CN113518025B

CN113518025B - Message management method, device, equipment and machine-readable storage medium

Info

Publication number: CN113518025B
Application number: CN202110597719.8A
Authority: CN
Inventors: 袁晓妹
Original assignee: New H3C Security Technologies Co Ltd
Current assignee: New H3C Security Technologies Co Ltd
Priority date: 2021-05-31
Filing date: 2021-05-31
Publication date: 2023-04-25
Anticipated expiration: 2041-05-31
Also published as: CN113518025A

Abstract

The present disclosure provides a method, apparatus, device and machine-readable storage medium for message management, where the method includes: analyzing the message to be processed, and judging whether the message to be processed needs GRE encapsulation or not; GRE packaging is carried out on the message to be processed which needs GRE packaging to generate an associated GRE message; and inquiring a GRE table item, and acquiring a flag bit associated with the GRE message, wherein the flag bit is used for indicating whether the associated GRE message is forwarded at the local equipment, and the local forwarding associated flag bit indicates the GRE message forwarded by the local equipment according to the flag bit. According to the technical scheme, after the matched message to be processed is packaged into the GRE message, whether the GRE message is locally forwarded is judged, and the GRE message is correspondingly processed according to the judging result, so that the actions of packaging the GRE message and secondary drainage are completed in one circle, the forwarding performance of the message is improved, and the GRE packaged message can be forwarded.

Description

Message management method, device, equipment and machine-readable storage medium

Technical Field

The present disclosure relates to the field of communications technologies, and in particular, to a method, an apparatus, a device, and a machine-readable storage medium for managing a message.

Background

FPGA (Field Programmable Gate Array ) is a product of further development on the basis of programmable devices such as PAL, GAL, etc. The programmable device is used as a semi-custom circuit in the field of Application Specific Integrated Circuits (ASICs), which not only solves the defect of custom circuits, but also overcomes the defect of limited gate circuits of the original programmable device.

GRE (Generic Routing Encapsulation ) is a generic routing encapsulation protocol that encapsulates datagrams of some network layer protocols so that they can be transported in an IP network.

The VPN (Virtual Private Network ) functions to establish a private network over a public network for encrypted communications. The VPN gateway realizes remote access through encryption of the data packet and conversion of the destination address of the data packet. The VPN may be implemented in a variety of ways, e.g., by a server, hardware, software, etc.

A wide variety of tunneling techniques are widely used in VPNs, including GRE tunneling. Tunneling involves the whole process including encapsulation, transmission and decapsulation of data. The message enters the FPGA, and is analyzed and judged to be GRE packaged and forwarded. The new IP header and the original IP header that are encapsulated are not routed to the downstream device through the algorithm, so how to ensure that the GRE message can be forwarded quickly and the performance is not affected is a problem that must be solved.

The conventional method is to determine that the message is GRE encapsulated, and the FPGA directly sends the message to the CPU for processing, but the CPU utilization rate is increased when the flow is increased, and the processing performance of the CPU is lower than that of the FPGA. The other method adopts the method that the message GRE is still processed in the FPGA, the message GRE is directly transmitted to the inlet from the outlet, and is forwarded after being processed for two circles in the FPGA, so that the overall processing packet rate of the FPGA is reduced.

Disclosure of Invention

In view of the above, the disclosure provides a method and apparatus for managing a message, an electronic device, and a machine-readable storage medium, so as to improve the problem of large GRE package forwarding performance consumption.

The technical scheme is as follows:

the disclosure provides a message management method applied to network equipment, the method comprising: analyzing the message to be processed, and judging whether the message to be processed needs GRE encapsulation or not; GRE packaging is carried out on the message to be processed which needs GRE packaging to generate an associated GRE message; and inquiring a GRE table item, and acquiring a flag bit associated with the GRE message, wherein the flag bit is used for indicating whether the associated GRE message is forwarded at the local equipment, and the local forwarding associated flag bit indicates the GRE message forwarded by the local equipment according to the flag bit.

As a technical solution, the querying the GRE entry, obtaining a flag bit associated with the GRE packet, where the flag bit is used to indicate whether the associated GRE packet is forwarded by a local device, and according to the flag bit, the local forwarding of the associated flag bit indicates that the GRE packet is forwarded by the local device, including: for GRE messages forwarded by non-local equipment indicated by associated flag bits, setting a flag bit of a message header of the message, wherein the set flag bit is used for indicating that the current GRE message is a secondary drainage GRE message; and forwarding the secondary drainage GRE message so that the destination equipment forwards the secondary drainage GRE message hitting the outlet information according to the result of inquiring the tunnel table entry.

As a technical solution, the performing GRE encapsulation on a message to be processed requiring GRE encapsulation to generate an associated GRE message includes: and inquiring a GRE table item, acquiring GRE information associated with the message to be processed, and carrying out GRE encapsulation on the message to be processed needing GRE encapsulation according to the GRE information to generate an associated GRE message.

As a technical solution, the analyzing the message to be processed, and determining whether the message to be processed needs GRE encapsulation, includes: analyzing the message to be processed, and judging whether the message to be processed needs GRE encapsulation or not according to the output interface associated with the message to be processed.

The disclosure also provides a message management device applied to a network device, the device comprising: the analysis module is used for analyzing the message to be processed and judging whether the message to be processed needs GRE encapsulation or not; the packaging module is used for carrying out GRE packaging on the message to be processed needing GRE packaging to generate an associated GRE message; and the forwarding module is used for inquiring the GRE table entry, acquiring a flag bit associated with the GRE message, wherein the flag bit is used for indicating whether the associated GRE message is forwarded at the local equipment, and the local forwarding associated flag bit indicates the GRE message forwarded by the local equipment according to the flag bit.

The present disclosure also provides an electronic device comprising a processor and a machine-readable storage medium storing machine-executable instructions executable by the processor, the processor executing the machine-executable instructions to implement the foregoing message management method.

The present disclosure also provides a machine-readable storage medium storing machine-executable instructions that, when invoked and executed by a processor, cause the processor to implement the aforementioned message management method.

The technical scheme provided by the disclosure at least brings the following beneficial effects:

after the matched message to be processed is packaged into the GRE message, judging whether the GRE message is locally forwarded or not, and correspondingly processing according to a judging result, so that the actions of packaging and secondary drainage of the GRE message are completed in one circle, the forwarding performance of the message is improved, and the forwarding of the GRE packaged message can be performed.

Drawings

In order to more clearly illustrate the embodiments of the present disclosure or the technical solutions in the prior art, the drawings that are required to be used in the embodiments of the present disclosure or the description of the prior art will be briefly described below, and it is apparent that the drawings in the following description are only some embodiments described in the present disclosure, and other drawings may also be obtained according to these drawings of the embodiments of the present disclosure to those skilled in the art.

FIG. 1 is a flow chart of a method of message management in one embodiment of the present disclosure;

FIG. 2 is a block diagram of a message management device in one embodiment of the present disclosure;

fig. 3 is a hardware configuration diagram of an electronic device in one embodiment of the present disclosure.

Detailed Description

The terminology used in the embodiments of the disclosure is for the purpose of describing particular embodiments only and is not intended to be limiting of the disclosure. As used in this disclosure and the claims, the singular forms "a," "an," and "the" are intended to include the plural forms as well, unless the context clearly indicates otherwise. It should also be understood that the term "and/or" as used herein refers to any or all possible combinations including one or more of the associated listed items.

It should be understood that although the terms first, second, third, etc. may be used in the embodiments of the present disclosure to describe various information, these information should not be limited to these terms. These terms are only used to distinguish one type of information from another. For example, first information may also be referred to as second information, and similarly, second information may also be referred to as first information, without departing from the scope of the present disclosure. Depending on the context, furthermore, the word "if" used may be interpreted as "at … …" or "at … …" or "in response to a determination".

In one technical scheme, a message is converted into two circles in an FPGA to check two sessions. When the detected message needs GRE encapsulation, the encapsulated message is output to the entrance to inquire the session again, and the corresponding exit is searched and forwarded. Turning the message twice reduces the packet rate in the internal processing of the logic and reduces the performance. When searching session, the first circle of message uses tunnel IP address, and the logic internal performance is seriously reduced under the condition of single tunnel.

Specifically, the technical scheme is as follows.

In one embodiment, the present disclosure provides a method for message management, applied to a network device, where the method includes: analyzing the message to be processed, and judging whether the message to be processed needs GRE encapsulation or not; GRE packaging is carried out on the message to be processed which needs GRE packaging to generate an associated GRE message; and inquiring a GRE table item, and acquiring a flag bit associated with the GRE message, wherein the flag bit is used for indicating whether the associated GRE message is forwarded at the local equipment, and the local forwarding associated flag bit indicates the GRE message forwarded by the local equipment according to the flag bit.

Specifically, as shown in fig. 1, the method comprises the following steps:

step S11, analyzing the message to be processed, and judging whether the message to be processed needs GRE encapsulation or not.

Step S12, GRE packaging is carried out on the message to be processed which needs GRE packaging to generate an associated GRE message.

And S13, inquiring a GRE table item, acquiring a flag bit associated with the GRE message, and indicating the GRE message forwarded by the local equipment according to the flag bit by locally forwarding the associated flag bit.

In one embodiment, the querying the GRE entry obtains a flag bit associated with the GRE packet, where the flag bit is used to indicate whether the associated GRE packet is forwarded by the local device, and according to the flag bit, the locally forwarding the associated flag bit indicates that the GRE packet is forwarded by the local device, and includes: for GRE messages forwarded by non-local equipment indicated by associated flag bits, setting a flag bit of a message header of the message, wherein the set flag bit is used for indicating that the current GRE message is a secondary drainage GRE message; and forwarding the secondary drainage GRE message so that the destination equipment forwards the secondary drainage GRE message hitting the outlet information according to the result of inquiring the tunnel table entry.

In one embodiment, the performing GRE encapsulation on the message to be processed requiring GRE encapsulation to generate an associated GRE message includes: and inquiring a GRE table item, acquiring GRE information associated with the message to be processed, and carrying out GRE encapsulation on the message to be processed needing GRE encapsulation according to the GRE information to generate an associated GRE message.

In one embodiment, the parsing the message to be processed, and determining whether the message to be processed needs GRE encapsulation, includes: analyzing the message to be processed, and judging whether the message to be processed needs GRE encapsulation or not according to the output interface associated with the message to be processed.

In one embodiment, the processing of GRE encapsulated messages requires the addition of two entries to assist in completion. And firstly, a GRE table entry, and acquiring IP header information and GRE information which are encapsulated according to the table look-up of the message header in the GRE table entry. And the other is a tunnel table entry, wherein the tunnel table entry is searched according to the outer layer header of the message of the secondary drainage GRE, key value matching (source IP, destination IP and protocol number) is carried out on the search result, and if the matching is correct, the outlet index is found.

The following will describe two cases of the present board package present board forwarding and the present board package destination board forwarding in detail.

The local device processes the encapsulation and forwarding flow: firstly, analyzing a message, and then searching an exit table to judge whether GRE (generic object oriented encapsulation) is needed; if the GRE table entry is required to be packaged, searching the GRE table entry to acquire packaging information and whether a mark is forwarded on the plate, namely a zone bit; packaging the outer layer IP header and GRE header information according to the obtained packaging information; if the local equipment forwards, the normal flow is carried out, if the local equipment does not forward, the Ethernet type in the two-layer header is modified to be 0x0, and a mark bit is set, which means that the message is a secondary flow-guiding GRE message, and then the message is forwarded.

The forwarding flow of the destination equipment is as follows: firstly, analyzing the message, and judging whether the message is a secondary drainage GRE message according to whether the Ethernet type in the two-layer header is 0x0 and whether a marking bit is set, if so, the message is the secondary drainage GRE message; and inquiring the tunnel table item according to the outer layer header information, judging whether the tunnel table item is hit or not, and forwarding according to the acquired interface outlet information if the tunnel table item is hit.

In one embodiment, the disclosure also provides a message management apparatus, as shown in fig. 2, applied to a network device, where the apparatus includes: the parsing module 21 is configured to parse the message to be processed, and determine whether the message to be processed needs GRE encapsulation; the encapsulation module 22 is configured to perform GRE encapsulation on a message to be processed that needs GRE encapsulation to generate an associated GRE message; and the forwarding module 23 is configured to query a GRE entry, obtain a flag bit associated with the GRE packet, and use the flag bit to indicate whether the associated GRE packet is forwarded by the local device, and forward the associated flag bit to indicate the GRE packet forwarded by the local device according to the flag bit.

The device embodiments are the same as or similar to the corresponding method embodiments and are not described in detail herein.

In one embodiment, the disclosure provides an electronic device, including a processor and a machine-readable storage medium storing machine-executable instructions that can be executed by the processor, where the processor executes the machine-executable instructions to implement the foregoing packet management method, and from a hardware level, a schematic view of a hardware architecture may be shown in fig. 3.

In one embodiment, the present disclosure provides a machine-readable storage medium storing machine-executable instructions that, when invoked and executed by a processor, cause the processor to implement the aforementioned message management method.

Here, a machine-readable storage medium may be any electronic, magnetic, optical, or other physical storage device that may contain or store information, such as executable instructions, data, or the like. For example, a machine-readable storage medium may be: RAM (Radom Access Memory, random access memory), volatile memory, non-volatile memory, flash memory, a storage drive (e.g., hard drive), a solid state drive, any type of storage disk (e.g., optical disk, dvd, etc.), or a similar storage medium, or a combination thereof.

The system, apparatus, module or unit set forth in the above embodiments may be implemented in particular by a computer chip or entity, or by a product having a certain function. A typical implementation device is a computer, which may be in the form of a personal computer, laptop computer, cellular telephone, camera phone, smart phone, personal digital assistant, media player, navigation device, email device, game console, tablet computer, wearable device, or a combination of any of these devices.

For convenience of description, the above devices are described as being functionally divided into various units, respectively. Of course, the functions of the various elements may be implemented in the same one or more software and/or hardware when implementing the present disclosure.

It will be apparent to those skilled in the art that embodiments of the present disclosure may be provided as a method, system, or computer program product. Accordingly, the present disclosure may take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, embodiments of the present disclosure may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, etc.) having computer-usable program code embodied therein.

The present disclosure is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the disclosure. It will be understood that each flow and/or block of the flowchart illustrations and/or block diagrams, and combinations of flows and/or blocks in the flowchart illustrations and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.

Moreover, these computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instruction means which implement the function specified in the flowchart flow or flows and/or block diagram block or blocks.

These computer program instructions may also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.

It will be appreciated by those skilled in the art that embodiments of the present disclosure may be provided as a method, system, or computer program product. Accordingly, the present disclosure may take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present disclosure may take the form of a computer program product embodied on one or more computer-usable storage media (which may include, but are not limited to, disk storage, CD-ROM, optical storage, etc.) having computer-usable program code embodied therein.

The foregoing is merely an embodiment of the present disclosure and is not intended to limit the present disclosure. Various modifications and variations of this disclosure will be apparent to those skilled in the art. Any modifications, equivalent substitutions, improvements, or the like, which are within the spirit and principles of the present disclosure, are intended to be included within the scope of the claims of the present disclosure.

Claims

1. A method for managing messages, applied to a network device, the method comprising:

analyzing the message to be processed, and judging whether the message to be processed needs GRE encapsulation or not;

GRE packaging is carried out on the message to be processed which needs GRE packaging to generate an associated GRE message;

and inquiring a GRE table item, and acquiring a flag bit associated with the GRE message, wherein the flag bit is used for indicating whether the associated GRE message is forwarded at the local equipment, and the local forwarding associated flag bit indicates the GRE message forwarded by the local equipment according to the flag bit.

2. The method of claim 1, wherein the querying the GRE entry obtains a flag bit associated with the GRE packet, the flag bit being used to indicate whether the associated GRE packet is forwarded by the local device, and according to the flag bit, the locally forwarding the associated flag bit indicates the GRE packet forwarded by the local device, including:

for GRE messages forwarded by non-local equipment indicated by associated flag bits, setting a flag bit of a message header of the message, wherein the set flag bit is used for indicating that the current GRE message is a secondary drainage GRE message;

and forwarding the secondary drainage GRE message so that the destination equipment forwards the secondary drainage GRE message hitting the outlet information according to the result of inquiring the tunnel table entry.

3. The method of claim 1, wherein the performing GRE encapsulation on the message to be processed requiring GRE encapsulation generates an associated GRE message, comprising:

and inquiring a GRE table item, acquiring GRE information associated with the message to be processed, and carrying out GRE encapsulation on the message to be processed needing GRE encapsulation according to the GRE information to generate an associated GRE message.

4. The method of claim 1, wherein the parsing the message to be processed to determine whether the message to be processed requires GRE encapsulation comprises:

analyzing the message to be processed, and judging whether the message to be processed needs GRE encapsulation or not according to the output interface associated with the message to be processed.

5. A message management apparatus for use with a network device, the apparatus comprising:

the analysis module is used for analyzing the message to be processed and judging whether the message to be processed needs GRE encapsulation or not;

the packaging module is used for carrying out GRE packaging on the message to be processed needing GRE packaging to generate an associated GRE message;

and the forwarding module is used for inquiring the GRE table entry, acquiring a flag bit associated with the GRE message, wherein the flag bit is used for indicating whether the associated GRE message is forwarded at the local equipment, and the local forwarding associated flag bit indicates the GRE message forwarded by the local equipment according to the flag bit.

6. The apparatus of claim 5, wherein the querying the GRE entry obtains a flag associated with the GRE packet, the flag being used to indicate whether the associated GRE packet is forwarded by the local device, and the locally forwarding the associated flag indicating the GRE packet forwarded by the local device according to the flag, comprises:

7. The apparatus of claim 5, wherein the GRE encapsulating the message to be processed requiring GRE encapsulation to generate an associated GRE message comprises:

8. The apparatus of claim 5, wherein the parsing the message to be processed to determine whether the message to be processed requires GRE encapsulation comprises:

9. An electronic device, comprising: a processor and a machine-readable storage medium storing machine-executable instructions executable by the processor to perform the method of any one of claims 1-4.

10. A machine-readable storage medium storing machine-executable instructions which, when invoked and executed by a processor, cause the processor to implement the method of any one of claims 1-4.