CN107231321A

CN107231321A - Detect method, equipment and the network system of forward-path

Info

Publication number: CN107231321A
Application number: CN201610176681.6A
Authority: CN
Inventors: 宋伟; 张维
Original assignee: Huawei Technologies Co Ltd
Current assignee: Huawei Technologies Co Ltd
Priority date: 2016-03-25
Filing date: 2016-03-25
Publication date: 2017-10-03
Anticipated expiration: 2036-03-25
Also published as: CN107231321B

Abstract

The invention discloses a kind of method, equipment and network system for detecting forward-path, belong to network technique field.Controller sends N number of probe messages to access switch, each probe messages carry an intermediary switch mark, the N is equal to the intermediary switch mark difference that the number of intermediary switch and different probe messages are carried, and each intermediary switch is identified for one intermediary switch of unique mark；Receive the probe messages after at least one mark of addition first that egress switch is sent；The intermediary switch mark and the network topology structure prestored carried in probe messages according to this after at least one mark of addition first, determines the forward-path between the access switch and the egress switch.Controller need to only receive the probe messages after the mark of addition first of egress switch transmission in the present invention, you can determine the forward-path between access switch and egress switch, easy to operate, reduce the pressure of intermediary switch, improve flexibility.

Description

Detect method, equipment and the network system of forward-path

Technical field

The present invention relates to network technique field, more particularly to a kind of method, equipment and net for detecting forward-path Network system.

Background technology

Data center network generally includes to be connected with each other between multiple switch, multiple switch, constitutes many Paths.Part interchanger in these interchangers can send message as access switch, and part is handed over Message can be received as egress switch by changing planes, and part interchanger is only capable of as intermediary switch, right The message received is forwarded.And for specific access switch and egress switch, for a number According to stream, actual forward-path only has one between the access switch and egress switch, works as ingress switch During the confidential transmission message to egress switch, message can be by exchanging in the middle of at least one on the forward-path Machine, reaches the egress switch.

In the prior art, for the ease of being managed to data center network, it usually needs detection ingress switch Forward-path between machine and egress switch, detection method can comprise the steps：

1) controller sends probe messages to access switch, and the probe messages carry five-tuple, the five-tuple Including source IP address, source port, purpose IP address, destination interface and transport layer protocol.And, the controller All interchangers into data center network issue accesses control list (Access Control List, ACL) Matched rule, ACL matched rules include the five-tuple, and if ACL matched rules be used for make each interchanger The five-tuple carried in the message received is matched with the five-tuple in ACL matched rules, then is sent out to controller Message of sending that the match is successful.

2) access switch can be somebody's turn to do after the probe messages are received according to the five-tuple forwarding in probe messages Probe messages, then the probe messages can be by the forward-path between the access switch and egress switch Intermediary switch, reach egress switch.In the process, the intermediary switch on forward-path will Receive the probe messages, and according to the ACL matched rules determine the five-tuple that is carried in the probe messages with Five-tuple matching in ACL matched rules, now the intermediary switch on forward-path can be sent to controller Message that the match is successful.The probe messages will not be received without the intermediary switch on the forward-path, The match is successful message will not be sent to the controller.

3) controller receives at least one intermediary switch and sends the match is successful message, you can it is determined that sending The intermediary switch for message that the match is successful is the intermediary switch on forward-path, then according to this at least one The network topology structure of intermediary switch and the data center network is that can determine that access switch and go out oral sex Forward-path between changing planes.

But, it is necessary to be every detected data flow in each intermediary switch in above-mentioned detection process Upper configuration acl rule, and need all intermediary switch on forward-path to be performed both by sending to controller The operation for message that the match is successful, takes more device resource, and implementation process is complicated.

The content of the invention

In order to solve problem of the prior art, the embodiments of the invention provide it is a kind of detect forward-path method, Equipment and network system.The technical scheme is as follows：

First aspect includes there is provided a kind of method for detecting forward-path, methods described：

Controller sends N number of probe messages to access switch, and each probe messages are carried and exchanged in the middle of one Machine is identified, and the N is equal to the intermediary switch mark that the number of intermediary switch and different probe messages are carried Know difference, each intermediary switch is identified for one intermediary switch of unique mark；

The controller receives the probe messages after at least one mark of addition first that egress switch is sent, Obtain the intermediary switch mark carried in the probe messages after at least one described mark of addition first；

The network topology knot that the controller is identified and prestored according at least one intermediary switch got Structure, determines the forward-path between the access switch and the egress switch.

With reference in a first aspect, in the first possible implementation of first aspect, controller is to ingress switch Machine is sent before N number of probe messages, and methods described also includes：

The controller issues the first matched rule to each intermediary switch, and first matched rule is used for If during the intermediary switch carried in the probe messages that one intermediary switch of regulation is received identifies and is described Between interchanger intermediary switch mark it is identical, then the intermediary switch is the probe messages received Addition first is marked, and described first marks for indicating that egress switch will add the detection report after the first mark Text is sent to the controller.

With reference to any of the above-described kind of possible implementation of first aspect, second in first aspect may realization In mode, first matched rule is ACL matched rules.

With reference to any of the above-described kind of possible implementation of first aspect, the third in first aspect may be realized In mode, methods described also includes：

Different intermediary switch marks are distributed for all intermediary switch in the network topology structure.

Second aspect includes there is provided a kind of method for detecting forward-path, methods described：

Intermediary switch receives the probe messages from access switch, and the probe messages carry a centre Switch identification；

The intermediary switch judges the intermediary switch mark carried in the probe messages and the middle friendship The intermediary switch changed planes identifies whether identical；

If the intermediary switch mark carried in the probe messages in the middle of the intermediary switch with exchanging Machine mark is identical, then the intermediary switch is that probe messages addition first is marked, forwarding addition first Probe messages after mark so that egress switch receives the probe messages after the mark of addition first, The probe messages after the mark of addition first are sent to controller.

With reference to second aspect, in the first possible implementation of second aspect, methods described includes：

The intermediary switch obtains the first matched rule, if first matched rule is used to provide one In the intermediary switch mark carried in the probe messages that intermediary switch is received and the intermediary switch Between switch identification it is identical, then the intermediary switch marks for the probe messages addition first received, Described first mark for indicate egress switch by add first mark after probe messages be sent to the control Device processed.

With reference to any of the above-described kind of possible implementation of second aspect, second in second aspect may realization In mode, described first is labeled as pre-set priority, described to be marked for probe messages addition first, bag Include：

It is the pre-set priority by the priority modification carried in the probe messages, thinks the detection report Text addition first mark.

The third aspect includes there is provided a kind of method for detecting forward-path, methods described：

Egress switch receives the probe messages from access switch, and the probe messages carry a centre Switch identification；

The egress switch judges whether the probe messages are to add the probe messages after the first mark；

If it is determined that the probe messages for addition first mark after probe messages, the egress switch to Controller sends the probe messages after the mark of addition first so that go out oral sex described in the controller reception Change planes transmission at least one addition first mark after probe messages, according to it is described at least one addition first The intermediary switch mark carried in probe messages after mark and the network topology structure prestored, it is determined that described Forward-path between access switch and the egress switch.

With reference to the third aspect, in the first possible implementation of the third aspect, methods described also includes：

The egress switch obtains the second matched rule, if second matched rule is used to provide described The probe messages that egress switch is received are the probe messages after the mark of addition first, then the egress switch Probe messages after the mark of addition first are sent to the controller by machine.

With reference to the third aspect, in second of possible implementation of the third aspect, described first labeled as pre- Setting priority, the egress switch judges whether the probe messages are to add the detection report after the first mark Text includes：

The egress switch judges whether the priority carried in the probe messages is described default preferential Level.

Fourth aspect includes there is provided a kind of controller, the controller：

Sending module, for sending N number of probe messages to access switch, each probe messages carry one Intermediary switch is identified, and the N is equal to the centre that the number of intermediary switch and different probe messages are carried Switch identification is different, and each intermediary switch is identified for one intermediary switch of unique mark；

Receiving module, the detection report after at least one mark of addition first for receiving egress switch transmission Text, obtains the intermediary switch mark carried in the probe messages after at least one described mark of addition first；

Determining module, for according at least one intermediary switch mark got and the network topology prestored Structure, determines the forward-path between the access switch and the egress switch.

The controller of the fourth aspect is used to perform in the first aspect and each embodiment of first aspect Method.

5th aspect is there is provided a kind of intermediary switch, and the intermediary switch includes：

Receiving module, for receiving the probe messages from access switch, the probe messages carry one Intermediary switch is identified；

Judge module, for intermediary switch mark and the middle friendship for judging to carry in the probe messages The intermediary switch changed planes identifies whether identical；

The first mark module is added, for if it is determined that the intermediary switch mark carried in the probe messages It is identical with the intermediary switch mark of the intermediary switch, then marked for probe messages addition first；

Sending module, for forwarding the probe messages after the mark of addition first so that egress switch is received Probe messages after the mark of addition first, the detection report after the mark of addition first is sent to controller Text.

The intermediary switch of 5th aspect is used to perform the second aspect and each embodiment party of second aspect Method in formula.

6th aspect is there is provided a kind of egress switch, and the egress switch includes：

Judge module, for judging whether the probe messages are to add the probe messages after the first mark；

Sending module, for if it is determined that the probe messages are the probe messages after the mark of addition first, then The probe messages after the mark of addition first are sent to controller so that the controller receives the outlet Probe messages after at least one mark of addition first that interchanger is sent, according at least one described addition the The intermediary switch mark carried in probe messages after one mark and the network topology structure prestored, determine institute State the forward-path between access switch and the egress switch.

The egress switch of the fourth aspect is used to perform the third aspect and each embodiment party of the third aspect Method in formula.

There is provided a kind of network system for 7th aspect, it is characterised in that the network system includes：Control Device, access switch, intermediary switch and egress switch；

The controller, for sending N number of probe messages to the access switch, each probe messages are taken One intermediary switch mark of band, the N is equal to the number of intermediary switch and different probe messages are carried Intermediary switch mark it is different, each intermediary switch is identified for one intermediary switch of unique mark；

The access switch, for when receiving the probe messages that the controller is sent, forwarding to be described Probe messages；

The intermediary switch, for receiving the probe messages from the access switch；Judge described visit The intermediary switch for observing and predicting the intermediary switch mark and the intermediary switch that are carried in text identifies whether phase Together；If the intermediary switch mark carried in the probe messages in the middle of the intermediary switch with exchanging Machine mark is identical, then the intermediary switch is that probe messages addition first is marked, forwarding addition first Probe messages after mark；

The egress switch, for receiving the probe messages from the access switch；Judge described visit Whether observe and predict text is to add the probe messages after the first mark；If it is determined that the probe messages are addition first Probe messages after mark, then after the egress switch is marked to the controller transmission addition first Probe messages；

The controller, for receiving the probe messages after the addition first that the egress switch is sent is marked, Obtain the intermediary switch mark carried in the probe messages after at least one described mark of addition first；According to At least one intermediary switch mark got and the network topology structure prestored, determine the ingress switch Forward-path between machine and the egress switch.

The beneficial effect that technical scheme provided in an embodiment of the present invention is brought is：

N number of probe messages are sent to access switch by controller, each probe messages carry a centre Switch identification, the N is equal to the middle exchange that the number of intermediary switch and different probe messages are carried Machine mark is different, and each intermediary switch is identified for one intermediary switch of unique mark so that enter oral sex Change planes in forwarding at least one probe messages, the forward-path between access switch and egress switch Between interchanger it is determined that intermediary switch mark and the intermediary switch mark of local terminal in the probe messages received It is sensible simultaneously, for receive probe messages addition first mark after forward again, then only need egress switch will Probe messages after the addition first that receives is marked report controller, controller can according to this at least one The intermediary switch mark carried in probe messages after the mark of addition first and the network topology knot prestored Structure, determines the forward-path between the access switch and the egress switch, without on forward-path All intermediary switch are performed both by sending the operation of the match is successful message, the equipment for saving occupancy to controller Resource, simplifies implementation process, reduces the pressure of intermediary switch, improves flexibility.

Further, the first matched rule is issued to each intermediary switch by controller so that Mei Gezhong Between interchanger can according to first matched rule will be carried in each probe messages that received in the middle of exchange Machine is identified to be matched with the intermediary switch mark of the intermediary switch, is improved the accuracy of matching, is led to The intermediary switch crossed on forward-path is that the probe messages addition first received is marked when the match is successful, It is easy to controller to determine the intermediary switch on forward-path according to the probe messages after the mark of addition first, expands The mode for determining the intermediary switch on forward-path has been opened up, flexibility is improved.

Further, by obtaining the equal numbers of datagram with the intermediary switch in network topology structure Text, and identified according to the intermediary switch of each intermediary switch, it is determined that in corresponding with each data message Between switch identification so that carried in probe messages intermediary switch mark can with intermediary switch Between switch identification correspond, be easy to the intermediary switch on accurate detection forward-path, without occurring Omit, improve the degree of accuracy of detection forward-path；

Further, by being pre-set priority by the priority modification carried in probe messages, detection is thought Message addition first is marked so that probe messages can be carried out with the without probe messages are carried out with larger modification One mark, it is easy to operate, labeling effciency is improved, flexibility is improved.

Brief description of the drawings

Technical scheme in order to illustrate the embodiments of the present invention more clearly, institute in being described below to embodiment The accompanying drawing needed to use is briefly described.

Fig. 1 is a kind of structural representation of network system provided in an embodiment of the present invention；

Fig. 2 is the structural representation of another network system provided in an embodiment of the present invention；

Fig. 3 is a kind of structural representation of controller provided in an embodiment of the present invention；

Fig. 4 is a kind of structural representation of intermediary switch provided in an embodiment of the present invention；

Fig. 5 is a kind of structural representation of egress switch provided in an embodiment of the present invention；

Fig. 6 is a kind of method flow diagram for detecting forward-path provided in an embodiment of the present invention.

Embodiment

Below in conjunction with the accompanying drawing in the embodiment of the present invention, the technical scheme in the embodiment of the present invention is retouched State.

Fig. 1 is a kind of structural representation of network system provided in an embodiment of the present invention.Referring to Fig. 1, the network System 100 includes：Controller and data center network.The data center network includes multiple be connected with each other Interchanger, the part interchanger in these interchangers can send message, part as access switch Interchanger can receive message as egress switch, and part interchanger is only capable of as intermediary switch, Forward the message received.

With the access switch 101 in data center network, at least one intermediary switch 102, egress switch Exemplified by machine 103, referring to Fig. 1, it can connect many between the access switch 101 and the egress switch 103 Individual intermediary switch 102, so that mulitpath is constituted, and for specific data flow, i.e. five for determination Tuple, actual forward-path only has one between the access switch 101 and the egress switch 103, When access switch 101 will send message to egress switch 103, message can be by the forward-path Intermediary switch 102, the egress switch 103 is reached, without by other in data center network Intermediary switch 102.

The controller 104 is used to send N number of probe messages to access switch 101, and each probe messages are taken One intermediary switch mark of band, N is equal to the number and difference of the intermediary switch in the data center network The intermediary switch mark that carries of probe messages it is different.

The access switch 101 is used for the N number of probe messages for receiving the controller 104 transmission, forwards the N Individual probe messages.

The intermediary switch 102 is used to receive the probe messages from access switch 101；Judge the detection The intermediary switch mark and the intermediary switch of the intermediary switch 102 carried in message identifies whether identical； If the intermediary switch mark of the intermediary switch mark and the intermediary switch 102 carried in the probe messages It is sensible same, then marked for probe messages addition first, the probe messages after the mark of forwarding addition first.

Egress switch 103 is used to receive the probe messages from access switch 101；Judge the detection report Whether text is to add the probe messages after the first mark；If it is determined that after the probe messages is the marks of addition first Probe messages, then to controller 104 send the addition first mark after probe messages.

Controller 104 is additionally operable to receive after at least one mark of addition first that the egress switch 103 is sent Probe messages, obtain the intermediary switch carried in the probe messages after this at least one mark of addition first Mark；The network topology structure for identifying and prestoring according at least one intermediary switch got, it is determined that should Forward-path between access switch 101 and the egress switch 103.

Further, the network system can also include：Underlay networks and overlay networks.Wherein, Underlay networks refer to the bottom physical network in data center network, and overlay networks refer to data center The virtual network on bottom physical network is superimposed upon in network.

In practical application, underlay networks are generally by a series of interchangers according to spine/leaf (leaf/ridge) sides Formula composition Fabric (physical network institutional framework).

Exchanged for example, the underlay networks can include at least one leaf interchanger, at least one spine Machine and at least one core interchanger.Wherein, leaf interchangers are generally configured in the top of server rack End, as the access type interchanger of server rack, also referred to as frame top (Top-of-Rack, ToR) interchanger, That is to say can be as access switch or egress switch；Spine interchangers refer to play leaf interchangers The interchanger of (aggregation) effect is converged, the upper strata of leaf interchangers is generally deployed in, for realizing leaf Message routing or the function of forwarding, that is to say as intermediary switch between interchanger；Core interchangers are core Central layer interchanger, is the center switch of whole network, for connecting and converging spine interchangers, can also be made For intermediary switch.

And, it is connected with each other between at least one leaf interchanger and at least one spine interchanger, this is extremely It is few to be connected with each other between a spine interchanger and at least one core interchanger, therefore, any two leaf Mulitpath is may be constructed between interchanger.

And for specific two leaf interchangers, after five-tuple is determined, specific two leaf are exchanged Actual forward-path only has one between machine, when a leaf in specific two leaf interchangers is handed over Change planes when sending message to another leaf interchanger, message can be exchanged by the spine on the forward-path Spine interchangers and core interchangers on machine, or the forward-path, reach another leaf interchanger.

Fig. 2 is the structural representation of another network system provided in an embodiment of the present invention, referring to Fig. 2, with number According to central site network for exemplified by underlay networks, the network system 200 includes controller and underlay networks, The underlay networks include：Virtual machine (English：Virtual Machine, referred to as：VM) 1 and VM2, Leaf1 and leaf2, spine1, spine2, spine3 and spine4, core1, core2, core3 and core4, And controller 201.

Wherein, VM1 accesses leaf1, VM2 access leaf2, can be by respective between VM1 and VM2 The leaf interchangers of access realize communication.And, the annexation of respective switch as shown in Figure 3 can be with bright It is aobvious to know that multiple spine interchangers and multiple core interchangers between leaf1 and leaf2 constitute mulitpath, And after five-tuple is determined, between leaf1 and leaf2, actual forward-path only has one, therefore, works as leaf1 When sending message to leaf2 interchangers, message can only pass through spine1, spine2, spine3 and spine4 In be located at that spine interchanger on actual forward-path, then by least one on the actual forward-path Individual spine interchangers and at least one core interchanger, reach leaf2.

In order to detect in the forward-path between leaf1 and leaf2, the embodiment of the present invention, controller 201 can To send at least one probe messages to leaf1, the middle exchange on the forward-path between leaf1 and leaf2 Machine is that the probe messages addition first received is marked.And leaf2 receives the probe messages of the mark of addition first Afterwards, the probe messages of the mark of addition first can be sent to controller 201, then controller 201 can basis Intermediary switch mark and the network topology knot prestored in the probe messages that the addition first received is marked Structure, determines the forward-path between leaf1 and leaf2.

In addition, the data center network can also include overlay networks, overlay networks refer to set up Virtual network on underlay networks, for example, can be virtual expansible LAN (Virtual eXtensible Local Area Network, VXLAN) etc..It is therefore preferred that the data center network can be VXLAN - overlay networks.

Fig. 3 is a kind of structural representation of controller provided in an embodiment of the present invention, referring to Fig. 3, the controller Including：Receiver 301, transmitter 302, memory 303 and processor 304, the receiver 301, should Transmitter 302 and the memory 303 are connected with the processor 304 respectively, and the memory 303 is stored with journey Sequence code, the processor 304 is used to call the program code, performs following operate：

By transmitter 302, N number of probe messages are sent to access switch, each probe messages carry one Individual intermediary switch mark, N is equal to the middle friendship that the number of intermediary switch and different probe messages are carried Mark of changing planes is different, and each intermediary switch is identified for one intermediary switch of unique mark；

By receiver 301, the detection report after at least one mark of addition first that egress switch is sent is received Text, obtains the intermediary switch mark carried in the probe messages after at least one mark of addition first；

The network topology structure for identifying and prestoring according at least one intermediary switch got, it is determined that this enters Forward-path between mouth switch and the egress switch.

Based on the underlay networks shown in Fig. 2, the controller can be the controller 201 in Fig. 2, in order to The forward-path between leaf1 and leaf2 is detected, the controller 201 can send N number of detection to leaf1 and report Text so that access switch forwards N number of probe messages, wherein, each probe messages carry a centre Switch identification (intermediary switch includes the whole leaf interchangers and core interchangers in Fig. 2) and difference The intermediary switch mark that carries of probe messages it is different so that on the forward-path between leaf1 and leaf2 Intermediary switch if it is determined that in the probe messages received intermediary switch mark and corresponding intermediary switch Intermediary switch mark it is identical, then for receive probe messages addition first mark.Afterwards, the control Probe messages after the addition first that device 201 can be reported according to leaf2 is marked get friendship in the middle of at least one Change planes mark, and the network topology structure for identifying and prestoring according at least one intermediary switch got, Determine the forward-path between leaf1 and leaf2.

Further, transmitter 302 can include sending module, and the sending module can be used for entering oral sex Change planes and send N number of probe messages.The receiver 301 can include receiving module, and the receiving module can be used Probe messages after at least one addition first for receiving egress switch transmission is marked.The processor 304 Module is can include determining that, the determining module can be used for according at least one the intermediary switch mark got The network topology structure known and prestored, determines the forward-path between access switch and egress switch.

Alternatively, the processor 304 can also include issuing module, and this, which issues module, is used for each centre Interchanger issues the first matched rule, if the first matched rule is used to provide that an intermediary switch is received Probe messages in carry intermediary switch mark it is identical with the intermediary switch mark of intermediary switch, then Intermediary switch is that the probe messages addition first received is marked, and first marks for indicating egress switch The probe messages added after the first mark are sent to controller.

Fig. 4 is a kind of structural representation of intermediary switch provided in an embodiment of the present invention, referring to Fig. 4, in this Between interchanger include：Transceiver 401, memory 402 and processor 403.The transceiver 401 and the storage Device 402 is connected with the processor 403 respectively, and the memory 402 has program stored therein code, the processor 403 For calling the program code, following operate is performed：

By transceiver 401, the probe messages from access switch are received, probe messages carry a centre Switch identification；

Judging the intermediary switch mark of the intermediary switch carried in probe messages mark and intermediary switch is It is no identical；

If the intermediary switch of the intermediary switch mark and intermediary switch carried in probe messages identifies phase Together, then marked for probe messages addition first, the probe messages after the mark of forwarding addition first so that outlet Interchanger receives the probe messages after the mark of addition first, and the spy after the mark of addition first is sent to controller Observe and predict text.

Based on the underlay networks shown in Fig. 2, the intermediary switch can be the spine interchangers in Fig. 2 With core interchangers.If for example, the intermediary switch on forward-path between leaf1 and leaf2 be spine1, Core2 and spine3, then any interchanger in spine1, core2 and spine3 receive from leaf1's After probe messages, the intermediary switch mark and local terminal intermediary switch carried in the probe messages will determine that Intermediary switch identify whether it is identical, if identical, for the probe messages addition first mark, and forward add Plus the first mark after probe messages.The spy will not be received without the intermediary switch on the forward-path Text is observed and predicted, will not also be marked for probe messages addition first.

Further, the transceiver 401 can include receiving module, and the receiving module, which can be used for receiving, to be come From the probe messages of access switch.The processor 403 can include judge module and addition first marks mould Block, the judge module be used for the intermediary switch mark that judges to carry in probe messages with intermediary switch Between switch identification it is whether identical.The mark module of addition first is used for if it is determined that being carried in probe messages Intermediary switch mark is identical with the intermediary switch mark of intermediary switch, then is probe messages addition first Mark.The transceiver 401 can include sending module, and the sending module can be used for forwarding addition first and mark Probe messages after note.

Alternatively, the processor 403 can also include acquisition module, and the acquisition module is used to obtain first With rule, if the first matched rule is used to carry in the probe messages that one intermediary switch of regulation is received Intermediary switch mark it is identical with the intermediary switch mark of intermediary switch, then intermediary switch be reception The probe messages addition first arrived is marked, and first marks for indicating that egress switch will be added after the first mark Probe messages be sent to controller.

Alternatively, first pre-set priority is labeled as, the first mark module of addition is additionally operable in probe messages The priority modification of carrying is pre-set priority, thinks that probe messages addition first is marked.

Fig. 5 is a kind of structural representation of egress switch provided in an embodiment of the present invention, and referring to Fig. 5, this goes out Mouth switch includes：Transceiver 501, memory 502 and processor 503.The transceiver 501 and the storage Device 502 is connected with the processor 503 respectively, and the memory 502 has program stored therein code, the processor 503 For calling the program code, following operate is performed：

By transceiver 501, the probe messages from access switch are received, probe messages carry a centre Switch identification；

Whether judge probe messages is to add the probe messages after the first mark；

If it is determined that probe messages are the probe messages after the mark of addition first, addition first is sent to controller Probe messages after mark so that controller receives at least one mark of addition first that egress switch is sent Probe messages afterwards, according to the intermediary switch carried in the probe messages after at least one mark of addition first The network topology structure for identifying and prestoring, determines the forward-path between access switch and egress switch.

Based on the underlay networks shown in Fig. 2, the egress switch can be the leaf interchangers in Fig. 2. Such as, the access switch is leaf1, and egress switch is leaf2, and controller is controller 201, then leaf2 At least one probe messages from leaf1 can be received, for each probe messages received, leaf2 Whether be add probe messages first mark after, if it is determined that the probe messages if may determine that the probe messages For the probe messages after the mark of addition first, then the detection after the addition first mark is sent to controller 201 Message.

Further, the transceiver 501 can include receiving module, and the receiving module, which can be used for receiving, to be come From the probe messages of access switch.The processor 503 can include judge module, and the judge module is used for Whether judge probe messages is to add the probe messages after the first mark.The transceiver 501 can include sending Module, the sending module can be used for if it is determined that probe messages for addition first mark after probe messages, Then the probe messages after the mark of addition first are sent to controller.

Alternatively, the processor 503 can also include acquisition module, and the acquisition module is used to obtain second With rule, if the second matched rule is used to provide that the probe messages that egress switch is received are addition first Probe messages after mark, the then probe messages after egress switch marks addition first are sent to controller.

Alternatively, first pre-set priority is labeled as, judge module is additionally operable to judge to carry in probe messages Priority whether be pre-set priority.

Fig. 6 is a kind of method flow diagram for detecting forward-path provided in an embodiment of the present invention, as shown in fig. 6, The interaction agent of the method for the detection forward-path is controller, access switch, intermediary switch and outlet Interchanger, comprises the following steps：

601st, controller sends N number of probe messages to access switch.

In the embodiment of the present invention, the interchanger for being used to E-Packet in data center network is referred to as middle friendship Change planes, in practical application, for given access switch and egress switch, access switch and outlet Multiple intermediary switch are generally configured between interchanger, the plurality of intermediary switch is connected with each other, so as to enter Mulitpath is constituted between mouth switch and egress switch.But, in fact, the access switch is with being somebody's turn to do Forward-path between egress switch for specific five-tuple only has one, for the ease of to data center Network is managed, it is necessary to be detected to the forward-path between access switch and egress switch.

And in view of that can be that each intermediary switch in the data center network configures different middle exchanges Machine is identified, and intermediary switch mark is determined for unique intermediary switch, and is sent out from access switch The message for delivering to egress switch only can be by the forward-path between access switch and egress switch Intermediary switch, reaches the egress switch, without by other intermediary switch.Therefore, in order to Intermediary switch on forward-path is tracked to detect the forward-path, can turn intermediary switch Probe messages are sent out, and probe messages is carried intermediary switch mark, make the middle friendship for receiving probe messages Change planes it is determined that the intermediary switch mark carried in the probe messages is identical with the intermediary switch mark of local terminal When, probe messages are marked, then, the intermediary switch mark that the probe messages after addition mark are carried It is the intermediary switch on forward-path to know indicated intermediary switch, and is not added with the detection report of mark The intermediary switch indicated by intermediary switch mark that text is carried is the middle exchange not on forward-path Machine, the forward-path can be detected according to the intermediary switch on forward-path.

Therefore, in the embodiment of the present invention, the intermediary switch that the controller can be in data center network And the intermediary switch mark of each intermediary switch, obtain N number of probe messages, and to access switch N number of probe messages are sent, so that the access switch sends N number of probe messages to egress switch. So, can be by being somebody's turn to do during N number of probe messages are sent to egress switch from access switch Multiple intermediary switch on forward-path between access switch and the egress switch, reach the outlet Interchanger.

Wherein, each probe messages in N number of probe messages carry an intermediary switch mark, described N is equal to the intermediary switch mark difference that the number of intermediary switch and different probe messages are carried, namely It is that the intermediary switch mark of N number of probe messages carrying in the middle of each in data center network with exchanging The intermediary switch mark of machine is corresponded.

For example, based on Fig. 2, the Underlay networks include 8 intermediary switch, intermediary switch mark It is respectively Switch1~Switch8 to know SwitchID.Correspondingly, the controller can be sent out to access switch 8 probe messages are sent, 8 probe messages carry Switch1~Switch8 respectively.

Wherein, each intermediary switch is identified for one intermediary switch of unique mark, intermediary switch mark It is IP address or device numbering of intermediary switch etc. to know, and the embodiment of the present invention is not limited this.

Before the step 601, for the ease of determining the intermediary switch on forward-path, the controller can So that different intermediary switch marks are distributed for all intermediary switch in data center network in advance.For example, The controller can predefine the scope of intermediary switch mark, in being included according to data center network Between number of switches, from this in the range of be followed successively by each intermediary switch and choose an intermediary switch mark, And ensure that the intermediary switch mark of different intermediary switch is different.After being assigned, the controller can So that by the interface between data center network, corresponding intermediary switch is issued to each intermediary switch Mark.

Wherein, the controller can use default allocation algorithm to distribute middle friendship respectively for multiple intermediary switch Change planes mark, the default allocation algorithm can be Hash (Hash) algorithm, message authentication code (message Authentication code) algorithm or other algorithms etc., in the assignment procedure, can be from SwitchID Chosen in the range of 1~65535.In addition, the controller can by such as Netconf management interface, Corresponding SwitchID is issued to each intermediary switch, corresponding SwitchID is configured in the middle of each and handed over On changing planes, the embodiment of the present invention is not limited this.

In addition, being sent to ensure that probe messages can succeed from access switch to egress switch, each Probe messages can also carry the facility information of access switch and the facility information of egress switch.Wherein, The facility information of access switch can the IP address including access switch, port, medium access control (media access control, MAC) address, device numbering and switch identification etc., naturally it is also possible to wrap The other facility informations of access switch are included, the facility information of egress switch can include egress switch IP address, port, MAC Address, device numbering and switch identification etc., naturally it is also possible to including going out oral sex Change planes other facility informations, the embodiment of the present invention is not limited this.

In a kind of possible implementation, the controller is sending N number of visit to access switch to be detected Observe and predict before text, can first obtain the facility information and egress switch to be detected of access switch to be detected The facility information of machine, and obtain N number of data message, and the number of N number of data message and the data center The number of intermediary switch in the network topology structure of network is equal.Afterwards, the controller can be according to every The intermediary switch mark of individual intermediary switch, it is determined that intermediary switch corresponding with each data message is identified, And according to intermediary switch corresponding with each data message mark, the facility information of the access switch and be somebody's turn to do The facility information of egress switch, is packaged to each data message in N number of data message, obtains N number of probe messages.

For example, the controller can obtain five-tuple according to access switch to be detected and egress switch, The five-tuple include source IP address (IP address of access switch), source port (port of access switch), Purpose IP address (IP address of egress switch), destination interface (port of egress switch) and transmission Layer protocol, and obtain N number of data message.Afterwards, the controller can according to each data message pair The intermediary switch mark answered and the five-tuple, are sealed to each data message in N number of data message Dress, obtains N number of probe messages, then corresponding intermediary switch mark can be carried in each probe messages And the five-tuple.

Wherein, by taking VXLAN networks as an example, N number of data message is carried out using VXLAN technologies During encapsulation, an outer layer head can be added for each data message, obtain N number of VXLAN probe messages.And During being packaged to each data message, expand in the field that the controller can retain from outer layer head An identification field is opened up, the identification field can be used for carrying the intermediary switch mark obtained.For example, Outer layer head packaged by VXLAN includes 24bit reserved field, then can use 16bit conducts therein Identification field, to carry intermediary switch mark.In this way, the reserved field of encapsulated message can be rationally utilized, Improve resource utilization.

602nd, the access switch receives N number of probe messages of controller transmission, forwards N number of detection Message.

For example, the access switch can obtain each probe messages are carried in N number of probe messages five yuan Group, N number of probe messages are forwarded according to the five-tuple.

It should be noted that the embodiment of the present invention is only to receive the detection report that controller is sent with access switch Exemplified by text, and in practical application, the access switch can also be visited by being packaged to data message Observe and predict text.

603rd, any intermediary switch on forward-path receives the probe messages from access switch, judges The intermediary switch of the intermediary switch mark and the intermediary switch that are carried in the probe messages identifies whether phase Together.

Access switch is forwarded after at least one probe messages, then any middle exchange on the forward-path Machine will receive at least one probe messages from the access switch, at least one can also be visited according to this The facility information for observing and predicting the egress switch carried in text is forwarded.

And determine to receive the intermediary switch of probe messages for the ease of subsequent controllers, when on forward-path Any intermediary switch when receiving probe messages, will not be direct for each probe messages received Forwarding, the intermediary switch mark that can first judge to carry in the probe messages with any intermediary switch Between switch identification it is whether identical.

If the intermediary switch mark the 604, carried in the probe messages in the middle of the intermediary switch with exchanging Machine mark is identical, then the intermediary switch is that probe messages addition first is marked, after the mark of addition first Probe messages be forwarded to next intermediary switch on forward-path, continued executing with by next intermediary switch Above-mentioned steps 603-604, until at least one probe messages is forwarded into egress switch.

In alternatively possible implementation, if carried in the probe messages intermediary switch mark with The intermediary switch mark of the intermediary switch is different, and the intermediary switch will not perform to be added for the probe messages Plus the first mark operation, the probe messages are only forwarded to next intermediary switch on forward-path, by Next intermediary switch continues executing with above-mentioned steps 603-604, until at least one probe messages is forwarded to out Mouth switch.

It should be noted that the embodiment of the present invention is only the forwarding with the access switch and the egress switch Include illustrating exemplified by multiple intermediary switch on path, and in practical application, if on the forward-path An intermediary switch is only included, next interchanger of the intermediary switch is egress switch, then in this Between interchanger be the probe messages addition first mark after, you can directly will add first mark after detection report Text is forwarded to egress switch.

In the embodiment of the present invention, before step 603-604, the controller can be into the data center network Each intermediary switch issue the first matched rule, wherein, if first matched rule be used for provide one Intermediary switch mark and the corresponding intermediary switch carried in the probe messages that individual intermediary switch is received Intermediary switch mark is identical, then the intermediary switch marks for the probe messages addition first received, This first mark for indicate egress switch by add first mark after probe messages be sent to controller. When then each intermediary switch on forward-path receives probe messages, you can according to first matched rule Perform step 603-604.

For example, the controller can be into data center network all interchangers issue respectively ACL matching rule Then, the ACL matched rules include the intermediary switch mark of correspondence intermediary switch, and the ACL is matched Rule is used to provide each interchanger：If carried in the probe messages received intermediary switch mark with Intermediary switch mark matching in ACL matched rules, then mark for the probe messages addition first that this is received Note.Then each intermediary switch in the data center network can obtain the first matching that the controller is issued Rule, in any probe messages in receiving the N probe messages from access switch, you can according to The first matched rule got is matched to the intermediary switch carried in the probe messages that receive.

605th, egress switch receives the probe messages from the access switch, whether judges the probe messages For the probe messages after the mark of addition first, if it is determined that the probe messages are the detection after the mark of addition first Message, then send the probe messages after the addition first mark to controller.

Before step 605, the controller can also issue the second matched rule to egress switch, then should Egress switch can obtain second matched rule, according to second matched rule to the detection report that receives Text is matched.Wherein, if second matched rule is used for the detection for providing that the egress switch is received Message is the probe messages after the mark of addition first, then the spy after the egress switch marks the addition first Observe and predict text and be sent to controller.

Wherein, in a kind of possible implementation, priority can be carried in probe messages, and this first Mark can be pre-set priority, then in the probe messages that the intermediary switch determination on forward-path is received When the intermediary switch mark of carrying is identical with the intermediary switch mark of the intermediary switch, it will can receive To probe messages in the priority modification that carries be pre-set priority, think that probe messages addition first is marked Note.Correspondingly, it is right during N number of probe messages of the egress switch reception from the access switch Whether in each probe messages received, it is that this is pre- that can first judge the priority carried in the probe messages Setting priority, if it is determined that the priority carried in the probe messages is pre-set priority, you can it is determined that this connects The probe messages received are the probe messages after the mark of addition first.

Further, the egress switch can match the detection report for carrying pre-set priority by ACL technologies Text, that is to say, the egress switch can obtain the priority carried in each probe messages received, And matched the priority got with pre-set priority, if the match is successful, you can it is determined that this is received Probe messages for addition first mark after probe messages.Wherein, the pre-set priority can be 5,6,9 Deng the embodiment of the present invention is not limited this.And in order to ensure to detect accuracy rate, each probe messages are initial Priority it is different from the pre-set priority.

For example, so that the pre-set priority is 6 as an example, any intermediary switch on forward-path connects when determination Intermediary switch mark in the probe messages received is identical with the intermediary switch mark of correspondence intermediary switch When, you can the priority modification carried during the probe messages are carried is 6, and is forwarded.The egress switch When machine receives at least one probe messages from the access switch, for each detection report received Text, can match the probe messages that the priority carried is 6 by ACL technologies, and be 6 by priority Probe messages report controller.

606th, controller receives the detection report after at least one mark of addition first of egress switch transmission Text, obtains the intermediary switch mark carried in the probe messages after at least one mark of addition first.

607th, the network topology knot that controller is identified and prestored according at least one intermediary switch got Structure, determines the forward-path between the access switch and the egress switch.

If a certain probe messages are the probe messages after the mark of addition first, represent that the probe messages have passed through The indicated intermediary switch of entrained intermediary switch mark, i.e. the intermediary switch is on forward-path Intermediary switch, therefore, the controller can obtain the detection report after this at least one mark of addition first The intermediary switch mark carried in text, at least one intermediary switch mark that can be got according to this is true At least one intermediary switch being positioned on forward-path.Afterwards, the controller can be according to the net prestored Network topological structure determines position of at least one intermediary switch in the network topology structure and mutually it Between annexation, so that it is determined that going out the forward-path between the access switch and the egress switch.

For example, with reference to Fig. 2, based on 601 citing, the centre on forward-path between leaf1 and leaf2 Interchanger is spine1, core2 and spine3, then any middle exchange in spine1, core2 and spine3 Machine can receive 8 probe messages from access switch, for each probe messages received, It will determine that whether the SwitchID that the probe messages are carried is identical with the SwitchID of the intermediary switch, if It is identical, it will be marked for probe messages addition first, to identify the intermediary switch positioned at forward-path On, and forward the probe messages after the mark of addition first.So, 3 additions will be had in 8 probe messages Friendship in the middle of entrained by probe messages after probe messages after first mark, and this 3 marks of addition first Mark of changing planes is spine1, core2 and spine3 intermediary switch mark.The egress switch is received After 8 probe messages, the probe messages after 3 marks of addition first can be reported to controller.The control Device can be got after this 3 marks of addition first according to the probe messages after this 3 marks of addition first Probe messages in the SwitchID that carries, and then the forwarding can be determined according to the SwitchID got Intermediary switch on path includes spine1, core2 and spine3.Afterwards, the controller can be according to pre- The network topology structure deposited determines that the forward-path between leaf1 and leaf2 is：leaf1 -spine1-core2-spine3-leaf2。

It should be noted that the embodiment of the present invention is only by taking given access switch and egress switch as an example, To illustrate the method for detecting the forward-path between access switch and egress switch, and in actual applications, The forward-path between any entry interchanger and any egress switch can be detected using the above method, This is repeated no more.

In summary, the method for detection forward-path provided in an embodiment of the present invention, by controller to entrance Interchanger sends N number of probe messages, and each probe messages carry an intermediary switch mark, described N etc. The intermediary switch carried in the number and different probe messages of intermediary switch identifies difference, each middle Switch identification is used for one intermediary switch of unique mark so that access switch forwards N number of probe messages, The intermediary switch on forward-path between access switch and egress switch is it is determined that the detection received When intermediary switch mark in message is identical with the intermediary switch mark of local terminal, for the detection report received Text addition first mark after forward again, then only need egress switch the addition received first is marked after spy Observe and predict text and report controller, controller can be added according at least one to be taken in the probe messages after the first mark The intermediary switch mark of band and the network topology structure prestored, determine that the access switch goes out oral sex with this Forward-path between changing planes, is performed both by sending out to controller without all intermediary switch on forward-path The operation for message of sending that the match is successful, saves the device resource of occupancy, simplifies implementation process, in reducing Between interchanger pressure, improve flexibility.Moreover, adding dependent on the intermediary switch in datum plane The mechanism for mark of plus the first, it is to avoid the operation for message that each intermediary switch reports that the match is successful, is reduced Impact to the central processing unit (Central Processing Unit, CPU) of intermediary switch, and save Internet resources.

In addition, by method provided in an embodiment of the present invention, controller only needs the institute into data center network There is interchanger to configure an intermediary switch mark, you can detection different access switch and egress switch Between forward-path, without matching somebody with somebody for different access switch and egress switch to all interchangers The different ACL matched rules based on five-tuple are put, the operating process of controller is simplified, saves control Device resource, improves detection efficient.Further, each intermediary switch is only needed to being carried in probe messages Intermediary switch mark matched, without matching five-tuple, simplify matching content, improve With efficiency, the pressure of intermediary switch is reduced.

One of ordinary skill in the art will appreciate that realizing all or part of step of above-described embodiment can pass through Hardware is completed, and the hardware of correlation can also be instructed to complete by program, the program being somebody's turn to do can be stored in one Plant in computer-readable recording medium, storage medium mentioned above can be read-only storage, disk or light Disk etc..

It should be only above presently preferred embodiments of the present invention, be not intended to limit the invention, all essences in the present invention God is with principle, and any modification, equivalent substitution and improvements made etc. should be included in the guarantor of the present invention Within the scope of shield.

Claims

1. a kind of method for detecting forward-path, it is characterised in that methods described includes：

2. according to the method described in claim 1, it is characterised in that controller sends N to access switch Before individual probe messages, methods described also includes：

3. a kind of method for detecting forward-path, it is characterised in that methods described includes：

4. method according to claim 3, it is characterised in that methods described includes：

5. the method according to claim 3 or 4, it is characterised in that described first labeled as default excellent First level, it is described to be marked for probe messages addition first, including：

6. a kind of method for detecting forward-path, it is characterised in that methods described includes：

7. method according to claim 6, it is characterised in that methods described also includes：

8. method according to claim 7, it is characterised in that described first is labeled as pre-set priority, The egress switch judges whether the probe messages are that the probe messages added after the first mark include：

9. a kind of controller, it is characterised in that the controller includes：

10. controller according to claim 9, it is characterised in that the controller also includes：

Module is issued, for issuing the first matched rule, first matched rule to each intermediary switch If for the intermediary switch mark for providing to carry in the probe messages that an intermediary switch is received and institute The intermediary switch mark for stating intermediary switch is identical, then the intermediary switch is the detection received Message addition first is marked, and described first marks for indicating that egress switch will add the spy after the first mark Observe and predict text and be sent to the controller.

11. a kind of intermediary switch, it is characterised in that the intermediary switch includes：

12. intermediary switch according to claim 11, it is characterised in that the intermediary switch bag Include：

Acquisition module, for obtaining the first matched rule, if first matched rule is used to provide one In the intermediary switch mark carried in the probe messages that intermediary switch is received and the intermediary switch Between switch identification it is identical, then the intermediary switch marks for the probe messages addition first received, Described first mark for indicate egress switch by add first mark after probe messages be sent to the control Device processed.

13. the intermediary switch according to claim 11 or 12, it is characterised in that first mark Pre-set priority is designated as, the mark module of addition first is additionally operable to excellent by what is carried in the probe messages First level is revised as the pre-set priority, thinks the probe messages addition first mark.

14. a kind of egress switch, it is characterised in that the egress switch includes：

15. egress switch according to claim 14, it is characterised in that the egress switch is also Including：

Acquisition module, for obtaining the second matched rule, if second matched rule is used to provide described The probe messages that egress switch is received are the probe messages after the mark of addition first, then the egress switch Probe messages after the mark of addition first are sent to the controller by machine.

16. egress switch according to claim 15, it is characterised in that described first labeled as pre- Setting priority, the judge module is additionally operable to judge whether the priority carried in the probe messages is institute State pre-set priority.

17. a kind of network system, it is characterised in that the network system includes：Controller, ingress switch Machine, intermediary switch and egress switch；