CN117527667A - Service function chain processing method and device - Google Patents

Abstract

The application provides a processing method and a device of a service function chain, wherein the processing method of the service function chain is applied to a service function transponder SFF node, and the processing method of the service function chain comprises the following steps: receiving a first message, wherein the first message comprises identification information and a first service message, and the identification information is used for identifying the service attribute of the first service message; updating the first service message according to the identification information to obtain a second service message, wherein the second service message comprises the identification information; and sending a second service message to the service function SF node, and associating the identification information with the service message by adding the identification information to the service message sent to the SF node.

Description

Service function chain processing method and device

Technical Field

The present invention relates to the field of communications technologies, and in particular, to a method and an apparatus for processing a service function chain.

Background

The service function forwarding (service function forward, SFF) node is a service chain forwarding node, configured to forward a packet received in the network to at least one Service Function (SF) node associated with the SFF node. The SF node may refer to a firewall (firewalls) and a network address translator (Network Address Translators, NATs), and the message is processed by the SF node and then returned to the SFF node.

Many SF nodes in the past do not support protocols such as segment routing (Segment Routing IPv, SRv 6) based on the IPv6 forwarding plane, so in the process of forwarding a SRv message to an SF node, the SFF node strips parameters such as a segment routing header (Segment Routing Header, SRH) from a SRv message by implementing the function of an SR proxy (SR proxy), obtains a message that does not include parameters such as SRH, sends the message that does not include parameters such as SRH to the SF node, processes the received message that does not include parameters such as SRH, and returns the processed message to the SFF node.

By the above process, the message sent by the SFF node to the SF node and the message returned by the SF node to the SFF node are only service messages, in order to correlate the service messages with corresponding service information (for example, slice information), the mapping relationship between the stripped message and the service information is often configured locally by the SFF node in the prior art, but the configuration resource of the SFF node is wasted by establishing the mapping relationship, and the cost for the SFF node is high.

Disclosure of Invention

In view of the foregoing, it is necessary to provide a method and an apparatus for processing a service function chain, where an SFF node adds service attribute information related to a service packet to a corresponding service packet, so as to associate the service packet with the service attribute information corresponding to the service packet in a transmission process between the SFF node and the SF node.

In a first aspect, an embodiment of the present application provides a method for processing a service function chain, which is applied to a service function forwarder SFF node, where the method for processing a service function chain includes: receiving a first message, wherein the first message comprises identification information and a first service message, and the identification information is used for identifying the service attribute of the first service message; updating the first service message according to the identification information to obtain a second service message, wherein the second service message comprises the identification information; and sending a second service message to the service function SF node.

After receiving the message, the SFF node adds the identification information in the message into the first service message so as to establish association between the identification information and the first service message, and further, the SFF node associates the service message sent by the SFF node to the SF node with the service message sent by the SFF node to the SF node through the identification information in the first service message. The association relation does not need to configure a mapping relation table in the SFF node, and the loss cost on the SFF node is small.

In a possible implementation manner of the first aspect, the identification information is slice information, which is used to identify a network slice to which the first service packet belongs.

By adopting the technical scheme, the SFF node establishes association between the slice information and the corresponding service message by adding the slice information into the service message sent to the SF node, and the SFF node can stream the service message to the corresponding network slice after receiving the service message comprising the slice information.

In a possible implementation of the first aspect, the identification information is IFIT information detected with a flow.

By adopting the technical scheme, the SFF node establishes the association between the IFIT information and the corresponding service message by adding the IFIT information into the service message sent to the SF node, so that the SFF node detects the flow corresponding to the IFIT information by acquiring the transmission flow of the service message corresponding to the IFIT information sent to the SF node and the transmission flow of the service message corresponding to the IFIT information sent to the SF node.

In a possible implementation manner of the first aspect, the method for processing a service function chain further includes: receiving a processed second service message sent by an SF node; stripping the identification information in the processed second service message to obtain a third service message; packaging the third service message to obtain a second message, wherein the message heads of the first message and the second message are the same; and forwarding the second message to the next hop of the SFF node.

By adopting the technical scheme, after receiving the second service message processed by the SF node, the SFF node removes the identification information in the second service message to obtain a third service message, encapsulates the third service message, and sends the encapsulated second message to the node corresponding to the next hop. And because the message heads of the first message and the second message are the same, the first message and the second message are the same type of message, for example, the first message and the second message may be SRv6 messages.

In a possible implementation manner of the first aspect, the updating the first service packet according to the identification information, to obtain a second service packet includes: and obtaining a second service message according to the first extended message header of the first service message Wen Tianjia, wherein the first extended message header carries the identification information.

By adopting the technical scheme, the SFF node adds the identification information to the first service message by adding the extension message header carrying the identification information to the first service message, namely, adds the identification information to the first service message by adding the extension message header to the service message. The newly added extension message may be determined according to the type of the service message, for example, may be an HBH extension message header or a DOH extension message header.

In a possible implementation manner of the first aspect, the first packet further includes a second extended packet header, where the second extended packet header carries the identification information.

By adopting the technical scheme, the first message carries the second extension message header, and the SFF node can obtain the corresponding identification information by analyzing the second extension message header in the first message.

Further, the first extension header may be the same type of extension header, or may be different types of extension header.

In a possible implementation manner of the first aspect, the first service packet includes a third extension packet header, and updating the first service packet according to the identification information to obtain a second service packet includes: and updating a third extension message header of the first service message according to the identification information to obtain a second service message.

By adopting the technical scheme, the original extension message header in the first service message is extended to add the identification information into the extension message header of the corresponding service message, for example, the option field of the original extension message header is extended, namely, the identification information is added into the option field of the extension message header.

In a possible implementation manner of the first aspect, the updating the first service packet according to the identification information, to obtain a second service packet includes: converting the first service message to obtain a transition service message; and updating the transition service message according to the identification information to obtain a second service message.

By adopting the technical scheme, the service message which can not carry the identification information can be converted into the service message which can carry the identification information, so that the identification information is added into the service message by converting the format of the service message and expanding the converted service message. For example, the first service packet is an IPv4 packet, and the SFF node may convert the IPv4 packet into an IPv6 packet, and add the identification information to the corresponding extension packet header by adding the extension packet header to the IPv6 packet.

In a possible implementation manner of the first aspect, the first packet is a segment routing SRv6 packet based on internet protocol version 6, and the SRv packet includes a segment routing extension header SRH.

By adopting the technical scheme, in the service function chain SFC, the SF node does not support SRv6, namely (SRv 6-unaware) equipment which does not sense SRv6, and the SF node cannot identify the SRH in the SRv message, so that the SFF node sends the message, such as the IPv6 message or the IPv4 message, after stripping the SRH to the SF node so as to ensure that the message is normally processed by the SF node.

In a second aspect, a method for processing a service function chain is provided, which is applied to a service function repeater SFF node, and the method for processing the service function chain includes: receiving a first service message; acquiring identification information according to the first service message, wherein the identification information is used for identifying the service attribute of the first service message; updating the first service message according to the identification information to obtain a second service message, wherein the second service message comprises the identification information; and sending the second service message to the service function SF node.

In a possible implementation manner of the second aspect, the identification information is slice information, where the slice information is used to identify a network slice to which the first service packet belongs.

In a possible implementation of the second aspect, the identification information is IFIT information detected with a flow.

In a possible implementation manner of the second aspect, the method for processing a service function chain further includes: receiving a processed second service message sent by the SF node; stripping the identification information in the processed second service message to obtain a third service message; encapsulating the third service message to obtain a first message; and forwarding the first message to the next hop of the SFF node.

In some embodiments, the first message is a segment routing SRv message based on internet protocol version 6, and the SRv message includes a segment routing extension header SRH.

In a possible implementation manner of the second aspect, the updating the first service packet according to the identification information, to obtain a second service packet includes: and obtaining the second service message according to the identification information as a first extension message header of the first service message Wen Tianjia, wherein the first extension message header carries the identification information.

In one possible implementation manner of the second aspect, the first service packet includes a second extension packet header, and updating the first service packet according to the identification information, to obtain a second service packet includes: and updating the second extension message header of the first service message according to the identification information to obtain the second service message.

In a possible implementation manner of the second aspect, the updating the first service packet according to the identification information, to obtain a second service packet includes: converting the first service message to obtain a transition service message; and updating the transition service message according to the identification information to obtain a second service message.

In a third aspect, there is provided a processing apparatus for a service function chain, the processing apparatus for a service function chain including: the receiving module is used for receiving a first message, wherein the first message comprises identification information and a first service message, and the identification information is used for identifying the service attribute of the first service message; the processing module is used for updating the first service message according to the identification information to obtain a second service message, wherein the second service message comprises the identification information; and the sending module is used for sending the second service message to the service function SF node.

In a possible implementation manner of the third aspect, the identification information is slice information, which is used to identify a network slice to which the first service packet belongs.

In a possible implementation of the third aspect, the identification information is IFIT information detected with a flow.

In a possible implementation manner of the third aspect, the receiving module is further configured to receive a processed second service packet sent by the SF node; the processing module is further used for stripping the identification information in the processed second service message to obtain a third service message; encapsulating the third service message to obtain a second message, wherein the message header of the first message is the same as that of the second message; the sending module is further configured to forward the second packet to a next hop of the SFF node.

In a possible implementation manner of the third aspect, the processing module is further configured to obtain the second service packet according to the identification information as a first extension packet header of the first service packet Wen Tianjia, where the first extension packet header carries the identification information.

In a possible implementation manner of the third aspect, the first packet further includes a second extended packet header, where the second extended packet header carries the identification information.

In a possible implementation manner of the third aspect, the first service packet includes a third extension packet header, and the processing module is further configured to update the third extension packet header of the first service packet according to the identification information, so as to obtain the second service packet.

In a possible implementation manner of the third aspect, the processing module is further configured to convert the first service packet to obtain a transitional service packet; and updating the transition service message according to the identification information to obtain a second service message.

In a fourth aspect, there is provided a processing apparatus for a service function chain, the processing apparatus for a service function chain including: the receiving module is used for receiving the first service message; the processing module is used for acquiring identification information according to the first service message, wherein the identification information is used for identifying the service attribute of the first service message; updating the first service message according to the identification information to obtain a second service message, wherein the second service message comprises the identification information; and the sending module is used for sending the second service message to the service function SF node.

In a possible implementation manner of the fourth aspect, the identification information is slice information, where the slice information is used to identify a network slice to which the first service packet belongs.

In a possible implementation of the fourth aspect, the identification information is IFIT information detected with a flow.

In a possible implementation manner of the fourth aspect, the receiving module is further configured to receive a processed second service packet sent by the SF node; the processing module is further used for stripping the identification information in the processed second service message to obtain a third service message; encapsulating the third service message to obtain a first message; the sending module is further configured to forward the first packet to a next hop of the SFF node.

In a possible implementation manner of the fourth aspect, the processing module is further configured to obtain the second service packet according to the identification information as a first extension packet header of the first service packet Wen Tianjia, where the first extension packet header carries the identification information.

In a possible implementation manner of the fourth aspect, the first service packet includes a second extension packet header, and the processing module is further configured to: and updating the second extension message header of the first service message according to the identification information to obtain the second service message.

In a possible implementation of the fourth aspect, the processing module is further configured to: converting the first service message to obtain a transition service message; and updating the transition service message according to the identification information to obtain a second service message.

In a fifth aspect, embodiments of the present application provide a service function forwarder node, including: one or more processors; a storage means for storing one or more programs; when the one or at least one program is executed by the one or more processors, the one or more processors are caused to implement the method of handling a traffic function chain according to any of the first aspects.

In a sixth aspect, an embodiment of the present application provides a computer readable storage medium, on which a computer program is stored, where the program when executed by a processor implements a method for processing a service function chain according to any one of the first aspects.

It should be appreciated that the technical effects of any one of the designs of the second aspect to the sixth aspect may refer to the advantages of the corresponding methods provided above, and are not described here again.

Drawings

Fig. 1 is a schematic diagram of an application environment of a service function forwarder node.

Fig. 2 is a schematic diagram of the processing of a message by the SFF node and the SF node shown in fig. 1.

Fig. 3 is a flow chart of a processing method of a service function chain according to an embodiment of the present application.

Fig. 4 is a schematic diagram of processing a message by an SFF node and an SF node according to an embodiment of the present application.

Fig. 5 is a schematic diagram of another SFF node and a processing of a message by the SF node according to an embodiment of the present application.

Fig. 6 is a schematic diagram of processing a message by another SFF node and an SF node according to an embodiment of the present application.

Fig. 7 is a flow chart of another processing method of a service function chain according to an embodiment of the present application.

Fig. 8 is a schematic diagram of processing a message by another SFF node and an SF node according to an embodiment of the present application.

Fig. 9 is a schematic diagram of processing a message by an SFF node and an SF node according to an embodiment of the present application.

Fig. 10 is a flow chart of a processing method of another service function chain according to an embodiment of the present application.

Fig. 11 is a schematic view of an application environment of another service function repeater node according to an embodiment of the present application.

Fig. 12 is a schematic block diagram of a processing apparatus of a service function chain according to an embodiment of the present application.

Fig. 13 is a schematic block diagram of another processing apparatus for a service function chain according to an embodiment of the present application.

Fig. 14 is a hardware schematic diagram of a service function repeater node according to an embodiment of the present application.

Detailed Description

First, technical terms related to embodiments of the present application are described:

1. flow detection (in-situ flow information telemetry, IFIT)

The IFIT technology is an important transmission quality detection technology, and the detection principle is as follows: and inserting an IFIT extension head into the service message, and detecting the transmission quality of the service flow according to the IFIT extension head in the service message. Wherein the transmission quality is e.g. packet loss or transmission delay.

2. MPLS-based Segment Routing (Segment Routing-Multiprotocol Label Switching, SR-MPLS)

SR-MPLS is to cut the message forwarding path into different segments, assign segment identifiers (Segment Identifier, SID) to the segments, and then guide the message forwarding by encapsulating segment information in the message at the starting point of the path.

For easy understanding, the following describes the technical solutions in the embodiments of the present application with reference to the drawings.

First, an application environment schematic of a service function forwarder SFF node is described with reference to fig. 1.

As shown in fig. 1, a campus network (e.g., government network) sends a message to an SFF node through a Provider Edge (PE) device. After receiving the message, if the SFF node determines that the SF node (e.g. firewall) does not support the analysis of the message, the SFF node strips the message and sends the stripped message to the SF node, for example, the message received by the SFF node is SRv message, SRv message includes an IPv6 header, an SRH extension message header and a service message, and the service message may be, for example, an IPv6 message or an IPv4 message, where the SFF node may adopt the following processing manner: in the mode 1, an SFF node strips an IPv6 header and an SRH extension header in a SRv message to obtain a service message, and sends the service message to the SF node; in mode 2, the sff node strips the SRH extension header (only removes the SRH), obtains a processed message (the processed message is an IPv6 message after SRv message strips the SRH extension header), and sends the processed message to the SF. The SF node receives the message after the stripping treatment, processes the message after the stripping treatment, and sends the processed message to the SFF node. The SFF node receives the processed message, correlates the stripped SRH extension header with the message processed by the SF node to form a new message, and sends the new message to the destination node (e.g., the SFF node corresponding to the next hop of the SFF node in fig. 1).

Taking fig. 2 as an example, fig. 2 is a schematic diagram illustrating processing of a message by the SFF node and the SF node shown in fig. 1. The input SFF node represents a message received by the SFF node, the output SFF node represents a message sent by the SFF node, the input SF node represents a message received by the SF node, and the output SF node represents a message sent by the SF node.

As shown in fig. 2, the packet received by the SFF node is a SRv packet. SRv6 the message includes SRH extended header (SRH), hop-by-Hop options (HBH) extended header (HBH), IPv6 header (IPv 6 Head), ETH, payload. Since in the service function chain SFC, the SF node does not support SRv, i.e. does not sense the (SRv 6-unaware) device of SRv6, the SF node cannot identify the SRH in the SRv6 packet, so the SFF node sends a packet after stripping the SRH, such as an IPv6 packet or an IPv4 packet, to the SF node to ensure that the packet is normally processed by the SF node, as shown in fig. 2, after the SFF node receives the SRv packet, the SFF node strips the SRH extension header, the HBH extension header, and the IPv6 header in the SRv packet to obtain an IPv6 packet, and sends the IPv6 packet to the SF node. I.e. the SF node receives an IPv6 message including a Pv6 header (IPv 6 Head), an ETH, a Payload. After receiving the IPv6 message, the SF node processes the IPv6 message, and the SF node sends the processed message to the SFF node. After receiving the message processed by the SF node, the SFF node adds the stripped SRH extension message header, the stripped HBH extension message header and the stripped IPv6 message header to the message processed by the SF node (namely, encapsulates the message processed by the SF node) to obtain a new SRv message, and the SFF node sends the new SRV6 message to another SFF node of another hop.

The HBH extension header in the SRv message received by the SFF node in fig. 2 includes a slice identifier (SliceID), where the slice identifier is used to identify the network slice to which the IPv6 message belongs. After receiving the message processed by the SF node, the SFF node often needs to locally configure a mapping relation between the slice identifier and the IPv6 message in order to establish the association between the message processed by the SF node and the slice identifier, and the SFF node locally configures the mapping relation and occupies hardware resources of the SFF node because the IPv6 message carried by the SRv message received by the SFF node belongs to a plurality of different network slices.

In view of the above problems, the present application provides a method for processing a service function chain, when an SFF node receives a message, updates a service message in the message according to identification information in the message, and sends the updated service message to the SF node. By adding the identification information into the service message sent to the SF node to establish the association between the identification information and the service message, the processing method does not need to add the configuration of the mapping relation to the SFF node, and has small loss to the SFF node.

Fig. 3 is a schematic flow chart of a processing method of a service function chain according to an embodiment of the present application. The processing method of the service function chain can be applied to the SFF node of the service function transponder. The following describes in detail an example in which the processing method of the service function chain is applied to the SFF node in fig. 1.

S301, receiving a first message, wherein the first message comprises identification information and a first service message.

The identification information is used for identifying the service attribute of the first service message. It may be understood that in the embodiment of the present application, the identification information is slice information, where the slice information is used to identify a network slice to which the first service packet belongs. Where network slicing refers to providing multiple logical networks (slices) on the same shared network infrastructure, each serving a particular business type or industry user. Of course, in the embodiment of the present application, the Slice information may be any one of Slice identification Slice ID, segment identification list (SID list), flexible algorithm identification (Flex-Algo ID). Wherein the affinity-based network slice identifies the network slice using SRv SID, SID list is used to explicitly indicate the forwarding path of the message and a set of reserved forwarding resources on the path in SRv network. The Flex-Algo ID is used to identify flexible algorithms that can autonomously create individual topologies and compute paths in IGPs.

For example, referring to fig. 4, in the message processing schematic diagram provided in the embodiment of the present application in fig. 4, the SFF node receives a first message, which is a SRv message, and the first service message is an IPv6 message, and the identification information is a Slice identifier Slice ID, which is used to identify a network Slice to which the first service message belongs. In fig. 4, the HBH extension header of the SRv packet carries a Slice ID, and the Slice ID specifies through which Slice the first service packet is carried, i.e. which network Slice the first service packet is located.

It will be appreciated that In other embodiments, the identification information is In-situ Flow Information Telemetry, IFIT information. The IFIT information is used for identifying a service flow corresponding to the first service message, and the SFF node associates the service flow with the first service message by adding the IFIT information into the first service message.

S302, updating the first service message according to the identification information to obtain a second service message, wherein the second service message comprises the identification information.

Specifically, the identification information is added to the first service message, and the first service message containing the identification information is the second service message.

Referring to fig. 4 again, the srv6 packet carries an HBH extension packet header, the HBH extension packet header carries a Slice ID, and the SFF node strips the HBH extension packet header, the SRH extension packet header, and the IPv6 packet header in the SRv packet to obtain a first service packet (i.e., an IPv6 packet). And then, the SFF node updates the first service message according to the identification information, for example, adds an HBH (heterojunction with high-definition) extension message header to the first service message and carries an HBH extension message header Slice ID (identity), so as to obtain a second service message. That is, by adding a new extension header to the first service packet, where the extension header carries identification information, the identification information is added to the first service packet, so as to establish an association between the identification information and the first service packet.

S303, sending a second service message to the SF node.

Specifically, the SFF node sends a second service message carrying the identification information to the SF node.

It can be understood that in the embodiment of the present application, the SFF node obtains the second service packet by adding the identification information related to the service attribute corresponding to the first service packet, and by adding the identification information to the first service packet, so as to establish an association relationship between the identification information in the first service packet and the first service packet, and the processing method does not need to configure a mapping relationship between the identification information and the first service packet at the SFF node, so that resource loss of the SFF node is reduced.

It can be appreciated that referring again to fig. 3, in the embodiment of the present application, S302 may include the following steps:

and updating the first service message according to the first expansion message header of the first service message Wen Tianjia serving as the identification information to further obtain a second service message, wherein the first expansion message header carries the identification information.

Specifically, the SFF node forms a first extension message header of the first service message according to the identification information, and the first extension message header carries the identification information.

It is understood that the first extension header may be a destination option extension header (Destination Options Header, DOH) extension header, HBH extension header, etc.

It will be appreciated that in some embodiments, the first message further includes a second extended message header, the second extended message header carrying the identification information. Thus, the SFF node can acquire the identification information by analyzing the second extension message header. Correspondingly, in S302, the SFF node updates the first service packet according to the identification information, to obtain a second service packet, where the second service packet includes the identification information.

It is understood that the first extension header and the second extension header may be the same type of extension header. As shown in fig. 4, the first extended header and the second extended header are HBH extended headers. Of course, in other embodiments, the first extension header and the second extension header may be different types of extension headers, for example, the first extension header is a DOH extension header, and the second extension header is an HBH extension header.

It will be appreciated that in other embodiments, where the first service packet includes a third extension header, the SFF node may add the identification information to the third extension header by extending the third extension header of the first service packet, e.g., where the third extension header includes an options field, the identification information may be added to the options field. Correspondingly, S302 may include:

And updating a third extension message header of the first service message according to the identification information to obtain a second service message.

For example, referring to fig. 5, the SFF node receives a first packet which is a SRv packet, where the first service packet is an IPv6 packet, and the IPv6 packet includes a third extension header, i.e., an HBH extension header, and updates the HBH extension header according to the identification information (e.g., sliceID), i.e., adds the identification information to the HBH extension header, to obtain the second service packet.

It may be appreciated that in the above embodiment, the second service packet carries the identification information, and the identification information is located in the extension header of the second service packet. Of course, in other embodiments, if the first service packet in the first packet does not support the addition or expansion of the extension packet header, the SFF node may first perform format conversion on the first service packet, convert the first service packet into a transition service packet, and the transition service packet may perform the addition or expansion of the extension packet header, and update the transition service packet according to the identification information to obtain the second service packet. Specifically, in this scenario, S302 may include:

converting the first service message to obtain a transition service message;

And updating the transition service message according to the identification information to obtain a second service message.

For example, referring to fig. 6, the sff node receives a first packet which is a SRv packet, the first service packet is an IPv4 packet, and the SRv packet further includes an extension header, i.e., a DOH extension header, where the DOH extension header carries identification information (as shown in fig. 6, IFIT information). Since the IPv4 message does not support adding an extension message header, the SFF node converts the IPv4 message of the first service message of the SRv message into an IPv6 message, and adds a DOH extension message header in the IPv6 message, where the DOH extension message header carries identification information.

Further, after receiving the second service message sent by the SFF node, the SF node processes the second service message (for example, parses the second service message and obtains the number of the second service messages), and sends the processed second service message to the SFF node, after receiving the second service message processed by the SF node, the SFF node firstly strips the second service message to strip an extension message header in the second service message, and converts the stripped second service message into a third service message.

For example, referring to fig. 6, the sff node receives a post-IPv 6 message processed by the SF node, strips the DOH extension header in the IPv6 message, and converts the stripped IPv6 message into an IPv4 message.

It may be appreciated that in some embodiments, when the identification information is slice information, the SFF node may obtain the second service packet by adding the slice information to the first service packet sent to the SF node, so as to establish an association relationship between the transmitted service packet between the SFF node and the SF node and a corresponding network slice, and after the SFF node receives the processed second service packet sent by the SF node, the SFF node may forward the service packet to the corresponding network slice according to the association relationship between the second service packet and the network slice, so as to implement drainage of the service packet.

In other embodiments, when the identification information is IFIT information, the SFF node associates the traffic flow with the first traffic message by adding the IFIT information to the first traffic message. In this way, before the SFF node sends the updated first service message to the SF node, the SFF node obtains the first transmission flow of the first service message associated with the service flow, after the SF node processes the second service message, sends the processed second service message to the SFF node, after the SFF node receives the second service message processed by the SF node, the SFF node establishes an association with the processed second service message through the IFIT information in the second service message processed by the SF node, and obtains the second transmission flow of the second service message associated with the IFIT information received by the SFF node, and the SFF node can implement flow detection of the service flow through the first transmission flow and the second transmission flow.

In some embodiments, SF nodes (e.g. firewalls) follow standards such as RFC8200, and the identification information added in the service message is subjected to transparent transmission processing. For example, by adding an extension message header in the service message, the extension message header carries identification information, and the SF node performs transparent transmission processing on the extension message.

In some embodiments, after receiving the processed second service packet sent by the SF node, the SFF node strips the identification information (e.g. deletes the extended header containing the identification information) in the second service packet, to obtain the third service packet.

The third service message and the first service message are the same service message, that is, the SF node only performs transparent transmission processing on the second service message, and of course, in other embodiments, the third service message and the first service message are different service messages, that is, after the SF processes the second service message, the field in the second service message changes, for example, the count field of the second service message becomes larger.

Specifically, referring to fig. 7, the method for processing a service function chain further includes:

s701, receiving the processed second service message sent by the SF node.

In some embodiments, the SF node performs transparent transmission processing on the identification information in the second service packet.

S702, stripping the identification information in the processed second service message to obtain a third service message.

Specifically, the SFF node receives a second service message processed by the SF node and sent by the SF node, and the SFF node removes the identification information in the second service message processed by the SF node to obtain a third service message.

S703, packaging the third service message to obtain a second message.

The message header of the first message is the same as that of the second message.

Specifically, the SFF node receives the second service message processed by the SF node, firstly peels off the identification information in the second service message processed by the SF node, and then encapsulates the third service message according to the transmission bearing protocol of the SFF node for transmitting the second service message.

For example, please refer to fig. 4 or fig. 5 again, the second service message processed by the SF node is an IPv6 message, the IPv6 message carries an extended message header, for example, the HBH extended message header in fig. 4 or fig. 5, and the HBH extended message header carries identification information (slice ID), after receiving the IPv6 message processed by the SF node, the SFF node strips the HBH extended message header in the IPv6 message, and encapsulates the stripped IPv6 message by adopting SRv protocol, so as to obtain SRv message (i.e. the second message).

The second message in fig. 4 and fig. 5 further includes an HBH extension header, where the HBH extension header carries identification information.

Referring to fig. 4 and fig. 5, the first packet and the second packet are SRv packets, and in other embodiments, the transport bearer protocol for the SFF node to transmit the service packet may also be SR-MPLS packets.

In this embodiment of the present application, after receiving the second service packet sent by the SFF node, the SF node further sends the processed second service packet to the same SFF node, where the SFF node receives the first packet and uses the same transport bearer protocol as the second packet sent by the next hop node, so that the second packet obtained after packaging the third service packet is the same as the header of the first packet.

S704, forwarding the second message to the next hop of the SFF node.

The next hop may be another SFF node, and of course, the next hop may be another device, such as a backbone device P node.

After receiving the processed service message sent by the SF node, the SFF node firstly strips the identification information in the service message, encapsulates the stripped service message to obtain a second message, and then forwards the second message to the node corresponding to the next hop.

It will be appreciated that, as described above, the above embodiments are described by taking the first message as SRv message as an example. Of course, in other embodiments, the first packet received by the SFF node may also be an SR-MPLS packet.

It can be understood that when the first packet is an SR-MPLS packet, the corresponding processing method of the service function chain is similar to the processing method of the service function chain when the first packet is a SRv packet. For example, as shown in fig. 8, the SR-MPLS packet received by the SFF node carries an MPLS extension header, where the MPLS extension header includes a special MPLS label, indicating that the label is a special function label, and the MPLS extension header also carries a service structure, and the structure includes a SliceID. The SFF node analyzes the MPLS extension header to obtain identification information (SliceID), generates an extension header of a first service message of the first message according to the identification information, namely, forms an HBH extension header of the IPv6 message, the HBH extension header carries the identification information to obtain a second service message, after the SF node processes the second service message, the processed second service message is sent to the SFF node, after the SFF node receives the second service message processed by the SF node, the identification information in the second service message is stripped, namely, the HBH extension header in the IPv6 message is removed, and then the stripped second service message is packaged according to the identification information, namely, the SFF node encapsulates the stripped second service message by adopting an SR-MPLS protocol to obtain a second message, namely, a new SR-MPLS message, and the SFF node sends the new SR-MPLS message to the next hop node.

In the embodiments shown in fig. 2, fig. 4, fig. 6, and fig. 8, the first packet received by the SFF node is an encapsulated service packet, and it can be understood that, in other embodiments, the packet received by the SFF node is a service packet, for example, an IPv6 packet. Thus, after receiving the service message, the SFF node can acquire the identification information corresponding to the service message according to the service message, update the service message according to the identification information, and send the updated service message to the SF node so as to establish the association between the identification information and the service message.

Referring to fig. 9, fig. 9 is a schematic diagram of a message processing provided in an embodiment of the present application, in fig. 9, a service message received by an SFF is an IPv6 message, an SFF node obtains identification information (for example, IFIT information) corresponding to the IPv6 message, adds the identification information to a DOH extension header newly added to the IPv6 message, and then sends the updated IPv6 message to the SF node.

Fig. 10 is a schematic flow chart of another processing method of a service function chain according to an embodiment of the present application. The processing method of the service function chain can be applied to SFF nodes. The processing method of the service function chain comprises the following steps:

s1001, receiving a first service message.

S1002, acquiring identification information according to a first service message, wherein the identification information is used for identifying service attributes of the first service message.

Specifically, after receiving the first service message, the SFF node obtains corresponding identification information according to the first service message.

In an embodiment, a mapping relation table between the service message and the identification information is configured at the SFF node, and after the SFF node receives the service message, the SFF node may determine the identification information corresponding to the service message according to the mapping relation table and the service message.

S1003, updating the first service message according to the identification information to obtain a second service message.

Wherein the second service message includes identification information.

Specifically, the SFF node adds the identification information to the first service message to obtain the second service message.

S1004, sending a second service message to the service function SF node.

Thus, after receiving the service message, the SFF node acquires the corresponding identification information according to the service message, and updates the service message according to the identification information so as to establish an association relationship between the service message and the identification information, and when the subsequent node receives the service message carrying the identification information, the association relationship can be established between the service message and the identification information in the service message.

In some embodiments, the identification information is slice information, and the slice information is used to identify a network slice to which the first service packet belongs.

In some embodiments, the identification information is detection-with-flow IFIT information.

In some embodiments, the processing method of the service function chain shown in fig. 10 further includes:

receiving a processed second service message sent by an SF node;

stripping the identification information in the processed second service message to obtain a third service message;

packaging the third service message to obtain a first message;

and forwarding the first message to the next hop of the second SFF node.

In some embodiments, updating the first service packet according to the identification information in step 1003, to obtain a second service packet includes:

and obtaining a second service message according to the first extended message header of the first service message Wen Tianjia, wherein the first extended message header carries the identification information.

In some embodiments, the first service message includes a second extension message header, updating the first service message according to the identification information, and obtaining the second service message includes:

and updating the second extension message header of the first service message according to the identification information to obtain the second service message.

In some embodiments, the updating the first service packet according to the identification information, to obtain a second service packet includes:

converting the first service message to obtain a transition service message;

and updating the transition service message according to the identification information to obtain a second service message.

In the embodiments shown in fig. 1 to 10, the SFF node sends a service packet to the SF node, and after the SF node processes the service packet, the SF node sends the processed service packet to the same SFF node. It will be appreciated that in other embodiments, the SFF node that sends the service message to the SF node and the SFF node that receives the processed service message sent by the SF node are not the same SFF node. For example, referring to fig. 11, a first SFF node sends a service packet to an SF node, after the SF node processes the service packet, the SF node sends a processed service packet Wen Xiangdi to two SFF nodes, where the first SFF node and the second SFF node are two different nodes.

It can be understood that, as shown in fig. 11, the first SFF node and the second SFF node form a primary-standby SFF node combination, when the SFF node sends the processed service packet to the SFF node combination, the SFF node combination is taken as a whole, and the SFF node with the smallest load in the SFF node combination is selected as the destination SFF node, and the processed service packet is sent to the destination SFF node in the SFF node combination.

Referring to fig. 12, fig. 12 is a schematic diagram showing a possible configuration of a processing apparatus for a service function chain according to the foregoing embodiment, and the processing apparatus 1000 for a service function chain may implement the function of the SFF node in the embodiment shown in fig. 1 or the function of the first SFF node in fig. 11. Referring to fig. 12, the processing apparatus 1000 of the service function chain includes: a receiving module 1010, a processing module 1020, and a transmitting module 1030. These modules may perform the corresponding functions of the SFF node in the example methods of fig. 3 and 7 described above. For example:

the receiving module 1010 is configured to receive a first packet, where the first packet includes identification information and a first service packet, and the identification information is used to identify a service attribute of the first service packet;

the processing module 1020 is configured to update the first service packet according to the identification information, to obtain a second service packet, where the second service packet includes the identification information;

the sending module 1030 is configured to send a second service packet to the service function SF node.

In some embodiments, the identification information is slice information, which is used to identify a network slice to which the first service packet belongs.

In some embodiments, the identification information is detection-with-flow IFIT information.

In some embodiments, the receiving module 1010 is further configured to receive a processed second service packet sent by the SF node; the processing module 1020 is further configured to strip the identification information in the processed second service packet to obtain a third service packet; packaging the third service message to obtain a second message, wherein the message heads of the first message and the second message are the same; the sending module 1030 is further configured to forward the second packet to a next hop of the SFF node.

In some embodiments, the processing module 1020 is further configured to obtain a second service packet according to the identification information as a first extension header of the first service packet Wen Tianjia, where the first extension header carries the identification information.

In some embodiments, the first message further includes a second extended message header, the second extended message header carrying the identification information.

In some embodiments, the first service packet includes a third extension packet header, and the processing module 1020 is further configured to update the third extension packet header of the first service packet according to the identification information to obtain the second service packet.

In some embodiments, the processing module 1020 is further configured to convert the first service packet to obtain a transitional service packet; and updating the transition service message according to the identification information to obtain a second service message.

Referring to fig. 13, fig. 13 is a schematic diagram showing a possible configuration of a processing apparatus for a service function chain according to the foregoing embodiment, and a processing apparatus 1100 for a service function chain may implement the function of an SFF node in the embodiment shown in fig. 1 or the function of a first SFF node in fig. 11. Referring to fig. 12, the processing apparatus 1100 of the service function chain includes: a receiving module 1110, a processing module 1120, and a transmitting module 1130. These modules may perform the corresponding functions of the SFF node in the method example of FIG. 10 described above. For example:

The receiving module 1110 is configured to receive a first service packet;

the processing module 1120 is configured to obtain identification information according to the first service packet, where the identification information is used to identify a service attribute of the first service packet; updating the first service message according to the identification information to obtain a second service message, wherein the second service message comprises the identification information;

the sending module 1130 is configured to send a second service packet to the service function SF node.

In some embodiments, the identification information is slice information, and the slice information is used to identify a network slice to which the first service packet belongs.

In some embodiments, the identification information is detection-with-flow IFIT information.

In some embodiments, the receiving module 1110 is further configured to receive a processed second service packet sent by the SF node; the processing module 1120 is further configured to strip the identification information in the processed second service packet to obtain a third service packet; encapsulating the third service message to obtain a first message; the sending module 1130 is further configured to forward the first packet to a next hop of the SFF node.

In some embodiments, the processing module 1120 is further configured to obtain the second service packet according to the identification information as a first extension header of the first service packet Wen Tianjia, where the first extension header carries the identification information.

In some embodiments, the first service packet includes a second extended packet header, and the processing module 1120 is further configured to: and updating a second extension message header of the first service message according to the identification information to obtain a second service message.

In some embodiments, the processing module 1120 is further configured to convert the first service packet to obtain a transitional service packet; and updating the transition service message according to the identification information to obtain a second service message.

Referring next to fig. 14, fig. 14 is a block diagram of an SFF node 1200 according to an embodiment of the present application. As shown in fig. 14, the SFF node 1200 includes: processor 1210, memory 1220 and transceiver 1230. The memory 1220, and the transceiver 1230 and processor 1210 may be connected by a bus. Of course, in practical applications, the memory 1220, the transceiver 1230 and the processor 1210 may not be bus structures, but may be other structures, such as a star structure, which is not specifically limited in this application.

Alternatively, processor 1210 may be a central processing unit, an application specific integrated circuit (Application Specific Integrated Circuit, ASIC), one or more integrated circuits for controlling program execution, a hardware circuit developed using a field programmable gate array (Field Programmable Gate Array, FPGA), a baseband processor, or the like.

Optionally, processor 1210 may include at least one processing core.

Alternatively, the Memory 1220 may include a Read Only Memory (ROM), a random access Memory (Random Access Memory, RAM), and a disk Memory. The memory 40 is used to store data required by the processor 10 when operating. The number of memories 40 is one or more.

Alternatively, the transceiver 1230 may receive messages sent by other nodes or send messages to other nodes.

It will be appreciated by those skilled in the art that embodiments of the present application may be provided as a method, system, or computer program product. Accordingly, the present application may take the form of a hardware embodiment, a software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present application may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, and the like) having computer-usable program code embodied therein. These computer program code may be stored in a computer readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner.

The present embodiment also provides a computer storage medium having stored therein computer instructions which, when executed on a service function forwarder node, cause the service function forwarder node to execute the above-mentioned related method steps to implement the method for processing a service function chain in the above-mentioned embodiments.

The present embodiment also provides a computer program product which, when run on a traffic function forwarder node, causes the traffic function forwarder node to perform the above-mentioned related steps for implementing the traffic function chain processing method in the above-mentioned embodiment.

In addition, embodiments of the present application also provide an apparatus, which may be specifically a chip, a component, or a module, and may include a processor and a memory connected to each other; the memory is configured to store computer-executable instructions, and when the device is running, the processor may execute the computer-executable instructions stored in the memory, so that the chip executes the processing method of the service function chain in each method embodiment.

From the foregoing description of the embodiments, it will be apparent to those skilled in the art that, for convenience and brevity of description, only the above-described division of functional modules is illustrated, and in practical application, the above-described functional allocation may be implemented by different functional modules according to needs, i.e. the internal structure of the apparatus is divided into different functional modules to implement all or part of the functions described above.

In the several embodiments provided in the present application, it should be understood that the disclosed apparatus and method may be implemented in other manners. For example, the apparatus embodiments described above are merely illustrative, e.g., the module or division of modules is merely a logical function division, and there may be additional divisions when actually implemented, e.g., multiple modules or components may be combined or integrated into another apparatus, or some features may be omitted or not performed. Alternatively, the coupling or direct coupling or communication connection shown or discussed with each other may be an indirect coupling or communication connection via some interfaces, devices or modules, which may be in electrical, mechanical, or other forms.

The modules illustrated as separate components may or may not be physically separate, and the components shown as modules may be one physical module or multiple physical modules, i.e., may be located in one place, or may be distributed across multiple different places. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

In addition, each functional module in each embodiment of the present application may be integrated into one processing module, or each module may exist alone physically, or two or more modules may be integrated into one module. The integrated modules may be implemented in hardware or in software functional modules.

The integrated module, if implemented in the form of a software functional module and sold or used as a stand-alone product, may be stored in a readable storage medium. Based on such understanding, the technical solution of the embodiments of the present application may be essentially or a part contributing to the prior art or all or part of the technical solution may be embodied in the form of a software product stored in a storage medium, including several instructions for causing a device (may be a single-chip microcomputer, a chip or the like) or a processor (processor) to perform all or part of the steps of the methods described in the embodiments of the present application. And the aforementioned storage medium includes: a U-disk, a removable hard disk, a Read-Only Memory (ROM), a random access Memory (Random Access Memory, RAM), a magnetic disk, or an optical disk, or other various media capable of storing program codes.

The foregoing is merely a specific embodiment of the present application, but the protection scope of the present application is not limited thereto, and any changes or substitutions within the technical scope of the present disclosure should be covered in the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the protection scope of the claims.

Claims (20)

1. A method for processing a service function chain, which is applied to a service function forwarder SFF node, the method for processing a service function chain comprising:

receiving a first message, wherein the first message comprises identification information and a first service message, and the identification information is used for identifying service attributes of the first service message;

updating the first service message according to the identification information to obtain a second service message, wherein the second service message comprises the identification information;

and sending the second service message to the service function SF node.

2. The method for processing a service function chain according to claim 1, wherein the identification information is slice information for identifying a network slice to which the first service packet belongs.

3. The method for processing a service function chain according to claim 1, wherein the identification information is detection-with-flow IFIT information.

4. A method for processing a service function chain according to any one of claims 1 to 3, wherein the method for processing a service function chain further comprises:

receiving a processed second service message sent by the SF node;

stripping the identification information in the processed second service message to obtain a third service message;

Encapsulating the third service message to obtain a second message, wherein the message header of the first message is the same as that of the second message;

and forwarding the second message to the next hop of the SFF node.

5. The method for processing a service function chain according to any one of claims 1 to 4, wherein updating the first service message according to the identification information to obtain a second service message includes:

and obtaining the second service message according to the identification information as a first extension message header of the first service message Wen Tianjia, wherein the first extension message header carries the identification information.

6. The method for processing a service function chain according to claim 5, wherein the first message further comprises a second extended message header, and the second extended message header carries the identification information.

7. The method for processing a service function chain according to any one of claims 1 to 4, wherein the first service packet includes a third extension header, and updating the first service packet according to the identification information to obtain a second service packet includes:

and updating the third extension message header of the first service message according to the identification information to obtain the second service message.

8. The method for processing a service function chain according to any one of claims 1 to 4, wherein updating the first service message according to the identification information to obtain a second service message includes:

converting the first service message to obtain a transition service message;

and updating the transition service message according to the identification information to obtain a second service message.

9. The method for processing a service function chain according to any one of claims 1 to 8, wherein the first packet is a segment routing SRv6 packet based on internet protocol version 6, and the SRv packet includes a segment routing extension header SRH.

10. The processing method of the service function chain is characterized by being applied to SFF nodes, and comprises the following steps:

receiving a first service message;

acquiring identification information according to the first service message, wherein the identification information is used for identifying the service attribute of the first service message;

updating the first service message according to the identification information to obtain a second service message, wherein the second service message comprises the identification information;

and sending the second service message to the service function SF node.

11. The method for processing a service function chain according to claim 10, wherein the identification information is slice information, and the slice information is used for identifying a network slice to which the first service packet belongs.

12. The method of processing a service function chain according to claim 10, wherein the identification information is an on-stream detection IFIT information.

13. The method for processing a service function chain according to claim 10, wherein the method for processing a service function chain further comprises:

receiving a processed second service message sent by the SF node;

stripping the identification information in the processed second service message to obtain a third service message;

encapsulating the third service message to obtain a first message;

and forwarding the first message to the next hop of the SFF node.

14. The method for processing a service function chain according to any one of claims 10 to 13, wherein updating the first service packet according to the identification information to obtain a second service packet includes:

and obtaining the second service message according to the identification information as a first extension message header of the first service message Wen Tianjia, wherein the first extension message header carries the identification information.

15. The method for processing a service function chain according to any one of claims 10 to 13, wherein the first service packet includes a second extension packet header, and updating the first service packet according to the identification information to obtain a second service packet includes:

and updating the second extension message header of the first service message according to the identification information to obtain the second service message.

16. The method for processing a service function chain according to any one of claims 10 to 15, wherein updating the first service packet according to the identification information to obtain a second service packet includes:

converting the first service message to obtain a transition service message;

and updating the transition service message according to the identification information to obtain a second service message.

17. A processing apparatus for a service function chain, wherein the processing apparatus for a service function chain comprises:

the receiving module is used for receiving a first message, wherein the first message comprises identification information and a first service message, and the identification information is used for identifying the service attribute of the first service message;

the processing module is used for updating the first service message according to the identification information to obtain a second service message, wherein the second service message comprises the identification information;

And the sending module is used for sending the second service message to the service function SF node.

18. A processing apparatus for a service function chain, wherein the processing apparatus for a service function chain comprises:

the receiving module is used for receiving the first service message;

the processing module is used for acquiring identification information according to the first service message, wherein the identification information is used for identifying the service attribute of the first service message; updating the first service message according to the identification information to obtain a second service message, wherein the second service message comprises the identification information;

and the sending module is used for sending the second service message to the service function SF node.

19. A traffic function forwarder node, characterized in that the traffic function forwarder node comprises:

one or more processors;

a storage means for storing one or more programs;

when the one or more programs are executed by the one or more processors, the one or more processors implement the method of processing a traffic function chain according to any one of claims 1 to 9 or the method of processing a traffic function chain according to any one of claims 10 to 16.

20. A computer-readable storage medium, on which a computer program is stored, characterized in that the program, when being executed by a processor, implements the method of processing a traffic function chain according to any one of claims 1 to 16.