CN113014507B

CN113014507B - Traffic processing method, device, system and computer readable storage medium

Info

Publication number: CN113014507B
Application number: CN201911313521.1A
Authority: CN
Inventors: 游涛; 李金帆; 唐新宇; 刘剑桥
Original assignee: China Telecom Corp Ltd
Current assignee: China Telecom Corp Ltd
Priority date: 2019-12-19
Filing date: 2019-12-19
Publication date: 2022-09-23
Anticipated expiration: 2039-12-19
Also published as: CN113014507A

Abstract

The disclosure relates to a traffic processing method, device, system and computer readable storage medium, and relates to the technical field of communication. The flow responding to the terminal receives PPPoE sent by the optical modem through the optical modem, and the MAC address of the terminal is encapsulated in the PPPoE; identifying a terminal according to the MAC address analyzed from the PPPoE; and correspondingly processing the flow according to the customization requirement of the terminal.

Description

Traffic processing method, device, system and computer readable storage medium

Technical Field

The present disclosure relates to the field of communications technologies, and in particular, to a method and an apparatus for processing traffic, a system for processing traffic, and a computer-readable storage medium.

Background

In the trend of internet applications, internet access terminals are developed from computers to smart phones, to smart terminals, and from one to many. Terminals in a single-user home have increased both in type and number. Therefore, in order to meet the requirement of the user for customized management of the terminal, the operator access layer equipment needs to identify the corresponding terminal of the traffic.

In the related art, a tunnel is opened by a plug-in tunnel network element, and a Media Access Control (MAC) address of a terminal is acquired to identify the terminal.

Disclosure of Invention

The inventors of the present disclosure found that the following problems exist in the above-described related art: externally hanging tunnel network elements causes network cost increase.

In view of this, the present disclosure provides a traffic processing technical solution, which can perform customized processing on traffic of a user without increasing network cost.

According to some embodiments of the present disclosure, there is provided a traffic processing method, including: responding to the flow of the terminal, receiving PPPoE (Point-to-Point Protocol Over Ethernet) sent by the optical modem through the optical modem, wherein the PPPoE is encapsulated with the MAC address of the terminal; identifying a terminal according to the MAC address analyzed from the PPPoE; and correspondingly processing the flow according to the customization requirement of the terminal.

In some embodiments, the MAC address is encapsulated by the optical modem in a Point-to-Point Protocol Packet (PPP Packet) field of the PPPoE.

In some embodiments, the corresponding processing of the flow includes: according to the check field encapsulated in PPPoE of the optical modem, checking the MAC address; and in the case of passing the verification, carrying out corresponding treatment on the flow.

In some embodiments, the corresponding processing of the flow includes: verifying whether the flow belongs to white list service or not according to the MAC address; and correspondingly processing the flow under the condition of belonging to the white list service.

According to other embodiments of the present disclosure, there is provided a traffic processing apparatus including: a receiving unit, configured to receive PPPoE sent by an optical modem through the optical modem in response to a traffic of a terminal, where a MAC address of the terminal is encapsulated; the identification unit is used for identifying the terminal according to the MAC address analyzed from the PPPoE; and the processing unit is used for correspondingly processing the flow according to the customization requirement of the terminal.

In some embodiments, the MAC address is encapsulated by the optical modem in a PPP Packet field of PPPoE.

In some embodiments, the processing unit checks the MAC address according to a check field encapsulated in PPPoE by the optical modem, and if the check field passes, the processing unit processes the traffic accordingly.

In some embodiments, the processing unit verifies whether the traffic belongs to the white list service according to the MAC address, and performs corresponding processing on the traffic in the case of belonging to the white list service.

According to still other embodiments of the present disclosure, there is provided a processing apparatus for traffic, including: a memory; and a processor coupled to the memory, the processor configured to perform the method of processing traffic in any of the above embodiments based on instructions stored in the memory device.

According to still further embodiments of the present disclosure, there is provided a traffic processing system, including: a processing device of the flow rate, which is used for executing the processing method of the flow rate in any one of the above embodiments; and an optical modem for encapsulating the MAC address of the terminal in PPPoE.

According to still further embodiments of the present disclosure, there is provided a computer-readable storage medium having stored thereon a computer program which, when executed by a processor, implements a method of processing traffic in any of the above embodiments.

In the above embodiment, through the extension to PPPoE, the MAC address of the terminal is encapsulated in PPPoE, so that the MAC address can be received by the access layer device through each layer of network. Thus, the flow of the user can be customized on the premise of not increasing the network cost.

Drawings

The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments of the disclosure and together with the description, serve to explain the principles of the disclosure.

The present disclosure can be more clearly understood from the following detailed description with reference to the accompanying drawings, in which:

fig. 1 illustrates a flow diagram of some embodiments of a method of processing traffic of the present disclosure;

fig. 2 shows a schematic diagram of some embodiments of the extended PPPoE of the present disclosure;

fig. 3 shows a schematic diagram of some embodiments of a processing device of traffic of the present disclosure;

fig. 4 illustrates a block diagram of some embodiments of a processing device of traffic of the present disclosure;

FIG. 5 shows a block diagram of further embodiments of a device for handling traffic of the present disclosure;

FIG. 6 illustrates a block diagram of yet further embodiments of a device for handling traffic of the present disclosure;

fig. 7 illustrates a block diagram of some embodiments of a processing system for traffic of the present disclosure.

Detailed Description

Various exemplary embodiments of the present disclosure will now be described in detail with reference to the accompanying drawings. It should be noted that: the relative arrangement of the components and steps, the numerical expressions, and numerical values set forth in these embodiments do not limit the scope of the present disclosure unless specifically stated otherwise.

Meanwhile, it should be understood that the sizes of the respective portions shown in the drawings are not drawn in an actual proportional relationship for the convenience of description.

The following description of at least one exemplary embodiment is merely illustrative in nature and is in no way intended to limit the disclosure, its application, or uses.

Techniques, methods, and apparatus known to one of ordinary skill in the relevant art may not be discussed in detail, but are intended to be part of the specification where appropriate.

In all examples shown and discussed herein, any particular value should be construed as exemplary only and not as limiting. Thus, other examples of the exemplary embodiments may have different values.

It should be noted that: like reference numbers and letters refer to like items in the following figures, and thus, once an item is defined in one figure, it need not be discussed further in subsequent figures.

As mentioned above, the existing network architecture of the operator cannot meet the customization demand of the user for the terminal, and the root cause is that the operator cannot identify the real home terminal of the user.

For example, after data of the home network terminal device passes through the optical modem, the ethernet layer two protocol of the home network terminal device is modified. This may cause the MAC address information of the real terminal to be lost, causing the operator access layer device to be unable to identify the real home terminal. In the related technology, tunnel opening is performed by externally hanging a tunnel network element and the like to acquire MAC address information, so that the cost is high.

In order to solve the above problems, the present disclosure extends the way of embedding the MAC in PPPoE on the basis of PPPoE. In this way, the home network terminal identification can be mapped. Thereby, the local network element can also identify the terminal equipment. This can be achieved, for example, by the following embodiments.

Fig. 1 illustrates a flow diagram of some embodiments of a method of processing traffic of the present disclosure.

As shown in fig. 1, the method includes: step 110, receiving PPPoE; step 120, identifying a terminal; step 130, the flow is processed.

In step 110, PPPoE transmitted from the optical modem is received in response to the traffic of the terminal passing through the optical modem, wherein the MAC address of the terminal is encapsulated. For example, the MAC address is encapsulated by the optical modem in the PPP Packet field of PPPoE.

In step 120, the terminal is identified based on the MAC address parsed from PPPoE.

In step 130, the flow is processed accordingly according to the customized requirements of the terminal.

In some embodiments, the MAC address is checked against a check field encapsulated in PPPoE by the optical modem; and in the case of passing the verification, correspondingly processing the flow.

In some embodiments, based on the MAC address, it is verified whether the traffic belongs to a white list service; and under the condition of belonging to the white list service, carrying out corresponding treatment on the traffic.

In the above embodiment, by extending PPPoE, the MAC address of the terminal is encapsulated in PPPoE so that the MAC address can be received by the access layer device through each layer of network (e.g., three-layer modem device). Thus, the flow of the user can be customized without increasing the network cost.

Because the PPP protocol is encapsulated in the protocol, the functions which cannot be provided by the traditional Ethernet, such as authentication, encryption, compression and the like, can be provided. The function can be used for a cable modem (cable modem), a digital subscriber line and the like to provide a protocol architecture of an access service to a subscriber through an ethernet protocol. The transfer of terminal MAC address information may be achieved, for example, by the embodiment in fig. 2.

Fig. 2 shows a schematic diagram of some embodiments of the extended PPPoE of the present disclosure.

As shown in fig. 2, PPP (Point-to-Point Protocol) is encapsulated in an Ethernet (Ethernet) frame, thereby forming a network tunnel Protocol.

For example, Ethernet includes: a Destination address field, e.g., 48 bits in size; source address field, e.g., 48 bits in size; an Ether _ type field, e.g., 16 bits in size; a PPPoE _ Packet field; checksum (Checksum) field, e.g., 16 bits in size.

For example, PPPoE _ Packet field, PPPoE, where the encapsulated fields include: a Ver (version) field; a Type field; a Code (Code) field; a Session _ ID (time identification) field; a Length field; a PPP Packet field, for example, 16 bits in size, is used to encapsulate PPP so as to transfer MAC address information of the terminal.

For example, the PPP Packet field, PPP, has encapsulated therein: a Protocol field, e.g., of a size of 8 to 16 bits; an IP Packet (internet protocol Packet) field for encapsulating MAC address information of the terminal; padding field.

For example, the IP Packet field has encapsulated therein: a Terminal _ MAC (Terminal MAC) field, e.g., 48 bits in size; a Check _ flag field, e.g., 8 bits in size; a Packet field for encapsulating data related to the traffic, such as a password, a user name, etc.

In the above embodiment, PPPoE is expanded, and the MAC address of the Terminal is encapsulated in an IP Packet, forming a Terminal _ MAC field; and a Check field redundancy Check flag field is added. Thus, the IP (Internet Protocol) message with the MAC address of the user terminal can be transmitted through three layers of networks (physical layer, link layer, IP layer).

Fig. 3 shows a schematic diagram of some embodiments of a device for handling traffic of the present disclosure.

As shown in fig. 3, the traffic processing device may be disposed on a device with capability of terminating PPPoE, such as a local side vMSE (virtualization Multi-Service edge router), or a controller thereof. And encapsulating PPPoE on the user optical modem equipment, and decapsulating the PPPoE on the local side vMSE equipment to acquire the MAC address of the user terminal.

The optical modem responds to the discovery of one or more user terminals and records the MAC address of each user terminal into a local MAC address table; when the flow of the user terminal passes through the optical modem, the optical modem encapsulates the MAC of the user terminal to the PPPoE to form an IP message, and the IP message penetrates to the local side vMSE; the vMSE terminates the PPPoE, and maps the traffic to a corresponding specific terminal MAC; and customizing the flow according to the requirement of the terminal.

In some embodiments, the optical modem sends the user's service request to the operator's APP or Portal; the operator generates a service arranging request according to the service request and then sends the service arranging request to the controller; the controller correspondingly controls the vMSE according to the service arranging request; and the vMSE executes corresponding operation according to the control instruction.

In some embodiments, after the vMSE analyzes the MAC address, it may determine whether the service request of the corresponding user terminal belongs to a white list service; allowing corresponding flow to enter the Internet through the local side equipment under the condition of belonging to the white list service; and under the condition that the service does not belong to the white list service, determining the service request as an abnormal service, and not allowing the corresponding flow to enter the Internet through the local side equipment.

In the above embodiment, the identification of the user terminal in the office device across the three-layer network is realized. Through the extension of PPPoE, the MAC address of the terminal is encapsulated to the IP message, so that the IP message can carry the MAC address information of the terminal to penetrate through a three-layer network. In this way, the operator can identify the user terminal and provide value added services thereto.

Fig. 4 illustrates a block diagram of some embodiments of a device for handling traffic of the present disclosure.

As shown in fig. 4, the processing device 4 of the traffic includes a receiving unit 41, an identifying unit 42, and a processing unit 43.

The receiving unit 41 receives PPPoE transmitted from the optical modem through the optical modem in response to traffic of the terminal. The PPPoE is packaged with the MAC address of the terminal.

The identification unit 42 identifies the terminal from the MAC address parsed from PPPoE. The processing unit 43 processes the flow accordingly according to the customization requirements of the terminal.

In some embodiments, the processing unit 43 checks the MAC address based on a check field encapsulated in PPPoE by the optical modem. In case of passing the verification, the processing unit 43 processes the flow accordingly.

In some embodiments, the processing unit 43 verifies whether the traffic belongs to a white list service based on the MAC address. In case of belonging to a white list service, the processing unit 43 processes the traffic accordingly.

Fig. 5 shows a block diagram of further embodiments of a device for processing traffic of the present disclosure.

As shown in fig. 5, the flow rate processing device 5 of this embodiment includes: a memory 51 and a processor 52 coupled to the memory 51, the processor 52 being configured to execute a processing method of a traffic in any one of the embodiments of the present disclosure based on instructions stored in the memory 51.

The memory 51 may include, for example, a system memory, a fixed nonvolatile storage medium, and the like. The system memory stores, for example, an operating system, application programs, a boot loader, a database, and other programs.

Fig. 6 illustrates a block diagram of yet other embodiments of a device for handling traffic according to the present disclosure.

As shown in fig. 6, the flow rate processing device 6 of this embodiment includes: a memory 610 and a processor 620 coupled to the memory 610, wherein the processor 620 is configured to execute the method for processing traffic in any of the above embodiments based on instructions stored in the memory 610.

The memory 610 may include, for example, system memory, fixed non-volatile storage media, and the like. The system memory stores, for example, an operating system, an application program, a boot loader, and other programs.

The processing means 6 of the traffic may further comprise an input output interface 630, a network interface 640, a storage interface 650, etc. These

interfaces

630, 640, 650 and the connections between the memory 610 and the processor 620 may be, for example, via a bus 660. The input/output interface 630 provides a connection interface for input/output devices such as a display, a mouse, a keyboard, and a touch screen. The network interface 640 provides a connection interface for a variety of networking devices. The storage interface 650 provides a connection interface for external storage devices such as an SD card and a usb disk.

As shown in fig. 7, the traffic processing system 7 includes a traffic processing device 71 and an optical modem 72.

The processing device 71 of the flow rate executes the processing method of the flow rate in any of the above embodiments; the optical modem 72 encapsulates the MAC address of the terminal in PPPoE.

As will be appreciated by one skilled in the art, embodiments of the present disclosure may be provided as a method, system, or computer program product. Accordingly, the present disclosure may take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, the present disclosure may take the form of a computer program product embodied on one or more computer-usable non-transitory storage media having computer-usable program code embodied therein.

Up to this point, a processing method of a traffic, a processing apparatus of a traffic, a processing system of a traffic, and a computer-readable storage medium according to the present disclosure have been described in detail. Some details that are well known in the art have not been described in order to avoid obscuring the concepts of the present disclosure. It will be fully apparent to those skilled in the art from the foregoing description how to practice the presently disclosed embodiments.

The method and system of the present disclosure may be implemented in a number of ways. For example, the methods and systems of the present disclosure may be implemented in software, hardware, firmware, or any combination of software, hardware, and firmware. The above-described order for the steps of the method is for illustration only, and the steps of the method of the present disclosure are not limited to the order specifically described above unless specifically stated otherwise. Further, in some embodiments, the present disclosure may also be embodied as programs recorded in a recording medium, the programs including machine-readable instructions for implementing the methods according to the present disclosure. Thus, the present disclosure also covers a recording medium storing a program for executing the method according to the present disclosure.

Although some specific embodiments of the present disclosure have been described in detail by way of illustration, it should be understood by those skilled in the art that the foregoing examples are for purposes of illustration only and are not intended to limit the scope of the present disclosure. It will be appreciated by those skilled in the art that modifications may be made to the above embodiments without departing from the scope and spirit of the present disclosure. The scope of the present disclosure is defined by the appended claims.

Claims

1. A method for processing traffic comprises the following steps:

responding to the flow of a terminal, receiving a point-to-point communication protocol PPPoE based on Ethernet sent by an optical modem through the optical modem, wherein a media access control bit (MAC) address of the terminal is encapsulated in the PPPoE, and the MAC address is encapsulated in a point-to-point protocol Packet (PPP Packet) field of the PPPoE by the optical modem;

identifying the terminal according to the MAC address analyzed from the PPPoE;

and correspondingly processing the flow according to the customization requirement of the terminal.

2. The processing method of claim 1, wherein said correspondingly processing said traffic comprises:

checking the MAC address according to a check field encapsulated in the PPPoE by the optical modem;

and correspondingly processing the flow under the condition of passing the verification.

3. The processing method according to claim 1 or 2, wherein said performing respective processing on said traffic comprises:

verifying whether the flow belongs to white list service or not according to the MAC address;

and correspondingly processing the flow under the condition of belonging to the white list service.

4. A device for processing traffic, comprising:

a receiving unit, configured to respond to a traffic of a terminal and receive a point-to-point communication protocol PPPoE over ethernet sent by an optical modem through the optical modem, where a media access control bit MAC address of the terminal is encapsulated in the PPPoE, and the MAC address is encapsulated by the optical modem in a point-to-point protocol Packet PPP Packet field of the PPPoE;

an identification unit, configured to identify the terminal according to the MAC address parsed from the PPPoE;

and the processing unit is used for carrying out corresponding processing on the flow according to the customization requirement of the terminal.

5. The processing apparatus according to claim 4,

and the processing unit checks the MAC address according to a check field encapsulated in the PPPoE by the optical modem, and correspondingly processes the flow under the condition of passing the check.

6. The processing apparatus according to claim 4 or 5,

and the processing unit verifies whether the flow belongs to a white list service according to the MAC address, and performs corresponding processing on the flow under the condition of belonging to the white list service.

7. A device for processing traffic, comprising:

a memory; and

a processor coupled to the memory, the processor configured to perform the method of processing traffic of any of claims 1-3 based on instructions stored in the memory.

8. A system for processing traffic, comprising:

processing means of the flow rate for performing the processing method of the flow rate according to any one of claims 1 to 3;

the optical modem is used for encapsulating the MAC address of the media access control bit of the terminal in a point-to-point communication protocol PPPoE.

9. A computer-readable storage medium, on which a computer program is stored which, when being executed by a processor, carries out the method of processing a flow according to any one of claims 1 to 3.