CN106101023B

CN106101023B - A kind of VPLS message processing method and equipment

Info

Publication number: CN106101023B
Application number: CN201610348464.0A
Authority: CN
Inventors: 黄宗和; 万晶晶; 滕新东
Original assignee: Huawei Technologies Co Ltd
Current assignee: Huawei Technologies Co Ltd
Priority date: 2016-05-24
Filing date: 2016-05-24
Publication date: 2019-06-28
Anticipated expiration: 2036-05-24
Also published as: CN106101023A

Abstract

The invention discloses a kind of VPLS message processing method and equipment, it is related to network technique field, to solve in the existing VPLS networking using VNF technology, multiple VM share a VSI, caused VPLS converting flow detour, the low problem of flow forwarding performance, one VSI is set on each forwarding surface VM in the invention, and this method may include: that the first forwarding surface VM receives the MAC Address comprising the first user that the first user sends, the message of the MAC Address of second user, inquire MAC forwarding table, obtain first interface corresponding with the MAC Address of second user in the MAC forwarding table, the message is encapsulated into upper first private network tags and the first public network tunnel label, message after encapsulation is encapsulated to the MAC Address of upper first interface, the interface of first opposite equip. MAC Address, formed VPLS message, the VPLS message after encapsulation is sent by the first interface.

Description

A kind of VPLS message processing method and equipment

Technical field

The present invention relates to network technique field more particularly to a kind of Virtual Private LAN Service (Virtual Private LAN Service, VPLS) message processing method and equipment.

Background technique

VPLS is in traditional multiprotocol label switching (Multi-Protocol Label Switch, MPLS) L2VPN (Layer 2Virtual Private Network, two-layer virtual private network) develop on the basis of scheme, core concept is benefit Puppet is established and safeguarded between Provider Edge (Provider Edge, PE) equipment in VPLS example with signaling protocol Line (Pseudo Wire, PW) will transmit on PW after the encapsulation of two-layer protocol frame, exchange, makes multiple local area networks in wide scope (Local Area Network, LAN) is integrated into one in data link level and throws the net network, provides a user virtual Ethernet (Ethernet) it services.

Fig. 1 is existing VPLS networking schematic diagram, as shown in Figure 1, VPLS network may include: multiple PE equipment and user network Network edge (Customer Edge, CE) equipment, each PE equipment can connect one or more CE equipment, each CE equipment and The equipment such as its lower a large amount of PC (Private Computer, PC) hung and server are received by respective PE equipment The message of the same Virtual Private Network (Virtual Private Network, VPN), this VPN are known as a VPLS reality , multiple Virtual Switch Instance (Virtual Switching Instance, VSI) can be configured in each PE equipment, arbitrarily Establishing between VSI in two PE equipment in same VPLS network has PW, and PE equipment can receive the ether report of CE equipment transmission Text, and the Ethernet message received is subjected to the forwarding of VPLS message by PW.

Wherein, in order to enhance the forwarding performance of VPLS network, existing technical staff is usually by virtual network function (Virtual Network Function, VNF) technology, using one of PE equipment as a VNF server, in the service Distributed system VNF is used in device, fictionalizes multiple virtual machines (Virtual Machine, VM) (such as: control plane VM and forwarding Face VM), each forwarding surface VM can connect multiple users, and multiple forwarding surface VM can share the same VSI, and the VSI can be with it The VSI of his PE equipment establishes PW, and each forwarding surface VM can carry out VPLS message by the PW set up and other PE equipment and turn Hair.

For example, Fig. 2 is the VPLS networking schematic diagram using VNF technology, as shown in Fig. 2, using distributed system in PE1 VNF fictionalizes control plane VM and two forwarding surfaces VM:VM1 and VM2, and the user equipment of VM1 connection family 1, VM2 connection man The user equipment in front yard 2, VM1 and VM2 share VSI, which can establish pseudo-wire PW1 with the VSI of PE2 equipment, at this point, from family 2 to The forward-path of PE1 can have two: family 2-VM2-VM1-PW1-PE2, family 2-VM2-PW1-PE2.

From the foregoing, it will be observed that VNF system entirely regards a VSI as in the existing VPLS networking using VNF, multiple VM pass through The VSI is linked into the same VPLS broadcast domain, and therefore, these VM and far-end PE can only establish a PW, and the flow of VM access can It can be forwarded to far-end PE by other VM of VNF internal system, lead to the detour of VPLS converting flow, for example, Tu2Zhong family 2 to PE1 forward-path may are as follows: family 2-VM2-VM1-PW1-PE2.Due to management interface between difference VM in VNF system Bandwidth bearing capacity is limited, when a large amount of data traffic is forwarded to far-end PE from other VM by management interface, it is easy to go out Existing packet loss phenomenon, and then cause flow forwarding performance low.

Summary of the invention

The embodiment of the present invention provides a kind of VPLS message processing method and equipment, existing using VNF technology to solve In VPLS networking, multiple VM share a VSI, caused VPLS converting flow detour, the low problem of flow forwarding performance.

In order to achieve the above objectives, the embodiment of the present invention adopts the following technical scheme that

In a first aspect, the embodiment of the present invention provides a kind of VPLS message processing method, it is applied to a server, the server It may include: at least one forwarding surface virtual machine VM, each forwarding surface VM connects at least one user, sets on each forwarding surface VM It sets the VSI on Virtual Switch Instance a VSI, at least one forwarding surface VM and belongs to same VPLS network, at the message Reason method may include:

What the first forwarding surface VM received that the first user sends includes: the Medium Access Layer MAC Address of first user, the The message of the first virtual LAN vlan mark where the MAC Address of two users, first user, first forwarding surface VM is any forwarding surface VM in the server, and first user connect with the first forwarding surface VM, and described second uses Family is connect with the first opposite equip., and the VSI of the first forwarding surface VM and the VSI of first opposite equip. belong to the VPLS Network；

Corresponding with VSI media access control MAC forwarding table is inquired, is obtained in the MAC forwarding table with described the The MAC Address of two users is corresponding to include: the MAC Address of the second user, corresponding with the MAC Address of the second user The MAC forwarding-table item of first interface on the first forwarding surface VM；

By what is established between the VSI of the upper first forwarding surface VM of message encapsulation and the VSI of first opposite equip. The first private network tags of pseudo-wire PW and the first public network tunnel label；

Message after encapsulated tags is encapsulated into the MAC Address of the upper interface, the MAC Address of first opposite equip., The first VPLS message is formed, the first VPLS message is sent by the first interface.

In this way, configuring VSI on each VM in the server using VNF technology, make each VM that can pass through itself VSI and other equipment (such as remote server or other VM) directly progress message forwarding, the inside for avoiding converting flow is circuitous It returns, improves the performance of flow forwarding, meanwhile, management interface bandwidth between no longer occupancy VM improves the equipment using NFV technology Robustness.

Optionally, in a kind of achievable mode of first aspect, first opposite equip. can be PE equipment, can also Think the VM in the server in addition to the first forwarding surface VM, i.e., opposite equip. can be server itself, can be with For any forwarding surface VM on other servers in addition to the server.

In this way, make forwarding surface VM that can not only receive and dispatch VPLS message between remote equipment, it can also be with local forwarding surface VPLS message is received and dispatched between VM.

Optionally, another in first aspect can receive the first user in the first forwarding surface VM and send in realization mode Message before, method can also include:

Label distribution protocol conversation ldp session is established between first forwarding surface VM and the first opposite equip., passes through ldp Session obtains the private network tags and public network tunnel of the PW established between the VSI of the first forwarding surface VM and the VSI of the first opposite equip. Road label.

Specifically, being built between the first forwarding surface VM and the second forwarding surface VM when the first opposite equip. is the second forwarding surface VM Founding label distribution protocol conversation ldp session may include:

It is separately operable tag distribution protocol LDP process on the first forwarding surface VM and the second forwarding surface VM, passes through intranet It closes agreement routing to learn from each other winding network protocol IP address, inline mouth IP address and the external connection mouth IP address of other side, by the The inline mouth IP address of one forwarding surface VM and the inline mouth IP address of the second forwarding surface VM are established as the transmission address transport ldp session。

When the first opposite equip. is the second forwarding surface VM, server can also include: master control VM, the first forwarding surface VM with Label distribution protocol conversation ldp session is established between second forwarding surface VM may include:

LDP process is run on master control VM, passes through time of each forwarding surface VM in Interior Gateway Protocol IGP routing server Ring IP address, inline mouth IP address and external connection mouth IP address, master control VM is by the inline mouth IP address of the first forwarding surface VM and The inline mouth IP address of two forwarding surface VM establishes ldp session as the transmission address transport.

As the inverse process for sending VPLS message, the first forwarding surface VM can also receive VPLS message, be implemented as follows:

What the first forwarding surface VM received third user transmission includes: the MAC Address of purpose interface, the second opposite equip. MAC Address, the second public network tunnel label, the second private network tags, the MAC Address of purpose user, the MAC Address of third user, The 2nd vlan mark of virtual LAN where three users and the 2nd VPLS message of load, third user set with the second opposite end The VSI of standby connection, the VSI of the second opposite equip. and the first forwarding surface VM belong to VPLS network, the second private network tags and the second public affairs Net tunnel label are as follows: the private network tags and public network tunnel of the PW established between the VSI of the first forwarding surface VM and the VSI of the second opposite equip. Road label；

Mac address table is inquired, if the MAC Address of purpose interface is with the first forwarding surface VM's in the mac address table The MAC Address of interface is identical, it is determined that the 2nd VPLS message is the VPLS message for being sent to itself；

The 2nd VPLS message is decapsulated, if discovery the 2nd VPLS message is MPLS message, is inquired into label mapping Ilm table finds the first ilm list item corresponding with the second public network tunnel label, if the movement in the first ilm list item is next-hop Pop then successively pops up the second public network tunnel label and the second private network tags in the 2nd VPLS message, inquires in ilm table The 2nd ilm list item corresponding with the second private network tags obtains in the 2nd ilm list item first turn corresponding with the second private network tags The VSI of fermentation VM；

MAC forwarding table corresponding with VSI is inquired, MAC forwarding-table item corresponding with the MAC Address of purpose user is obtained, with The corresponding MAC forwarding-table item of the MAC Address of purpose user includes: the MAC Address of purpose user, the MAC Address with purpose user Second interface on corresponding first forwarding surface VM, the 3rd vlan mark of the virtual LAN where purpose user；

The 2nd vlan mark in the 2nd VPLS message after the second private network tags of pop-up is replaced with into the 3rd vlan mark, Replaced message is sent to purpose user by second interface.

In this way, by the channel established between itself VSI and opposite equip. VSI, realize VPLS message, and to receiving VPLS message is handled.

Second aspect, the embodiment of the present invention also provide a kind of server, which may include: at least one forwarding surface Virtual machine VM, each forwarding surface VM connect at least one user, one Virtual Switch Instance VSI of setting on each forwarding surface VM, VSI at least one forwarding surface VM belongs to same Virtual Private LAN Service VPLS network, at least one described turn Fermentation VM in any forwarding surface VM include:

Receiving unit includes for receive the first user transmission: the Medium Access Layer MAC Address of first user, The message of the first virtual LAN vlan mark where the MAC Address of second user, first user, first user It is connect with the forwarding surface VM, the second user is connect with the first opposite equip., the VSI of the forwarding surface VM and described first The VSI of opposite equip. belongs to the VPLS network；

Query unit obtains the MAC forwarding for inquiring media access control MAC forwarding table corresponding with the VSI MAC forwarding-table item corresponding with the MAC Address of the second user in table, it is described corresponding with the MAC Address of the second user MAC forwarding-table item include: the MAC Address of the second user, the forwarding corresponding with the MAC Address of the second user First interface on the VM of face；

Encapsulation unit, the message for receiving the receiving unit encapsulate upper first private network tags and the first public network tunnel Road label, first private network tags are as follows: the puppet established between the VSI of the forwarding surface VM and the VSI of first opposite equip. The private network tags of line PW, the first public network tunnel label are as follows: the VSI of the forwarding surface VM and first opposite equip. The public network tunnel label of the pseudo-wire PW established between VSI；

And the message after encapsulated tags is encapsulated into the MAC Address of the upper interface, the MAC of first opposite equip. Address forms the first VPLS message；

Transmission unit is sent for the first VPLS message after encapsulating encapsulation unit by the first interface.

Specifically, above-mentioned receiving unit, query unit, the implementation procedure of encapsulation unit and transmission unit are referred to Implementation procedure in one side the method, in this not go into detail.

It should be noted that the communication unit that receiving unit, transmission unit can integrate as server in second aspect, the Query unit, encapsulation unit in two aspects can be the processor individually set up, and also can integrate in a certain of processing equipment It is realized in a processor, in addition it is also possible to be stored in the form of program code in the memory of processing equipment, by processing equipment Some processor call and execute the above query unit, the function of encapsulation unit.Processor described here can be one A central processing unit (Central Processing Unit, CPU) or specific integrated circuit (Application Specific Integrated Circuit, ASIC), or be arranged to implement the one or more of the embodiment of the present invention Integrated circuit.

From the foregoing, it will be observed that the embodiment of the present invention provides a kind of VPLS message processing method and equipment, the first forwarding surface VM is received The message of the MAC Address of the MAC Address comprising the first user, second user that first user sends, inquires MAC forwarding table, obtains MAC forwarding-table item corresponding with the MAC Address of second user in the MAC forwarding table is taken, the message is encapsulated into upper and private network Message after encapsulation is encapsulated connecing for the MAC Address, the first opposite equip. for going up the first interface by label and public network tunnel label The MAC Address of mouth forms VPLS message, the VPLS message after encapsulation is sent by the first interface.In this way, can be with By configuring VSI in each VM, make each VM can by itself VSI and other equipment (such as far-end PE equipment or Other VM) message forwarding is directly carried out, the inside detour of converting flow is avoided, the performance of flow forwarding is improved, meanwhile, no Management interface bandwidth between VM is occupied again, improves the robustness of the equipment using NFV technology.

Detailed description of the invention

In order to more clearly explain the embodiment of the invention or the technical proposal in the existing technology, to embodiment or will show below There is attached drawing needed in technical description to be briefly described, it should be apparent that, the accompanying drawings in the following description is only this Some embodiments of invention for those of ordinary skill in the art without creative efforts, can be with It obtains other drawings based on these drawings.

Fig. 1 is existing VPLS networking schematic diagram；

Fig. 2 is the existing VPLS networking schematic diagram using VNF technology；

Fig. 3 is the VPLS networking schematic diagram provided in an embodiment of the present invention using VNF technology；

Fig. 4 is a kind of structure chart of server provided in an embodiment of the present invention；

Fig. 5 is a kind of flow chart of VPLS message processing method provided in an embodiment of the present invention；

Fig. 6 is the VPLS networking schematic diagram provided in an embodiment of the present invention using VNF technology；

Fig. 7 is a kind of flow chart of VPLS message processing method provided in an embodiment of the present invention；

Fig. 8 is a kind of structure chart of server provided in an embodiment of the present invention.

Specific embodiment

Core of the invention thought is: an original VSI being carried out the more examples of VSI in the equipment using VNF technology Change, is provided with VSI in each VM, PW is established by the VSI of this VM and the VSI of far-end PE, is transmitted on the PW of foundation VPLS message no longer forwards the message on this VM by other VM, avoids the detour of flow forwarding.

With reference to the attached drawing in the embodiment of the present invention, technical solution in the embodiment of the present invention carries out clear, complete Description, it is clear that the described embodiment is only a part of the embodiment of the present invention, instead of all the embodiments.Based on this hair Embodiment in bright, every other implementation obtained by those of ordinary skill in the art without making creative efforts Example, shall fall within the protection scope of the present invention.

It is to be appreciated that in the description of the present invention, the system of instructions such as term " first ", " second ", " another " or Element is the system or element with certain function described based on embodiment, is merely for convenience of the description present invention and simplification is retouched It states, rather than the system of indication or suggestion meaning or element must have this name, therefore be not considered as limiting the invention.

For the ease of the description of embodiment, below first simply introduce the application scenarios of the embodiment of the present invention.Referring to figure 3, it is the VPLS networking schematic diagram provided in an embodiment of the present invention using VNF technology, as shown in figure 3, the VPLS networking can wrap Contain: using the server 10 of VNF technology, PE equipment 20 and CE equipment 30, each server 10, PE equipment 20 can connect one Or multiple CE equipment 30, each CE equipment 30 and its lower a large amount of PC (Private Computer, PC) hung, user The equipment such as terminal and server can be received by the equipment respectively connected from the same Virtual Private Network (Virtual Private Network, VPN) message, this VPN is known as a VPLS network.

In VPLS networking as indicated at 3, server 10 can be PE equipment, for example interchanger etc., it can be by VNF Technology can configure multiple virtual machine VM101 using volume server (X86 server) Lai Shixian on the server 10, Such as: control plane VM102 and multiple forwarding surface VM101, each forwarding surface VM101 can be connected by CE equipment 30 and multiple users It connects, a VSI can be configured on each forwarding surface VM101, the user connecting with forwarding surface VM101 can be with forwarding surface VM101 On VSI establish corresponding binding relationship, the VSI on VM101 can establish pseudo- with the VSI in any PE equipment 20 of distal end Line PW, user can carry out the forwarding of VPLS message by the PW and far-end PE equipment 20.It should be noted that shown in Fig. 3 In VPLS networking, when distant at a distance from server 10 is between far-end PE equipment 20, it can be arranged in multiple between VPLS message is forwarded to opposite equip. by heart node P (such as switching equipment).

Wherein, in VPLS network, PE equipment 20 can indicate service provider edge devices, and for example interchanger etc., makes VPLS forwarding is carried out with VSI.

CE equipment 20 can indicate customer network edge device, can by access circuit (Access Circuit, AC it) is connect with equipment such as server 10, PE equipment 20, the multiple use for belonging to same VPN network can be hung below under CE equipment 30 Family equipment, such as: PC, mobile terminal equipment.

VSI indicates virtual link (i.e. pseudo-wire PW), is between a pair of of PE equipment, each is provided between VM and PE equipment Set up point-to-point connection is serviced, a plurality of virtual link can be carried between a pair of of PE equipment, between VM and PE equipment A public network tunnel in, all there is such tunnel in VPLS network between any two PE, server, be one complete Connect network.

Virtual machine VM101 can be to be managed by dedicated virtualization software, such as VMware, on a physical server Fictionalizing (includes: virtual center processor with the operating system of oneself, application program, virtual hardware environment (Central Processing Unit, referred to as CPU), memory, input and output (Input Output, IO) equipment, virtual friendship Change planes) server, can be the master control borad or wiring board in physical server.Wherein, control plane VM102 is mainly controlled Work, the forwarding surface VM101 such as the flow forwarding of forwarding surface VM101, parameter setting can be used as a virtual router, realize The forwarding of VPLS message.

Specifically, as shown in figure 4, provided in an embodiment of the present invention using the server 10 of VNF technology may include: hardware Layer operates in control plane VM102 on the hardware layer and at least one forwarding surface VM101, the hardware layer may include: Processor 1011, communication interface 1012, memory 1013, at least one communication bus 1014, communication bus 1014 for realizing It connection between these devices and is in communication with each other；Control plane VM102 is as management level, to complete the management of hardware resource, divide Match；Virtual hardware platform is presented for forwarding surface VM101, realizes the scheduling and isolation of forwarding surface VM101.

Processor 1011 may be a central processing unit (Central Processing Unit, referred to as CPU), It can be specific integrated circuit (Application Specific Integrated Circuit, ASIC), or be configured At the one or more integrated circuits for implementing the embodiment of the present invention, such as: one or more microprocessors (Digital Signal Processor, DSP), or, one or more field programmable gate array (Field Programmable Gate Array, FPGA)。

Communication interface 1012 may be remote direct data access (Remote Direct Memory Access, RDMA) Network interface card can be used for carrying out data interaction between ext nal network element.

Memory 1013 can be volatile memory (Volatile Memory), such as random access memory (Random-Access Memory, RAM)；Or nonvolatile memory (Non-Volatile Memory), such as read-only deposit Reservoir (Read-Only Memory, ROM), flash memory (Flash Memory), hard disk (Hard Disk Drive, HDD) Or solid state hard disk (Solid-State Drive, SSD)；Or the combination of the memory of mentioned kind.

Communication bus 1014 can be divided into address bus, data/address bus, control bus etc., can be Industry Standard Architecture knot Structure (Industry Standard Architecture, ISA) bus, external equipment interconnection (Peripheral Component Interconnect, PCI) bus or extended industry-standard architecture (Extended Industry Standard Architecture, EISA) bus etc..Only to be indicated with a thick line in Fig. 4, it is not intended that only one convenient for indicating Bus or a type of bus.

Optionally, processor 1011 can be managed by dedicated virtualization software, be fictionalized on server 10 multiple Forwarding surface VM101, and at least one VSI is configured for each forwarding surface VM101, wherein forwarding surface VM101 can be used for user's Message is forwarded to the other users connecting with PE equipment 20 by the VSI of itself, alternatively, receiving the message of other users, will connect The message received is forwarded to the user connecting with itself, is implemented as follows:

What forwarding surface VM101 received that the first user sends includes: the MAC of the MAC Address of the first user, second user After the message that location, the first virtual LAN (virtual local network, vlan) identify, it can inquire corresponding with VSI Media access control MAC forwarding table obtains MAC forwarding-table item corresponding with the MAC Address of second user in MAC forwarding table, should MAC forwarding-table item may include first interface corresponding with the MAC Address of second user；

The message received is first encapsulated the first private network tags corresponding with VSI and the first public network tunnel by forwarding surface VM101 Then message after encapsulation is encapsulated the MAC Address of the MAC Address of upper first interface, the interface of opposite equip., shape by road label again At the first VPLS message, the first VPLS message after encapsulation is sent by first interface.

Wherein, the first private network tags and the first public network tunnel label are as follows: the VSI of the forwarding surface VM101 and VSI of opposite equip. Between the private network tags and public network tunnel label of pseudo-wire PW established, and the VSI of forwarding surface VM101 and the VSI of opposite equip. belong to The same VPLS network.

It should be noted that above-mentioned opposite equip. can be the different distal ends with the server where forwarding surface VM101 PE equipment, or with forwarding surface VM101 with server other forwarding surfaces VM or be different from the service Forwarding surface VM on other servers of device；When opposite equip. is PE equipment, the external connection mouth on forwarding surface VM101 can be passed through Send message to PE equipment, when opposite equip. is other forwarding surfaces VM, can by the inline mouth of forwarding surface VM101 to its His forwarding surface VM sends message.

As the inverse process of message transmission process, when what forwarding surface VM101 received third user transmission includes: purpose is connect MAC Address, the MAC Address of second opposite equip., the second public network tunnel label, the second private network tags, purpose user of mouth MAC Address, the MAC Address of the third user, the second VLAN ID and when the 2nd VPLS message of load, turn Fermentation VM101 can decapsulate the 2nd VPLS message；The third user connect with the second opposite equip., second opposite end The VSI of the VSI and forwarding surface VM101 of equipment belong to same VPLS network, second private network tags are as follows: forwarding surface VM101's The private network tags of the PW established between VSI and the VSI of second opposite equip., the second public network tunnel label are as follows: forwarding surface The public network tunnel label of the PW established between the VSI of VM101 and the VSI of second opposite equip.；

Mac address table is inquired, if the MAC Address phase of the MAC Address and the interface of forwarding surface VM101 of discovery purpose interface Together, it is determined that the 2nd VPLS message is the VPLS message for being sent to itself；

The 2nd VPLS message is decapsulated, if discovery the 2nd VPLS message is MPLS message, is inquired into label Ilm table is mapped, the first ilm list item corresponding with the second public network tunnel label is found, if the movement in ilm list item is next-hop Pop then successively pops up the second public network tunnel label and the second private network tags in the VPLS message；

Corresponding with the second private network tags the 2nd ilm list item is inquired in ilm table, with second in the 2nd ilm list item of acquisition The corresponding VSI of private network tags inquires MAC forwarding table corresponding with the VSI, obtains corresponding with the MAC Address of purpose user Include: second interface corresponding with the MAC Address of purpose user, third virtual office corresponding with the MAC Address of purpose user The MAC forwarding-table item that domain network mark is known, by the second virtual local area network mark in the 2nd VPLS message after the second private network tags of pop-up Knowledge replaces with third VLAN ID, and replaced message is sent by second interface.

For ease of description, following embodiment one is shown in the form of step and VPLS provided by the invention is described in detail Message processing process, wherein the step of showing can also execute in VM, can also be in the department of computer science of one group of executable instruction It is executed in system.Although, in some cases, can be to be different from herein suitable in addition, be shown in figure logical order Sequence executes shown or described step.

Embodiment one

Fig. 5 is a kind of message processing method provided in an embodiment of the present invention, is applied to server, which can be figure The equipment that VNF technology is used in 3, which may include: at least one forwarding surface VM, and each forwarding surface VM can be pre-configured with There are loopback ip address, inline mouth IP address and external connection mouth IP address, inline mouth is to transmit report between transit server fermentation VM The interface of text, external connection mouth can between the forwarding surface VM and remote equipment (PE equipment) in server transmitting message interface, Each forwarding surface VM can connect at least one user, and these users can as shown in Figure 3 directly under hang over CE equipment in the following, It is connect by AC link with forwarding surface VM by CE equipment, a settable VSI on each forwarding surface VM, and all forwarding surface VM On VSI may belong to the same VPLS network；As shown in figure 5, the message processing method may comprise steps of:

S101: the first forwarding surface VM receives the message that the first user sends, and the message includes: the MAC of the first user Location, the MAC Address of second user, the first vlan mark.

Wherein, the first forwarding surface VM can be any forwarding surface VM in server.

First user can be any user being connect by CE equipment with the first forwarding surface VM, for the source for sending message End, and the VSI phase of first user and the first forwarding surface VM are bound, i.e., the message of the first user can by with the first forwarding surface The corresponding PW of the VSI of VM is sent.

First vlan is identified as the mark of virtual LAN locating for the first user, for determining the first user and the first forwarding The interface connected between the VM of face.

Second user can be any user being connect by CE equipment with the first opposite equip., for the purpose for receiving message End, the second user is associated with the VSI of the first opposite equip., i.e., the message of second user can by with the first opposite equip. The corresponding PW of VSI receive and dispatch VPLS message.

Optionally, the first opposite equip. can for be different from server remote equipment (such as PE equipment), can for clothes It is engaged in being different from the second forwarding surface VM of the first forwarding surface VM in device, i.e. the first forwarding surface VM can be with other turns of server internal VPLS message is received and dispatched between fermentation VM, VPLS message can also be received and dispatched between far-end PE equipment.It should be noted that first turn The VSI of the VM and VSI of the first opposite equip. that leavens dough belongs to same VPLS network.

It will be appreciated that user described in the embodiment of the present invention can refer to the user terminal that the user holds, it is one The user terminal is referred to as user by equipment, for ease of description, the present invention.

S102: the first forwarding surface VM inquires MAC forwarding table corresponding with the VSI, obtains the MAC Address with second user Corresponding MAC forwarding-table item, the MAC forwarding-table item includes: the MAC Address of second user, the MAC Address pair with second user The first interface answered.

Wherein, in VPLS network, forwarding surface VM or PE equipment can receive the broadcasting packet in VPLS broadcast domain, study The MAC Address of all local, distal end connection users in the broadcasting packet received, establish in forwarding surface VM or PE equipment The corresponding MAC forwarding table of VSI.

MAC forwarding table may include multiple MAC forwarding-table items, and each MAC forwarding-table item may include: MAC Address, with should The corresponding interface of MAC Address (i.e. coffret), certainly, in practical applications, MAC forwarding-table item include but is not limited to and MAC The corresponding interface in address, if MAC Address is acquired from some vsi (broadcast domain), mac address forwarding table item can also be wrapped Containing vsi corresponding with MAC Address；If MAC Address is come in from PW or from lsp (can be the tunnel ldp, te), MAC Include in address repeat listing token (token)；If MAC Address is come in from the interface with virtual LAN (vlan), Then mac address forwarding table item can also include VLAN ID (vlan id), i.e., mac address forwarding table item is except with MAC Except the corresponding interface in location, can also include according to the actual situation: VSI corresponding with MAC Address mark (vid), vlan id, Multiple information such as token.

For example, the following table 1 is mac address forwarding table, as shown in Figure 1, the mac address forwarding table item where MAC Address 111-1 May include: MAC Address 111-1, broadcast domain vsi, VLAN ID 10 and interface G1/0/0 do not include token and believe Breath, this indicates that MAC Address 111-1 is to learn from broadcast domain vsi, and the MAC Address is the interface from virtual LAN 10 What G1/0/0 came in, come in from PW lsp link.

Table 1

MAC Address	vid	vlan id	transport	token
					111-1	vsi	10	G1/0/0	—
111-2	vsi	—	G2/0/0	100

It should be noted that if do not find MAC Address corresponding with the target MAC (Media Access Control) address in message in mac address table, It then indicates that the message may be the Ethernet message of unknown unicast address, multicast address or broadcast address, then can use flooding side The Ethernet message is replicated more parts by formula, is broadcasted respectively from the associated total interface of local VSI and PW.

Message is encapsulated upper first private network tags and the first public network tunnel label by the S103: the first forwarding surface VM.

Wherein, first private network tags are as follows: the VSI of the first forwarding surface VM and VSI of first opposite equip. Between the private network tags of pseudo-wire PW established, the first public network tunnel label are as follows: the VSI of the first forwarding surface VM and described the The public network tunnel label of the pseudo-wire PW established between the VSI of a pair of of end equipment.

Optionally, the first forwarding surface VM can be before the message that the first forwarding surface VM receives that the first user sends, with the A pair of of end equipment establishes label distribution protocol conversation ldp session；

By the ldp session set up, learn between the VSI of the first forwarding surface VM and the VSI of the first opposite equip. The private network tags and public network tunnel label of the PW of foundation.

Specifically, local terminal can distribute ldp label (i.e. private network mark to opposite end after creation VSI, ldp session Label), while sending the message for carrying VSI mark to opposite end, after opposite end receives the message, find the mark of itself VSI with Mark in the message is identical, then PW is set up between local terminal, distributes public network tunnel label to the PW set up.

It will be appreciated that when the first opposite equip. is the PE equipment different from the server where the first forwarding surface VM, The ldp session that first forwarding surface VM and PE equipment are established can be distal end label distribution protocol conversation remote-ldp session；

At this point it is possible to be separately operable LDP process in the first forwarding surface VM and PE equipment, routed by Interior Gateway Protocol Both sides learn from each other the loopback ip address of other side, inline mouth IP address, external connection mouth IP address, by the biggish one end of loopback ip address Using the external connection mouth IP address of the first forwarding surface VM and the external connection mouth IP address of the 2nd PE as the transmission address transport, actively Call opposite end, it is established that the remote-ldp session is first turn according to the remote-ldp session set up PW distribution private network tags and public network tunnel label between the VSI of the VSI and PE equipment of fermentation VM.

It should be noted that in present example, the forwarding surface VM in VPLS network has respective winding (loopback) address, inline mouth IP address, external connection mouth IP address, before establishing ldp-session, forwarding surface VM can be incited somebody to action Inline mouth IP address, the external connection mouth IP address of itself are published to the road common network (Internal Gateway Protocol, IGP) By upper, by the inline mouth IP address of each forwarding surface VM of IGP route learning, external connection mouth IP address.

When first opposite equip. be the second forwarding surface VM when, the first forwarding surface VM and the second forwarding surface VM foundation Ldp session is the session of local label distribution protocol (local-ldp session), wherein the first forwarding surface VM and second It may include following two ways that forwarding surface VM, which establishes local-ldp session:

One, it is separately operable tag distribution protocol LDP process on the first forwarding surface VM and the second forwarding surface VM, passes through IGP Route winding network protocol IP address, inline mouth IP address and the external connection mouth IP address of the other side that learns from each other；

The inline mouth IP address of the first forwarding surface VM and described second are forwarded by the biggish one end of loopback ip address For the inline mouth IP address of face VM as the transmission address transport, local-ldp session is established in active call opposite end.

Specifically, the first forwarding surface VM and the second forwarding surface VM need to negotiate master-slave relationship, whom determines to initiate TCP chain It connects, compares size using the source address of TCP connection to be established and destination address to determine principal and subordinate, based on address is big, source address Greater than destination address, then based on local；Source address is less than destination address, then it is local for from.TCP connection is initiated by main equipment, TCP connection is never actively initiated from equipment.

It is established after TCP connection between first forwarding surface VM and the second forwarding surface VM, main LSR initiates initialization Message starts to negotiate ldp parameter (ldp session is established in preparation), and the parameter of negotiation includes ldp protocol version, label distribution Whether mode the keepalive time, VPI/VCI/DLCI Label space range, enables loop and the parameters such as avoids, and negotiates successfully Afterwards, so that it may establish ldp session.

Two, server can also include: master control VM；

LDP process is run on the master control VM, passes through the winding IP of all forwarding surface VM on IGP route learning server Address, inline mouth IP address and external connection mouth IP address；

Master control VM is by the inline mouth IP of the inline mouth IP address of the first forwarding surface VM and the second forwarding surface VM The local-ldp session is established as the transmission address transport in location.

Message after encapsulation is encapsulated the MAC Address, the first opposite equip. for going up first interface by the S104: the first forwarding surface VM The MAC Address of interface forms the first VPLS message, the first VPLS message is sent by first interface.

Wherein, the MAC Address of the interface of the first opposite equip. can be marked in forwarding entry (nhlfe) table from next-hop and be looked into It finds, the nhlfe table may include at least one nhlfe list item, and each nhlfe list item may include: token, public network tunnel Road label, private network tunnel label and target MAC (Media Access Control) address.

Specifically, can search checked in mac address forwarding table item it is corresponding with the MAC Address of second user Token searches nhlfe list item corresponding with the token value, at this then according to the token value found in nhlfe table MAC Address of the target MAC (Media Access Control) address as the interface of the first opposite equip. is found in nhlfe list item.

It is further alternative, as the inverse process for sending VPLS message, when the first forwarding surface VM receives VPLS message, The method can also include:

First forwarding surface VM receives the 2nd VPLS message that third user sends, the third user and the second opposite equip. Connection, the VSI of the VSI of second opposite equip. and the first forwarding surface VM belong to the VPLS network, and described second VPLS message includes: the MAC Address of purpose interface, the MAC Address of second opposite equip., the second public network tunnel label, Virtual LAN where two private network tags, the MAC Address of purpose user, the MAC Address of the third user, the third user The 2nd vlan mark and load, second private network tags are as follows: the VSI of the first forwarding surface VM and second opposite end The private network tags of the PW established between the VSI of equipment, the second public network tunnel label are as follows: the VSI of the first forwarding surface VM with The public network tunnel label of the PW established between the VSI of second opposite equip.；

The first forwarding surface VM inquires mac address table, if the MAC Address of the purpose interface and first forwarding surface The MAC Address of the interface of VM is identical, it is determined that the 2nd VPLS message is the VPLS message for being sent to itself；

The 2nd VPLS message is decapsulated, if discovery the 2nd VPLS message is MPLS message, is inquired into label Ilm table is mapped, the first ilm list item corresponding with the second public network tunnel label is found, if dynamic in the first ilm list item As next-hop pop, then the second public network tunnel label and the second private network mark in the 2nd VPLS message are successively popped up Label inquire the 2nd ilm list item corresponding with second private network tags in the ilm table, obtain in the 2nd ilm list item The VSI of the first forwarding surface VM corresponding with second private network tags；

MAC forwarding table corresponding with the VSI is inquired, MAC forwarding corresponding with the MAC Address of the purpose user is obtained List item, the MAC forwarding-table item corresponding with the MAC Address of the purpose user includes: the MAC Address of the purpose user, Where second interface, the purpose user on the first forwarding surface VM corresponding with the MAC Address of the purpose user 3rd vlan of virtual LAN is identified；

The 2nd vlan mark popped up in the 2nd VPLS message after second private network tags is replaced with into the third Vlan mark, is sent to the purpose user by the second interface for replaced message.

Wherein, the ilm table are as follows: enter label mapping (incoming label map) table, when creating ldp session It generates, ilm table may include multiple ilm list items, and each ilm list item may include: label (public network tunnel label or private network mark Label), VSI mark (vid), token and movement (action).

Below with the VPLS networking scene shown in fig. 6 using VNF technology, above-mentioned message method is illustrated:

Turn as shown in fig. 6, the server in the VPLS networking using VNF technology is virtualized out control VM and two Leaven dough VM:VM1, VM2, is in the same VPLS broadcast domain, forwarding surface VM1, forwarding surface VM2 and distal end with the PE equipment of distal end PE equipment establishes the VPLS PW connected entirely.Wherein, friendship is deployed between forwarding surface VM1, forwarding surface VM2 and far-end PE equipment Change planes P, and each forwarding VM has the respective address loopback, the address interior connecting port ip of VM, and the address external connection interface ip is required to It is published in public network IGP routing, the inside and outside connecting port of VM needs enabled mpls ldp.

The address the loopback 2.2.2.2 of the PE of the address the loopback 1.1.1.1 and distal end of forwarding surface VM1 is established The address loopback of the PE of the address the loopback 3.3.3.3 and distal end of remote-ldp session, forwarding surface VM2 2.2.2.2 remote-ldp session is established, VPLS is according to different remote-ldp seesion distribution vpls PW's label；VM1 is forwarded, connecting port establishes TCP connection as the address transport within VM2, passes through between them and sends mutually The foundation of hello message trigger local-ldp session.VPLS is distributed between VM according to local-ldp sesison The label (label) of vpls PW.

The label of distribution is as shown in table 2 below, and the vpls PW label that PE equipment distributes to VM1 is 1, distributes to the public network of VM1 Tunnel label is that the vpls PW label that 4, PE equipment distributes to VM2 is 2, distributes to the public network tunnel label of VM2 as 5, VM1 points The vpls PW label of dispensing VM2 is 1, distributes to the vpls PW mark that the public network tunnel label of VM2 distributes to PE equipment for 4, VM1 Label are 1, and it is 2 that the public network tunnel label for distributing to PE equipment, which is the vpls PW label that 4, VM2 distributes to VM1, distributes to VM1's Public network tunnel label is that the vpls PW label that 5, VM2 distributes to PE equipment is 2, and the public network tunnel label for distributing to PE equipment is 5:

Table 2

As shown in fig. 7, when message interaction (such as: the direction CE1- > CE) between VM1 and PE, in VM1, to receiving vlan The message for being 111-2 for 10, source MAC 111-1, target MAC (Media Access Control) address, looks into mac address table, finds the MAC Address with CE The corresponding MAC Address list item of 111-2, acquisition interface are G2/0/0, and public network walks MPLS, private network tags 1 in pressure, public network tunnel label 4, then according to token100, nhlfe table is looked into, acquisition target MAC (Media Access Control) address is 222-2, target MAC (Media Access Control) address 222-2, source in encapsulation MAC Address 222-1 sends the message after encapsulation from G2/0/0.

In PE equipment side, receives message discovery and be intended for this equipment, decapsulate, be the discovery that MPLS message, looked into label 4 Ilm table finds that the movement in the corresponding ilm list item of label 4 is pop, then continues to look into ilm table with private network tags 1, find the private The corresponding broadcast domain of network mark label 1 is vsi, then checks mac address forwarding table corresponding with the vsi, find the destination of CE equipment Mac address forwarding table item where the 111-2 of location determines interface corresponding with 111-2 are as follows: G2/0/0, VLAN ID are as follows: 40, then the vlan mark in message is replaced with 40, user CE is sent to by G2/0/0.

CE user receives message, and discovery is intended for the Ethernet message of the machine, send the machine to handle in reception.

Wherein, the forwarding process in the direction CE- > CE1 is also similar with above-mentioned process, and details are not described herein.

From the foregoing, it will be observed that the embodiment of the present invention provides a kind of VPLS message processing method, the first forwarding surface VM receives first and uses The message of the MAC Address of the MAC Address comprising the first user, second user that family is sent, inquiry MAC forwarding table, described in acquisition MAC forwarding-table item corresponding with the MAC Address of second user in MAC forwarding table, by message encapsulation is upper and private network tags and Message after encapsulation is encapsulated the interface of the MAC Address, the first opposite equip. of going up the first interface by public network tunnel label MAC Address forms VPLS message, the VPLS message after encapsulation is sent by the first interface.In this way, can pass through Configure VSI in each VM, make each VM can by itself VSI and other equipment (such as far-end PE equipment or other VM message forwarding) is directly carried out, the inside detour of converting flow is avoided, improves the performance of flow forwarding, meanwhile, no longer account for With management interface bandwidth between VM, the robustness of the equipment using NFV technology is improved.

According to embodiments of the present invention, the following embodiments of the present invention additionally provide a kind of server 10, are preferably used for realizing Method in above method embodiment.

Embodiment two

Fig. 8 is the structure chart of server 10 provided in an embodiment of the present invention, as shown in figure 8, the server 10 can wrap Include: at least one forwarding surface virtual machine VM301, each forwarding surface VM301 can be connected to a few user, each forwarding surface VSI on VM301 upper settable Virtual Switch Instance VSI, at least one forwarding surface VM301 belongs to same virtual special With LAN service VPLS network, any forwarding surface VM301 at least one forwarding surface VM may include:

Receiving unit 3011, for receiving the message of the first user transmission, the message includes: the matchmaker of first user Body accesses the first virtual LAN vlan mark where layer MAC address, the MAC Address of second user, first user, institute It states second user to connect with the first opposite equip., the VSI of the VSI of the forwarding surface VM and first opposite equip. belongs to described VPLS network.

Wherein, first opposite equip. can be PE equipment, alternatively, the second forwarding surface VM, the second forwarding surface VM For any forwarding surface VM at least one forwarding surface VM in addition to the forwarding surface VM.

Query unit 3012 obtains the MAC for inquiring media access control MAC forwarding table corresponding with the VSI MAC forwarding-table item corresponding with the MAC Address of the second user in forwarding table, the MAC Address with the second user Corresponding MAC forwarding-table item includes: the MAC Address of the second user, corresponding with the MAC Address of the second user described First interface on forwarding surface VM.

Encapsulation unit 3013, the message for receiving the receiving unit encapsulate upper first private network tags and the first public affairs Net tunnel label；

And the message after encapsulated tags is encapsulated into the MAC Address of the upper interface, the MAC of first opposite equip. Address forms the first VPLS message.

Wherein, first private network tags are as follows: built between the VSI of the forwarding surface VM and the VSI of first opposite equip. The private network tags of vertical pseudo-wire PW, the first public network tunnel label are as follows: the VSI of the forwarding surface VM is set with first opposite end The public network tunnel label of the pseudo-wire PW established between standby VSI.

Transmission unit 3014 is sent out for the first VPLS message after encapsulating encapsulation unit 3013 by the first interface It sees off.

Optionally, as shown in figure 8, the forwarding surface VM301 can also include:

Session establishment unit 3015, it is and described for before the message that receiving unit 3011 receives that the first user sends First opposite equip. establishes label distribution protocol conversation ldp session, is established and the first opposite equip. by ldp session Between the tunnel lsp, obtain forwarding surface 301 VSI and the first opposite equip. VSI between the first public network tunnel label, then, then The PW of VPLS is established by the tunnel lsp, obtains the first private network mark between the VSI and the first opposite equip. VSI of forwarding surface 301 Label.

When first opposite equip. is the second forwarding surface VM, the session establishment unit 3015 specifically can be used for:

It is separately operable tag distribution protocol LDP process on the first forwarding surface VM and the second forwarding surface VM, passes through IGP Winding network protocol IP address, inline mouth IP address and the external connection mouth IP address for routing the other side that learns from each other, by described first The inline mouth IP address of forwarding surface VM and the inline mouth IP address of the second forwarding surface VM are built as the transmission address transport Found the ldp session；

Alternatively, the server 10 can also include: master control VM302, the master control VM302 is used for: in the master control LDP process is run on VM302, by the loopback ip address of forwarding surface VM each in server 10 described in IGP route learning, inline Mouthful IP address and external connection mouth IP address, by the inline mouth IP address of the first forwarding surface VM and the second forwarding surface VM Inline mouth IP address establishes the ldp session as the transmission address transport.

Further alternative, as the inverse process for sending message, the receiving unit 3011 be can be also used for:

The 2nd VPLS message that third user sends is received, the third user connect with the second opposite equip., and described the The VSI of the VSI of two opposite equip.s and the forwarding surface VM belong to the VPLS network, and the 2nd VPLS message includes: purpose The MAC Address of interface, the MAC Address of second opposite equip., the second public network tunnel label, the second private network tags, purpose are used The MAC Address at family, the MAC Address of the third user, virtual LAN where the third user the 2nd vlan mark with And load, second private network tags are as follows: the PW established between the VSI of the forwarding surface VM and the VSI of second opposite equip. Private network tags, the second public network tunnel label are as follows: between the VSI of the forwarding surface VM and the VSI of second opposite equip. The public network tunnel label of the PW of foundation；

The query unit 3012, be also used to inquire mac address table, if the MAC of purpose interface in the mac address table Location is identical as the MAC Address of interface of the first forwarding surface VM, it is determined that the 2nd VPLS message is to be sent to itself VPLS message；

As shown in figure 8, the forwarding surface VM301 can also include:

Decapsulation unit 3016, for decapsulating the 2nd VPLS message；

The query unit 3012, if being also used to the decapsulation unit 3016 finds that the 2nd VPLS message is MPLS Message is then inquired into label mapping ilm table, and the first ilm list item corresponding with the second public network tunnel label is found；

The decapsulation unit 3016, if being also used to dynamic in the first ilm list item that the query unit 3012 inquires As next-hop pop, then the second public network tunnel label and the second private network mark in the 2nd VPLS message are successively popped up Label；

The query unit 3012 is also used to inquire and second private network tags corresponding second in the ilm table Ilm list item obtains the VSI of the forwarding surface VM corresponding with second private network tags in the 2nd ilm list item；

MAC forwarding table corresponding with the VSI is inquired, MAC forwarding corresponding with the MAC Address of the purpose user is obtained List item, the MAC forwarding-table item corresponding with the MAC Address of the purpose user includes: the MAC Address of the purpose user, It is virtual where second interface, the purpose user on the forwarding surface VM corresponding with the MAC Address of the purpose user 3rd vlan of local area network is identified；

The transmission unit 3014, second in the 2nd VPLS message after being also used to pop up second private network tags Vlan mark replaces with the 3rd vlan mark, and replaced message is sent to the purpose by the second interface and is used Family.

From the foregoing, it will be observed that the embodiment of the present invention provides a kind of server, which may include at least one forwarding surface VM, And a VSI is provided on each forwarding surface VM, any forwarding surface VM at least one forwarding surface VM receives the first user After the message of the MAC Address of the MAC Address comprising the first user, second user that send, inquiry MAC forwarding table, described in acquisition The message is encapsulated upper first private network tags by MAC forwarding-table item corresponding with the MAC Address of second user in MAC forwarding table With the first public network tunnel label, the message after encapsulation is encapsulated to connecing for the MAC Address, first opposite equip. for going up first interface The MAC Address of mouth forms VPLS message, the VPLS message after encapsulation is sent by first interface.In this way, can pass through Configure VSI in each VM, make each VM can by itself VSI and other equipment (such as remote server or other VM message forwarding) is directly carried out, the inside detour of converting flow is avoided, improves the performance of flow forwarding, meanwhile, no longer account for With management interface bandwidth between VM, the robustness of the equipment using NFV technology is improved.

It is apparent to those skilled in the art that for convenience and simplicity of description, the unit of foregoing description It with the specific work process of system, can refer to corresponding processes in the foregoing method embodiment, details are not described herein.

In several embodiments provided herein, it should be understood that disclosed system, device and method can be with It realizes by another way.For example, apparatus embodiments described above are merely indicative, for example, the unit It divides, only a kind of logical function partition, there may be another division manner in actual implementation, such as multiple units or components It can be combined or can be integrated into another system, or some features can be ignored or not executed.

The unit as illustrated by the separation member may or may not be physically separated, aobvious as unit The component shown may or may not be physical unit, it can and it is in one place, or may be distributed over multiple In network unit.It can select some or all of unit therein according to the actual needs to realize the mesh of this embodiment scheme 's.

It, can also be in addition, the functional units in various embodiments of the present invention may be integrated into one processing unit It is the independent physics of each unit, can also be integrated in one unit with two or more units.Above-mentioned integrated unit was both It can take the form of hardware realization, can also be realized in the form of hardware adds SFU software functional unit.

The above-mentioned integrated unit being realized in the form of SFU software functional unit can store and computer-readable deposit at one In storage media.Above-mentioned SFU software functional unit is stored in a storage medium, including some instructions are used so that a computer Equipment (can be personal computer, server or the network equipment etc.) executes the portion of each embodiment the method for the present invention Step by step.And storage medium above-mentioned includes: USB flash disk, mobile hard disk, read-only memory (Read-Only Memory, abbreviation ROM), random access memory (Random Access Memory, abbreviation RAM), magnetic or disk etc. are various can store The medium of program code.

Those of ordinary skill in the art will appreciate that all or part of the steps in the various methods of above-described embodiment is can It is completed with instructing relevant hardware (such as processor) by program, which can store in a computer-readable storage In medium, storage medium may include: read-only memory, random access memory, disk or CD etc..

Finally, it should be noted that the above embodiments are merely illustrative of the technical solutions of the present invention, rather than its limitations；Although Present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that: it still may be used To modify the technical solutions described in the foregoing embodiments or equivalent replacement of some of the technical features； And these are modified or replaceed, technical solution of various embodiments of the present invention that it does not separate the essence of the corresponding technical solution spirit and Range.

Claims

1. a kind of Virtual Private LAN Service VPLS message processing method is applied to a server, which is characterized in that the clothes Business device includes: at least one forwarding surface virtual machine VM, and each forwarding surface VM connects at least one user, sets on each forwarding surface VM It sets the VSI on Virtual Switch Instance a VSI, at least one forwarding surface VM and belongs to same VPLS network, at the message Reason method includes:

First forwarding surface VM receives the message that the first user sends, and the first forwarding surface VM is any turn in the server Leaven dough VM, and first user connect with the first forwarding surface VM, and the message includes: the media access of first user The first virtual LAN vlan mark where layer MAC address, the MAC Address of second user, first user, described second User connect with the first opposite equip., and the VSI of the first forwarding surface VM and VSI of first opposite equip. belongs to described VPLS network；

The first forwarding surface VM inquires media access control MAC forwarding table corresponding with the VSI of the first forwarding surface VM, obtains Take MAC forwarding-table item corresponding with the MAC Address of the second user in the MAC forwarding table, the described and second user The corresponding MAC forwarding-table item of MAC Address include: the MAC Address of the second user, with the MAC Address of the second user First interface on the corresponding first forwarding surface VM；

The message is encapsulated upper first private network tags and the first public network tunnel label by the first forwarding surface VM, and described first is private Network mark label are as follows: the private network mark of the pseudo-wire PW established between the VSI of the first forwarding surface VM and the VSI of first opposite equip. Label, the first public network tunnel label are as follows: established between the VSI of the first forwarding surface VM and the VSI of first opposite equip. Pseudo-wire PW public network tunnel label；

Message after encapsulated tags is encapsulated the MAC Address of upper first interface by the first forwarding surface VM, first opposite end is set The MAC Address of standby interface forms the first VPLS message, the first VPLS message is sent out by the first interface It goes.

2. the method according to claim 1, wherein first opposite equip. is PE equipment, alternatively, the clothes The second forwarding surface VM, the second forwarding surface VM being engaged in device is appointing in addition to the first forwarding surface VM in the server Any forwarding surface VM in one forwarding surface VM or other servers.

3. method according to claim 1 or 2, which is characterized in that receive what the first user sent in the first forwarding surface VM Before message, the method also includes:

Label distribution protocol conversation ldp session is established between the first forwarding surface VM and first opposite equip.；

By the ldp session, obtains and built between the VSI of the first forwarding surface VM and the VSI of first opposite equip. The private network tags and public network tunnel label of vertical PW.

4. according to the method described in claim 3, it is characterized in that, when first opposite equip. be the second forwarding surface VM when, Establishing label distribution protocol conversation ldp session between the first forwarding surface VM and the second forwarding surface VM includes:

It is separately operable tag distribution protocol LDP process on the first forwarding surface VM and the second forwarding surface VM, passes through intranet Close winding network protocol IP address, inline mouth IP address and external connection mouth IP address that agreement routes the other side that learns from each other；

Using the inline mouth IP address of the first forwarding surface VM and the inline mouth IP address of the second forwarding surface VM as transmission Transport establishes address the ldp session.

5. according to the method described in claim 3, it is characterized in that, the server further include: master control VM, when described first pair When end equipment is the second forwarding surface VM, tag distribution protocol meeting is established between the first forwarding surface VM and the second forwarding surface VM Talking about ldp session includes:

LDP process is run on the master control VM, and each forwarding surface VM in the server is routed by Interior Gateway Protocol IGP Loopback ip address, inline mouth IP address and external connection mouth IP address；

The master control VM is by the inline mouth IP of the inline mouth IP address of the first forwarding surface VM and the second forwarding surface VM The ldp session is established as the transmission address transport in location.

6. method described in any one of according to claim 1-2,4-5, which is characterized in that the method also includes:

The first forwarding surface VM receives the 2nd VPLS message that third user sends, the third user and the second opposite equip. Connection, the VSI of the VSI of second opposite equip. and the first forwarding surface VM belong to the VPLS network, and described second VPLS message includes: the MAC Address of purpose interface, the MAC Address of second opposite equip., the second public network tunnel label, Virtual LAN where two private network tags, the MAC Address of purpose user, the MAC Address of the third user, the third user The 2nd vlan mark and load, second private network tags are as follows: the VSI of the first forwarding surface VM and second opposite end The private network tags of the PW established between the VSI of equipment, the second public network tunnel label are as follows: the VSI of the first forwarding surface VM with The public network tunnel label of the PW established between the VSI of second opposite equip.；

The first forwarding surface VM inquires mac address table, if the MAC Address of purpose interface and described the in the mac address table The MAC Address of the interface of one forwarding surface VM is identical, it is determined that the 2nd VPLS message is the VPLS message for being sent to itself；

The first forwarding surface VM decapsulates the 2nd VPLS message, if discovery the 2nd VPLS message is MPLS message, It then inquires into label mapping ilm table, finds the first ilm list item corresponding with the second public network tunnel label, if described first Movement in ilm list item is next-hop pop, then successively pop up the second public network tunnel label in the 2nd VPLS message, with And second private network tags, the 2nd ilm list item corresponding with second private network tags is inquired in the ilm table, is obtained The VSI of the first forwarding surface VM corresponding with second private network tags in the 2nd ilm list item；

MAC forwarding table corresponding with the VSI is inquired, MAC forwarding table corresponding with the MAC Address of the purpose user is obtained , the MAC forwarding-table item corresponding with the MAC Address of the purpose user includes: the MAC Address of the purpose user, and Second interface on the corresponding first forwarding surface VM of the MAC Address of the purpose user, the void where the purpose user The 3rd vlan mark of quasi- local area network；

The 2nd vlan mark popped up in the 2nd VPLS message after second private network tags is replaced with into the 3rd vlan Mark, is sent to the purpose user by the second interface for replaced message.

7. a kind of server, which is characterized in that the server includes: at least one forwarding surface virtual machine VM, each forwarding surface VM connects at least one user, and Virtual Switch Instance a VSI, at least one forwarding surface VM is arranged on each forwarding surface VM On VSI belong to same Virtual Private LAN Service VPLS network, the first forwarding surface VM is at least one forwarding surface VM In any forwarding surface VM, the first forwarding surface VM includes:

Receiving unit, for receiving the message of the first user transmission, first user connect with the first forwarding surface VM, institute Stating message includes: where the Medium Access Layer MAC Address of first user, the MAC Address of second user, first user The first virtual LAN vlan mark, the second user connect with the first opposite equip., the VSI of the first forwarding surface VM Belong to the VPLS network with the VSI of first opposite equip.；

Query unit obtains in the MAC forwarding table for inquiring media access control MAC forwarding table corresponding with the VSI MAC forwarding-table item corresponding with the MAC Address of the second user, the MAC corresponding with the MAC Address of the second user Forwarding-table item includes: the MAC Address of the second user, first forwarding corresponding with the MAC Address of the second user First interface on the VM of face；

Encapsulation unit, the message for receiving the receiving unit encapsulate upper first private network tags and the first public network tunnel mark Label, first private network tags are as follows: the puppet established between the VSI of the first forwarding surface VM and the VSI of first opposite equip. The private network tags of line PW, the first public network tunnel label are as follows: the VSI and first opposite equip. of the first forwarding surface VM VSI between the public network tunnel label of pseudo-wire PW established；

And the message after encapsulated tags is encapsulated to the interface of the MAC Address, first opposite equip. of going up first interface MAC Address forms the first VPLS message；

8. server according to claim 7, which is characterized in that first opposite equip. is PE equipment, alternatively, second Forwarding surface VM, the second forwarding surface VM are any at least one forwarding surface VM in addition to the first forwarding surface VM Any forwarding surface VM on forwarding surface VM or other servers.

9. server according to claim 7 or 8, which is characterized in that the first forwarding surface VM further include:

Session establishment unit, for receiving unit receive the first user send message before, with first opposite equip. Label distribution protocol conversation ldp session is established, the ldp session is used to obtain the VSI of the first forwarding surface VM The private network tags and public network tunnel label of the PW established between the VSI of first opposite equip..

10. server according to claim 9, which is characterized in that when first opposite equip. is the second forwarding surface VM When, the session establishment unit is specifically used for:

It is separately operable tag distribution protocol LDP process on the first forwarding surface VM and the second forwarding surface VM, by interior Portion's gateway protocol routes winding network protocol IP address, inline mouth IP address and the external connection mouth IP address for the other side that learns from each other；

11. server according to claim 9, which is characterized in that the server further include: master control VM, when described When a pair of of end equipment is the second forwarding surface VM, the master control VM is used for:

12. according to claim 7-8, server described in any one of 10-11, which is characterized in that

The receiving unit is also used to receive the 2nd VPLS message of third user transmission, the third user and the second opposite end Equipment connection, the VSI of the VSI of second opposite equip. and the first forwarding surface VM belong to the VPLS network, and described the Two VPLS messages include: the MAC Address of purpose interface, the MAC Address of second opposite equip., the second public network tunnel label, Virtual local area where second private network tags, the MAC Address of purpose user, the MAC Address of the third user, the third user The 2nd vlan mark of net and load, second private network tags are as follows: the VSI of the first forwarding surface VM and described second pair The private network tags of the PW established between the VSI of end equipment, the second public network tunnel label are as follows: the VSI of the first forwarding surface VM The public network tunnel label of the PW established between the VSI of second opposite equip.；

The query unit is also used to inquire mac address table, if in the mac address table MAC Address of purpose interface with it is described The MAC Address of the interface of first forwarding surface VM is identical, it is determined that the 2nd VPLS message is the VPLS message for being sent to itself；

The first forwarding surface VM further include:

Decapsulation unit, for decapsulating the 2nd VPLS message；

The query unit is inquired if being also used to the decapsulation unit finds that the 2nd VPLS message is MPLS message Enter label mapping ilm table, finds the first ilm list item corresponding with the second public network tunnel label；

The decapsulation unit, if the movement being also used in the first ilm list item that the query unit inquires is next-hop Pop then successively pops up the second public network tunnel label in the 2nd VPLS message and second private network tags；

The query unit is also used to inquire the 2nd ilm list item corresponding with second private network tags in the ilm table, Obtain the VSI of the first forwarding surface VM corresponding with second private network tags in the 2nd ilm list item；

The transmission unit, the 2nd vlan mark in the 2nd VPLS message after being also used to pop up second private network tags The 3rd vlan mark is replaced with, replaced message is sent to the purpose user by the second interface.