TWI400912B - Data packet orientation method - Google Patents

Description

Packet guiding method

The present invention relates to a packet directing method, and more particularly to a packet directing method for enabling packets to be processed by the same service device and transmitted via the same router under a plurality of egress nodes.

When browsing the related website, the client sends a packet to the network through the network system, and after receiving the packet sent by the client, the network also sends a corresponding packet to the user, so that the user The terminal can instantly browse related websites through the network system.

Generally, the packet will travel between the client and the network through a network device such as a router or a switch. If the client applies for a specific service to the network service provider, the network service provider will The corresponding service device is set up between the network end, the user end, and the router to handle the two-way packet between the network end and the user end by the same service device, thereby exerting specific benefits. Intrusion prevention systems (IPS), firewall devices, cache devices, and deep packet inspection devices are all common service devices.

Further, when there is only a single egress node 20 between the client 1 and the network 2, as shown in FIG. 4A, the service device on the path L1 can see the packet transmitted back and forth, and therefore, the packet can be performed. Specific treatment and the benefits you deserve. When there are two egress nodes 21 between the client 1 and the network 2, as shown in FIG. 4B, the packet sent from the UE 1 to the network 2 by the path L1 is sent back from the network 2. When the client 1 transmits the packet through the path L2, the router on the path L2 sets the routing information by using a policy-based routing technology, and then the packet is directed to the service device on the path L1. In this way, the service device on the path L1 sees the two-way back and forth packets, thereby exerting normal benefits.

However, for larger Internet providers, in order to cope with the increasing packet traffic and maintain stable connection quality, the system construction methods shown in Figures 4A and 4B are insufficient to cope with. Most large-scale Internet providers establish a system architecture of multiple egress nodes and multiple service devices at the same time, as shown in Figure 4C, thereby ensuring that the system does not suffer from, for example, a single point of failure. An unexpected connection failure or a decrease in the quality of the connection. However, in the system architecture of the multi-egress node 22 shown in FIG. 4C, since there are multiple paths (L1, . . . , Ln), the two-way packet of a single user can pass the same service through the strategic routing technology. Equipment, there are quite a few disadvantages. For example, the design of strategic routing for multiple paths is quite complicated, and it is time-consuming and labor-intensive. When multiple service devices are set up, not only the number of interfaces is often insufficient. It is more necessary to manually load multiple service devices to achieve load balancing, which cannot meet the needs of automation.

In view of this, how to provide a packet-oriented method, in a packet processing program having multiple egress nodes and service devices, not only can the packets enter and exit the traffic steering device via the same egress node, thereby avoiding different egress nodes receiving After the packet is encapsulated, in the absence of routing information, the other routers are continuously inquired to cause instability of the connection; at the same time, the service device that needs to see the two-way packet can normally perform its due benefit, and further It can also make the service equipment achieve the effect of load balancing, and it is an urgent problem to be solved by all walks of life.

In order to solve the above-mentioned shortcomings of the prior art, the object of the present invention is to provide a packet-oriented method, which enables a two-way packet of a single user located in a system architecture of a multi-egress node and a multi-service device to pass through the same service device, thereby improving The performance of the service device makes the service device reach the load-balanced connection mode.

To achieve the foregoing and other objects, the present invention provides a packet directing method, which is applied to a system architecture having at least a first egress node, a traffic steering device, and a plurality of service devices, and the first egress node has at least one a first router (Router), wherein the traffic steering device is connected to the first router and the plurality of service devices, and the packet guiding method comprises the following steps: (1) setting at least one in the traffic steering device a group user sending end and a network sending end, and setting a connection manner of a plurality of service devices connected to the traffic guiding device in the traffic guiding device; (2) receiving the slave user at the first egress node When the packet is sent, the first router in the first egress node sends the packet to the user sending end in the traffic steering device; (3) the sending end of the user receives the packet sent from the first router. When the packet is encapsulated, the traffic guiding device directs the packet to the service device connected to the traffic guiding device according to the set connection manner, so that the packet is Processing, and causing the service device to send the packet to the network sender after processing; and (4) when the network sender receives the packet sent from the service device, causing the network sender to The packet is directed to the first router, and the first router sends the packet to the network.

In another embodiment of the foregoing packet guiding method, the system architecture further includes a second egress node, the second egress node having at least one second router, and the second router is connected to the traffic steering device. The packet guiding method further includes the following steps: (5) when the second egress node receives the packet sent from the network, causing the second router in the second egress node to send the packet to the traffic steering a network sending end in the device; (6) when the sending end of the network receives the packet sent from the second router, causing the traffic guiding device to direct the packet to the service according to the set connection manner And a service device connected to the device, wherein the packet is processed by the service device, and the device is sent to the user sending end after processing; and (7) receiving at the user sending end When the packet is sent by the service device, the user sends the packet to the second router, so that the second router sends the packet to the UE.

In a preferred embodiment of the present invention, the plurality of service devices connected to the traffic steering device are set in the traffic steering device in the step (1), that is, by having load balancing and The two-way packet can be set through the processing mechanism of the same service device, for example, a link aggregation group mechanism or a mechanism for allocating traffic according to the IP address of the packet's internet protocol address, correspondingly generating a virtual channel to be connected.

In an embodiment of the present invention, the step (2) includes the step of causing the first router in the first egress node to identify the code on the packet tag, and the identification code is used to identify the receiving user. The receiving end of the packet sent by the terminal is the first router; and in the step (4), the network sending end directs the packet to the first according to the identifier marked by the first router on the packet. router. In addition, in the step (3), the service guiding device may be configured to identify, by the packet marking device, a receiving end of the packet sent by the receiving end to be the identifier of the first router; The network sending end in the step (4) directs the packet to the first router according to the identification code marked on the packet by the traffic steering device.

In an embodiment of the present invention, in the step (5), the second router in the second egress node is configured to identify the receiving end of the packet sent by the receiving network end. The step of identifying the identification code of the second router; and in the step (7), the user sending end directs the packet to the second router according to the identification code marked by the second router on the packet. In addition, in the step (6), the traffic steering device may be configured to identify, by the packet marking device, that the receiving end of the packet sent by the receiving network is the identifier of the second router; The sending end of the user in (7) directs the packet to the second router according to the identification code marked on the packet by the traffic steering device.

Furthermore, the present invention further provides another packet guiding method, which is applied to a system architecture having at least a first egress node, a traffic steering device, and a plurality of service devices, and the first egress node has at least one first a router, and the traffic steering device is connected to the first router and the plurality of service devices, and the packet guiding method includes the following steps: (1) setting at least one group of user sending ends in the traffic steering device and a network sending end, and setting a connection manner of a plurality of service devices connected to the traffic guiding device in the traffic guiding device; (2) receiving, at the first egress node, a packet sent from the network end And causing the first router in the first egress node to send the packet to the network sending end in the traffic steering device; (3) when the network sending end receives the packet sent from the first router And causing the traffic steering device to direct the packet to the service device connected to the traffic guiding device according to the set connection manner, to process the packet by the service device, and make the service After the processing is completed, the packet is sent to the sending end of the user; and (4) when the sending end of the user receives the packet sent by the serving device, the sending end of the user directs the packet to the first router, and further The first router sends the packet to the client.

In addition, in another embodiment of the foregoing packet guiding method, the system architecture further includes a second egress node, the second egress node having at least one second router, and the second router is associated with the traffic steering device The connection, before performing the step (2), further includes the following steps: (2-1) when the second egress node receives the packet sent from the UE, causing the second router in the second egress node to The packet is sent to the user sending end in the traffic steering device; (2-2) when the sending end of the user receives the packet sent from the second router, the traffic guiding device is configured according to the set connection mode. The packet is directed to a service device connected to the traffic steering device to process the packet by the service device, and the device is sent to the network sending end after processing; and (2) -3) When the network sender receives the packet sent by the service device, the network sender directs the packet to the second router, so that the second router sends the packet to the network.

In summary, the packet guiding method of the present invention causes the first router, the second router, or the traffic steering device to mark the packet, so that the packet can enter and exit the traffic steering device via the same router through the tag. Avoid packets from different routers entering and leaving the traffic steering device so that the packets cannot be delivered normally. Furthermore, the present invention provides a user equipment connection, a network transmission end, and a service device connected to the traffic steering device in the traffic steering device, so that the two-way packet of the same user needs to be processed. The service equipment can be effectively utilized, and the load balancing effect can be achieved while improving the efficiency of the service equipment.

The technical contents of the present invention are described below by way of specific examples, and those skilled in the art can easily understand other advantages and effects of the present invention from the disclosure of the present specification.

Please refer to FIG. 1A for a schematic diagram of the system architecture required for implementing the packet guiding method of the present invention. As shown in the figure, the system architecture required for implementing the packet guiding method of the present invention has a client terminal 1, a network terminal 2, a first exit node 3, a second exit node 4, a traffic steering device 5, and a service device 6. 7, 8, 9, 10. The first egress node 3 and the second egress node 4 are connected to the UE 1 and the network 2; the first router 30 in the first egress node 3 and the second router 40 in the second egress node 4 are The physical communication circuit (for example, a physical circuit composed of a single or a plurality of optical fiber lines) is connected to the traffic steering device 5; and the service devices 6, 7, 8, 9, 10 are simultaneously connected to the traffic steering device 5. In this embodiment, the client 1 can be a backbone network (ISP backbone) of a personal computer or an Internet provider, and the network 2 can also be used to represent an Internet provider's backbone network or the Internet. (Internet), but not limited to this. In other words, the client 1 refers to the end that is close to the demand for the network service. In contrast, the network 2 refers to the end that is close to the network service.

Therefore, the packet sent by the UE 1 or the network 2 can be accessed by the first egress node 3 or the second egress node 4 according to the routing protocol result, and transmitted to the system through the first router 30 or the second router 40. In the traffic steering device 5, and one of the service devices 6, 7, 8, 9, 10 performs necessary processing procedures on the packet, for example, performing virus detection on the packet, that is, in response to the service device 6, 7, 8, 9, 10 depending on the services provided, for example, the aforementioned service devices 6, 7, 8, 9, 10 can be firewall devices (Firewall), fast buffer storage device (Cache), deep a packet detection device (Deep Packet Inspection), an intrusion prevention system (IPS), an intrusion detection system (IDS), and the like, which are required to process a single user's two-way packet network device; Upon completion, the packet will be sent to the corresponding network 2 or client 1. It should be noted that the number of egress nodes included in the system architecture for implementing the packet-oriented method of the present invention may be much larger than the number shown in this embodiment, and the egress node may also have a plurality of The router is not limited to the number shown in this embodiment.

First, the user sets at least one set of user sending end 50 and network sending end 51, for example, a virtual local area network interface, in the traffic steering device 5, and then to the traffic steering device 5 Setting a plurality of connection manners of the service devices 6, 7, 8, 9, and 10 connected to the traffic steering device 5, for example, a processing mechanism having load balancing and enabling the two-way packet to pass through the same service device, such as The link aggregation group mechanism or the mechanism for allocating traffic according to the net number of the internet protocol address of the packet, the service device 6, 7, 8, 9, 10 is set in the traffic steering device 5, and the virtual channel is correspondingly generated. 11 is connected, and the number of packets processed by the service equipment 6, 7, 8, 9, 10 in the subsequent processing procedures tends to be averaged, thereby achieving a load balancing connection. It is worth mentioning that, according to the setting manner, the user can flexibly expand more service devices in the virtual channel 11 by themselves, and of course, by adding a plurality of sets of virtual channels 11 to add more service devices. 7, 8, 9, 10, as shown in FIG. 1B, the user transmitting end 50 and the network transmitting end 51 can be simultaneously connected with virtual channels 11, 11', and 11", and in the virtual channels 11' and 11", There are service devices 6', 7', 8', 9', 10' and 6", 7", 8", 9", 10" respectively. Of course, the service devices included in the virtual channels 11' and 11" The quantity can be set, for example, from 8 to 16 according to the equipment manufacturer's plan, and is not limited to the five service devices shown in this figure. In addition, a plurality of sets of user senders 50 and network senders 51 may be added to the traffic steering device 5 according to the nature of the services provided.

In this embodiment, the traffic steering device 5 can be a switch having the function of processing layer 3 of the Open System Interconnection Reference Model (OSI), or can be planned in the network. A router for a virtual router. In addition, in the traffic steering device 5, the user transmitting terminal 50 and the network transmitting terminal 51 are built, and the service devices 6, 7, 8, 9, and 10 are set, and the user transmitting terminal 50 and the network sending are set together. End 51 Internet Protocol address. In another embodiment, the complex array user sender and the network sender may be simultaneously established, and the different groups of user senders and network senders are matched with different processing requirements.

Next, please refer to FIG. 2, which is a flow chart for clearly processing the packet sent by the UE 1 to the network 2 in the packet guiding method of the present invention. In the process flow, after the packet is sent by the client 1, the packet is sent to the first egress node 3 according to the routing protocol result.

First, as shown by the guiding arrow A in the figure, the flow direction of the packet sent by the client 1 to the first egress node 3 according to the routing agreement result is shown. When the first egress node 3 receives the packet sent from the user terminal 1, the first router 30 in the first egress node 3 can filter out the packet that needs to be used for the specific service, and directs it to the user sending end 50. As indicated by the guide arrow B.

It should be noted that if there are multiple sets of different types of user sending end 50 and network sending end 51 in the traffic steering device 5, the physical circuit connecting the first router 30 and the traffic steering device 5 can be set. A plurality of logic circuits respectively corresponding to the plurality of sets of the user sending end 50 and the network sending end 51 are used. Therefore, the first router 30 can use the corresponding logic circuit according to the types of the user sending end 50 and the network sending end 51. The receiving end for receiving the packet identifies which logic circuit in the physical circuit the packet belongs to to enter the associated service type.

In the navigation arrow B in FIG. 2, the first router 30 in the first egress node 3 sends the packet to the user transmitter 50 in the traffic steering device 5. At the instant when the first router 30 derives the packet, the first router 30 can identify the identifier of the packet sent by the receiving client 1 as the identifier of the first router 30, and the identifier is used to identify the identifier of the first router 30. The receiving location subsequent to the packet is referred to as the first router 30 in this embodiment.

In this embodiment, the process of directing the packet to the user sending end 50 in the traffic steering device 5 as indicated by the arrow B indicates that the first router 30 is configured by policy-based routing technology. The packet is sent to the user transmitting end 50 of the traffic steering device 5 through a physical circuit that connects the first router 30 and the traffic steering device 5. For example, a logic circuit (virtual area network) corresponding to the user sending end 50 and the network sending end 51 can be planned in the physical circuit connecting the first router 30 and the traffic steering device 5 by using a strategic routing technology. The trunk (Vlan trunk), or by Multiprotocol Label Switching (MPLS) technology, sends the packet to the user transmitting end 50 of the traffic steering device 5 by the physical circuit.

It is worth mentioning that when the packet arrives at the traffic steering device 5 along the guiding arrow B, the traffic steering device 5 can also mark the receiving end of the packet for identifying the packet sent by the receiving client as the first The identification code of the router, but in actual implementation, in order to simplify the traffic delivery processing flow, the tag executor marked on the packet for the packet transmitting end to identify the originating end of the packet may selectively utilize the first router 30 or One of the traffic steering devices 5 is marked.

Moreover, as shown by the guiding arrow D in FIG. 2, when the user transmitting end 50 receives the packet sent from the first router 30 along the direction of the guiding arrow B, the user of the traffic steering device 5 The sending end 50 directs the packet to the service device connected to the traffic guiding device 5 through the virtual channel 11 according to the previously set connection mode, so as to perform related processing on the packet by the service device.

For example, if the service device 8 is in the previous setting mode, the link aggregation group mechanism is set as the service device with a hash value of 3 for processing the internet protocol address of the packet. And along the foregoing process of guiding the arrow B, the packet sent by the packet, which happens to be a packet with the hash value of 3 of the Internet Protocol Address, is sent to the service device 8 by the user sending end 50 of the traffic steering device 5. The service device 8 is enabled to process the packet accordingly.

In addition, the user sending end 50 and the network sending end 51 in the traffic steering device 5 can be selectively flexibly utilized by the hash function method and/or by the tail number of the Internet Protocol (IP) address of the packet. Expand the service device as shown in Figure 1B.

Therefore, when the service device 8 completes the necessary processing procedures for the packet, the packet is sent to the network transmitting terminal 51 again. As indicated by the guide arrow E in Fig. 2.

Then, when the network sending end 51 receives the packet sent from the service device 8 along the guiding arrow E, the network transmitting end 51 determines that the received packet is marked with the identification code X, and then the packet is known. The receiving end should be the first router 30, so the packet is directed to the first router 30, as indicated by the leading arrow F in FIG.

Finally, when the first router 30 receives the packet sent by the network sending end 51, the packet is then sent to the network terminal 2 through the first router 30, as shown by the guiding arrow G in FIG. Show.

Accordingly, when the network sending end 51 receives the packet, the packet can be directed to the first router 30 according to the marked identification code. In other words, the packet can enter and exit the traffic steering device 5 by the same router. Even if a large number of egress nodes are installed in the system, the packet can enter and exit the traffic steering device 5 via the same egress node.

It should be noted that the packet is sent to the second egress node 4 according to the routing protocol result after being sent by the user terminal 1, and then sequentially passed through the second router 40 in the same guiding method as the above embodiment. The user sending end 50, one of the service devices 6, 7, 8, 9, 10, the network sending end 51, and then back to the second egress node 4, and finally to the network end 2.

In addition, since the first router 30 and the traffic steering device 5 are connected by a single circuit or a plurality of physical circuits, the first router 30 can directly block the packet even if the physical circuit is not broken or damaged. Oriented to the client 1 or the network 2, in this case, the service device 6, 7, 8, 9, 10 can not effectively play the benefits, but the first router 30 can still provide the user's basic connection function, You can connect to the Internet to avoid serious situations where users cannot connect.

Next, please refer to FIG. 3, which is a schematic diagram of a process flow in which the network terminal 2 sends a packet to the client 1 in the packet guiding method of the present invention. It can be seen from the navigation arrows shown in the figure that after the packet is sent by the network terminal 2, the second exit node 4 and the second router 40 are first passed according to the routing agreement result, and then enter the traffic steering device 5, and the service device 6 After one of 7, 8, 9, and 10, the user terminal 1 is reached.

As indicated by the guiding arrow a in FIG. 3, it is indicated that the packet is sent by the network terminal 2 to the second egress node 4 according to the routing protocol result. When the second egress node 4 receives the packet sent from the network terminal 2, the second router 40 of the second egress node 4 can use the packet tag to identify the receipt of the packet sent by the receiving network. The identifier of the second router 40 is referred to as the second router 40 in this embodiment.

Then, as indicated by the guiding arrow b in FIG. 3, the second router 40 in the second egress node 4 sends the packet received by the second egress node 4 to the network in the traffic steering device 5. End 51. In this embodiment, the flow direction indicated by the arrow b to send the packet to the network sending end 51 in the traffic steering device 5 is to instruct the second router 40 to use the strategic routing technology and connect the second The physical circuit of the router 40 and the traffic steering device 5 sends the packet to the network transmitting end 51 in the traffic steering device 5.

Furthermore, as indicated by the leading arrow d in FIG. 3, when the network transmitting end 51 receives the packet transmitted from the second router 40 in the direction of the leading arrow b, the network transmitting end 51 will The packet is directed to the service device connected to the traffic steering device 5 through the virtual channel 11 according to the previously set connection mode, thereby performing related processing on the packet. It should be noted that since the connection method set in this step is the same as the connection method set in the above FIG. 2, the network system selected in this step is also the service described in FIG. The equipment is the same. Therefore, if the packet is sent to the network 2 by the client 1 and processed by the service device 8, the service device selected in this step is also the service device 8. Accordingly, the packets that are shuttled between the same client 1 and the network 2 can be processed by the same service device, so that the two-way packet of the single user cannot pass the same service device, so that the service device 6, 7, 8, 9, 10 can achieve normal processing benefits, and can even achieve load balancing of service equipment 6, 7, 8, 9, 10.

It is worth mentioning that, in the foregoing guiding arrow b, when the traffic guiding device 5 receives the packet sent along the guiding arrow b, the identification code may also be marked in the packet, and the identification code is used to identify The receiving end of the packet sent by the receiving network is the second router 40 in the above embodiment. Of course, the processing of the tag can also be selectively performed by one of the second router 40 or the traffic steering device 5 to simplify the processing flow.

Furthermore, as indicated by the leading arrow e in FIG. 3, after the service device completes the processing procedure, the service device then sends the packet to the user transmitting end 50. Taking the service device 8 as an example, the processed packet is then sent by the service device 8 to the user sender 50. Therefore, when the user sending end 50 receives the packet sent by the service device 8, the user sending end 50 directs the packet to the corresponding identifier according to the identifier of the tag marked by the second router 40 or the traffic guiding device 5 on the packet. The router, that is, the second router 40, is shown as a guide arrow f in FIG. Finally, when the second router 40 receives the packet sent by the user sender 50, the packet is then sent to the client 1, as indicated by the leading arrow g in FIG.

The packet is sent to the first egress node 3 according to the routing protocol result, and then passes through the first router 30 and the network in the same manner as the above-mentioned embodiment. The sender 51, one of the service devices 6, 7, 8, 9, 10, the user sender 50, and then back to the first exit node 3, and finally to the client 1.

In summary, by applying the packet-oriented method of the present invention, a two-way packet of a single user can enter and exit the traffic steering device through the same router when the user and the network go back and forth, so as to avoid the packet sent by the user terminal. Different routers come in and out of the traffic steering device to avoid the situation that the packet cannot be delivered normally. In addition, the service device that the single user packet is sent by the user end to the network end is the same as the service device that is sent by the network end to the user end, so that the same service device can be used. Handling the two-way packet of a single user can also maintain the overall efficiency of the service device, and also make the service device load-balanced. Further, the designer can expand the number of service devices according to the demand.

However, the above-described embodiments are merely illustrative of the principles of the invention and its effects, and are not intended to limit the invention. Modifications and variations of the above-described embodiments can be made by those skilled in the art without departing from the spirit and scope of the invention. Therefore, the scope of protection of the present invention should be as set forth in the scope of the claims described below.

1. . . user terminal

11, 11', 11"... virtual channel

2. . . Network side

20, 21, 22. . . Exit node

3. . . First exit node

30. . . First router

4. . . Second exit node

40. . . Second router

5. . . Traffic steering device

50. . . User sender

51. . . Network sender

6, 7, 8, 9, 10. . . Service equipment

6', 7', 8', 9', 10'. . . Service equipment

6”, 7”, 8”, 9”, 10”... service equipment

A, B, D, E, F, G. . . Guide arrow

a, b, d, e, f, g. . . Guide arrow

L1, L2, Ln. . . path

Figure 1A is a diagram of the basic system architecture required to implement the packet guiding method of the present invention;

1B is another basic system architecture diagram for implementing the packet guiding method of the present invention;

2 is a flow chart of processing of sending a packet to a network end by a UE in the packet guiding method of the present invention;

FIG. 3 is a flowchart of a process of sending a packet to a client end by a network end in the packet guiding method of the present invention;

Figure 4A is a basic architecture diagram of a conventional two-way packet delivery system;

Figure 4B is another basic architectural diagram of a conventional two-way packet delivery system;

Figure 4C is another basic architectural diagram of a conventional two-way packet delivery system.

1. . . user terminal

11. . . Virtual channel

2. . . Network side

3. . . First exit node

30. . . First router

4. . . Second exit node

40. . . Second router

5. . . Traffic steering device

50. . . User sender

51. . . Network sender

6, 7, 8, 9, 10. . . Service equipment

Claims (20)

A packet-oriented method is applied to a system architecture having at least a first egress node, a traffic steering device, and a plurality of service devices, where the first egress node has at least one first router, and the traffic steering device is The first router and the plurality of service devices are connected, and the packet guiding method includes the following steps: (1) setting at least one set of user sending end and network sending end in the traffic guiding device, and in the service The guiding device sets a plurality of connection manners of the service devices connected to the traffic guiding device; (2) when the first egress node receives the packet sent from the user end, the first one of the first egress nodes is a router sends the packet to the user sending end in the traffic steering device; (3) when the user sending end receives the packet sent from the first router, the traffic guiding device is configured according to the set connection Transmitting the packet to the service device connected to the traffic steering device, by using the service device to process the packet, and causing the service device to send the packet after processing And (4) when the network sender receives the packet sent by the service device, causing the network sender to direct the packet to the first router, so that the first router will The packet is sent to the network. The packet-oriented method of claim 1, wherein the system architecture further includes a second egress node, the second egress node having at least one second router, and the second router is associated with the traffic steering device The packet guiding method further includes the following steps: (5) when the second egress node receives the packet sent from the network, causing the second router in the second egress node to send the packet to the message (6) when the network sending end receives the packet sent from the second router, the traffic guiding device directs the packet to the network according to the set connection mode. a service device connected to the traffic steering device to process the packet by the service device, and to enable the service device to send the packet to the user sending end after processing; and (7) to the user sending end Upon receiving the packet sent by the service device, the user sends the packet to the second router, so that the second router sends the packet to the UE. For example, in the packet-oriented method of claim 1, wherein the method for setting a plurality of service devices connected to the traffic steering device in the traffic steering device is described in the step (1). Referring to the processing mechanism with load balancing and enabling the two-way packet to pass through the same service device, a virtual channel is correspondingly connected to be connected. The packet-oriented method of claim 1, wherein before the step (2), the step of connecting the first router to the traffic steering device by a physical circuit is included; and in the step (2) The first router sends the packet to the traffic steering device through a policy-based routing technology and through a physical circuit connecting the first router and the traffic steering device, and then sends the packet To the user's sender. The packet-oriented method of claim 2, wherein after the step (4), the step of connecting the second egress node to the traffic steering device by a physical circuit is included; and the step (5) The second router transmits the packet to the traffic steering device through a strategic routing technology and through a physical circuit connecting the second router and the traffic steering device, and then sends the packet to the network to send end. The packet-oriented method of claim 1 or 2, wherein the step (2) includes: causing the first router in the first egress node to identify the receiving end by the receiving end The receiving end of the packet is a step of identifying the identifier of the first router; and in the step (4), the network sending end directs the packet to the identifier according to the identifier marked by the first router on the packet The first router. The packet-oriented method of claim 1 or 2, wherein the step (3) includes: causing the traffic steering device to identify the receiving end of the packet sent by the receiving client by the packet guiding device The step of identifying the identifier of the first router; and in the step (4), the network sending end directs the packet to the first router according to the identifier marked by the traffic steering device on the packet. The packet-oriented method of claim 2, wherein the step (5) includes: causing the second router in the second egress node to identify the packet sent by the receiving network The receiving end is a step of the identification code of the second router; and in the step (7), the user sending end directs the packet to the second according to the identifier marked by the second router on the packet router. The packet-oriented method of claim 2, wherein the step (6) includes: receiving, by the traffic steering device, the packet marking identifier for identifying a receiving end of the packet sent by the receiving network The identification code of the second router; and in the step (7), the user sending end directs the packet to the second router according to the identification code marked on the packet by the network sending end. The packet-oriented method of claim 2, wherein the service device for processing the packet in the step (6) is the same as the service device described in the step (3). A packet-oriented method is applied to a system architecture having at least a first egress node, a traffic steering device, and a plurality of service devices, where the first egress node has at least one first router, and the traffic steering device is The first router and the plurality of service devices are connected, and the packet guiding method includes the following steps: (1) setting at least one set of user sending end and network sending end in the traffic guiding device, and in the service The guiding device sets a plurality of connection manners of the service devices connected to the traffic guiding device; (2) when the first egress node receives the packet sent from the network end, the first egress node is configured to be in the first egress node The first router sends the packet to the network sending end in the traffic steering device; (3) when the network sending end receives the packet sent from the first router, the traffic guiding device is configured according to the setting Connecting the packet to the service device connected to the traffic steering device to process the packet by the service device, and causing the service device to send the packet after processing And (4) when the user sending end receives the packet sent by the service device, causing the user sending end to direct the packet to the first router, so that the first router sends the packet To the client. The packet-oriented method of claim 11, wherein the system architecture further includes a second egress node, the second egress node having at least one second router, and the second router is associated with the traffic steering device The connection, before performing the step (2), further includes the following steps: (2-1) when the second egress node receives the packet sent from the UE, causing the second router in the second egress node to The packet is sent to the user sending end in the traffic steering device; (2-2) when the sending end of the user receives the packet sent from the second router, the traffic guiding device is configured according to the set connection mode. The packet is directed to a service device connected to the traffic steering device to process the packet by the service device, and the device is sent to the network sending end after processing; and (2) -3) when the sending end of the network receives the packet sent by the service device, causing the network sending end to direct the packet to the second router, so that the second router sends the packet to the network end . The packet-oriented method of claim 11, wherein the method for setting a plurality of service devices connected to the traffic steering device in the traffic steering device is as described in the step (1). Referring to the processing mechanism with load balancing and enabling the two-way packet to pass through the same service device, a virtual channel is correspondingly connected to be connected. The packet-oriented method of claim 11, wherein before the step (2), the step of connecting the first router to the traffic steering device by a physical circuit is included; and in the step (2) The first router sends the packet to the traffic steering device through a strategic routing technology and through a physical circuit connecting the first router and the traffic steering device, and then sends the packet to the network sending end. . The packet-oriented method of claim 12, wherein before the step (2-1), the step of connecting the second router to the traffic steering device by a physical circuit is included; and the step (2) The second router in the -1) sends the packet to the traffic steering device through a strategic routing technology and through a physical circuit connecting the second router and the traffic steering device, and then sends the packet to the User sender. The packet-oriented method of claim 11, wherein the step (2) includes: causing the first router in the first egress node to identify the packet sending end as the first router The step of identifying the code; and in the step (4), the user sending end directs the packet to the first router according to the identification code marked by the first router on the packet. The packet-oriented method of claim 11, wherein the step (3) includes the receiving end of the packet guiding device for identifying the packet sent by the receiving client as the first a step of identifying the identifier of the router; and in the step (4), the user sending end directs the packet to the first router according to the identifier marked by the traffic steering device on the packet. The packet-oriented method of claim 12, wherein in the step (2-1), the second router in the second egress node is configured to identify the receiving network to send out The receiving end of the packet is a step of the identification code of the second router; and in the step (2-3), the network sending end is based on the identifier marked by the second router on the packet, The packet is directed to the second router. The packet-oriented method of claim 12, wherein the step (2-2) includes: causing the traffic steering device to mark the packet to identify the receiving end of the packet sent by the receiving client a step of identifying the identifier of the second router; and in the step (2-3), the network sending end directs the packet to the first identifier according to the identifier marked by the traffic steering device on the packet Two routers. The packet-oriented method of claim 12, wherein the service device for processing the packet in the step (2-2) is the same as the service device described in the step (3) .