CN112822059A - Service chain arrangement management system and method for intelligent network card - Google Patents

Service chain arrangement management system and method for intelligent network card Download PDF

Info

Publication number
CN112822059A
CN112822059A CN202110178412.4A CN202110178412A CN112822059A CN 112822059 A CN112822059 A CN 112822059A CN 202110178412 A CN202110178412 A CN 202110178412A CN 112822059 A CN112822059 A CN 112822059A
Authority
CN
China
Prior art keywords
service
processing
flow
network card
intelligent network
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN202110178412.4A
Other languages
Chinese (zh)
Other versions
CN112822059B (en
Inventor
黄韬
魏亮
檀朝红
陈俊霞
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Nanjing Upeed Network Technology Co ltd
Jiangsu Future Networks Innovation Institute
Original Assignee
Nanjing Upeed Network Technology Co ltd
Jiangsu Future Networks Innovation Institute
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Nanjing Upeed Network Technology Co ltd, Jiangsu Future Networks Innovation Institute filed Critical Nanjing Upeed Network Technology Co ltd
Priority to CN202110178412.4A priority Critical patent/CN112822059B/en
Publication of CN112822059A publication Critical patent/CN112822059A/en
Application granted granted Critical
Publication of CN112822059B publication Critical patent/CN112822059B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/50Network service management, e.g. ensuring proper service fulfilment according to agreements

Abstract

The invention provides a business chain arrangement management method facing an intelligent network card, which comprises the following steps: a flow identification distribution process, wherein a flow identification is defined for the service flow according to the characteristics of the service flow to be arranged; a service processing chain assembling process, namely assembling a corresponding service processing chain for the flow identification corresponding to the service flow according to the processing requirement of the service flow to be arranged; a service chain arrangement result issuing process, which issues the flow identification, the service flow characteristics of the flow identification and the service processing chain of the flow identification to a service flow processing device; and a service chain arrangement result executing process, namely receiving and loading the service arrangement result, identifying the corresponding service flow according to the service flow characteristics of the flow identification, and executing a service processing chain aiming at the flow identification. The invention improves the effective network bandwidth and throughput and reduces the network data processing time delay; the burden of a CPU is reduced, and the potential threat to a server is isolated; the end-to-end network management of software definition can be realized, the flexible arrangement of virtual network functions is supported, and the performance optimization of the whole network is realized.

Description

Service chain arrangement management system and method for intelligent network card
Technical Field
The invention relates to a business chain arranging technology, in particular to a business chain arranging and managing method and system facing an intelligent network card.
Background
A service chain refers to a group of chains formed by Network functions, that is, an ordered set of services, which can perform operations such as filtering, translating, and checking a communication flow, so as to provide Network functions such as a firewall, Network Address Translation (NAT), Deep Packet Inspection (DPI), and the like. The prior art implements a service chaining function in a data center network by directing traffic flow to network devices through tunneling or traditional routing or two-layer forwarding techniques.
The traditional bypass scheme is mainly configured through a command line or Web, and the functions of interfaces, routing, ACLs, policy routing and the like of all equipment need to be manually configured. The traditional side-hang scheme needs to analyze the sequence of each interface of a flow in and out switch and sequentially configure strategy routing according to the sequence, so that the difficulty is high, and errors are easy to occur. With the development of Software Defined Networking (SDN) technology, service chaining is mainly configured and issued through a graphical interface of a controller, and a service flow and a service chain are defined by selecting a scheduling switch and service equipment. In a conventional network, traffic flows through one network element and then to the next network element, physical connections exist between network elements, and traffic paths are solidified. With the re-development of the technology, Network Functions Virtualization (NFV) technology has emerged. In NFV, a traffic path can be deployed as needed, network elements that can be deployed in the same resource pool in NFV have many types, and different connection modes are required among different network elements in actual deployment, so that a network environment is more and more complex. After the NFV is adopted, the virtual network function deployment can guide different flows to perform different business processing according to needs, and is more flexible and convenient in deployment. However, there are also problems with the NFV approach: on one hand, the network card function of the current server is solidified, and only the preprocessing functions of data packets such as data capturing processing, filtering processing and data packet outgoing construction can be realized, so that the problems of lack of perception and the like to the application are solved; on the other hand, the high-level functions mainly depend on a Central Processing Unit (CPU), which increases the computational burden of the CPU and limits the system performance; in addition, the NFV method based on pure software brings potential security holes.
Disclosure of Invention
The invention aims to solve the technical problem of the defects and provides a service chain arrangement management method and system for an intelligent network card.
A business chain arrangement management system facing an intelligent network card is characterized by comprising a controller and the intelligent network card; the controller is used for performing service chain arrangement management on a control plane, defining the stream identification and the service flow characteristics corresponding to the stream identification, assembling the service processing chain corresponding to the stream identification to form a service chain arrangement result comprising the stream identification, the service flow characteristics corresponding to the stream identification and the service processing chain corresponding to the stream identification, and performing management operations such as issuing, changing and canceling on the service chain arrangement result; the intelligent network card is deployed at the server end and used for receiving, loading and executing a service chain arrangement result on the data platform, processing service flow data and capturing and reporting service flow characteristic data without a flow identifier allocated in advance.
The controller comprises a user input unit, a service chain management unit and an intelligent network card management unit; the user input unit is used for the interaction between the controller and the user and receiving the service processing requirement; the business chain management unit is used for creating, changing, canceling and storing business chain arrangement results according to business processing requirements; and the intelligent network card management unit is used for the interaction between the controller and the intelligent network card, and managing and controlling the intelligent network card.
The intelligent network card comprises a physical port, a virtual port, an expandable multistage pipeline and an intelligent network card management agent;
the physical port refers to a physical interface of the intelligent network card and is used for the communication between the intelligent network card and other network cards or switches;
the virtual port refers to a virtual interface generated by the intelligent network card and is used for the communication between the intelligent network card and a virtual machine, a container and an application;
the extensible multistage pipeline adopts a programmable device supporting a software and hardware cooperative processing acceleration technology, has multistage pipeline processing capacity, and can arrange and execute various service processing functions, wherein the service processing functions comprise but are not limited to protocol analysis, flow identification processing, multilayer flow table processing, VXLAN processing, a filter, a firewall, GRE tunnel processing, IPSec tunnel processing, NAT processing and the like;
the intelligent network card management agent is responsible for setting the initial capacity of the intelligent network card, receiving the management operation of the controller, performing function arrangement on the extensible multistage assembly line, having the capability of creating, changing and canceling the service processing functional entity, and configuring the service processing chain corresponding to the flow identifier according to the service chain arrangement result.
In the extensible multistage pipeline, the 1 st stage processing unit is a programmable parser, the 2 nd stage processing unit is a programmable stream manager, and the subsequent processing units are all extensible service processing units from the 3 rd stage processing unit;
the programmable analyzer is used for executing protocol analysis processing, performing protocol analysis on the service flow data entering the intelligent network card, and transmitting an analysis result and the cache address of the service flow data block to the programmable flow processor;
the programmable stream processor is used for executing stream identification processing, identifying defined service stream characteristics, setting corresponding stream identifications for the service streams, transmitting the stream identifications, analysis results and cache addresses of service stream data blocks to a next-level processing unit, and reporting the undefined service stream characteristics to the controller when the undefined service stream characteristics are identified;
and the expandable service processing unit carries out corresponding processing on the service flow data block according to the service processing chain corresponding to the flow identification.
A business chain arranging and managing method facing to an intelligent network card is characterized by comprising the following steps:
s1: a flow identification distribution process, wherein a flow identification is defined for the service flow according to the characteristics of the service flow to be arranged;
s2: a service processing chain assembling process, namely assembling a corresponding service processing chain for the flow identification corresponding to the service flow according to the processing requirement of the service flow to be arranged;
s3: a service chain arrangement result issuing process, which issues the flow identification, the service flow characteristics of the flow identification and the service processing chain of the flow identification to a service flow processing device;
s4: and a service chain arrangement result executing process, namely receiving and loading the service arrangement result, identifying the corresponding service flow according to the service flow characteristics of the flow identification, and executing a service processing chain aiming at the flow identification.
The process S1 further includes a service flow feature extraction process and a service chain arrangement result management process;
in the process of extracting the characteristics of the service flow, the characteristics of the service flow to be arranged can be directly input by a user or can be from the service flow which is not allocated with the flow identification and is captured and reported by the service flow processing device;
the service chain arrangement result management process supports management of the service chain arrangement result, management operations include but are not limited to changing, canceling and storing, and operation objects include a flow identifier, service flow characteristics corresponding to the flow identifier and a service processing chain corresponding to the flow identifier.
The service processing chain adopts an expandable multi-stage pipeline processing mode, the first stage is protocol analysis processing, the second stage is flow identification processing, each stage of function is one of software and hardware cooperative processing acceleration function sets, and the software and hardware cooperative processing acceleration function sets comprise but are not limited to protocol analysis processing, flow identification processing, VXLAN processing, a filter, a firewall, GRE tunnel processing, IPSec tunnel processing, NAT processing, multilayer flow table processing and the like.
Compared with the prior art, the invention adopting the technical scheme has the following technical effects:
(1) the invention relates to a business chain arrangement management method and a business chain arrangement management system facing an intelligent network card, wherein stream identification is adopted to represent different business streams, a business processing chain corresponding to the stream identification is executed according to the stream identification, and different business processing chains are flexibly defined by adopting very small overhead;
(2) the service chain arrangement management method and system facing the intelligent network card adopt an expandable multistage pipeline processing mode, can set different pipelines aiming at different service flows, and realize the order and the arrangeability of service processing chains;
(3) the service chain arrangement management method and system facing the intelligent network card support network function unloading based on software and hardware coprocessing acceleration function set, can greatly reduce the burden of a CPU and isolate potential threats to a server while improving effective network bandwidth and throughput and reducing network data processing time delay;
(4) the service chain arrangement management method and system facing the intelligent network card support server-side network control based on a multilayer flow table, can realize end-to-end network management of software definition, and support flexible arrangement of virtual network functions to realize overall network performance optimization.
Drawings
Fig. 1 is a schematic view of a service chain arrangement management system for an intelligent network card according to an embodiment of the present invention;
FIG. 2 is a basic block diagram of a controller provided in an embodiment of the present invention;
fig. 3 is a basic structure diagram of an intelligent network card according to an embodiment of the present invention;
fig. 4 is a typical structure diagram of an intelligent network card according to an embodiment of the present invention;
fig. 5 is a diagram illustrating an example of a chain for processing the service of the intelligent network card according to an embodiment of the present invention.
In the figure, 101, inputting service flow data; 102. service flow characteristic data; 103. a service chain arrangement result; 104. outputting the service flow data; 105. and (4) service processing requirements.
Detailed Description
In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the description of the embodiments or the prior art will be briefly described below, it is obvious that the drawings in the following description are only some embodiments of the present invention, and for those skilled in the art, other drawings can be obtained according to the drawings without creative efforts.
The following detailed description of the embodiments of the present invention will be made with reference to the accompanying drawings:
the network card is used as an interface for providing network access and interconnection communication for the server, is mature in function and solidified, and cannot meet new function requirements of flexible networking, custom tunnel and the like of the cloud data center network. The existing common network card can only unload some basic network processing functions such as checksum calculation, segmentation and the like, and for the acceleration of unloading of the basic network functions such as a data center server operating system protocol stack and the like, the intelligent network card or the intelligent server adapter improves the performance of the server in the cloud and the private data center by unloading the network processing workload and tasks from a CPU of the server.
By referring to the idea of defining a network by software, the service chain arrangement management method for the intelligent network card provided by the embodiment of the invention can materialize a service processing chain according to different service requirements.
As shown in fig. 1, a service chain arrangement management system facing an intelligent network card includes:
the controller can be an SDN controller, and is configured to perform service chain arrangement management on a control plane, define a stream identifier and service flow characteristics corresponding to the stream identifier, assemble a service processing chain corresponding to the stream identifier, form a service chain arrangement result including the stream identifier, the service flow characteristics corresponding to the stream identifier, and the service processing chain corresponding to the stream identifier, and perform management operations such as issuing, changing, canceling, and the like on the service chain arrangement result;
and the intelligent network card is deployed at the server end and used for receiving, loading and executing the service chain arrangement result on the data platform, processing the service flow data and capturing and reporting the service flow characteristic data without the flow identification allocated in advance.
As shown in fig. 1, the intelligent network card may input service stream data 101, may report service stream characteristic data 102, may receive a service link arrangement result 103, and may output service stream data 104.
As shown in fig. 1, the controller may receive traffic flow feature data 102, may issue a traffic chain arrangement result 103, and may receive a traffic handling requirement 105 from a user.
Aiming at the system shown in fig. 1, the service chain arrangement management method facing the intelligent network card of the invention comprises the following steps:
the controller in fig. 1 receives the traffic handling requirements 105 of the user; the controller executes a flow identifier distribution process, and defines a flow identifier for the service flow according to the characteristics of the service flow to be arranged; the controller executes the assembly process of the business processing chain, and assembles a corresponding business processing chain for the flow identifier corresponding to the business flow according to the processing requirement of the business flow to be arranged; the controller executes a service chain arrangement result issuing process, and issues a service chain arrangement result 103 of a service processing chain containing the flow identifier, the service flow characteristics of the flow identifier and the flow identifier to the intelligent network card in fig. 1;
the service processing chain adopts an extensible multi-stage pipeline processing mode, each stage of function is one of a software and hardware cooperative processing acceleration function set, and the software and hardware cooperative processing acceleration function set comprises but is not limited to protocol analysis processing, flow identification processing, VXLAN processing, a filter, a firewall, GRE tunnel processing, IPSec tunnel processing, NAT processing, multilayer flow table processing and the like.
The intelligent network card in fig. 1 receives the service chain arrangement result 103, and loads the service chain arrangement result; the intelligent network card inputs the service flow data 101, searches for the corresponding flow identifier according to the identified service flow characteristics, continues to execute the service processing chain aiming at the flow identifier after searching for the corresponding flow identifier, and outputs the service flow data 104;
the intelligent network card in fig. 1 inputs service stream data 101, searches for a corresponding stream identifier according to the identified service stream characteristics, cannot find the corresponding stream identifier, generates service stream characteristic data 102, and reports the service stream characteristic data to the controller in fig. 1;
after receiving the service flow characteristic data 102, the controller in fig. 1 calculates a corresponding service chain arrangement result, and sends the service chain arrangement result to the intelligent network card.
The controller in fig. 1 may also change and cancel the existing service chain arrangement result according to the service processing requirement 105, and issue the changed and cancelled service chain arrangement result to the intelligent network card.
For better description of the present invention, the controller and the intelligent network card are expanded in detail, respectively.
As shown in fig. 2, a controller of a service chain arrangement management system for an intelligent network card has a basic structure including a user input unit, a service chain management unit, and an intelligent network card management unit; the user input unit realizes an interactive interface between the controller and a user and is mainly used for receiving the service processing requirement of the user; the service chain management unit is used for creating, changing, canceling and storing service chain arrangement results according to service processing requirements provided by users or service processing requirements of unknown service flows reported by the intelligent network card; and the intelligent network card management unit is used for interaction between the controller and the intelligent network card and can simultaneously manage and control at least 1 intelligent network card.
As shown in fig. 3, a basic structure of an intelligent network card-oriented service chain arrangement management system includes a physical port, a virtual port, an extensible multi-stage pipeline, and an intelligent network card management agent;
the physical port refers to a physical interface of the intelligent network card, and is used for the communication between the intelligent network card and other network cards or switches, and typical physical port types can be an Ethernet interface, an optical fiber interface and the like;
the virtual port is a virtual interface formed by software based on the drive of an intelligent network card in the server and is used for interaction between the intelligent network card and a virtual machine, a container and application;
the extensible multistage assembly line is a programmable device which adopts a processing acceleration technology supporting software and hardware cooperation, has multistage assembly line processing capacity, can arrange entities with service processing functions on the assembly line, and executes a service flow processing process according to a flow identifier and a service processing chain corresponding to the flow identifier; the service processing functions include but are not limited to protocol parsing processing, flow identification processing, multilayer flow table processing, VXLAN processing, filters, firewalls, GRE tunneling processing, IPSec tunneling processing, NAT processing and other functions;
in fig. 3, function 1, function 2, and function n represent a single processing stage, respectively corresponding to 1 service processing function, and generally, the value of n is not more than 64; the intelligent network card management agent is responsible for setting the initial capacity of the intelligent network card, interacts with the intelligent network card management unit of the controller, receives the management operation of the controller, can perform function arrangement on the expandable multistage production line, has the capability of creating, changing and canceling business processing functional entities, and can configure a business processing chain corresponding to the flow identifier according to the business chain arrangement result.
To better describe the present invention, a typical structure of the intelligent network card is further explained.
As shown in fig. 4, according to a service chain arrangement result issued by a controller, level 1 of an extensible multistage pipeline of the intelligent network card is a programmable parser, level 2 is a programmable flow manager, and levels 3 to nth are extensible service processing units, where n is greater than 3 but not greater than 64; the programmable analyzer is used for executing protocol analysis processing, setting a protocol analysis layer according to a service chain arrangement result sent by the controller, performing protocol analysis processing on service flow data entering the intelligent network card, and transmitting an analysis result and a cache address of the service flow data block to the programmable flow processor; the programmable stream processor is used for executing stream identification processing, identifying defined service stream characteristics for service stream data after protocol analysis according to a service chain arrangement result issued by the controller, setting corresponding stream identifications for the service streams, and transmitting the stream identifications, the analysis result and the cache addresses of the service stream data blocks to a next-stage processing unit; the programmable flow processor is used for executing flow identification processing, identifying undefined service flow characteristics of service flow data subjected to protocol analysis according to a service chain arrangement result sent by the controller, reporting the service flow characteristics to the intelligent network card management agent, and submitting the service flow data to the controller for further processing through the intelligent network card management agent; the expandable service processing unit is an materialized service processing function and correspondingly processes the service flow data block according to the service processing chain corresponding to the flow identification.
In order to better describe the present invention, a typical structure of the intelligent network card and a service chain arrangement result are further illustrated.
As shown in fig. 5, according to the service chain arrangement result sent by the controller, the extensible multistage pipeline materializes 4 typical service processing functions, which are respectively an L2/L3 parser implemented based on a programmable parser, a flow manager implemented based on a programmable flow manager and having an identifier length of 32bits, an ACL-oriented filter, and NAT processing.
For example, for business processing requirements: discarding default network data;
the network data with source IP address belonging to 192.168.1.1/24 network segment can be translated by NAT.
For the structure in fig. 5, the following two service chain scheduling controls are required:
(1) flow identification: (0x00000001)
The flow characteristics are: (Source IP Address, Arbitrary Address)
Service processing chain: (L2/L3 parser: L3, 32bits stream manager: 0x00000001, ACL oriented filter: discard)
(2) Flow identification: (0x00000002)
The flow characteristics are: (Source IP Address, 192.168.1.1/24)
Service processing chain: (L2/L3 parser: L3, 32bits stream manager: 0x00000002, ACL oriented filter: permit, NAT process)
In order to implement the service chain arrangement management method and system facing the intelligent network card, the specific implementation technology of the intelligent network card adopted in the invention can be, but is not limited to, the following modes: the multi-core intelligent network card is based on an ASIC network card comprising a plurality of CPU cores; an intelligent network card based on a Field Programmable Gate Array (FPGA); the FPGA enhanced intelligent network card combines a hardware programmable FPGA with an ASIC network controller.
The foregoing shows and describes the general principles, essential features, and advantages of the invention. It will be understood by those skilled in the art that the present invention is not limited to the embodiments described above, and the preferred embodiments of the present invention are described in the above embodiments and the description, and are not intended to limit the present invention. The scope of the invention is defined by the appended claims and equivalents thereof.

Claims (7)

1. A business chain arrangement management system facing an intelligent network card is characterized by comprising a controller and the intelligent network card; the controller is used for performing service chain arrangement management on a control plane, defining the stream identification and the service flow characteristics corresponding to the stream identification, assembling the service processing chain corresponding to the stream identification to form a service chain arrangement result comprising the stream identification, the service flow characteristics corresponding to the stream identification and the service processing chain corresponding to the stream identification, and performing management operations such as issuing, changing and canceling on the service chain arrangement result; the intelligent network card is deployed at the server end and used for receiving, loading and executing a service chain arrangement result on the data platform, processing service flow data and capturing and reporting service flow characteristic data without a flow identifier allocated in advance.
2. The intelligent network card-oriented service chain arrangement management system according to claim 1, wherein the controller comprises a user input unit, a service chain management unit and an intelligent network card management unit; the user input unit is used for the interaction between the controller and the user and receiving the service processing requirement; the business chain management unit is used for creating, changing, canceling and storing business chain arrangement results according to business processing requirements; and the intelligent network card management unit is used for the interaction between the controller and the intelligent network card, and managing and controlling the intelligent network card.
3. The intelligent network card-oriented service chain arrangement management system according to claim 1, wherein the intelligent network card comprises a physical port, a virtual port, an extensible multi-stage pipeline, and an intelligent network card management agent;
the physical port refers to a physical interface of the intelligent network card and is used for the communication between the intelligent network card and other network cards or switches;
the virtual port refers to a virtual interface generated by the intelligent network card and is used for the communication between the intelligent network card and a virtual machine, a container and an application;
the extensible multistage pipeline adopts a programmable device supporting a software and hardware cooperative processing acceleration technology, has multistage pipeline processing capacity, and can arrange and execute various service processing functions, wherein the service processing functions comprise but are not limited to protocol analysis, flow identification processing, multilayer flow table processing, VXLAN processing, a filter, a firewall, GRE tunnel processing, IPSec tunnel processing, NAT processing and the like;
the intelligent network card management agent is responsible for setting the initial capacity of the intelligent network card, receiving the management operation of the controller, performing function arrangement on the extensible multistage assembly line, having the capability of creating, changing and canceling the service processing functional entity, and configuring the service processing chain corresponding to the flow identifier according to the service chain arrangement result.
4. The intelligent network card-oriented service chain orchestration management system according to claims 1-3, wherein in the scalable multi-stage pipeline, the level 1 processing unit is a programmable parser, the level 2 processing unit is a programmable stream manager, and starting from the level 3 processing unit, the subsequent processing units are all scalable service processing units;
the programmable analyzer is used for executing protocol analysis processing, performing protocol analysis on the service flow data entering the intelligent network card, and transmitting an analysis result and the cache address of the service flow data block to the programmable flow processor;
the programmable stream processor is used for executing stream identification processing, identifying defined service stream characteristics, setting corresponding stream identifications for the service streams, transmitting the stream identifications, analysis results and cache addresses of service stream data blocks to a next-level processing unit, and reporting the undefined service stream characteristics to the controller when the undefined service stream characteristics are identified;
and the expandable service processing unit carries out corresponding processing on the service flow data block according to the service processing chain corresponding to the flow identification.
5. A business chain arranging and managing method facing to an intelligent network card is characterized by comprising the following steps:
s1: a flow identification distribution process, wherein a flow identification is defined for the service flow according to the characteristics of the service flow to be arranged;
s2: a service processing chain assembling process, namely assembling a corresponding service processing chain for the flow identification corresponding to the service flow according to the processing requirement of the service flow to be arranged;
s3: a service chain arrangement result issuing process, which issues the flow identification, the service flow characteristics of the flow identification and the service processing chain of the flow identification to a service flow processing device;
s4: and a service chain arrangement result executing process, namely receiving and loading the service arrangement result, identifying the corresponding service flow according to the service flow characteristics of the flow identification, and executing a service processing chain aiming at the flow identification.
6. The service chain arrangement management method for the intelligent network card according to claim 5, wherein the process S1 further includes a service flow feature extraction process and a service chain arrangement result management process;
in the process of extracting the characteristics of the service flow, the characteristics of the service flow to be arranged can be directly input by a user or can be from the service flow which is not allocated with the flow identification and is captured and reported by the service flow processing device;
the service chain arrangement result management process supports management of the service chain arrangement result, management operations include but are not limited to changing, canceling and storing, and operation objects include a flow identifier, service flow characteristics corresponding to the flow identifier and a service processing chain corresponding to the flow identifier.
7. The service chain arrangement management method for the intelligent network card according to any one of claims 5 to 6, wherein the service processing chain adopts an extensible multi-stage pipeline processing mode, the first stage is protocol parsing processing, the second stage is flow identification processing, each stage functions as one of a software and hardware cooperative processing acceleration function set, and the software and hardware cooperative processing acceleration function set includes but is not limited to protocol parsing processing, flow identification processing, VXLAN processing, a filter, a firewall, GRE tunneling processing, IPSec tunneling processing, NAT processing, multi-layer flow table processing, and the like.
CN202110178412.4A 2021-02-09 2021-02-09 Service chain arrangement management system and method facing intelligent network card Active CN112822059B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202110178412.4A CN112822059B (en) 2021-02-09 2021-02-09 Service chain arrangement management system and method facing intelligent network card

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202110178412.4A CN112822059B (en) 2021-02-09 2021-02-09 Service chain arrangement management system and method facing intelligent network card

Publications (2)

Publication Number Publication Date
CN112822059A true CN112822059A (en) 2021-05-18
CN112822059B CN112822059B (en) 2022-08-16

Family

ID=75864791

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202110178412.4A Active CN112822059B (en) 2021-02-09 2021-02-09 Service chain arrangement management system and method facing intelligent network card

Country Status (1)

Country Link
CN (1) CN112822059B (en)

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105407056A (en) * 2014-09-16 2016-03-16 中国电信股份有限公司 Method and system for establishing service chain in software-defined network
CN110740053A (en) * 2018-07-20 2020-01-31 中国移动通信集团浙江有限公司 Service arranging method and device
CN111371608A (en) * 2020-02-28 2020-07-03 苏州浪潮智能科技有限公司 Method, device and medium for deploying SFC service chain
CN111585787A (en) * 2020-04-02 2020-08-25 华南理工大学 Device and method for improving forwarding efficiency of NFV service chain based on FPGA
CN111683074A (en) * 2020-05-29 2020-09-18 国网江苏省电力有限公司信息通信分公司 NFV-based secure network architecture and network security management method

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105407056A (en) * 2014-09-16 2016-03-16 中国电信股份有限公司 Method and system for establishing service chain in software-defined network
CN110740053A (en) * 2018-07-20 2020-01-31 中国移动通信集团浙江有限公司 Service arranging method and device
CN111371608A (en) * 2020-02-28 2020-07-03 苏州浪潮智能科技有限公司 Method, device and medium for deploying SFC service chain
CN111585787A (en) * 2020-04-02 2020-08-25 华南理工大学 Device and method for improving forwarding efficiency of NFV service chain based on FPGA
CN111683074A (en) * 2020-05-29 2020-09-18 国网江苏省电力有限公司信息通信分公司 NFV-based secure network architecture and network security management method

Also Published As

Publication number Publication date
CN112822059B (en) 2022-08-16

Similar Documents

Publication Publication Date Title
US10892941B2 (en) Distributed visibility fabrics for private, public, and hybrid clouds
CN109547580B (en) Method and device for processing data message
CN111200628B (en) Network controller sub-cluster for distributed computing deployment
US9110860B2 (en) Topology-aware fabric-based offloading of collective functions
JP4932939B2 (en) Open platform architecture that integrates many heterogeneous network functions
CN112134798B (en) Apparatus, system and method for service chaining
EP2911347A1 (en) Providing policy information
EP2466821A2 (en) Methods and apparatus for forwarding-state transport in a distributed control plane
US10305749B2 (en) Low latency flow cleanup of openflow configuration changes
US20110231570A1 (en) Method and Apparatus for Mirroring Frames to a Remote Diagnostic System
WO2020256997A1 (en) Monitoring network traffic using traffic mirroring
US10057193B2 (en) Cardinality based packet processing in software-defined networking (SDN) switches
US9794193B2 (en) Software defined visibility fabric
CN112367278B (en) Cloud gateway system based on programmable data switch and message processing method thereof
US20190199622A1 (en) Data packet forwarding unit in a data transmission network
CN112822059B (en) Service chain arrangement management system and method facing intelligent network card
US10708179B2 (en) Method of handling data packets through a conditional state transition table and apparatus using the same
US9374308B2 (en) Openflow switch mode transition processing
CN112988240A (en) Service chain arrangement management system and method for intelligent network card
WO2017052589A1 (en) Pre-processing of data packets with network switch application-specific integrated circuit
Mohammadkhan et al. Protocols to support autonomy and control for NFV in software defined networks
US10110477B2 (en) Integrated data plane for heterogeneous network services
CN117938525A (en) Firewall configuration method, device, computer equipment and storage medium
CN116431328A (en) Millions-level flow table speed construction system, method, medium and DPU processing device
CN117097659A (en) Method and device for realizing SRv6 multiple programmable modules

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant