network equipment;
The rule downloading unit, be used for after the OAA plate is inserted into the network equipment, issue this plate rule that refluxes by the control channel between master control borad and the OAA plate to the OAA front card, wherein this this plate message of rule after being used for by communication between plates mechanism the OAA front card being processed that reflux sends to transmit on the back card/back board and processes.
Wherein, described OAA plate detecting unit detects whether the veneer that inserts the network equipment is that the OAA plate is specially: detect whether the veneer that inserts the network equipment is OAA close coupling plate, described OAA close coupling plate mode of operation is redirect mode; Described backflow rule is access control list ACL.This device also comprises in preferred mode: the command process unit, be used for when this plate that receives user's input refluxes order, and notify described rule downloading unit to issue to the OAA front card and reflux regular with this this plate this plate corresponding to order that reflux.Be further used for when the agency who receives user's input refluxes order in command process unit described in the preferred mode, notify described rule downloading unit to issue to reflux with this agency to the OAA front card and order the corresponding agency rule that refluxes.
The present invention is by succinct computer program design, and the message that has changed the OAA front card refluxes, and allows the message of OAA front card be back to the forwarding back card/back board.Because forwarding back card/back board and OAA front card usually are integrated on the OAA plate and are inserted on the backboard as a veneer, be equivalent to have the veneer of two sub-systems, therefore transmitting back card/back board belongs to the resource that has existed, transmit in the prior art back card/back board and only be message repeating that OAA is refluxed to the OAA agency board, and by design of the present invention the forwarding back card/back board is revised as in the backflow destination, carried out the forwarding work of message by the forwarding back card/back board that receives message.So, the present invention takes full advantage of the business processing resources on the forwarding back card/back board that has existed on the OAA plate, and the network equipment just no longer needs an extra OAA agency board to serve the OAA front card, decrease the manufacturing cost of the network equipment; And simplified the general handling process of message, improved the treatment effeciency of message.
The above only is preferred embodiment of the present invention, and is in order to limit the present invention, within the spirit and principles in the present invention not all, any modification of making, is equal to replacement, improvement etc., all should be included within the scope of protection of the invention.