CN113783974B

CN113783974B - Method and device for dynamically issuing MAP domain rule

Info

Publication number: CN113783974B
Application number: CN202111057299.0A
Authority: CN
Inventors: 杨仁东
Original assignee: Fiberhome Telecommunication Technologies Co Ltd
Current assignee: Fiberhome Telecommunication Technologies Co Ltd
Priority date: 2021-09-09
Filing date: 2021-09-09
Publication date: 2023-06-13
Anticipated expiration: 2041-09-09
Also published as: CN113783974A

Abstract

The invention relates to the technical field of IPv 4-to-IPv 6 development transition, in particular to a method and a device for dynamically issuing MAP domain rules, which comprise the following steps: configuring address pool parameter information according to the domain rule so as to obtain a corresponding mapping rule; acquiring an address application request; distributing prefix proxy addresses corresponding to the address application requests according to mapping rules; and sending the prefix proxy address and the address pool parameter information to a protocol module, so that the protocol module packages the prefix proxy address and the domain rule calculated according to the address pool parameter information into a response message sent to a user. The invention integrates the BMR rule and the DMR rule corresponding to the MAP domain into the service processing flow of the WAN port request of the user for distributing the prefix proxy address, effectively replaces the manual domain rule configuration mode at the user side in the prior art to realize MAP technology, realizes the dynamic switching of the MAP domain of the user, and reduces the operation and maintenance difficulty.

Description

Method and device for dynamically issuing MAP domain rule

[ field of technology ]

The invention relates to the technical field of IPv 4-to-IPv 6 development transition, in particular to a method and a device for dynamically issuing MAP domain rules.

[ background Art ]

In the initial deployment process of the MAP (Mapping Address and Port) technology in the prior art, the same MAP domain rules are configured on two MAP nodes of a MAP-CE (MAP Customer Edge, MAP client edge) and a MAP-BR (MAP Border Relay) in a MAP domain (Mapping Address and Port Domain) manually to realize address translation and address encapsulation, and the manual configuration mode is unfavorable for dynamic deployment of the MAP nodes although the corresponding functions of the MAP nodes in the MAP domain can be realized, especially when the MAP-CE needs to change the MAP domain (mainly when the MAP-CE needs to change the MAP domain rules are mainly embodied), the inconvenience is more highlighted by the manual configuration of the MAP domain rules, because most of MAP-CEs are deployed in the client, the difficulty of manually configuring the MAP domain rules is increased, and the operation and maintenance cost is increased.

In view of this, overcoming the drawbacks of the prior art is a problem to be solved in the art.

[ invention ]

The invention aims to solve the technical problems that:

in the initial deployment process of the MAP (Mapping Address and Port) technology in the prior art, the same domain rules are manually configured on two MAP nodes of the MAP-CE and the MAP-BR in the MAP domain (Mapping Address and Port Domain) to realize address translation and address encapsulation, and the manual configuration mode is unfavorable for dynamic deployment of the MAP nodes although the corresponding functions of the MAP nodes in the MAP domain can be realized, and particularly when the MAP-CE needs to change the MAP domain (mainly when the MAP-CE needs to change the domain rules), the inconvenience is more highlighted by the manual configuration domain rule mode, because most of the MAP-CEs are deployed in the customer's home, the difficulty of manually configuring the domain rules is increased, and the operation and maintenance cost is increased.

The invention achieves the aim through the following technical scheme:

in a first aspect, the present invention provides a method of dynamically issuing MAP domain rules, comprising:

configuring address pool parameter information according to the domain rule so as to obtain a corresponding mapping rule;

acquiring an address application request;

distributing prefix proxy addresses corresponding to the address application requests according to mapping rules;

and sending the prefix proxy address and the address pool parameter information to a protocol module, so that the protocol module packages the prefix proxy address and the domain rule calculated according to the address pool parameter information into a response message sent to a user.

Preferably, the configuring the address pool parameter information according to the domain rule so as to obtain a corresponding mapping rule specifically includes:

the domain rules include BMR rules;

configuring the IPv4 prefix and the length of the IPv4 prefix in the address pool parameter information according to Rule-IPv4-prefix in the BMR Rule;

the address pool parameter information also comprises a network prefix, the length of the network prefix and the length of a prefix proxy address;

and calculating according to the network prefix, the length of the prefix proxy address and the length of the IPv4 prefix to obtain a corresponding mapping rule.

Preferably, the calculating according to the network prefix, the length of the prefix proxy address, and the length of the IPv4 prefix obtains a corresponding mapping rule, which specifically includes:

the mapping Rule comprises a part A, a part B and a part C, wherein the part A is obtained according to the network prefix and is used for distributing Rule-IPv6-prefix in the prefix proxy address;

calculating the length of a part B in the mapping rule according to the length of the IPv4 prefix, wherein the part B in the mapping rule is used for distributing IPv 4-addr-diffix in the prefix proxy address;

and calculating the length of the C part according to the length of the network prefix, the length of the prefix proxy address and the length of the B part, wherein the C part in the mapping rule is used for distributing PSID in the prefix proxy address.

Preferably, the assigning the prefix proxy address corresponding to the address application request according to the mapping rule specifically includes:

part B allocates an IPv 4-addr-unification;

if the length of the C part is not 0, the C part is increased from 0, PSID is allocated, and after all PSIDs are allocated to the C part, the B part is increased, and the next IPv4-addr-suffix is allocated;

if the length of the part C is 0, PSID is not allocated, the part B is increased, and the next IPv4-addr-suffix is allocated;

Wherein the initial value of the IPv 4-addr-unification is 1.

Preferably, the method further comprises configuring the PSID offset in the address pool parameter information according to the PSID-offset in the BMR rule.

Preferably, the domain rule further includes a DMR rule, and BR addresses and the lengths of BR addresses in the address pool parameter information are configured according to BR-addresses in the DMR rule.

Preferably, if the br address is not 128 bits long, the domain rule corresponding to the issuing is address translation;

if the br address is 128 bits long, it indicates that the corresponding issued domain rule is an address encapsulation.

Preferably, the protocol module generates a route according to the prefix proxy address, so that the dynamic routing module advertises the route generated by the protocol module according to the prefix proxy address to an upstream router.

Preferably, the method further comprises:

modifying the subscriber line identity MAP to switch the subscriber from the authentication domain a of the MAP domain 1 to the authentication domain B of the MAP domain 2 and to kick the subscriber off-line;

acquiring an authentication and authorization request;

acquiring an authentication domain B corresponding to a user according to an authentication authorization request, and authenticating the user according to the authentication domain B;

if the authentication is passed, an address application request is sent to acquire a prefix proxy address from an address pool bound by the authentication domain B.

In a second aspect, the invention also provides a method comprising at least one processor; and a memory communicatively coupled to the at least one processor; wherein the memory stores instructions executable by the at least one processor for performing the method of dynamically issuing MAP domain rules of the first aspect.

Compared with the prior art, the invention has the beneficial effects that:

according to the invention, the BMR rule (Basic Mapping Rule ) and the DMR rule (Default Mapping Rule, default mapping rule) corresponding to the MAP domain are disassembled, then the parameter information of the address pool for distributing the prefix proxy address is configured according to the disassembled BMR rule and the DMR rule, the BMR rule and the DMR rule are integrated into the service processing flow of the user WAN port request for distributing the prefix proxy address, the MAP technology is realized in a mode of manually configuring the domain rule at the user side in the prior art, the dynamic switching of the MAP domain of the user is realized, and the operation and maintenance difficulty is reduced.

[ description of the drawings ]

In order to more clearly illustrate the technical solution of the embodiments of the present invention, the drawings that are required to be used in the embodiments of the present invention will be briefly described below. It is evident that the drawings described below are only some embodiments of the present invention and that other drawings may be obtained from these drawings without inventive effort for a person of ordinary skill in the art.

FIG. 1 is a flow chart of a method for dynamically issuing MAP domain rules provided by an embodiment of the invention;

FIG. 2 is a schematic diagram of configuration address pool parameter information of a method for dynamically issuing MAP domain rules according to an embodiment of the present invention;

FIG. 3 is a schematic diagram of a mapping rule of a method for dynamically issuing MAP domain rules according to an embodiment of the present invention;

FIG. 4 is a timing diagram of a method for dynamically issuing MAP domain rules provided by an embodiment of the invention;

FIG. 5 is a schematic diagram of a mapping rule of a method for dynamically issuing MAP domain rules according to an embodiment of the present invention;

FIG. 6 is a timing diagram of a method for dynamically issuing MAP domain rules provided by an embodiment of the invention;

FIG. 7 is a timing diagram of a method for dynamically issuing MAP domain rules according to an embodiment of the invention;

FIG. 8 is a schematic diagram of a method for dynamically issuing MAP domain rules according to an embodiment of the invention;

FIG. 9 is a schematic diagram of a mapping rule of a method for dynamically issuing MAP domain rules according to an embodiment of the present invention;

fig. 10 is a block diagram of an apparatus for dynamically issuing MAP domain rules according to an embodiment of the present invention.

[ detailed description ] of the invention

The present invention will be described in further detail with reference to the drawings and examples, in order to make the objects, technical solutions and advantages of the present invention more apparent. It should be understood that the specific embodiments described herein are for purposes of illustration only and are not intended to limit the scope of the invention.

In the description of the present invention, the terms "inner", "outer", "longitudinal", "transverse", "upper", "lower", "top", "bottom", etc. refer to an orientation or positional relationship based on that shown in the drawings, merely for convenience of describing the present invention and do not require that the present invention must be constructed and operated in a specific orientation, and thus should not be construed as limiting the present invention.

In addition, the technical features of the embodiments of the present invention described below may be combined with each other as long as they do not collide with each other.

Example 1:

the embodiment 1 of the invention provides a method for dynamically issuing MAP domain rules, and referring to FIG. 1, the method comprises the following steps:

step 10, configuring address pool parameter information according to the domain rule so as to obtain a corresponding mapping rule; the domain rules include a BMR Rule including Rule-IPv6-prefix (An IPv6prefix assigned by a service provider for a mapping Rule, rule IPv6 prefix), rule-IPv4-prefix (An IPv4 prefix assigned by a service provider for a mapping Rule, rule IPv4 prefix), EA-bits-length (EA) Address (EA) bit length), and PSID-offset (The Port Set Identifier Offset, port set ID offset), and the DMR Rule including BR-Address (Border Relay Address ).

The configuration of the address pool parameter information is as follows, referring to fig. 2:

(1) Configuring the length of a network prefix and the length of the network prefix in address pool parameter information according to Rule-IPv6-prefix in BMR rules, and configuring the length of a prefix proxy address according to the requirement in an actual scene (wherein the prefix proxy address is End-user IPv6 prefix in MAP technology, and the End-user IPv6 prefix consists of Rule-IPv6-prefix, IPv4-addr-suffix (IPv 4 address suffix) and PSID (The Port Set Identifier, port set ID), and the prefix proxy address consists of Rule-IPv6-prefix, IPv4-addr-suffix and PSID);

(2) Configuring the IPv4 prefix and the length of the IPv4 prefix in the address pool parameter information according to Rule-IPv4-prefix in the BMR Rule; and configuring PSID offset in the address pool parameter information according to PSID-offset in the BMR rule;

(3) Configuring BR addresses and the lengths of the BR addresses in the address pool parameter information according to BR-addresses in the DMR rule;

the corresponding mapping Rule can be obtained according to the configured address pool parameter information, referring to fig. 3, the mapping Rule is composed of 3 parts, and it is assumed that the 3 parts of the mapping Rule are respectively an a part, a B part and a C part, wherein the a part corresponds to the network prefix and the length of the network prefix in the address pool parameter information, and the a part is used for distributing Rule-IPv6-prefix in the prefix proxy address (Rule-IPv 6-prefix in the prefix proxy address corresponds to Rule-IPv6-prefix in End-user IPv6 prefix in the MAP technology); the length of the B part is calculated according to the length of the IPv4 prefix in the address pool parameter information, and the B part is used for allocating IPv4-addr-suffix in the prefix proxy address (the IPv4-addr-suffix in the prefix proxy address corresponds to the IPv4-addr-suffix in the End-user IPv6 prefix in the MAP technology), for example: assuming that the length of the IPv4 prefix in the address pool parameter information is 24 bits, since the length of the IPv4 address is 32 bits, the length of the B portion can be calculated to be 8 bits (calculated by 32 bits-24 bits=8bits); the length of the C part is calculated according to the length of the prefix proxy address in the address pool parameter information, the length of the network prefix, and the calculated length of the B part, where the C part is used to allocate the PSID in the prefix proxy address (the PSID in the prefix proxy address corresponds to the PSID in the End-user IPv6 prefix in the MAP technology), and examples include: assuming that the length of the prefix proxy address in the address pool parameter information is 56 bits, the length of the network prefix in the address pool parameter information is 40 bits and the calculated length of the B part is 8 bits, the length of the C part can be calculated to be 8 bits (calculated by 56 bits-40 bits-8 bits=8bits); the difference between the length of the prefix proxy address and the length of the network prefix is EA-bits-length (i.e., the sum of the length of the B part and the length of the C part) in the BMR rule.

Step 20, obtaining an address application request; assuming that the MAP-CE (i.e. the user) sends a request message for acquiring the prefix proxy address to the protocol module, after receiving the request message, the protocol module analyzes the request message and confirms that the request message is for acquiring the prefix proxy address, then sends an authentication authorization request to the authentication module, the authentication module acquires an authentication domain corresponding to the user according to the authentication authorization request sent by the protocol module (the user belongs to which MAP domain, the authentication domain corresponding to the MAP domain is acquired, each authentication domain binds an address pool, the address pool parameter information is configured according to the MAP domain rule), authenticates the user according to the authentication domain, and if the authentication passes, sends an address application request to the address pool module, so that the user acquires the prefix proxy address from the address pool bound by the corresponding authentication domain, wherein one authentication domain corresponds to one address pool, and one address pool module can be composed of a plurality of address pools, and each address pool has the corresponding address pool parameter information and the corresponding mapping rule. Such as: referring to fig. 4, step 101, assuming that a user 1 sends a request message for acquiring a prefix proxy address to a protocol module, after the protocol module receives the request message, analyzing the request message, and confirming that the request message is for acquiring the prefix proxy address, step 102, sending an authentication authorization request to an authentication module, and the authentication module acquires an authentication domain a corresponding to the user according to the authentication authorization request sent by the protocol module, and the authentication domain a authenticates the user; if the authentication is passed, step 103, an address application request is sent to the address pool module to obtain the prefix proxy address from the address pool bound by the authentication domain a. At this time, the authentication module associates a plurality of authentication domains, but the authentication module will determine the authentication domain of the user 1 according to the mapping of the subscriber line identifier, and if the authentication module determines that the authentication domain of the user 1 is the authentication domain a, although the address pool module contains a plurality of address pools, the authentication domain bound by each address pool is different, and if the authentication domain a is bound with the address pool 33 in the address pool module, the user 1 can only obtain the prefix proxy address from the address pool 33. If the user 1 switches the MAP domain (the MAP domain is in one-to-one correspondence with the address pool, the address pool parameter information, and the authentication domain), the authentication domain corresponding to the user 1 will also change, and at this time, the user 1 can only obtain the prefix proxy address from the address pool bound by the switched authentication domain.

Step 30 (i.e. corresponding to step 104 of fig. 4), allocating a prefix proxy address corresponding to the address application request according to a mapping rule; the mapping Rule is composed of three parts, referring to fig. 2 and 5, assuming that the 3 part of the mapping Rule is a part a, a part B and a part C, respectively, where the part a corresponds to a network prefix and a length of the network prefix in the address pool parameter information, and the part a is used for allocating Rule-IPv6-prefix in the prefix proxy address (Rule-IPv 6-prefix in the prefix proxy address corresponds to Rule-IPv6-prefix in the End-user IPv6 prefix in the MAP technology), when the prefix proxy address is allocated according to the mapping Rule, the network prefix in the address pool parameter information is the part a, and belongs to all users in the same MAP domain, and when the prefix proxy address is requested to be acquired, the part a of Rule-IPv6-prefix for the allocated prefix proxy address is the same, that is, the network prefix in the address pool parameter information, such as: assuming that the user 1, the user 2 and the user 3 are in the MAP domain 1, the MAP domain 1 corresponds to an address pool 33, the network prefix in the address pool parameter information of the address pool 33 corresponding to the MAP domain 1 is 2001:db8:0100, and the length of the network prefix is 40 bits, when prefix proxy addresses are allocated to the user 1, the user 2 and the user 3, the A part for allocating Rule-IPv6-prefix in the prefix proxy addresses is 2001:db8:0100, and the length is 40 bits; when the prefix proxy address is allocated according to the mapping rule, the part B is initially incremented from 1, and the invalid values of the part B are removed, such as 0 and 255, because when the part B is 0, the IPv4 address allocated to the user is 100.0.2.0, which is an address that cannot be used for public network communication, when the length of the part C is not 0 after a value of the part B used for allocating IPv 4-addr-unification is determined (indicating that the IPv4 address is in a sharing mode, i.e. a plurality of users share the IPv4 address, and different users are distinguished by dividing ports), the value of the part C used for allocating PSIDs is incremented from 0, and when the part C allocates all PSIDs, the part B is incremented, and the next IPv 4-addr-unification is allocated, such as: assuming that after the value of the B part for allocating IPv 4-addr-unification is determined to be 1, the value of the C part for allocating PSIDs is incremented after all PSIDs are allocated from 0 to 255, the B part is incremented, the next IPv 4-addr-unification is allocated, at this time, the next IPv 4-addr-unification is 2, the value of the C part for allocating PSIDs is incremented again after all PSIDs are allocated from 0 to 255, the B part is incremented continuously, and so on, so as to allocate a different prefix proxy address to each user; if the length of the C part is 0, the IPv4 address is in the exclusive mode.

And step 40, the prefix proxy address and the address pool parameter information are sent to a protocol module, so that the protocol module encapsulates the prefix proxy address and the domain rule calculated according to the address pool parameter information into a response message sent to the user.

As shown in fig. 4, step 105, after a prefix proxy address is allocated to a user according to a mapping Rule, an address pool module sends the allocated prefix proxy address and address pool parameter information corresponding to an address pool corresponding to the allocated prefix proxy address to a protocol module, step 106, the protocol module calculates a domain Rule according to the allocated address pool parameter information after receiving the allocated prefix proxy address and the address pool parameter information, and encapsulates the prefix proxy address and the domain Rule calculated according to the address pool parameter information into a response message sent to the user, and specifically, the protocol module can obtain Rule-IPv6-prefix of the BMR Rule according to a network address and a network address length in the address pool parameter information; according to the IPv4 prefix and the length of the IPv4 prefix in the address pool parameter information, BMR Rule-IPv4-prefix can be obtained; PSID-offset in the BMR rule can be obtained according to PSID offset in the address pool parameter information; according to the difference value of the prefix agent address length and the network address length in the address pool parameter information, EA-bits-length in the BMR rule can be obtained; the BR-address in the DMR rule can be obtained according to the BR address and the BR address length in the address pool parameter information, if the BR address length (i.e. the BR-address length) is not 128 bits, the corresponding issued domain rule is address translation in the MAP technology, and if the BR address length (i.e. the BR-address length) is 128 bits, the corresponding issued domain rule is address encapsulation in the MAP technology. The calculated BMR rule, the DMR rule and the allocated prefix proxy address are packaged into corresponding options of the response message and then sent to the user, the user can realize MAP technology according to relevant information carried by the response message, and because relevant rules corresponding to MAP domains to which the user belongs are carried in the response message, the requirement of dynamically deploying rules corresponding to MAP domains is met, when the MAP domains to which the user belongs need to be switched, only an authentication domain corresponding to the user needs to be modified in an authentication module by modifying a user line identification mapping mode, once the authentication domain is switched, the user can only acquire corresponding information from an address pool corresponding to the authentication domain bound by the user, and the dynamic issuing domain rule mode provided by the embodiment avoids manual domain rule configuration of the MAP-CE side and further supports dynamic switching of the MAP domain.

The configuring the address pool parameter information according to the domain rule so as to obtain the corresponding mapping rule specifically comprises the following steps:

the domain rules include BMR rules; wherein, BMR rules comprise Rule-IPv6-prefix, rule-IPv4-prefix, EA-bits-length and PSID-offset; such as: the BMR rule corresponding to MAP domain 1 is assumed as follows:

Rule-IPv6-prefix：2001:db8:0100::/40

Rule-IPv4-prefix：100.0.2.0/24

EA-bits-length：16

PSID-offset：4

configuring the IPv4 prefix and the length of the IPv4 prefix in the address pool parameter information according to Rule-IPv4-prefix in the BMR Rule; as shown in fig. 2, it is assumed that address pool parameter information is configured for address pool 33 in the address pool module according to the BMR Rule corresponding to MAP domain 1, and as described above, rule-IPv4-prefix according to the BMR Rule: 100.0.2.0/24 the length of the IPv4 prefix and the IPv4 prefix in the address pool parameter information in the address pool 33 (i.e., map rule-IPv4-prefix in fig. 2) is configured, the configured IPv4 prefix is 100.0.2.0, and the length of the IPv4 prefix is 24 bits; further, the PSID offset in the address pool parameter information is configured according to PSID-offset in the BMR rule, such as: according to PSID-offset in BMR rules: 4 configuring PSID offset in address pool parameter information in address pool 33 (namely PSID-offset in address pool parameter information in figure 2), wherein the configured PSID offset is 4 bits; 33 behind the address pool 33 is an identification of the address pool for uniquely distinguishing one address pool.

The address pool parameter information also comprises a network prefix, the length of the network prefix and the length of a prefix proxy address; as indicated above, rule-IPv6-prefix according to BMR rules: 2001:db8:0100:40 configures a network prefix (i.e., prefix-address in fig. 2) and a length of the network prefix (i.e., prefix-length in fig. 2) in address pool parameter information in address pool 33, and the configured network prefix is 2001:db8:0100:40:40, wherein the length of the network prefix is 40 bits; meanwhile, the length of the prefix proxy address (i.e., the delete-length in fig. 2) is configured according to the requirements in the actual scenario, and the embodiment assumes that the length of the configured prefix proxy address is 56 bits.

And calculating according to the network prefix, the length of the prefix proxy address and the length of the IPv4 prefix to obtain a corresponding mapping rule. The calculating according to the network prefix, the length of the prefix proxy address and the length of the IPv4 prefix to obtain the corresponding mapping rule specifically includes: the mapping Rule comprises a part A, a part B and a part C, wherein the part A is obtained according to the network prefix and is used for distributing Rule-IPv6-prefix in the prefix proxy address; calculating the length of a part B in the mapping rule according to the length of the IPv4 prefix, wherein the part B in the mapping rule is used for distributing IPv 4-Addr-diffix in the prefix proxy address; and calculating the length of the C part according to the length of the network prefix, the length of the prefix proxy address and the length of the B part, wherein the C part in the mapping rule is used for distributing PSID in the prefix proxy address. The corresponding mapping rule can be obtained according to the configured address pool parameter information, the mapping rule is composed of 3 parts, the 3 parts of the mapping rule are assumed to be an A part, a B part and a C part respectively, wherein the A part corresponds to the network prefix and the length of the network prefix in the address pool parameter information, and referring to fig. 2 and 5, namely, the A part is 2001:db8:0100:40, the numbers behind the "/" represent the length, the units are bits, and the length of the network prefix is 40 bits; the length of the B part is calculated according to the length of the IPv4 prefix in the address pool parameter information, and in this embodiment, it is assumed that the IPv4 prefix is 100.0.2.0, and the length of the IPv4 prefix is 24 bits, and since the length of the IPv4 address is 32 bits, the length of the B part is 8 bits (calculated by 32 bits-24 bits=8bits); the length of the C portion is calculated according to the length of the prefix proxy address, the length of the network prefix and the calculated length of the B portion in the address pool parameter information, and in this embodiment, it is assumed that the length of the prefix proxy address is 56 bits, the length of the network prefix is 40 bits, and the calculated length of the B portion is 8 bits, so that the length of the C portion is 8 bits (calculated by 56 bits-40 bits-8 bits=8 bits). The resulting mapping rule is shown in fig. 5.

The assigning the prefix proxy address corresponding to the address application request according to the mapping rule specifically includes: part B allocates an IPv 4-addr-unification; if the length of the C part is not 0, the C part is increased from 0, PSID is allocated, and after all PSIDs are allocated to the C part, the B part is increased, and the next IPv4-addr-suffix is allocated; if the length of the part C is 0, PSID is not allocated, the part B is increased, and the next IPv4-addr-suffix is allocated; wherein the initial value of the IPv 4-addr-unification is 1. When the prefix proxy address is allocated according to the mapping rule, the part B is initially incremented from 1, and the invalid values of the part B are removed, such as 0 and 255, because when the part B is 0, the IPv4 address allocated to the user is 100.0.2.0, which is an address that cannot be used for public network communication, when the length of the part C is not 0 after a value of the part B used for allocating IPv 4-addr-unification is determined (indicating that the IPv4 address is in a sharing mode, i.e. a plurality of users share the IPv4 address, and different users are distinguished by dividing ports), the value of the part C used for allocating PSIDs is incremented from 0, and when the part C allocates all PSIDs, the part B is incremented, and the next IPv 4-addr-unification is allocated, such as: assuming that after the value of the B part for allocating IPv 4-addr-unification is determined to be 1, the value of the C part for allocating PSIDs is incremented after all PSIDs are allocated from 0 to 255, the B part is incremented, the next IPv 4-addr-unification is allocated, at this time, the next IPv 4-addr-unification is 2, the value of the C part for allocating PSIDs is incremented again after all PSIDs are allocated from 0 to 255, the B part is incremented continuously, and so on, so as to allocate a different prefix proxy address to each user; if the length of the C part is 0, the IPv4 address is in the exclusive mode.

The domain rule further comprises a DMR rule, and BR addresses and the length of the BR addresses in the address pool parameter information are configured according to BR-addresses in the DMR rule. The DMR rule corresponding to MAP domain 1 is assumed as follows:

BR-address：3001:db8:0100::/64

configuring BR addresses and the lengths of the BR addresses in the address pool parameter information according to BR-addresses in the DMR rule; referring to fig. 2, it is assumed that address pool parameter information is configured for an address pool 33 in an address pool module according to a DMR rule corresponding to MAP domain 1, and as described above, BR-address is performed according to the DMR rule: 3001:db8:0100:/64 configures the br address and the length of the br address (i.e. map br-address in fig. 2) in the address pool parameter information in the address pool 33, the configured br address is 3001:db8:0100:: and the length of the br address is 64 bits; if the BR address length (i.e., BR-address length) is not 128 bits, it indicates that the corresponding issued domain rule is address translation (MAP-T, mapping of Address and Port using Translation) in MAP technology, and if the BR address length (i.e., BR-address length) is 128 bits, it indicates that the corresponding issued domain rule is address encapsulation (MAP-E, mapping of Address and Port with Encapsulation) in MAP technology.

According to the embodiment, the BMR rule and the DMR rule corresponding to the MAP domain are disassembled, then the address pool is configured according to the disassembled BMR rule and the disassembled DMR rule, the BMR rule and the BMR rule are integrated into a service processing flow of a WAN port request of a user for assigning a prefix proxy address, the MAP technology is effectively realized by replacing the mode of manually configuring the domain rule at the user side in the prior art, and the dynamic switching of the MAP domain of the MAP-CE is realized.

Example 2:

on the basis of embodiment 1, the present embodiment further provides a system for dynamically issuing MAP domain rules, including a protocol module, an address pool module, an authentication module, and a dynamic routing module;

the address pool module is used for acquiring an address application request and distributing a prefix proxy address corresponding to the address application request according to a mapping rule; the protocol module is used for receiving the prefix proxy address and the address pool parameter information sent by the address pool configuration module, calculating domain rules according to the prefix proxy address and the address pool parameter information, and then packaging the calculated domain rules into response messages sent to users.

The authentication module is used for acquiring an authentication domain corresponding to the user according to the authentication authorization request sent by the protocol module, and authenticating the user according to the authentication domain;

and if the authentication is passed, sending an address application request to the address pool module.

The dynamic routing module is used for acquiring the route generated by the protocol module according to the prefix proxy address and notifying the route generated by the protocol module according to the prefix proxy address to an upstream router.

Example 3:

in order to facilitate understanding of the present invention, the present embodiment further provides a manner that can be implemented in a practical scenario on the basis of embodiment 1 and embodiment 2, as shown in fig. 6, an OLT (english full name: optical line terminal chinese full name: optical line terminal) is composed of a protocol module, an address pool module, an authentication module and a dynamic routing module, where DHCPv6 in fig. 6 is the protocol module, AAA is the authentication module, IPPoolv6 is the address pool module, and BGP4+/OSPFv3 is the dynamic routing module;

Step 201, user 1 sends a request message for acquiring a prefix proxy address to DHCPv6, step 202, DHCPv6 analyzes the request message after receiving the request message, and confirms that the request message is for acquiring the prefix proxy address, and sends an authentication authorization request to AAA for AAA authentication, step 203, AAA acquires an authentication domain A corresponding to user 1 according to the authentication authorization request sent by DHCPv6, at this time, AAA associates a plurality of authentication domains, but according to the mapping rule of the authentication domain A, AAA judges which authentication domain the user 1 is, if it is judged that the user 1 is authenticated by carrying the authentication domain A, after authentication passes, address application request is sent to IPPoolv6 from an address pool bound with authentication domain A, and assuming that the address pool bound with authentication domain A is address pool 33, the address pool parameter information of address pool 33 is shown in FIG. 2, step 204, IPPov 6 allocates a prefix 1 to the user 1 according to the mapping rule of address pool 33, and then assigns a prefix 205 to a prefix 2001:0115:2001:2001:2, and a prefix is mapped to a 2001:34056:2001:2:1, and a 2001:2001:2:1 is mapped by the address pool, and a 2001:2:1:1:2:a prefix is mapped, and a 2001:2:1 is mapped, and a CP56:a prefix is mapped by the address is mapped to the address pool, and a 2001:1:a address-3:2:a prefix is mapped by the address map is mapped by the address pool is sent from the address pool:

(1) The Rule-IPv6-prefix of BMR Rule can be obtained according to the network address and the network address length in the address pool parameter information of the address pool 33, wherein the Rule-IPv6-prefix is 2001:db8:0100:40;

(2) According to the length of IPv4 prefix and IPv4 prefix in the address pool parameter information of the address pool 33, rule-IPv4-prefix of BMR Rule can be obtained to be 100.0.2.0/24;

(3) PSID-offset in BMR rule can be obtained as 4bit according to PSID offset in address pool parameter information;

(4) According to the difference value of the prefix agent address length and the network address length in the address pool parameter information, the EA-bits-length in the BMR rule is 16 bits;

(5) According to the BR address and the BR address length in the address pool parameter information of the address pool 33, BR-address in the DMR rule is 3001:db8:0100:64;

in step 206, the DHCPv6 is encapsulated in the phase position of the response message sent to the user 1 according to the BMR rule, the DMR rule and the allocated prefix proxy address 2001:db8:0112:3400, which are obtained by parsing the address pool parameter information of the address pool 33, and the user 1 side can deduce the key information of the MAP technology according to the BMR rule, the DMR rule and the allocated prefix proxy address carried in the response message. Meanwhile, the DHCPv6 generates routes for the distributed prefix proxy addresses and informs the BGP4+/OSPfv3, and the BGP4+/OSPfv3 advertises routes generated by the protocol modules according to the prefix proxy addresses to upstream routers.

The method can integrate BMR rule and DMR rule into the service processing flow of the WAN port request of the user for assigning prefix proxy address, effectively replaces the manual mode of configuring domain rule at the user side in the original MAP technology to realize MAP technology, and realizes dynamic switching of MAP domain of MAP-CE.

Example 4:

in order to facilitate understanding of the present invention, the present embodiment further provides a manner in which a MAP domain is switched in an actual scenario, specifically, a subscriber line identification MAP is modified so as to switch a user from an authentication domain a of the MAP domain 1 to an authentication domain B of the MAP domain 2, and kick the user off the line, on the basis of embodiment 1 and embodiment 2; acquiring an authentication and authorization request; acquiring an authentication domain B corresponding to a user according to an authentication authorization request, and authenticating the user according to the authentication domain B; if the authentication is passed, an address application request is sent to acquire a prefix proxy address from an address pool bound by the authentication domain B.

As shown in fig. 7, the OLT is composed of a protocol module, an address pool module, an authentication module and a dynamic routing module, where DHCPv6 in fig. 7 is a protocol module, AAA is an authentication module, IPPoolv6 is an address pool module, BGP4+/OSPFv3 is a dynamic routing module, where IPPoolv6 contains multiple address pools, but each address pool binding authentication domain is different and unique, and each MAP domain corresponds to one address pool, and it is assumed that authentication domain a is bound to address pool 33 in IPPoolv 6.

In a practical scenario, due to the operation and maintenance requirements, it is possible that the user needs to switch the MAP domain, referring to fig. 7 and 8, assuming that the user 1 needs to switch from the MAP domain 1 to the MAP domain 2, step 301, the AAA of the OLT modifies the user line identity mapping, switches the user 1 from the authentication domain a of the MAP domain 1 to the authentication domain B of the MAP domain 2, step 302, and kicks off the user 1. Assuming that the address pool bound by the authentication domain a is the address pool 33, the address pool parameter information of the address pool 33 is configured according to the domain rule of the MAP domain 1 (as shown in fig. 8), the address pool bound by the authentication domain B is the address pool 22 (as shown in fig. 8), and the address pool parameter information of the address pool 22 is configured according to the domain rule of the MAP domain 2, then when the user 1 acquires the prefix proxy address from the IPPoolv6, the prefix proxy address can only be acquired from the address pool 22 bound by the authentication domain B after the user 1 is switched. The address pool parameter information of the address pool 22 is shown in fig. 8, and the mapping rule corresponding to the address pool 22 is shown in fig. 9.

In step 303, user 1 sends a request message for acquiring a prefix proxy address to DHCPv6, in step 304, DHCPv6 parses the request message after receiving the request message and confirms that the request message is for acquiring the prefix proxy address, sends an authentication authorization request to AAA for AAA authentication, in step 305, AAA acquires an authentication domain B corresponding to user 1 according to the authentication authorization request sent by DHCPv6, at this time, AAA associates a plurality of authentication domains, but AAA judges which authentication domain the user 1 is according to user line identification mapping, if it is judged that the user 1 is authenticated by carrying the authentication domain B, after authentication passes, an address application request is sent to ippoov 6 from address pool 22 bound with authentication domain B, and prefix proxy address is allocated to user 1 according to mapping rules of address pool 22, in step 306, ip poov 6 allocates prefix proxy address according to mapping rules of address pool 22, and in step 0200:0100:2002 is allocated with prefix proxy address 4:0100, and in the prefix pool 2:0100:0100 is mapped by using a prefix 4:0100:2002, and prefix parameter information is mapped by using the prefix map 0:0100:0100:2002, and prefix information is mapped by using the prefix pool 2:0100:0100:0200:2002, and prefix information is allocated to the prefix information in the pool 2:0100:0100:0200:2002.

(1) The Rule-IPv6-prefix of BMR Rule can be obtained according to the network address and the network address length in the address pool parameter information of the address pool 22, wherein the Rule-IPv6-prefix is 2002:db8:0100:48;

(2) According to the length of IPv4 prefix and IPv4 prefix in the address pool parameter information of the address pool 22, rule-IPv4-prefix of BMR Rule can be obtained to be 110.0.1.0/24;

(4) According to the difference value of the prefix agent address length and the network address length in the address pool parameter information, the EA-bits-length in the BMR rule is 8 bits;

(5) According to the BR address and the BR address length in the address pool parameter information of the address pool 22, the BR-address in the DMR rule is 4001:db8:0100:64;

step 308, packaging the BMR rule and the DMR rule obtained by the DHCPv6 according to the address pool parameter information of the address pool 22 and the allocated prefix proxy address 2002:db8:0100:0200:56 into the position of the phase of the response message sent to the user 1, wherein the user 1 side can deduce key information of the MAP technology according to the BMR rule, the DMR rule and the prefix proxy address carried in the response message. The DHCPv6 generates routes for the assigned prefix proxy addresses and informs the BGP4+/OSPfv3 that the BGP4+/OSPfv3 advertises routes generated by the protocol modules according to the prefix proxy addresses to the upstream routers.

The user 1 side can deduce key information of the MAP technology according to the BMR rule, the DMR rule and the prefix proxy address carried in the response message. The method can integrate BMR rule and DMR rule into the service processing flow of the WAN port request of the user for assigning prefix proxy address, effectively replaces the manual mode of configuring domain rule at the user side in the original MAP technology to realize MAP technology, and realizes dynamic switching of MAP domain of MAP-CE.

Example 5:

on the basis of the method for dynamically issuing the MAP domain rule provided in the above embodiment 1, the present invention further provides a device for dynamically issuing the MAP domain rule, which can be used to implement the method, as shown in fig. 10, and is a schematic device architecture diagram of an embodiment of the present invention. The means for dynamically issuing MAP domain rules of the present embodiment includes one or more processors 21 and a memory 22. In fig. 10, a processor 21 is taken as an example.

The processor 21 and the memory 22 may be connected by a bus or otherwise, for example in fig. 10.

The memory 22 is a non-volatile computer readable storage medium as a method for dynamically issuing MAP domain rules, and may be used to store non-volatile software programs, non-volatile computer executable programs, and modules, such as the method for dynamically issuing MAP domain rules in embodiment 1. The processor 21 executes various functional applications and data processing of the means for dynamically issuing MAP domain rules, that is, implements the method for dynamically issuing MAP domain rules of embodiment 1, by running nonvolatile software programs, instructions, and modules stored in the memory 22.

The memory 22 may include high-speed random access memory, and may also include non-volatile memory, such as at least one magnetic disk storage device, flash memory device, or other non-volatile solid-state storage device. In some embodiments, the memory 22 may optionally include memory located remotely from the processor 21, such remote memory being connectable to the processor 21 through a network. Examples of such networks include, but are not limited to, the internet, intranets, local area networks, mobile communication networks, and combinations thereof.

The program instructions/modules are stored in the memory 22 and, when executed by the one or more processors 21, perform the method of dynamically issuing MAP domain rules in embodiment 1 described above, e.g., performing the steps shown in fig. 1 described above.

Those of ordinary skill in the art will appreciate that all or a portion of the steps in the various methods of the embodiments may be implemented by a program that instructs associated hardware, the program may be stored on a computer readable storage medium, the storage medium may include: read Only Memory (ROM), random access Memory (RAM, random Access Memory), magnetic or optical disk, and the like.

The foregoing description of the preferred embodiments of the invention is not intended to be limiting, but rather is intended to cover all modifications, equivalents, and alternatives falling within the spirit and principles of the invention.

Claims

1. A method for dynamically issuing MAP domain rules, comprising:

configuring address pool parameter information according to the domain rule so as to obtain a corresponding mapping rule; the corresponding mapping rule is calculated according to the network prefix, the length of the prefix proxy address and the length of the IPv4 prefix;

acquiring an address application request;

2. The method of claim 1, wherein the configuring the address pool parameter information according to the domain rule to obtain the corresponding mapping rule specifically comprises: the domain rules include BMR rules;

the address pool parameter information also comprises a network prefix, the length of the network prefix and the length of the prefix proxy address.

3. The method for dynamically issuing MAP domain rules according to claim 2, wherein the calculating according to the network prefix, the length of the prefix proxy address, and the length of the IPv4 prefix obtains the corresponding mapping rule specifically includes:

4. A method for dynamically issuing MAP domain rules according to claim 3, wherein said assigning a prefix proxy address corresponding to said address application request according to a mapping rule specifically comprises:

Part B allocates an IPv 4-addr-unification;

wherein the initial value of the IPv 4-addr-unification is 1.

5. The method of dynamically issuing MAP domain rules according to claim 2, further comprising configuring a PSID offset in the address pool parameter information according to a PSID-offset in the BMR rule.

6. The method of dynamic MAP domain rule issuing according to claim 5, further comprising a DMR rule, wherein BR address and a length of BR address in the address pool parameter information are configured according to BR-address in the DMR rule.

7. The method of dynamically issuing MAP domain rules according to claim 6, wherein if the br address is not 128 bits long, the corresponding issued domain rule is an address translation;

8. The method for dynamically issuing MAP domain rules according to any of claims 1-7, characterized in that,

the protocol module generates a route according to the prefix proxy address, so that the dynamic routing module advertises the route generated by the protocol module according to the prefix proxy address to an upstream router.

9. The method of dynamically issuing MAP domain rules according to claim 1, further comprising:

acquiring an authentication and authorization request;

10. An apparatus for dynamically issuing MAP domain rules, characterized by at least one processor; and a memory communicatively coupled to the at least one processor; wherein the memory stores instructions executable by the at least one processor for performing the method of dynamically issuing MAP domain rules of any of claims 1-9.