CN114401216B - Traffic forwarding method and device, electronic equipment and computer readable storage medium - Google Patents

Traffic forwarding method and device, electronic equipment and computer readable storage medium Download PDF

Info

Publication number
CN114401216B
CN114401216B CN202210051509.3A CN202210051509A CN114401216B CN 114401216 B CN114401216 B CN 114401216B CN 202210051509 A CN202210051509 A CN 202210051509A CN 114401216 B CN114401216 B CN 114401216B
Authority
CN
China
Prior art keywords
routing
session
address
configuration information
traffic
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN202210051509.3A
Other languages
Chinese (zh)
Other versions
CN114401216A (en
Inventor
王浩羽
房栩正
葛峥峥
黄世刚
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Industrial and Commercial Bank of China Ltd ICBC
Original Assignee
Industrial and Commercial Bank of China Ltd ICBC
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Industrial and Commercial Bank of China Ltd ICBC filed Critical Industrial and Commercial Bank of China Ltd ICBC
Priority to CN202210051509.3A priority Critical patent/CN114401216B/en
Publication of CN114401216A publication Critical patent/CN114401216A/en
Application granted granted Critical
Publication of CN114401216B publication Critical patent/CN114401216B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00Routing or path finding of packets in data switching networks
    • H04L45/74Address processing for routing
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00Routing or path finding of packets in data switching networks
    • H04L45/22Alternate routing
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00Routing or path finding of packets in data switching networks
    • H04L45/24Multipath
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00Routing or path finding of packets in data switching networks
    • H04L45/34Source routing

Abstract

The disclosure provides a flow forwarding method and device, electronic equipment and a computer readable storage medium, which can be applied to the technical field of information security and the technical field of finance. The traffic forwarding method comprises the following steps: forwarding, by the first routing unit, the first session traffic originating from the first target IP address to the second routing unit according to the first routing path generated according to the first configuration information, so that the second routing unit forwards the first session traffic to the second target IP address; and forwarding, by the second routing unit, the second session traffic originating from the second target IP address to the first routing unit according to a second routing path generated according to the second configuration information, so that the first routing unit forwards the second session traffic to the first target IP address.

Description

Traffic forwarding method and device, electronic equipment and computer readable storage medium
Technical Field
The present disclosure relates to the field of information security technologies, and more particularly, to a traffic forwarding method and apparatus, an electronic device, a computer readable storage medium, and a computer program product.
Background
In the case of concatenating devices (e.g., firewalls) in the communication link that require session maintenance, consistency of the round-trip path is ensured.
In the process of implementing the present disclosure, it is found that when a router/switch works at a three-layer routing layer, generally, high availability of links is implemented by a routing load, and when a route is forwarded, a destination address of the route determines which link is routed, and when two links are loaded, there may be a case that a round-trip path is inconsistent, so that the present routing policy cannot ensure the consistency of the round-trip path.
Disclosure of Invention
In view of the foregoing, the present disclosure provides a traffic forwarding method, apparatus, device, medium, and program product.
According to a first aspect of the present disclosure, there is provided a traffic forwarding method, including:
forwarding, by the first routing unit, first session traffic originating from the first target IP address to the second routing unit according to a first routing path generated according to the first configuration information, so that the second routing unit forwards the first session traffic to the second target IP address, wherein a plurality of routing paths are included between the first routing unit and the second routing unit, and each routing path includes a session maintenance device;
And forwarding, by the second routing unit, second session traffic originating from the second target IP address to the first routing unit according to a second routing path generated according to the second configuration information, so that the first routing unit forwards the second session traffic to the first target IP address, wherein the first session traffic and the second session traffic belong to the same session, and communication nodes of the first routing path and the second routing path are the same.
According to an embodiment of the present disclosure, in the above method:
the first routing unit and the first target IP address belong to a first routing network segment area, and the second routing unit and the second target IP address belong to a second routing network segment area;
the first configuration information includes: mapping relation between each IP address in the first route network section area and the route path;
the second configuration information includes: mapping relation between each IP address and the routing path in the second routing network segment area.
According to an embodiment of the present disclosure, in the above method: the first configuration information is generated according to a routing strategy based on the source address; the second configuration information is generated according to a destination address based routing policy.
According to an embodiment of the present disclosure, in the above method: the number of routing segments in the first routing segment area is less than the number of routing segments in the second routing segment area.
According to an embodiment of the present disclosure, in the above method: the first configuration information is related to session characteristics of each IP address in the first routing network segment area in a preset historical time period and sensitive parameters of the session maintenance equipment;
the second configuration information is related to session characteristics of each IP address in the second routing segment area for a preset history period and sensitive parameters of the session maintenance device.
According to an embodiment of the present disclosure, in the above method: the sensitive parameters of the session maintenance device include at least one of: traffic bandwidth, number of new sessions, number of persistent sessions, number of packet forwarding.
According to an embodiment of the present disclosure, in the above method: the first configuration information further comprises a mapping relation between each IP address in the first routing network segment area and the backup routing path; the second configuration information includes a mapping relationship between each IP address in the second routing segment area and the backup routing path.
According to an embodiment of the present disclosure, in the above method: the first routing units are provided with a plurality of first routing units, and the second routing units are provided with a plurality of second routing units; each routing path contains a plurality of session maintenance devices.
A second aspect of the present disclosure provides a traffic forwarding device, comprising:
The first forwarding module is used for forwarding the first session traffic from the first target IP address to the second routing unit through the first routing unit according to the first routing path generated according to the first configuration information so that the second routing unit forwards the first session traffic to the second target IP address, wherein a plurality of routing paths are contained between the first routing unit and the second routing unit, and each routing path contains session holding equipment;
and the second forwarding module is used for forwarding second session traffic from the second target IP address to the first routing unit through the second routing unit according to a second routing path generated according to the second configuration information, so that the first routing unit forwards the second session traffic to the first target IP address, wherein the first session traffic and the second session traffic belong to the same session, and communication nodes of the first routing path and the second routing path are the same.
According to an embodiment of the present disclosure, in the above apparatus:
the first routing unit and the first target IP address belong to a first routing network segment area, and the second routing unit and the second target IP address belong to a second routing network segment area;
the first configuration information includes: mapping relation between each IP address in the first route network section area and the route path;
The second configuration information includes: mapping relation between each IP address and the routing path in the second routing network segment area.
According to an embodiment of the present disclosure, in the above apparatus: the first configuration information is generated according to a routing strategy based on the source address; the second configuration information is generated according to a destination address based routing policy.
According to an embodiment of the present disclosure, in the above apparatus: the number of routing segments in the first routing segment area is less than the number of routing segments in the second routing segment area.
According to an embodiment of the present disclosure, in the above apparatus: the first configuration information is related to session characteristics of each IP address in the first routing network segment area in a preset historical time period and sensitive parameters of the session maintenance equipment;
the second configuration information is related to session characteristics of each IP address in the second routing segment area for a preset history period and sensitive parameters of the session maintenance device.
According to an embodiment of the present disclosure, in the above apparatus: the sensitive parameters of the session maintenance device include at least one of: traffic bandwidth, number of new sessions, number of persistent sessions, number of packet forwarding.
According to an embodiment of the present disclosure, in the above apparatus: the first configuration information further comprises a mapping relation between each IP address in the first routing network segment area and the backup routing path; the second configuration information includes a mapping relationship between each IP address in the second routing segment area and the backup routing path.
According to an embodiment of the present disclosure, in the above apparatus: the first routing units are provided with a plurality of first routing units, and the second routing units are provided with a plurality of second routing units; each routing path contains a plurality of session maintenance devices.
A third aspect of the present disclosure provides an electronic device, comprising: one or more processors; and a memory for storing one or more programs, wherein the one or more programs, when executed by the one or more processors, cause the one or more processors to perform the traffic forwarding method described above.
A fourth aspect of the present disclosure also provides a computer-readable storage medium having stored thereon executable instructions that, when executed by a processor, cause the processor to perform the above-described traffic forwarding method.
A fifth aspect of the present disclosure also provides a computer program product comprising a computer program which, when executed by a processor, implements the above-described traffic forwarding method.
Drawings
The foregoing and other objects, features and advantages of the disclosure will be more apparent from the following description of embodiments of the disclosure with reference to the accompanying drawings, in which:
FIG. 1 schematically illustrates an application scenario diagram of a traffic forwarding method, apparatus, device, medium and program product according to an embodiment of the present disclosure;
FIG. 2 schematically illustrates an application scenario diagram of a related art implementation of link high availability through routing loads;
fig. 3 schematically illustrates an application scenario diagram of a traffic forwarding method according to an embodiment of the present disclosure;
fig. 4 schematically illustrates a flow chart of a traffic forwarding method according to an embodiment of the present disclosure;
fig. 5 schematically illustrates another application scenario diagram of a traffic forwarding method according to an embodiment of the present disclosure;
fig. 6 schematically illustrates yet another application scenario diagram of a traffic forwarding method according to an embodiment of the present disclosure;
fig. 7 schematically illustrates yet another application scenario diagram of a traffic forwarding method according to an embodiment of the present disclosure;
fig. 8 schematically illustrates a block diagram of a flow forwarding device according to an embodiment of the present disclosure; and
fig. 9 schematically illustrates a block diagram of an electronic device adapted to implement a traffic forwarding method according to an embodiment of the present disclosure.
Detailed Description
Hereinafter, embodiments of the present disclosure will be described with reference to the accompanying drawings. It should be understood that the description is only exemplary and is not intended to limit the scope of the present disclosure. In the following detailed description, for purposes of explanation, numerous specific details are set forth in order to provide a thorough understanding of the embodiments of the present disclosure. It may be evident, however, that one or more embodiments may be practiced without these specific details. In addition, in the following description, descriptions of well-known structures and techniques are omitted so as not to unnecessarily obscure the concepts of the present disclosure.
The terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting of the disclosure. The terms "comprises," "comprising," and/or the like, as used herein, specify the presence of stated features, steps, operations, and/or components, but do not preclude the presence or addition of one or more other features, steps, operations, or components.
All terms (including technical and scientific terms) used herein have the same meaning as commonly understood by one of ordinary skill in the art unless otherwise defined. It should be noted that the terms used herein should be construed to have meanings consistent with the context of the present specification and should not be construed in an idealized or overly formal manner.
Where expressions like at least one of "A, B and C, etc. are used, the expressions should generally be interpreted in accordance with the meaning as commonly understood by those skilled in the art (e.g.," a system having at least one of A, B and C "shall include, but not be limited to, a system having a alone, B alone, C alone, a and B together, a and C together, B and C together, and/or A, B, C together, etc.).
It should be noted that, the flow forwarding method and apparatus of the present disclosure may be applied to the field of information security technology, may also be applied to the field of financial technology, and may also be applied to any field other than the field of information security technology and the field of financial technology, and the application fields of the flow forwarding method and apparatus are not limited in the embodiments of the present disclosure.
It should be noted that, in the technical solution of the present disclosure, the authorization or consent of the user is obtained before the personal information of the user is obtained or collected.
The embodiment of the disclosure provides a traffic forwarding method, which comprises the following steps:
forwarding, by a first routing unit, a first session traffic originating from a first target IP address to a second routing unit according to a first routing path generated according to first configuration information, so that the second routing unit forwards the first session traffic to a second target IP address, wherein a plurality of routing paths are included between the first routing unit and the second routing unit, and each routing path includes a session holding device;
and forwarding, by the second routing unit, a second session traffic originating from the second target IP address to the first routing unit according to a second routing path generated according to second configuration information, so that the first routing unit forwards the second session traffic to the first target IP address, where the first session traffic and the second session traffic belong to the same session, and communication nodes of the first routing path and the second routing path are the same.
Fig. 1 schematically illustrates an application scenario diagram of a traffic forwarding method, apparatus, device, medium and program product according to an embodiment of the present disclosure.
As shown in fig. 1, a system architecture 100 according to this embodiment may include a first routing unit 101, a second routing unit 102, a first session holding device 103, and a second session holding device 104.
The first routing unit 101 and the second routing unit 102 may be various types of routing devices, and are used for connecting two or more networks, functioning as a gateway between the networks, and performing storage and packet forwarding processing on data packets between different networks.
The first session holding device 103 and the second session holding device 104 may be used to keep a certain session (same source IP and destination IP, homologous port, destination port, etc.) state on the device, so that incoming and outgoing traffic is passed through, or to find backhaul traffic, which may be various types of firewalls, IPs, etc., for example.
In the application scenario of the present disclosure, the first routing unit 101 and the second routing unit 102 may analyze destination addresses of data packets transmitted from various different types of networks according to different protocols, for example, an ethernet protocol used by a certain local area network, a TCP/IP protocol used by the internet, and convert addresses of non-TCP/IP networks into TCP/IP addresses, or vice versa; and then transmitting each data packet to a designated position according to the optimal route according to the selected routing algorithm.
According to an embodiment of the present disclosure, the data forwarding is performed in the above scenario, for example, communication may be established between a communication device located in the routing area 1 and a communication device located in the routing area 2 and having a plurality of IP addresses, and the traffic may be originated from a first IP destination address located in the routing area 1, and in the case where the traffic is forwarded to the first routing unit 101, the first routing unit 101 forwards the traffic data to the second routing unit 102 according to a routing path (for example, may be a first path routed through the first session holding device 103 or a second path routed through the second session holding device 104) generated according to the configuration information according to a preset routing algorithm or routing policy, so that the second routing unit 102 forwards the traffic to the second IP destination address in the routing area 2. Since the first path and the second path are connected in series with the session holding device, the backhaul traffic (originating from the second IP destination address in the routing area 2 and forwarding to the first destination IP address in the routing area 1) needs to pass through the same session holding device.
It should be appreciated that the number of first routing unit 101, second routing unit 102, first session holding device 103 and second session holding device 104 in fig. 1 is merely illustrative. There may be any number of routing units and session holding devices, as desired for implementation.
The flow forwarding method of the disclosed embodiment will be described in detail below with reference to fig. 2 to 9 based on the scenario described in fig. 1.
FIG. 2 schematically illustrates an application scenario diagram of a related art implementation of link high availability through routing loads; fig. 3 schematically illustrates an application scenario diagram of a traffic forwarding method according to an embodiment of the present disclosure.
The router/switch works at the three-layer routing level, where the high availability of links is usually achieved by routing the load, and the route determines which link to walk by the destination address of the route when forwarding. When two links are loaded, the problem of inconsistent round-trip paths exists.
As shown in fig. 2, from a to D, there are two paths a→b→d and a→c→d, and similarly, one session is bidirectional, and d→b→a and d→c→a can be returned, and since the two paths are loads, there is a 50% probability in each of the two paths in traffic selection, and there is a case that the back and forth paths are inconsistent. In this case, as shown in the scenario of fig. 3, if devices requiring session maintenance are connected in series in a path, since the devices requiring session maintenance need that the traffic round-trip paths are all maintained on one device, how to maintain the consistency of the round-trip paths is a problem to be solved.
In order to solve the above problems, for example, the following method can be adopted:
for example, the main and standby devices can be distinguished by the X-A device and the X-B device which need to be maintained in a session, the two lines are not loaded, paths where the X-A device and the X-B device are located are respectively a main path and a standby path, a default flow forwarding path is the main path, and the back-and-forth paths are kept consistent. For example: setting X-A as main equipment, setting X-B as slave equipment, setting default flow forwarding path as X-A main path on route exchange A, setting default flow forwarding path as X-A main path on route exchange D, switching to X-B standby path if main path is unavailable.
For example, the state synchronization can be performed between the devices X-A and X-B, so that the X-B device and the X-A device learn the state table maintained by the session, and the necessary conditions for forwarding are provided on both sides, thereby achieving the capability of forwarding on both sides.
In the process of realizing the present disclosure, the following technical defects are found to exist in the method:
after the two devices distinguish the main device from the standby device, the performance of the devices is lost, and the standby device does not perform calculation and forwarding, so that the overall efficiency is reduced. State synchronization can make it possible for devices to interact when they encounter a BUG. For a session problem that enables the device X-A to crash and restart, the session problem is also retransmitted to X-B, so that X-B and X-A restart together, and the overall redundancy is affected. Meanwhile, the A and the B maintain the same session table, when the session bursts, the two devices can have the session overstock, and the two devices are affected.
In view of this, embodiments of the present disclosure provide a traffic forwarding method.
Fig. 4 schematically illustrates a flow chart of a traffic forwarding method according to an embodiment of the present disclosure.
The method of the embodiments of the present disclosure is described below with reference to fig. 4 and fig. 3 described above.
As shown in fig. 4, the traffic forwarding of this embodiment includes operations S401 to S402.
Forwarding, by the first routing unit, the first session traffic originating from the first target IP address to the second routing unit according to the first routing path generated according to the first configuration information so that the second routing unit forwards the first session traffic to the second target IP address, wherein a plurality of routing paths are included between the first routing unit and the second routing unit, each routing path including the session maintenance device;
in operation S402, forwarding, by the second routing unit, the second session traffic originating from the second target IP address to the first routing unit according to the second routing path generated according to the second configuration information, so that the first routing unit forwards the second session traffic to the first target IP address, wherein the first session traffic and the second session traffic belong to the same session, and communication nodes of the first routing path and the second routing path are the same.
According to an embodiment of the present disclosure, the first routing unit and the second routing unit (the routing switch a and the routing switch D shown in fig. 3) may be various types of routing devices for connecting two or more networks, functioning as a gateway between the networks, and performing storage and packet forwarding processing on data packets between different networks. The first routing unit is located in the routing area 1, the first target IP address is any IP address in the routing area 1, the second routing unit is located in the routing area 2, and the second target IP address is any IP address in the routing area 1.
In an application scenario of the present disclosure, communication is established between a first target IP address located in routing area 1 and a second target IP address located in routing area 2 to communicate traffic data. A plurality of routing paths may be included between the first routing unit and the second routing unit, each routing path including a session maintenance device. For example, as shown in fig. 3, two routing paths may be included between the first routing unit and the second routing unit, where each path is connected in series with a session maintenance device X-a device and an X-B device, respectively. According to an embodiment of the present disclosure, the session maintaining device is configured to keep a certain session (same source IP and destination IP, homologous port, destination port, etc.) state on the device continuously, so that incoming and outgoing traffic is passed through, or backhaul traffic is found, which may be various types of firewalls, IPs, etc., for example.
According to an embodiment of the present disclosure, in the case where, in the above scenario, traffic originating from the first IP destination address in the routing area 1 is forwarded to the first routing unit (routing switch a), the first routing unit forwards traffic data to the second routing unit (routing switch D) according to the first routing path (for example, one of the two routing paths, X-a path and X-B path, shown in fig. 3) generated according to the first configuration information, so that the second routing unit forwards traffic to the second IP destination address in the routing area 2.
In accordance with an embodiment of the present disclosure, in the case where backhaul traffic (originating from the second IP destination address in routing area 2) is forwarded to the second routing unit, the second routing unit forwards traffic data to the first routing unit (routing switch a) in accordance with the second routing path (which may be, for example, one of the two routing paths, X-a path and X-B path shown in fig. 3) generated from the second configuration information, so that the first routing unit forwards traffic to the first IP destination address in routing area 1.
According to an embodiment of the present disclosure, the session holding device is included in each of the routing paths between the first routing unit and the second routing unit, and thus, the paths of the outbound traffic and the inbound traffic paths need to be kept consistent, i.e. the communication nodes of the first routing path and the second routing path are the same, and the first routing path and the second routing path both pass through the same session holding device (in the X-a device or the X-B device).
According to an embodiment of the disclosure, the first configuration information is generated by a first routing unit according to a preset routing policy, the second configuration information is generated by a second routing unit according to a preset routing policy, and in order to keep the round-trip paths consistent, the first configuration information may be generated according to a routing policy based on a source address; the second configuration information is generated according to a destination address based routing policy.
The embodiment of the disclosure provides a method for sharing multiple paths and guaranteeing consistency of back and forth paths based on IP scheduling, which ensures that traffic is reserved on both sides of an IP layer load (wherein for the same session, the routing paths pointed by the routing configuration information of both ends are kept consistent) by pre-configuring the routing configuration information of routing switching equipment at both ends, and the consistency of the back and forth paths of the same session is realized by forwarding the traffic according to the routing paths determined by the configuration information. According to the flow forwarding method, the flow is loaded in the network layer, the configuration is simple, the pressure of equipment needing to be maintained by a session is reduced, new management and control equipment is not needed, the flow is easy to balance, the equipment maintained by the session is not interconnected and synchronous, the probability of mutual influence is reduced, the problems that forwarding efficiency is low and two pieces of equipment maintained by the session are mutually influenced in the prior art are solved, and the high availability of a system architecture is improved.
According to an embodiment of the present disclosure, in the above method: the first routing unit and the first target IP address belong to a first routing segment area, and the second routing unit and the second target IP address belong to a second routing segment area. The first routing segment area and the second routing segment area are routing areas of two communication ends (source end and destination end). In the scenario shown in fig. 3, the first routing unit is located in the routing area 1, the first target IP address is any IP address in the routing area 1, the second routing unit is located in the routing area 2, and the second target IP address is any IP address in the routing area 1.
The first configuration information includes: mapping relation between each IP address in the first route network section area and the route path; the second configuration information includes: mapping relation between each IP address and the routing path in the second routing network segment area. The first configuration information can be used for generating a routing path corresponding to each IP address in the first routing network segment area, and the second configuration information can be used for generating a routing path corresponding to each IP address in the second routing network segment area so as to forward traffic according to the routing paths.
According to the embodiment of the disclosure, first configuration information is generated according to a preset routing strategy through a first routing unit, second configuration information is generated according to the preset routing strategy through a second routing unit, and in order to keep the round-trip paths consistent, the first configuration information is generated according to the routing strategy based on the source address; the second configuration information is generated according to a destination address based routing policy.
In the scenario shown in fig. 3, policy routing (source address-based routing policy) is configured on the routing switch a, and normal routing (destination address-based routing policy) is configured on the routing switch D. For example, the first configuration information set at the route switch a may be: traffic originating from IP1, walks the X-a path; meanwhile, the second configuration information configured on the routing switch D may be: the destination is the flow of IP1, the X-A path is walked, the consistency of the round-trip flow path under the same session can be ensured by configuring the routing information at the two ends of the communication according to different routing strategies (the first configuration information is generated according to the routing strategy based on the source address, and the second configuration information is generated according to the routing strategy based on the destination address) and forwarding the flow according to the routing path determined by the configuration information.
According to an embodiment of the present disclosure, in the foregoing traffic forwarding method, in configuring the first configuration information and the second configuration information for the first routing unit and the second routing unit, respectively, it is necessary to determine which end is configured with a policy route, so that configuration information of the one end is generated according to a routing policy based on a source address, and at the same time, a normal route is configured at the other end, so that configuration information of the other end is generated according to a routing policy based on a destination address. Therefore, it is necessary to distinguish between the upper access route and the lower access route and select an appropriate route splitting network segment.
According to an embodiment of the present disclosure, it may be selected to configure policy routing at the end with a smaller number of routing segments, i.e. if the first configuration information is generated by the first routing unit (in the first routing segment area) according to the source address based routing policy, and the second configuration information is generated by the second routing unit (in the second routing segment area) according to the destination address based routing policy, then the precondition is that: the number of routing segments in the first routing segment area is less than the number of routing segments in the second routing segment area.
In the scenario shown in fig. 3, in the network environment, the IP address segment set of the routing area 1 and the IP address set of the routing area 2 are necessarily not coincident, otherwise, the related traffic does not pass through the following area.
According to the embodiment of the disclosure, the policy route is configured on the side with few route entries, for example, assuming that there are 10 route segments in the route area 1 and 100 route segments in the area 2, the policy route is configured in the route exchange a in the route area 1, so that the configuration quantity can be effectively reduced, and the operation and maintenance difficulty can be reduced.
According to the embodiment of the present disclosure, since the mapping relationship between each IP address and the routing path in the relevant routing segment area is specified in the first configuration information and the second configuration information, in configuring the first configuration information and the second configuration information for the first routing unit and the second routing unit respectively, a traffic splitting manner needs to be determined, specifically:
The first configuration information is related to session characteristics of each IP address in the first routing network segment area in a preset historical time period and sensitive parameters of the session maintenance equipment;
the second configuration information is related to session characteristics of each IP address in the second routing segment area for a preset history period and sensitive parameters of the session maintenance device.
That is, in configuring the first configuration information and the second configuration information, a path of each IP address is determined according to session characteristics of the IP address in a preset history period and sensitive parameters of the session holding apparatus.
In the scenario shown in fig. 3, it is assumed that there are 10 routing segments in routing area 1, and 100 routing segments in area 2, policy routing is performed on routing switch a, and normal routing path is performed on routing switch D. Then 10 routes in region 1 need to be split. Since the configuration of the routing policy is determined based on a specific IP or IP segment, session characteristics (such as more frequent new sessions, longer session duration, etc.) of each IP segment over a period of time need to be collected, and according to the session characteristics of each IP segment, N sets of address segments are allocated according to the number N of paths between the routing switch a and the routing switch D in combination with the sensitive parameters of the session maintenance device, where the session characteristics of the addresses in each set are approximately average. For example, 10 of the routing segments in routing area 1 have 3 IP-associated X-A paths and the remaining 7 IP-associated X-B paths.
The sensitive parameter refers to what specification of attribute the session keeping device X-a is sensitive to, that is, the sensitive parameter is an attribute that the session keeping device X-a is most likely to reach a performance bottleneck in daily use. For example, a session maintenance device can achieve line speed forwarding on traffic, but has a bottleneck in the number of sessions, which is a sensitive parameter. For another example, the firewall is sensitive to the number of new sessions and the number of continuous sessions, and the number of new sessions and the number of continuous sessions are sensitive parameters of the firewall.
According to an embodiment of the present disclosure, the above scenario is, for example: if a routing path of an IP in the routing area 1 is required to be configured on the routing exchange a, session characteristics of the IP in the past period of time are collected, for example, the number of newly-built sessions of the IP is more frequent, and the IP can be set to share one routing path independently or associate a smaller number of IPs with the routing path corresponding to the IP in combination with the routing exchange a to be sensitive to the sensitive parameter of the number of newly-built sessions.
According to embodiments of the present disclosure, the sensitive parameter key attribute of the session maintenance device may be any parameter of interest between 4-7 layers in the OSI7 layer model, including, for example, but not limited to: traffic bandwidth, number of new sessions, number of persistent sessions, number of packet forwarding, etc.
According to the embodiment of the disclosure, the flow splitting mode is determined according to the session characteristics of each IP address and in combination with the sensitive parameters of the session holding equipment, so that the sensitive characteristics of the flow holding equipment are fully considered, the flow splitting mode is more reasonable, and the phenomena of flow congestion, session interruption and the like caused by unreasonable flow distribution in the communication process are avoided.
According to an embodiment of the present disclosure, the first configuration information further includes a mapping relationship between each IP address in the first routing segment area and the backup routing path; the second configuration information includes a mapping relationship between each IP address in the second routing segment area and the backup routing path.
According to the embodiment of the present disclosure, by the above manner, a standby path may be set for each routing path corresponding to each IP, for example, in the scenario shown in fig. 3, it is assumed that there are 10 routing segments in the routing area 1, 100 routing segments in the area 2, a policy routing is performed on the routing switch a, and a normal routing path is performed on the routing switch D.
On the route exchange D, 10 routes on the route exchange A are split, the flow is split according to the required proportion, one part of the destination IP section is configured with a route path main path to point to X-A, the standby path to point to X-B, the other part of the destination IP end is configured with a route path main path to point to X-B, and the standby path to point to X-A. The method of traffic splitting may refer to the method of determining the traffic splitting method according to the session characteristics of each IP address and the sensitive parameters of the session maintenance device in the foregoing embodiment. Meanwhile, strategy routes are configured on the route exchange A according to a preset proportion, a part of strategy route configuration of the source IP section is directed to X-A, the standby path is directed to X-B, and the other part of strategy source IP section configuration route main path is directed to X-B, and the standby path is directed to X-A according to a required proportion.
According to the embodiment of the disclosure, by setting the backup paths for the routing paths corresponding to each IP respectively, high availability of the paths can be realized, and under the condition that the main path is unavailable, traffic is conveniently switched to the backup paths, so that the reliability of the session is improved.
According to the embodiments of the present disclosure, the traffic forwarding method described in the embodiments of the present disclosure is not limited to the application scenario of the system architecture shown in fig. 3, and may be applied to scenarios of various system architectures. For example: a case where the first routing unit or the second routing unit is provided with a plurality of, a case where each routing path includes a plurality of session holding devices, and the like.
Fig. 5 schematically illustrates another application scenario diagram of a traffic forwarding method according to an embodiment of the present disclosure. In the scenario shown in fig. 5, more than two routing paths may be included between the first routing unit and the second routing unit, where each path is connected in series to a session-maintaining device.
Fig. 6 schematically illustrates yet another application scenario diagram of a traffic forwarding method according to an embodiment of the present disclosure. In the scenario shown in fig. 6, the first routing unit and the second routing unit are provided in plurality, i.e. there is redundancy in the routing switches a and D.
Fig. 7 schematically illustrates yet another application scenario diagram of a traffic forwarding method according to an embodiment of the present disclosure. In the scenario shown in fig. 7, a plurality of session holding devices are connected in series on each routing path between the first routing unit and the second routing unit.
In addition, the traffic forwarding method according to the embodiments of the present disclosure may also be applicable to the mixed architecture scenario of the above several system architectures.
According to an embodiment of the present disclosure, in any of the application scenarios, the traffic splitting and forwarding manners may be determined by setting first configuration information in the first routing unit and second configuration information in the second routing unit. Therefore, the traffic forwarding method of the embodiment of the disclosure can be suitable for various network system architectures, and has a wide application range.
Based on the traffic forwarding method, the disclosure further provides a traffic forwarding device. The device will be described in detail below in connection with fig. 8.
Fig. 8 schematically illustrates a block diagram of a flow forwarding device according to an embodiment of the present disclosure.
As shown in fig. 8, the traffic forwarding device 800 of this embodiment includes a first forwarding module 801 and a second forwarding module 802.
The first forwarding module 801 is configured to forward, through the first routing unit, a first session traffic originating from the first target IP address to the second routing unit according to a first routing path generated according to the first configuration information, so that the second routing unit forwards the first session traffic to the second target IP address, where a plurality of routing paths are included between the first routing unit and the second routing unit, and each routing path includes a session maintenance device;
And a second forwarding module 802, configured to forward, by using a second routing unit, a second session traffic originating from a second destination IP address to the first routing unit according to a second routing path generated according to the second configuration information, so that the first routing unit forwards the second session traffic to the first destination IP address, where the first session traffic and the second session traffic belong to the same session, and communication nodes of the first routing path and the second routing path are the same.
According to the embodiment of the disclosure, the traffic forwarding method implemented by the first forwarding module 801 and the second forwarding module 802 is a method for sharing multiple paths and guaranteeing consistency of back and forth paths based on IP scheduling, and the consistency of the back and forth paths of the same session is implemented by pre-configuring route configuration information of route switching devices at both ends, so that traffic is present at both sides of a load on the IP layer (where for the same session, the route paths pointed by the route configuration information at both ends are kept consistent), and forwarding traffic according to the route paths determined by the configuration information. According to the flow forwarding device disclosed by the embodiment of the disclosure, the flow is loaded on the network layer, the configuration is simple, the pressure of equipment needing to be maintained by a session is reduced, new management and control equipment is not required to be added, the flow is easy to be balanced, the equipment maintained by the session is not interconnected and synchronous, the probability of mutual influence is reduced, the problems of low forwarding efficiency and mutual influence of two session maintaining equipment in the prior art are solved, and the high availability of a system architecture is improved.
According to an embodiment of the present disclosure, in the above apparatus: the first routing unit and the first target IP address belong to a first routing segment area, and the second routing unit and the second target IP address belong to a second routing segment area.
The first configuration information includes: mapping relation between each IP address in the first routing network segment area and the routing path. The second configuration information includes: mapping relation between each IP address and the routing path in the second routing network segment area.
According to an embodiment of the present disclosure, in the above apparatus: the first configuration information is generated according to a routing strategy based on the source address; the second configuration information is generated according to a destination address based routing policy.
According to an embodiment of the present disclosure, in the above apparatus: the number of routing segments in the first routing segment area is less than the number of routing segments in the second routing segment area.
According to an embodiment of the present disclosure, in the above apparatus: the first configuration information is related to session characteristics of each IP address in the first routing network segment area in a preset historical time period and sensitive parameters of the session maintenance equipment;
the second configuration information is related to session characteristics of each IP address in the second routing segment area for a preset history period and sensitive parameters of the session maintenance device.
According to an embodiment of the present disclosure, in the above apparatus: the sensitive parameters of the session maintenance device include at least one of: traffic bandwidth, number of new sessions, number of persistent sessions, number of packet forwarding.
According to an embodiment of the present disclosure, in the above apparatus: the first configuration information further comprises a mapping relation between each IP address in the first routing network segment area and the backup routing path; the second configuration information includes a mapping relationship between each IP address in the second routing segment area and the backup routing path.
According to an embodiment of the present disclosure, in the above apparatus: the first routing units are provided with a plurality of first routing units, and the second routing units are provided with a plurality of second routing units; each routing path contains a plurality of session maintenance devices.
According to embodiments of the present disclosure, any of the plurality of modules in the first forwarding module 801 and the second forwarding module 802 may be combined in one module to be implemented, or any of the plurality of modules may be split into a plurality of modules. Alternatively, at least some of the functionality of one or more of the modules may be combined with at least some of the functionality of other modules and implemented in one module. According to embodiments of the present disclosure, at least one of the first forwarding module 801 and the second forwarding module 802 may be implemented at least in part as hardware circuitry, such as a Field Programmable Gate Array (FPGA), a Programmable Logic Array (PLA), a system-on-chip, a system-on-substrate, a system-on-package, an Application Specific Integrated Circuit (ASIC), or by hardware or firmware, such as any other reasonable way of integrating or packaging the circuitry, or in any one of or a suitable combination of three of software, hardware, and firmware. Alternatively, at least one of the first forwarding module 801 and the second forwarding module 802 may be at least partially implemented as a computer program module, which when executed may perform the corresponding functions.
Fig. 9 schematically illustrates a block diagram of an electronic device adapted to implement a traffic forwarding method according to an embodiment of the present disclosure.
As shown in fig. 9, an electronic device 900 according to an embodiment of the present disclosure includes a processor 901 that can perform various appropriate actions and processes according to a program stored in a Read Only Memory (ROM) 902 or a program loaded from a storage portion 908 into a Random Access Memory (RAM) 903. The processor 901 may include, for example, a general purpose microprocessor (e.g., a CPU), an instruction set processor and/or an associated chipset and/or a special purpose microprocessor (e.g., an Application Specific Integrated Circuit (ASIC)), or the like. Processor 901 may also include on-board memory for caching purposes. Processor 901 may include a single processing unit or multiple processing units for performing the different actions of the method flows according to embodiments of the present disclosure.
In the RAM 903, various programs and data necessary for the operation of the electronic device 900 are stored. The processor 901, the ROM 902, and the RAM 903 are connected to each other by a bus 904. The processor 901 performs various operations of the method flow according to the embodiments of the present disclosure by executing programs in the ROM 902 and/or the RAM 903. Note that the program may be stored in one or more memories other than the ROM 902 and the RAM 903. The processor 901 may also perform various operations of the method flow according to embodiments of the present disclosure by executing programs stored in the one or more memories.
According to an embodiment of the disclosure, the electronic device 900 may also include an input/output (I/O) interface 905, the input/output (I/O) interface 905 also being connected to the bus 904. The electronic device 900 may also include one or more of the following components connected to the I/O interface 905: an input section 906 including a keyboard, a mouse, and the like; an output portion 907 including a display such as a Cathode Ray Tube (CRT), a Liquid Crystal Display (LCD), and a speaker; a storage portion 908 including a hard disk or the like; and a communication section 909 including a network interface card such as a LAN card, a modem, or the like. The communication section 909 performs communication processing via a network such as the internet. The drive 910 is also connected to the I/O interface 905 as needed. A removable medium 911 such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, or the like is installed as needed on the drive 910 so that a computer program read out therefrom is installed into the storage section 908 as needed.
The present disclosure also provides a computer-readable storage medium that may be embodied in the apparatus/device/system described in the above embodiments; or may exist alone without being assembled into the apparatus/device/system. The computer-readable storage medium carries one or more programs which, when executed, implement methods in accordance with embodiments of the present disclosure.
According to embodiments of the present disclosure, the computer-readable storage medium may be a non-volatile computer-readable storage medium, which may include, for example, but is not limited to: a portable computer diskette, a hard disk, a Random Access Memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing. In the context of this disclosure, a computer-readable storage medium may be any tangible medium that can contain, or store a program for use by or in connection with an instruction execution system, apparatus, or device. For example, according to embodiments of the present disclosure, the computer-readable storage medium may include ROM 902 and/or RAM 903 and/or one or more memories other than ROM 902 and RAM 903 described above.
Embodiments of the present disclosure also include a computer program product comprising a computer program containing program code for performing the methods shown in the flowcharts. The program code, when executed in a computer system, causes the computer system to implement the traffic forwarding methods provided by embodiments of the present disclosure.
The above-described functions defined in the system/apparatus of the embodiments of the present disclosure are performed when the computer program is executed by the processor 901. The systems, apparatus, modules, units, etc. described above may be implemented by computer program modules according to embodiments of the disclosure.
In one embodiment, the computer program may be based on a tangible storage medium such as an optical storage device, a magnetic storage device, or the like. In another embodiment, the computer program may also be transmitted, distributed, and downloaded and installed in the form of a signal on a network medium, via communication portion 909, and/or installed from removable medium 911. The computer program may include program code that may be transmitted using any appropriate network medium, including but not limited to: wireless, wired, etc., or any suitable combination of the foregoing.
In such an embodiment, the computer program may be downloaded and installed from the network via the communication portion 909 and/or installed from the removable medium 911. The above-described functions defined in the system of the embodiments of the present disclosure are performed when the computer program is executed by the processor 901. The systems, devices, apparatus, modules, units, etc. described above may be implemented by computer program modules according to embodiments of the disclosure.
According to embodiments of the present disclosure, program code for performing computer programs provided by embodiments of the present disclosure may be written in any combination of one or more programming languages, and in particular, such computer programs may be implemented in high-level procedural and/or object-oriented programming languages, and/or assembly/machine languages. Programming languages include, but are not limited to, such as Java, c++, python, "C" or similar programming languages. The program code may execute entirely on the user's computing device, partly on the user's device, partly on a remote computing device, or entirely on the remote computing device or server. In the case of remote computing devices, the remote computing device may be connected to the user computing device through any kind of network, including a Local Area Network (LAN) or a Wide Area Network (WAN), or may be connected to an external computing device (e.g., connected via the Internet using an Internet service provider).
The flowcharts and block diagrams in the figures illustrate the architecture, functionality, and operation of possible implementations of systems, methods and computer program products according to various embodiments of the present disclosure. In this regard, each block in the flowchart or block diagrams may represent a module, segment, or portion of code, which comprises one or more executable instructions for implementing the specified logical function(s). It should also be noted that, in some alternative implementations, the functions noted in the block may occur out of the order noted in the figures. For example, two blocks shown in succession may, in fact, be executed substantially concurrently, or the blocks may sometimes be executed in the reverse order, depending upon the functionality involved. It will also be noted that each block of the block diagrams or flowchart illustration, and combinations of blocks in the block diagrams or flowchart illustration, can be implemented by special purpose hardware-based systems which perform the specified functions or acts, or combinations of special purpose hardware and computer instructions.
Those skilled in the art will appreciate that the features recited in the various embodiments of the disclosure and/or in the claims may be provided in a variety of combinations and/or combinations, even if such combinations or combinations are not explicitly recited in the disclosure. In particular, the features recited in the various embodiments of the present disclosure and/or the claims may be variously combined and/or combined without departing from the spirit and teachings of the present disclosure. All such combinations and/or combinations fall within the scope of the present disclosure.
The embodiments of the present disclosure are described above. However, these examples are for illustrative purposes only and are not intended to limit the scope of the present disclosure. Although the embodiments are described above separately, this does not mean that the measures in the embodiments cannot be used advantageously in combination. The scope of the disclosure is defined by the appended claims and equivalents thereof. Various alternatives and modifications can be made by those skilled in the art without departing from the scope of the disclosure, and such alternatives and modifications are intended to fall within the scope of the disclosure.

Claims (9)

1. A traffic forwarding method, comprising:
forwarding, by a first routing unit, a first session traffic originating from a first target IP address to a second routing unit according to a first routing path generated according to first configuration information, so that the second routing unit forwards the first session traffic to a second target IP address, wherein a plurality of routing paths are included between the first routing unit and the second routing unit, and each routing path includes a session holding device;
Forwarding, by the second routing unit, a second session traffic originating from the second target IP address to the first routing unit according to a second routing path generated according to second configuration information, so that the first routing unit forwards the second session traffic to the first target IP address, where the first session traffic and the second session traffic belong to the same session, and communication nodes of the first routing path and the second routing path are the same;
the first routing unit and the first target IP address belong to a first routing network segment area, and the second routing unit and the second target IP address belong to a second routing network segment area; the first configuration information includes: mapping relation between each IP address and a routing path in the first routing network segment area; the second configuration information includes: mapping relation between each IP address and routing path in the second routing network segment area;
the first configuration information is related to session characteristics of each IP address in the first routing network segment area in a preset historical time period and sensitive parameters of the session maintaining equipment; the second configuration information is related to session characteristics of each IP address in the second routing network segment area in a preset history period and sensitive parameters of the session maintaining equipment;
The sensitive parameters are used to characterize the properties of the session maintenance device that most easily reach the performance bottleneck.
2. The method according to claim 1, wherein:
the first configuration information is generated according to a routing strategy based on a source address;
the second configuration information is generated according to a destination address based routing policy.
3. The method according to claim 2, wherein:
the number of routing segments in the first routing segment area is less than the number of routing segments in the second routing segment area.
4. The method according to claim 1, wherein:
the sensitive parameters of the session maintenance device include at least one of: traffic bandwidth, number of new sessions, number of persistent sessions, number of packet forwarding.
5. The method according to claim 1, wherein:
the first configuration information further comprises a mapping relation between each IP address in the first routing network segment area and a backup routing path;
the second configuration information includes a mapping relationship between each IP address in the second routing segment area and a backup routing path.
6. The method according to claim 1, wherein:
the first routing units are provided with a plurality of routing units, and the second routing units are provided with a plurality of routing units;
Each routing path comprises a plurality of session maintaining devices.
7. A traffic forwarding device comprising:
the first forwarding module is used for forwarding the first session traffic from the first target IP address to the second routing unit through the first routing unit according to the first routing path generated according to the first configuration information so that the second routing unit forwards the first session traffic to the second target IP address, wherein a plurality of routing paths are contained between the first routing unit and the second routing unit, and each routing path contains session holding equipment;
a second forwarding module, configured to forward, by using the second routing unit, a second session traffic originating from the second target IP address to the first routing unit according to a second routing path generated according to second configuration information, so that the first routing unit forwards the second session traffic to the first target IP address, where the first session traffic and the second session traffic belong to a same session, and communication nodes of the first routing path and the second routing path are the same;
the first routing unit and the first target IP address belong to a first routing network segment area, and the second routing unit and the second target IP address belong to a second routing network segment area; the first configuration information includes: mapping relation between each IP address and a routing path in the first routing network segment area; the second configuration information includes: mapping relation between each IP address and routing path in the second routing network segment area;
The first configuration information is related to session characteristics of each IP address in the first routing network segment area in a preset historical time period and sensitive parameters of the session maintaining equipment; the second configuration information is related to session characteristics of each IP address in the second routing network segment area in a preset history period and sensitive parameters of the session maintaining equipment;
the sensitive parameters are used to characterize the properties of the session maintenance device that most easily reach the performance bottleneck.
8. An electronic device, comprising:
one or more processors;
storage means for storing one or more programs,
wherein the one or more programs, when executed by the one or more processors, cause the one or more processors to perform the method of any of claims 1-6.
9. A computer readable storage medium having stored thereon executable instructions which, when executed by a processor, cause the processor to perform the method according to any of claims 1-6.
CN202210051509.3A 2022-01-17 2022-01-17 Traffic forwarding method and device, electronic equipment and computer readable storage medium Active CN114401216B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202210051509.3A CN114401216B (en) 2022-01-17 2022-01-17 Traffic forwarding method and device, electronic equipment and computer readable storage medium

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202210051509.3A CN114401216B (en) 2022-01-17 2022-01-17 Traffic forwarding method and device, electronic equipment and computer readable storage medium

Publications (2)

Publication Number Publication Date
CN114401216A CN114401216A (en) 2022-04-26
CN114401216B true CN114401216B (en) 2024-01-30

Family

ID=81230520

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202210051509.3A Active CN114401216B (en) 2022-01-17 2022-01-17 Traffic forwarding method and device, electronic equipment and computer readable storage medium

Country Status (1)

Country Link
CN (1) CN114401216B (en)

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104335540A (en) * 2012-03-30 2015-02-04 英国电讯有限公司 Method for selecting a communication link
CN106559324A (en) * 2015-09-24 2017-04-05 华为技术有限公司 A kind of method E-Packeted based on equal cost multipath and the network equipment
CN113259162A (en) * 2021-05-08 2021-08-13 中国工商银行股份有限公司 Network fault determination method and device, electronic equipment and storage medium
CN113454669A (en) * 2019-02-21 2021-09-28 微软技术许可有限责任公司 Characterizing a place by user visited features
CN113783910A (en) * 2020-06-09 2021-12-10 阿里巴巴集团控股有限公司 Data forwarding method, device and system

Family Cites Families (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US10091099B2 (en) * 2016-05-31 2018-10-02 128 Technology, Inc. Session continuity in the presence of network address translation

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104335540A (en) * 2012-03-30 2015-02-04 英国电讯有限公司 Method for selecting a communication link
CN106559324A (en) * 2015-09-24 2017-04-05 华为技术有限公司 A kind of method E-Packeted based on equal cost multipath and the network equipment
CN113454669A (en) * 2019-02-21 2021-09-28 微软技术许可有限责任公司 Characterizing a place by user visited features
CN113783910A (en) * 2020-06-09 2021-12-10 阿里巴巴集团控股有限公司 Data forwarding method, device and system
CN113259162A (en) * 2021-05-08 2021-08-13 中国工商银行股份有限公司 Network fault determination method and device, electronic equipment and storage medium

Also Published As

Publication number Publication date
CN114401216A (en) 2022-04-26

Similar Documents

Publication Publication Date Title
US20230179474A1 (en) Service insertion at logical network gateway
US10944673B2 (en) Redirection of data messages at logical network gateway
US10560386B2 (en) Programmable packet processor (PPP) based adaptive network function chaining
US20180302343A1 (en) System and method for convergence of software defined network (sdn) and network function virtualization (nfv)
US20200220811A1 (en) Asymmetric routing minimization
US10574595B2 (en) System and method for elastic scaling of virtualized network functions over a software defined network
WO2020046686A1 (en) Service insertion at logical network gateway
US8327002B1 (en) BGP peer prioritization in networks
US9369408B1 (en) High performance and resilience in wide area networking
US9584415B2 (en) Devices, systems and methods for service chains
CN109565471A (en) High performance intelligent adaptive transport layer is proposed using multichannel
US11283683B2 (en) Network modification impact prediction
US8547874B2 (en) Method and system for learning network information
Lin et al. WE-bridge: West-east bridge for SDN inter-domain network peering
US20200304565A1 (en) Apparatus and method for subscription-based resource throttling in a cloud environment
US11115319B2 (en) Using BFD packets in a network tunnel environment
US9197545B2 (en) Highly scalable modular system with high reliability and low latency
JP2016167708A (en) Information processing system, switch device and method of controlling information processing system
CN112564983B (en) Data transmission method, device, computer system and medium
CN114401216B (en) Traffic forwarding method and device, electronic equipment and computer readable storage medium
Vanamoorthy et al. A hybrid approach for providing improved link connectivity in SDN.
Wion et al. Let there be Chaining: How to Augment your IGP to Chain your Services
Wu et al. Middlebox resources management using openflow
KR101538667B1 (en) Network system and method for controlling network
KR20190048324A (en) Method for providing service based on multi network and apparatus therefor

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant