CN106533942B

CN106533942B - A kind of data processing method and device based on SDN

Info

Publication number: CN106533942B
Application number: CN201611083513.9A
Authority: CN
Inventors: 黄小红; 赵钦; 陈蔚瀚; 张沛; 颜磊; 胡鼎原
Original assignee: Beijing University of Posts and Telecommunications
Current assignee: Beijing University of Posts and Telecommunications
Priority date: 2016-11-30
Filing date: 2016-11-30
Publication date: 2019-06-14
Anticipated expiration: 2036-11-30
Also published as: CN106533942A

Abstract

The embodiment of the invention provides a kind of data processing method and device based on SDN, applied in the SDN network equipment for being provided at least one Microsoft Loopback Adapter, each Microsoft Loopback Adapter is bound with a kind of network function in advance, can receive the first data message；According to matched first flow table of the first data message, modify the first data message destination address；If the modified destination address of the first data message is the address of Microsoft Loopback Adapter, first data message is sent to the Microsoft Loopback Adapter, the network function with Microsoft Loopback Adapter binding is called, corresponding network function processing is carried out to the first data message, obtains the second data message；According to matched second flow table of the second data message, modify the second data message destination address, be forwarded according to modified destination address.Method and device provided in an embodiment of the present invention does not need to carry out OvS software itself any additional setting, can add and call newly-increased network function.

Description

A kind of data processing method and device based on SDN

Technical field

The present invention relates to data message network functions to realize technical field, at a kind of data based on SDN Manage method and device.

Background technique

In traditional network environment, function achieved by the network equipments such as interchanger is set up before factory by production firm At user can not increase customized network function for these network equipments, this causes the specific network equipment that can only realize spy Fixed network function.To add new network function to the network equipment, it is necessary to be produced new edition hardware by production firm and be pacified Dress is just able to achieve.

In customized (the Software Defined of software for being based on Open vSwitch software (abbreviation OvS software) Network, SDN) in network environment, function achieved by the network equipments such as interchanger is also arranged before factory by production firm It completes, if it is desired to new network function is added, other than the new corresponding functional module of network function is set, it is also necessary to right OvS software carries out some customized settings, for example, the interface that addition is new, defines new parameter, introduces new calling process etc., with OvS software is set to call newly-increased network function.

Customized setting OvS software although do not need replacement hardware, but these it is customized must be by the special of production firm Industry personnel carry out, and cannot voluntarily be completed by user, and this not only adds the costs of addition network function, and extend addition net The time of network function.When carrying out data message processing using these network equipments, corresponding network can not be quickly and conveniently called The data message that function treatment subscriber's main station is sent, cannot meet the needs of users.

Summary of the invention

The embodiment of the present invention is designed to provide a kind of data processing method and device based on SDN, not right to realize OvS software itself carries out any additional setting, can add and call newly-increased network function.

To achieve the goals above, the embodiment of the invention provides a kind of data processing method based on SDN, it is applied to SDN network equipment, is provided at least one Microsoft Loopback Adapter in the SDN network equipment, each Microsoft Loopback Adapter in advance with a kind of net Network function binding, which comprises

Receive the first data message；

According to matched first flow table of first data message, modify the destination address of first data message； First flow table is issued by the SDN controller connecting with the SDN network equipment, wherein including: with first datagram The address of corresponding first Microsoft Loopback Adapter of text, or the address of the first physical network card corresponding with first data message；Wherein, The address of first Microsoft Loopback Adapter is by the SDN controller, the ground of network function and Microsoft Loopback Adapter according to the pre-stored data What the corresponding relationship between location determined；

If the modified destination address of the first data message is the address of first Microsoft Loopback Adapter, by described first Data message is sent to first Microsoft Loopback Adapter, the first network function with first Microsoft Loopback Adapter binding is called, to institute It states the first data message and carries out the first network function treatment, obtain the second data message；

According to matched second flow table of second data message, modify the destination address of second data message, It is forwarded according to modified destination address；

If the modified destination address of the first data message is the address of first physical network card, by described the One data message forwarding is to first physical network card.

Optionally, in the basis and matched first flow table of first data message, first datagram is modified Before the step of destination address of text, the method also includes:

Judge in the SDN network equipment with the presence or absence of with matched first flow table of first data message, obtain the One judging result；

If first judging result is yes, then executes the basis and first data message is matched first-class The step of table, the destination address of modification first data message；

If first judging result be it is no, first data message is sent to and is connect with the SDN network equipment SDN controller, and receive that the SDN controller issues with matched first flow table of first data message, then hold The row basis and matched first flow table of first data message, modify the step of the destination address of first data message Suddenly.

Optionally, in the basis and matched second flow table of second data message, second datagram is modified Before the step of destination address of text, the method also includes:

Judge in the SDN network equipment with the presence or absence of with matched second flow table of second data message, obtain the Two judging results；

If second judging result is yes, then executes the basis and the matched second of the second data message The step of table, the destination address of modification second data message；

If second judging result be it is no, second data message is sent to and is connect with the SDN network equipment SDN controller, and receive that the SDN controller issues with matched second flow table of second data message, then hold The row basis and matched second flow table of second data message, modify the step of the destination address of second data message Suddenly.

Optionally, the basis and matched second flow table of second data message modify second data The destination address of message, the step of being forwarded according to modified destination address include:

According to matched second flow table of second data message, modify the destination address of second data message；

If the modified destination address of the second data message is the address of the second Microsoft Loopback Adapter, by second data Message is sent to second Microsoft Loopback Adapter；

If the modified destination address of the second data message is the address of the second physical network card, by second data Message is sent to second physical network card.

Optionally, each Microsoft Loopback Adapter and a kind of network function that are arranged in the SDN network equipment are carried out preparatory The process of binding includes:

A Microsoft Loopback Adapter is monitored using a kind of network function is corresponding；

Alternatively, establishing the routing table comprising the corresponding relationship between network function and the address of Microsoft Loopback Adapter or network drive It is dynamic.

Optionally, the first network function include: network address translation, data message encapsulation, data message decapsulation, Data message encryption, data message decryption, data message compression, data message decompression, network layer protocol conversion, transport layer end Mouth conversion and application layer protocol modification.

Optionally, the SDN network equipment is Open vSwitch software host.

To achieve the goals above, the embodiment of the invention also provides a kind of data processing equipment based on SDN, it is applied to SDN network equipment, is provided at least one Microsoft Loopback Adapter in the network equipment, each Microsoft Loopback Adapter in advance with a kind of network function It can bind, described device includes:

Data message receiving module, for receiving the first data message；

First address modified module, for according to and matched first flow table of first data message, modify described the The destination address of one data message；First flow table is issued by the SDN controller connecting with the SDN network equipment, wherein Include: the address of the first Microsoft Loopback Adapter corresponding with first data message, or corresponding with first data message The address of one physical network card；Wherein, the address of first Microsoft Loopback Adapter be by the SDN controller, it is according to the pre-stored data What the corresponding relationship between network function and the address of Microsoft Loopback Adapter determined；

First processing module, for being first Microsoft Loopback Adapter in the modified destination address of the first data message Address in the case where, first data message is sent to first Microsoft Loopback Adapter, is called and first virtual net The first network function of blocking binding carries out the first network function treatment to first data message, obtains the second data Message；

Second processing module modifies second number for basis and matched second flow table of second data message According to the destination address of message, it is forwarded according to modified destination address；

First forwarding module, for being first physical network card in the modified destination address of the first data message Address in the case where, then by first data message forwarding to first physical network card.

Optionally, described device further include:

First judgment module is matched for judging to whether there is in the SDN network equipment with first data message The first flow table, obtain the first judging result；

First trigger module, in the case where first judging result, which is, is, triggering the first address modification Module；

Second trigger module, in the case where first judging result is no, first data message to be sent out The SDN controller connecting with the SDN network equipment is given, and it is issuing with first data to receive the SDN controller Then first flow table of message matching triggers first address modified module.

Optionally, described device further include:

Second judgment module is matched for judging to whether there is in the SDN network equipment with second data message The second flow table, obtain the second judging result；

Third trigger module, for triggering the Second processing module in the case where second judging result, which is, is；

4th trigger module, in the case where second judging result is no, second data message to be sent out The SDN controller connecting with the SDN network equipment is given, and it is issuing with second data to receive the SDN controller Second flow table of message matching, then triggers the Second processing module.

Method and device provided in an embodiment of the present invention, when will to the first data message carry out first network function treatment When, the destination address of the first data message is revised as the first Microsoft Loopback Adapter by the first flow table that can be issued according to SDN controller Address, OvS software only needs the data message being sent to the first Microsoft Loopback Adapter, is tied up therewith by the first Microsoft Loopback Adapter calling Fixed first network function can be achieved with carrying out the first data message first network function treatment, function performed by OvS software It can be still the forwarding that data message is carried out according to the flow table that controller issues, the function of OvS software itself does not change.Cause This, method and device provided in an embodiment of the present invention does not need to carry out OvS software itself any additional setting, can add Adduction calls newly-increased network function, simplifies addition and the calling process of newly-increased network function, thereby reduces addition network The cost of function shortens the time of addition network function.

Since every kind of network function all has corresponding specific Microsoft Loopback Adapter, at this method and device When managing data message, for received different types of data message simultaneously, it can be carried out with the different network function of simultaneous selection Processing；For needing the same data message of heterogeneous networks function treatment, can switch at any time at different network functions Reason, this improves the treatment effeciency of data message, more meets the demand of user.Certainly, implement any of the products of the present invention or Method must be not necessarily required to reach all the above advantage simultaneously.

Detailed description of the invention

In order to more clearly explain the embodiment of the invention or the technical proposal in the existing technology, to embodiment or will show below There is attached drawing needed in technical description to be briefly described, it should be apparent that, the accompanying drawings in the following description is only this Some embodiments of invention for those of ordinary skill in the art without creative efforts, can be with It obtains other drawings based on these drawings.

Fig. 1 is SDN network configuration diagram；

Fig. 2 is a kind of flow chart of the data processing method provided in an embodiment of the present invention based on SDN；

Fig. 3 is another flow chart of the data processing method provided in an embodiment of the present invention based on SDN；

Fig. 4 is another flow chart of the data processing method provided in an embodiment of the present invention based on SDN；

Fig. 5 is a kind of practical application scene schematic diagram of the data processing method based on SDN provided in an embodiment of the present invention；

Fig. 6 is a kind of structural block diagram of the data processing equipment provided in an embodiment of the present invention based on SDN；

Fig. 7 is another structural block diagram of the data processing equipment provided in an embodiment of the present invention based on SDN；

Fig. 8 is another structural block diagram of the data processing equipment provided in an embodiment of the present invention based on SDN.

Specific embodiment

Following will be combined with the drawings in the embodiments of the present invention, and technical solution in the embodiment of the present invention carries out clear, complete Site preparation description, it is clear that described embodiments are only a part of the embodiments of the present invention, instead of all the embodiments.It is based on Embodiment in the present invention, it is obtained by those of ordinary skill in the art without making creative efforts every other Embodiment shall fall within the protection scope of the present invention.

Of the existing technology in order to solve the problems, such as, the embodiment of the invention provides a kind of data processing sides based on SDN Method and device are applied to SDN network equipment, are provided at least one Microsoft Loopback Adapter, each virtual net in the SDN network equipment Card is bound with a kind of network function in advance.

Firstly the need of explanation, a kind of data processing method and device based on SDN provided in an embodiment of the present invention is main To be applied in the SDN network for supporting OpenFlow agreement, other SDN network are set by SDN controller in the network Standby (such as SDN switch) is controlled, and due to being equipped with Open vSwitch software in the SDN network equipment, (abbreviation OvS is soft Part), therefore, which is also referred to as Open vSwitch software host, abbreviation OvS host.Specifically, institute Stating SDN network equipment can be to be equipped with the SDN switch of OvS software.

OvS software is mainly used for executing data message to be matched and the forwarding of data message with flow table.The operation of OvS host Operating system is any operating system that can support OvS software.In embodiments of the present invention, all newly-increased network functions It is the application software developed in the operating system operated in OvS host.

Referring to FIG. 1, Fig. 1 shows the network architecture schematic diagram of SDN network.As shown in Figure 1, including control in SDN network Device, OvS host and at least one subscriber's main station processed, wherein subscriber's main station is connected with OvS host, OvS host again with control Device processed is connected, while SDN network also passes through OvS host and is connected to other networks.

Further more, mainly being applied due to a kind of data processing method and device based on SDN provided in an embodiment of the present invention In the SDN network equipment for supporting OpenFlow agreement, therefore, it is necessary to be based on to one kind provided in an embodiment of the present invention is implemented The process that is pre-configured with of the SDN network equipment of the data processing method and device of SDN is illustrated, specific as follows:

1) it determines that user increases the network function into SDN network equipment newly, is each newly-increased network function addition one A Microsoft Loopback Adapter, and be each Microsoft Loopback Adapter Configuration network address (MAC and IP address)；

Wherein, it is function of the user setting in SDN network equipment that user, which increases the network function into SDN network equipment newly, Module is also possible to some interior of user setting specifically, can be application software of the user installation in SDN network equipment Core module.

Microsoft Loopback Adapter is created by the operating system of SDN network equipment, can establish network connection in LA Management Room Software-driven, it does not have physical assemblies, but can possess the network address (MAC and IP address) of oneself as physical network card. For the operating system of SDN network equipment, Microsoft Loopback Adapter is identical as the function of physical network card, while Microsoft Loopback Adapter also has Configuration is flexible, the advantages of limitation by physical equipment.

2) starting increases the network function into SDN network equipment newly, and each void in the SDN network equipment will be arranged in Quasi- network interface card is bound with a kind of network function, establishes the one-to-one relationship of Microsoft Loopback Adapter Yu newly-increased network function.

Specific binding procedure are as follows: monitor a Microsoft Loopback Adapter using a kind of network function is corresponding；Alternatively, establishing includes network The routing table or network-driven of corresponding relationship between function and the address of Microsoft Loopback Adapter.

3) mapping relations of the virtual port in the OvS software installed in each Microsoft Loopback Adapter and SDN network equipment are established.

4) addition includes network function in the operating system of SDN network equipment (Operating System, OS) protocol stack The routing table of corresponding relationship between energy and the address of Microsoft Loopback Adapter, makes the data message after corresponding network function treatment, By the routing forwarding in OS protocol stack, the corresponding Microsoft Loopback Adapter of the network function can be returned, and then is back to OvS software In.

5) start the Microsoft Loopback Adapter of configured completion in SDN network equipment, and match for the physical network card in SDN network equipment Network address (MAC and IP address) is set, the mapping relations of the virtual port in each physical network card and OvS software are then established.

6) private network that a physical network card is communicated as SDN network equipment with SDN controller in SDN network equipment is specified Card, so that SDN network equipment is attached with SDN controller.

In addition, all flow tables in SDN network equipment are issued by SDN controller, SDN network due in SDN network Equipment itself does not have the ability for generating flow table.Therefore, when increased newly in SDN network equipment network function and network function with The corresponding relationship of the address of Microsoft Loopback Adapter, and when needing to carry out the data message that receives the processing of corresponding network function, It needs also to be updated the control logic of SDN controller, SDN controller is issued to SDN network equipment can be right The new flow table of data message progress corresponding network function treatment.

That is, before implementing the data processing method and device provided in an embodiment of the present invention based on SDN, it is also necessary to The control logic for the SDN controller connecting with SDN network equipment is updated.Specific update mode can have following two:

Mode one: by SDN controller management personnel by the corresponding relationship comprising network function and the address of Microsoft Loopback Adapter Control logic is added in SDN controller.

Mode two: the control of the corresponding relationship comprising network function and the address of Microsoft Loopback Adapter is patrolled by SDN network equipment It collects and reports in SDN controller, so that SDN controller is updated.

A kind of data processing method based on SDN provided in an embodiment of the present invention is illustrated below.

As shown in Fig. 2, a kind of data processing method based on SDN provided in an embodiment of the present invention, sets applied to SDN network It is standby, at least one Microsoft Loopback Adapter is provided in the SDN network equipment, each Microsoft Loopback Adapter is tied up with a kind of network function in advance Fixed, the method includes the steps S201 to S205.

S201, the first data message is received；

Wherein, the first data message can be the data message that any user host connecting with SDN network equipment is sent.

S202, basis and matched first flow table of first data message, modify the purpose of first data message Address；

Wherein, the first flow table is issued by the SDN controller connecting with the SDN network equipment, includes in the first flow table: with The address of corresponding first Microsoft Loopback Adapter of first data message, or the first Physical Network corresponding with first data message The address of card；

According to previously described content, wherein the address of the first Microsoft Loopback Adapter is by SDN controller, according to preparatory What the corresponding relationship between the network function of storage and the address of Microsoft Loopback Adapter determined.

If S203, the modified destination address of the first data message are the address of first Microsoft Loopback Adapter, by institute It states the first data message and is sent to first Microsoft Loopback Adapter, call the first network function with first Microsoft Loopback Adapter binding Can, the first network function treatment is carried out to first data message, obtains the second data message；

Due to being bound in advance to each Microsoft Loopback Adapter and a kind of network function that are arranged in SDN network equipment, Therefore, it when the modified destination address of the first data message is the address of the first Microsoft Loopback Adapter, can call directly and first The corresponding first network function of Microsoft Loopback Adapter handles the first data message, obtains the second data message.

Wherein, first network function includes: network address translation, data message encapsulation, data message decapsulation, datagram Text encryption, data message decryption, data message compression, data message decompression, network layer protocol conversion, transport layer port conversion With application layer protocol modification etc..

It is understood that first network function is not limited to above cited network function, in the prior art Other existing network functions are suitable for the present invention.

In practical applications, after obtaining the second data message, first network function can be according to the routing table in OS protocol stack Second data message is still forwarded to the first Microsoft Loopback Adapter, and then according to corresponding with the first Microsoft Loopback Adapter virtual in OvS software Port is back in OvS software, carries out the forwarding of next step to the second data message by OvS software.

S204, basis and matched second flow table of second data message, modify the purpose of second data message Address is forwarded according to modified destination address；

It, will if S205, the modified destination address of the first data message are the address of first physical network card First data message forwarding is to first physical network card.

A kind of data processing method based on SDN provided in an embodiment of the present invention, when carrying out the to the first data message When the processing of one network function, the first flow table that can be issued according to SDN controller modifies the destination address of the first data message For the address of the first Microsoft Loopback Adapter, OvS software only needs the data message being sent to the first Microsoft Loopback Adapter, virtual by first Network interface card calls the first network function of binding therewith, can be achieved with carrying out first network function treatment, OvS to the first data message Function performed by software is still that the forwarding of data message, the function of OvS software itself are carried out according to the flow table that controller issues Do not change.Therefore, method provided in an embodiment of the present invention does not need to carry out OvS software itself any additional set It sets, can add and call newly-increased network function, simplify addition and the calling process of newly-increased network function, thereby reduce The cost for adding network function shortens the time of addition network function.

In addition, since every kind of network function all has corresponding specific Microsoft Loopback Adapter, it is handled using this method When data message, for simultaneously received different types of data message, can be with the different network function of simultaneous selection at Reason；For needing the same data message of heterogeneous networks function treatment, different network functions can be switched at any time and handled, This improves the treatment effeciency of data message, more meets the demand of user.

As shown in figure 3, being set the embodiment of the invention provides a kind of data processing method based on SDN applied to SDN network It is standby, at least one Microsoft Loopback Adapter is provided in the SDN network equipment, each Microsoft Loopback Adapter is tied up with a kind of network function in advance It is fixed, the method comprising the steps of S301 to S307.

S301, the first data message is received；

S302, judge in the SDN network equipment with the presence or absence of with matched first flow table of first data message, obtain Obtain the first judging result；If first judging result is yes, execution step S303；If first judging result be it is no, After executing the step S304, then execute step S303；

It is understood that not deposited in SDN network equipment when the first data message is the first message in message flow In the flow table with the message matching, therefore, optionally, in basis and matched first flow table of first data message, modification Before the destination address of first data message, it is necessary to judge to count in the SDN network equipment with the presence or absence of with described first According to the first flow table of message matching.

S303, basis and matched first flow table of first data message, modify the purpose of first data message Address；

Wherein, first flow table is issued by the SDN controller connecting with the SDN network equipment, wherein including: with institute State the address of corresponding first Microsoft Loopback Adapter of the first data message, or the first physical network card corresponding with first data message Address；Wherein, the address of first Microsoft Loopback Adapter be by the SDN controller, network function according to the pre-stored data with What the corresponding relationship between the address of Microsoft Loopback Adapter determined.

S304, first data message is sent to the SDN controller connecting with the SDN network equipment, and received The SDN controller issue with matched first flow table of first data message；

If S305, the modified destination address of the first data message are the address of first Microsoft Loopback Adapter, by institute It states the first data message and is sent to first Microsoft Loopback Adapter, call the first network function with first Microsoft Loopback Adapter binding Can, the first network function treatment is carried out to first data message, obtains the second data message；

S306, basis and matched second flow table of second data message, modify the purpose of second data message Address is forwarded according to modified destination address；

It, will if S307, the modified destination address of the first data message are the address of first physical network card First data message forwarding is to first physical network card.

It should be noted that step S301, S303, S305~S307 in the present embodiment, it can be with implementation shown in Fig. 2 Step S201~S205 in example corresponds to identical.

It is not difficult to find out that a kind of data processing method based on SDN that present invention embodiment shown in Fig. 3 provides, when right When first data message carries out first network function treatment, the first flow table that can be issued according to SDN controller is by the first data The destination address of message is revised as the address of the first Microsoft Loopback Adapter, and OvS software only needs for the data message to be sent to the first void Quasi- network interface card calls the first network function of binding therewith by the first Microsoft Loopback Adapter, can be achieved with carrying out the first data message First network function treatment, function performed by OvS software are still to carry out turning for data message according to the flow table that controller issues Hair, the function of OvS software itself do not change.Therefore, method provided in an embodiment of the present invention is not needed to OvS software Itself carries out any additional setting, can add and call newly-increased network function, simplify the addition of newly-increased network function And calling process, the cost of addition network function is thereby reduced, the time of addition network function is shortened.

As shown in figure 4, being set the embodiment of the invention provides a kind of data processing method based on SDN applied to SDN network It is standby, at least one Microsoft Loopback Adapter is provided in the SDN network equipment, each Microsoft Loopback Adapter is tied up with a kind of network function in advance It is fixed, the method comprising the steps of S401 to S407.

S401, the first data message is received；

S402, basis and matched first flow table of first data message, modify the purpose of first data message Address；

Wherein, first flow table is issued by the SDN controller connecting with the SDN network equipment, wherein including: with institute State the address of corresponding first Microsoft Loopback Adapter of the first data message, or the first physical network card corresponding with first data message Address；Wherein, the address of first Microsoft Loopback Adapter be by the SDN controller, network function according to the pre-stored data with What the corresponding relationship between the address of Microsoft Loopback Adapter determined；

If S403, the modified destination address of the first data message are the address of first Microsoft Loopback Adapter, by institute It states the first data message and is sent to first Microsoft Loopback Adapter, call the first network function with first Microsoft Loopback Adapter binding Can, the first network function treatment is carried out to first data message, obtains the second data message；

S404, judge in the SDN network equipment with the presence or absence of with matched second flow table of second data message, obtain Obtain the second judging result；If second judging result is yes, execution step S405；If second judging result be it is no, After executing the step S406, then execute step S405；

It is understood that not deposited in SDN network equipment when the second data message is the first message in message flow In the flow table with the message matching, therefore, optionally, in basis and matched second flow table of second data message, modification Before the destination address of second data message, it is necessary to judge to count in the SDN network equipment with the presence or absence of with described second According to the second flow table of message matching.

S405, basis and matched second flow table of second data message, modify the purpose of second data message Address is forwarded according to modified destination address；

S406, second data message is sent to the SDN controller connecting with the SDN network equipment, and received The SDN controller issue with matched second flow table of second data message；

It, will if S407, the modified destination address of the first data message are the address of first physical network card First data message forwarding is to first physical network card.

It should be noted that the step S401 to S403, S405 and S407 in the present embodiment, it can be with reality shown in Fig. 2 Apply the step S201 to S205 in example correspond to it is identical.

It is not difficult to find out that a kind of data processing method based on SDN that present invention embodiment shown in Fig. 4 provides, when right When first data message carries out first network function treatment, the first flow table that can be issued according to SDN controller is by the first data The destination address of message is revised as the address of the first Microsoft Loopback Adapter, and OvS software only needs for the data message to be sent to the first void Quasi- network interface card calls the first network function of binding therewith by the first Microsoft Loopback Adapter, can be achieved with carrying out the first data message First network function treatment, function performed by OvS software are still to carry out turning for data message according to the flow table that controller issues Hair, the function of OvS software itself do not change.Therefore, method provided in an embodiment of the present invention is not needed to OvS software Itself carries out any additional setting, can add and call newly-increased network function, simplify the addition of newly-increased network function And calling process, the cost of addition network function is thereby reduced, the time of addition network function is shortened.

It should be noted that Fig. 3 and embodiment shown in Fig. 4 focus on illustrating respective difference, actually answering In, the technical solution that the two embodiments provide can combined application.

Optionally, in a kind of specific embodiment provided in an embodiment of the present invention, in Fig. 2 to any reality shown in Fig. 4 It applies in example, step S204, S306 or S405 namely the basis and matched second flow table of second data message, modifies The destination address of second data message, the step of being forwarded according to modified destination address may include:

Step 1, basis and matched second flow table of second data message, modify the purpose of second data message Address；

If step 2, the modified destination address of the second data message are the address of the second Microsoft Loopback Adapter, by described the Two data messages are sent to second Microsoft Loopback Adapter；

If step 3, the modified destination address of the second data message are the address of the second physical network card, by described the Two data messages are sent to second physical network card.

It is understood that after second data message is sent to second Microsoft Loopback Adapter, the second Microsoft Loopback Adapter The second network function bound with it can be called, the second network function processing is carried out to second data message, obtains third Data message；

Later, SDN network equipment meeting basis and the matched third flow table of third data message, modify the third datagram The destination address of text, and judge that the destination address of third data message is that the corresponding address of Microsoft Loopback Adapter or physical network card are corresponding Address；If it is the corresponding address of Microsoft Loopback Adapter, continue that corresponding network function is called to handle third data message, So on circulate, until when the destination address of data message is physical network card corresponding address, circulation is terminated, and by datagram Text is forwarded to corresponding physical network card.

It can be seen that the data processing method provided in an embodiment of the present invention based on SDN, different network function can be called It can repeatedly be handled data message is received, more meet the demand of user.

Referring to FIG. 5, Fig. 5 shows a kind of reality of data processing method based on SDN provided in an embodiment of the present invention Application scenarios schematic diagram, in the practical application scene, the SDN network equipment for implementing the method is OvS host.Such as Fig. 5 institute Show, the data handling procedure of the practical application scene is as follows:

First data message is sent to the physical network card 1 of OvS host by step 1, subscriber's main station, and by with Physical Network Block 1 correspondence mappings port vport1 and enters OvS software；

Step 2 assumes that the data message is the first data message for carrying out newly-increased network function A processing, so OvS In the flow table of the message flow is not present, OvS host encapsulates the first data message message into Packet-in message；OvS Host by this Packet-in message by Socket interface generate User Data Protocol (User Datagram Protocol, UDP OS protocol stack) is forwarded a packet to, Packet-in message is forwarded to physical network card 3 again by OS protocol stack；

Step 3, OvS host pass through physical network card 3 for Packet-in message up sending to SDN controller；

After step 4, SDN controller receive Packet-in message, sentenced according to the source and destination IP address of the first data message It is logical to determine that the first data message needs then according to the corresponding relationship of preset user identity and network function for disconnected user identity Cross newly-increased network function A processing, further according to the corresponding relationship of the address of the network function and Microsoft Loopback Adapter that pre-save, determine with The newly-increased corresponding Microsoft Loopback Adapter of network function A is Microsoft Loopback Adapter 1, generates the first flow table according to the address of Microsoft Loopback Adapter 1 and is handed down to OvS host.It wherein, include the MAC and IP address of Microsoft Loopback Adapter 1 in the first flow table.

Step 5, the first flow table enter the OS protocol stack of OvS host by physical network card 3, are then forwarded by OS protocol stack To OvS software；

After step 6, OvS software receive the first flow table, modified according to the first flow table to the first data message, by its mesh MAC and IP address be revised as the MAC and IP address of Microsoft Loopback Adapter 1, then the first data message forwarding is existed to Microsoft Loopback Adapter 1 Mapped port vport3 in OvS software；

Step 7, the first data message call newly-increased network function A after vport3 reaches Microsoft Loopback Adapter 1；

Step 8, newly-increased network function A handle the first data message, obtain the second data message, and second is counted The OS protocol stack of OvS host is sent to according to message；

Step 9, OS protocol stack will include network function pass corresponding with the address of Microsoft Loopback Adapter according to what is added in advance The routing table of system is by the second data message forwarding to Microsoft Loopback Adapter 1；

Step 10, Microsoft Loopback Adapter 1 receive the second data message, are sent to OvS software by vport3, OvS software is sentenced It is disconnected whether existing the second flow table for being capable of handling the second data message.Since the second data message is also to enter OvS for the first time The data message of software, therefore the second flow table is not present in OvS software；At this point, OvS host again encapsulates the second data message Into Packet-in message, UDP is generated by Socket interface and forwards a packet to OS protocol stack, OS protocol stack is again by Packet-in Message is forwarded to physical network card 3；

Step 11, physical network card 3 receive after Packet-in message according to process identical with step 3 to this message into Row processing；

After step 12, SDN controller receive Packet-in message, according to the source and destination IP address of the second data message Judge user identity, then according to the corresponding relationship of preset user identity and network function, determines the second data message needs It is determined by newly-increased network function B processing further according to the corresponding relationship of the address of the network function and Microsoft Loopback Adapter that pre-save Microsoft Loopback Adapter corresponding with newly-increased network function B is Microsoft Loopback Adapter 2, generates the second flow table issuance according to the address of Microsoft Loopback Adapter 2 Give OvS host.It wherein, include the MAC and IP address of Microsoft Loopback Adapter 2 in the second flow table.

Step 13, the second flow table enter the OS protocol stack of OvS host by physical network card 3, are then turned by OS protocol stack It is dealt into OvS software；

After step 14, OvS software receive the second flow table, modified according to the second flow table to the second data message, by it Purpose MAC and IP address are revised as the MAC and IP address of Microsoft Loopback Adapter 2, then by the second data message forwarding to Microsoft Loopback Adapter 2 Mapped port vport4 in OvS software；

Step 15, the second data message call newly-increased network function B after vport4 reaches Microsoft Loopback Adapter 2；

Step 16, newly-increased network function B handle the second data message, obtain third data message, and by third Data message is sent to the OS protocol stack of OvS host；

Step 17, OS protocol stack will include network function pass corresponding with the address of Microsoft Loopback Adapter according to what is added in advance The routing table of system is by third data message forwarding to Microsoft Loopback Adapter 2；

Step 18, Microsoft Loopback Adapter 2 receive third data message, are sent to OvS software by vport4, OvS software is sentenced It is disconnected whether the existing third flow table for being capable of handling third data message.Since third data message is also to enter OvS for the first time The data message of software, therefore third flow table is not present in OvS software；At this point, OvS host again encapsulates third data message Into Packet-in message, UDP is generated by Socket interface and forwards a packet to OS protocol stack, OS protocol stack is again by Packet-in Message is forwarded to physical network card 3；

After step 19, physical network card 3 receive Packet-in message, according to process identical with step 3 to this message into Row processing；

After step 20, SDN controller receive Packet-in message, according to the source and destination IP address of third data message Judge user identity, determine that third data message needs to be forwarded to other networks at present, issuing to OvS host can continue to turn Third flow table of the hair third data message to other networks；

Step 21, third flow table enter the OS protocol stack of OvS host by physical network card 3, are forwarded to by OS protocol stack OvS software；

Step 22, OvS software modify the purpose MAC and IP address of third data message according to third flow table, by third number The mapped port vport2 of OvS software is forwarded to according to message；

After mapped port vport2 reaches physical network card 2, OvS host passes through object for step 23, third data message Network interface card 2 is managed by third data message forwarding to other networks.

As can be seen that in specific embodiment shown in Fig. 5, by data message after the processing of network function twice, most Other networks are forwarded to by physical network card 2 eventually.

A kind of data processing equipment based on SDN provided in an embodiment of the present invention is illustrated below.

As shown in fig. 6, a kind of data processing equipment based on SDN provided in an embodiment of the present invention, sets applied to SDN network It is standby, at least one Microsoft Loopback Adapter is provided in the SDN network equipment, each Microsoft Loopback Adapter is tied up with a kind of network function in advance Fixed, described device includes: data message receiving module 601, the first address modified module 602, first processing module 603, second Processing module 604 and the first forwarding module 605.

Wherein, the SDN network equipment is to be equipped with the SDN network equipment (abbreviation OvS host) of OvS software, specifically , the SDN network equipment can be to be equipped with the SDN switch of OvS software.

Data message receiving module 601, for receiving the first data message；

First address modified module 602, for according to and matched first flow table of first data message, described in modification The destination address of first data message；

First processing module 603, for being described first virtual in the modified destination address of the first data message In the case where the address of network interface card, first data message is sent to first Microsoft Loopback Adapter, is called and first void The first network function of quasi- network card binding carries out the first network function treatment to first data message, obtains second Data message；

Due to being bound in advance with a kind of network function to each Microsoft Loopback Adapter is arranged in SDN network equipment, because This can be called directly and the first void when the modified destination address of the first data message is the address of the first Microsoft Loopback Adapter The quasi- corresponding first network function of network interface card handles the first data message, obtains the second data message.

In practical applications, after obtaining the second data message, first network function can be incited somebody to action according to the routing in OS protocol stack Second data message is still forwarded to the first Microsoft Loopback Adapter, and then according to virtual terminal corresponding with the first Microsoft Loopback Adapter in OvS software Mouth is back in OvS software, carries out the forwarding of next step to the second data message by OvS software.

Second processing module 604, for basis and matched second flow table of second data message, modification described second The destination address of data message is forwarded according to modified destination address；

First forwarding module 605, for being first physics in the modified destination address of the first data message In the case where the address of network interface card, then by first data message forwarding to first physical network card.

A kind of data processing equipment based on SDN provided in an embodiment of the present invention, when carrying out the to the first data message When the processing of one network function, the first flow table that can be issued according to SDN controller modifies the destination address of the first data message For the address of the first Microsoft Loopback Adapter, OvS software only needs the data message being sent to the first Microsoft Loopback Adapter, virtual by first Network interface card calls the first network function of binding therewith, can be achieved with carrying out first network function treatment, OvS to the first data message Function performed by software is still that the forwarding of data message, the function of OvS software itself are carried out according to the flow table that controller issues Do not change.Therefore, device provided in an embodiment of the present invention does not need to carry out OvS software itself any additional set It sets, can add and call newly-increased network function, simplify addition and the calling process of newly-increased network function, thereby reduce The cost for adding network function shortens the time of addition network function.

In addition, since every kind of network function all has corresponding specific Microsoft Loopback Adapter, it is handled using the device When data message, for simultaneously received different types of data message, can be with the different network function of simultaneous selection at Reason；For needing the same data message of heterogeneous networks function treatment, different network functions can be switched at any time and handled, This improves the treatment effeciency of data message, more meets the demand of user.

As shown in fig. 7, a kind of data processing equipment based on SDN provided in an embodiment of the present invention, sets applied to SDN network It is standby, at least one Microsoft Loopback Adapter is provided in the SDN network equipment, each Microsoft Loopback Adapter is tied up with a kind of network function in advance It is fixed, described device include: data message receiving module 701, first judgment module 702, the first trigger module 703, the second triggering Module 704, the first address modified module 705, first processing module 706 and the first forwarding module 708.

Data message receiving module 701, for receiving the first data message；

First judgment module 702 whether there is and first data message in the SDN network equipment for judging The first flow table matched obtains the first judging result；

First trigger module 703 is repaired in the case where first judging result, which is, is, triggering first address Change module；

Second trigger module 704 is used in the case where first judging result is no, by first data message It is sent to the SDN controller connecting with the SDN network equipment, and is received that the SDN controller issues with first number According to the first flow table of message matching, the first address modified module is then triggered；

First address modified module 705, for according to and matched first flow table of first data message, described in modification The destination address of first data message；

First processing module 706, for being described first virtual in the modified destination address of the first data message In the case where the address of network interface card, first data message is sent to first Microsoft Loopback Adapter, is called and first void The first network function of quasi- network card binding carries out the first network function treatment to first data message, obtains second Data message；

Second processing module 707, for basis and matched second flow table of second data message, modification described second The destination address of data message is forwarded according to modified destination address；

First forwarding module 708, for being first physics in the modified destination address of the first data message In the case where the address of network interface card, then by first data message forwarding to first physical network card.

It should be noted that module 701,705 to 708 in the present embodiment, it can be with the mould in embodiment shown in fig. 6 The correspondence of block 601 to 605 is identical.

It is not difficult to find out that a kind of data processing equipment based on SDN that present invention embodiment shown in Fig. 7 provides, when right When first data message carries out first network function treatment, the first flow table that can be issued according to SDN controller is by the first data The destination address of message is revised as the address of the first Microsoft Loopback Adapter, and OvS software only needs for the data message to be sent to the first void Quasi- network interface card calls the first network function of binding therewith by the first Microsoft Loopback Adapter, can be achieved with carrying out the first data message First network function treatment, function performed by OvS software are still to carry out turning for data message according to the flow table that controller issues Hair, the function of OvS software itself do not change.Therefore, device provided in an embodiment of the present invention is not needed to OvS software Itself carries out any additional setting, can add and call newly-increased network function, simplify the addition of newly-increased network function And calling process, the cost of addition network function is thereby reduced, the time of addition network function is shortened.

As shown in figure 8, a kind of data processing equipment based on SDN provided in an embodiment of the present invention, sets applied to SDN network It is standby, at least one Microsoft Loopback Adapter is provided in the SDN network equipment, each Microsoft Loopback Adapter is tied up with a kind of network function in advance Fixed, described device includes:

Data message receiving module 801, for receiving the first data message；

First address modified module 802, for according to and matched first flow table of first data message, described in modification The destination address of first data message；

First processing module 803, for being described first virtual in the modified destination address of the first data message In the case where the address of network interface card, first data message is sent to first Microsoft Loopback Adapter, is called and first void The first network function of quasi- network card binding carries out the first network function treatment to first data message, obtains second Data message；

Second judgment module 804 whether there is and second data message in the SDN network equipment for judging The second flow table matched obtains the second judging result；

Third trigger module 805, for triggering the second processing mould in the case where second judging result, which is, is Block；

4th trigger module 806 is used in the case where second judging result is no, by second data message It is sent to the SDN controller connecting with the SDN network equipment, and is received that the SDN controller issues with second number According to the second flow table of message matching, the Second processing module is then triggered；

Second processing module 807, for basis and matched second flow table of second data message, modification described second The destination address of data message is forwarded according to modified destination address；

First forwarding module 808, for being first physics in the modified destination address of the first data message In the case where the address of network interface card, then by first data message forwarding to first physical network card.

It should be noted that module 801 to 803,807 and 808 in the present embodiment, it can be with embodiment shown in fig. 6 In module 601 to 605 correspondence it is identical.

It is not difficult to find out that a kind of data processing equipment based on SDN that present invention embodiment shown in Fig. 8 provides, when right When first data message carries out first network function treatment, the first flow table that can be issued according to SDN controller is by the first data The destination address of message is revised as the address of the first Microsoft Loopback Adapter, and OvS software only needs for the data message to be sent to the first void Quasi- network interface card calls the first network function of binding therewith by the first Microsoft Loopback Adapter, can be achieved with carrying out the first data message First network function treatment, function performed by OvS software are still to carry out turning for data message according to the flow table that controller issues Hair, the function of OvS software itself do not change.Therefore, device provided in an embodiment of the present invention is not needed to OvS software Itself carries out any additional setting, can add and call newly-increased network function, simplify the addition of newly-increased network function And calling process, the cost of addition network function is thereby reduced, the time of addition network function is shortened.

It should be noted that Fig. 7 and embodiment shown in Fig. 8 focus on illustrating respective difference, actually answering In, the technical solution that the two embodiments provide can combined application.

Optionally, in a kind of specific embodiment provided in an embodiment of the present invention, in Fig. 6 to any reality shown in Fig. 8 It applies in example, Second processing module 607, Second processing module 707 or Second processing module 807 may include:

Submodule is modified in second address, for according to and matched second flow table of second data message, described in modification The destination address of second data message；

First forwarding submodule, for being the second Microsoft Loopback Adapter in the modified destination address of the second data message In the case where address, second data message is sent to second Microsoft Loopback Adapter；

Second forwarding submodule, for being the second physical network card in the modified destination address of the second data message In the case where address, second data message is sent to second physical network card.

It can be seen that the data processing equipment provided in an embodiment of the present invention based on SDN, different network function can be called It can repeatedly be handled data message is received, more meet the demand of user.

For device embodiment, since it is substantially similar to the method embodiment, related so being described relatively simple Place illustrates referring to the part of embodiment of the method.

It should be noted that, in this document, relational terms such as first and second and the like are used merely to a reality Body or operation are distinguished with another entity or operation, are deposited without necessarily requiring or implying between these entities or operation In any actual relationship or order or sequence.Moreover, the terms "include", "comprise" or its any other variant are intended to Non-exclusive inclusion, so that the process, method, article or equipment including a series of elements is not only wanted including those Element, but also including other elements that are not explicitly listed, or further include for this process, method, article or equipment Intrinsic element.In the absence of more restrictions, the element limited by sentence "including a ...", it is not excluded that There is also other identical elements in process, method, article or equipment including the element.

Each embodiment in this specification is all made of relevant mode and describes, same and similar portion between each embodiment Dividing may refer to each other, and each embodiment focuses on the differences from other embodiments.Especially for device reality For applying example, since it is substantially similar to the method embodiment, so being described relatively simple, related place is referring to embodiment of the method Part explanation.

The foregoing is merely illustrative of the preferred embodiments of the present invention, is not intended to limit the scope of the present invention.It is all Any modification, equivalent replacement, improvement and so within the spirit and principles in the present invention, are all contained in protection scope of the present invention It is interior.

Claims

1. a kind of data processing method based on SDN, which is characterized in that be applied to SDN network equipment, the SDN network equipment In be provided at least one Microsoft Loopback Adapter, each Microsoft Loopback Adapter is bound with a kind of network function in advance, which comprises

Receive the first data message；

According to matched first flow table of first data message, modify the destination address of first data message；It is described First flow table is issued by the SDN controller connecting with the SDN network equipment, wherein including: with first data message pair The address for the first Microsoft Loopback Adapter answered, or the address of the first physical network card corresponding with first data message；Wherein, described The address of first Microsoft Loopback Adapter be by the SDN controller, the address of network function and Microsoft Loopback Adapter according to the pre-stored data it Between corresponding relationship determine；

If the modified destination address of the first data message is the address of first Microsoft Loopback Adapter, by first data Message is sent to first Microsoft Loopback Adapter, calls the first network function with first Microsoft Loopback Adapter binding, to described the One data message carries out the first network function treatment, obtains the second data message；

According to matched second flow table of second data message, modify the destination address of second data message, according to Modified destination address is forwarded；

If the modified destination address of the first data message is the address of first physical network card, by first number First physical network card is forwarded to according to message.

2. the method according to claim 1, wherein in the basis and first data message matched Before the step of one flow table, the destination address of modification first data message, the method also includes:

Judging whether there is in the SDN network equipment sentences with matched first flow table of first data message, acquisition first Disconnected result；

If first judging result is yes, then executes the basis and matched first flow table of first data message, repair The step of changing the destination address of first data message；

If first judging result be it is no, first data message is sent to the SDN connecting with the SDN network equipment Controller, and receive that the SDN controller issues with matched first flow table of first data message, then execute described in According to matched first flow table of first data message, the step of modifying the destination address of first data message.

3. the method according to claim 1, wherein in the basis and second data message matched Before the step of two flow tables, the destination address of modification second data message, the method also includes:

Judging whether there is in the SDN network equipment sentences with matched second flow table of second data message, acquisition second Disconnected result；

If second judging result is yes, then executes the basis and matched second flow table of second data message, repair The step of changing the destination address of second data message；

If second judging result be it is no, second data message is sent to the SDN connecting with the SDN network equipment Controller, and receive that the SDN controller issues with matched second flow table of second data message, then execute described in According to matched second flow table of second data message, the step of modifying the destination address of second data message.

4. method according to claim 1-3, which is characterized in that the basis and second data message The second flow table matched modifies the destination address of second data message, the step being forwarded according to modified destination address Suddenly include:

If the modified destination address of the second data message is the address of the second Microsoft Loopback Adapter, by second data message It is sent to second Microsoft Loopback Adapter；

If the modified destination address of the second data message is the address of the second physical network card, by second data message It is sent to second physical network card.

5. the method according to claim 1, wherein each virtual in the SDN network equipment to being arranged in Network interface card includes: with a kind of process that network function is bound in advance

Alternatively, establishing the routing table or network-driven comprising the corresponding relationship between network function and the address of Microsoft Loopback Adapter.

6. method described in any one of -3,5 according to claim 1, which is characterized in that the first network function includes: net Network address conversion, data message encapsulation, data message decapsulation, data message encryption, data message decryption, data message pressure Contracting, data message decompression, network layer protocol conversion, transport layer port conversion and application layer protocol modification.

7. method described in any one of -3,5 according to claim 1, which is characterized in that the SDN network equipment is Open VSwitch software host.

8. a kind of data processing equipment based on SDN, which is characterized in that be applied to SDN network equipment, the SDN network equipment In be provided at least one Microsoft Loopback Adapter, each Microsoft Loopback Adapter is bound with a kind of network function in advance, and described device includes:

Data message receiving module, for receiving the first data message；

First address modified module modifies first number for basis and matched first flow table of first data message According to the destination address of message；First flow table is issued by the SDN controller connecting with the SDN network equipment, wherein including: The address of the first Microsoft Loopback Adapter corresponding with first data message, or the first physics corresponding with first data message The address of network interface card；Wherein, the address of first Microsoft Loopback Adapter is by the SDN controller, network function according to the pre-stored data What the corresponding relationship between energy and the address of Microsoft Loopback Adapter determined；

First processing module, on the ground that the modified destination address of the first data message is first Microsoft Loopback Adapter In the case where location, first data message is sent to first Microsoft Loopback Adapter, calling is tied up with first Microsoft Loopback Adapter Fixed first network function carries out the first network function treatment to first data message, obtains the second data message；

Second processing module modifies second datagram for basis and matched second flow table of second data message The destination address of text, is forwarded according to modified destination address；

First forwarding module, on the ground that the modified destination address of the first data message is first physical network card In the case where location, then by first data message forwarding to first physical network card.

9. device according to claim 8, which is characterized in that described device further include:

First judgment module, for judge in the SDN network equipment with the presence or absence of with first data message matched the One flow table obtains the first judging result；

First trigger module, for triggering first address modified module in the case where first judging result, which is, is；

Second trigger module, in the case where first judging result is no, first data message to be sent to The SDN controller being connect with the SDN network equipment, and it is issuing with first data message to receive the SDN controller Then matched first flow table triggers first address modified module.

10. device according to claim 8, which is characterized in that described device further include:

Second judgment module, for judge in the SDN network equipment with the presence or absence of with second data message matched the Two flow tables obtain the second judging result；

4th trigger module, in the case where second judging result is no, second data message to be sent to The SDN controller being connect with the SDN network equipment, and it is issuing with second data message to receive the SDN controller Matched second flow table, then triggers the Second processing module.