CN108173762B

CN108173762B - Message redirection method and device

Info

Publication number: CN108173762B
Application number: CN201711483634.7A
Authority: CN
Inventors: 代海峰
Original assignee: Hangzhou DPTech Technologies Co Ltd
Current assignee: Hangzhou DPTech Technologies Co Ltd
Priority date: 2017-12-29
Filing date: 2017-12-29
Publication date: 2020-11-06
Anticipated expiration: 2037-12-29
Also published as: CN108173762A

Abstract

The application provides a device of a message redirection method, which is applied to network equipment comprising a plurality of ports belonging to different operating system level virtual environments (OVCs), and comprises the following steps: when the interconnection port is detected, the corresponding relation between the interconnection port and the identification of the OVC to which the interconnection port belongs is stored; closing the MAC address learning function aiming at the interconnection port; when a message of an MAC address table item used by an OVC to which a non-interconnected port belongs is hit by a target MAC address is received through the non-interconnected port, whether the identifier of the OVC to which the port in the MAC address table item belongs is the same as the identifier of the OVC to which the non-interconnected port belongs is judged; if the two are different, based on the corresponding relation, the message is redirected to the interconnection port corresponding to the identifier of the OVC to which the port in the MAC address table entry belongs in the OVC to which the non-interconnection port belongs. The technical scheme of the application can avoid the problem that the network equipment can not forward the message.

Description

Message redirection method and device

Technical Field

The present application relates to the field of communications technologies, and in particular, to a method and an apparatus for redirecting a packet.

Background

An OCV (OS-Level Virtual environment) technology is a virtualization technology for virtualizing one physical device into a plurality of logical devices. Through the OVC technology, the operating system kernel can allocate a series of software and hardware resources such as independent ports, CPU resources, memory resources, session numbers, the number of routing table entries, the number of security policies, and the like to each OVC in the same physical device, and perform independent process management, memory management, and disk management for each OVC, thereby realizing the all-round isolation of each OVC from a management plane, a control plane, a data plane, and a service plane, and forming each completely independent logic device.

Disclosure of Invention

In view of this, the present application provides a method and an apparatus for redirecting a packet.

Specifically, the method is realized through the following technical scheme:

in a first aspect, the present application provides a method for redirecting a packet, where the method is applied to a network device, where the network device includes a plurality of ports belonging to different operating system level virtual environments OVCs, and the method includes:

when an interconnection port is detected, storing the corresponding relation between the interconnection port and the identification of the OVC to which the interconnection port belongs;

closing a MAC address learning function for the interconnection port;

when a message that a destination MAC address hits an MAC address table item used by an OVC to which the non-interconnection port belongs is received through the non-interconnection port, whether the identifier of the OVC to which the port in the MAC address table item belongs is the same as the identifier of the OVC to which the non-interconnection port belongs is judged;

if the two are different, based on the corresponding relation, redirecting the message to the interconnection port corresponding to the identifier of the OVC to which the port in the MAC address table entry belongs in the OVC to which the non-interconnection port belongs.

In a second aspect, the present application provides a packet redirection apparatus, where the apparatus is applied to a network device, where the network device includes a plurality of ports belonging to different operating system level virtual environments OVCs, and the apparatus includes:

a storage unit, configured to store, when an interconnection port is detected, a correspondence between the interconnection port and an identifier of an OVC to which the interconnection port belongs;

a shutdown unit configured to shut down a MAC address learning function for the interconnection port;

a judging unit, configured to, when a message that a destination MAC address hits an MAC address table entry used by an OVC to which a non-interconnected port belongs is received through the non-interconnected port, judge whether an identifier of the OVC to which a port in the MAC address table entry belongs is the same as an identifier of the OVC to which the non-interconnected port belongs;

and a redirecting unit, configured to redirect, based on the correspondence, the packet to an interconnection port corresponding to an identifier of the OVC to which the port in the MAC address table entry belongs, in the OVC to which the non-interconnection port belongs, when the two are different.

By analyzing the above technical solution, because the MAC address learning function of the interconnection port is turned off, the MAC address table entry for recording the correspondence between the source MAC address of the packet and the interconnection port is not learned any more, but only the MAC address table entry for recording the correspondence between the source MAC address of the packet and the non-interconnection port is learned. On the other hand, for a message received through a non-interconnected port and having a destination MAC address hitting a MAC address table entry, if the identifier of the OVC to which the non-interconnected port belongs is different from the identifier of the OVC to which the port in the MAC address table entry belongs, the message may be redirected to the OVC to which the non-interconnected port belongs and an interconnected port corresponding to the identifier of the OVC to which the port in the MAC address table entry belongs, so that the OVC to which the port in the MAC address table entry belongs may receive the message through the interconnected port and forward the message through the port in the MAC address table entry. By adopting the mode, the problem that the network equipment cannot forward the message can be avoided, namely packet loss can be avoided, and the continuity and reliability of service processing can be improved in practical application.

Drawings

Fig. 1 is a schematic diagram of an OVC in a network device;

fig. 2 is a flowchart illustrating a message redirection method according to an exemplary embodiment of the present application;

fig. 3 is a hardware structure diagram of a device where a message redirection device is located according to an exemplary embodiment of the present application;

fig. 4 is a block diagram of a message redirection device according to an exemplary embodiment of the present application.

Detailed Description

Reference will now be made in detail to the exemplary embodiments, examples of which are illustrated in the accompanying drawings. When the following description refers to the accompanying drawings, like numbers in different drawings represent the same or similar elements unless otherwise indicated. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with the present application. Rather, they are merely examples of apparatus and methods consistent with certain aspects of the present application, as detailed in the appended claims.

The terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting of the application. As used in this application and the appended claims, the singular forms "a", "an", and "the" are intended to include the plural forms as well, unless the context clearly indicates otherwise. It should also be understood that the term "and/or" as used herein refers to and encompasses any and all possible combinations of one or more of the associated listed items.

It is to be understood that although the terms first, second, third, etc. may be used herein to describe various information, such information should not be limited to these terms. These terms are only used to distinguish one type of information from another. For example, first information may also be referred to as second information, and similarly, second information may also be referred to as first information, without departing from the scope of the present application. The word "if" as used herein may be interpreted as "at … …" or "when … …" or "in response to a determination", depending on the context.

Generally, the operation of the OVCs does not affect each other in the same network device. For example, in a campus network, there may be two user groups, an intranet user and an extranet user, where the intranet user only allows access to the intranet server and the extranet user only allows access to the extranet server. By adopting the OVC technology, only one set of physical network needs to be established, and ports connected with an intranet user/server and an extranet user/server are distributed to different OVCs on related network equipment in the physical network, so that intranet communication and extranet communication can be not influenced by each other.

However, in some special cases, it may be necessary to connect different OVCs in the same network device. Please refer to fig. 1, which is a schematic diagram of an OVC in a network device. As shown in fig. 1, ports 1 and 2 are assigned to OVC1, while ports 3 and 4 are assigned to OVC 2. Therein, port 2 and port 3 are connected, thereby connecting OVC1 directly with OVC 2.

In the related art, when OVC1 and OVC2 are directly connected, OVC1 and OVC2 use the same MAC address table. When receiving a message through the port 1, the OVC1 performs MAC address learning for the port 1 based on the message, that is, the OVC1 stores the correspondence between the source MAC address of the message and the port 1 as a MAC address table entry in a MAC address table used by the OVC 1. Subsequently, the OVC1 will send the message to the OVC2 through the port 2, because the port 2 is connected to the port 3, the OVC2 will receive the message through the port 3, and perform MAC address learning for the port 3 based on the message, that is, the OVC2 will store the correspondence between the source MAC address of the message and the port 3 as a MAC address table entry in a MAC address table used by the OVC2 (i.e., a MAC address table used by the OVC 1). In addition, OVC2 deletes the MAC address table entry in the MAC address table for recording the correspondence between the source MAC address and port 1, so as to avoid the problem that the same MAC address corresponds to multiple ports.

Thus, when the OVC2 receives the message whose destination MAC address is the source MAC address, the destination MAC address hits the MAC address table entry used by the OVC2 to record the correspondence between the destination MAC address and the port 3, so the OVC2 forwards the message through the port 3. Since the port 3 is connected to the port 2, the OVC1 receives the packet through the port 2, however, since the MAC address table used by the OVC1 does not store the MAC address table entry for recording the correspondence between the destination MAC address and the port 1, the OVC1 cannot determine the port corresponding to the destination MAC address, and thus cannot forward the packet, which results in packet loss.

In order to solve the above problem, the present application provides a method and an apparatus for redirecting a packet, so as to avoid a problem that a network device cannot forward the packet. Referring to fig. 2, a flowchart of a message redirection method according to an exemplary embodiment of the present application is shown. The message redirection method may be applied to a network device comprising a plurality of ports, which are assigned to a plurality of different OVCs. The message redirection method can comprise the following steps:

step 201: when the interconnection port is detected, the corresponding relation between the interconnection port and the identification of the OVC to which the interconnection port belongs is saved.

In this embodiment, when the network device detects an interconnection port, the network device may store a correspondence between the interconnection port and an identifier of an OVC to which the interconnection port belongs. Wherein, the identification of the OVC can be preset by the user, and different OVCs have different identifications, for example: the user may set a class _ ID for each OVC as an identification of that OVC, with different OVCs having different class _ IDs.

Specifically, in the network device, a CPU may send a packet through each port (referred to as a first port), and detect whether the packet is received at a port (referred to as a second port) other than the port that sent the packet. If the message is received at a certain second port, it can be determined that the second port and the first port are interconnected ports, so that the corresponding relationship between the identification information of the OVC to which the first port and the first port belong and the identification information of the OVC to which the second port and the second port belong can be stored.

Taking the network device shown in fig. 1 as an example, in the network device, the CPU may send messages through the ports 1 to 4, respectively. For a message sent through the port 1, whether the message is received or not can be detected at the port 2, the port 3 and the port 4 respectively; for the message sent through the port 2, whether the message is received can be detected at the port 1, the port 3 and the port 4 respectively; and so on. Since a packet sent through port 2 can be received at port 3 (a packet sent through port 3 can also be received at port 2), it can be determined that port 2 and port 3 are interconnected ports. Assuming that the identification of OVC1 is 1 and the identification of OVC2 is 2, the correspondence shown in table 1 below can be preserved:

interconnect Port 1	OVC to which interconnection port 1 belongs	Interconnect port 2	OVC to which interconnection port 2 belongs
				Port 2	1	Port 3	2

TABLE 1

Step 202: and closing the MAC address learning function aiming at the interconnection port.

In this embodiment, after all the interconnect ports are determined in the foregoing step 201, the MAC address learning function for these interconnect ports may be turned off.

Continuing with the example of fig. 1, after determining that port 2 and port 3 are interconnect ports, the MAC address learning function for port 2 and port 3 may be turned off. In this case, when OVC1 receives a packet through port 1, the corresponding relationship between the source MAC address of the packet and port 1 may still be stored as a MAC address table entry in the MAC address table used by OVC 1; when the OVC2 receives the message through the port 3, the corresponding relationship between the source MAC address of the message and the port 3 is not saved as a MAC address table entry in the MAC address table used by the OVC2, that is, only a MAC address table entry for recording the corresponding relationship between the source MAC address and the port 1 is saved in the MAC address table used by the OVC1/OVC2, and both the message in which the destination MAC address received by the OVC1 through the port 1 is the source MAC address and the message in which the destination MAC address received by the OVC2 through the port 2 is the source MAC address can be determined to hit the MAC address table entry.

Step 203: when a message that a destination MAC address hits an MAC address table item used by an OVC to which the non-interconnection port belongs is received through the non-interconnection port, whether the identifier of the OVC to which the port in the MAC address table item belongs is the same as the identifier of the OVC to which the non-interconnection port belongs is judged.

Step 204: if the two are different, based on the corresponding relation, redirecting the message to the interconnection port corresponding to the identifier of the OVC to which the port in the MAC address table entry belongs in the OVC to which the non-interconnection port belongs.

In this embodiment, if a message that a destination MAC address hits a MAC address table entry used by an OVC to which a non-interconnected port belongs is received through the non-interconnected port, it may be determined whether an identifier of the OVC to which the port in the hit MAC address table entry belongs is the same as an identifier of the OVC to which the non-interconnected port belongs.

If the two are different, the message may be redirected to the interconnection port corresponding to the identifier of the OVC to which the port in the MAC address table entry belongs, in the OVC to which the non-interconnection port belongs, based on the correspondence between the interconnection port stored in the foregoing step 201 and the identifier of the OVC to which the interconnection port belongs.

But if the two are the same, the message can be directly forwarded through the non-interconnection port.

Continuing with fig. 1 as an example, assuming that the OVC2 receives the message whose destination MAC address is the source MAC address through the port 4, since the destination MAC address hits the MAC address table entry (i.e., the MAC address table entry used by the OVC2 to which the port 4 belongs) for recording the correspondence between the source MAC address and the port 1, it may be determined whether the identifier of the OVC1 to which the port 1 belongs is the same as the identifier of the OVC2 to which the port 4 belongs. Since the identifier of the OVC1 is 1 and the identifier of the OVC2 is 2, which are not the same, the packet may be redirected to the port 3 of the OVC2 (i.e., the interconnect port of the OVC2 to which the port 4 belongs and corresponding to the identifier of the OVC1 to which the port 1 belongs) according to the correspondence shown in table 1, so that the OVC1 may receive the packet through the port 2 and forward the packet through the port 1.

However, if the OVC1 receives the message whose destination MAC address is the source MAC address through the port 1, the port in the MAC address table entry hit by the destination MAC address is the port 1, which satisfies the condition that the identifier of the OVC to which the port in the MAC address table entry belongs is the same as the identifier of the OVC to which the non-interconnected port belongs, so the OVC1 can directly forward the message through the port 1.

In practical applications, ACL (Access Control List) may be used to redirect a message. Specifically, in the foregoing step 201, after the correspondence between the interconnection port and the identifier of the OVC to which the interconnection port belongs is saved, a corresponding ACL policy for redirecting a packet may be generated. Subsequently, when a message that a destination MAC address hits an MAC address table entry used by an OVC to which the non-interconnected port belongs is received through the non-interconnected port, if an identifier of the OVC to which the port in the MAC address table entry belongs is different from an identifier of the OVC to which the non-interconnected port belongs, the message may be redirected to an interconnected port, corresponding to the identifier of the OVC to which the port in the MAC address table entry belongs, in the OVC to which the non-interconnected port belongs directly based on the ACL policy.

In summary, taking the network device shown in fig. 1 as an example, since the MAC address learning functions of the two interconnected ports, i.e., the port 2 and the port 3, are closed, the MAC address table entry for recording the correspondence between the source MAC address of the packet and the port 3 is not learned any more, but only the MAC address table entry for recording the correspondence between the source MAC address of the packet and the port 1 is learned. On the other hand, for a packet whose destination MAC address received by OVC2 hits the MAC address table entry through port 4, the packet may be redirected to port 3, so that OVC1 may receive the packet through port 2 and forward the packet through port 1. Therefore, the technical scheme of the application can avoid the problem that the network equipment cannot forward the message, namely packet loss can be avoided, and the continuity and reliability of service processing can be improved in practical application.

Corresponding to the embodiment of the message redirection method, the application also provides an embodiment of a message redirection device.

The embodiment of the message redirection device can be applied to network equipment. The device embodiments may be implemented by software, or by hardware, or by a combination of hardware and software. The software implementation is taken as an example, and is formed by reading corresponding computer program instructions in the nonvolatile memory into the memory for operation through the processor of the device where the software implementation is located as a logical means. In terms of hardware, as shown in fig. 3, the present application is a hardware structure diagram of a network device where a message redirection apparatus is located, except for the processor, the memory, the network interface, and the nonvolatile memory shown in fig. 3, the network device where the apparatus is located in the embodiment may also include other hardware according to an actual function of the message redirection, which is not described again.

Referring to fig. 4, a block diagram of a message redirection device according to an exemplary embodiment of the present application is shown. The message redirection apparatus 400 may be applied to the network device shown in fig. 3, and includes:

a saving unit 401, configured to, when an interconnection port is detected, save a correspondence between the interconnection port and an identifier of an OVC to which the interconnection port belongs;

a shutdown unit 402, configured to shutdown a MAC address learning function for the interconnect port;

a determining unit 403, configured to determine, when a message that a destination MAC address hits an MAC address table entry used by an OVC to which a non-interconnected port belongs is received through a non-interconnected port, whether an identifier of the OVC to which a port in the MAC address table entry belongs is the same as an identifier of the OVC to which the non-interconnected port belongs;

a redirecting unit 404, configured to redirect, based on the correspondence, the packet to an interconnection port corresponding to an identifier of the OVC to which the port in the MAC address table entry belongs, in the OVC to which the non-interconnection port belongs, when the two are different.

In an optional embodiment, the apparatus 400 may further include:

a detecting unit 405, configured to send a message through a first port, and detect whether the message is received at a second port;

a determining unit 406, configured to determine that the first port and the second port are interconnection ports if the packet is received at the second port;

the saving unit 401 may include:

a saving subunit 4011, configured to save a correspondence between the identifier information of the first port and the OVC to which the first port belongs, and the identifier information of the second port and the OVC to which the second port belongs.

In another alternative embodiment, the apparatus 400 may further include:

a forwarding unit 407, configured to forward the packet through the non-interconnect port when the two are the same.

In another alternative embodiment, the apparatus 400 may further include:

a generating unit 408, configured to generate a corresponding ACL policy after storing a correspondence between the interconnection port and an identifier of the OVC to which the interconnection port belongs;

the redirection unit 404 may include:

a redirecting subunit 4041, configured to redirect, based on the ACL policy, the packet to an interconnection port in the OVC to which the non-interconnection port belongs, where the interconnection port corresponds to an identifier of the OVC to which the port in the MAC address table entry belongs.

In another alternative embodiment, different OVCs have different identities.

The implementation process of the functions and actions of each unit in the above device is specifically described in the implementation process of the corresponding step in the above method, and is not described herein again.

For the device embodiments, since they substantially correspond to the method embodiments, reference may be made to the partial description of the method embodiments for relevant points. The above-described embodiments of the apparatus are merely illustrative, and the units described as separate parts may or may not be physically separate, and parts displayed as units may or may not be physical units, may be located in one place, or may be distributed on a plurality of network units. Some or all of the modules can be selected according to actual needs to achieve the purpose of the scheme of the application. One of ordinary skill in the art can understand and implement it without inventive effort.

The above description is only exemplary of the present application and should not be taken as limiting the present application, as any modification, equivalent replacement, or improvement made within the spirit and principle of the present application should be included in the scope of protection of the present application.

Claims

1. A message redirection method is applied to a network device, the network device comprises a plurality of ports belonging to different operating system level virtual environments (OVCs), and the method comprises the following steps:

when an interconnection port is detected, storing the corresponding relation between the interconnection port and the identification of the OVC to which the interconnection port belongs; wherein, the interconnection port is a port directly connected among different OVCs;

closing a MAC address learning function for the interconnection port;

2. The method of claim 1, further comprising:

sending a message through a first port, and detecting whether the message is received or not at a second port;

if the message is received at the second port, determining that the first port and the second port are interconnection ports;

the saving the corresponding relationship between the interconnection port and the identification of the OVC to which the interconnection port belongs includes:

and storing the corresponding relation between the identification information of the first port and the OVC to which the first port belongs and the identification information of the second port and the OVC to which the second port belongs.

3. The method of claim 1, further comprising:

and if the two are the same, forwarding the message through the non-interconnection port.

4. The method of claim 1, further comprising:

after the corresponding relation between the interconnection port and the identification of the OVC to which the interconnection port belongs is saved, generating a corresponding ACL strategy;

the redirecting the packet to the interconnection port corresponding to the identifier of the OVC to which the port in the MAC address table entry belongs in the OVC to which the non-interconnection port belongs based on the correspondence includes:

based on the ACL strategy, the message is redirected to an interconnection port corresponding to the identification of the OVC to which the port in the MAC address table entry belongs in the OVC to which the non-interconnection port belongs.

5. The method according to claim 1, wherein different OVCs have different identities.

6. A message redirection apparatus, applied to a network device, where the network device includes a plurality of ports belonging to different operating system level virtual environments OVCs, and the apparatus includes:

a storage unit, configured to store, when an interconnection port is detected, a correspondence between the interconnection port and an identifier of an OVC to which the interconnection port belongs; wherein, the interconnection port is a port directly connected among different OVCs;

7. The apparatus of claim 6, further comprising:

the detection unit is used for sending a message through a first port and detecting whether the message is received or not at a second port;

a determining unit, configured to determine that the first port and the second port are interconnection ports if the packet is received at the second port;

the saving unit includes:

and the storing subunit is configured to store a correspondence relationship between the identifier information of the first port and the OVC to which the first port belongs, and the identifier information of the second port and the OVC to which the second port belongs.

8. The apparatus of claim 6, further comprising:

and the forwarding unit is used for forwarding the message through the non-interconnection port when the two are the same.

9. The apparatus of claim 6, further comprising:

the generating unit is used for generating a corresponding ACL strategy after the corresponding relation between the interconnection port and the identification of the OVC to which the interconnection port belongs is saved;

the redirection unit includes:

and the redirection subunit is configured to redirect, based on the ACL policy, the packet to an interconnection port in the OVC to which the non-interconnection port belongs, where the interconnection port corresponds to the identifier of the OVC to which the port in the MAC address table entry belongs.

10. The apparatus of claim 6, wherein different OVCs have different identities.