CN113691435B

CN113691435B - Message processing method, system and device

Info

Publication number: CN113691435B
Application number: CN202110969016.3A
Authority: CN
Inventors: 于海波
Original assignee: New H3C Security Technologies Co Ltd
Current assignee: New H3C Security Technologies Co Ltd
Priority date: 2021-08-23
Filing date: 2021-08-23
Publication date: 2023-04-25
Anticipated expiration: 2041-08-23
Also published as: CN113691435A

Abstract

The embodiment of the invention provides a message processing method, a system and a device, which are applied to the technical field of communication and applied to UP in a vBRAS system, wherein the vBRAS system also comprises a CP, and the method comprises the following steps: when determining that the tunnel between the CP and the UP fails, if a control protocol message sent by the network equipment is received through the L2TP tunnel, determining a response message for responding to the control protocol message based on the message type of the control protocol message; and forwarding the response message to the network equipment through the L2TP tunnel. The scheme UP provided by the embodiment of the invention can process the received control protocol message, thereby preventing the tunnel between the vBRAS system and other network equipment from being disconnected.

Description

Message processing method, system and device

Technical Field

The present invention relates to the field of communications technologies, and in particular, to a method, a system, and an apparatus for processing a message.

Background

The network devices can establish an L2TP tunnel between the network devices based on the L2TP (Layer 2Tunneling Protocol, layer two tunneling protocol), so that the network devices can transmit data messages based on the L2TP tunnel, and communication between the network devices is realized. After the L2TP tunnel is established, the network device M at one end of the L2TP tunnel may send a control protocol packet to the network device N at the other end, and after receiving the control protocol packet, the network device N may send a response packet to the network device M, and respond to the control protocol packet. If the network device N can receive the response message in a certain period of time, it is determined that the L2TP tunnel has not failed. Otherwise, if the L2TP tunnel is determined to be faulty, the L2TP tunnel is disconnected, so that the transmission of the data message between the network devices at the two ends of the L2TP tunnel is affected.

One end of the L2TP tunnel may be a vbas (Virtual Broadband Remote Access Server ) system, where the vbas system includes an UP (User Plane) for forwarding a packet and a CP (Control Plane) for controlling the vbas system, and the vbas system may be regarded as a network device. The UP may directly forward the data packet based on the L2TP tunnel, and after receiving a control protocol packet sent by the network device at the other end of the L2TP tunnel, the UP needs to send the control protocol packet to the CP, and the CP replies the control protocol packet.

If the tunnel between the UP and the CP is failed or the CP is failed, the function of forwarding the message based on the L2TP tunnel between the vBRAS system and other network devices is not affected. But the CP is difficult to respond to the received control protocol message, so that the L2TP tunnel between the vbas system and other network devices is disconnected, and the transmission of the message between the other network devices and the vbas system is affected.

Disclosure of Invention

An object of the embodiments of the present invention is to provide a method, a system, and a device for processing a received control protocol packet, so as to prevent a tunnel between a vbas system and other network devices from being disconnected. The specific technical scheme is as follows:

In a first aspect, an embodiment of the present invention provides a method for processing a message, which is applied to an UP in a vbas system, where the vbas system further includes a CP, and the method includes:

when determining that a tunnel between the CP and the UP fails, if a control protocol message sent by a network device is received through an L2TP tunnel, determining a response message for responding to the control protocol message based on the message type of the control protocol message;

and forwarding the response message to the network equipment through the L2TP tunnel.

In one embodiment of the present invention, the determining, based on the message type of the control protocol message, a response message for responding to the control protocol message includes:

if the message type of the control protocol message is a first type or a second type, determining the first message as a response message for responding to the control protocol message, wherein the control protocol message of the first type is used for: detecting whether the L2TP tunnel fails, where the second type of control protocol packet is used to: instruct tearing down a session created based on the L2TP tunnel;

if the message type of the control protocol message is a third type, determining the second message as the response message, wherein the third type of the control protocol message is used for: instructing the vbas system to create a session with the network device based on the L2TP tunnel, where the second packet is configured to: indicating the network device to end the creation session.

In one embodiment of the invention, the method further comprises:

when the message type of the control protocol message is the second type, determining the session to be removed according to the session identifier carried by the control protocol message;

and deleting the message forwarding table entry corresponding to the session to be removed.

In one embodiment of the invention, the method further comprises:

after determining that the tunnel fault between the CP and the UP is recovered, sending a session tear down message to the CP, so that the CP tear down the session to be torn down, where the session tear down message carries: and the session identifier of the session to be torn down.

In one embodiment of the invention, the method further comprises:

recording NS and NR carried in the response message;

when determining that the tunnel fault between the CP and the UP is recovered, sending an identifier update instruction to the CP, so that the CP updates an NS corresponding to the locally recorded L2TP tunnel to a maximum NS, and updates an NR corresponding to the locally recorded L2TP tunnel to a maximum NR, where the identifier update instruction carries: and the recorded maximum NS, maximum NR and tunnel identification of the L2TP tunnel.

In one embodiment of the present invention, it is determined whether a tunnel between the CP and the UP is failed by:

Determining whether a CUSP tunnel between the UP and the CP fails;

if yes, determining that the tunnel between the CP and the UP fails.

In a second aspect, an embodiment of the present invention provides a packet processing system, where the system includes UP and CP;

the CP is used for stopping message processing when determining that the tunnel between the CP and the UP fails;

the UP is used for determining a response message for responding to the control protocol message based on the message type of the control protocol message if the control protocol message sent by the network equipment is received through the L2TP tunnel when the tunnel between the CP and the UP is determined to be faulty; and forwarding the response message to the network equipment through the L2TP tunnel.

In one embodiment of the present invention,

the UP is also used for recording NS and NR carried in the response message; when determining that the tunnel fault between the CP and the UP is recovered, sending an identification update instruction to the CP, wherein the identification update instruction carries: the recorded maximum NS, maximum NR and tunnel identification of the L2TP tunnel;

and the CP is further used for updating the NS corresponding to the locally recorded L2TP tunnel to the maximum NS and updating the NR corresponding to the locally recorded L2TP tunnel to the maximum NR.

In one embodiment of the present invention, the UP is specifically configured to:

if the message type of the control protocol message is a third type, determining the second message as the response message, wherein the third type of the control protocol message is used for: instruct the system to create a session with the network device based on the L2TP tunnel, the second message to: indicating the network device to end the creation session.

In one embodiment of the present invention,

the UP is further configured to determine, when the message type of the control protocol message is the second type, that the session is to be torn down according to a session identifier carried by the control protocol message; deleting the message forwarding table entry corresponding to the session to be removed; after determining that the tunnel fault between the CP and the UP is recovered, a session tear-down message is sent to the CP, wherein the session tear-down message carries: a session identifier of the session to be torn down;

And the CP is also used for tearing down the session to be torn down corresponding to the session identifier carried by the session tear down message.

In a third aspect, an embodiment of the present invention provides a packet processing device, which is applied to an UP in a vbas system, where the vbas system further includes a CP, and the device includes:

the response message determining module is used for determining a response message for responding to the control protocol message based on the message type of the control protocol message if the control protocol message sent by the network equipment is received through the L2TP tunnel when the tunnel between the CP and the UP is determined to be faulty;

and the message forwarding module is used for forwarding the response message to the network equipment through the L2TP tunnel.

In one embodiment of the present invention, the reply message determining module is specifically configured to:

when determining that a tunnel between the CP and the UP fails, if a control protocol message sent by a network device is received through an L2TP tunnel, determining the first message as a response message for responding to the control protocol message if the message type of the control protocol message is a first type or a second type, where the first type of control protocol message is used for: detecting whether the L2TP tunnel fails, where the second type of control protocol packet is used to: instruct tearing down a session created based on the L2TP tunnel;

In one embodiment of the invention, the apparatus further comprises:

the session determining module is used for determining the session to be removed according to the session identifier carried by the control protocol message when the message type of the control protocol message is the second type;

and the table item deleting module is used for deleting the message forwarding table item corresponding to the session to be removed.

In one embodiment of the invention, the apparatus further comprises:

the first instruction sending module is configured to send a session tear-down message to the CP after determining that a tunnel failure between the CP and the UP is recovered, so that the CP tear-down the session to be torn down, where the session tear-down message carries: and the session identifier of the session to be torn down.

In one embodiment of the invention, the apparatus further comprises:

the sequence number recording module is used for recording NS and NR carried in the response message;

A second instruction sending module, configured to send an identifier update instruction to the CP when determining that a tunnel failure between the CP and the UP is recovered, so that the CP updates an NS corresponding to the locally recorded L2TP tunnel to a maximum NS, and updates an NR corresponding to the locally recorded L2TP tunnel to a maximum NR, where the identifier update instruction carries: and the recorded maximum NS, maximum NR and tunnel identification of the L2TP tunnel.

In one embodiment of the present invention, it is determined whether the tunnel between the CP and the UP is failed by the following failure determination module:

and the fault determining module is used for determining whether the CUSP tunnel between the UP and the CP is faulty, and if so, determining that the tunnel between the CP and the UP is faulty.

In a fourth aspect, an embodiment of the present invention provides an electronic device, including a processor, a communication interface, a memory, and a communication bus, where the processor, the communication interface, and the memory complete communication with each other through the communication bus;

a memory for storing a computer program;

a processor for implementing the method steps of any of the first aspects when executing a program stored on a memory.

In a fifth aspect, embodiments of the present invention provide a computer-readable storage medium having stored thereon a computer program which, when executed by a processor, implements the method steps of any of the first aspects.

In a sixth aspect, embodiments of the present invention also provide a computer program product comprising instructions which, when run on a computer, cause the computer to perform the method steps of any of the first aspects described above.

The embodiment of the invention has the beneficial effects that:

in one embodiment of the present invention, when the UP determines that a tunnel between the UP and the CP fails, if the UP receives a control protocol packet sent by the network device, the UP may determine a response packet for responding to the control protocol packet based on a packet type of the control protocol packet, and forward the response packet to the network device.

From the above, whether the CP is failed or the tunnel between the CP and the UP is failed, the UP cannot send the received control protocol message to the CP, and the UP also can recognize that the tunnel between the CP and the UP is failed, if the UP determines that the tunnel between the CP and the UP is failed, the UP does not send the control protocol message to the CP, but directly determines a response message for responding to the received control protocol message based on the control protocol message, and forwards the response message to the network device, so as to replace the CP to complete the response process for the control protocol message. Therefore, even if the tunnel between the CP and the UP fails, the vBRAS system can still respond to the control protocol message, so that the L2TP tunnel between the vBRAS system and the network equipment can be prevented from being disconnected, and the transmission of the message between the network equipment and the vBRAS system is not affected.

Drawings

In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the embodiments or the description of the prior art will be briefly described, and it is obvious that the drawings in the following description are only some embodiments of the present invention, and other drawings may be obtained according to these drawings for a person having ordinary skill in the art.

Fig. 1 is a flow chart of a first message processing method according to an embodiment of the present invention;

fig. 2 is a schematic structural diagram of a vbas system according to an embodiment of the present invention;

FIG. 3 is a flow chart of a second message processing method according to an embodiment of the present invention;

FIG. 4 is a flow chart of a third message processing method according to an embodiment of the present invention;

FIG. 5 is a flowchart of a fourth message processing method according to an embodiment of the present invention;

FIG. 6 is a schematic diagram of a message processing system according to an embodiment of the present invention;

FIG. 7 is a flowchart of a fifth method for processing a message according to an embodiment of the present invention;

FIG. 8 is a flowchart of a sixth message processing method according to an embodiment of the present invention;

fig. 9 is a flow chart of a seventh message processing method according to an embodiment of the present invention;

FIG. 10 is a flowchart illustrating an eighth message processing method according to an embodiment of the present invention;

FIG. 11 is a schematic diagram of a message processing apparatus according to an embodiment of the present invention;

fig. 12 is a schematic structural diagram of an electronic device according to an embodiment of the present invention.

Detailed Description

The following description of the embodiments of the present invention will be made clearly and completely with reference to the accompanying drawings, in which it is apparent that the embodiments described are only some embodiments of the present invention, but not all embodiments. Based on the embodiments of the present invention, those of ordinary skill in the art will be able to devise all other embodiments that are obtained based on this application and are within the scope of the present invention.

In the prior art, under the condition that a tunnel between an UP and a CP fails or the CP fails, the CP is difficult to respond to a received control protocol message, so that an L2TP tunnel between the vBRAS system and other network equipment is disconnected, and the transmission of messages between the other network equipment and the vBRAS system is affected.

The embodiment of the invention provides a message processing method, which is applied to UP in a vBRAS system, wherein the vBRAS system also comprises a CP, and the method comprises the following steps:

When determining that the tunnel between the CP and the UP fails, if a control protocol message sent by the network equipment is received through the L2TP tunnel, determining a response message for responding to the control protocol message based on the message type of the control protocol message;

The method, system and device for processing the message are described in the following by specific embodiments.

Referring to fig. 1, a flow chart of a first message processing method according to an embodiment of the present invention is shown. The method is applied to UP in a vBRAS system, the vBRAS system also comprises a CP, and the method comprises the following steps S101-S102.

Specifically, the CP and the UP are respectively different network devices, where the CP is often deployed in a core TIC (Telecom Integrated Cloud ) by using an NFV (Network Functions Virtualization, network function virtualization) technology, and the UP is often a network device located in an edge TIC.

The CP is used for controlling and managing the user terminal, and often includes: virtual function modules such as user control management, user access control, user authentication, authorization, charging, address management and the like. The CP often interacts with a network manager, a Radius (Remote Authentication Dial In User Service, a remote user dialing authentication system), a DHCP Server (Dynamic Host Configuration Protocol Server, a dynamic host configuration protocol Server), and the like, and receives a PPPoE (Point to Point Protocol over Ethernet, ethernet-based point-to-point protocol) or IPoE (Internet Protocol over Ethernet, ethernet internet protocol dialing) message sent UP by the UP.

The UP is a three-layer network edge and user policy executing part, and is mainly used for performing functions such as traffic forwarding, qoS (Quality of Service ), traffic statistics, and the like, and executing pipe control functions based on unicast routing protocol, multicast routing protocol, LDP (Label Distribution Protocol ) or MPLS (Multi-Protocol Label Switching, multiprotocol label switching), and the like.

In addition, the tunnel between the CP and the UP may be a VxLAN (Virtual Extensible Local Area Network, virtual expansion local area network) tunnel. Messages can be mutually transmitted between the CP and the UP based on the tunnel.

Referring to fig. 2, a schematic structural diagram of a vbas system according to an embodiment of the present invention is provided.

In fig. 2, UP is connected to a user terminal, UP is connected to an edge TIC, UP is connected to a core TIC through a router, the core TIC includes a CP, the router is connected to a network manager, a Radius system, and a DHCP Server system, and the router is connected to the internet. The UP is thus connected to the CP to form a vbas system.

Specifically, the edge TIC and the core TIC are systems formed by connecting a plurality of network devices to each other, and the structures of the edge TIC and the core TIC are all in the prior art, and are therefore not described in fig. 2.

In addition, the above-mentioned vbas system also belongs to the prior art, and the connection relationship between each network device in the vbas system and the function of each network device are not described herein again.

S101: when determining that the tunnel between the CP and the UP fails, if a control protocol message sent by the network equipment is received through the L2TP tunnel, determining a response message for responding to the control protocol message based on the message type of the control protocol message.

Specifically, the vbas system may be regarded as a network device in the network, and an L2TP tunnel based on L2TP may exist between the vbas system and other network devices in the network. The network devices at the two ends of the L2TP tunnel may be respectively used as LAC (L2 TP Access Concentrator ) and LNS (L2 TP Network Server, L2TP network server). In the embodiment of the present invention, the vbas system may be used as the LAC or the LNS.

The vBRAS system can establish different L2TP tunnels with different network devices respectively, the different L2TP tunnels have different tunnel identifications, and control protocol messages transmitted through the L2TP tunnels are control protocol messages based on L2 TP.

In addition, whether the CP fails or the tunnel itself between the CP and the UP fails, the UP recognizes that the tunnel between the CP and the UP fails.

In one embodiment of the present invention, if the user determines that the tunnel between the CP and the UP is failed, a failure command may be input to the UP, so that the UP determines that the tunnel between the CP and the UP is failed.

In another embodiment of the present invention, the UP may determine whether the tunnel between the CP and the UP is failed through the following step a.

Step A: and determining whether a CUSP tunnel between the UP and the CP fails, and if so, determining that the tunnel between the CP and the UP fails.

Specifically, if the tunnel between the CP and the UP fails, a CUSP (Control Plane and User Plane Separated Protocol, control plane and forwarding plane separation protocol) tunnel between the UP and the CP is affected, and the CUSP tunnel is disconnected. The UP can thus determine if the CUSP tunnel is broken, and if so, indicate that the tunnel between the CP and UP is faulty.

In addition, when the UP determines that the tunnel between the CP and the UP fails, the UP may set itself to a proxy service on state, which indicates that the UP starts to respond to the control protocol packet sent by the network device instead of the CP.

Furthermore, if different L2TP tunnels may exist between the vbas system and different network devices, after receiving the control protocol packet, the UP may record a tunnel identifier of the L2TP tunnel, which indicates that the UP performs a proxy processing for the control protocol packet from the L2TP tunnel corresponding to the tunnel identifier.

In another embodiment of the present invention, a correspondence between a message type of a control protocol message and a message type of a response message may be preset, and after receiving the control protocol message sent by the network device, the message type of the response message corresponding to the message type of the control protocol message may be determined. A reply message may be generated having the message type that is the determined message type.

The response message also belongs to a control protocol message based on L2 TP.

Specifically, a reply message for replying to the control protocol message may be determined through the following steps S101A-S101B, which will not be described in detail herein.

S102: and forwarding the response message to the network equipment through the L2TP tunnel.

Referring to fig. 3, a flow chart of a second message processing method according to an embodiment of the present invention is shown, and compared with the embodiment shown in fig. 1, the above step S101 may be implemented by the following steps S101A-S101B.

S101A: when determining that the tunnel between the CP and the UP fails, if a control protocol message sent by the network equipment is received through the L2TP tunnel, if the message type of the control protocol message is a first type or a second type, determining the first message as a response message for responding to the control protocol message.

The first type of control protocol message is used for: detecting whether the L2TP tunnel fails, where the second type of control protocol packet is used to: the tear down of sessions created based on the L2TP tunnel described above is indicated.

Specifically, the message with the first type may be a HELLO message, and the network device may send the HELLO message to the vbas system to detect whether the L2TP tunnel fails. The network device may start timing after sending the HELLO message, and if the timing duration reaches the preset duration but the reply message is not received, the network device may determine that the L2TP tunnel fails, and disconnect the L2TP tunnel. If the reply message can be received within the preset time, the network device can determine that the L2TP tunnel does not fail, and the L2TP tunnel is not disconnected, so that the L2TP tunnel is kept alive.

In addition, the control protocol message with the second type may be a CDN (Call-Disconnect-Notify) message.

Specifically, a session for forwarding a message is created between the network device and the vbas system based on the L2TP tunnel. Because the vbas system can be regarded as a network device in the network, the UP and CP contained in the vbas system can record the same session, so as to ensure that the UP and CP can complete the same message processing function in the network.

In addition, the second type of control protocol packet may further include a tunnel identifier of the L2TP tunnel and a session identifier of the session that is torn down and indicated by the control protocol packet, so that the vbas system may determine the session that needs to be torn down based on the number of the L2TP tunnel and the number of the session.

In addition, the first message may be a ZLB (Zero Length Bit) message, where the ZLB message may not carry specific information, and is only used as a response message to notify the network device that the vbas system has received the control protocol message.

If the control protocol message is of the first type, the network device can determine that the L2TP tunnel between the network device and the vbas system has not failed after having received the ZLB message. If the control protocol message is of the second type, the network device may determine that the vbas system has received the control protocol message after receiving the ZLB message, and learn that the session needs to be torn down.

S101B: when the tunnel between the CP and the UP is determined to be faulty, if a control protocol message sent by the network equipment is received through the L2TP tunnel, if the message type of the control protocol message is a third type, the second message is determined to be the response message.

The third type of control protocol message is used for: instructing the vbas system to create a session with the network device based on the L2TP tunnel, where the second packet is used to: and indicating the network equipment to end the creation session.

Specifically, the third type of control protocol packet may be any one of an ICRQ (Incoming-Call-Request) packet, an ICRP (Incoming-Call-Reply) packet, and an ICCN (Incoming-Call-Connected) packet.

The first network device at one end of the L2TP tunnel may send an ICRQ message to the second network device at the other end, so as to request to create a session with the second network device based on the L2TP tunnel, and the second network device may feed back the ICRP message after receiving the ICRQ message, where the ICPR message carries parameters required for creating the session, and the ICRQ message is used as a reply to the ICRQ message. And the first network equipment creates a session after receiving the ICRQ message, and feeds back an ICCN message to the second network equipment, wherein the ICRQ message indicates that the session creation is completed.

The process of creating a session between the ICRQ message, the ICRP message, and the ICCN message and between the first network device and the second network device based on the ICRQ message, the ICRP message, and the ICCN message belongs to the prior art, and the embodiments of the present invention are not repeated.

Specifically, if the CP and/or the tunnel between the CP and the UP malfunctions during the session creation process, the CP has difficulty in completing the session creation process, and the UP has difficulty in determining information required for creating a message, that is, in replacing the CP to complete the session creation process. The UP may send a second message indicating that the network device ends the session creation to the network device to end the session creation process in case the UP determines that the tunnel between the CP and the UP is failed. And under the condition that the network equipment does not receive the response message for a long time, determining the fault of the L2TP tunnel between the vBRAS system and the network equipment, and further disconnecting the L2TP tunnel.

The second packet for indicating that the network device ends the session creation may be a CDN packet as shown above.

From the above, when the control protocol packet sent by the network device to the vbas system is a first type of control protocol packet for detecting whether the L2TP tunnel fails, or a second type of control protocol packet for indicating to tear down a session created based on the L2TP tunnel, the UP may answer the first packet to the network device, so as to inform the network device that the vbas system has received the control protocol packet. If the control protocol packet sent by the network device to the vbas system is a third type of control protocol packet for creating a session, the UP may answer the second packet to the network device, so as to inform the network device to end the session creation process. Therefore, in case that the UP determines that the tunnel between the CP and the UP has a fault, the UP can complete the response processing for the control protocol messages of the first type, the second type and the third type instead of the CP.

Referring to fig. 4, a flow chart of a third message processing method according to an embodiment of the present invention, compared with the embodiment shown in fig. 3, further includes the following steps S103-S104 after the step S101A.

S103: and when the message type of the control protocol message is the second type, determining the session to be torn down according to the session identifier carried by the control protocol message.

Specifically, if the message type of the control protocol message is the second type, it is indicated that the network device instructs the vbas system to tear down the session, so that the UP needs to determine the session for which the control protocol message is directed after receiving the control protocol message of the second type. The session identifiers of different sessions are different, so that the session to be torn down, which needs to be torn down, can be determined based on the session identifier carried in the control protocol message.

S104: and deleting the message forwarding table entry corresponding to the session to be removed.

The message forwarding entries may include a routing entry, a MAC (Media Access Control Address ) entry, and the like.

Specifically, after deleting the message forwarding table entry corresponding to the to-be-torn-down session, the to-be-torn-down session cannot continue to play the function of message forwarding, which is equivalent to that the to-be-torn-down session is torn down.

As can be seen from the above, if the control protocol packet is a packet indicating that the vbas system tear-down session, the UP needs to tear-down the session according to the indication of the control protocol packet in addition to responding to the control protocol packet, so as to complete the process indicated by the control protocol packet.

In another embodiment of the present invention, after the UP determines that the tunnel fault between the CP and the UP is recovered, the following step B may be further performed.

And (B) step (B): and after determining that the tunnel fault between the CP and the UP is recovered, sending a session tear-down message to the CP so that the CP tear-down the session to be torn down.

The session tear down message carries: and the session identifier of the session to be torn down is obtained.

Specifically, the UP may determine a state of a CUSP tunnel between the UP and the CP, and if the CUSP tunnel is restored to a connected state, the UP may determine a tunnel failure restoration between the CP and the UP.

In addition, after the user determines that the tunnel fault between the CP and the UP is recovered, a fault recovery instruction may be sent to the UP to notify the UP that the tunnel fault between the CP and the UP is recovered.

After the UP determines that the tunnel fault between the CP and the UP is recovered, the UP does not need to respond to the control protocol message again, so that the UP can adjust its own state to be a message response-replacing closed state, and the CP continues to respond to the control protocol message.

Since the session in the UP is torn down during the tunnel failure between the CP and the UP, but the session in the CP is not torn down, and the vbas system may be regarded as a network device in the network, the session configured in the UP and the CP needs to remain the same, after the tunnel failure between the CP and the UP is recovered, the UP may send a session tear-down message for the session identifier of the session to be torn down to the CP, so that the CP determines the session to be torn down corresponding to the session identifier, and tear down the session to be torn down.

In one embodiment of the present invention, after determining that the tunnel between the CP and the UP is recovered, if the UP receives a message forwarding table entry for the session to be torn down issued by the CP, the UP may send a message for the session tear down to the CP.

From the above, after the UP determines that the tunnel fault between the CP and the UP is recovered, the UP may send a session tear-down message carrying a session identifier of the session to be torn down to the CP, so that the CP may determine and tear down the session to be torn down configured by itself based on the session tear-down message, so that the CP and the session configured in the UP remain synchronized.

Referring to fig. 5, a flow chart of a fourth message processing method according to an embodiment of the present invention, compared with the embodiment shown in fig. 1, further includes the following steps S105-S106 after the step S102.

S105: and recording NS and NR carried in the response message.

Specifically, the NS (The message sequence number, a sending sequence number) is used to identify a sequence number of the sent response message, and each time the vbas system sends a response message, ns+1 is carried in the response message. The NR (The last received message number, receive sequence number) is used to identify the NS of the control protocol packet that the vbas system expects to receive next, where the value of the NR is ns+1 of the received control protocol packet.

The values of NS and NR are calculated based on the standard specification of L2TP, which is not described in detail in the embodiments of the present invention.

In addition, if different L2TP tunnels exist between the vbas system and different network devices, NS and NR corresponding to the different L2TP tunnels do not affect each other.

S106: and when the tunnel fault recovery between the CP and the UP is determined, sending an identification update instruction to the CP so that the CP updates the NS corresponding to the locally recorded L2TP tunnel to the maximum NS and updates the NR corresponding to the locally recorded L2TP tunnel to the maximum NR.

Wherein, the above-mentioned identification update instruction carries: the recorded maximum NS, maximum NR, and tunnel identity of the L2TP tunnel.

Specifically, after the CP receives the identifier update instruction, the L2TP may be determined based on the tunnel identifier carried in the identifier update instruction, and the NS and NR corresponding to the L2TP may be updated by the maximum NS and the maximum NR carried in the identifier update instruction.

In one embodiment of the present invention, since the NS and NR carried in the response message sent by the UP are increased once every time the UP sends the response message to the network device, the maximum NS and maximum NR are the NS and NR carried in the response message sent by the UP last time. The CP updates the locally recorded NS to the maximum NS and updates the locally recorded NR to the maximum NR, so that the NS and NR recorded in the CP may be updated to NS and NR carried in the response message last sent by the UP, and the CP keeps synchronization with the NS and NR recorded in the UP, and may continue the response processing of the control protocol message on the basis of UP.

In addition, if different L2TP tunnels can exist between the vbas system and different network devices, after the UP determines that the tunnel fault between the CP and the UP is recovered, the UP may send the tunnel identifier of the L2TP tunnel in the answer state, and the maximum NS and the maximum NR corresponding to the L2TP tunnel, through the identifier update command, to the CP, so that the CP updates the NS and the NR recorded by the CP. If the L2TP tunnel is not in the pickup state, it indicates that the UP does not perform pickup processing on the L2TP tunnel, and during the period when the UP determines that the tunnel between the CP and the UP is failed, NS and NR corresponding to the L2TP tunnel are not changed, so the UP does not need to send an identifier update instruction to the CP for the L2TP tunnel.

From the above, if the UP determines that the tunnel fault between the CP and the UP is recovered, the CP may continue the response processing of the control protocol packet, so the UP may send the maximum NS and the maximum NR recorded during the response processing to the CP through the id update command, so that the CP updates the recorded NS to the maximum NS and updates the recorded NR to the maximum NR. That is, the CP can continue the response processing of the control protocol message on the basis of the UP, so that the CP is identical to the NS and NR recorded in the UP.

Corresponding to the message processing method, the embodiment of the invention also provides a message processing system.

Referring to fig. 6, a schematic structural diagram of a message processing system according to an embodiment of the present invention is provided.

The system includes UP601 and CP602.

Specifically, the message processing system may be a vbas system.

Referring to fig. 7, a flow chart of a fifth message processing method according to an embodiment of the present invention is shown. The above method includes the following steps S701 to S703.

S701: and when the CP602 determines that the tunnel between the CP602 and the UP601 fails, stopping processing the message.

Specifically, in case that the user determines that the tunnel between the CP602 and the UP601 is failed, a tunnel failure command may be sent to the CP602, so that the CP602 determines that the tunnel is failed.

In addition, the CP602 may determine that the tunnel between the CP602 and the UP601 has failed when determining that the CUSP tunnel between the CP602 and the UP601 is disconnected.

Since the tunnel between the CP602 and the UP601 fails, it is difficult for the CP602 to receive a message and the transmitted message is also difficult to be transmitted to other network devices, so the CP602 may stop processing the message.

S702: when the UP601 determines that the tunnel between the CP602 and the UP601 fails, if a control protocol packet sent by a network device is received through an L2TP tunnel, a response packet for responding to the control protocol packet is determined based on a packet type of the control protocol packet.

S703: the UP601 forwards the response message to the network device through the L2TP tunnel.

Specifically, the steps S702 to S703 are similar to the steps S101 to S102, and the embodiments of the present invention will not be repeated.

Referring to fig. 8, a flowchart of a sixth message processing method according to an embodiment of the present invention is shown, and compared with the embodiment shown in fig. 7, after the step S703, the method further includes the following steps S704 to S706.

S704: the UP601 records NS and NR carried in the response message.

S705: the UP601 transmits an identification update instruction to the CP602 when determining that a tunnel failure between the CP602 and the UP601 is recovered.

S706: the CP602 updates the NS corresponding to the L2TP tunnel of the local record to the maximum NS, and updates the NR corresponding to the L2TP tunnel of the local record to the maximum NR.

Specifically, the steps S704-S706 are similar to the steps S105-S106, and the embodiments of the present invention will not be repeated.

Referring to fig. 9, a flow chart of a seventh message processing method according to an embodiment of the present invention is shown, and compared with the embodiment shown in fig. 7, the above step S702 may be implemented by the following steps S702A-S702B.

S702A: when the UP601 determines that the tunnel between the CP602 and the UP601 fails, if a control protocol packet sent by a network device is received through an L2TP tunnel, and if the packet type of the control protocol packet is a first type or a second type, the first packet is determined as a response packet for responding to the control protocol packet.

S702B: when the UP601 determines that the tunnel between the CP602 and the UP601 fails, if a control protocol packet sent by the network device is received through the L2TP tunnel, and if the packet type of the control protocol packet is a third type, the second packet is determined to be the response packet.

The third type of control protocol message is used for: instructing the system to create a session with the network device based on the L2TP tunnel, where the second packet is configured to: and indicating the network equipment to end the creation session.

Specifically, the steps S702A-S702B are similar to the steps S101A-S101B, and the embodiment of the present invention will not be repeated.

Referring to fig. 10, a flow chart of an eighth message processing method according to an embodiment of the present invention, compared with the embodiment shown in fig. 9, further includes the following steps S707-S710 after the step S702A.

S707: and when the message type of the control protocol message is the second type, the UP601 determines that the session is to be torn down according to the session identifier carried by the control protocol message.

S708: the UP601 deletes the message forwarding table entry corresponding to the session to be torn down.

Specifically, the steps S707 to S708 are similar to the steps S103 to S104, and the embodiment of the present invention will not be repeated.

S709: the UP601 transmits a session teardown message to the CP602 after determining that a tunnel failure between the CP602 and the UP601 is recovered.

S710: the CP602 tears down the session to be torn down corresponding to the session identifier carried by the session tear down message.

Specifically, steps S709-S710 are similar to step B, and the embodiment of the present invention will not be repeated.

As can be seen from the above, if the control protocol packet is a packet indicating that the vbas system tear-down session, the UP needs to tear-down the session according to the indication of the control protocol packet in addition to responding to the control protocol packet, so as to complete the process indicated by the control protocol packet. And after the UP determines that the tunnel fault between the CP and the UP is recovered, the UP may send a session tear-down message carrying a session identifier of the session to be torn down to the CP, so that the CP may determine and tear down the session to be torn down configured by the CP based on the session tear-down message, so that the CP and the session configured in the UP remain synchronized.

Corresponding to the message processing method, the embodiment of the invention also provides a message processing device.

Referring to fig. 11, a schematic structural diagram of a message processing apparatus provided by an embodiment of the present invention is applied to an UP in a vbas system, where the vbas system further includes a CP, and the apparatus includes:

a reply message determining module 1101, configured to determine, when it is determined that a tunnel between the CP and the UP fails, a reply message for replying to a control protocol message sent by a network device if the control protocol message is received through an L2TP tunnel, based on a message type of the control protocol message;

and a message forwarding module 1102, configured to forward the response message to the network device through the L2TP tunnel.

In one embodiment of the present invention, the reply message determining module 1101 is specifically configured to:

In one embodiment of the invention, the apparatus further comprises:

The embodiment of the invention also provides an electronic device, as shown in fig. 12, which comprises a processor 1201, a communication interface 1202, a memory 1203 and a communication bus 1204, wherein the processor 1201, the communication interface 1202 and the memory 1203 complete the communication with each other through the communication bus 1204,

a memory 1203 for storing a computer program;

the processor 1201 is configured to implement any of the method steps described in the message processing method when executing the program stored in the memory 1203.

When the electronic device provided by the embodiment of the invention is used for processing the message, no matter the CP breaks down or the tunnel between the CP and the UP breaks down, the UP can not send the received control protocol message to the CP, and the UP can also recognize that the tunnel between the CP and the UP breaks down, if the UP determines that the tunnel between the CP and the UP breaks down, the UP can not send the control protocol message to the CP under the condition that the UP receives the control protocol message, but directly determines a response message for responding the received control protocol message based on the control protocol message, and forwards the response message to the network device to replace the CP to finish the response process for the control protocol message. Therefore, even if the tunnel between the CP and the UP fails, the vBRAS system can still respond to the control protocol message, so that the L2TP tunnel between the vBRAS system and the network equipment can be prevented from being disconnected, and the transmission of the message between the network equipment and the vBRAS system is not affected.

The communication bus mentioned above for the electronic devices may be a peripheral component interconnect standard (Peripheral Component Interconnect, PCI) bus or an extended industry standard architecture (Extended Industry Standard Architecture, EISA) bus, etc. The communication bus may be classified as an address bus, a data bus, a control bus, or the like. For ease of illustration, the figures are shown with only one bold line, but not with only one bus or one type of bus.

The communication interface is used for communication between the electronic device and other devices.

The Memory may include random access Memory (Random Access Memory, RAM) or may include Non-Volatile Memory (NVM), such as at least one disk Memory. Optionally, the memory may also be at least one memory device located remotely from the aforementioned processor.

The processor may be a general-purpose processor, including a central processing unit (Central Processing Unit, CPU), a network processor (Network Processor, NP), etc.; but also digital signal processors (Digital Signal Processor, DSP), application specific integrated circuits (Application Specific Integrated Circuit, ASIC), field programmable gate arrays (Field-Programmable Gate Array, FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components.

In yet another embodiment of the present invention, a computer readable storage medium is provided, in which a computer program is stored, the computer program implementing the steps of any of the above-mentioned message processing methods when executed by a processor.

When the computer program stored in the computer readable storage medium provided by the embodiment is used for processing a message, no matter whether a CP breaks down or a tunnel between the CP and the UP breaks down, the UP cannot send a received control protocol message to the CP, and the UP can also recognize that the tunnel between the CP and the UP breaks down, if the UP determines that the tunnel between the CP and the UP breaks down, the UP does not send the control protocol message to the CP, but directly determines a response message for responding to the received control protocol message based on the control protocol message, and forwards the response message to the network device to replace the CP to complete a response process for the control protocol message. Therefore, even if the tunnel between the CP and the UP fails, the vBRAS system can still respond to the control protocol message, so that the L2TP tunnel between the vBRAS system and the network equipment can be prevented from being disconnected, and the transmission of the message between the network equipment and the vBRAS system is not affected.

In yet another embodiment of the present invention, a computer program product comprising instructions which, when run on a computer, cause the computer to perform any of the message processing methods of the above embodiments is also provided.

When executing the message processing performed by the computer program product provided in this embodiment, no matter whether the CP fails or the tunnel between the CP and the UP fails, the UP cannot send the received control protocol message to the CP, and the UP also can recognize that the tunnel between the CP and the UP fails, if the UP determines that the tunnel between the CP and the UP fails, the UP does not send the control protocol message to the CP, but directly determines a response message for responding to the received control protocol message based on the control protocol message, and forwards the response message to the network device, so as to replace the CP to complete the response process for the control protocol message. Therefore, even if the tunnel between the CP and the UP fails, the vBRAS system can still respond to the control protocol message, so that the L2TP tunnel between the vBRAS system and the network equipment can be prevented from being disconnected, and the transmission of the message between the network equipment and the vBRAS system is not affected.

In the above embodiments, it may be implemented in whole or in part by software, hardware, firmware, or any combination thereof. When implemented in software, may be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When loaded and executed on a computer, produces a flow or function in accordance with embodiments of the present invention, in whole or in part. The computer may be a general purpose computer, a special purpose computer, a computer network, or other programmable apparatus. The computer instructions may be stored in or transmitted from one computer-readable storage medium to another, for example, by wired (e.g., coaxial cable, optical fiber, digital Subscriber Line (DSL)), or wireless (e.g., infrared, wireless, microwave, etc.). The computer readable storage medium may be any available medium that can be accessed by a computer or a data storage device such as a server, data center, etc. that contains an integration of one or more available media. The usable medium may be a magnetic medium (e.g., floppy Disk, hard Disk, magnetic tape), an optical medium (e.g., DVD), or a semiconductor medium (e.g., solid State Disk (SSD)), etc.

It is noted that relational terms such as first and second, and the like are used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. Moreover, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising one … …" does not exclude the presence of other like elements in a process, method, article, or apparatus that comprises the element.

In this specification, each embodiment is described in a related manner, and identical and similar parts of each embodiment are all referred to each other, and each embodiment mainly describes differences from other embodiments. In particular, for a system, apparatus, electronic device, computer readable storage medium and computer program product, the description is relatively simple as it is substantially similar to the method embodiments, as relevant points are found in the partial description of the method embodiments.

The foregoing description is only of the preferred embodiments of the present invention and is not intended to limit the scope of the present invention. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention are included in the protection scope of the present invention.

Claims

1. The message processing method is characterized by being applied to a forwarding plane UP in a virtual broadband remote access server (vBRAS) system, wherein the vBRAS system also comprises a control plane CP, and the method comprises the following steps:

when determining that the tunnel between the CP and the UP fails, if a control protocol message sent by the network equipment is received through a second layer tunnel protocol L2TP tunnel, determining a response message for responding to the control protocol message based on the message type of the control protocol message;

forwarding the response message to the network equipment through the L2TP tunnel;

the determining the response message for responding to the control protocol message based on the message type of the control protocol message comprises the following steps:

if the message type of the control protocol message is a second type, determining the first message as a response message for responding to the control protocol message, wherein the second type of the control protocol message is used for: the conversation created based on the L2TP tunnel is instructed to be removed, and the first message does not carry specific information;

2. The method according to claim 1, wherein the method further comprises:

3. The method according to claim 2, wherein the method further comprises:

4. A method according to any one of claims 1-3, characterized in that the method further comprises:

recording a sending sequence number NS and a receiving sequence number NR carried in the response message;

5. A method according to any of claims 1-3, characterized by determining whether a tunnel between the CP and UP is malfunctioning by:

determining whether a control plane and forwarding plane separation protocol (CUSP) tunnel between the UP and the CP has a fault or not;

if yes, determining that the tunnel between the CP and the UP fails.

6. A message processing system, wherein the system comprises UP and CP;

the UP is used for determining a response message for responding to the control protocol message based on the message type of the control protocol message if the control protocol message sent by the network equipment is received through the L2TP tunnel when the tunnel between the CP and the UP is determined to be faulty; forwarding the response message to the network equipment through the L2TP tunnel;

The UP is specifically used for:

if the message type of the control protocol message is a third type, determining the second message as the response message, wherein the third type of the control protocol message is used for: instructing a vbas system to create a session with the network device based on the L2TP tunnel, where the second packet is configured to: indicating the network device to end the creation session.

7. The system of claim 6, wherein the system further comprises a controller configured to control the controller,

8. The system of claim 6, wherein the system further comprises a controller configured to control the controller,

9. The message processing device is characterized by being applied to UP in a vBRAS system, wherein the vBRAS system also comprises a CP, and the device comprises:

a message forwarding module, configured to forward the response message to the network device through the L2TP tunnel;

The response message determining module is specifically configured to:

when determining that a tunnel between the CP and the UP fails, if a control protocol message sent by a network device is received through an L2TP tunnel, determining a first message as a response message for responding to the control protocol message if a message type of the control protocol message is a second type, where the second type of control protocol message is used for: the conversation created based on the L2TP tunnel is instructed to be removed, and the first message does not carry specific information;

10. The apparatus of claim 9, wherein the apparatus further comprises:

11. The apparatus of claim 10, wherein the apparatus further comprises:

12. The apparatus according to any one of claims 9-11, wherein the apparatus further comprises:

13. The apparatus of any of claims 9-11, wherein determining whether a tunnel between the CP and UP is malfunctioning is performed by a failure determination module that: