CN110430135B

CN110430135B - Message processing method and device

Info

Publication number: CN110430135B
Application number: CN201910611877.7A
Authority: CN
Inventors: 王国利
Original assignee: New H3C Security Technologies Co Ltd
Current assignee: New H3C Security Technologies Co Ltd
Priority date: 2019-07-08
Filing date: 2019-07-08
Publication date: 2021-10-26
Anticipated expiration: 2039-07-08
Also published as: CN110430135A

Abstract

The application provides a message processing method and a device, which are applied to a first service board in a plurality of service boards included in distributed network equipment, wherein the distributed network equipment also comprises an interface board, and the method comprises the following steps: the first service board receives a first service message sent by an interface board, and when the first service board determines that a first session table item matched with message forwarding information does not exist and a source address or a destination address is matched with a preset route, the first service board sends a second service message including the forwarding message information to a second service board, so that when the second service board stores a second session table item matched with the message forwarding information, the second service message is forwarded, and network service interruption can be avoided to a certain extent.

Description

Message processing method and device

Technical Field

The present application relates to the field of data communication technologies, and in particular, to a method and an apparatus for processing a packet.

Background

Network devices (e.g., routers, switches, etc.) of a distributed system architecture may include traffic boards and interface boards.

After receiving a service packet to be processed, the interface board may determine, according to packet forwarding information (e.g., quintuple information) carried by the service packet, which service board the service packet needs to be sent to for processing through hash operation, and then may send the service packet to the determined service board, and process the service packet by the service board.

After receiving the service message, the service board may determine whether an address translation configuration matching the message forwarding information of the service message exists. If the matched address conversion configuration exists, the service board performs address conversion processing on the service message according to the matched address conversion configuration, generates a session table item corresponding to message forwarding information of the service message, and then performs forwarding processing on the service message after the address conversion processing according to a route matched with the service message after the address conversion processing.

If there is no address translation configuration matching, the service board may determine whether there is a session entry matching the message forwarding information of the service packet. If the matched session table entry exists, the service board can perform address conversion processing on the service message according to the matched session table entry, and then forward the service message after the address conversion processing according to the route matched with the service message after the address conversion processing.

If no matched session table entry exists, the service board determines a route matched with a destination address in the message forwarding information, and if the matched route is a preset route, the service board indicates that the service message is a reverse message sent by the server to the client and the reverse message is not uploaded to the service board processing the corresponding forward message, the service board discards the service message, and further network service interruption can be caused.

Disclosure of Invention

In view of this, the present application provides a method and an apparatus for processing a packet, which can avoid interruption of a network service to a certain extent. The specific technical scheme is as follows:

in a first aspect, an embodiment of the present application provides a packet processing method, where the method is applied to a first service board in a plurality of service boards included in a distributed network device, where the distributed network device further includes an interface board, and the method includes:

the first service board receives a first service message sent by the interface board, wherein the first service message comprises message forwarding information, and the message forwarding information comprises a source address and a destination address;

when the first service board determines that a first session table item matched with the message forwarding information does not exist and the source address or the destination address is matched with a preset route, the first service board sends a second service message including the message forwarding information to a second service board, so that when the second service board stores a second session table item matched with the message forwarding information, the second service message is forwarded;

the preset route comprises a route used for preventing a message loop from being generated, and the second service board is other service boards except the first service board in the plurality of service boards.

Optionally, the sending, by the first service board, the second service packet including the forwarding packet information to the second service board includes:

the first service board determines a first target service board from the second service boards on the basis of a preset service board arrangement sequence;

the first service board sends the second service message to the first target service board, wherein the second service message is obtained by adding the identifier of the first service board in the first service message;

when the first service board receives a notification message sent by the first target service board according to the identifier of the first service board, the first service board sends the second service message to a second target service board;

the notification message is used for enabling the first service board to determine that the first target service board cannot forward the second service packet; the second target service board is a service board with a sorting position behind the first target service board in the arrangement sequence of the service boards.

Optionally, after the first service board sends the second service packet to the first target service board, the method further includes:

and when receiving the second service message retransmitted by the first target service board according to the identifier of the first service board, the first service board forwards the second service message to the second target service board.

Optionally, the method further includes:

when the first service board receives the notification message or the second service message sent by the last second service board in the arrangement sequence of the service boards, the first service board discards the first service message and the second service message.

Optionally, after the first service board sends the second service packet including the forwarding packet information to the second service board, the method further includes:

the first service board receives a third session table item sent by a third service board, wherein the third session table item is used for enabling the first service board to perform matching processing on a received third service message which comprises the message forwarding information;

the third service board is a service board which can forward the second service packet in the second service board, and the third session table entry is matched with the packet forwarding information.

Optionally, the preset route further includes a route to be matched, where the route to be matched includes a source address to be matched; the route for preventing the message loop comprises a destination address to be matched;

before the first service board sends the second service packet including the forwarding packet information to the second service board, the method further includes:

when the first service board determines that a first session table item matched with the message forwarding information does not exist and the source address is matched with the source address to be matched, the first service board sends the second service message to the second service board; alternatively, the first and second electrodes may be,

and when the first service board determines that the first session table item matched with the message forwarding information does not exist and the destination address is matched with the destination address to be matched, the first service board sends the second service message to the second service board.

In a second aspect, an embodiment of the present application provides a packet processing apparatus, where the apparatus is applied to a first service board in a plurality of service boards included in a distributed network device, where the distributed network device further includes an interface board, and the apparatus includes:

a first receiving module, configured to receive a first service packet sent by the interface board, where the first service packet includes packet forwarding information, and the packet forwarding information includes a source address and a destination address;

a sending module, configured to send a second service packet including the forwarding packet information to a second service board when it is determined that a first session entry matching the packet forwarding information does not exist and the source address or the destination address matches a preset route, so that when the second session entry matching the packet forwarding information is stored in the second service board, the second service packet is forwarded;

Optionally, the sending module is specifically configured to determine a first target service board from the second service boards based on a preset service board arrangement order;

sending the second service message to the first target service board, wherein the second service message is obtained by adding the identifier of the first service board in the first service message;

when receiving a notification message sent by the first target service board according to the identifier of the first service board, sending the second service message to a second target service board;

Optionally, the apparatus further comprises:

and the forwarding module is used for forwarding the second service message to the second target service board when receiving the second service message retransmitted by the first target service board according to the identifier of the first service board.

Optionally, the apparatus further comprises:

and the discarding module is used for discarding the first service message and the second service message when receiving the notification message or the second service message sent by the last second service board in the arrangement sequence of the service boards.

Optionally, the apparatus further comprises:

a second receiving module, configured to receive a third session entry sent by a third service board, where the third session entry is used to enable the first service board to perform matching processing on a received third service packet that includes the packet forwarding information;

the device further comprises:

the processing module is used for sending the second service message to the second service board when the first session table item matched with the message forwarding information does not exist and the source address is matched with the source address to be matched; alternatively, the first and second electrodes may be,

and when determining that the first session table item matched with the message forwarding information does not exist and the destination address is matched with the destination address to be matched, sending the second service message to the second service board.

In a third aspect, an embodiment of the present application provides a service board, including a processor, a communication interface, a memory, and a communication bus, where the processor, the communication interface, and the memory complete mutual communication through the communication bus;

a memory for storing a computer program;

a processor for implementing the method steps of the first aspect when executing the program stored in the memory.

In a fourth aspect, embodiments of the present application provide a machine-readable storage medium storing machine-executable instructions that, when invoked and executed by a processor, cause the processor to: the method steps of the first aspect are implemented.

In a fifth aspect, embodiments of the present application provide a computer program product comprising instructions which, when executed on a computer, cause the computer to perform the method steps of the first aspect described above.

The embodiment of the application provides a message processing method, which can be applied to a first service board in a plurality of service boards included in a distributed network device, wherein the first service board receives a first service message, and when the first service board determines that a first session table item matching with message forwarding information of the first service message does not exist and a source address or a destination address included in the message forwarding information matches with a preset route, the first service board sends a second service message including the forwarded message information to a second service board, and correspondingly, a service board in the second service board, which stores a second session table item matching with the message forwarding information, can forward the second service message based on the second session table item, thereby avoiding network service interruption to a certain extent.

Of course, not all of the above advantages need be achieved in the practice of any one product or method of the present application.

Drawings

In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings used in the description of the embodiments or the prior art will be briefly described below, it is obvious that the drawings in the following description are only some embodiments of the present application, and for those skilled in the art, other drawings can be obtained according to the drawings without creative efforts.

Fig. 1 is a structural diagram of a networking framework according to an embodiment of the present application;

fig. 2 is a flowchart of a message processing method according to an embodiment of the present application;

fig. 3 is a flowchart of an example of a message processing method according to an embodiment of the present application;

fig. 4 is a flowchart of an example of a message processing method according to an embodiment of the present application;

fig. 5 is a structural diagram of a message processing apparatus according to an embodiment of the present application;

fig. 6 is a structural diagram of a service board according to an embodiment of the present application.

Detailed Description

The technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the drawings in the embodiments of the present application, and it is obvious that the described embodiments are only a part of the embodiments of the present application, and not all of the embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present application.

Referring to fig. 1, fig. 1 is a structural diagram of a networking framework provided in an embodiment of the present application, where the networking framework may include: the distributed network equipment comprises a service board 1, service boards 2 and …, a service board N (N is more than 1) and an interface board, the number of the service boards can be set according to service requirements, and message transparent transmission can be performed between the service boards.

In the related art, when a client needs to access a server, the client may send a service packet to the server, and the service packet is transmitted to an interface board of a distributed network device.

The interface board determines to which service board the service message is sent for processing by a hash algorithm according to the message forwarding information (e.g., quintuple information) of the service message. Assuming that the calculated service message is sent to the service board 1 for service processing, at this time, after the service message is subjected to service processing such as NAT66(Network Address Translation), the message forwarding information of the service message changes.

For example, the conversion process of the service packet is as follows: service messages before conversion: and (3) 2/1234- >4::4/21, the source address is changed through address conversion, for example, the source address is converted from 1::2/1234 to 3::3/1234, and the service message is converted into 3::3/1234- >4::4/21 and is transmitted to the server.

And the service message 4: 4/21- >3: 3/1234 returned by the server is transmitted to an interface board of the distributed network equipment. At this time, the interface board performs hash operation according to the message forwarding information of the service message returned by the server, and the service message returned by the server may not be sent to the service board 1, so that the service message returned by the server is discarded, and the network service is interrupted.

In order to ensure that service processing is performed correctly and a normally connected message is not discarded, embodiments of the present application provide a message processing method and apparatus.

Next, a method for processing a message provided in the embodiment of the present application is first described.

An execution main body of the message processing method provided in the embodiment of the present application may be one service board of a plurality of service boards included in the distributed network device shown in fig. 1, and is referred to as a first service board in the embodiment of the present application.

As shown in fig. 2, a flowchart of a message processing method provided in the embodiment of the present application may include the following steps.

S201: the first service board receives a first service message sent by an interface board.

The first service message comprises message forwarding information, and the message forwarding information comprises a source address and a destination address.

In addition, the message forwarding information may also include other information characterizing the transmission characteristics of the message, for example, the message forwarding information may be five-tuple information (including a source address, a source port number, a destination address, a destination port number, and a protocol number), seven-tuple information (including a source address, a source port number, a destination address, a destination port number, a protocol number, a service type, and an interface index), and the like. The service message received by the interface board in the distributed network device may be a message sent from the client to the server, or a message returned from the server to the client. In the embodiment of the present application, a message sent by a client to a server may be referred to as a forward message, and a message returned by the server to the client may be referred to as a reverse message.

After receiving the service packet (i.e., the first service packet in this embodiment), the interface board may perform a hash operation according to the packet forwarding information (which may be referred to as to-be-matched packet forwarding information) of the first service packet, determine a service board (i.e., the first service board in this embodiment) that processes the first service packet, and send the first service packet to the first service board.

The hash operation is a hash operation method, which converts an input (packet forwarding information in the embodiment of the present application) with an arbitrary length into an output with a fixed length, and the output is recorded as a hash value. This transformation is a kind of compression mapping, i.e. the space of hash values is usually much smaller than the space of inputs, different inputs hashing to the same output. This hash value may correspond to a number of a service board, and how to calculate the hash value is implemented in many ways, which are not listed here.

S202: when the first service board determines that a first session table item matched with the message forwarding information does not exist and the source address or the destination address is matched with the preset route, the first service board sends a second service message including the message forwarding information to the second service board, so that when the second service board stores a second session table item matched with the message forwarding information, the second service message is forwarded.

In the service processing process, when a service board receives a certain forward message, the service board can perform address conversion processing on the forward message according to address conversion configuration, after the address conversion processing is performed on the forward message, the service board can generate a corresponding session table entry, the generated session table entry is a table entry used for recording message forwarding information change conditions in the address conversion processing process in network security equipment, message forwarding information of the forward message before the address conversion processing and message forwarding information of the forward message after the address conversion processing can be recorded in the session table entry, and the generated session table entry can be used for performing address conversion processing on a reverse message corresponding to the forward message.

If the first service packet is a reverse packet, because the packet forwarding information of the reverse packet is inconsistent with the packet forwarding information of the forward packet before the corresponding address conversion processing, the first service board calculated by the hash operation may be consistent with or inconsistent with the service board for processing the forward packet corresponding to the first service packet. Because the service board processing the forward message corresponding to the first service message has established the session table entry, if the first service board is the service board processing the forward message corresponding to the first service message, the first service board can directly forward the first service message.

If the first service board is not a service board for processing a forward message corresponding to the first service message and the first service board does not have a first session entry matched with the message forwarding information to be matched, the first service board may perform route matching according to the message forwarding information to be matched, and if the first service board is matched to a preset route, it indicates that the first service message is a reverse message that is not sent to the correct service board, the first service board may send a second service message including the message forwarding information to be matched to other service boards (i.e., a second service board) except the first service board in the distributed network device.

In the process of sending the second service packet to the second service board, if one of the second service boards has a session entry matching the packet forwarding information to be matched, the service board may forward the second service packet according to the matching session entry.

Optionally, in order to reduce the number of transparent messages between the service boards, S201 may include the following steps:

and when the first service board receives a notification message sent by the first target service board according to the identifier of the first service board, the first service board sends the second service message to the second target service board.

And the second service message is obtained by adding the identifier of the first service board in the first service message. The notification message is used for enabling the first service board to determine that the first target service board cannot forward the second service message, and the second target service board is a service board with a sequencing position behind the first target service board in the arrangement sequence of the service boards. The identifier of the first service board may be a preset serial number of the first service board, or may also be a card slot number of the first service board.

The order of the service boards may be set by a technician based on experience. For example, the service boards may be arranged in the order of the card slot numbers of the service boards from small to large, or the service boards may be arranged in the order of the card slot numbers of the service boards from large to small, but the invention is not limited thereto.

The first service board may determine a service board (i.e., a first target service board) from the second service boards based on the service board arrangement order, and the first target service board may be a first service board in the service board arrangement order. Then, the first service board may send the second service packet to the first target service board, and correspondingly, if the first target service board has the session table entry matched with the packet forwarding information to be matched, the first target service board may perform address conversion processing on the second service packet and forward the second service packet.

In addition, after the first target service board receives the second service message, the first target service board may determine that the second service message is transparently transmitted by the first service board according to the identifier of the first service board carried in the second service message.

If the first target service board determines that the second service packet cannot be forwarded, the first target service board may send a notification message to the first service board according to the identifier of the first service board. And the first service board determines that the first target service board can not forward the second service message according to the notification message.

The first target service board may determine that the second service packet cannot be forwarded when it is determined that there is no session entry matching the to-be-matched packet forwarding information and a preset route is matched according to the to-be-matched packet information.

Optionally, when the first target service board determines that the second service packet cannot be forwarded, the first target service board may also transparently transmit the second service packet back to the first service board according to the identifier of the first service board. When the first service board receives the second service packet retransmitted by the first target service board, the first service board may also determine that the first target service board cannot forward the second service packet.

In addition, when the first service board determines that the first target service board cannot forward the second service message, the first service board may send the second service message to the other remaining service boards, that is, the first service board may determine, in the arrangement order of the service boards, the service board whose sequencing position is behind the first target service board, that is, the second target service board, and send the second service message to the second target service, and so on.

The method for processing the received second service message by the second target service board is consistent with the method for processing the received second service message by the first target service board.

It can be understood that, if the first service board does not receive the returned second service packet or the notification message after the first service board sends the second service packet to another certain target service board, it indicates that the target service board currently receiving the second service packet has the session table entry matched with the packet forwarding information to be matched, and can forward the second service packet. Correspondingly, the first service board does not need to send the second service message to other remaining service boards any more.

In addition, the first service board may also receive a service packet carrying the identifier of the service board sent by a certain service board in the second service board, and since the service board cannot forward the service packet, the service board may pass the service packet through to the first service board according to the packet processing method in the embodiment of the present application. Correspondingly, if a session table entry matching the message forwarding information of the service message exists in the first service board, the first service board may forward the service message according to the matching session table entry, and if the first service board cannot forward the service message, the first service board may send a notification message to the service board according to the identifier of the service board, or the first service board may retransmit the service message to the service board according to the identifier of the service board, so that the service board determines that the first service board cannot forward the service message.

In addition, because the session table entries in the service boards have a certain aging duration, when the first service board receives the first service packet, the second service board may delete the session table entries matching the packet forwarding information to be matched, that is, all the service boards in the distributed network device do not have the session table entries matching the packet forwarding information to be matched, and accordingly, the packet processing method provided in the embodiment of the present application may further perform the following steps:

After the first service board sends the second service packet to the last second service board (which may be referred to as a fourth service board) in the arrangement order of the service boards, if the first service board receives the second service packet transmitted by the fourth service board, or the first service board receives a notification message sent by the fourth service board, it indicates that all the service boards in the distributed network device cannot forward the second service packet, and at this time, to avoid a network service error, the first service board may discard the first service packet and the second service packet.

In order to further improve the efficiency of message processing, so that the first service board may forward a subsequently received service message, optionally, after the first service board sends a second service message to the second service board, the method may further include the following steps:

and the first service board receives a third session table item sent by the third service board.

The third session table entry is used for enabling the first service board to perform matching processing on the received third service message which comprises the message forwarding information to be matched. The third service board is a service board which can forward the second service message in the second service board, and the third session table entry is matched with the message forwarding information to be matched.

In the process of sending the second service packet to the second service board by the first service board, if a session table entry matching the packet forwarding information to be matched exists in a certain service board (may be referred to as a third service board) in the second service board, the third service board may forward the second service packet according to the matching session table entry.

The third service board may also send a session entry (i.e., a third session entry) matching the message forwarding information to be matched to the first service board according to the identifier of the first service board carried in the second service message.

Subsequently, when the interface board receives a service packet (i.e., a third service packet) including the forwarding information of the to-be-matched packet, the service packet may still be sent to the first service board, and the first service board may directly forward the third service packet according to the third session entry, without transparently transmitting the service packet obtained by adding the identifier of the first service board to the third service packet to other service boards, so that the efficiency of packet processing can be improved.

Optionally, the preset route may further include a route to be matched, where the route to be matched includes a source address to be matched, and is used to prevent the route of the packet loop from including a destination address to be matched. Before the first service board sends the second service packet to the second service board, the packet processing method provided in the embodiment of the present application may further perform the following steps:

when the first service board judges that the source address in the message forwarding information is matched with the source address to be matched, the first service board determines that the source address in the message forwarding information is matched with a preset route, or when the first service board judges that the destination address in the message forwarding information is matched with the destination address to be matched, the first service board determines that the destination address in the message forwarding information is matched with the preset route.

The preset route comprises a route for preventing a message loop and a route to be matched.

In one implementation, the route for preventing the message loop may be a NULL0 route, the destination address in the NULL0 route may include a public network address allocated to a private network address of a client in a private network, and the source address to be matched may include a private network address of each server in the private network.

Under the condition that the session table item matched with the message forwarding information to be matched does not exist, when the first service board detects that the source address of the first service message is matched with the source address to be matched or the first service board detects that the destination address of the first service message is matched with the destination address to be matched, the first service board can determine that the first service message is a reverse message which is not uploaded to a correct service board, and further, the first service board can send a second service message to the second service board.

In addition, address translation configuration may be issued in the distributed network device based on the NAT66, for example, the address translation configuration for the source address may be 1:: 21283:: 3128. According to this address translation configuration, if the source address of the service message is 1::2, the service board can translate the source address of the service message to configured 3:: 3.

NULL0 routing may also be configured in the distributed network devices to prevent looping of messages. When the destination address in a certain service message matches the configured NULL0 route, the service message is discarded.

The format of the NULL0 route can be seen in table (1).

Watch (1)

Destination：3::3/128	Protocol:Static
		NextHop:::	Preference：1
Interface：NULL0	Cost：0

In table (1), the Destination address (Destination) is: 3/128, wherein the types of protocols (protocols) are as follows: static, the next hop address (NextHop) is: NULL0 interface, routing cost: 0.

according to the address translation configuration of 1:: 21283:: 3128, based on the networking of fig. 1, if the service packet (which may be referred to as a fourth service packet) sent by the client in the private network to the server in the public network is 1::2/1234- >4:: 4/21. When the service board 2 receives the fourth service packet, the service board 2 performs source address conversion on the fourth service packet, where the fourth service packet after address conversion is 3::3/1234- >4::4/21, and then the service board 2 may perform forwarding processing on the fourth service packet after address conversion, and in addition, the service board 2 may also create a corresponding session table entry.

After the fourth service packet after the address translation processing is transmitted to the server, the server sends a corresponding service packet (which may be referred to as a fifth service packet) 4::4/21- >3:: 3/1234. If the interface board sends the fifth service message to the service board 2 through the hash operation, the service board 2 performs the target address conversion on the fifth service message according to the matched session table entry to obtain 4::4/21- >1::2/1234, and then the service board 2 can forward the fifth service message after the address conversion processing.

If the interface board sends the fifth service message to the service board 1 through the hash operation, the service board 1 judges that the address conversion configuration matched with the message forwarding information carried by the fifth service message does not exist.

Further, the service board 1 does not have a session entry matching the message forwarding information carried in the fifth service message, so that the service board 1 may determine whether the source address or the destination address in the fifth service message matches the preset route, which may include the following two cases:

in the first case, the source address in the fifth service message matches the source address to be matched, and the service board 1 determines that the source address in the fifth service message matches the preset route.

And in the second case, the destination address in the fifth service message is matched with the destination address to be matched, and the service board 1 determines that the destination address in the fifth service message is matched with the preset route.

When either of the two conditions is satisfied, the service board 1 may determine that the fifth service packet is a reverse packet that is not sent to the correct service board.

In this embodiment of the application, the destination address in the fifth service message is matched with the destination address to be matched, and the service board 1 determines that the fifth service message is a reverse message that is not sent to the correct service board.

In the embodiment of the application, a protocol type Static-NAT66 of a route can be newly added, see table (2) and table (3).

Watch (2)

Destination：3::3/128	Protocol:Static-NAT66
		NextHop:::	Preference：1
Interface：NULL0	Cost：0

Watch (3)

Source：5::5/128	Protocol:Static-NAT66
		NextHop:::	Preference：1
Interface：NULL0	Cost：0

The destination address in table (2) is a public network address assigned to the private network address of the client in the private network, and the source address in table (3) is the private network address of the server in the private network.

If the protocol type of the matched route is Static-N AT66 according to the address carried in a service message, it may be determined that the service message is a reverse message that is not uploaded to the correct service board, and then the first service board may transparently transmit the service message to the second service board.

For example, the route to be matched is the route shown in table (3). The address translation for the destination address is configured to be 5:: 51284:: 4128. According to this address translation configuration, if the destination address of the service packet is 5::5, the service board can translate the destination address of the service packet into 4:: 4.

According to the address translation configuration of 5:: 51284:: 4128, based on the networking of fig. 1, if the service message (which may be referred to as a sixth service message) sent by the client in the public network to the server in the private network is 1::2/12345- >5:: 5/21. When the service board 2 receives the sixth service packet, the service board 2 performs destination address translation on the sixth service packet, where the sixth service packet after address translation is 1::2/12345- >4::4/21, and then the service board 2 may forward the sixth service packet after address translation, and in addition, the service board 2 may also create a corresponding session table entry.

After the sixth service packet after the conversion processing is transmitted to the server, the server sends a corresponding service packet (which may be referred to as a seventh service packet) 4::4/21- >1:: 2/12345. If the interface board sends the seventh service message to the service board 2 through the hash operation, the service board 2 performs source address conversion on the seventh service message according to the matched session table entry to obtain 5::5/21- >1::2/12345, and then the service board 2 can forward the seventh service message after the address conversion processing.

If the interface board sends the seventh service message to the service board 1 through the hash operation, the service board 1 judges that the address conversion configuration matched with the message forwarding information carried by the seventh service message does not exist.

Further, the service board 1 does not have a session entry matching the message forwarding information carried in the seventh service message, so that the service board 1 can determine whether the source address or the destination address in the seventh service message matches the preset route.

According to the table (3), the service board 1 determines that the source address in the seventh service packet matches the preset route, and the service board 1 may determine that the seventh service packet is a reverse packet that is not sent to the correct service board.

For convenience of understanding, the following describes a message processing method provided in the embodiment of the present application with reference to a specific example.

In one mode, in combination with the architecture shown in fig. 1, as shown in fig. 3, a message processing method is applied to a service board 1, and the method includes the following steps.

S301: the service board 1 receives a first service packet sent by an interface board.

S302: when the service board 1 determines that there is no first session entry matching the message forwarding information of the first service message, and the source address or the destination address in the first service message matches the preset route, the service board 1 determines a first target service board from the second service board based on the preset service board arrangement sequence.

Wherein the second service board comprises service board 2-service board N.

S303: and the service board 1 sends the second service message to the first target service board.

The second service message is obtained by adding the identifier of the service board 1 to the first service message.

S304: when the service board 1 receives the second service packet retransmitted by the first target service board according to the identifier of the service board 1, the service board 1 forwards the second service packet to the second target service board.

The second target service board is a service board with a sorting position behind the first target service board in the service board arrangement sequence.

S305: when the service board 1 receives the second service packet sent by the last second service board in the service board arrangement sequence, the service board 1 discards the first service packet and the second service packet.

In another way, in combination with the architecture shown in fig. 1, as shown in fig. 4, the message processing method is applied to the service board 1, and the method includes the following steps.

S401: the service board 1 receives a first service packet sent by an interface board.

S402: when the service board 1 determines that there is no first session entry matching the message forwarding information of the first service message, and the source address or the destination address in the first service message matches the preset route, the service board 1 determines a first target service board from the second service board based on the preset service board arrangement sequence.

Wherein the second service board comprises service board 2-service board N.

S403: and the service board 1 sends the second service message to the first target service board.

S404: when the service board 1 receives the second service packet retransmitted by the first target service board according to the identifier of the service board 1, the service board 1 forwards the second service packet to the second target service board.

S405: and the service board 1 receives a third session table item sent by a third service board.

The third session table entry is used for the service board 1 to perform matching processing on a received third service packet including the packet forwarding information of the first service packet, the third service board is a service board capable of performing forwarding processing on a second service packet in the second service board, and the third session table entry is matched with the packet forwarding information of the first service packet.

Corresponding to the embodiment of the method in fig. 2, referring to fig. 5, fig. 5 is a structural diagram of a packet processing apparatus provided in the embodiment of the present application, where the apparatus is applied to a first service board in a plurality of service boards included in a distributed network device, the distributed network device further includes an interface board, and the apparatus includes:

a first receiving module 501, configured to receive a first service packet sent by the interface board, where the first service packet includes packet forwarding information, and the packet forwarding information includes a source address and a destination address;

a sending module 502, configured to send a second service packet including the forwarding packet information to a second service board when it is determined that a first session entry matching the packet forwarding information does not exist and the source address or the destination address matches a preset route, so that when the second session entry matching the packet forwarding information is stored in the second service board, the second service packet is forwarded;

Optionally, the sending module 502 is specifically configured to determine a first target service board from the second service boards based on a preset service board arrangement order;

Optionally, the apparatus further comprises:

the device further comprises:

The embodiment of the present application further provides a service board, which may be referred to as a first service board in this embodiment of the present application, and the distributed network device where the first service board is located further includes other service boards and interface boards, as shown in fig. 6, the first service board includes a processor 601, a communication interface 602, a memory 603, and a communication bus 604, where the processor 601, the communication interface 602, and the memory 603 complete mutual communication through the communication bus 604,

a memory 603 for storing a computer program;

the processor 601 is configured to, when executing the program stored in the memory 603, enable the first service board to execute the steps of the message processing method, where the method includes:

receiving a first service message sent by the interface board, wherein the first service message comprises message forwarding information, and the message forwarding information comprises a source address and a destination address;

when determining that a first session table item matched with the message forwarding information does not exist and the source address or the destination address is matched with a preset route, sending a second service message including the message forwarding information to a second service board, so that when the second session table item matched with the message forwarding information is stored in the second service board, the second service message is forwarded;

Optionally, the instruction, included in the execution of the computer program by the processor 601, for sending the second service packet including the forwarding packet information to the second service board specifically includes:

determining a first target service board from the second service boards based on a preset service board arrangement sequence;

Optionally, the processor 601 executing the computer program further includes executing the following instructions:

and when receiving the second service message retransmitted by the first target service board according to the identifier of the first service board, forwarding the second service message to the second target service board.

and when receiving a notification message or the second service message sent by the last second service board in the service board arrangement sequence, discarding the first service message and the second service message.

receiving a third session table item sent by a third service board, where the third session table item is used to make the first service board perform matching processing on a received third service packet that includes the packet forwarding information;

the processor 601 executing the computer program further comprises executing the following instructions:

when determining that the first session table item matched with the message forwarding information does not exist and the source address is matched with the source address to be matched, sending the second service message to the second service board; alternatively, the first and second electrodes may be,

The communication bus mentioned in the first service board may be a Peripheral Component Interconnect (PCI) bus, an Extended Industry Standard Architecture (EISA) bus, or the like. The communication bus may be divided into an address bus, a data bus, a control bus, etc. For ease of illustration, only one thick line is shown, but this does not mean that there is only one bus or one type of bus.

The communication interface is used for communication between the first service board and other equipment.

The Memory may include a Random Access Memory (RAM) or a Non-Volatile Memory (NVM), such as at least one disk Memory. Optionally, the memory may also be at least one memory device located remotely from the processor.

The Processor may be a general-purpose Processor, including a Central Processing Unit (CPU), a Network Processor (NP), and the like; but also Digital Signal Processors (DSPs), Application Specific Integrated Circuits (ASICs), Field Programmable Gate Arrays (FPGAs) or other Programmable logic devices, discrete Gate or transistor logic devices, discrete hardware components.

In another embodiment provided by the present application, a computer-readable storage medium is further provided, in which a computer program is stored, and the computer program, when executed by a processor, implements the steps of any of the message processing methods described above.

In yet another embodiment provided by the present application, there is also provided a computer program product containing instructions which, when run on a computer, cause the computer to perform any of the message processing methods of the above embodiments.

In the above embodiments, the implementation may be wholly or partially realized by software, hardware, firmware, or any combination thereof. When implemented in software, may be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When loaded and executed on a computer, cause the processes or functions described in accordance with the embodiments of the application to occur, in whole or in part. The computer may be a general purpose computer, a special purpose computer, a network of computers, or other programmable device. The computer instructions may be stored in a computer readable storage medium or transmitted from one computer readable storage medium to another, for example, from one website site, computer, server, or data center to another website site, computer, server, or data center via wired (e.g., coaxial cable, fiber optic, Digital Subscriber Line (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.). The computer-readable storage medium can be any available medium that can be accessed by a computer or a data storage device, such as a server, a data center, etc., that incorporates one or more of the available media. The usable medium may be a magnetic medium (e.g., floppy Disk, hard Disk, magnetic tape), an optical medium (e.g., DVD), or a semiconductor medium (e.g., Solid State Disk (SSD)), among others.

It is noted that, herein, relational terms such as first and second, and the like may be used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. Also, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising an … …" does not exclude the presence of other identical elements in a process, method, article, or apparatus that comprises the element.

All the embodiments in the present specification are described in a related manner, and the same and similar parts among the embodiments may be referred to each other, and each embodiment focuses on the differences from the other embodiments. In particular, for the apparatus, the service board, the computer-readable storage medium and the computer program product embodiment, since they are substantially similar to the method embodiment, the description is relatively simple, and for the relevant points, reference may be made to the partial description of the method embodiment.

The above description is only for the preferred embodiment of the present application, and is not intended to limit the scope of the present application. Any modification, equivalent replacement, improvement and the like made within the spirit and principle of the present application are included in the protection scope of the present application.

Claims

1. A message processing method is applied to a first service board in a plurality of service boards included in a distributed network device, the distributed network device further includes an interface board, and the method includes:

the first session table entry is used for recording message forwarding information of a forward message corresponding to the first service message before address conversion processing and message forwarding information of the forward message corresponding to the first service message after address conversion processing;

if the first service board does not have the first session table item matched with the message forwarding information of the first service message, and the message forwarding information of the first service message is matched with the preset route, the first service message is a reverse message which is not uploaded to a correct service board;

2. The method of claim 1, wherein the sending, by the first service board, the second service packet including the packet forwarding information to the second service board comprises:

3. The method according to claim 2, wherein after the first service board sends the second service packet to the first target service board, the method further comprises:

4. The method according to any one of claims 1-3, further comprising:

5. The method of claim 1, wherein after the first service board sends the second service packet including the packet forwarding information to the second service board, the method further comprises:

6. The method of claim 1, wherein the preset routes further comprise routes to be matched, and the routes to be matched comprise source addresses to be matched; the route for preventing the message loop comprises a destination address to be matched;

before the first service board sends the second service packet including the packet forwarding information to the second service board, the method further includes:

7. A message processing apparatus, wherein the apparatus is applied to a first service board of a plurality of service boards included in a distributed network device, the distributed network device further includes an interface board, and the apparatus includes:

a sending module, configured to send a second service packet including the message forwarding information to a second service board when it is determined that a first session entry matching the message forwarding information does not exist and the source address or the destination address matches a preset route, so that when the second session entry matching the message forwarding information is stored in the second service board, the second service packet is forwarded;

8. The apparatus according to claim 7, wherein the sending module is specifically configured to determine a first target service board from the second service boards based on a preset service board arrangement order;

9. The apparatus of claim 8, further comprising:

10. The apparatus according to any one of claims 7-9, further comprising:

11. The apparatus of claim 7, further comprising:

12. The apparatus of claim 7, wherein the preset routes further comprise routes to be matched, and the routes to be matched comprise source addresses to be matched; the route for preventing the message loop comprises a destination address to be matched;

the device further comprises: