WO2010006520A1

WO2010006520A1 - Method and device for two-layer intercommunication of data stream

Info

Publication number: WO2010006520A1
Application number: PCT/CN2009/070894
Authority: WO
Inventors: 李晋
Original assignee: 华为技术有限公司
Priority date: 2008-07-15
Filing date: 2009-03-19
Publication date: 2010-01-21
Also published as: CN101631135A

Abstract

A method and a device for two-layer intercommunication of data stream are provided. The method includes the steps of: extracting the characteristic information of data stream (S201); determining the control point of the data stream (S202); and establishing the feature identifier and the control rule of the data stream on the control point based on the characteristic information of the data stream (S203), in order to realize two-layer intercommunication for the data stream on the basis of the feature identifier and the control rule. The present invention realizes to identify the data streams and implement two-layer intercommunication of the data streams that are in the same subnets or in the different subnets, and reduces the load of network, and improves the transmission efficiency of network.

Description

Method and apparatus for data stream two-layer intercommunication The present application claims to be filed on July 15, 2008 in the Chinese Patent Office, the application number is 200810132434.1, and the invention name is "a method and device for data stream two-layer interworking" Priority is hereby incorporated by reference in its entirety. Technical field

The present invention relates to the field of data communications, and in particular, to a method and apparatus for data layer two-layer interworking. Background technique

FIG. 1 is a schematic structural diagram of a prior art access network architecture. As shown in Figure 1, the existing access network architecture consists of three parts: a broadband gateway, an aggregation network, and an access network. Layer 2 is isolated between all users on the access network. Even if communication is between two users under the same gateway, traffic must pass through the gateway. With the continuous growth of users and the emergence of peer-to-peer (P2P) services, the existing access network architecture leads to excessive traffic passing through the gateway and becomes a bottleneck in the network.

In the prior art, a scheme for implementing Layer 2 interworking by establishing a P2P virtual local area network (VLAN) is as follows: First, a dedicated P2P VLAN needs to be newly created in the access network, and all accesses are required. A node (Access Node, hereinafter referred to as AN) and a P2P VLAN are created on the aggregation point device to implement Layer 2 interworking through P2P VLANs. Address Resolution Protocol (Address Resolution Protocol) is added to all access nodes. ARP) proxy function, the ARP proxy function on the access node includes three modules: upstream ARP proxy (upstream ARP proxy), downstream ARP proxy (downstream ARP proxy) and ARP cache (ARP Cache); The judgment function is added to determine whether the P2P service is enabled by the user directly connected to it.

During the research, the inventor found that the above-mentioned prior art only judges whether the P2P service is enabled on the access node device, and cannot determine which P2P service is in the end, and the accuracy of the discrimination is greatly limited. On the other hand, the solution can only implement Layer 2 interworking in the same IP subnet, and the application scope is affected. It has reached a lot of limitations. Summary of the invention

The problem to be solved by the embodiments of the present invention is to provide a method and apparatus for data layer two-layer interworking, which realizes identification and Layer 2 interworking of data streams in the same or different subnets.

To achieve the above objective, an embodiment of the present invention provides a method for data layer two-layer interworking, including:

Extract the feature letter of the data stream, ;

Determining a control point of the data stream;

And establishing a feature identifier and a control rule of the data stream according to the feature information of the data stream, to implement Layer 2 interworking for the data flow according to the feature identifier and the control rule.

On the other hand, an embodiment of the present invention further provides a network unit, including: a parameter extraction module, configured to extract feature information of a data stream;

a control point selection module, configured to determine a control point of the data stream;

And a rule establishing module, configured to establish, according to the feature information extracted by the parameter extraction module, a feature identifier and a control rule of the data stream on a control point determined by the control point selection module.

On the other hand, an embodiment of the present invention further provides a control point, including:

a rule receiving module, configured to receive a feature identifier and a control rule for the data stream; a traffic matching module, configured to match, according to the feature identifier received by the rule receiving module, a corresponding data stream;

And a flow operation module, configured to operate the data flow message according to a control rule received by the rule receiving module.

The technical solution of the embodiment of the present invention has the following advantages, because the extraction feature information is selected, the control point is selected, the data flow message is identified and modified, and the second layer interworking method is established, thereby realizing the data in the same or different subnets. The identification of the flow and the interworking of the second layer achieve the effect of reducing the network load, improving the network transmission efficiency, and improving the user experience. DRAWINGS

1 is a schematic structural diagram of a prior art access network architecture; 2 is a schematic flowchart of a method for interworking two-layer data flows according to an embodiment of the present invention; FIG. 3 is a schematic diagram of control points in a tree network structure according to an embodiment of the present invention;

4 is a schematic flowchart of establishing a Layer 2 path of a data flow service according to an embodiment of the present invention; FIG. 5 is a schematic diagram of a process of forwarding a ^ text in a different VLAN of a communication party according to an embodiment of the present invention;

6 is a schematic diagram of a process of forwarding a ^ text in a case where two communicating parties are in the same VLAN according to an embodiment of the present invention;

FIG. 7 is a schematic structural diagram of a network unit according to an embodiment of the present invention;

FIG. 8 is a schematic structural diagram of a control point according to an embodiment of the present invention. detailed description

The present invention will be further described in detail below by way of specific embodiments and drawings.

In most of the existing access network solutions, traffic in different VLANs or on different IP subnets needs to be forwarded through the network access server, which has a great impact on the network access server. On the other hand, some existing technologies implement Layer 2 interworking between users, but cannot subdivide services. Users are also required to be in the same IP subnet. Users of different subnets still need to communicate with each other through the network access server. .

The solution proposed by the invention does not affect the existing services, and the communication between them still passes through the gateway, and the gateway implements the service control and management functions. However, a dedicated Layer 2 path is created for some P2P services that occupy a high bandwidth, so that traffic of these services does not pass through the gateway, reducing the burden on the gateway and not affecting other original services.

As shown in FIG. 2, it is a schematic flowchart of a method for interworking two-layer data flows in an embodiment of the present invention, including:

Step S201: The network access server extracts feature information of the data stream.

When the network access server considers that a certain data stream between two users does not need to be forwarded through the network access server, the data stream is obtained by reading the packet in the data stream and extracting the feature information of the packet. Characteristic information.

Step S202: Determine a control point of the data stream.

The control point is a concept proposed by the embodiment of the present invention, and the specific content is as follows: The existing network structure includes a tree, a ring, and a fully connected structure. In either structure, there may be many paths for the user node to reach the network access server. Suppose there are two users A and B. There are at least one intersection between the various possible paths from A to the network access server and the various possible paths from B to the network access server. When there is only one intersection, this intersection That is, the control points proposed in the embodiments of the present invention.

When there are multiple intersections, the determination of the control points may be based on at least one of the following rules or a combination thereof:

1. The intersection has the smallest hop count from the source user (ie, user A) and the destination user (ie, user B);

2. According to a certain preset rule, one of the intersections with the smallest number of hops matching the preset rule is selected as the control point.

Such a rule may be to select the closest intersection point of the source user (ie, user A) as the control point, or select the intersection point closest to the destination user (ie, user B) as the control point, or select the focus with strong processing capability as the control point. Control points, etc. In extreme cases, the control point between the two users is the network access server. At this point, it can be considered that the two users do not have the need for Layer 2 interworking.

In an ideal situation, there is another intersection point between the user A and the user B except the network access server, and the optimal control point can be determined according to the network topology and the physical location of the intersection point and its performance, and the control point is performed at the control point. Layer interworking.

FIG. 3 is a schematic diagram of control points in a tree network structure according to an embodiment of the present invention. As shown in FIG. 3, an embodiment of the present invention provides an example of determining a control point in a tree network structure. Path 1 represents a possible path for the user 1 to connect to the network access server, and path 2 represents a possible path for the user 4 to connect with the network access server. There are two intersections between the two paths, that is, the network device X and the network access server. It becomes a control point, but since it is only necessary to select an optimal intersection point as a control point in the network, it is necessary to select the optimal intersection point as the control point according to the above-mentioned preset rule. Since the network device X is closer to the user 1 and the user 4 than the network access server, the connection point closest to the source user is selected as the preset rule of the control point according to the above selection, or the intersection point of the user closest to the destination is selected as the control point. The default rule is that the network device X is more suitable as a control point than the network access server. Therefore, if the hardware condition of the network device X itself can support the implementation of the second layer interworking, Then, the network device X is selected as the control point.

However, it should be further pointed out that if the network device X does not have the hardware condition for implementing the layer 2 interworking, then even if the network device X is closer to the source user or the destination user than the network access server, the network device X cannot be selected as the network device X. For the control point, a network access server with Layer 2 interworking capability should be selected as the control point.

Step S203: Establish a feature identifier and a control rule of the data stream at the control point according to the feature information. According to the feature information extracted in step S201, a feature identifier is established on the control point, and a matching condition of the data stream is determined, so that the control point identifies the corresponding data stream according to the feature identifier.

It should be further noted that the feature identifier described in the embodiment of the present invention may be key information of the data stream extracted according to the data stream feature information, such as: a source address and a port number, a destination address, and a port number, etc. The message is distinguished from the information of other messages; it may also be a feature description generated according to the feature information of the data stream, which describes the characteristics of the destination data stream, and/or the difference from other data streams. The above differences in feature identification content do not affect the scope of protection of the present invention.

On the other hand, the control rules are used to specify rules for adjusting the data flow that satisfies the matching condition. Step S204: The control point determines whether the received data stream matches the feature identifier.

If the matching is successful, it indicates that the data stream is a data flow that is determined by the network access server and needs to establish Layer 2 interworking, and the process proceeds to step S205;

If the match is unsuccessful, it indicates that the data flow is not a data flow that is determined by the network access server and needs to establish Layer 2 interworking, and the data flow is still forwarded according to the original path through the network access server.

Step S205: The control point adjusts the data flow that needs to establish Layer 2 interworking according to the control rule.

When the communication parties that need to establish the Layer 2 interworking data stream are located in the same VLAN, the adjustment of the data stream includes modifying the source media access control (Media Access Control, hereinafter referred to as MAC address) and tampering the destination MAC address;

When the communication parties of the data stream are located in different virtual local area network VLANs, the adjustment of the data stream includes modifying the source MAC address and modifying the destination MAC address, and modifying the VLAN identification field to implement communication between different subnets. You can communicate according to the communication rules under the same subnet. Step S206: The data stream performs Layer 2 interworking through the control point.

The data streams identified by the above steps are no longer communicated through the network access server, but are directly connected to each other through the control point.

Further, the foregoing steps are as shown in FIG. 4, which are schematic flowcharts of establishing a Layer 2 path of a data flow service according to an embodiment of the present invention, including:

Step S401: The network access server extracts feature information of a data stream formed by a session between the user 1 and the user 2.

When the user 1 wants to perform the transmission of the specific service with the user 2, the session connection of the service is established between the user 1 and the user 2. Before the Layer 2 channel is established, all traffic of User 1 and User 2 needs to be transited through the network access server. The network access server analyzes the session between user 1 and user 2 to obtain the feature information formed by the session.

Step S402, determining control points of the user 1 and the user 2.

The network access server determines the control points of the user 1 and the user 2 according to the known network topology. The method for determining the control points is similar to the foregoing steps S202 to S203, and details are not described herein again. The network access server notifies the control point of the feature identifier of the data stream and the corresponding control rule.

Step S403: Adjust a data flow of the session by using a control point to implement Layer 2 interworking.

When the control point receives the packet, the feature identifier is used to match the packet feature information in the data stream. If the match is successful, the control point modifies and forwards the packet according to the operation rule.

The specific embodiments of the present invention are further described in detail below with reference to the accompanying drawings and embodiments. For the convenience of description, the P2P service is taken as an example for the description of the present invention, but other services can also be specified by the technical solution of the present invention. Identification and Layer 2 interworking, the difference in service does not affect the scope of protection of the present invention.

As shown in FIG. 5, it is a schematic diagram of a packet forwarding process when the two communication parties are in different VLANs according to the embodiment of the present invention, including:

User 1 (VLAN1) and User 2 (VLAN2) belonging to different VLANs communicate. User 1 sends a setup P2P session request message to User 2, which passes through the network access server. The network access server extracts the feature information from the message of the request message, so as to determine the feature identifier of the data stream corresponding to the request information according to the feature information, and further, in the intersection between the user 1 and the user 2, according to The preset rule selects the optimal intersection as the control point. Established at the control point Matching conditions (source IP, source port number, destination IP address, destination port number, service type) and corresponding data packet operation rules (modify the source MAC address as the MAC address of the network access server, and modify the destination MAC address as user 2) MAC, change the VLAN tag from VLAN1 to VLAN2) to establish a Layer 2 channel.

Step S501: The user 1 sends a data packet to the access node 1.

The request message includes: a source MAC address (ie, the address of user 1) and a destination MAC address (ie, the address of the network access server).

Step S502: The access node 1 adds a VLAN identifier field VLAN1 to the data packet, and sends the packet to the control point.

Step S503: The control point adjusts the data packet according to the preset data packet operation rule, and sends the data packet to the access node 2.

If the control point determines that the data packet sent by the access node 1 matches the matching condition in the feature identifier, then the data stream is determined to be the target P2P data stream, and the data packet is operated according to the data packet established in the control point in advance. The rule adjusts the packet: Change the VLAN ID field to VLAN 2, adjust the source MAC address to the network access server, and adjust the destination MAC address to user 2. This allows users 1 on the two subnets to send to the network access server. The P2P data stream of User 2 is converted into a P2P data stream located on the same subnet without going through the network access server.

Step S504: The access node 2 forwards the adjusted data packet to the user 2 to implement Layer 2 interworking. FIG. 6 is a schematic diagram of a packet forwarding process when the two communication parties are in the same VLAN according to the embodiment of the present invention, including:

User 1 and user 2 belonging to the same VLAN communicate. The user 1 sends a request message to the user 2 to establish a P2P session, and the request message passes through the network access server. The network access server extracts the feature information of the data stream corresponding to the request message from the request message, and determines the control points of the user 1 and the user 2. Set the packet matching conditions (source IP, source port number, destination IP address, destination port number, service type) and corresponding data packet operation rules at the control point. Modify the source MAC address as the MAC address of the network access server and modify the destination MAC address. For user 2's MAC), to establish a Layer 2 channel.

Step S601: The user 1 sends a data packet to the access node 1.

The data packet includes: a source MAC address, that is, an address of the user 1, and a destination MAC address, that is, an address of the network access server. Step S602: The access node 1 forwards the data packet to the control point.

Step S603: The control point adjusts the data packet according to the preset data packet operation rule, and sends the data packet to the access node 2.

The control point determines that the packet sent by the access node 1 matches the matching condition in the feature identifier, determines that the data stream is the target P2P data stream, and determines the datagram according to the data packet operation rule established in the control point in advance. The text is adjusted: the source MAC address is adjusted to the network access server, and the destination MAC address is adjusted to user 2, thereby realizing that the P2P data stream sent by user 1 to the user 2 through the network access server is converted into a network access server without going through the network access server. P2P data stream.

Step S604: The access node 2 forwards the adjusted packet to the user 2 to implement Layer 2 interworking. As shown in FIG. 7, a schematic structural diagram of a network unit according to an embodiment of the present invention includes: a parameter extraction module 1 configured to extract feature information of a data stream;

a control point selection module 2 for determining a control point of the data stream;

The rule establishing module 3 is configured to establish, according to the feature information extracted by the parameter extraction module 1, the feature identifier and the control rule of the data stream on the control point determined by the control point selection module 2.

Wherein, the control point selection module 2 includes:

a rule setting sub-module 21, configured to preset a rule for selecting a control point;

The control point selection sub-module 22, the user selects the control point of the data flow according to the rule of the rule selection sub-module 21 preset selection control point.

The rule establishing module 3 includes:

a feature identifier establishing sub-module 31, configured to establish a feature identifier of the data stream according to the feature information extracted by the parameter extraction module 1;

The control rule establishing sub-module 32 is configured to determine a control rule for the data flow that meets the feature identifier established by the feature identifier establishing sub-module 31.

As shown in FIG. 8, a schematic structural diagram of a control point according to an embodiment of the present invention includes: a rule receiving module 1 configured to receive a feature identifier and a control rule about a data flow sent by a network device;

The traffic matching module 2 is configured to match the corresponding data stream according to the feature identifier received by the rule receiving module 1;

The traffic operation module 3 is configured to import data according to a control rule received by the rule receiving module 1 Line operations, such as modifying the message content and identity of the data stream.

The technical solution of the embodiment of the present invention has the following advantages, because the extraction feature information is selected, the control point is selected, the data flow message is identified and modified, and the second layer interworking method is established, thereby realizing the data in the same or different subnets. The identification of the flow and the interworking of the second layer achieve the effect of reducing the network load, improving the network transmission efficiency, and improving the user experience.

Through the description of the above embodiments, those skilled in the art can clearly understand that the present invention can be implemented by hardware, or can be implemented by means of software plus a necessary general hardware platform. Based on such understanding, the technical solution of the present invention may be embodied in the form of a software product, which may be stored in a non-volatile storage medium (which may be a CD-ROM, a USB flash drive, a mobile hard disk, etc.), including several The instructions are for causing a computer device (which may be a personal computer, server, or network device, etc.) to perform the methods described in various embodiments of the present invention.

It should be noted that the above embodiments are only for explaining the technical solutions of the present invention, and are not intended to be limiting; although the present invention has been described in detail with reference to the foregoing embodiments, it will be understood by those skilled in the art that: The technical solutions described in the foregoing embodiments are modified, or some of the technical features are equivalently replaced. The modifications and substitutions do not depart from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

Rights request

A method for interworking two-layer data streams, which is characterized by:

Extract the feature letter of the data stream, ;

Determining a control point of the data stream;

2. The method of the data stream layer 2 interworking according to claim 1, wherein the extracting the feature information of the data stream is specifically:

Extracting feature information in the message of the data stream.

The method of the data stream two-layer interworking according to claim 1, wherein the determining, by the control point, the feature identifier of the data stream according to the feature information of the data stream, specifically: A feature identifier of the message matching condition indicating the data flow established by the feature information.

The method of the data stream two-layer interworking according to claim 1, wherein the control rule of the data flow is established according to the feature information of the data flow at the control point, specifically: establishing a match The message matches the operation rule of the message of the conditional data stream.

The method for interworking the second layer of the data stream according to claim 3 or 4, wherein the layer 2 is interconnected according to the feature identifier and the control rule, specifically:

And the control point matches the corresponding data flow message according to the feature identifier of the data flow; and operates the data flow message according to the control rule.

The method for determining the data stream two-layer interworking according to claim 1, wherein the determining the control point of the data stream is: determining a control point of the data stream according to a preset rule.

7. A network element, comprising:

a parameter extraction module, configured to extract feature information of the data stream;

The network unit according to claim 7, wherein the control point selection module comprises:

a rule setting submodule, configured to preset a rule for selecting the control point; The control point selects a sub-module, and the user selects a control point of the data flow according to the rule of the rule that the sub-module presets the selected control point.

The network unit according to claim 7, wherein the rule establishing module comprises: a feature identifier establishing submodule, configured to establish a feature identifier of the data stream according to the feature information extracted by the parameter extracting module;

And a control rule establishing submodule, configured to determine a control rule for the data flow that meets the feature identifier established by the feature identifier establishing submodule.

10. A control point, comprising: