CN106713137B - VPN method, device and system based on segmented routing and SDN technology - Google Patents
VPN method, device and system based on segmented routing and SDN technology Download PDFInfo
- Publication number
- CN106713137B CN106713137B CN201510777433.2A CN201510777433A CN106713137B CN 106713137 B CN106713137 B CN 106713137B CN 201510777433 A CN201510777433 A CN 201510777433A CN 106713137 B CN106713137 B CN 106713137B
- Authority
- CN
- China
- Prior art keywords
- label
- information
- target
- segment
- data packet
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Landscapes
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The invention discloses a VPN data transmission method, a device and a system based on segmented routing in an SDN network, wherein the method comprises the following steps: the entrance Provider Edge (PE) encapsulates the information sent by the first CE into a data packet containing label information according to the label of the second CE and the label of the target PE; and the ingress PE sends the encapsulated data packet to a core layer device P, the core layer device establishes a forwarding path according to a label of a target PE in the data packet, routes the data packet to the target PE, and the target PE routes information sent by a first CE in the data packet to a second CE according to a label of the second CE. According to the method, the device and the system, the VPN routing information is issued and forwarded by the SDN controller in a centralized deployment mode, the operation and maintenance workload is reduced, and the service operation efficiency of operators is improved.
Description
Technical Field
The invention relates to the field of SDN in data communication, in particular to a VPN data transmission method, device and system based on segmented routing in an SDN network.
Background
A three-layer VPN (Virtual Private Network) is an important application of an IP (Internet Protocol), and the currently most commonly used technical scheme is a BGP (Border gateway Protocol) MPLS (Multi-Protocol Label Switch) VPN, but there are three problems in the prior art: a special signaling protocol LDP (Label distribution protocol) needs to exist, and a core node needs to store all LSP (Label Switched Path) states, but the LSP states are related to the number of PEs (Provider Edge devices), and the PEs configure the PE one by one with a large workload and poor expandability. If the MP-BGP protocol is used for announcing the user route, in order to ensure the connectivity between BGP peers, a full connection relation needs to be established between the BGP peers, an n-square problem exists in the configuration process, and when the number of the BGP peers is large, the consumption of network resources and CPU (Central Processing Unit) resources is large.
Therefore, it is necessary to provide a data transmission method in an SDN network, so as to improve the scalability of the network and reduce the consumption of network resources and CPU resources.
Disclosure of Invention
One technical problem to be solved by the present disclosure is how to provide a data transmission method in an SDN network, which improves the scalability of the network and reduces the consumption of network resources and CPU resources.
The present disclosure provides a segment routing-based VPN data transmission method in an SDN network, including: the entrance Provider Edge (PE) encapsulates the information sent by the first CE into a data packet containing label information according to the label of the second CE and the label of the target PE; and the ingress PE sends the encapsulated data packet to a core layer device P, the core layer device establishes a forwarding path according to a label of a target PE in the data packet, routes the data packet to the target PE, and the target PE routes information sent by a first CE in the data packet to a second CE according to a label of the second CE.
Further, before encapsulating, by the ingress provider edge PE, the information sent by the first CE into a data packet containing label information according to the label of the second user edge CE and the label of the destination PE, the method includes: the controller receives interface information reported by the inlet PE and the target PE based on the adjacent segment information adj segment, wherein the interface information comprises interface information of the first CE and the second CE and interface information of the inlet PE and the target PE; the controller uniformly defines segment label information of each PE, label information of a routing identifier RD of the CE and a routing destination RT according to the received interface information; and the controller issues the label information by using a southbound protocol, wherein the southbound protocol comprises a PECP (peer-to-peer protocol) of a path computation element, a BGP-LS (border gateway protocol link state) and a Netconfig (network environment setting command).
Further, the receiving, by the controller, interface information reported by the ingress PE and the target PE based on the adj segment information adj segment includes: when defining the VRF, binding adjacent segment information adj-segment, one label corresponding to one virtual route forwarding table and storing the label in the segment route label library.
Further, the encapsulating, by the ingress provider edge PE, the information sent by the first CE into a data packet containing label information according to the label of the second user edge CE and the label of the target PE includes: and the entry PE inserts the labels of the target PE and the second CE into the information sent by the first CE, wherein the label of the target PE is placed at the stack head of the interface label, and the label of the second CE is placed at the stack bottom of the interface label.
Further, by adopting the IGP protocol, the routing data information intercommunication of the devices in the domain is realized, and each device does not need to store any state information and run other signaling protocols such as LDP, RSVP-TE and the like.
The invention also provides a segment routing-based VPN data transmission device in an SDN network, comprising: the encapsulation module is used for encapsulating the information sent by the first CE into a data packet containing label information according to the label of the second user edge equipment CE and the label of the target PE; and the core layer device establishes a forwarding path according to the label of the target PE in the data packet, routes the data packet to the target PE, and the target PE routes the information sent by the first CE to the second CE according to the label of the second CE.
Further, the encapsulation module is configured to insert the labels of the target PE and the second CE into the information sent by the first CE, where the label of the target PE is placed at the stack head of the interface label, and the label of the second CE is placed at the stack bottom of the interface label.
The invention also provides a segment routing-based VPN data transmission system in an SDN network, which comprises the following steps: the system comprises provider edge equipment PE of a VPN data transmission device based on segmented routing in the SDN network, core layer equipment P, user edge equipment CE and a controller; the controller receives interface information reported by the PE based on adjacent segment information adj segment, wherein the interface information comprises interface information of CE and interface information of the PE; the controller uniformly defines PE and label information of a routing identifier RD and a routing destination RT of a user CE; and the controller issues the label information by using a southbound protocol, wherein the southbound protocol comprises a PECP (peer-to-peer protocol) of a path computation element, a BGP-LS (border gateway protocol link state), and a Netconfig (network environment setting command).
Further, the PEs include an ingress PE and a destination PE, and the CEs include a first CE and a second CE; the ingress PE sends the encapsulated packet to a core layer device P, the core layer device P establishes a forwarding path according to a label of a target PE in the packet, routes the packet to the target PE, and shares a load when multiple forwarding paths exist; and the target PE routes the information sent by the first CE to the second CE according to the label of the second CE.
Furthermore, when defining the VRF, binding adjacent segment information adj-segment, one label corresponding to one virtual route forwarding table, and the controller stores the label in the segment route label library.
Furthermore, the routing information intercommunication of the devices in the domain is realized by adopting an IGP (extended interior gateway protocol), and each device does not need to store any state information. Thus, there is no need to run other signaling protocols such as LDP, RSVP-TE, etc.
According to the VPN data transmission method, device and system based on the segmented routing in the SDN, the SDN controller in a centralized deployment mode is used for issuing VPN routing information for forwarding, operation and maintenance workload is reduced, service operation efficiency of operators is improved, expandability of the network is improved, and consumption of network resources and CPU resources is reduced.
Drawings
Fig. 1 shows a flowchart of a segment routing-based VPN data transmission method in an SDN network according to an embodiment of the present invention.
Fig. 2 is a schematic diagram illustrating an SDN network controller implementing VPN routing information distribution according to an embodiment of the present invention.
Fig. 3 is a schematic diagram illustrating data packet transmission in an SDN network according to an embodiment of the present invention.
Fig. 4 is a schematic structural diagram of a segment routing-based VPN data transmission apparatus in an SDN network according to an embodiment of the present invention.
Fig. 5 is a block diagram illustrating a structure of a segment routing-based VPN data transmission system in an SDN network according to an embodiment of the present invention.
Fig. 6 shows a block diagram of a VPN data transmission apparatus based on segment routing in an SDN network according to another embodiment of the present invention.
Detailed Description
The present invention now will be described more fully hereinafter with reference to the accompanying drawings, in which exemplary embodiments of the invention are shown.
Fig. 1 shows a flowchart of a segment routing-based VPN data transmission method in an SDN network according to an embodiment of the present invention. As shown in fig. 1, the method mainly includes:
step 100, the ingress provider edge PE encapsulates the information sent by the first CE into a data packet containing label information according to the label of the second user edge CE (customer edge) and the label of the target PE.
In one embodiment, the controller receives interface information reported by an ingress PE and a target PE based on adjacent segment information (adj segment), where the interface information includes interface information of a first CE and a second CE and interface information of the ingress PE and the target PE; the controller defines uniformly segment label information of each PE and label information of RD (Route distinguisher, Route identifier or Route distinguisher) and RT (Route Targets) of CE; and the controller issues the label information by using a southbound protocol, wherein the southbound protocol comprises a PECP (peer-to-peer protocol) of a path computation element, a BGP-LS (border gateway protocol link state) and a Netconfig (network environment setting command).
In one embodiment, the receiving, by the controller, the interface information reported by the ingress PE and the target PE based on the adjacency segment information adj segment includes: when defining the VRF, binding adjacent segment information adj-segment, one label corresponding to one virtual route forwarding table and storing the label in the segment route label library.
102, the ingress PE sends the encapsulated packet to a core layer device P, the core layer device establishes a forwarding path according to a label of a target PE in the packet, and routes the packet to the target PE, and the target PE routes information sent by a first CE in the packet to a second CE according to a label of the second CE.
In one embodiment, the ingress PE inserts the labels of the target PE and the second CE into the information sent by the first CE, where the label of the target PE is placed at the top of the stack of the interface label, and the label of the second CE is placed at the bottom of the stack of the interface label.
In one embodiment, the routing data information intercommunication of the devices in the domain is realized by adopting an extended IGP (Interior gateway protocol), and each device does not need to store any state information. Thus, there is no need to run other signaling protocols such as LDP, RSVP-TE, etc.
The VPN data transmission method based on the segmented routing in the SDN network provided by the embodiment of the invention uses the SDN controller which is deployed in a centralized manner to release VPN routing information for forwarding, thereby reducing the operation and maintenance workload, improving the service operation efficiency of operators, improving the service operation efficiency of the operators, improving the expandability of the network and reducing the consumption of network resources and CPU resources.
Fig. 2 is a schematic diagram illustrating an SDN network controller implementing VPN routing information distribution according to an embodiment of the present invention. As shown in fig. 2, the process mainly includes:
in step 201, the PE 22 reports local user interface information to the controller 21, where the interface information is bound with an adj-segment tag. The adj-segment is bound when defining a Virtual Routing Forwarding (VRF) of a user, where the binding example is: label a corresponds to VRF A, Label B corresponds to VRF B, wherein, a client corresponds to a VRF, if laber a exists in segment routing tag library, it is local valid.
Step 202, the controller 21 issues user label information using a south protocol such as PCEP/BGP-LS/Netconfig, uniformly defines the labels of RD and RT, records the labels of each PE and P device, and selects an optimal forwarding path in the forwarding process, thereby implementing the exchange of user routing information and the construction of VPN topology.
Specifically, when RT and RD are defined, in the prior art, PE is used to distribute them through BGP, but BGP connections (n square connections) or RR are established between PEs in the whole network. Compared with the prior art, after the controller is adopted for control, the part of work can be centralized in the controller part, distributed management is changed into centralized control, and encapsulation and forwarding of user data can be realized.
By using the segmented routing technology, the devices along the way do not need to carry out label conversion, the operation and maintenance workload is reduced, and other signaling protocols such as LDP (label distribution protocol) can be saved, so that the intermediate nodes do not need label conversion and only need to forward according to a label stack, the forwarding process is irrelevant to the controller, and the operation efficiency of the operation business is improved.
Fig. 3 is a schematic diagram illustrating data packet transmission in an SDN network according to an embodiment of the present invention. As shown in fig. 3, the transmission flow mainly includes: PE 106 needs to send a packet to PE87, first place customer label 9001 of PE87 at the bottom of a label stack, then place label 87 of PE87 at the top of a label stack, and the controller sets the transmission path of the packet to propagate through core network devices 489 and 314, and along the way, core network device P does not need to change labels, and only needs to forward the packet according to the label of the stack header, and after PE87 receives the packet, pops up stack header label 87, reads stack bottom label 9001, and transfers the packet to a target CE with a link label of 9001.
After receiving the routing request, the PE searches the routing table, finds the target PE and the label where the link is located, and then puts the target label on, where 87 is the target PE label and 9001 is the target link. Compared with the prior art that labels are transmitted by an LDP technology and need to be changed along the way, the label can be transmitted along the way and cannot be changed until the label reaches a target PE, so that the information transmission method based on the segmented routing does not need BGP and an LDP protocol, the intermediate state is reduced, an end-to-end control protocol is not needed, the path information is stored in a data packet, and the equipment load is reduced; in a centralized route propagation mode, connection does not need to be established between the PEs, and RR is not needed; and thirdly, path optimization can be more conveniently carried out in a centralized mode.
Fig. 4 is a schematic structural diagram of a segment routing-based VPN data transmission apparatus in an SDN network according to an embodiment of the present invention, where the apparatus 400 includes:
an encapsulating module 401, configured to encapsulate information sent by the first CE into a data packet containing label information according to the label of the second user edge device CE and the label of the target PE;
a forwarding module 402, configured to send the encapsulated packet to a core layer device P, where the core layer device establishes a forwarding path according to a label of a target PE in the packet, and routes the packet to the target PE, and the target PE routes information sent by a first CE to a second CE according to a label of the second CE.
In an embodiment, the encapsulating module 401 is configured to insert the labels of the target PE and the second CE into the information sent by the first CE, where the label of the target PE is placed at the stack head of the interface label, and the label of the second CE is placed at the stack bottom of the interface label.
Fig. 5 is a block diagram illustrating a structure of a segment routing-based VPN data transmission system in an SDN network according to an embodiment of the present invention, where, as shown in fig. 5, the system includes: a provider edge device PE501 including an information transfer apparatus based on a segment route, and a core layer device P502, a customer edge device CE 503, a controller 504; the controller 504 receives interface information reported by the PE501 based on the adj segment information, where the interface information includes interface information of the CE and interface information of the PE; the controller uniformly defines segment label information of the PE, and label information of a routing identifier RD and a routing destination RT of the user CE; the controller 504 issues the label information using a southbound protocol, wherein the southbound protocol includes a path Computation Element pecp (path Computation Element protocol) protocol, a border gateway protocol Link State BGP-LS (BGP Link-State), and a network environment setting command Netconfig to issue the label information.
In one embodiment, the PEs 501 include an ingress PE and a destination PE, and the CEs 503 include a first CE, a second CE; the ingress PE sends the encapsulated packet to a core layer device P, and the core layer device 502 establishes a forwarding path according to a label of a target PE in the packet, and routes the packet to the target PE; and the target PE routes the information sent by the first CE to the second CE according to the label of the second CE.
In one embodiment, the adjacency-segment information adj-segment is bound when defining the VRF, and one label corresponds to one virtual routing forwarding table, and the controller 504 stores the label in the segment routing label library.
In one embodiment, by adopting the IGP protocol, the devices in the domain can communicate routing information without storing any state information.
Fig. 6 shows a block diagram of a VPN data transmission apparatus based on segment routing in an SDN network according to another embodiment of the present invention. The segment routing based information transfer device 600 may be a host server with computing capabilities, a personal computer PC, or a portable computer, mobile terminal, or other terminal. The specific embodiments of the present invention do not limit the specific implementation of the compute node.
The segment routing based information transmission apparatus 600 includes a processor (processor)601, a communication Interface (Communications Interface)602, a memory (memory)603, and a bus 604. The processor 601, the communication interface 602, and the memory 603 communicate with each other via the bus 604.
The communication interface 602 is used to communicate with network devices, including, for example, virtual machine management centers, shared storage, and the like.
The processor 601 is used to execute programs. The processor 601 may be a central processing unit CPU or may be an application Specific Integrated circuit asic or one or more Integrated circuits configured to implement embodiments of the present invention.
The memory 603 is used for storing files. The memory 603 may comprise a high-speed RAM memory, and may further comprise a non-volatile memory (e.g., at least one disk memory). The memory 603 may also be a memory array. The memory 603 may also be partitioned, and the blocks may be combined into virtual volumes according to certain rules.
In one embodiment, the program may be a program code including computer operation instructions. The procedure is particularly useful for: according to the label of the second user edge device CE and the label of the target PE, the information sent by the first CE is encapsulated into a data packet containing label information; and sending the encapsulated data packet to a core layer device P, wherein the core layer device establishes a forwarding path according to a label of a target PE in the data packet, routes the data packet to the target PE, and the target PE routes information sent by a first CE in the data packet to a second CE according to a label of the second CE.
In one embodiment, before encapsulating the information sent by the first CE into a data packet containing label information according to the label of the second customer edge device CE and the label of the target PE, the method includes: the controller receives interface information reported by the inlet PE and the target PE based on the adjacent segment information adj segment, wherein the interface information comprises interface information of the first CE and the second CE and interface information of the inlet PE and the target PE; the controller uniformly defines segment label information of each PE, route identification RD of CE and label information of route target RT according to the received interface information; and the controller issues the label information by using a southbound protocol, wherein the southbound protocol comprises a PECP (peer-to-peer protocol) of a path computation element, a BGP-LS (border gateway protocol link state) and a Netconfig (network environment setting command).
In one embodiment, the receiving, by the controller, interface information reported by the ingress PE and the target PE based on the adjacency segment information adjsegment includes: when defining the VRF, binding adjacent segment information adj-segment, one label corresponding to one virtual route forwarding table and storing the label in the segment route label library.
In one embodiment, the encapsulating, by the ingress provider edge PE, the information sent by the first CE into a data packet containing label information according to the label of the second user edge CE and the label of the destination PE includes: and the entry PE inserts the labels of the target PE and the second CE into the information sent by the first CE, wherein the label of the target PE is placed at the stack head of the interface label, and the label of the second CE is placed at the stack bottom of the interface label.
In one embodiment, by adopting the IGP protocol, the routing data information intercommunication of the devices in the domain is realized, and the devices do not need to store any state information.
Those of ordinary skill in the art will appreciate that the various illustrative elements and algorithm steps described in connection with the embodiments disclosed herein may be implemented as electronic hardware, or combinations of computer software and electronic hardware. Whether such functionality is implemented as hardware or software depends upon the particular application and design constraints imposed on the solution. Those skilled in the art may select different ways to implement the described functionality for specific applications, but such implementation decisions should not be interpreted as causing a departure from the scope of the present invention.
If the functionality is implemented in the form of computer software and sold or used as a stand-alone product, it is considered that all or part (e.g., a part contributing to the prior art) of the technical solution of the present invention is embodied in the form of a computer software product to some extent. The computer software product is generally stored in a non-volatile storage medium readable by a computer and includes several instructions for causing a computer device (which may be a personal computer, a server, or a network device) to perform all or part of the steps of the methods according to the embodiments of the present invention. The storage medium includes various media capable of storing program codes, such as a usb disk, a removable hard disk, a Read-Only Memory (ROM), a Random Access Memory (RAM), a magnetic disk, or an optical disk.
The description of the present invention has been presented for purposes of illustration and description, and is not intended to be exhaustive or limited to the invention in the form disclosed. Many modifications and variations will be apparent to practitioners skilled in this art. The embodiment was chosen and described in order to best explain the principles of the invention and the practical application, and to enable others of ordinary skill in the art to understand the invention for various embodiments with various modifications as are suited to the particular use contemplated.
Claims (9)
1. A VPN data transmission method based on segmented routing in an SDN network is characterized by comprising the following steps:
the method comprises the steps that an entrance Provider Edge (PE) encapsulates information sent by a first user edge (CE) into a data packet containing label information according to a label of a second CE and a label of a target PE, wherein the entrance PE inserts the labels of the target PE and the second CE into the information sent by the first CE, the label of the target PE is placed at the stack head of an interface label, and the label of the second CE is placed at the stack bottom of the interface label;
and the ingress PE sends the encapsulated data packet to a core layer device P, the core layer device establishes a forwarding path according to a label of a target PE in the data packet, routes the data packet to the target PE, and the target PE routes information sent by a first CE in the data packet to a second CE according to a label of the second CE.
2. The method according to claim 1, wherein before the ingress provider edge PE encapsulating the information sent by the first CE into a packet containing label information according to the label of the second customer edge CE and the label of the destination PE, comprises:
the controller receives interface information reported by the inlet PE and the target PE based on the adjacent segment information adj segment, wherein the interface information comprises interface information of the first CE and the second CE and interface information of the inlet PE and the target PE;
the controller uniformly defines segment label information of each PE, and label information of a routing identifier RD and a routing destination RT of a CE according to the received interface information;
and the controller issues the label information by using a southbound protocol, wherein the southbound protocol comprises a PECP (peer-to-peer protocol) of a path computation element, a BGP-LS (border gateway protocol link state) and a Netconfig (network environment setting command).
3. The method according to claim 2, wherein the controller receiving the interface information reported by the ingress PE and the target PE based on the adjacency segment information adj segment comprises:
when defining the VRF, binding adjacent segment information adj-segment, one label corresponding to one virtual route forwarding table and storing the label in the segment route label library.
4. The method of claim 1, wherein the routing data information interworking of the devices in the domain is achieved by using an IGP (extended interior gateway protocol) protocol, and each device does not need to store any state information.
5. A device for segment routing based VPN data transmission in an SDN network, comprising:
the encapsulation module is used for encapsulating the information sent by the first CE into a data packet containing label information according to the label of the second user edge device CE and the label of the target PE, wherein the labels of the target PE and the second CE are inserted into the information sent by the first CE, the label of the target PE is placed at the stack head of the interface label, and the label of the second CE is placed at the stack bottom of the interface label;
and the core layer device establishes a forwarding path according to the label of the target PE in the data packet, routes the data packet to the target PE, and the target PE routes the information sent by the first CE in the data packet to the second CE according to the label of the second CE.
6. A segment routing based VPN data transmission system in an SDN network, comprising:
provider edge device PE comprising a segment routing based VPN data transport arrangement in an SDN network according to claim 5, and core layer device P, customer edge device CE, controller;
the controller receives interface information reported by the PE based on adjacent segment information adj segment, wherein the interface information comprises interface information of CE and interface information of the PE; the controller uniformly defines segment label information of the PE, and label information of a routing identifier RD and a routing destination RT of the user CE; and the controller issues the label information by using a southbound protocol, wherein the southbound protocol comprises a PECP (peer-to-peer protocol) of a path computation element, a BGP-LS (border gateway protocol link state), and a Netconfig (network environment setting command).
7. The system of claim 6, wherein the PEs include an ingress PE and a destination PE, and wherein the CEs include a first CE, a second CE; the ingress PE sends the encapsulated packet to a core layer device P, the core layer device establishes a forwarding path according to a label of a target PE in the packet, routes the packet to the target PE, and shares a load when multiple forwarding paths exist; and the target PE routes the information sent by the first CE in the data packet to the second CE according to the label of the second CE.
8. The system of claim 6, wherein:
when defining the VRF, binding adjacent segment information adj-segment, one label corresponding to one virtual route forwarding table, and the controller stores the label in the segment route label base.
9. The system of claim 6, wherein:
the routing information intercommunication of the devices in the domain is realized by adopting an IGP (extended interior gateway protocol), and each device does not need to store any state information.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510777433.2A CN106713137B (en) | 2015-11-13 | 2015-11-13 | VPN method, device and system based on segmented routing and SDN technology |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510777433.2A CN106713137B (en) | 2015-11-13 | 2015-11-13 | VPN method, device and system based on segmented routing and SDN technology |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN106713137A CN106713137A (en) | 2017-05-24 |
| CN106713137B true CN106713137B (en) | 2020-02-18 |
Family
ID=58930311
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201510777433.2A Active CN106713137B (en) | 2015-11-13 | 2015-11-13 | VPN method, device and system based on segmented routing and SDN technology |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN106713137B (en) |
Families Citing this family (14)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN109327374B (en) * | 2017-07-31 | 2021-09-28 | 上海层峰网络科技有限公司 | System and method for realizing three-layer VPN network access |
| CN108259341B (en) * | 2017-12-06 | 2020-12-29 | 新华三技术有限公司 | Prefix label distribution method and SDN controller |
| CN108259303B (en) * | 2017-12-25 | 2020-12-04 | 新华三技术有限公司 | Message forwarding method and device |
| CN110300061A (en) * | 2018-03-23 | 2019-10-01 | 中兴通讯股份有限公司 | A kind of method, equipment and storage medium for noticing binding information |
| CN110830354B (en) * | 2018-08-08 | 2021-12-03 | 北京华为数字技术有限公司 | Data forwarding method, device, equipment and storage medium |
| CN111131038B (en) * | 2018-10-31 | 2022-04-19 | 中国电信股份有限公司 | Cross-domain message forwarding method, system and storage system |
| CN110035012B (en) * | 2018-12-25 | 2021-09-14 | 中国银联股份有限公司 | SDN-based VPN flow scheduling method and SDN-based VPN flow scheduling system |
| CN110099388B (en) * | 2019-03-21 | 2021-11-16 | 世讯航空技术有限公司 | Satellite mobile communication method fused with 5G network |
| CN112398732B (en) * | 2019-08-12 | 2023-09-12 | 迈普通信技术股份有限公司 | Message processing method, device and system |
| CN110460507A (en) * | 2019-09-11 | 2019-11-15 | 赛尔网络有限公司 | Service bearer method, apparatus |
| CN112671646B (en) * | 2019-10-16 | 2023-01-10 | 中国移动通信有限公司研究院 | Information processing method, device and equipment and computer readable storage medium |
| CN111181938A (en) * | 2019-12-20 | 2020-05-19 | 北京交通大学 | Edge calculation distributed data encryption transmission method based on fragment transmission |
| CN114124776A (en) * | 2020-08-25 | 2022-03-01 | 中兴通讯股份有限公司 | Information processing method, network controller, node, and computer-readable storage medium |
| CN113194033B (en) * | 2021-03-29 | 2022-04-01 | 新华三大数据技术有限公司 | Message forwarding method and device based on SDN (software defined network) segment routing networking and storage medium |
Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102394804A (en) * | 2011-11-02 | 2012-03-28 | 中兴通讯股份有限公司 | VPN system building method and VPN system |
| CN104753713A (en) * | 2013-12-31 | 2015-07-01 | 华为技术有限公司 | SDN (Self-Defending Network) service deployment method and SDN controller |
| CN105049350A (en) * | 2014-04-17 | 2015-11-11 | 思科技术公司 | Segment routing - egress peer engineering (SP-EPE) |
Family Cites Families (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US8711855B1 (en) * | 2012-12-18 | 2014-04-29 | Juniper Networks, Inc. | Topology discovery, control channel establishment, and datapath provisioning within an aggregation network with centralized control |
-
2015
- 2015-11-13 CN CN201510777433.2A patent/CN106713137B/en active Active
Patent Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102394804A (en) * | 2011-11-02 | 2012-03-28 | 中兴通讯股份有限公司 | VPN system building method and VPN system |
| CN104753713A (en) * | 2013-12-31 | 2015-07-01 | 华为技术有限公司 | SDN (Self-Defending Network) service deployment method and SDN controller |
| CN105049350A (en) * | 2014-04-17 | 2015-11-11 | 思科技术公司 | Segment routing - egress peer engineering (SP-EPE) |
Also Published As
| Publication number | Publication date |
|---|---|
| CN106713137A (en) | 2017-05-24 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN106713137B (en) | VPN method, device and system based on segmented routing and SDN technology | |
| CN102959910B (en) | The notice of change controller for being configured the packets forwarding of network element by communication channel | |
| EP3210345B1 (en) | Transparent network service header path proxies | |
| EP2995042B1 (en) | Data plane learning of bi-directional service chains | |
| CN102884763B (en) | Cross-data-center virtual machine migration method, service control gateway and system | |
| TW202026896A (en) | Asynchronous object manager in a network routing environment | |
| US20220272032A1 (en) | Malleable routing for data packets | |
| WO2014136864A1 (en) | Packet rewriting apparatus, control apparatus, communication system, packet transmitting method and program | |
| CN104704779A (en) | Method and apparatus for accelerating forwarding in software-defined networks | |
| CN107733795B (en) | Ethernet virtual private network EVPN and public network intercommunication method and device | |
| US20160006642A1 (en) | Network-wide service controller | |
| EP3253012B1 (en) | Method and apparatus for obtaining port path | |
| CN110971441A (en) | Simplified configuration of a multi-level network architecture | |
| CN105162704A (en) | Multicast replication method and device in Overlay network | |
| CN111147372B (en) | Downlink message sending and forwarding method and device | |
| US11923963B2 (en) | Managing satellite devices within a branch network | |
| WO2022057810A1 (en) | Service packet forwarding method, sr policy sending method, device, and system | |
| CN112751763A (en) | Message forwarding method, device, storage medium and system | |
| EP3484107B1 (en) | Parameter notification and obtaining methods and devices, and storage medium | |
| EP3399424B1 (en) | Using unified api to program both servers and fabric for forwarding for fine-grained network optimizations | |
| JP2016012909A (en) | Communication device, communication method and communication system | |
| US10205661B1 (en) | Control messages for scalable satellite device clustering control in a campus network | |
| US20130336321A1 (en) | Relay forward system, path control device, and edge apparatus | |
| EP2983333B1 (en) | A system and method for providing routes to physical residential gateways | |
| CN108123871B (en) | Equivalent multipath ECMP processing method and device |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |