CN106533942A

CN106533942A - Data processing method and device based on SDN

Info

Publication number: CN106533942A
Application number: CN201611083513.9A
Authority: CN
Inventors: 黄小红; 赵钦; 陈蔚瀚; 张沛; 颜磊; 胡鼎原
Original assignee: Beijing University of Posts and Telecommunications
Current assignee: Beijing University of Posts and Telecommunications
Priority date: 2016-11-30
Filing date: 2016-11-30
Publication date: 2017-03-22
Anticipated expiration: 2036-11-30
Also published as: CN106533942B

Abstract

The embodiment of the invention provides a data processing method and device based on SDN, applied to a SDN network equipment which is provided with at least one virtual network card, wherein each virtual network card is pre-bound to a network function, and can be used for receiving a first data message. The data processing method based on SDN comprises the following steps: receiving the first data message; modifying the destination address of the first data message according to the first flow table matched with the first data message; sending the first data message to the virtual network card if the modified destination address of the first data message is consistent with the address of the virtual network card, calling the network function that is bound to the virtual network card, performing corresponding network function processing on the first data message, and obtaining a second data message; and modifying the destination address of the second data message according to the second flow table matched with the second data message, and forwarding the second data message according to the modified destination address. According to the data processing method and device based on SDN provided by the embodiment of the invention, a new added network function can be added and called without the need for performing any additional setting on the OvS software itself.

Description

A kind of data processing method and device based on SDN

Technical field

The present invention relates to data message network function realizes technical field, at more particularly to a kind of data based on SDN Reason method and device.

Background technology

In legacy network environment, the function achieved by the network equipment such as switch is set up before dispatching from the factory by production firm Into user cannot increase self-defining network function for these network equipments, and this causes the specific network equipment realize spy Fixed network function.To add new network function to the network equipment, it is necessary to produced new edition hardware and pacified by production firm Dress could be realized.

In self-defined (the Software Defined of software based on Open vSwitch softwares (abbreviation OvS softwares) Network, SDN) in network environment, the function achieved by the network equipment such as switch is also arranged before dispatching from the factory by production firm Complete, if it is desired to add new network function, in addition to the new corresponding functional module of network function is set, in addition it is also necessary to right OvS softwares carry out some self-defined settings, for example, add new interface, define new parameter, introduce new invoked procedure etc., with OvS softwares are enable to call newly-increased network function.

Although self-defined setting OvS softwares need not change hardware, these it is self-defined must be by the special of production firm Industry personnel are carried out, it is impossible to voluntarily completed by user, be this not only adds the cost of addition network function, and are extended addition net The time of network function.When carrying out data message process using these network equipments, it is impossible to quickly and conveniently call corresponding network The data message that function treatment subscriber's main station sends, it is impossible to meet the demand of user.

The content of the invention

The purpose of the embodiment of the present invention is to provide a kind of data processing method and device based on SDN, not right to realize OvS softwares carry out any extra setting in itself, can just add and call newly-increased network function.

To achieve these goals, a kind of data processing method based on SDN is embodiments provided, is applied to SDN equipment, is provided with least one Microsoft Loopback Adapter in the SDN equipment, each Microsoft Loopback Adapter in advance with a kind of net Network function binding, methods described include：

Receive the first data message；

According to the first flow table matched with first data message, the destination address of first data message is changed； First flow table is issued by the SDN controllers being connected with the SDN equipment, wherein including：With first datagram The address of corresponding first Microsoft Loopback Adapter of text, or the address of the first physical network card corresponding with first data message；Wherein, The address of first Microsoft Loopback Adapter is by the SDN controllers, according to the ground of the network function and Microsoft Loopback Adapter for prestoring What the corresponding relation between location determined；

If the amended destination address of first data message is the address of first Microsoft Loopback Adapter, by described first Data message is sent to first Microsoft Loopback Adapter, calls the first network function with first Microsoft Loopback Adapter binding, to institute Stating the first data message carries out the first network function treatment, obtains the second data message；

According to the second flow table matched with second data message, the destination address of second data message is changed, Forwarded according to amended destination address；

If the amended destination address of first data message is the address of first physical network card, by described One data message forwarding is to first physical network card.

Alternatively, the first flow table for matching with first data message in the basis, changes first datagram Before the step of destination address of text, methods described also includes：

Judge with the presence or absence of the first flow table matched with first data message in the SDN equipment, obtain the One judged result；

If first judged result is yes, then to perform the basis first-class with what first data message was matched The step of table, destination address of modification first data message；

If first judged result is no, first data message is sent to and is connected with the SDN equipment SDN controllers, and receive the first flow table matched with first data message that the SDN controllers are issued, then hold The first flow table that the row basis is matched with first data message, changes the step of the destination address of first data message Suddenly.

Alternatively, the second flow table for matching with second data message in the basis, changes second datagram Before the step of destination address of text, methods described also includes：

Judge with the presence or absence of the second flow table matched with second data message in the SDN equipment, obtain the Two judged results；

If second judged result is yes, then performs the second that the basis is matched with second data message The step of table, destination address of modification second data message；

If second judged result is no, second data message is sent to and is connected with the SDN equipment SDN controllers, and receive the second flow table matched with second data message that the SDN controllers are issued, then hold The second flow table that the row basis is matched with second data message, changes the step of the destination address of second data message Suddenly.

Alternatively, the second flow table that the basis is matched with second data message, changes second data The destination address of message, includes the step of forwarded according to amended destination address：

According to the second flow table matched with second data message, the destination address of second data message is changed；

If the amended destination address of second data message is the address of the second Microsoft Loopback Adapter, by second data Message is sent to second Microsoft Loopback Adapter；

If the amended destination address of second data message is the address of the second physical network card, by second data Message is sent to second physical network card.

Alternatively, each Microsoft Loopback Adapter and a kind of network function to being arranged in the SDN equipment is carried out in advance The process of binding includes：

A Microsoft Loopback Adapter is monitored using a kind of network function correspondence；

Or, set up the routing table comprising the corresponding relation between network function and the address of Microsoft Loopback Adapter or network drives It is dynamic.

Alternatively, the first network function includes：Network address translation, data message are encapsulated, data message is decapsulated, Data message encryption, data message decryption, data message compression, data message decompression, network layer protocol conversion, transport layer end Mouth conversion and application layer protocol are changed.

Alternatively, the SDN equipment is Open vSwitch software hosts.

To achieve these goals, the embodiment of the present invention additionally provides a kind of data processing equipment based on SDN, is applied to SDN equipment, is provided with least one Microsoft Loopback Adapter in the network equipment, each Microsoft Loopback Adapter in advance with a kind of network work( Can bind, described device includes：

Data message receiver module, for receiving the first data message；

First address modified module, for the first flow table that basis is matched with first data message, changes described the The destination address of one data message；First flow table is issued by the SDN controllers being connected with the SDN equipment, wherein Comprising：The address of the first Microsoft Loopback Adapter corresponding with first data message, or corresponding with first data message The address of one physical network card；Wherein, the address of first Microsoft Loopback Adapter is by the SDN controllers, according to what is prestored What the corresponding relation between network function and the address of Microsoft Loopback Adapter determined；

First processing module, for the amended destination address of first data message be first Microsoft Loopback Adapter Address in the case of, first data message is sent to first Microsoft Loopback Adapter, is called and first virtual net The first network function of card binding, carries out the first network function treatment to first data message, obtains the second data Message；

Second processing module, for the second flow table that basis is matched with second data message, changes second number According to the destination address of message, forwarded according to amended destination address；

First forwarding module, for the amended destination address of first data message be first physical network card Address in the case of, then by first data message forwarding to first physical network card.

Alternatively, described device also includes：

First judge module, for judging in the SDN equipment with the presence or absence of matching with first data message The first flow table, obtain the first judged result；

First trigger module, for changing in the case of being, to trigger first address in first judged result Module；

Second trigger module, in the case of being no in first judged result, first data message is sent out Give the SDN controllers being connected with the SDN equipment, and it is issuing with first data to receive the SDN controllers First flow table of message matching, then triggers first address modified module.

Alternatively, described device also includes：

Second judge module, for judging in the SDN equipment with the presence or absence of matching with second data message The second flow table, obtain the second judged result；

3rd trigger module, in the case of being to be in second judged result, triggers the Second processing module；

4th trigger module, in the case of being no in second judged result, second data message is sent out Give the SDN controllers being connected with the SDN equipment, and it is issuing with second data to receive the SDN controllers Second flow table of message matching, then triggers the Second processing module.

Method and device provided in an embodiment of the present invention, when first network function treatment will be carried out to the first data message When, the destination address of the first data message can be revised as by the first Microsoft Loopback Adapter according to the first flow table that SDN controllers are issued Address, OvS softwares are only needed to the data message be sent to the first Microsoft Loopback Adapter, are called by the first Microsoft Loopback Adapter and tied up therewith Fixed first network function, can be achieved with carrying out the first data message first network function treatment, the work(performed by OvS softwares Can be still the forwarding that data message is carried out according to the flow table that controller is issued, the OvS softwares functions of itself does not change.Cause This, method and device provided in an embodiment of the present invention, it is not necessary to any extra setting is carried out in itself to OvS softwares, can just be added Adduction calls newly-increased network function, simplifies addition and the invoked procedure of newly-increased network function, and then reduces addition network The cost of function, shortens the time of addition network function.

As every kind of network function all has corresponding specific Microsoft Loopback Adapter, therefore, at the method and device During reason data message, for the different types of data message for receiving simultaneously, different network functions can be selected simultaneously to carry out Process；For the same data message for needing heterogeneous networks function treatment, can switch at any time at different network functions Reason, this improves the treatment effeciency of data message, more meets the demand of user.Certainly, implement the present invention arbitrary product or Method must be not necessarily required to while reaching all the above advantage.

Description of the drawings

In order to be illustrated more clearly that the embodiment of the present invention or technical scheme of the prior art, below will be to embodiment or existing Accompanying drawing to be used needed for having technology description is briefly described, it should be apparent that, drawings in the following description are only this Some embodiments of invention, for those of ordinary skill in the art, on the premise of not paying creative work, can be with Other accompanying drawings are obtained according to these accompanying drawings.

Fig. 1 is SDN configuration diagram；

Fig. 2 is a kind of flow chart of the data processing method based on SDN provided in an embodiment of the present invention；

Fig. 3 is another kind of flow chart of the data processing method based on SDN provided in an embodiment of the present invention；

Fig. 4 is another kind of flow chart of the data processing method based on SDN provided in an embodiment of the present invention；

Fig. 5 is a kind of practical application scene schematic diagram of data processing method based on SDN provided in an embodiment of the present invention；

Fig. 6 is a kind of structured flowchart of the data processing equipment based on SDN provided in an embodiment of the present invention；

Fig. 7 is another kind of structured flowchart of the data processing equipment based on SDN provided in an embodiment of the present invention；

Fig. 8 is another kind of structured flowchart of the data processing equipment based on SDN provided in an embodiment of the present invention.

Specific embodiment

Below in conjunction with the accompanying drawing in the embodiment of the present invention, the technical scheme in the embodiment of the present invention is carried out clear, complete Site preparation is described, it is clear that described embodiment is only a part of embodiment of the invention, rather than the embodiment of whole.It is based on Embodiment in the present invention, it is every other that those of ordinary skill in the art are obtained under the premise of creative work is not made Embodiment, belongs to the scope of protection of the invention.

In order to solve the problems, such as prior art, a kind of data processing side based on SDN is embodiments provided Method and device, are applied to SDN equipment, at least one Microsoft Loopback Adapter, each virtual net are provided with the SDN equipment Card is bound with a kind of network function in advance.

Firstly the need of explanation, a kind of data processing method and device based on SDN provided in an embodiment of the present invention is main It is applied in the SDN for support OpenFlow agreements, in the network by SDN controllers setting to other SDNs Standby (such as SDN switch) is controlled, and as Open vSwitch softwares are provided with the SDN equipment, (abbreviation OvS is soft Part), therefore, the SDN equipment is also referred to as Open vSwitch software hosts, abbreviation OvS hosts.Specifically, institute It can be the SDN switch for being provided with OvS softwares to state SDN equipment.

OvS softwares be mainly used in perform data message match with flow table and data message forwarding.The operation of OvS hosts Operating system is any operating system that can support OvS softwares.In embodiments of the present invention, all newly-increased network functions It is the application software developed in the operating system in OvS hosts are operated in.

Fig. 1 is refer to, Fig. 1 shows the network architecture schematic diagram of SDN.As shown in figure 1, SDN includes control Device processed, OvS hosts and at least one subscriber's main station, wherein, subscriber's main station is connected with OvS hosts, OvS hosts again with control Device processed is connected, while SDN is also connected to other networks by OvS hosts.

Further, due to a kind of data processing method and device based on SDN provided in an embodiment of the present invention, mainly applying In the SDN equipment for supporting OpenFlow agreements, therefore, it is necessary to be based on to implementing one kind provided in an embodiment of the present invention The process that is pre-configured with of the SDN equipment of the data processing method and device of SDN is illustrated, specific as follows：

1) determine that user increases the network function into SDN equipment newly, be each newly-increased network function addition one Individual Microsoft Loopback Adapter, and be each Microsoft Loopback Adapter Configuration network address (MAC and IP address)；

Wherein, the network function that user is increased newly into SDN equipment is arranged on the function in SDN equipment for user Module, specifically, can be user installation in some that the application software in SDN equipment, or user are arranged Core module.

Microsoft Loopback Adapter is created by the operating system of SDN equipment, can set up network connection in LA Management Room Software-driven, it does not have physical assemblies, but can possess the network address (MAC and IP address) of oneself as physical network card. For the operating system of SDN equipment, Microsoft Loopback Adapter is same with the function phase of physical network card, while Microsoft Loopback Adapter also has Flexible configuration, the advantage not limited by physical equipment.

2) start and increase the network function into SDN equipment newly, each void in the SDN equipment will be arranged on Intend network interface card to be bound with a kind of network function, set up the one-to-one relationship of Microsoft Loopback Adapter and newly-increased network function.

Specifically binding procedure is：A Microsoft Loopback Adapter is monitored using a kind of network function correspondence；Or, set up comprising network The routing table or network-driven of the corresponding relation between function and the address of Microsoft Loopback Adapter.

3) mapping relations of the virtual port set up in the OvS softwares installed in each Microsoft Loopback Adapter and SDN equipment.

4) in operating system (Operating System, the OS) protocol stack of SDN equipment, addition includes network work( The routing table of the corresponding relation between energy and the address of Microsoft Loopback Adapter, makes the data message after corresponding network function treatment, By the routing forwarding in OS protocol stacks, the corresponding Microsoft Loopback Adapter of the network function can be returned, and then is back to OvS softwares In.

5) start the configured Microsoft Loopback Adapter for completing on SDN equipment, and match somebody with somebody for the physical network card in SDN equipment The network address (MAC and IP address) is put, the mapping relations of each physical network card and the virtual port in OvS softwares are then set up.

6) private network that a physical network card is communicated with SDN controllers as SDN equipment in specified SDN equipment Card so that SDN equipment is attached with SDN controllers.

Further, since in SDN, all flow tables in SDN equipment are issued by SDN controllers, SDN Equipment does not have the ability for generating flow table in itself.Therefore, when increased newly in SDN equipment network function and network function with The corresponding relation of the address of Microsoft Loopback Adapter, and when needing the data message to receiving to carry out corresponding network function process, Need the control logic of SDN controllers is also carried out to update so that SDN controllers can be issued to SDN equipment can be right Data message carries out the new flow table of corresponding network function treatment.

That is, before the data processing method and device based on SDN provided in an embodiment of the present invention is implemented, in addition it is also necessary to The control logic of the SDN controllers to being connected with SDN equipment is updated.Concrete update mode can have following two：

Mode one：By SDN controller managements personnel by comprising network function and the corresponding relation of the address of Microsoft Loopback Adapter Control logic is added into SDN controllers.

Mode two：The control comprising network function with the corresponding relation of the address of Microsoft Loopback Adapter is patrolled by SDN equipment Collect and report in SDN controllers, so that SDN controllers are updated.

Below a kind of data processing method based on SDN provided in an embodiment of the present invention is illustrated.

As shown in Fig. 2 a kind of data processing method based on SDN provided in an embodiment of the present invention, is applied to SDN and sets It is standby, at least one Microsoft Loopback Adapter is provided with the SDN equipment, each Microsoft Loopback Adapter is tied up with a kind of network function in advance Fixed, methods described includes step S201 to S205.

S201, the first data message of reception；

Wherein, the first data message can be the data message that any user main frame being connected with SDN equipment is sent.

The first flow table that S202, basis are matched with first data message, changes the purpose of first data message Address；

Wherein, the first flow table is issued by the SDN controllers being connected with the SDN equipment, is included in the first flow table：With The address of corresponding first Microsoft Loopback Adapter of first data message, or the first Physical Network corresponding with first data message The address of card；

According to previously described content, wherein, the address of the first Microsoft Loopback Adapter is by SDN controllers, according to advance What the corresponding relation between the address of the network function and Microsoft Loopback Adapter of storage determined.

If S203, the address that the amended destination address of first data message is first Microsoft Loopback Adapter, by institute State the first data message to send to first Microsoft Loopback Adapter, call the first network work(with first Microsoft Loopback Adapter binding Can, the first network function treatment is carried out to first data message, the second data message is obtained；

As each Microsoft Loopback Adapter and a kind of network function in advance to being arranged in SDN equipment is bound, Therefore, when the amended destination address of the first data message is the address of the first Microsoft Loopback Adapter, can directly invoke and first The corresponding first network function of Microsoft Loopback Adapter is processed to the first data message, obtains the second data message.

Wherein, first network function includes：Network address translation, data message encapsulation, data message decapsulation, datagram Text encryption, data message decryption, data message compression, data message decompression, network layer protocol conversion, transport layer port conversion With application layer protocol modification etc..

It is understood that first network function is not limited to above cited network function, in prior art Other network functions for existing are applied to the present invention.

In actual applications, after obtaining the second data message, first network function can be according to the routing table in OS protocol stacks Second data message is still forwarded to into the first Microsoft Loopback Adapter, and then according to corresponding with the first Microsoft Loopback Adapter virtual in OvS softwares Port is back in OvS softwares, and the forwarding of next step is carried out to the second data message by OvS softwares.

The second flow table that S204, basis are matched with second data message, changes the purpose of second data message Address, is forwarded according to amended destination address；

If S205, the address that the amended destination address of first data message is first physical network card, will First data message forwarding is to first physical network card.

A kind of data processing method based on SDN provided in an embodiment of the present invention, when will be carried out to the first data message During the process of one network function, the destination address of the first data message can be changed according to the first flow table that SDN controllers are issued For the address of the first Microsoft Loopback Adapter, OvS softwares only need to the data message be sent to the first Microsoft Loopback Adapter, virtual by first Network interface card calls the first network function of binding therewith, can be achieved with carrying out first network function treatment, OvS to the first data message Function performed by software is still that the forwarding of data message is carried out according to the flow table that controller is issued, the OvS softwares functions of itself Do not change.Therefore, method provided in an embodiment of the present invention, it is not necessary to carry out any extra setting to OvS softwares in itself Put, can just add and call newly-increased network function, simplify addition and the invoked procedure of newly-increased network function, and then reduce The cost of addition network function, shortens the time of addition network function.

Further, since every kind of network function all has corresponding specific Microsoft Loopback Adapter, therefore, using the method process During data message, for the different types of data message for receiving simultaneously, can select simultaneously at different network functions Reason；For the same data message for needing heterogeneous networks function treatment, different network functions can be switched at any time and processed, This improves the treatment effeciency of data message, more meets the demand of user.

As shown in figure 3, embodiments providing a kind of data processing method based on SDN, it is applied to SDN and sets It is standby, at least one Microsoft Loopback Adapter is provided with the SDN equipment, each Microsoft Loopback Adapter is tied up with a kind of network function in advance It is fixed, the method comprising the steps of S301 to S307.

S301, the first data message of reception；

S302, judge in the SDN equipment with the presence or absence of the first flow table matched with first data message, obtain Obtain the first judged result；If first judged result is yes, execution step S303；If first judged result is no, After execution of step S304, then execution step S303；

It is understood that during first message in the first data message is message flow, not depositing in SDN equipment In the flow table matched with the message, therefore, alternatively, in the first flow table that basis is matched with first data message, modification Before the destination address of first data message, it is necessary to judge in the SDN equipment with the presence or absence of with the described first number According to the first flow table that message is matched.

The first flow table that S303, basis are matched with first data message, changes the purpose of first data message Address；

Wherein, first flow table is issued by the SDN controllers being connected with the SDN equipment, wherein including：With institute State the address of corresponding first Microsoft Loopback Adapter of the first data message, or the first physical network card corresponding with first data message Address；Wherein, the address of first Microsoft Loopback Adapter be by the SDN controllers, according to the network function that prestores with What the corresponding relation between the address of Microsoft Loopback Adapter determined.

S304, first data message is sent to the SDN controllers being connected with the SDN equipment, and is received The first flow table matched with first data message that the SDN controllers are issued；

If S305, the address that the amended destination address of first data message is first Microsoft Loopback Adapter, by institute State the first data message to send to first Microsoft Loopback Adapter, call the first network work(with first Microsoft Loopback Adapter binding Can, the first network function treatment is carried out to first data message, the second data message is obtained；

The second flow table that S306, basis are matched with second data message, changes the purpose of second data message Address, is forwarded according to amended destination address；

If S307, the address that the amended destination address of first data message is first physical network card, will First data message forwarding is to first physical network card.

It should be noted that step S301, S303, S305～S307 in the present embodiment, can be with the enforcement shown in Fig. 2 Step S201 in example～S205 correspondences are identical.

It is not difficult to find out, a kind of data processing method based on SDN that the embodiment shown in Fig. 3 of the present invention is provided, when right When first data message carries out first network function treatment, the first flow table that can be issued according to SDN controllers is by the first data The destination address of message is revised as the address of the first Microsoft Loopback Adapter, and OvS softwares only need to the data message be sent to first empty Intend network interface card, the first network function of binding therewith is called by the first Microsoft Loopback Adapter, can be achieved with carrying out the first data message First network function treatment, the function performed by OvS softwares are still to carry out turning for data message according to the flow table that controller is issued Send out, the OvS softwares functions of itself does not change.Therefore, method provided in an embodiment of the present invention, it is not necessary to OvS softwares Any extra setting itself is carried out, can just be added and be called newly-increased network function, simplify the addition of newly-increased network function And invoked procedure, and then the cost for adding network function is reduced, shorten the time of addition network function.

As shown in figure 4, embodiments providing a kind of data processing method based on SDN, it is applied to SDN and sets It is standby, at least one Microsoft Loopback Adapter is provided with the SDN equipment, each Microsoft Loopback Adapter is tied up with a kind of network function in advance It is fixed, the method comprising the steps of S401 to S407.

S401, the first data message of reception；

The first flow table that S402, basis are matched with first data message, changes the purpose of first data message Address；

Wherein, first flow table is issued by the SDN controllers being connected with the SDN equipment, wherein including：With institute State the address of corresponding first Microsoft Loopback Adapter of the first data message, or the first physical network card corresponding with first data message Address；Wherein, the address of first Microsoft Loopback Adapter be by the SDN controllers, according to the network function that prestores with What the corresponding relation between the address of Microsoft Loopback Adapter determined；

If S403, the address that the amended destination address of first data message is first Microsoft Loopback Adapter, by institute State the first data message to send to first Microsoft Loopback Adapter, call the first network work(with first Microsoft Loopback Adapter binding Can, the first network function treatment is carried out to first data message, the second data message is obtained；

S404, judge in the SDN equipment with the presence or absence of the second flow table matched with second data message, obtain Obtain the second judged result；If second judged result is yes, execution step S405；If second judged result is no, After execution of step S406, then execution step S405；

It is understood that during first message in the second data message is message flow, not depositing in SDN equipment In the flow table matched with the message, therefore, alternatively, in the second flow table that basis is matched with second data message, modification Before the destination address of second data message, it is necessary to judge in the SDN equipment with the presence or absence of with the described second number According to the second flow table that message is matched.

The second flow table that S405, basis are matched with second data message, changes the purpose of second data message Address, is forwarded according to amended destination address；

S406, second data message is sent to the SDN controllers being connected with the SDN equipment, and is received The second flow table matched with second data message that the SDN controllers are issued；

If S407, the address that the amended destination address of first data message is first physical network card, will First data message forwarding is to first physical network card.

It should be noted that step S401 to S403, the S405 and S407 in the present embodiment, can be with the reality shown in Fig. 2 Step S201 to the S205 correspondences applied in example are identical.

It is not difficult to find out, a kind of data processing method based on SDN that the embodiment shown in Fig. 4 of the present invention is provided, when right When first data message carries out first network function treatment, the first flow table that can be issued according to SDN controllers is by the first data The destination address of message is revised as the address of the first Microsoft Loopback Adapter, and OvS softwares only need to the data message be sent to first empty Intend network interface card, the first network function of binding therewith is called by the first Microsoft Loopback Adapter, can be achieved with carrying out the first data message First network function treatment, the function performed by OvS softwares are still to carry out turning for data message according to the flow table that controller is issued Send out, the OvS softwares functions of itself does not change.Therefore, method provided in an embodiment of the present invention, it is not necessary to OvS softwares Any extra setting itself is carried out, can just be added and be called newly-increased network function, simplify the addition of newly-increased network function And invoked procedure, and then the cost for adding network function is reduced, shorten the time of addition network function.

It should be noted that the embodiment shown in Fig. 3 and Fig. 4 focuses on illustrating respective difference, answer actual In, the technical scheme that the two embodiments are provided can be combined application.

Alternatively, in a kind of specific embodiment provided in an embodiment of the present invention, in the arbitrary reality shown in Fig. 2 to Fig. 4 Apply in example, step S204, S306 or S405, namely the second flow table that the basis is matched with second data message, modification The destination address of second data message, can include the step of forwarded according to amended destination address：

The second flow table that step 1, basis are matched with second data message, changes the purpose of second data message Address；

If step 2, the address that the amended destination address of second data message is the second Microsoft Loopback Adapter, by described Two data messages are sent to second Microsoft Loopback Adapter；

If step 3, the address that the amended destination address of second data message is the second physical network card, by described Two data messages are sent to second physical network card.

It is understood that second data message is sent to second Microsoft Loopback Adapter, the second Microsoft Loopback Adapter The second network function bound with which can be called, the second network function process is carried out to second data message, obtain the 3rd Data message；

Afterwards, SDN equipment can change the 3rd datagram according to the 3rd flow table matched with the 3rd data message Text destination address, and judge the 3rd data message destination address be the corresponding address of Microsoft Loopback Adapter or physical network card correspondence Address；If the corresponding address of Microsoft Loopback Adapter, continue to call corresponding network function to process the 3rd data message, And so on circulate, until when the destination address of data message is physical network card corresponding address, terminate circulation, and by datagram Text is forwarded to corresponding physical network card.

As can be seen that the data processing method based on SDN provided in an embodiment of the present invention, can call different network work( Can repeatedly be processed to receiving data message, more be met the demand of user.

Fig. 5 is refer to, Fig. 5 shows a kind of reality of data processing method based on SDN provided in an embodiment of the present invention Application scenarios schematic diagram, in the practical application scene, the SDN equipment for implementing the method is OvS hosts.Such as Fig. 5 institutes Show, the data handling procedure of the practical application scene is as follows：

First data message is sent to the physical network card 1 of OvS hosts by step 1, subscriber's main station, and by with Physical Network Block 1 correspondence mappings port vport1 into OvS softwares；

Step 2, assume that the data message is the first data message for needing to carry out that newly-increased network function A is processed, so OvS In there is no the flow table of the message flow, OvS hosts encapsulate the first data message message into Packet-in messages；OvS Host by this Packet-in message by Socket interfaces produce User Data Protocol (User Datagram Protocol, UDP OS protocol stacks) are forwarded a packet to, Packet-in messages are forwarded to physical network card 3 by OS protocol stacks again；

Step 3, OvS hosts are by physical network card 3 by Packet-in message up sending to SDN controllers；

After step 4, SDN controllers receive Packet-in messages, sentenced according to the source and destination IP address of the first data message Disconnected user identity, then according to default user identity and the corresponding relation of network function, determines that the first data message needs logical Newly-increased network function A process is crossed, further according to the corresponding relation of the address of the network function and Microsoft Loopback Adapter for pre-saving, it is determined that with The corresponding Microsoft Loopback Adapter of newly-increased network function A is Microsoft Loopback Adapter 1, generates the first flow table according to the address of Microsoft Loopback Adapter 1 and is handed down to OvS hosts.Wherein, the first flow table includes the MAC and IP address of Microsoft Loopback Adapter 1.

Step 5, the first flow table enter the OS protocol stacks of OvS hosts through physical network card 3, are then forwarded by OS protocol stacks To OvS softwares；

After step 6, OvS softwares receive the first flow table, the first data message is modified according to the first flow table, by its mesh MAC and IP address be revised as the MAC and IP address of Microsoft Loopback Adapter 1, then the first data message forwarding is existed to Microsoft Loopback Adapter 1 Mapped port vport3 in OvS softwares；

Step 7, the first data message call newly-increased network function A after vport3 reaches Microsoft Loopback Adapter 1；

Step 8, newly-increased network function A are processed to the first data message, obtain the second data message, and second is counted Send according to message to the OS protocol stacks of OvS hosts；

Step 9, OS protocol stacks are by according to add in advance comprising network function pass corresponding with the address of Microsoft Loopback Adapter The routing table of system is by the second data message forwarding to Microsoft Loopback Adapter 1；

Step 10, Microsoft Loopback Adapter 1 receive the second data message, are sent to OvS softwares by vport3, and OvS softwares are sentenced Disconnected whether existing the second flow table that can process the second data message.As the second data message is also to enter OvS for the first time The data message of software, therefore there is no the second flow table in OvS softwares；Now, the second data message is encapsulated by OvS hosts again Into Packet-in messages, UDP is produced by Socket interfaces and forwards a packet to OS protocol stacks, OS protocol stacks are again by Packet-in Message is forwarded to physical network card 3；

Step 11, physical network card 3 receive Packet-in messages after according to entering to this message with step 3 identical flow process Row is processed；

After step 12, SDN controllers receive Packet-in messages, according to the source and destination IP address of the second data message Judge user identity, then according to default user identity and the corresponding relation of network function, determine the second data message needs By newly-increased network function B process, further according to the corresponding relation of the address of the network function and Microsoft Loopback Adapter for pre-saving, it is determined that Microsoft Loopback Adapter corresponding with newly-increased network function B is Microsoft Loopback Adapter 2, generates the second flow table issuance according to the address of Microsoft Loopback Adapter 2 Give OvS hosts.Wherein, the second flow table includes the MAC and IP address of Microsoft Loopback Adapter 2.

Step 13, the second flow table enter the OS protocol stacks of OvS hosts through physical network card 3, are then turned by OS protocol stacks It is dealt into OvS softwares；

After step 14, OvS softwares receive the second flow table, the second data message is modified according to the second flow table, by which Purpose MAC and IP address are revised as the MAC and IP address of Microsoft Loopback Adapter 2, then by the second data message forwarding to Microsoft Loopback Adapter 2 Mapped port vport4 in OvS softwares；

Step 15, the second data message call newly-increased network function B after vport4 reaches Microsoft Loopback Adapter 2；

Step 16, newly-increased network function B are processed to the second data message, obtain the 3rd data message, and by the 3rd Data message is sent to the OS protocol stacks of OvS hosts；

Step 17, OS protocol stacks are by according to add in advance comprising network function pass corresponding with the address of Microsoft Loopback Adapter The routing table of system is by the 3rd data message forwarding to Microsoft Loopback Adapter 2；

Step 18, Microsoft Loopback Adapter 2 receive the 3rd data message, are sent to OvS softwares by vport4, and OvS softwares are sentenced Disconnected whether existing the 3rd flow table that can process the 3rd data message.As the 3rd data message is also to enter OvS for the first time The data message of software, therefore there is no the 3rd flow table in OvS softwares；Now, the 3rd data message is encapsulated by OvS hosts again Into Packet-in messages, UDP is produced by Socket interfaces and forwards a packet to OS protocol stacks, OS protocol stacks are again by Packet-in Message is forwarded to physical network card 3；

After step 19, physical network card 3 receive Packet-in messages, according to entering to this message with step 3 identical flow process Row is processed；

After step 20, SDN controllers receive Packet-in messages, according to the source and destination IP address of the 3rd data message Judge user identity, determine that the 3rd data message needs to be forwarded to other networks at present, issue to OvS hosts and can continue to turn The 3rd data message is sent out to the 3rd flow table of other networks；

Step 21, the 3rd flow table enter the OS protocol stacks of OvS hosts through physical network card 3, are forwarded to by OS protocol stacks OvS softwares；

Step 22, OvS softwares change purpose MAC and IP address of the 3rd data message according to the 3rd flow table, by the 3rd number Mapped port vport2 of OvS softwares is forwarded to according to message；

, after mapped port vport2 reaches physical network card 2, OvS hosts pass through thing for step 23, the 3rd data message Reason network interface card 2 is by the 3rd data message forwarding to other networks.

As can be seen that in the specific embodiment shown in Fig. 5, by data message after the process of network function twice, most Other networks are forwarded to by physical network card 2 eventually.

Below a kind of data processing equipment based on SDN provided in an embodiment of the present invention is illustrated.

As shown in fig. 6, a kind of data processing equipment based on SDN provided in an embodiment of the present invention, is applied to SDN and sets It is standby, at least one Microsoft Loopback Adapter is provided with the SDN equipment, each Microsoft Loopback Adapter is tied up with a kind of network function in advance Fixed, described device includes：Data message receiver module 601, the first address modified module 602, first processing module 603, second Processing module 604 and the first forwarding module 605.

Wherein, the SDN equipment is the SDN equipment (abbreviation OvS hosts) for being provided with OvS softwares, specifically , the SDN equipment can be the SDN switch for being provided with OvS softwares.

Data message receiver module 601, for receiving the first data message；

First address modified module 602, for the first flow table that basis is matched with first data message, modification is described The destination address of the first data message；

First processing module 603, for virtual for described first in the amended destination address of first data message In the case of the address of network interface card, first data message is sent to first Microsoft Loopback Adapter, called empty with described first Intend the first network function of network card binding, the first network function treatment is carried out to first data message, obtain second Data message；

Due to being bound with a kind of network function to being arranged on each Microsoft Loopback Adapter in SDN equipment in advance, because This, when the amended destination address of the first data message is the address of the first Microsoft Loopback Adapter, can directly invoke empty with first Intend the corresponding first network function of network interface card to process the first data message, obtain the second data message.

In actual applications, after obtaining the second data message, first network function can be incited somebody to action according to the route in OS protocol stacks Second data message is still forwarded to the first Microsoft Loopback Adapter, and then according to virtual terminal corresponding with the first Microsoft Loopback Adapter in OvS softwares Mouth is back in OvS softwares, and the forwarding of next step is carried out to the second data message by OvS softwares.

Second processing module 604, for the second flow table that basis is matched with second data message, modification described second The destination address of data message, is forwarded according to amended destination address；

First forwarding module 605, for the amended destination address of first data message be first physics In the case of the address of network interface card, then by first data message forwarding to first physical network card.

A kind of data processing equipment based on SDN provided in an embodiment of the present invention, when will be carried out to the first data message During the process of one network function, the destination address of the first data message can be changed according to the first flow table that SDN controllers are issued For the address of the first Microsoft Loopback Adapter, OvS softwares only need to the data message be sent to the first Microsoft Loopback Adapter, virtual by first Network interface card calls the first network function of binding therewith, can be achieved with carrying out first network function treatment, OvS to the first data message Function performed by software is still that the forwarding of data message is carried out according to the flow table that controller is issued, the OvS softwares functions of itself Do not change.Therefore, device provided in an embodiment of the present invention, it is not necessary to carry out any extra setting to OvS softwares in itself Put, can just add and call newly-increased network function, simplify addition and the invoked procedure of newly-increased network function, and then reduce The cost of addition network function, shortens the time of addition network function.

Further, since every kind of network function all has corresponding specific Microsoft Loopback Adapter, therefore, process using the device During data message, for the different types of data message for receiving simultaneously, can select simultaneously at different network functions Reason；For the same data message for needing heterogeneous networks function treatment, different network functions can be switched at any time and processed, This improves the treatment effeciency of data message, more meets the demand of user.

As shown in fig. 7, a kind of data processing equipment based on SDN provided in an embodiment of the present invention, is applied to SDN and sets It is standby, at least one Microsoft Loopback Adapter is provided with the SDN equipment, each Microsoft Loopback Adapter is tied up with a kind of network function in advance Fixed, described device includes：Data message receiver module 701, the first judge module 702, the first trigger module 703, second triggering Module 704, the first address modified module 705, first processing module 706 and the first forwarding module 708.

Data message receiver module 701, for receiving the first data message；

First judge module 702, for judge in the SDN equipment with the presence or absence of with first data message The first flow table matched somebody with somebody, obtains the first judged result；

First trigger module 703, for repairing in the case of being, to trigger first address in first judged result Change module；

Second trigger module 704, in the case of being no in first judged result, by first data message Be sent to the SDN controllers being connected with the SDN equipment, and receive that the SDN controllers issue with the described first number According to the first flow table that message is matched, the first address modified module is then triggered；

First address modified module 705, for the first flow table that basis is matched with first data message, modification is described The destination address of the first data message；

First processing module 706, for virtual for described first in the amended destination address of first data message In the case of the address of network interface card, first data message is sent to first Microsoft Loopback Adapter, called empty with described first Intend the first network function of network card binding, the first network function treatment is carried out to first data message, obtain second Data message；

Second processing module 707, for the second flow table that basis is matched with second data message, modification described second The destination address of data message, is forwarded according to amended destination address；

First forwarding module 708, for the amended destination address of first data message be first physics In the case of the address of network interface card, then by first data message forwarding to first physical network card.

It should be noted that module 701,705 to 708 in the present embodiment, can be with the mould in the embodiment shown in Fig. 6 The correspondence of block 601 to 605 is identical.

It is not difficult to find out, a kind of data processing equipment based on SDN that the embodiment shown in Fig. 7 of the present invention is provided, when right When first data message carries out first network function treatment, the first flow table that can be issued according to SDN controllers is by the first data The destination address of message is revised as the address of the first Microsoft Loopback Adapter, and OvS softwares only need to the data message be sent to first empty Intend network interface card, the first network function of binding therewith is called by the first Microsoft Loopback Adapter, can be achieved with carrying out the first data message First network function treatment, the function performed by OvS softwares are still to carry out turning for data message according to the flow table that controller is issued Send out, the OvS softwares functions of itself does not change.Therefore, device provided in an embodiment of the present invention, it is not necessary to OvS softwares Any extra setting itself is carried out, can just be added and be called newly-increased network function, simplify the addition of newly-increased network function And invoked procedure, and then the cost for adding network function is reduced, shorten the time of addition network function.

As shown in figure 8, a kind of data processing equipment based on SDN provided in an embodiment of the present invention, is applied to SDN and sets It is standby, at least one Microsoft Loopback Adapter is provided with the SDN equipment, each Microsoft Loopback Adapter is tied up with a kind of network function in advance Fixed, described device includes：

Data message receiver module 801, for receiving the first data message；

First address modified module 802, for the first flow table that basis is matched with first data message, modification is described The destination address of the first data message；

First processing module 803, for virtual for described first in the amended destination address of first data message In the case of the address of network interface card, first data message is sent to first Microsoft Loopback Adapter, called empty with described first Intend the first network function of network card binding, the first network function treatment is carried out to first data message, obtain second Data message；

Second judge module 804, for judge in the SDN equipment with the presence or absence of with second data message The second flow table matched somebody with somebody, obtains the second judged result；

3rd trigger module 805, in the case of being to be in second judged result, triggers the second processing mould Block；

4th trigger module 806, in the case of being no in second judged result, by second data message Be sent to the SDN controllers being connected with the SDN equipment, and receive that the SDN controllers issue with the described second number According to the second flow table that message is matched, the Second processing module is then triggered；

Second processing module 807, for the second flow table that basis is matched with second data message, modification described second The destination address of data message, is forwarded according to amended destination address；

First forwarding module 808, for the amended destination address of first data message be first physics In the case of the address of network interface card, then by first data message forwarding to first physical network card.

It should be noted that module 801 to 803,807 and 808 in the present embodiment, can be with the embodiment shown in Fig. 6 In module 601 to 605 correspondence it is identical.

It is not difficult to find out, a kind of data processing equipment based on SDN that the embodiment shown in Fig. 8 of the present invention is provided, when right When first data message carries out first network function treatment, the first flow table that can be issued according to SDN controllers is by the first data The destination address of message is revised as the address of the first Microsoft Loopback Adapter, and OvS softwares only need to the data message be sent to first empty Intend network interface card, the first network function of binding therewith is called by the first Microsoft Loopback Adapter, can be achieved with carrying out the first data message First network function treatment, the function performed by OvS softwares are still to carry out turning for data message according to the flow table that controller is issued Send out, the OvS softwares functions of itself does not change.Therefore, device provided in an embodiment of the present invention, it is not necessary to OvS softwares Any extra setting itself is carried out, can just be added and be called newly-increased network function, simplify the addition of newly-increased network function And invoked procedure, and then the cost for adding network function is reduced, shorten the time of addition network function.

It should be noted that the embodiment shown in Fig. 7 and Fig. 8 focuses on illustrating respective difference, answer actual In, the technical scheme that the two embodiments are provided can be combined application.

Alternatively, in a kind of specific embodiment provided in an embodiment of the present invention, in the arbitrary reality shown in Fig. 6 to Fig. 8 Apply in example, Second processing module 607, Second processing module 707 or Second processing module 807 can include：

Submodule is changed in second address, and for the second flow table that basis is matched with second data message, modification is described The destination address of the second data message；

First forwarding submodule, for being the second Microsoft Loopback Adapter in the amended destination address of second data message In the case of address, second data message is sent to second Microsoft Loopback Adapter；

Second forwarding submodule, for being the second physical network card in the amended destination address of second data message In the case of address, second data message is sent to second physical network card.

As can be seen that the data processing equipment based on SDN provided in an embodiment of the present invention, can call different network work( Can repeatedly be processed to receiving data message, more be met the demand of user.

For device embodiment, as which is substantially similar to embodiment of the method, so description is fairly simple, it is related Part is illustrated referring to the part of embodiment of the method.

It should be noted that herein, such as first and second or the like relational terms are used merely to a reality Body or operation are made a distinction with another entity or operation, and are not necessarily required or implied these entities or deposit between operating In any this actual relation or order.And, term " including ", "comprising" or its any other variant are intended to Nonexcludability is included, so that a series of process, method, article or equipment including key elements not only will including those Element, but also including other key elements being not expressly set out, or also include for this process, method, article or equipment Intrinsic key element.In the absence of more restrictions, the key element for being limited by sentence "including a ...", it is not excluded that Also there is other identical element in process, method, article or equipment including the key element.

Each embodiment in this specification is described by the way of correlation, identical similar portion between each embodiment Divide mutually referring to what each embodiment was stressed is the difference with other embodiment.Especially for device reality For applying example, as which is substantially similar to embodiment of the method, so description is fairly simple, related part is referring to embodiment of the method Part explanation.

Presently preferred embodiments of the present invention is the foregoing is only, protection scope of the present invention is not intended to limit.It is all Any modification, equivalent substitution and improvements made within the spirit and principles in the present invention etc., are all contained in protection scope of the present invention It is interior.

Claims

1. a kind of data processing method based on SDN, it is characterised in that be applied to SDN equipment, the SDN equipment In be provided with least one Microsoft Loopback Adapter, each Microsoft Loopback Adapter is bound with a kind of network function in advance, and methods described includes：

Receive the first data message；

According to the first flow table matched with first data message, the destination address of first data message is changed；It is described First flow table is issued by the SDN controllers being connected with the SDN equipment, wherein including：With first data message pair The address of the first Microsoft Loopback Adapter answered, or the address of the first physical network card corresponding with first data message；Wherein, it is described The address of the first Microsoft Loopback Adapter be by the SDN controllers, according to the address of the network function that prestores and Microsoft Loopback Adapter it Between corresponding relation determine；

If the amended destination address of first data message is the address of first Microsoft Loopback Adapter, by first data Message is sent to first Microsoft Loopback Adapter, calls the first network function with first Microsoft Loopback Adapter binding, to described the One data message carries out the first network function treatment, obtains the second data message；

According to the second flow table matched with second data message, the destination address of second data message is changed, according to Amended destination address is forwarded；

If the amended destination address of first data message is the address of first physical network card, by the described first number First physical network card is forwarded to according to message.

2. method according to claim 1, it is characterised in that matched with first data message in the basis Before the step of one flow table, destination address of modification first data message, methods described also includes：

Sentence with the presence or absence of the first flow table matched with first data message, acquisition first in judging the SDN equipment Disconnected result；

If first judged result is yes, then performs the first flow table that the basis is matched with first data message, repair The step of changing the destination address of first data message；

If first judged result is no, first data message is sent to the SDN being connected with the SDN equipment Controller, and the first flow table matched with first data message that the SDN controllers are issued is received, then perform described According to the step of the first flow table matched with first data message, the destination address of modification first data message.

3. method according to claim 1, it is characterised in that matched with second data message in the basis Before the step of two flow tables, destination address of modification second data message, methods described also includes：

Sentence with the presence or absence of the second flow table matched with second data message, acquisition second in judging the SDN equipment Disconnected result；

If second judged result is yes, then performs the second flow table that the basis is matched with second data message, repair The step of changing the destination address of second data message；

If second judged result is no, second data message is sent to the SDN being connected with the SDN equipment Controller, and the second flow table matched with second data message that the SDN controllers are issued is received, then perform described According to the step of the second flow table matched with second data message, the destination address of modification second data message.

4. the method according to any one of claim 1-3, it is characterised in that the basis and second datagram Second flow table of text matching, changes the destination address of second data message, is forwarded according to amended destination address The step of include：

If the amended destination address of second data message is the address of the second Microsoft Loopback Adapter, by second data message Send to second Microsoft Loopback Adapter；

If the amended destination address of second data message is the address of the second physical network card, by second data message Send to second physical network card.

5. method according to claim 1, it is characterised in that each virtual in the SDN equipment to being arranged on The process that network interface card carries out advance binding with a kind of network function includes：

Or, set up the routing table comprising the corresponding relation between network function and the address of Microsoft Loopback Adapter or network-driven.

6. the method according to any one of claim 1-3,5, it is characterised in that the first network function includes：Net Network address conversion, data message encapsulation, data message decapsulation, data message encryption, data message decryption, data message pressure Contracting, data message decompression, network layer protocol conversion, transport layer port conversion and application layer protocol modification.

7. the method according to any one of claim 1-3,5, it is characterised in that the SDN equipment is Open VSwitch software hosts.

8. a kind of data processing equipment based on SDN, it is characterised in that be applied to SDN equipment, set in the network equipment At least one Microsoft Loopback Adapter is equipped with, each Microsoft Loopback Adapter is bound with a kind of network function in advance, and described device includes：

Data message receiver module, for receiving the first data message；

First address modified module, for the first flow table that basis is matched with first data message, changes first number According to the destination address of message；First flow table is issued by the SDN controllers being connected with the SDN equipment, wherein including： The address of the first Microsoft Loopback Adapter corresponding with first data message, or the first physics corresponding with first data message The address of network interface card；Wherein, the address of first Microsoft Loopback Adapter is by the SDN controllers, according to the network work(for prestoring What the corresponding relation between energy and the address of Microsoft Loopback Adapter determined；

First processing module, on the ground that the amended destination address of first data message is first Microsoft Loopback Adapter In the case of location, first data message is sent to first Microsoft Loopback Adapter, call and tie up with first Microsoft Loopback Adapter Fixed first network function, carries out the first network function treatment to first data message, obtains the second data message；

Second processing module, for the second flow table that basis is matched with second data message, changes second datagram The destination address of text, is forwarded according to amended destination address；

First forwarding module, on the ground that the amended destination address of first data message is first physical network card In the case of location, then by first data message forwarding to first physical network card.

9. device according to claim 8, it is characterised in that described device also includes：

First judge module, for judging in the SDN equipment with the presence or absence of matched with first data message One flow table, obtains the first judged result；

First trigger module, in the case of being to be in first judged result, triggers first address modified module；

Second trigger module, in the case of being no in first judged result, first data message is sent to The SDN controllers being connected with the SDN equipment, and it is issuing with first data message to receive the SDN controllers First flow table of matching, then triggers first address modified module.

10. device according to claim 8, it is characterised in that described device also includes：

Second judge module, for judging in the SDN equipment with the presence or absence of matched with second data message Two flow tables, obtain the second judged result；

4th trigger module, in the case of being no in second judged result, second data message is sent to The SDN controllers being connected with the SDN equipment, and it is issuing with second data message to receive the SDN controllers Second flow table of matching, then triggers the Second processing module.