CN114390120B

CN114390120B - Method and device for processing protocol frames

Info

Publication number: CN114390120B
Application number: CN202210006058.1A
Authority: CN
Inventors: 杨宗悦; 王良俊; 杨彦波
Original assignee: Fiberhome Telecommunication Technologies Co Ltd; Wuhan Fisilink Microelectronics Technology Co Ltd
Current assignee: Fiberhome Telecommunication Technologies Co Ltd; Wuhan Fisilink Microelectronics Technology Co Ltd
Priority date: 2022-01-04
Filing date: 2022-01-04
Publication date: 2023-06-09
Anticipated expiration: 2042-01-04
Also published as: CN114390120A

Abstract

The invention relates to the technical field of communication and information processing, and provides a method and a device for processing protocol frames. Respectively confirming the VLAN group to which the VLAN object belongs and the protocol frame type contained according to the obtained VLAN object; according to the confirmed VLAN group and the contained protocol frame types, acquiring a first index value of each contained protocol frame type in a behavior matrix through the mapping relation; and according to a second index value obtained by the VLAN object and in combination with the first index value, obtaining the processing behaviors of each protocol frame contained in the VLAN object from the behavior matrix. The invention can efficiently identify and process various protocols, and can support flexible processing of protocol frames based on VLAN while reducing design scale.

Description

Method and device for processing protocol frames

[ field of technology ]

The present invention relates to the field of communications and information processing technologies, and in particular, to a method and an apparatus for processing a protocol frame.

[ background Art ]

In packet switching, the packet processing completes the recognition and forwarding of the packet, firstly extracts the packet information, recognizes and analyzes various types of packets, and then processes and forwards the flow classification and protocol frames based on different rules, including: VLAN processing, flow identification processing, forwarding processing, qoS processing, and the like, wherein identification and processing of protocol frames is an important part. Protocol frames in networks are mostly used for management, control and maintenance of network functions, and in packet processing, different protocol frames need to be forwarded to different processing parts for processing, or some protocol frames need to be discarded based on network security.

The protocol frame identification is based on the information carried by the protocol frame, including the destination MAC (all: media Access Control) address, source MAC address, ethernet type, IP (all: internet Protocol) protocol number, IP address, transport layer port number, etc., and comparing with the configured protocol frame identification template. Each protocol frame identification template can be configured with a selected data field and a value of the data field, and can support comparison in a mask mode; for example, the method can be realized by a TCAM (fully called as Ternary Content Addressable Memory), and the processing behavior can be directly configured after the protocol frame is identified.

For example: the 802.1X protocol frame may be labeled pdu_idx0 after matching based on the ethernet type of 0X888e (16 system only); RIP (collectively: routing Information Protocol) frames can be identified based on UDP (collectively: user Digital Protocol) port number 520 and DMAC 0x01-00-5E-xx-xx-xx (16-ary), xx indicating no interest and labeled pdu_idx1 after matching.

In packet processing, the forwarding domain is typically divided by a VLAN (collectively: virtual Local Area Network), thereby enabling the exchange of data messages within the VLAN domain. In order to meet the requirement of multiple services, the network is also subjected to service slicing, different network slices correspond to different services, the slices are independent of each other and are not interfered with each other, and each slice can execute different processing strategies. The number of switch fields of a data packet may reach vlan×slice number in the case of slicing, for example, for a network with slice number of 8, the number of switch fields may reach 32K, and the protocol frame may have tens of kinds.

If the processing behavior of each protocol frame is controlled individually for each forwarding domain (e.g. VLAN or VLAN under each slice), the required occupied table entry capacity becomes very large and it becomes increasingly important how to reduce the table entry size while guaranteeing the design flexibility, applicability.

In view of this, overcoming the drawbacks of the prior art is a problem to be solved in the art.

[ invention ]

The invention aims to solve the technical problem that the traditional processing method is based on extracting protocol frames from ports to a CPU, and the CPU carries out accurate processing; or directly controlled by VLAN, but because of VLAN and protocol frame type, precise control cannot be achieved, for example, only identification of several fixed protocol frames based on VLAN can be performed.

The invention adopts the following technical scheme:

in a first aspect, the present invention provides a method for processing a protocol frame, in which a protocol frame type and a VLAN packet are used as two dimensions, and a mapping relationship between each protocol frame type included in a VLAN object and a first index attribute in a behavior matrix is established; wherein each processing behavior content contained in the behavior matrix is taken as a constituent element of the behavior matrix and is uniquely determined by the first index attribute and a second index attribute determined according to a VLAN object, and the method includes:

Respectively confirming the VLAN group to which the VLAN object belongs and the protocol frame type contained according to the obtained VLAN object;

according to the confirmed VLAN group and the contained protocol frame types, acquiring a first index value of each contained protocol frame type in a behavior matrix through the mapping relation;

and according to a second index value obtained by the VLAN object and in combination with the first index value, obtaining the processing behaviors of each protocol frame contained in the VLAN object from the behavior matrix.

Preferably, the processing actions include one or more of discard, forward, duplicate, and pass-through.

Preferably, one VLAN packet corresponds to one or more VLAN objects, wherein the protocol frame types contained in each VLAN object belonging to the one VLAN packet are mapped to the same first index value of the first index attribute in the behavior matrix.

Preferably, when confirming the VLAN packet to which the VLAN object belongs, the method includes:

the method is determined according to one or more of the types of protocol frames, the number of the types of the protocol frames, the arrangement relation of the types of the protocol frames and the total length of each type of the protocol frames contained in the VLAN object.

Preferably, if it is confirmed that the VLAN object currently analyzed does not have a VLAN packet matching the VLAN object, the method further includes:

Adding a temporary packet in the VLAN packet;

filling operation behaviors according to the protocol frame types contained in the VLAN objects analyzed currently;

analyzing whether a plurality of processing behaviors contained in a single second index value exist in the behavior matrix, wherein the processing behaviors can cover the filled operation behaviors, if so, replacing the filled operation behaviors in the temporary group with a first index value corresponding to each processing behavior under the corresponding second index value, and establishing a mapping relation between a VLAN object which is currently analyzed and the second index value.

Preferably, the method further comprises:

analyzing whether the temporary packet can be combined with the VLAN packet, wherein if the processing mode of the protocol frame with the difference between the temporary packet and the first VLAN packet in the VLAN packet is selected, and after the processing behavior in the first VLAN packet is selected, processing of VLAN objects in the temporary packet can still be completed, classifying each VLAN object associated with the temporary packet into the first VLAN packet for processing.

In a second aspect, the present invention provides a processing apparatus for a protocol frame, including: the device comprises a protocol frame identification module, a protocol frame and VLAN packet table maintenance module, a first selection module, a VLAN table maintenance module, a protocol frame processing behavior table maintenance module and a second selection module, and specifically:

The protocol frame identification module is used for identifying the protocol frame type contained in the VLAN object;

the protocol frame type and VLAN grouping table maintenance module is used for managing a two-dimensional table with two dimensions of a table formed by the protocol frame type and the VLAN grouping and with a first index value in a protocol frame processing behavior table as a content;

the first selection module is used for acquiring the protocol frame identification number output by the protocol frame identification module and the VLAN group number output by the VLAN table maintenance module, and finding out a corresponding first index value from the protocol frame type and VLAN group table maintenance module;

the VLAN table maintenance module is used for outputting VLAN group numbers to the first selection module and outputting second index values to the second selection module;

the protocol frame processing behavior table maintenance module is used for managing a two-dimensional table with a second index attribute and a first index attribute as two dimensions of the table and with processing behaviors as contents;

the second selection module is configured to obtain a second index value from the VLAN table maintenance module, obtain a first index value from the first selection module, and find a processing behavior of a corresponding protocol frame under a current VLAN in the protocol frame processing behavior table maintenance module.

Preferably, at least two protocol frame templates are maintained in the protocol frame identification module, and the type of the protocol frame to which the currently received protocol frame belongs is determined by matching the received protocol frame with the feature item in the protocol frame template.

Preferably, when the VLAN table maintenance module confirms that the VLAN object currently analyzed does not have a VLAN packet matching the VLAN object, the method includes:

the protocol frame and VLAN packet table maintenance module adds a temporary packet in VLAN packets; filling operation behaviors according to the protocol frame types contained in the VLAN objects analyzed currently; notifying the protocol frame processing behavior table maintenance module of newly adding a temporary packet;

and the protocol frame processing behavior table maintenance module is used for analyzing whether a plurality of processing behaviors contained in a single second index value exist in the protocol frame processing behavior table and can cover the filled operation behaviors, if so, replacing the filled operation behaviors in the temporary packet with the first index values corresponding to the processing behaviors under the corresponding second index value, and establishing the mapping relation between the VLAN object which is currently analyzed and the second index value.

Preferably, the protocol frame and VLAN packet table maintenance module is further configured to:

In a third aspect, the present invention further provides a device for processing a protocol frame, which is configured to implement the method for processing a protocol frame according to the first aspect, where the device includes:

at least one processor; and a memory communicatively coupled to the at least one processor; wherein the memory stores instructions executable by the at least one processor for performing the method of processing protocol frames of the first aspect.

In a fourth aspect, the present invention also provides a non-volatile computer storage medium storing computer executable instructions for execution by one or more processors to perform the method of processing protocol frames according to the first aspect.

In order to reduce the table entry scale, the invention adopts a mode of classifying the protocol frames and combines the processing behavior of the protocol frames to classify, so that various protocols can be effectively identified and processed, the design scale is reduced, and meanwhile, the flexible processing of the protocol frames based on VLAN can be supported.

[ description of the drawings ]

In order to more clearly illustrate the technical solution of the embodiments of the present invention, the drawings that are required to be used in the embodiments of the present invention will be briefly described below. It is evident that the drawings described below are only some embodiments of the present invention and that other drawings may be obtained from these drawings without inventive effort for a person of ordinary skill in the art.

Fig. 1 is a flow chart of a method for processing a protocol frame according to an embodiment of the present invention;

fig. 2 is a flow chart of a method for processing a protocol frame according to an embodiment of the present invention;

fig. 3 is a flow chart of a method for processing a protocol frame according to an embodiment of the present invention;

FIG. 4 is a schematic diagram of a processing architecture for protocol frames according to an embodiment of the present invention;

fig. 5 is a schematic diagram of a protocol frame identification module in a protocol frame processing architecture according to an embodiment of the present invention;

FIG. 6 is a schematic diagram of another processing architecture for protocol frames according to an embodiment of the present invention;

fig. 7 is a schematic structural diagram of a processing device for protocol frames according to an embodiment of the present invention.

[ detailed description ] of the invention

The present invention will be described in further detail with reference to the drawings and examples, in order to make the objects, technical solutions and advantages of the present invention more apparent. It should be understood that the specific embodiments described herein are for purposes of illustration only and are not intended to limit the scope of the invention.

The invention specifically belongs to the processing of protocol frames in data exchange. The method can be applied to processing the protocol frames based on the virtual local area network (Virtual Local Access Network, abbreviated as VLAN), and can also be applied to similar scenes, such as processing the protocol frames based on VLAN or processing the protocol frames based on slice in an optical line terminal (Optical Line Terminal, abbreviated as OLT) system with slice capability. The actual representation of the VLAN object can be understood as a data packet, and the different VLAN objects represent that the constituent elements of the data packet are formed by different protocol frame types, so that the logical relationship between the two embodiments of the present invention is provided.

The protocol frame processing of the present invention refers to forwarding or discarding processing of protocol frames, and specifically includes: discarding, extracting to CPU (fully called Central Process Unit), COPY to CPU, transparent transmission, redirection, etc., and developing the description mode by taking discarding, forwarding, copying and transparent transmission as main processing actions, those skilled in the art can understand that the processing actions possibly expanded in different scenes can be included in the implementation scheme of the present invention without creative labor, and therefore, the invention should also be considered as reasonable protection scope of the present invention.

In addition, the technical features of the embodiments of the present invention described below may be combined with each other as long as they do not collide with each other.

Example 1:

the embodiment 1 of the invention provides a processing method for protocol frames, which takes protocol frame types and VLAN groups as two dimensions, and establishes a mapping relation between each protocol frame type contained in VLAN objects and a first index attribute in a behavior matrix; wherein, each processing behavior content included in the behavior matrix is taken as a constituent element of the behavior matrix, and is uniquely determined by the first index attribute and a second index attribute determined according to a VLAN object, as shown in fig. 1, the method includes:

In step 201, according to the obtained VLAN object, the VLAN packet to which it belongs and the protocol frame type contained are respectively confirmed.

In the example shown in table 1 below, pdu_vlan_group0_idx, pdu_vlan_group1_idx, pdu_vlan_group2_idx and pdu_vlan_group3_idx represent 4 VLAN packets, while 0-127 under the corresponding pdu_idx column represents 128 protocol frame types, arranged in the corresponding order, and wherein the parameter values in table 1 except the first column and the first row are the first index values described above.

TABLE 1

In step 202, according to the confirmed VLAN packet and the contained protocol frame types, a first index value of each contained protocol frame type in the behavior matrix is obtained through the mapping relationship.

In step 203, according to the second index value obtained by the VLAN object, and in cooperation with the first index value, processing behaviors of each protocol frame included in the VLAN object are obtained from the behavior matrix.

In the same example scenario as the above example table, the corresponding behavior matrix may be illustrated in the following table 2, where vlan_pdu_idx represents the second index value, and the above-mentioned classification 0 processing behavior, classification 1 processing behavior, classification 2 processing behavior, and classification 3 processing behavior correspond to the first index value in the above example table, that is, the table content 3 in the above first table directly corresponds to the column of "classification 3 processing behavior" in the second table. Wherein, forwarding 1 and forwarding 2 in table 2 represent two different forwarding behavior modes, including but not limited to different purposes of forwarding, different protocol modifications involved in forwarding, different content modifications involved in forwarding, and so on. Whereas the corresponding pass-through 1 and pass-through 2 also represent two different processing branches for the same class of processing behavior, discard 1 and discard 2 are also similar, for example: the difference between drop 1 and drop 2 is embodied in that the partially dropped and dropped content is located at a different position on the data frame, etc.

TABLE 2

In order to reduce the table entry scale, the embodiment of the invention adopts a mode of classifying the protocol frames and combines the processing behavior of the protocol frames to classify, so that various protocols can be effectively identified and processed, and flexible processing of the protocol frames based on VLAN can be supported while the design scale is reduced.

Wherein the processing actions include discard, forward, copy, pass-through, and the like. In the subsequent examples of the present invention, 3 kinds of processing actions of discard, forwarding and pass-through will be described as typical examples for easier explanation schemes, but as a person skilled in the art can expand the processing actions to possible numbers and cases based on the explanation of the corresponding embodiments, it should be within the scope of the present invention examples.

In the embodiment of the invention, if the behavior matrix is described by taking 3 processing behaviors of discarding, forwarding and transparent transmission as typical examples, the design intent of the behavior matrix cannot be fully shown. In the specific implementation process, the processing behavior types far exceed the above 3 types of discarding, forwarding and transparent transmission, because the forwarding positions under subdivision can be divided into a plurality of cases, and the corresponding processing behavior can also be expressed as different refinement branches corresponding to whether uplink data or downlink data are generated. Therefore, when the design intent of the behavior matrix is not considered specifically, the simplest behavior matrix is to use a row of arrays formed by all the processing behaviors, and at this time, for the vlan_pdu_idx, the second index value is represented by only one row represented by 0 in table 2. However, this approach has the biggest problem that as the complexity of the processing behavior increases, the array length of the corresponding processing behavior constructed by a row of memory in table 2 becomes longer, and the direct expression result is that the number "#" like the number "#" in the "class # processing behavior" in table 2 becomes larger. In this way, if a single row is used to build the behavior matrix, as the complexity of the processing behavior increases, the efficiency of searching for the processing behavior by using the first index value becomes lower and lower, and the meaning of the behavior matrix and the added second index value provided by the invention is to overcome the defect of building the behavior matrix by the single row.

Considering that in an actual implementation, for the types of processing actions corresponding to different VLAN packets, one VLAN packet may occupy only a part of its processing actions compared to the total processing actions, while the other processing actions may not be involved in the VLAN packet, how the number of second index values in the action matrix (i.e. the number of rows in the corresponding table 2) is defined in this case; in this regard, the preferred implementation of the embodiment of the present invention is also given as follows:

after confirming a set of processing behaviors corresponding to the protocol frame types contained in the newly generated VLAN packet or the temporary VLAN packet which will appear in the extended implementation manner in the embodiment of the present invention, matching the set of processing behaviors with a row of processing behaviors in the behavior matrix, which already exists under each second index value, and if the matching degree is greater than or equal to a preset threshold (for example, may be set to 70%), enabling a certain row in the corresponding existing behavior matrix to have the set of processing behaviors corresponding to the newly generated VLAN packet by means of extending the column number.

In the actual implementation process, the maintenance of the behavior matrix also performs statistics according to the processed VLAN object efficiency, and if 20% of performance floating occurs in the processing efficiency, the row number and column number of the corresponding behavior matrix are adjusted, that is, two rows close to each other are integrated into one row by adding columns, or the original row is split into two rows by reducing columns. After the adjustment, whether the VLAN object is finally reserved or not is verified through the actual VLAN object processing efficiency. The technical idea of this adjustment procedure is to perform a verification that, for more and more VLAN packets, the overall performance is minimally affected by increasing the number of columns or by increasing the number of columns. In the specific implementation process, the operation of canceling the column correspondingly has a hidden condition, and if the condition is not satisfied, the operation of reducing the column is not triggered actually, the condition is that: by statistics, it is confirmed that one or more processing actions appear for each row and are not used in table 1 (this indicates that either a portion of the VLAN objects are no longer present or that a portion of the VLAN objects contain a changed protocol frame type or number).

As a basic theoretical basis for the development of the following embodiment of the present invention, in the embodiment of the present invention, one VLAN packet corresponds to one or more VLAN objects, where the first index values of the first index attributes of the protocol frame types mapped to the behavior matrix contained in each of the VLAN objects belonging to one VLAN packet are the same. By "pairwise" is meant herein that any two of the VLAN objects contained in a VLAN packet are combined together, each of which contains a protocol frame type that maps to the same first index value of the first index attribute in the behavior matrix.

As a manner of identifying a VLAN packet to which a VLAN object belongs in the embodiment of the present invention, one or more of a protocol frame type, a number of protocol frame types, an arrangement relationship of protocol frame types, and a total length including each protocol frame type may be determined. In addition, it is not excluded that the VLAN object can be determined by a specific field and its field content of the message, and in the embodiment of the present invention, any manner that can effectively distinguish between various VLAN objects may be combined into the embodiment of the present invention. The above-mentioned types of protocol frames, the number of types of protocol frames, the arrangement relation of types of protocol frames, and the total length of each type of protocol frames can be dynamically combined according to the number and complexity of VLAN objects, and the more items incorporated in the corresponding combination, the more the total number of VLAN objects and the higher the complexity, the more the scene can be naturally adapted.

As a situation that may be encountered by implementing the complex scenario of the embodiment of the present invention, that is, the situation that the VLAN packet established in the beginning cannot effectively satisfy the complex situation of the VLAN object under the current situation, at this time, a newly introduced VLAN object may not find a VLAN packet that can be attributed in the existing VLAN packet, and in combination with the embodiment of the present invention, there is a preferred implementation process, as shown in fig. 2, if it is confirmed that the VLAN object currently analyzed does not have a VLAN packet matched with the VLAN object, the method further includes:

in step 301, a temporary packet is added to the VLAN packet.

Taking the above table 1 as an example, the following table 3 may be presented as a state including a temporary packet:

TABLE 3 Table 3

The temporary packet in table 3 identifies "to-be-determined processing behavior", which is filled in by the to-be-processed behavior in step 302, and the row coordinate (i.e., corresponding pdu_idx) of the temporary packet indicates the corresponding protocol frame of the to-be-filled operation behavior.

In step 302, the operation is performed according to the protocol frame type contained in the VLAN object currently analyzed.

The method for filling the operation behaviors of the object comprises the steps of, but is not limited to, automatically completing filling by a server after big data analysis, and completing automatic inspection through operator inspection or by using test case data; the filling can also be accomplished by direct operator input.

In order to be able to clarify the extended embodiments of the present invention, the examples given in table 3 above are still continued below to facilitate understanding and process presentation by incorporating them into the step of correlating, both with typical considerations.

The filling results of the corresponding operators are presented in table 4, and it should be noted in advance that, for the purpose of combining the VLAN group and the temporary packet in the later extended embodiment, the processing behavior of each protocol frame in the temporary packet in table 4 below may be expressed in a one-to-one correspondence with each protocol frame in the VLAN packet identified by pdu_vlan_group_idx.

TABLE 4 Table 4

In step 303, it is analyzed whether there are a plurality of processing behaviors contained in the single second index value in the behavior matrix capable of covering the filled operation behaviors, if so, the filled operation behaviors in the temporary packet are replaced by the first index value corresponding to each processing behavior under the corresponding second index value, and a mapping relationship between the VLAN object currently analyzed and the second index value is established.

Taking table 4 above as an example, it can be found that the operation behavior in the temporary packet can complete the full coverage by taking vlan_pdu_idx as 2; how to determine the processing behavior in the temporary packet can be covered on the whole by which vlan_pdu_idx value in table 2, and the simplest single method is to traverse, specifically, sequentially traverse different vlan_pdu_idx values in table 2, whether the corresponding behavior can cover the processing behavior set by the "processing behavior to be determined" in the temporary packet, if so, a mapping relationship between the temporary packet and the corresponding vlan_pdu_idx value is established, that is, when the VLAN object in the temporary packet is acquired, the processing behavior included in the corresponding vlan_pdu_idx value corresponding to the VLAN object in table 2 can be directly found according to the mapping relationship. See row of table 2 in conjunction with the "temporary group" column of table 4; since neither drop 2 is taken by vlan_pdu_idx to 0, 1, the value of the "temporary packet" column is derived directly from vlan_pdu_idx being 2 as: 0. 3, 0, 1, 3, 1, 2, 3; just as the row values of the pdu vlan_group1_idx case are equal, the temporary packet can be dropped; if the obtained value is not equal to the row values of other existing columns, a corresponding pdu_vlan_group_idx is added. Thus, the corresponding temporary group appears as the following table 5 after the above-described "replace the operation behavior filled in the temporary group with the first index value corresponding to each processing behavior under the corresponding second index value" is performed:

TABLE 5

In practical situations, the occurrence of the newly introduced VLAN object may be caused by various reasons that the VLAN packet to which the VLAN object can belong cannot be found in the existing VLAN packet.

In case 1, the newly introduced VLAN object cannot adapt to the first index under the one or more VLAN packets that have been generated currently, for example, none of the 4 sets of first index value sets shown in the 4 columns in table 1 can be combined with the behavior matrix (i.e. an example representation of the behavior matrix as shown in table 2) to obtain a suitable processing behavior result, and at this time, it is necessary to convert the temporary packet into a conventional VLAN packet.

In case 2, the newly introduced VLAN object cannot be matched with the home VLAN packet, because the home mapping relationship may not be established in advance, at this time, the temporary packet may be established as a expedient for ensuring that the process can be performed, and as a preferred solution, whether the VLAN object in the temporary packet can be classified into the VLAN packet established in the history is described in the following solution. The examples shown in tables 3 to 5 above are set for the most desirable case of case 2.

As shown in fig. 3, after the step 303, the method further includes:

in step 304, it is analyzed whether the temporary packet can be combined with the VLAN packet, where if the processing mode of the protocol frame of the difference between the temporary packet and the first VLAN packet in the VLAN packet is selected, and after the processing behavior in the first VLAN packet is selected, the processing of the VLAN object in the temporary packet is still completed, then each VLAN object associated with the temporary packet is classified into the first VLAN packet for processing.

As shown in table 5, the temporary packet and the VLAN packet pdu_vlan_group1_idx have high consistency, and the VLAN object in the temporary packet may be directly assigned to the pdu_vlan_group1_idx packet.

The first VLAN packet is not particularly limited in the embodiment of the present invention, but is only for describing that the first VLAN packet can be different from other VLAN packets in description, which indicates that the first VLAN packet is a VLAN packet that is merged by each VLAN object included in the temporary packet. Therefore, the scope of protection should not be interpreted too much.

Considering that in actual situations, the total data amount and the number of short bursts of the corresponding temporary packet are huge, the processing procedure in step 304 may also be counting the number of VLAN objects processed under the temporary packet, and if the number of concurrency of the temporary packet counted in the preset time period is less than the preset threshold. For example, the preset time may be 5 minutes, 10 minutes, 1 hour, etc., and the corresponding preset threshold may be set according to the actual situation, which is not limited herein.

Example 2:

an embodiment of the present invention provides a processing apparatus for a protocol frame, which is configured to implement a processing method for a protocol frame as described in embodiment 1, as shown in fig. 4, including: the device comprises a protocol frame identification module, a protocol frame and VLAN packet table maintenance module, a first selection module, a VLAN table maintenance module, a protocol frame processing behavior table maintenance module and a second selection module, and specifically:

the protocol frame identification module is configured to identify a protocol frame type contained in the VLAN object.

The protocol frame type and VLAN grouping table maintenance module is used for managing a two-dimensional table with the protocol frame type and VLAN grouping as the two dimensions of the table and with the first index value in the protocol frame processing behavior table as the content.

The first selection module is configured to obtain the protocol frame identification number output by the protocol frame identification module and the VLAN group number output by the VLAN table maintenance module, and find a corresponding first index value in the protocol frame type and VLAN packet table maintenance module.

The VLAN table maintenance module is used for outputting VLAN group numbers to the first selection module and outputting second index values to the second selection module.

The protocol frame processing behavior table maintenance module is used for managing a two-dimensional table with the second index attribute and the first index attribute as two dimensions of the table and with the processing behavior as the content.

In the embodiment of the invention, at least two protocol frame templates are maintained in the protocol frame identification module, and the type of the protocol frame to which the currently received protocol frame belongs is determined by matching the received protocol frame with the characteristic items in the protocol frame templates.

As a situation that may be encountered by the implementation of the complex scenario of the embodiment of the present invention, that is, the situation that the VLAN packet established in the beginning cannot effectively satisfy the complex situation of the VLAN object under the current situation, at this time, a newly introduced VLAN object may not find a VLAN packet that can be attributed in the existing VLAN packet, and in combination with the embodiment of the present invention, there is also a preferred implementation process, where the VLAN table maintenance module confirms that the VLAN object currently analyzed does not have a VLAN packet matched with the VLAN object, where the method includes:

In the embodiment of the present invention, similar to case 2 considered in embodiment 1: the newly introduced VLAN object cannot be matched with the home VLAN packet, because the home mapping relationship may not be established in advance, at this time, the temporary packet may be established as a expedient for ensuring that the process can be performed, and as a preferred solution, whether the VLAN object in the temporary packet can be classified into the VLAN packet established in the history is described in the following solution. The protocol frame and VLAN packet table maintenance module is further configured to:

The invention effectively classifies the protocol frames, so that each VLAN can flexibly select different protocol frame types for processing, and the table entry is effectively reduced. The protocol frames are identified according to the message information, the protocol frame codes to be processed are output, and the coded protocol frames can be used for port-based protocol frame extraction or other processing. When the protocol frame processing is carried out based on VLAN, the coded protocol frame is classified into a plurality of coding groups again, the protocol frame can still be normalized in the coding groups, the coding groups are selected through VLAN, and the processing behavior is configured.

The embodiment of the present invention is taken as an embodiment of the apparatus of embodiment 1 under the common inventive concept, so the related expansion implementation manner referred to in embodiment 1 is also applicable to the embodiment of the present invention, and is not described herein in detail.

Example 3:

the embodiment of the present invention gives another possible architecture implementation manner on the basis of embodiment 2, unlike embodiment 2 in which the dominant right of searching (screening) is passed by the first selection module and the second selection module, in the embodiment of the present invention, more is represented as the transmission of the corresponding data content and the split execution of the process.

The protocol frame is identified and encoded in pdu_iden (equivalent to the frame protocol identification module in embodiment 2), as shown in fig. 5, after the entries match, the encoding pdu_idx of the output protocol frame, the value of pdu_idx is determined by the data of the to-be-processed protocol frame, and it is assumed that the number of the to-be-processed protocol frame is n-1 and the value of pdu_idx is 0 to n-1. Here 0 to n-1 correspond to 0 to 127 of the column pdu_idx in Table 1 in example 1.

Based on the identification of the VLAN object, protocol frame processing is performed as shown in fig. 6:

according to the pdu_idx output after the protocol frame identification, a pdu_vlan_group_table database is searched, and the database is composed of n entries, each entry corresponds to one pdu_idx, each entry is composed of a plurality of fields, and the fields are pdu_group0_idx, pdu_group1_idx, …, pdu_groupjidx (refer to table 1, table 3, table 4 and table 5 in example 1), and represents m classification values corresponding to the protocol frame with pdu_idx, the m classification values are configured by software, and the m value is determined according to the specific requirements of the design (m is set to 3 in table 1).

Each column of the database is referred to as: pdu_vlan_group0_idx, pdu_vlan_group1_idx, …, pdu_vlan_groupm_idx; after looking up the database according to the respective pdu_idx, the protocol frames output pdu_group0_idx, pdu_group1_idx, …, pdu_groupm_idx to the first selection unit in fig. 6. It should be noted that, the first selecting unit in the embodiment of the present invention and the first selecting module in the above embodiment 2 have similarity in functional characteristics and also have differences, and therefore, should not be directly seen as the same subject object; while there are two parameters obtained by the first selection module in embodiment 2, in this embodiment, the parameters obtained by the first selection unit are one, but on the other hand, there is a group of data input, as shown by pdu_group0_idx, pdu_group1_idx, …, pdu_groupm_idx in fig. 6.

VLAN-table lookup based on VLAN of incoming protocol frame as shown in fig. 6:

the vlan_table contains k entries (the value of k is determined by the requirement), each entry corresponds to each VLAN, the processing content of each VLAN for the protocol contains { vlan_pdu_group_sel, vlan_pdu_idx }, vlan_pdu_group_sel is used to select the categorized pdu_group for the VLAN from the pdu_group0_idx, pdu_group1_idx, …, pdu_groupm_idx corresponding to the protocol frame (i.e. which column parameter value in table 1 is specified), and vlan_pdu_idx is the content of the table except the first row and the first column in table 1 for configuring the protocol frame processing behavior second index based on the VLAN. Table 1 shows the protocol frame and VLAN packet table maintenance module/pdu_vlan_group_table, and the values are processed by coordinates (pdu_idx, vlan_pdu_group_sel).

Looking up vlan_pdu_act_tables (e.g., as shown in table 2, which is an example of one vlan_pdu_act_table) from vlan_pdu_idx, the vlan_pdu_act_tables containing entries (each of which appears like a row in table 2), each of which contains fields (i.e., one of the cells in table 2), each of which can be configured to "discard", "forward", "pass-through" the processing behavior of the protocol frame, etc.;

for vlan_pdu_act_entry entries selected based on vlan_pdu_idx (i.e., rows in table 2 are selected), corresponding processing behaviors are selected based on pdu_group (i.e., columns in table 2 are selected, pdu_group appears as corresponding class # processing behavior), for which protocol frames correspond. For example: table 2 may be understood as the content vlan_pdu_act_table maintained by the protocol frame processing behavior table maintenance module, which is processed by a coordinate (vlan_pdu_idx, pdu_group) value, where pdu_group is characterized in table 2 as a categorized # processing behavior, with specific value of 0,1, 2.

The embodiment of the present invention is different from embodiment 2 in that, in embodiment 2, after the first selection module and the second selection module acquire the table lookup parameters, the corresponding protocol frame and VLAN packet table maintenance module and the protocol frame processing behavior table maintenance module directly query the corresponding results, which is more conventional and typical. In embodiment 3, this is performed in a manner that a part of the parameters push the output of the intermediate query result, and the result is finally output on the corresponding node by the first selecting unit and the second selecting unit in fig. 6. Compared to embodiment 2, the embodiment of the present invention generates more intermediate data, but the advantage of the present invention is also that the query process is classified, which is especially suitable for the case that a lot of data frames with the same number easily occur at the same time or in the same time period, and at this time, the query efficiency can be actually improved by adopting the embodiment of the present invention, because the intermediate data (represented as pdu_group0_idx, fig. 6, pdu_group_idx) output by the corresponding pdu_vlan_group_table can be cached for subsequent processing.

Example 4:

the embodiments of the present invention are presented as a supporting embodiment of the embodiments described above, and the embodiments of the present invention are presented with emphasis on how to complete the creation of the database contents presented in the corresponding tables 1 and 2.

In the embodiment of the invention, 4K VLANs are supposed to be supported, 128 protocol frames are required to be processed, 4 pdu_vlan_group are designed, and the protocol frames can be classified into 6 types at most; the processing behavior of protocol frames is "discard", "forward" and "pass-through".

In step 401, the processing behavior of the 1 st VLAN object (denoted VLAN 1) on the protocol frame is configured.

Assuming that vlan1 needs to use the same processing behavior (e.g., forward 1) for protocol frames numbered 0, 2, 4, 5 (corresponding to the values of pdu_idx in the table below), use another same processing behavior (e.g., discard 1) for protocol frames numbered 1, 3, 6, and use different processing behavior for other numbered frames than the first two; the vlan1 is configured by using pdu_vlan_group0_idx.

vlan_table correlation is configured as follows:

the pdu_vlan_group_table is configured as follows (where "\" in other VLAN packets indicates that it is pre-assigned the number of packets, but currently there is no valid associated first index value assignment, in the alternative, the corresponding pdu_vlan_group1_idx, pdu_vlan_group2_idx and pdu_vlan_group3_idx may not be retained in the following table, but may be added as needed, without limitation here):

vlan_pdu_act_table is configured as follows:

in step 402, the processing behavior of the 2 nd VLAN object (denoted VLAN 2) on the protocol frame is configured.

Suppose that vlan2 performs the same classification of protocol frames as vlan 1; but the processing behavior of classifying each protocol frame is different.

vlan_table correlation is configured as follows:

the pdu vlan group table configuration remains unchanged as follows:

vlan_pdu_act_table is configured as follows:

in step 403, the processing behavior of VLAN3 (denoted VLAN 3) on the protocol frame is configured.

It is assumed that this vlan3 does not classify protocol frames as vlan1, but does classify protocol frames as vlan 1.

The vlan_table related configuration is as follows, and it should be noted that, the pdu_vlan_group_1_idx is similar to that in embodiment 1, and is obtained after being finally converted into a VLAN packet, where the corresponding procedure of generating and converting the temporary packet into the VLAN packet is skipped, and is directly described as a result after having been converted:

the pdu vlan group table is configured as follows:

vlan_pdu_act_table is configured as follows:

step 404, configure the processing behavior of VLAN4 (denoted VLAN 4) for the protocol frame.

Assuming that the classification behavior of vlan4 on protocol frames is different from that of vlan1 and vlan2, but that of pdu_vlan_group1_idx is satisfied in the existing vlan_pdu_idx, it is necessary to select pdu_vlan_group1_idx for vlan4 and adjust the corresponding vlan_pdu_idx to 2 to complete the configuration of vlan4 in vlan_table.

vlan_table correlation is configured as follows:

the pdu vlan group table is configured as follows:

vlan_pdu_act_table is configured as follows:

in step 405, the processing behavior of the 5 th VLAN (VLAN 5) on the protocol frame is configured.

It is assumed that the vlan5 performs classification of protocol frames differently from vlan1 and vlan2, but performs processing of classified behaviors as vlan1.

vlan_table correlation is configured as follows:

the pdu_vlan_group_table is configured as follows, and it should be noted that, herein, pdu_vlan_group_2_idx is similar to that in embodiment 1, and is obtained after generating a temporary packet and finally converting to a VLAN packet, where the corresponding temporary packet generating and converting to VLAN packet process is skipped, and is directly described as a result after having been converted:

vlan_pdu_act_table is configured as follows:

after the above configuration, all protocol frames of the VLAN object may work in step 406.

The embodiment of the present invention is to describe the method procedure in the generation procedure from tables 1 and 2, taking the table exemplified in embodiment 1 as an illustration object. After that, further related method contents can be referred to the related description in embodiment 1, and will not be described herein.

Example 5:

fig. 7 is a schematic architecture diagram of a protocol frame processing apparatus according to an embodiment of the present invention. The processing device for protocol frames of the present embodiment includes one or more processors 21 and a memory 22. In fig. 7, a processor 21 is taken as an example.

The processor 21 and the memory 22 may be connected by a bus or otherwise, which is illustrated in fig. 7 as a bus connection.

The memory 22 is used as a nonvolatile computer-readable storage medium for storing a nonvolatile software program and a nonvolatile computer-executable program, as in the processing method of protocol frames in embodiment 1. The processor 21 executes a processing method for protocol frames by running a non-volatile software program and instructions stored in the memory 22.

The memory 22 may include high-speed random access memory, and may also include non-volatile memory, such as at least one magnetic disk storage device, flash memory device, or other non-volatile solid-state storage device. In some embodiments, memory 22 may optionally include memory located remotely from processor 21, which may be connected to processor 21 via a network. Examples of such networks include, but are not limited to, the internet, intranets, local area networks, mobile communication networks, and combinations thereof.

The program instructions/modules are stored in the memory 22, which when executed by the one or more processors 21, perform the method of processing protocol frames in embodiment 1 described above, for example, performing the steps shown in fig. 1-3 described above.

It should be noted that, because the content of information interaction and execution process between modules and units in the above-mentioned device and system is based on the same concept as the processing method embodiment of the present invention, specific content may be referred to the description in the method embodiment of the present invention, and will not be repeated here.

Those of ordinary skill in the art will appreciate that all or a portion of the steps in the various methods of the embodiments may be implemented by a program that instructs associated hardware, the program may be stored on a computer readable storage medium, the storage medium may include: read Only Memory (ROM), random access Memory (RAM, random Access Memory), magnetic or optical disk, and the like.

The foregoing description of the preferred embodiments of the invention is not intended to be limiting, but rather is intended to cover all modifications, equivalents, and alternatives falling within the spirit and principles of the invention.

Claims

1. A processing method for protocol frames is characterized in that a mapping relation between each protocol frame type contained in a VLAN object and a first index attribute in a behavior matrix is established by taking a protocol frame type and VLAN groups as two dimensions; wherein each processing behavior content contained in the behavior matrix is taken as a constituent element of the behavior matrix and is uniquely determined by the first index attribute and a second index attribute determined according to a VLAN object, and the method includes:

2. The method of claim 1, wherein the processing actions include one or more of dropping, forwarding, copying, and transparent transmission.

3. The method of claim 1, wherein one VLAN packet corresponds to one or more VLAN objects, and wherein the first index values of the first index attributes mapped to the behavior matrix are identical for protocol frame types included in each VLAN packet among VLAN objects belonging to the one VLAN packet.

4. The method for processing a protocol frame according to claim 1, wherein when confirming a VLAN packet to which a VLAN object belongs, the method comprises:

5. The method of claim 1, wherein if it is determined that the VLAN packet matching the VLAN object currently analyzed does not exist, the method further comprises:

adding a temporary packet in the VLAN packet;

6. The method of processing protocol frames according to claim 5, further comprising:

7. A processing apparatus for protocol frames, comprising: the device comprises a protocol frame identification module, a protocol frame and VLAN packet table maintenance module, a first selection module, a VLAN table maintenance module, a protocol frame processing behavior table maintenance module and a second selection module, and specifically:

8. The apparatus according to claim 7, wherein the protocol frame identification module maintains at least two protocol frame templates, and determines a protocol frame type to which the currently received protocol frame belongs by pairing the received protocol frame with a feature item in the protocol frame templates.

9. The apparatus of claim 7, wherein when the VLAN table maintenance module confirms that the VLAN packet matching the VLAN object currently analyzed does not exist, comprising:

10. The apparatus for processing a protocol frame according to claim 9, wherein the protocol frame and VLAN packet table maintenance module is further configured to: