JP6216891B2 - Relay device - Google Patents

Description

  The present invention relates to a communication device that relays packets.

  Patent Document 1 discloses a technique for ensuring the performance of transfer and encapsulation by dividing the processing part into CP (control plane) as the function of the control system packet and DP (data plane) as the function of the transfer system in the network. (WO2011 / 102488).

  Patent Document 1 includes a switching node that executes a conventional network service and a control server that executes an extended network service. The switching node includes a first internal bus used for transferring a frame to be processed internally, and an external device. In accordance with the second internal bus used for transferring the frame to be transmitted and the type of the input frame, the frame related to the conventional network service is transferred to the first internal bus side and processed inside the switching node, and the extended network A communication control system including a forwarding engine that transfers a frame related to a service to a second internal bus side and uses a control server is disclosed.

  In Japanese Patent Laid-Open No. 2006-20034 (Patent Document 2), the correspondence between the flow definition information of the packet to be processed by the extension module and the internal address is transferred from the extension module added to the switching unit to the control module of the packet communication node device. Table entry indicating the correspondence between the flow definition information and the internal address of the extension module in the packet transfer control table referred to by each network interface module. When a packet having header information corresponding to the flow definition information is received from the network, the received packet is output to the packet switching unit with an internal header including an internal address indicating an extension module added. Modular package designed to A packet communication node device is disclosed.

  WO2014 / 125636 (Patent Document 3) discloses a communication apparatus having a line interface unit as a network interface and a packet analysis processor 401 that can perform packet format analysis and packet transfer processing in a programmable manner as a network interface. The

WO2011 / 102488 JP2006-20034 WO2014 / 125636

  A case where a service for processing / converting / analyzing a packet is applied to a subscriber device already accommodated in a line card corresponding to a network interface as in Patent Document 3, in addition to a transfer process such as an encapsulation service, or a programmable engine In cases where the performance of the installed line card (ex. Upper limit of service entry) is exceeded, construction of a new physical line or configuration change for each line is required, resulting in an increase in service start delay and line construction cost.

  In Patent Document 1 and Patent Document 2, which corresponds to a network interface, there is no disclosure of a programmable engine that executes a service, and resource allocation that executes a service in consideration of a transfer path cannot be performed.

  As one of the objects of the present invention, a service by a programmable engine in a PE-equipped line card is provided for packet communication of a subscriber apparatus already accommodated in a line card regardless of physical line accommodation conditions and line configuration.

In order to solve at least one problem, a relay apparatus according to one aspect of the present invention includes:
A first network interface unit comprising at least a network processor; a second network interface unit;
A transfer unit having a transfer engine that executes a process of searching for the port and the network interface unit, which are output destinations of packets transmitted and received between the information processing devices, and outputting a packet according to a search result;
Based on the processing required for packets communicated between the information processing devices and the attributes of the network interface unit, the network interface unit is selected, and the transfer path setting for packets input to and output from the selected network interface unit is set. A control unit for Other aspects will become apparent throughout the present specification and drawings.

  According to one aspect of the present invention, regardless of the configuration of the network interface unit that can perform the processing requested by the packet and the line conditions in which the information processing device (subscriber, contractor, etc.) that transmits and receives the packet is accommodated, Processing required by a packet can be provided.

The block diagram of a network relay system is shown. The structure of a port number table is shown. Fig. 5 shows a subscriber order management table. A transfer engine management table is shown. Indicates the forwarding table. A session management table is shown. The PE mounted line card selection table is shown. Indicates an encapsulation table. It is a timing chart relevant to CP and DP transmission / reception. It is a flowchart which shows the operation | movement at the time of selection of the PE loading line card of a load balance control part. It is a flowchart which shows the operation | movement at the time of session disconnection of a protocol control part.

  A network that connects a subscriber unit and an ISP server, a transfer engine that realizes a service function, a transfer engine that performs packet transfer, a PE-equipped line card that has packet distribution and encapsulation functions, and a network device that relays the network In an information processing system, this is a technology that efficiently uses a PE-equipped line card (a high-performance line card equipped with a PE (Programmable Engine)).

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

  FIG. 1 is a configuration diagram of a network relay system. The network relay system is connected to the access network 300 (300-1, 300-2) and the core network 400 via the network device 100 and one or more switches 200 (switches 200-1, 200-2, 200-3). The Also. The network relay system includes a plurality of subscriber devices 310. Subscriber apparatuses 310-1 and 310-2 are accommodated in access network 300-1. The access network 300-1 is accommodated in the PE-equipped line card 3000-1 via the switch 200-1. Subscriber device 310-3 is accommodated in access network 300-2. The access network 300-2 is accommodated in the line card 4000-1 via the switch 200-2. The subscriber order management server 420 for instructing the setting of the subscriber order and the ISP server 410 for providing a service to the subscriber apparatus are connected to the switch 200-3 via the core network 400.

  The network device 100 includes a management control unit 1000 and transfer engines 2000-1, 2000-2, 2000-3, and 2000-4, line cards 4000-1 and 4000-2, and PE mounted line cards 3000-1 and 3000-2. It is a communication apparatus containing. The network device 100 relays packets transmitted and received between the subscriber device 310 and the information processing device such as the ISP server 410. The network device 100 includes transfer engines 2000-1, 2000-2, 2000-3, and 2000-4, transfer processing circuits (not shown), transfer tables 2100-1, 2100-2, 2100-3, and 2100-4. The transfer processing circuit and the transfer table are configured by hardware.

  Management control unit 1000 of network device 100, transfer engine devices 2000-1, 2000-2, 2000-3, and 2000-4 and PE-equipped line cards 3000-1, 3000-2, line cards 4000-1, 4000-2 Are connected via an internal Ethernet (registered trademark).

  When the management control unit 1000 receives a packet via the PE-equipped line cards 3000-1 and 3000-2 and the port 1500 of the line cards 4000-1 and 4000-2, the management engine 1000 transfers the transfer engine 2000-1, Controls 2000-2, 2000-3, and 2000-4, PE-equipped line cards 3000-1 and 3000-2, and controls hardware transfer and encapsulation processing. The management control unit 1000 includes a memory 1150 and a processor 1200. The processor 1200 sequentially executes the program code (protocol control unit 1101, load balance control unit 1102, transfer engine control unit 1103) expanded in the memory 1150. The management control unit 1000 of the network device 100 stores the program code (at least one of the protocol control unit 1100, the load balance control unit 1102, and the transfer engine control unit 1103) in a non-volatile memory and develops it in the memory 1150. Good. The memory 1150 holds a subscriber order management table 1111, a session management table 1112, a port number table 1115, a PE-equipped line card selection table 1114, and a port number table 1115.

  The protocol control unit 1101 has a function (CP) related to a control system packet. The protocol control unit 1100 controls the CP establishment with the subscriber apparatuses 310-1, 310-2 and the ISP server 410 according to the contents of the subscriber order management table 1111, the session management table 1112, and the port number table 1115. Specifically, the protocol control unit 1101 passes through the access network 300, the switch 200, the line card 4000-1, and the transfer engine 2000-2 in response to a session connection request from the subscriber devices 310-1 and 310-2. The CP control is performed via the protocol control unit of the management control unit 1000, the transfer engine 2000-4, the line card 4000-2, the switch 200, and the core network, and between the subscriber device 310 and the ISP server 410. Connect and maintain sessions. Further, the protocol control unit 1101 is necessary for packet transfer processing using a session configured between the subscriber device 310 and the ISP server 410 with respect to the transfer engine 2000, the line card 4000, and the PE-equipped line card 3000. The input / output destination address and input / output ports 1500 and 1600 are set in the transfer table 2100 and the encapsulation table 3111. With this setting, the transfer engine 2000, the line card 4000, and the PE-equipped line card 3000 provide a transfer function (DP (data plain)). The protocol control unit 1100 holds the association between the contractor and the extended service and the attribute including the processing status of the connection unit that can execute the extended service, and the session start request and the request source are received in the packet received via the port 1500. If the information on the contractor is included, the PE-equipped line card 3000 to which the extended service is assigned is determined according to the association and the attribute.

  Based on session management table 1112 and PE mounted line card selection table 1114 by CP, encapsulation setting and transfer engine 2000-1, 2000-2, or 2000-3 on PE mounted line card 3000-1 or 3000-2, or In 2000-4, packet transfer settings necessary for DP are set. According to the settings of DP, subscriber devices 310-1, 310-2, 310-3, access network 300, switch 200, line card 4000-1, transfer engine 2000-2, transfer engine 2000-3, PE installed line Data is transferred between the card 3000-2, transfer engine 2000-3, transfer engine 2000-4, line card 4000-2, switch 200, core network 400, and ISP server 410.

  The load balance control unit 1102 selects a PE-equipped line card that performs an extension service according to a predetermined selection method. Specifically, the load balance control unit 1102 selects the PE-equipped line card 3000-1 or 3000-2 according to the PE-equipped line card selection table 1114 and the port number table 1115, and sets the encapsulated data.

  The transfer engine control unit 1103 controls transfer processing for packet communication between the information processing apparatuses (between the subscriber apparatus and the ISP server) by the PE-equipped line card 3000 and the transfer engine 2000. Specifically, the transfer engine control unit 1103 corresponds to the transfer engine 2000-1 corresponding to enable hardware transfer to the PE-equipped line card 3000-1 or 3000-2 selected by the load balance control unit 1102. Transfer paths are set in the transfer tables 2100-1, 2100-2, 2100-3, and 2100-4 of 2000-2, 2000-3, and 2000-4.

  The transfer engines 2000-1, 2000-2, 2000-3, and 2000-4 receive their transfer tables 2100-1, 2100-2, 2100-3, and 2000 in accordance with transfer table setting instructions from the management control unit 1000. Set the next hop to send the packet to 2100-4, the destination address of the packet, and the output port of the packet, and perform hardware transfer. The transfer engine 2000 is a transfer unit. The transfer processing circuit of the transfer engine 2000 refers to the transfer table 2100, and based on at least one of the layer 2 and layer 3 headers of the packet, and the port and network interface unit serving as the output destination based on the received port of the packet, Execute the process to search.

  The PE-equipped line card 3000-1 has a port 1600 (device side) connected to the transfer engine 2000 and a port 1500 (line side) connected to the access network 300-1 via the switch 200. The PE-equipped line card 3000-2 has a port 1600 (device side) connected to the transfer engine 2000 and a port 1500 (line side) connected to the core network 400 via the switch 200.

The PE-equipped line card 3000 (3000-1, 3000-2) is a network interface module having a memory 3102 and a programmable engine (PE) 3200. The memory 3102 stores an encapsulation control unit 3102-1 and an encapsulation table 3111-1. The memories 3100-1 and 3100-2 receive the encapsulation request from the protocol control unit 1101 of the management control unit 1000, and set the encapsulation tables 3111-1 and 3111-02. 3102-2 operates. The encapsulation control unit 3102 is one of programs executed by the PE 3200 and one of extended services.
The encapsulation table 31 is referred to when the encapsulation control unit 3102 is executed by the PE 3200. The PE 3200 is a network processor that can execute an extended service. The PE 3200 reads a program such as the encapsulation control unit 3102 stored in the memory 3100 and executes an extended service related to packet communication of the subscriber unit 310.

  In the PE-equipped line cards 3000-1 and 3000-2 described in the present embodiment, the encapsulation control unit 3102-1 and 3102-2 have their own encapsulation table 3111-1, according to the encapsulation instruction from the management control unit 1000. Set 3111-2 and perform packet encapsulation. However, the extended service performed by the PE-equipped line card 3000 is not limited to encapsulation. In response to an extended service instruction from the management control unit 1000, the PE 3200 performs the extended service.

  The line card 4000 is a network interface module having a port 1500 (line side) connected to the core network 400 and the access network 300 and a port 1600 (device side) connected to the transfer engine 2000. The line card 4000 outputs a packet received at the port (line side) 1500 from the network to the transfer engine 2000 in order to search the destination of the packet via the port 1600 (device side). In addition, the line card 4000 outputs a packet received from the transfer engine 2000 at the port 1600 (device side) to the network at another port 1500 (line side).

  The PE-equipped line card 3000-1 accommodates subscriber apparatuses 310-1 and 310-2 connected to the access network 300-1 via the switch 200-1. Line card 4000-1 accommodates subscriber device 310-3 connected to access network 300-2 via switch 200-2. The line card 4000-1 may accommodate subscriber devices 310-1 and 310-2 connected to the access network 300-1 via the switch 200-1. Each of the PE-equipped line card 3000 and the line card 4000 includes a port input / output control unit (not shown) that controls input / output of packets in the line side port 1500 and the apparatus side port 1600.

  FIG. 2 shows the configuration of the port number table 1115 indicating the attributes of the ports 1500 and 1600 included in the line cards 3000 and 4000 included in the network device 100. The port number table 1115 holds the correspondence of which line card 3000, 4000 each port 1500, 1600 of the line card 3000, 4000 belongs to and which line card 3000, 4000 is connected to.

  The port number table 1115 includes a protocol control unit 1101, a transfer engine control unit 1103, a transfer engine 2000-1, 2000-2, 2000-3, and 2000-4, and a PE loaded line card 4000-1 and 4000-2 capsule. Used when the packetizing controllers 3102-1 and 3102-2 perform packet transfer. The package name 1115-1 is a unique ID for each line card for identifying at least one of the plurality of line cards included in the network device. The port type 1115-2 is information indicating the attribute of the port included in each line card. Indicates the port attributes (line side / device side) of the PE-equipped line cards 3000-1 and 3000-2 and the line cards 4000-1 and 4000-2. The port number 1115-3 holds a port number for identifying the ports included in the PE-equipped line card 3000 and the line card 4000. Each port number is set in the port number table 1115 by the line card control unit when the PE mounted line cards 3000-1 and 3000-2 and the line cards 4000-1 and 4000-2 are mounted.

  FIG. 3 shows the configuration of the subscriber data management table 1111. In the subscriber order management table 1111, the association between the logical line ID 11111-1, the input port number 1111-2 and the service information 1111-3 (association between the contractor and the extended service) is managed for each subscriber device. The This is a subscriber data management table 1111 in which the configuration control unit 1104 receives and sets subscriber data for each subscriber device from the subscriber order management server 420. The subscriber data management table 1111 is a table for the management control unit 1000 to manage the accommodation location and service type for each subscriber device. The logical line ID 1111-1 is a unique ID set for the subscriber order management server 420 to identify the subscriber device. The input port number 1111-2 indicates a port in which the subscriber unit 310-1 is accommodated. The port number to be set is the value of the port number table in FIG.

  The service information 1111-3 is the contents of the service set in the data for each subscriber device from the subscriber order management server 420. The basic service is, for example, a transfer process performed by the transfer engine 2000 that performs transmission / reception to / from a specified IP address / port according to an IPv4 header or an IPv6 header or an input / output port in the layer 3. Extended services such as encapsulation services are packet processing and analysis.

  In FIG. 3A, the subscriber device 310-1 switches via the access network 300, the switch 200, the line card 4000-1, the transfer engine 2000-2, the transfer engine 2000-4, and the line card 4000-2 of the network device 100. It shows that information for managing the order of the subscriber unit 310-1 in the case of a basic service configuration in which IP communication is provided with the 200, the core network 400, and the ISP server 410 is held. FIG. 3B shows the configuration of the subscriber order management table 1111 when the encapsulation service is applied to the subscriber device 310-1 which is accommodated by the port having the input port number 110 and whose logical line ID corresponds to 1. Indicates. 3C further shows the configuration of the subscriber order management table 1111 when the encapsulation service is applied to the subscriber device 310-2 that is accommodated by the port of the input port number 120 and has a logical line ID of 2. Indicates. The configuration control unit 1104 of the management control unit 1000 that has received the instruction from the subscriber order management server 420 performs the settings shown in FIGS. 3A to 3C.

  FIG. 4 shows the configuration of the transfer engine management table 1113. The transfer engine management table 1113 is a table for managing the settings of the transfer table 2100 of the transfer engine 2000 at the time of DP setting. The transfer engine management table 1113 centrally manages the transfer table set for each transfer engine 2000 in the network device 100.

  The entry ID 1113-1 is an ID for the transfer engine control unit 1103 to uniquely manage an entry including a combination of a transfer engine designation unit, a destination address, a next hop, and an output port number. The designation unit 1113-2 is an ID indicating the transfer engine that is the entry setting destination. Based on the information stored in the designation 1113-2, it is possible to designate all the transfer engines included in the network device 100 or at least one transfer engine 2000.

  The destination address 1113-3 is a value for comparison with the destination address of the packet at the time of packet transfer. The next hop 1113-4 is an output destination IP address at the time of packet transfer. The output port number 1113-5 is a port number for specifying a port to which a packet is output among the ports of the line cards 3000 and 4000.

  FIG. 4A shows a configuration in which two entries of transfer information (destination address, next hop, output port number) common to all transfer engines are stored. In this case, a combination of the destination address, the next hop, and the output port number is set in common in the transfer table referred to by all the transfer engines.

  FIG. 4B is an example of the transfer engine management table 1113 in which the transfer information indicated by entry ID = 3 and 4 is further added to the entry of FIG. 4A. A combination of a destination address, a next hop, and an output port number for instructing transfer control is set for the transfer engine specified by the specified unit 1113-2.

  In entry ID = 3, the designated unit 1113-2 is set to the transfer engine 2000-2, the destination address 1113-3 is set to 10.10.1.10, the next hop 1113-4 is set to 10.10.0.1, and the output port number 1113-5 is set to 220. The

  FIG. 4C is an example of a transfer engine management table 1113 in which transfer information indicated by entries with entry ID = 5 and 6 is set in the table of FIG. 4B. In the entries of entry ID = 5 and 6, a combination of a destination address, a next hop, and an output port number for instructing transfer control is set for the transfer engine specified by the specified unit 1113-2. That is, in the entry ID 1113-1 = 5, the designated unit 1113-2 is the transfer engine 2000-3, the destination address 1113-3 is 10.10.1.10, the next hop 1113-4 is 10.10.0.1, and the output port number 1113-5 is 200. , And are set. In the entry ID 1113-1 = 6, the designated unit 1113-2 is the transfer engine 2000-4, the destination address 1113-3 is 192.168.1.2, the next hop 1113-4 is 100.100.0.1, and the output port number 1113-5 is 200. Is set.

  FIG. 5 shows forwarding tables 2100-1, 2100-2, 2100-3, and 2100-4 for the forwarding engines 2000-1, 2000-2, 2000-3, and 2000-4 to perform packet forwarding. . Setting / deletion is performed by the transfer engine control unit 1103. Forwarding engine 2000-1, 2000-2, 2000-3, 2000-4 searches forwarding table 2000-1, 2000-2, 2000-3, 2000-4 from the top in the registration order, and the destination address of the packet is forwarding table Transfer to the output port number 220 that hits the destination address 2100-2. An entry ID 2100-10 is an ID for each transfer engine to uniquely manage a transfer entry. The destination address 2100-2 is a value for comparison with the destination address of the packet at the time of packet transfer. The next hop 2100-3 is an output destination IP address at the time of packet transfer. The output port number 2100-4 is a number for specifying the output destination port of the packet.

  FIG. 5A shows that the subscriber device 310-1 switches via the access network 300, the switch 200, the line card 4000-1, the transfer engine 2000-2, the transfer engine 2000-4, and the line card 4000-2 of the network device 100. This is a table setting in the basic service configuration in which IP communication is provided with the 200, the core network 400, and the ISP server 410.

  FIG. 6 is a session management table 1112 for managing control information for the protocol control unit 1101 to control a session between the subscriber apparatuses 310-1 and 310-2 and the ISP server 410. Set by the protocol control unit 1101 when CP / DP is established or disconnected.

  The session management table 1112 is a table for managing a session state, an IP address, a port number, a PE number, and an entry ID using a logical line ID and a session ID for linking sessions as keys. The contents are updated at the time of CP establishment, disconnection, and DP establishment. The session ID 1112-1 is an identifier for the protocol control unit 1101 to uniquely identify the session. The logical line ID 1112-2 is an identifier for associating the logical line ID and the session ID in the subscriber order management table. The session state 1112-3 is a state value indicating the session state as CP not established, CP established, or DP established.

  The terminal IP address 1112-4 is a terminal IP address set in the subscriber order management table of the corresponding subscriber device. The own IP address 1112-5 is the own IP address used for the terminal IP address of the packet obtained by the encapsulation. The server IP address 1112-6 is a destination IP address used as the terminal IP address of the packet obtained by the encapsulation. A server IP address that has already been set in the subscriber order management table is set. The own port number 1112-7 is the own port number used for the terminal port number of the packet obtained by the encapsulation. The counter port number 1112-8 is a destination port number used for the terminal port number of the packet obtained by the encapsulation. The protocol information 1112-9 is a value indicating the target protocol of the packet obtained by performing the encapsulation. The input port number 1112-10 is the port number of the line cards 4000-1 and 4000-2 that receive the packet. The output port number 1112-11 is the port number of the line cards 4000-1 and 4000-2 that transmit packets. The PE number 1112-12 is the number of the PE-equipped line cards 3000-1 and 3000-2 that perform the encapsulation. The upstream entry ID 1112-13 is an entry ID of the forwarding engine management table used for forwarding the upstream packet (received from the subscriber devices 310-1 and 310-2) at the time of encapsulation. The downlink entry ID 1112-14 is an entry ID of a transfer engine management table used for transferring a downlink (received from the ISP server 410) packet at the time of encapsulation.

  FIG. 7 shows the configuration of the PE mounted line card selection table 1114. The protocol control unit 1101 inquires the load balance control unit 1102 to transfer the data frame (DP establishment) after negotiation with the connection partner (subscriber device and ISP server) (after establishing the CP), and installs the PE When selecting the line cards 3000-1 and 3000-2, the PE mounted line card selection table 1114 is referred to.

  The entry items of the PE mounted line card selection table 1114 will be described below. Selection method 1114-1 is a selection method for selecting a PE-equipped line card to be CP-set, which is set from the configuration control unit. Setting values include a priority selection method, a round robin selection method, and a minimum session PE selection method. The PE number 1114-2 for round robin is the number of the PE line card that is referred to when the selection method 1114-1 set by the configuration control unit is the round robin selection method and is then selected by the round robin selection method. .

  The PE1 communication state 1114-3 is a communication state of the PE-equipped line card 3000-1 set by the load balance control unit 1102. The PE2 communication state 1114-4 is a communication state of the PE-equipped line card 3000-2 set by the load balance control unit 1102. In these communication states 1114-3 and 111-4, information indicating whether the PE-equipped line card 3000 is normal or communication NG is stored. The number of PE1 sessions 1114-5 is the number of DP sessions connected by the PE-equipped line card 3000-1 set by the load balance control unit 1102. The number of PE2 sessions 1114-6 is the number of DP sessions connected by the PE-equipped line card 3000-2 set by the load balance control unit 1102.

  The priority 1PE number 1114-7 is the PE number of the line card 3000-2 with the priority “high” PE. The priority 2PE number 1114-8 is the PE number of the line card 3000-1 with priority “medium”. The priorities 1114-7 and 8 of the PE-equipped line card 3000 are set by the configuration control unit 1104. Further, the priority may be three or more stages instead of two stages.

  The PE1 device side port number 1114-9 is the device side port number of the PE mounted line card 3000-1. The PE2 line side port number 1114-10 is the line side port number of the PE-equipped line card 3000-1. The PE2 device side port number 1114-11 is the device side port number of the PE mounted line card 3000-2. The PE2 line side port number 1114-12 is the line side port number of the PE-equipped line card 3000-2. The load balance control unit 1102 sets the port number on the PE device side and the port number on the PE line side that will be the packet transfer path. FIG. 7A shows a PE-equipped line card selection table 1114 before the PE-equipped line card is selected when the basic service is applied to the communication of the subscriber unit. FIG. 7B shows a PE mounted line card selection table 1114 after the extended service (encapsulation service) is applied to the communication of the subscriber apparatus and the PE mounted line card is selected.

  FIG. 8 shows the configuration of the encapsulation table 3111. The encapsulation table 3111 is encapsulated for each PE-equipped line card so that the encapsulation control units 3102-1 and 3102-2 of the PE-equipped line cards 3000-1 and 3000-2 perform the encapsulation control. Tables 3111-1 and 3111-2 are configured. Setting / deletion of information in the encapsulation table 3111 is performed from the protocol control unit 1101 when DP is established or disconnected.

  The configuration of entries in the encapsulation table 3111 is as follows. The session ID 3111-10 is a unique ID for binding with the session ID of the session management table 1111. The own IP address 3111-11 is the own IP address used as the terminal IP address when the encapsulation is performed. The server IP address 3111-12 is a destination IP address used as a terminal IP address of a packet obtained by performing the encapsulation. A server IP address that has already been set in the subscriber order management table is set. The own port number 3111-13 is the own port number used for the terminal port number of the packet obtained by the encapsulation. The counter port number 3111-14 is a destination port number used for the terminal port number of the packet obtained by the encapsulation. Protocol information 3111-15 is a value indicating the target protocol of the packet obtained by the encapsulation. The output port number 3111-16 is the port number of the line cards 4000-1 and 4000-2 that transmit packets.

  The operation of applying the encapsulation service to / from the server 410 to the subscriber device 310-1 accommodated in the line card 4000-1 will be described. In this embodiment, the network device 100 is equipped with four transfer engines 2000-1, 2000-2, 2000-3, and 2000-4, and each transfer engine 2000-1 includes a PE-equipped line card 3000-1. Installed, transfer engine 2000-2 is installed with line card 4000-1, transfer engine 2000-3 is installed with PE-equipped line card 3000-2, transfer engine 2000-4 is installed with line card 4000-2 Yes.

  First, the subscriber device 310-1 passes through the access network 300, the switch 200, the line card 4000-1, the transfer engine 2000-2, the transfer engine 2000-4, and the line card 4000-2 of the network device 100, the switch 200, A state in which the IP communication with the core network 400 and the ISP server 410 is provided is assumed to be a basic service configuration before applying the first embodiment. FIG. 3A shows the contents of the subscriber order management table 1111 of the management control unit 1000 in the basic service configuration, FIG. 4A shows the contents of the transfer engine management table 1113, and the transfer tables 2100-2 of the transfer engines 2000-2 and 2000-4. The content of 2100-4 is shown in FIG. 5A. Hereinafter, an operation of applying the encapsulation service to the subscriber device 310-1 will be described.

  FIG. 9 is a timing chart related to CP and DP transmission / reception between the subscriber order management server 420, the ISP server 410, the network device 100, and the subscriber device 310. Further, FIG. 9 is a timing chart relating to CP packet and DP transmission / reception between the management control unit 1000, the transfer engine 2000, the PE-equipped line card 3000, the line card 4000, and the subscriber unit 310, which are inside the network device 100. is there. The CP packet is a control packet, and when it is transmitted / received by a PE-equipped line card or a line card, the management control unit 1000 performs analysis / negotiation. When the analysis / negotiation is normally completed, the management control unit 1000 performs the transfer table of the transfer engine and the encapsulation table 3111-1 of the PE-equipped line card 3000-2 or 3000-3 for hardware transfer and encapsulation. Or set 3111-2. The DP is determined by the transfer table 2100-1, 2100-2, 2100-3, or 2100-4 of the transfer engine 2000-1, 2000-2, 2000-3, or 2000-4 set by the CP. Realized by transfer processing (hardware transfer) and extended service (encapsulation).

  The subscriber order management server 420 manages the subscriber orders of the subscriber devices 310-1 and 310-2. The subscriber order management server 420 transmits an instruction to change the service of the subscriber order corresponding to the subscriber device 310-1 to the encapsulation service to the network device 100 (T100). The transmitted change instruction includes a logical line ID (1) accommodating the subscriber unit 310-1 and a service designation.

  1100 receives an instruction to change the service of the subscriber order from the network via the line card 4000 or the PE-equipped line card 3000. The configuration control unit 1104 of the management control unit 1000 that has received the change instruction refers to the subscriber order management table 1111, and service information 1111 that configures an entry of the logical line ID 1111-1 corresponding to the logical line ID included in the change instruction. Set -3 to the service included in the instruction. Specifically, the configuration control unit 1104 uses the service information 1111-3 of the entry whose logical line ID 1111-1 of the subscriber order management table 1111 corresponding to the logical line ID included in the change instruction is 1 as the encapsulation service. Set. In the changed subscriber order management table 1111, as shown in FIG. 3B, the service information 1111-3 is changed to the encapsulated service. With the above-described operation, the encapsulating service is provided to the subscriber device 310-1 by the network device.

  Then, processing for CP establishment starts (T150). The management control unit 1000 negotiates transmission quality and authentication between the subscriber device and the ISP server in order to connect (establish) a session between the subscriber device and the ISP server. Specifically, the management control unit 1000 receives the CP packet for the encapsulation service from the subscriber device 310-1 via the line card 4000 that accommodates the subscriber device 310-1 (T200), and manages it. The control unit 1000 starts session establishment between the ISP server 410 and the subscriber unit 310.

  The management control unit 1000 sends a session establishment request to the ISP server 410 (T220) and receives a response from the ISP server 410 (T240). A session between the subscriber unit 310-1 and the ISP server 410 is connected.

  The management control unit 1000 then sets the session state 1112-3 = CP established, the terminal IP address 1112-4 = 192.168.1.1, and the own IP address 1112-5 = 11.11 for the session ID 1112-1 = 1 in the session management table 1112. 1.10, server IP address 1112-5 = 10.10.1.10, own port number = 1112-6 = 40000, opposite port number 1112-8 = 1701, protocol information 1112-9 = L2TP, input port number 1112-10 = 110, Set the output port number 1112-11 = 130.

  Then, the management control unit 1000 transmits a completion notification indicating that the session is established by the CP packet to the subscriber device 310 via the line card 4000-10 (T300). The process until the CP is established has been described above. FIG. 6A shows the setting contents of the session management table 1112 when the CP session is established.

  In order to establish the DP session, the management control unit 1000 refers to the PE-equipped line card selection table 1114 and selects the PE-equipped line card 4000 that executes the service. Here, the load balance control unit 1102 selects a PE-equipped line card by a predetermined selection method. The predetermined selection method may include at least one of a priority method, a minimum session selection method, and a round robin method, for example. The load balance control unit 1102 of the management control unit 1000 has a priority PE number 1114-7 or 1114-8, PE depending on the selection method set in the selection method 1114-1 in the PE mounted line card selection table 1114. A PE-equipped line card is selected by referring to at least one of the number of sessions 1114-5 or 1114-6, the PE number 1114-2 for round robin, and the PE communication state 1114-3 or 1114-4.

  The protocol control unit 1101 of the management control unit 1000 acquires the number of the PE-equipped line card selected by the load balance control unit 1102, and the protocol control unit 1100 of the management control unit 1000 acquires the corresponding session ID in the session management table 1112. The acquired PE-equipped line card number is set as the PE-equipped line card 4000 to be set to execute the service in the PE number 1112-12 of the entry.

  For example, the protocol control unit 1101 acquires the PE-equipped line card number for setting the encapsulation information, and sets the PE number 1112-12 in the session management table 1112 with the session ID = 1 to 2.

  Next, when the management control unit 1000 selects a PE-equipped line card that performs the service requested by the subscriber device, the protocol control unit 1101 of the management control unit 1000 performs service service on the PE-equipped line card that performs the service. An execution instruction is notified (T400). Specifically, the protocol control unit 1101 notifies the PE execution line card corresponding to the PE number set in the session management table 1112 using the information in the session management table 1112 and notifies the service execution instruction.

  More specifically, the protocol control unit 1101 determines whether the session management table 1112 corresponding to the session ID 3111-10 = 1 corresponds to the encapsulation control unit 3102-2 of the PE-equipped line card 3000-2 (PE number = 2). IP address 3111-11 = 11.11.1.10, server IP address 3111-12 = 10.10.1.10, own port number 3111-13 = 40000, opposite port number 3111-14 = 1701, protocol information 3111-15 = L2TP and PE number The PE2 device side port number = 220 of the PE mounted line card selection table 1114 corresponding to 1112-12 = 2 is set to the output port number 3111-16 of the encapsulation table 3111-2. The contents of the set encapsulation table 3111-2 are shown in FIG. 8A.

  Then, the management control unit 1000 instructs the corresponding transfer engine to set the output destination of the packet so that the packet is transferred to the PE-equipped line card that executes the service (T500, T510). Specifically, the protocol control unit 1101 designates the transfer engine 2000-2 corresponding to the input port number 1112-10 = 110 in the session management table 1112, the server IP address 1112-6 = 10.10.1.10, the PE-equipped line card The PE2 device side port number 1114-11 = 220 of the table 1114 is set in the transfer engine management table 1113. Also, when the transfer engine 2000-4 corresponding to the output port number 1112-11 = 130 in the session management table 1112 is specified, the terminal IP address 1112-4 = 192.168.1.1 and the PE2 device side port number 1114 in the PE installed line card table 1114 -11 = 220 is set in the transfer engine management table 1113, and the transfer engine control unit 1103 is executed. The contents of the set transfer engine management table 1113 are shown in FIG. 4B.

  Then, the transfer engine control unit 1103 sets the destination address 2100-11 = 10.10 as the entry ID 2100-10 = 3 in the first entry of the transfer table 2100-2 of the transfer engine 2000-2 according to the contents instructed by the protocol control unit 1101. Set with 1.10, next hop 2100-12 = 10.10.0.1, output port number 2100-13 = 220. The contents of the transfer table 2100-2 after setting are shown in FIG. 5B. Also, the entry ID 2100-10 = 3 in the first entry of the forwarding table 2100-4 of forwarding engine 2000-4, destination address 2100-10 = 192.168.1.1, next hop 2100-12 = 100.100.0.1, output port number 2100- Set with 13 = 220. The contents of the transfer table 2100-4 after setting are shown in FIG. 5C.

  Finally, the protocol control unit 1101 of the management control unit 1000 sets the entry ID 2100-10 = 3, which is the set route, to the upstream entry ID 1112-13 = 3, the downstream entry ID 1112-14 = 4, and the session state in the session management table 1112. 1112-3 = Set DP establishment. The contents of the set session management table 1112 are shown in FIG. 6C. The DP establishment process ends.

  With the above operation, the encapsulation service between the subscriber device 310-1 accommodated in the line card 400-1 and the ISP server 410 is the PE-equipped line card 3000-2, and the route setting to be linked is the transfer engine 2000-2 and 2000. -4 makes it possible.

  Specifically, the packet received from the subscriber device 310-1 accommodated in the line card 400-1 is transferred to the PE-equipped line card 3000-1 by the transfer engine 2000-1 (T610), and the PE-equipped line card 3000- By the encapsulation in 1 and the transfer to the transfer engine 2000-4 to which the ISP server 410-1 is connected (T620), the ISP server 410-1 can receive (T630). Also, the packet sent from the ISP server 410-1 is transferred to the PE-equipped line card 3000-1 by the transfer engine 2000-4 (T640), encapsulated by the PE-equipped line card 3000-1, and the subscriber device. By being transferred to the transfer engine 2000-2 to which 310 is connected (T650), the subscriber device 310-1 can receive (T660).

  FIG. 10 shows a flowchart in which the load balance control unit 1102 of the management control unit 1000 selects a PE-equipped line card 4000 that executes a service by a predetermined selection method in order to establish a DP session.

In S2301, the load balance control unit 1102 refers to the selection method 1114-1 of the PE mounted line card selection table 1114 set by the configuration control unit 1104 and identifies the selection method.
FIG. 7A shows a PE mounted line card selection table 1114 before selecting a PE mounted line card.

  In S2302, the load balance control unit 1102 selects a candidate PE according to the selection method specified in S2302. If the selection method 1114-1 = priority method, the load balance control unit 1102 refers to the priority 1PE number 1114-7 of the PE mounted line card selection table 1114 and acquires the PE number. When the specific result of step 2301 is PE selection method = minimum session PE selection method, the load balance control unit 1102 determines the number of PE1 sessions 1114-5 and the number of PE2 sessions 1114-6 in the PE mounted line card selection table 1114 in step S2302. And obtain the PE number with a small number of sessions. If the specific result of step 2301 is PE selection method = round robin selection method, the load balance control unit 1102 acquires the round robin PE number 1114-2 of the PE mounted line card selection table 1114 in step 2302. .

  In S2303, the load balance control unit 1102 determines whether the communication status of the selected candidate PE is normal with reference to the PE mounted line card selection table 1114PE1 communication status 1114-3 or PE1 communication status 1114-4.

  In the case of Yes in S2303, the processing of the load balance control unit 1102 proceeds to S2304. In step S2304, the load balance control unit 1102 refers to the number of PE1 sessions 1114-5 or the number of PE2 sessions 1114-6, and determines whether there is a vacancy (greater than 0) in the number of sessions of the selected PE. This process may be omitted when the PE selection method specified in S2301 is the minimum session PE selection method.

  In the case of Yes in S2304, in S2305, the load balance control unit 1102 provides information on the selected PE-equipped line card, for example, information for specifying the PE-equipped line card, and the device-side port and line of the selected PE-equipped line card The information specifying the side port includes the PE-equipped line card number PE1 or PE2 of the PE-equipped line card selection table 1114, the PE device-side port number 1114-9 or 1114-11, and the PE line-side port numbers 1114-10, 1114. 12 is notified to the protocol control unit 1101. If PE selection method = round robin selection method, the load balance control unit 1102 further sets the next PE number in the round robin PE number of the PE-equipped line card selection table in step S2305, and ends.

  For example, the load balance control unit 1102 determines that the PE2 communication state 1114-3 corresponding to the priority 1PE number 1114-7 = 2 is normal in the processes of S2302, S2303, S2304, and S2305, and the number of PE2 sessions 1114 in step S2304. -6 is confirmed, and in step S2305, the PE2 device side port number 1114-11 = 220 and the PE2 line side port number 1114-12 = 120 corresponding to the priority 1PE number 1114-7 = 2 are returned to the protocol control unit 1101. .

  On the other hand, if the communication state of the PE selected in S2303 is NG and the number of sessions of the PE selected in S2304 is empty, the load balance control unit 1102 proceeds to S2306. In S2306, the load balance control unit 1102 selects another candidate PE according to the selection method, and returns to S2303.

  Specifically, the load balance control unit 1102 determines that the corresponding PE2 communication state 1114-3 = communication NG in S2303, or if the number of PE2 sessions 1114-6 in the PE mounted line card selection table 1114 is not empty in S2304, S2306 The load balance control unit 1102 selects another candidate PE.

  If the selection method is the priority method, in S2306, the load balance control unit 1102 selects the PE with the next highest priority. For example, the load balance control unit 1102 checks the state of the PE1 communication state 1114-4 corresponding to the priority 2PE number 1114-8 = 1, confirms the number of PE1 sessions 1114-5 in S2304, and prioritizes 2PE in S2305. The PE1 device side port number 1114-9 = 200 and the PE1 line side port number 1114-10 = 100 corresponding to the number 1114-8 = 1 are returned to the protocol control 1101.

  When the selection method is the minimum session PE selection method, the load balance control unit 1102 selects the PE with the next smallest number of sessions, and returns to the processing of S2303. If the selection method is the round robin method, in S2306, the load balance control unit 1102 selects another PE according to the round robin algorithm.

  Also, the protocol control unit 1101 adds 1 to the number of PE2 sessions 1114-6 in the PE mounted line card selection table 1114. The session management table 1112 after PE selection is shown in FIG. 6B. FIG. 7B shows the PE mounted line card selection table 1114 after the PE mounted line card is selected. The above is the description of FIG.

  In addition, although the case where two PEs with identifiers PE1 and PE2 are described as PE-equipped line cards, there may be three or more. In this case, the communication status and the number of sessions are respectively added to the PE-equipped line card selection table 1114 with identifiers for identifying PE1, PE2, PE3 and the PE-equipped line card, and the load balance control unit 1102 follows a predetermined selection method. Select from 3 or more PEs.

  The operation at the time of session disconnection from the subscriber unit 310-1 will be described below. Upon receiving the session disconnection CP packet from the subscriber unit 310-1, the protocol control unit 1101 performs the following operation according to the flowchart of FIG. First, in step S301, the protocol control unit 1101 disconnects the session by transmitting and receiving CP packets between the subscriber device 310-1 and the ISP server 410, and sets the session ID 1112-1 = 1 in the session management table 1112 to disconnect. . In step S302, the protocol control unit 1101 executes the load balance control unit 1102, and the PE2 session of the PE mounted line card selection table 1114 corresponding to the PE number 1112-11 = 2 of the session ID 1112-1 = 1 of the session management table 1112. Subtract 1 from the number. In step S303, the protocol control unit 1110 encapsulates the encapsulation control unit 3102-2 of the PE-equipped line card 3000-2 with the PE number 1112-12 = 2 acquired with the session ID 1112-1 = 1 in the session management table 1112. Delete the information of session ID 3110-10 = 1 in the conversion table 3111-2. The contents of the encapsulation table after deletion are shown in FIG. 8B. In step S304, the protocol control unit searches the transfer engine control unit 1103 with the session ID 1112-1 = 1 in the session management table 1112, designates the uplink entry ID 1112-3 = 3, and executes entry deletion to transfer. The entry ID 2100-10 = 3 of the first entry in the engine 2000-2 and transfer table 2100-2 is deleted. Also, by specifying the downlink entry ID 1112-14 = 4, the entry ID 2100-10 = 3 of the first entry in the transfer engine 2000-4 and the transfer table 2100-4 is deleted. Thereafter, the transfer engine control unit 1103 deletes the entry ID 1113-1 = 3 and the entry ID 1113-1 = 4 in the transfer engine management table 1112. Finally, the information of session ID 1112-1 = 1 in the session management table 1112 is deleted. The contents of the transfer engine management table 1131 after deletion are shown in FIG. 4A, the contents of the transfer tables 2100-2 and 2100-4 are shown in FIG. 5A, and the contents of the session management table 1112 are shown in FIG. 6D. This is the end of the description of FIG.

  Hereinafter, in the first embodiment, an example in which the subscriber apparatus 310-1 completes session connection with the ISP server 410 and DP has been established has been described.

  Next, in the second embodiment, an example after the DP has been established will be described. The contents of the subscriber order management table 1111 in the second embodiment are shown in FIG. 3B, the contents of the session management table 1112 are shown in FIG. 6C, the contents of the PE mounted line card selection table 1114 are shown in FIG. 7B, and the contents of the transfer engine management table. 4B, the contents of transfer tables 2100-1 and 2100-3 in FIG. 5A, the contents of transfer table 2100-2 in FIG. 5B, the contents of transfer table 2100-4 in FIG. 5C, and the encapsulation table 3100. The contents of -2 are shown in Fig. 8A.

  By changing the service information of the subscriber order corresponding to the subscriber unit 310-2 to the encapsulation service, the logical line ID that accommodates the subscriber unit 310-2 is specified in 1111-1 of the network unit 100-1. And instruct the change. The configuration control unit 1104 of the management control unit 1000 that has received the change instruction sets the service information 1111-3 = encapsulated service in the entry of the logical line ID 1111-1 = 2 in the subscriber order management table 1111. The contents of the changed subscriber order management table 1111 are shown in FIG. 3C. By the above-described operation, the encapsulation service can be operated for the subscriber device 310-2.

  The protocol control unit 1101 that has received the CP packet for the encapsulation service from the subscriber device 310-2 performs the following operation similar to FIG. First, a session between the subscriber device 310-2 and the ISP server 410 is connected, and the session state 1112-3 = CP established, the terminal IP address 1112-4 = 192.168 for the session ID 1112-1 = 2 in the session management table 1112. .1.2, own IP address 1112-5 = 11.11.1.10, server IP address 1112-5 = 10.10.1.10, own port number = 1112-6 = 40001, opposite port number 1112-8 = 1701, protocol information 1112-9 = Set L2TP, input port number 1112-10 = 120, output port number 1112-11 = 130, and set CP established. FIG. 6E shows the setting contents of the session management table 1112 at the time of session establishment.

  The protocol control unit 1101 acquires the PE-equipped line card number for setting the encapsulation information by the load balance control unit 1102, and sets the PE number in the session management table 1112 with session ID = 2. The load balance control unit 1102 performs the following operation according to the flowchart of FIG. FIG. 7B shows a PE mounted line card selection table 1114 before selecting a PE mounted line card.

  For example, if the selection method identified by the load balance control unit 1102 in S2301 is a priority method, the load balance control unit 1102 selects a candidate PE in step S2302, and the load balance control unit 1102 selects the priority 1PE number 1114- in S2303. It is determined that PE2 communication state 1114-3 corresponding to 7 = 2 is normal. In step S2304, the load balance control unit 1102 confirms the number of PE2 sessions 1114-6 and the threshold value for the number of PE2 sessions. Since there is no free space, the process proceeds to S2306, and the next candidate is referenced with reference to priority 2PE number 1114-8 = 1. Select PE. Then, returning to S2303, the load balance control unit 1102 checks that the PE2 communication state 1114-3 = normal with the priority 2PE number 1114-8 = 1. If the result of S2303 is normal, the load balance control unit 1102 checks the number of PE1 sessions 1114-5 in step S2304, and if there is a vacancy with respect to the session number threshold of PE1, the priority 2PE is determined in step 2305. The PE1 device side port number 1114-9 = 200 and the PE1 line side port number 1114-10 = 100 corresponding to the number 1114-8 = 1 are returned to the protocol control 1101. Further, the protocol control unit 1101 adds 1 to the number of PE1 sessions 1114-5 in the PE mounted line card selection table 1114. FIG. 6F shows the session management table 1112 after the PE-equipped line card is selected, and FIG. 7D shows the PE-equipped line card selection table 1114.

  The protocol control unit 1101 corresponds to the session ID 3111-10 = 2 for the encapsulation control unit 3102-1 of the PE-equipped line card 3000-1 (PE number = 1) determined by the load balance control unit 1102. Local IP address 3111-11 = 11.11.1.10, server IP address 3111-12 = 10.10.1.10, local port number 3111-13 = 40001, opposite port number 3111-14 = 1701, protocol information 3111-15 = PE2 device side port number = 200 of PE mounted line card selection table 1114 corresponding to PE number 1112-12 = 1 is set to output port number 3111-16 of encapsulation table 3111-2.

  Then, the protocol control unit 1101 designates the transfer engine 2000-3 corresponding to the input port number 1112-10 = 120 of the session management table 1112, the server IP address 1112-6 = 10.10.1.10, the PE installed line card table 1114 The PE1 device side port number 1114-11 = 200 is set in the transfer engine management table 1113. In addition, when the transfer engine 2000-4 corresponding to the output port number 1112-11 = 130 in the session management table 1112 is specified, the terminal IP address 1112-4 = 192.168.1.2 and the PE1 device side port number 1114 in the PE mounted line card table 1114 -11 = 200 is set in the transfer engine management table 1113, and the transfer engine control unit 1103 is executed. The contents of the set transfer engine management table 1113 are shown in FIG. 4C.

  In accordance with the instruction from the protocol control unit 1101, the transfer engine control unit 1103 sets the entry ID 2100-10 = in the first entry of the transfer table 2100-3 of the transfer engine 2000-3 so that the packet corresponding to the PE-equipped line card is transferred. 3, the destination address 2100-11 = 10.10.1.10, the next hop 2100-12 = 10.10.0.1, and the output port number 2100-13 = 200 are set, and the set contents are notified to the corresponding transfer engine 2000. The contents of the transfer table 2100-2 after setting are shown in FIG. 5D.

  Also, the entry ID 2100-10 = 4 in the first entry of the forwarding table 2100-4 of forwarding engine 2000-4, destination address 2100-10 = 192.168.1.2, next hop 2100-12 = 100.100.0.1, output port number 2100- Set with 13 = 200. The contents of the transfer table 2100-4 after setting are shown in FIG. 5E. Finally, the protocol control unit 1101 sets the entry IDs 2100-10 = 3 and 4, which are the set routes, the uplink entry ID 1112-13 = 5, the downlink entry ID 1112-14 = 6, and the session state 1112-3 = in the session management table 1112. Set DP establishment. The contents of the set session management table 1112 are shown in FIG. 6G.

  With the above operation, the encapsulation service between the subscriber unit 310-2 and the ISP server 410 accommodated in the PE-equipped line card 3000-2 in a state where the number of sessions has been reached is executed by different PE-equipped line cards, A path associated with the change of the PE-equipped line card that executes the encapsulation service is set in the transfer engines 2000-3 and 2000-4. According to the above-described embodiment, the network device can perform services (PPP (Point-to-Point Protocol), PPPoE (PPP over Ethernet), L2TP (Layer Two Tunneling Protocol), IP-IP , IPSec, MPLS) can be added and provided.

  According to the above-described embodiment, the relay apparatus (network apparatus) selects the optimum PE-equipped line card for performing the encapsulation process, distributes the encapsulation information to the PE-equipped line card, and the transfer engine. Process to distribute the route setting to. The transfer engine and the PE-equipped line card perform encapsulation and path setting based on the distributed encapsulation information and path information. In the second embodiment, when the upper limit of the number of sessions of the PE-equipped line card is exceeded, the optimum PE-equipped line card is selected and the encapsulation service is realized. The relay device manages the number of sessions of the PE-equipped line card, selects the optimal PE-equipped line card, distributes the encapsulation information to the PE-equipped line card, and distributes the route settings to the transfer engine. Perform the process. In the transfer engine and the PE-equipped line card, encapsulation and path setting are performed based on the encapsulation information and path information distributed from.

  With the configuration and processing described above, the network device can apply the encapsulation service on the PE-equipped line card to the subscriber device already accommodated in the line card without changing the physical line accommodation conditions and line configuration. A possible system is provided. In addition, when the service entry limit of the PE-equipped line card is exceeded, an optimum PE-equipped line card is automatically selected and an encapsulated service can be applied. In addition, there will be provided a system that can efficiently use existing line cards and PE-equipped line cards and perform services quickly without requiring new physical line construction or line configuration changes.

In addition, this invention is not limited to an above-described Example, Various modifications are included. For example, the above-described embodiments have been described in detail for easy understanding of the present invention, and are not necessarily limited to those having all the configurations described.
Each of the above-described configurations, functions, processing units, processing means, and the like may be realized by hardware by designing a part or all of them with, for example, an integrated circuit. Each of the above-described configurations, functions, and the like may be realized by software by interpreting and executing a program that realizes each function by the processor. Information such as programs, tables, and files for realizing each function is stored in a recording device such as a memory, a hard disk, or an SSD (Solid State Drive), or a recording medium such as an IC card, an SD card, or a DVD. Can do. Further, the control lines and information lines indicate what is considered necessary for the explanation, and not all the control lines and information lines on the product are necessarily shown. Actually, it may be considered that almost all the components are connected to each other.

100 network devices, 200 switches, 300 access networks
310-1 and 310-2 subscriber devices, 400 core network
410 ISP server
420 subscriber order management server
1000 Management control unit
1100 memory
1101 Protocol controller
1102 Load balance control unit
1103 Transfer engine controller
1104 Config controller
Line card with 3200-1 and 3200-2 PE
4000-1 and 4000-2 line cards

Claims (11)

A first network interface unit comprising a first port connected to the network and at least a network processor;
A second network interface unit comprising a second port connected to the network;
Based on at least one of the layer 2 and layer 3 headers of the packet received from the network interface unit and the port that has received the packet, the port and the network interface unit that are output destinations are searched, and the search result A transfer unit having a transfer engine for executing a process of outputting a packet in response,
A protocol control unit for determining whether the session requires processing by the network processor according to a session establishment request of a packet communicated between the information processing devices;
A load balance control unit that selects one from a plurality of first network interface units when the protocol control unit determines that the session requires processing by the network processor;
A transfer engine control unit configured to set a transfer path of a packet input / output to / from the first network interface unit selected by the load balance control unit with respect to the transfer unit; A relay device that relays packets transmitted and received between a plurality of information processing devices,
A network interface unit containing an information processing device and including a port for inputting and outputting packets between the relay device and the network;
When a packet is received via the network interface unit connected to at least one of the network interface units, a port to be output to the network is specified, and the received packet is output to another network interface unit A transfer unit that performs transfer processing, and
In response to reception of a packet from the information processing apparatus, based on the attribute of the network interface unit and the process requested for the packet, assigns a network interface unit having an attribute corresponding to the requested process, and the assigned A control unit configured to set the transfer unit according to the network interface unit,
A relay device. The relay device according to claim 2,
The network device having an attribute corresponding to the requested process includes a processor that executes the requested process. The relay device according to claim 3,
The controller is
When there are a plurality of network interface units having attributes corresponding to the requested processing,
A relay device that determines a network interface unit to be allocated based on a load state of the network interface unit. The relay device according to claim 4,
The controller is
When there are a plurality of network interface units having attributes corresponding to the requested processing, the relay device determines the network interface unit to be allocated by comparing the number of sessions being executed by the network interface unit. The relay device according to claim 3,
When there are a plurality of network interface units having attributes corresponding to the requested processing, the control unit assigns a network interface unit including a port that has received the packet. The relay device according to claim 2,
The allocated network interface unit includes a processor that executes the requested processing;
The transfer unit executes a process of searching for a port and a network interface unit serving as an output destination based on at least one header of the layer 2 and layer 3 of the packet and the port received by the packet;
The requested processing is a relay device that is an extended service for the packet. The relay device according to claim 7,
The extended service is an encapsulation service,
The relay device, wherein the processor of the assigned network interface unit executes the encapsulation service for a packet received via a port. The relay device according to claim 3,
The attribute of the interface unit includes at least one of a processing status of the interface unit and whether the requested processing is possible,
The control unit sends a destination address, a next hop, and a packet to a transfer unit connected to the assigned network interface unit so that the packet is transmitted to and received from the network via the assigned network interface unit. A relay device that sets information specifying an output port in the transfer unit. The relay device according to claim 9,
The control unit holds an attribute including whether or not the extended service can be executed for each network interface unit and the processing status of the extended service, and relates to a session start request and a requesting contractor in a packet received via the port. A relay device that determines a network interface unit to which an extended service is assigned according to the association and attribute when the information is included. The relay apparatus according to claim 9, wherein the association between the contractor and the extended service is input from the outside.

Images