WO2011060718A1

WO2011060718A1 - Method and apparatus for detecting effectiveness of local domain active source

Info

Publication number: WO2011060718A1
Application number: PCT/CN2010/078819
Authority: WO
Inventors: 方昌奇; 尹邢飞; 魏明慧
Original assignee: 中兴通讯股份有限公司
Priority date: 2009-11-18
Filing date: 2010-11-17
Publication date: 2011-05-26
Also published as: CN101729311A; CN101729311B

Abstract

A method and apparatus for detecting effectiveness of a local domain active source are provided. The method comprises: a Rendezvous Point (RP) detecting effectiveness of an active source node in the local domain; adding an active source mark to the active source node passing the effectiveness detecting, and setting the mark time stamp to the current time; the RP updating the mark time stamp of the active source node passing the effectiveness detecting, and setting the updated mark time stamp to the current time; and the RP checking the active source mark periodically, determining whether the time interval between the current time and the mark time stamp of the active source node exceeds the given effective time of the active source, and if yes, deleting the active source mark of the active source node. The scheme ensures the safety of the broadcast network.

Description

Method and device for detecting validity of activity source in local domain

Technical field

The present invention relates to the field of data network communication, and in particular, to a method and apparatus for detecting the validity of a local activity source.

Background technique

Currently, PIM (Protocol Independent Multicast-Sparse Mode) is a recognized standard for intra-domain multicast. With the development of multicast services, more users need to use IP multicast services. In the common networking mode, PIM-SM/MBGP (Multiprotocol Border Gateway Protocol) is often used to extend the inter-domain ISP (Internet Service Provider) network boundary. , Multi-Protocol Border Gateway Protocol/MSDP (Multicast Source Discovery Protocol) combined solution, which allows PIM-SM throughout the network, and MBGP to propagate multicast topology information between domains, which is propagated by MSDP Multicast source information.

When there are multiple PIM domains in the network, the MSDP session router can enable the RP (endezvous point) in each PIM domain to share the active source information and pass the local active source information to the remote RP. The RP of the RP knows the information of the active source. The remote RP can create the SPT (Short Path Tree) tree to forward the multicast data according to whether there is a receiver in the remote domain. Therefore, the multicast data is forwarded. It can be forwarded between domains.

In the multicast domain, the active source determines that the current mechanism is discovered by the RP of the PIM-SM, and is forwarded to the MSDP session router in the local domain to generate the corresponding source SA (Source Active, source valid) information to be transmitted to the remote, multicast discovery. The general path of the active source is based on the RP receiving the registration message. The registration status of the PIM-SM protocol is generally maintained by the first hop DR (Designated Router). The RP itself does not maintain the registration state machine of the multicast route. The RP receives the registration message and decides whether to respond to the registration stop according to the current networking and receiving status. When the registration message is received, the activity source can be found and the source information is transmitted to the MSDP session router to notify the other. Domain, but neither PIM-SM nor MSDP currently have a valid mechanism to detect whether the active source that has been discovered continues to be this The activity source in the domain, or the redistribution of the multicast domain occurs in the middle, and the source multicast domain ownership changes, which is no longer the activity source of the domain. At this time, the activity source previously discovered in the domain is generated. The SA information will continue to propagate before the MSDP session router, and the RP of the source new multicast domain will also discover the source and generate new SA information to propagate between the MSDP session routers, which will result in the MSDP session router. Many invalid discovery sources are advertised between.

For the defects of the current multicast activity source determination mode in some common application environments, the activity source of the domain is not found. The following is an example of FIG. 1 to FIG. 4:

In the figures, related concepts and abbreviations involved in activity source tag detection:

S i is used to represent the i th source node;

P MSDP session router;

RP RP router

Reci i-recipient

AS i i-th PIM domain

SAiRPi SAi is the SA information created for the i-th activity source. The RPi is the RP network structure for discovering this source. As shown in Figure 1, there are three PIM domains in the network, AS 1, AS, and AS3, where R3, R4, and R7 are respectively The RPs of these three domains are also the session routers of the MSDP protocols of the three domains. There is one source S1 in AS2, R2 in AS1 and R5 in AS2 respectively have Reel Rec2 of the source.

When the SI starts to send traffic, S1 registers with RP2, RP2 discovers source S1, and notifies P2 that a new active source is found. P2 propagates the SAI of the source S1 to the session routers PI and P3 that establish MSDP neighbors with him respectively. P1 and P3 receive this SA1 and find Sl.

2 is a schematic diagram of establishing a shortest path tree SPT in the prior art. When an RP in AS1 and AS2 finds that a group member in the domain joins the group, it sends an SG to the S1 direction in AS2 to establish an SPT. Traffic forwarding is shown in Figure 3.

If the multicast domain is reassigned at this time, as shown in Figure 4, R6 is assigned to AS3. At this time, S1 is no longer registered with RP2 of AS2, and is changed to RP3 of AS3. At this time, RP3 is found. A new source S1 is found in the AS3 domain, and is advertised to P1 of AS1 and P2 of AS2, and P2 of AS2 has already discovered S1. At this time, P1 will receive two active sources from P2 and P3. The SA1 announcement, at this time, the SA1 of P2 is no longer the active source of the AS2 domain, and P2 cannot detect the change of this domain, and the RP does not maintain the registration state machine, so the domain of the source is not known. If the attribution has changed, it will continue to notify P1 and P3 to discover the activity source S1. P3 will receive the SA1 notification from the P2, and it will consider that there is an active source of S1 in the AS2 domain. At the same time, the local AS3 also has this activity source, P2. It is also considered that the active source S1 exists in both the AS2 domain and the AS3 domain. Therefore, the re-segmentation of this domain will result in a redundant SA message in each AS domain, which will cause SA spoofing in the network. Safety poses a hidden danger.

Summary of the invention

The invention provides a method and a device for detecting the validity of the activity source of the local domain, and solves the change of the attribution of the activity source of the local domain caused by the change of the multicast domain or other reasons in the actual networking, or the activity source is no longer an effective activity. In the case of a source, the local aggregation point cannot be detected, causing an invalid activity source notification.

In order to solve the above technical problem, the present invention provides a method for detecting the validity of a local activity source, including:

The aggregation point (RP) performs validity detection on the active source node in the domain, adds an activity source tag to the activity source node that is detected by the validity, and sets the tag timestamp to the current time;

The RP updates the tag timestamp of the active source node that is detected by the validity, and sets the updated tag timestamp to the current time;

The RP periodically checks the activity source tag, and for the source node marked with the activity source tag, determines whether the interval between the tag timestamp of the active source node and the current time exceeds the set active source effective time, and if so, Delete the active source tag for the active source node.

The method may further include: the RP adding the active source node to the multicast source discovery protocol (MSDP) session router report when adding the active source tag to an active source node; and deleting the active source tag of the active source node by the RP When the MSDP session router reports to delete the active source node. The step of detecting the validity of the active source node in the local area by the convergence point (RP) may include: using an activity source determination mechanism of the registration message and/or an activity source determination mechanism directly connected to the source traffic for validity detection.

The step of verifying the validity of the active source judging mechanism using the direct source source traffic may include: When the internal RP receives the data traffic from the multicast source node, it checks whether the multicast source node is directly connected to the RP, and whether the RP is the designated router on the shared network segment where the RP and the source node are located. If the RP is not a DR on the shared network segment or the source node is not directly connected to the RP, the active source determines to fail, and the process ends; if the RP is a DR on the shared network segment and the source node and the RP Directly connecting, determining that the validity of the multicast source node is detected, continuing to check whether the multicast source node is a newly discovered active source node, and whether an activity source tag is added; adding an activity to the active source node by validity detection The source tag, and setting the tag timestamp to the current time may include: for the newly discovered activity source node, recording and saving the newly discovered activity source node, adding an activity source tag to the newly discovered activity source node, and setting Mark the timestamp as the current time; for the non-newly discovered active source node without the active source tag, add the active source tag, set the timestamp of the active source tag to the current time The step of updating the tag timestamp of the active source node by validity detection and setting the updated tag timestamp to the current time may include: updating the tag for the active source node of the non-newly discovered added activity source tag The timestamp is the current time.

The step of performing the validity check by using the activity source determining mechanism of the registration message may include: checking, by the RP in the local area, the registration message when the source node receives the registration message sent by the first hop DR; If the registration message is not registered with the RP, it will not be processed, and will wait for the next registration message. For the registration registered to the RP, the source node that sent the registration will pass the validity check, and Checking whether the active source node that sent the registration message is the newly discovered activity source node and whether the activity source tag is added; adding the activity source tag to the activity source node that passes the validity detection, and setting the tag timestamp to the current time The step may include: recording, for the newly discovered activity source node, the newly discovered activity source node and saving, adding an activity source tag to the newly discovered activity source node, setting a tag timestamp to a current time; for non-new discovery The active source node of the activity source tag is not added, the activity source tag is added, and the tag timestamp is set to the current time; The step of updating the tag timestamp of the active source node of the validity check, and setting the updated tag timestamp to the current time may include: updating the tag timestamp for the active source node of the non-newly discovered added active source tag current time.

During the period in which the RP checks the active source tag: when the active source node marked with the active source tag is directly connected to the RP and the RP is a DR on the shared network segment where the RP and the active source node are located, check Whether the active source node has traffic forwarding during the period, if it exists, the activity can be After the tag timestamp of the source node is updated to the current time, the active source validity time is checked. If there is no traffic forwarding, the tag timestamp of the active source node may not be updated, and the active source effective time is directly checked; If the active source node marked with the active source tag is not directly connected to the RP or the RP and the RP on the shared network segment where the active source node is located are not DR, the active source validity time can be directly checked.

The present invention also provides a device for detecting the validity of the activity source of the local domain, including: a determination module, a configuration maintenance module, an inspection module, and a deletion module, where

The determining module is configured to perform validity detection on the active source node in the domain, and notify the configuration maintenance module after the detection is passed;

The configuration maintenance module is configured to: add an activity source tag to the detected active source node and set the tag timestamp to the current time; and, update the tag timestamp of the detected active source node, and set the updated tag The timestamp is the current time;

The checking module is configured to periodically check the activity source tag in the configuration maintenance module, and notify the activity source node whose tag timestamp and the current time interval exceed the set active source validity time to notify the deleting module;

The deleting module is configured to delete, according to the notification of the checking module, an activity source mark of the active source node whose mark timestamp and the current time interval exceed the active time of the active source.

The determining module can be configured to perform validity check on the activity node by: checking whether the multicast source node sending the data traffic is directly connected to the device, and the device is on the shared network segment where the device and the multicast source node are located. Whether it is a designated router (DR); when the device is not a DR on the shared network segment or the multicast source node is not directly connected to the device, it is determined that the validity detection of the active source node fails; when the device is on the shared network segment When the DR is the DR and the multicast source node is directly connected to the device, it is determined that the validity of the multicast source node is detected, and it is checked whether the multicast source node is a newly discovered active source node and whether an active source tag is added. And notifying the configuration maintenance module; the configuration maintenance module may be configured to add an activity source tag to the active source node that passes the validity detection, set the tag timestamp to the current time, and update the tag timestamp: for the new discovery Activity source node, record the newly discovered activity source node and save, add activity source to the newly discovered activity source node Remember to set the timestamp of the active source tag to the current time and report a new active source node to the MSDP session router of the domain; for the non-newly discovered added active source tag Activity source node, update the activity source tag timestamp to the current time; for the non-newly discovered activity source node that has not added the activity source tag, add the activity source tag, set the timestamp of the activity source tag to the current time, and go to the domain The MSDP Session Router reports a new active source node.

The determining module may be further configured to perform the validity check by: checking the received registration message sent by the active source node by using the first hop DR; if the registration message is the registration message registered with the device And determining, by the validity source of the active source node that sends the registration message, whether the active source node that sends the registration message is the newly discovered activity source node, and whether the activity source tag is added, and the check result is Notify the configuration maintenance module.

The determining module may be further configured to: when the checking module checks the active source mark in the configuration maintenance module, when the active source node marked with the active source mark is directly connected to the detecting device and is at the detecting device and the active source node If the detecting device on the shared network segment is a DR, check whether the active source node has traffic forwarding. If yes, notify the configuration maintenance module. The configuration maintenance module can also be configured to set the active source of the active source node according to the notification of the determining module. The tag timestamp is updated to the current time.

Advantageous technical effects of the present invention:

The activity source marking mechanism is used as the activity source determining mechanism in the domain, which makes up for the defects caused by the registration state machine of the current aggregation point RP relying on the registration document discovery activity source and the RP itself does not maintain the multicast routing, so that the multicast activity is caused. The source determination is more accurate, which makes up for the shortcomings between the PIM-SM protocol and the MSDP protocol, and avoids the active source SA spoofing caused by the invalid source information spreading in the network, which provides technical guarantee for the multicast network security.

BRIEF abstract

1 is a schematic diagram of an activity source announcement in the prior art;

2 is a schematic diagram of establishing a shortest path tree SPT in the prior art;

3 is a schematic diagram of traffic forwarding in the prior art;

4 is a schematic diagram of an invalid activity source advertisement caused by a multicast domain re-division in the prior art; FIG. 5 is a schematic diagram of an initial state of an existing domain in an embodiment of the present invention;

6 is a schematic diagram of an activity source announcement in an embodiment of the present invention; 7 is a schematic diagram of traffic forwarding in an embodiment of the present invention;

8 is a schematic diagram of a multicast domain re-division in an embodiment of the present invention;

9 is a schematic diagram of tag timestamp processing and activity source notification in an embodiment of the present invention; FIG. 10 is a schematic diagram of activity source detection in an embodiment of the present invention;

Figure 11 is a structural diagram of a detecting device in an embodiment of the present invention.

Preferred embodiment of the invention

The core of the present invention lies in: the aggregation point RP performs an activity source determination operation (validity detection) in the domain, adds an activity source tag to the discovered activity source node, and sets a tag timestamp to the current time, for the non-newly discovered active source node. , update the tag timestamp of its activity source tag to the current time;

The RP cycle checks the active source tag. For the source node marked with the active source tag, if the tag timestamp and the current time interval exceed the set active source valid time, the active source of the active source node is deleted.

The activity source tag detection mechanism is used to perform source discovery on the activity source of the domain, and the activity source tag of the domain is added with the activity source tag. The PIM reports the source information of the activity source tag to the MSDP session router, and sends the source information to the MSDP session router. The remote MSDP session router propagates. For the source information that has been added with the active source tag, the active source tag is updated periodically, and the active source that is no longer valid deletes the active source tag.

For the determination mechanism of the activity source in the domain, it can be divided into the registration message judgment and the direct connection multicast traffic judgment; when the RP receives the registration message of a source node, the RP considers that the source node is the active source; a node, and the RP is a DR on the shared network segment where the RP and the source node are located, and the traffic of the source node is being forwarded, that is, the source node is considered to be an active source; and the active source node is added to the active source node.

The invention is further illustrated by an embodiment below.

Step 100: The aggregation point RP performs an activity source determination operation in the domain, adds an activity source tag to the discovered activity source node, and sets a timestamp to the current time. For the non-newly discovered activity source node, update the activity source tag. i has timestamp as the current time; The action of adding an active source tag to the source node of the RP needs to add an activity report to the MSDP session router, such as SA information;

Step 200: The RP periodically performs activity source tag checking. For the source node marked with the active source tag, if the tag timestamp and the current time interval exceed the set active source valid time (it can be understood that the active source determining operation cannot find this again) The active source node reaches a certain number of times or durations, that is, the active source tag is deleted from the active source node;

The action of the RP to delete the active source tag from the source node requires a deletion report of the active source to the MSDP session router.

Specifically, for step 100, when the activity source determining mechanism of the registration message is used, the following steps are included:

Step 1001: The RP receives the registration text of the source node sent by the first hop DR.

After receiving the registration message, the RP needs to respond to the first hop DR with the registration stop message. After receiving the registration stop message of the RP, the RP periodically sends an empty registration message to the RP. Therefore, the present invention The registration message includes a registration message carrying data and an empty registration message without data. For the transmission rule of the registration message, refer to the PIM-SM protocol, which is not described in detail herein;

Step 1002: The RP checks the received registration message. If it is not the registration message registered to the RP, it does not process, and directly returns to step 1001 to wait for the next registration message; if it is registered Then, step 1003 is performed;

Step 1003, the RP checks whether the newly registered source node is the registered source message, if it is the newly discovered source node, go to step 1004; if not, go to step 1005;

In step 1004, for the newly discovered source node, record the current source node and save, and immediately add the active source tag, set the timestamp of the active source tag to the current time, and immediately report a new to the MSDP session router of the domain. Activity source node;

Step 1005: For a source node that is not newly discovered, check whether the source node is added with an active source tag. If the active source tag has been added, update the active source tag timestamp to the current time; if the active source tag is not added, add it immediately Activity source tag, set the timestamp of this activity source tag to the current time, report a new active source node to the MSDP session router of the domain.

Furthermore, in step 100, when the active source determination mechanism of the direct source flow is used, the following is included Steps:

Step 1011: The RP receives data traffic sent by a multicast source node.

Step 1012: The RP checks whether the multicast source node is a source node directly connected to the multicast source node, and whether the RP is a DR on the shared network segment where the current RP and the source node are located.

If the RP is not a DR on the shared network segment or the source node is not directly connected to the current RP, the active source of the source node fails to be determined, and the process ends; if the RP is a DR on the shared network segment and the source node and the current RP If the source node is valid, check whether the source node is a new one. If it is a newly discovered source node, go to step 1013. If not, go to step 1014. Step 1013, if it is a newly discovered source node. Record the current source node and save it, and immediately add the active source tag, set the timestamp of this active source tag to the current time, and immediately report a new active source node to the MSDP session router of the local domain;

Step 1014: For the source node that is not newly discovered, check whether the source node is added with the active source label. If the active source label has been added, update the active source label timestamp to the current time; if the active source label is not added, Add the active source tag immediately, set the timestamp of this active source tag to the current time, and report a new active source node to the MSDP session router of the domain.

For step 200, the following steps are specifically included:

Step 201, the RP periodically checks the activity source mark saved on the RP, and the general check cycle can be set to 60 seconds;

Step 203: If the RP detects that the active source node marked with the active source tag is directly connected to it and the RP is a DR on the current RP and the shared network segment where the source node is located, step 203 is performed; if the active source node is not If the RP is not directly connected to the RP, or the RP is not the DR on the shared network segment, step 204 is performed;

Step 203: Determine whether the active source node has traffic forwarding in the checking period. If the traffic is forwarding, update the active source tag timestamp to the current time, and perform step 204; if no traffic is forwarding, the tag timestamp is not updated. Perform step 204;

Step 204: Check whether the time difference between the tag timestamp and the current time set by the active source node last time exceeds 180 seconds.

Here, according to the provisions of the PIM-SM protocol, it can be known that the transmission period of the null registration message is one. The random value is about 55 seconds on average; therefore, the time difference threshold (active source effective time) in the present scheme can be set to 180 seconds, but the present invention is not limited thereto; the time difference threshold is mainly set in consideration of network conditions, There may be packet loss in the registration message;

If there is no more than 180 seconds, indicating that the active source node is valid, continue to check the next active source tag; if it exceeds 180 seconds, delete the active source tag of the active source node, and perform step 205; Step 205, the RP to the MSDP session The router advertises the deletion of the active source node, and the MSDP session router deletes the corresponding SA information of the active source node.

The invention will now be described by way of an application example with reference to Figures 5 to 10, including the following steps:

Step 1: There are two source nodes S1 and S2, wherein the source node S1 is in the AS2 domain and is registered with the aggregation point RP2; the source node S2, the routers R3 and R4 are on the shared network segment, and the network connected to the routers R3 and R4 R4 is the designated next hop router DR, so S2 belongs to the AS2 domain, as shown in Figure 5.

Step 2: When RP2 receives the registration message of S1, or receives the traffic of S2, it can be considered that the active source node S1 or S2 is found in the local domain AS2, and the active source label is set and saved for SI and S2, and the marking time is set. Poke the current time, and send the SA message (including: SA1, SA2 information) to the session routers P1 and P3 of the MSDP respectively, and find the active source node S1 or S2 as shown in FIG. 6;

Step 3: P1 and P3 receive the SA message of P2 (RP2), and find the active source nodes S1 and S2. The RP in the AS1 domain finds that it has a multicast group to join, and sends it to the source nodes S1 and S2 (S, G). Join the message, establish SPT, forward traffic, and finally forward traffic as shown in Figure 7.

Step 4: S1 sends an empty registration message to RP2 or periodically sends an empty registration message to RP2. The RP2 updates the saved activity of S1 every time it receives the registration message and the empty registration message of S1. The source tag timestamp is the time when the registration is received;

RP2 checks the timestamp of the active source tag of all source nodes every 60 seconds. If the RP2 is the DR on the shared network segment and the direct connection traffic of S2 is being forwarded, the timestamp of the update S2 is the current time; If the RP2 is not directly connected to the RP2 or the RP2 is not directly connected to the RP2, the detection timestamp is within 180 seconds of the current time. If yes, no processing is performed. Check the next tag; if not, delete the tag timestamp of the source node, and advertise P2 to delete the SA information of the source node;

Step 5: When the domain re-partition occurs or the DRs on the shared network segment of the R3 and R4 directly change, the R3 becomes the DR of the shared network segment, and the R4 is no longer the DR (the one shared network segment only has one DR); As shown in FIG. 8, the active source node S2 belongs to the AS1 domain, and the active source nodes S1 and R6 belong to the AS3 domain. Step 6: At this time, P1 and P3 respectively satisfy the active source determination condition, and P1 finds the active source node of the AS1 domain. S2, P3 discovers the active source node S1, and advertises the SA message to the MSDP session router P2, respectively, and P1 and P3 notify the SA information to each other (P1 sends SA2RP1 information to P2 and P3, and P3 sends SA1RP3 information to P2 and PI);

Since P2 no longer receives the registration message of S1 and does not satisfy the active source determination condition of the direct connection source traffic, the tag timestamp of the activity source S1 found in AS2 will not be updated again, and S2 is also in AS2. The condition of the registration source and the direct source traffic discovery activity source is not satisfied, so the mark time stamp of S2 is not updated in the 60 second mark check, as shown in FIG. 9;

Step 7: After 180 seconds, the active source tag check on R4 finds that the tag timestamps of the active source nodes S1 and S2 found in the AS2 domain have exceeded the current time by 180 seconds. It is no longer considered that S1 and S2 continue to be active source nodes of the domain. , delete the active source tag, and P2 ( R4 ) deletes the SA1RP2 and SA2RP2 found in the local domain, that is, the final state changes to PI, P2, and P3. The active source node S1 is found on AS3, and S2 is on AS1, as shown in FIG.

After the above processing, domain re-division in the network, or DR switching, etc. can be done to detect and update the activity source, which will not cause invalid source discovery information to propagate in the network, which makes up for the defects of the protocol in the application.

Referring to FIG. 11, the detecting apparatus of the present invention includes: a determining module 1, a configuration maintaining module 2, an checking module 3, and a deleting module 4, wherein

The determining module 1 is configured to perform an activity source determining operation in the local domain, and notify the configuration maintenance module 2 of the newly discovered active source node and the non-newly discovered active source node;

The configuration maintenance module 2 is configured to add an activity source tag to the newly discovered activity source node and set a tag timestamp to a current time, and update a tag timestamp of the activity source tag of the non-newly discovered activity source node to current time; The checking module 3 is configured to periodically check the active source tag maintained in the configuration maintenance module 2, and notify the deleting module 4 of the source node whose tag timestamp and the current time interval exceed the set active source effective time;

The deletion module 4 is arranged to delete the active source tag of the active source node that exceeds the active source validity time.

Specifically, when the active source determining mechanism that directly connects the source traffic is used, the determining module 1 is configured to: check whether the multicast source node that sends the data traffic is a source node directly connected thereto, and the RP and the source Whether the RP is a designated router (DR) on the shared network segment where the node is located; when the RP is not a DR on the shared network segment or the source node is not directly connected to the RP, the active source determines to fail; When the RP is a DR and the source node is directly connected to the RP, check whether the source node is a newly discovered active source node and whether an active source tag is added, and notify the configuration maintenance module 2; 2 Set to: For the newly discovered active source node, record the current source node and save it, and add the active source tag, set the timestamp of the active source tag to the current time, and report to the MSDP session router of the domain to find a New active source node; for non-newly discovered active source node with active source tag added, the update activity source tag timestamp is the current time; for non-new discoveries Add event source mark active source node, source tag added activities, provided the active source mark timestamp to the current time, and found a new active source node reports MSDP session router domain.

Specifically, when the activity source determining mechanism of the registration message is used, the determining module 1 is further configured to: check the registration message of the source node sent by the received first hop DR; and register with the RP for the RP Registering a message, checking whether the active source node that sent the registration message is a newly discovered activity source node, and whether an activity source tag is added, and notifying the configuration maintenance module 2;

The configuration maintenance module 2 is configured as a newly discovered active source node, records the current source node and saves, and adds an active source tag, sets the timestamp of the active source tag to the current time, and sends the MSDP session router to the local domain. The report finds a new active source node; for non-newly discovered active source nodes with active source tags added, the update activity source tag timestamp is the current time; for non-newly discovered active source nodes that have no active source tag added, add The activity source tag sets the timestamp of the active source tag to the current time, and discovers a new active source node to the MSDP session router of the domain. In addition, in the period in which the RP checks the active source mark, if the direct connection active source node generates traffic forwarding, the timestamp is also updated immediately, and then the effective time is checked.

The determining module 1 is further configured to check the work of the checking module 3 when the active source node is directly connected to the RP and the RP is a DR on the shared network segment where the RP and the active source node are located. During the period (that is, the period during which the activity source tag is checked), whether the active source node has traffic forwarding, if the active source node has traffic forwarding during the period, the configuration maintenance module 2 is notified;

The configuration maintenance module 2 updates the activity source tag timestamp of the active source node to the current time. It corresponds to the operation flow of the foregoing method, and the insufficiency refers to the description of the above method part, and is not described here.

The above description shows and describes a preferred embodiment of the present invention, but as described above, it should be understood that the present invention is not limited to the forms disclosed herein, and should not be construed as Other combinations, modifications, and environments are possible and can be modified by the teachings or related art or knowledge within the scope of the inventive concept described herein. The modifications and variations of the present invention are intended to be within the scope of the appended claims.

Industrial applicability

Compared with the prior art, the present invention compensates for the defects caused by the registration state machine of the current aggregation point RP relying on the registration message discovery activity source and the RP itself does not maintain the multicast route, so that the multicast activity source determination is more accurate and compensated. The defect between the PIM-SM protocol and the MSDP protocol avoids the active source SA fraud caused by the invalid source information spreading in the network, which provides technical guarantee for the multicast network security.

Claims

Claim

1. A method for detecting the validity of activity sources in the domain, comprising:

The aggregation point RP performs validity detection on the active source node in the domain, adds an activity source tag to the activity source node that is detected by the validity, and sets the tag timestamp to the current time;

The RP periodically checks the activity source tag, and determines, for the active source node marked with the activity source tag, whether the interval between the tag timestamp of the active source node and the current time exceeds the set active source validity time, if , delete the active source tag for the active source node.

2. The method of claim 1 further comprising:

The RP adds the active source node to the multicast source discovery protocol MSDP session router report when adding an active source tag to an active source node;

When deleting the active source tag of an active source node, the RP reports to the MSDP session router to delete the active source node.

3. The method according to claim 2, wherein the step of the aggregation point RP performing validity detection on the active source node in the domain includes:

The RP uses the activity source determination mechanism of the registration message and/or the activity source determination mechanism of the direct connection source traffic to perform validity detection.

4. The method according to claim 3, wherein the step of performing validity detection by using an active source determination mechanism of direct source flow includes:

If the RP in the local area receives the data traffic from the multicast source node, check whether the multicast source node is directly connected to the RP, and whether the RP is on the shared network segment where the RP and the multicast source node are located. For specifying the router DR;

If the RP is not a DR on the shared network segment or the multicast source node is not directly connected to the RP, it is determined that the multicast source node fails the validity check, and the process ends; If the shared network segment is a DR and the multicast source node is directly connected to the RP, determine that the validity of the multicast source node passes, and check whether the multicast source node is a newly discovered active source node. Take And whether the activity source tag has been added;

The step of adding an activity source tag to the activity source node that is detected by the validity, and setting the tag timestamp to the current time includes: recording and saving the newly discovered activity source node for the newly discovered activity source node, the new The discovered activity source node adds the activity source tag and sets the tag timestamp to the current time; for the non-newly discovered activity source node to which the activity source tag is not added, add the activity source tag, and set the tag timestamp to the current time;

The step of updating the tag timestamp of the active source node detected by the validity, and setting the updated tag timestamp to the current time includes: updating the tag for the active source node of the non-newly discovered added active source tag The timestamp is the current time.

5. The method of claim 3, wherein the step of performing validity detection using an activity source decision mechanism of the registration message comprises:

When the RP in the local area receives the registration message sent by the active source node through the first hop DR, the RP checks the registration message; if the registration message is not registered with the RP, the RP does not process and waits. The registration message is received next time; for the registration message registered with the RP, it is determined that the active source node that sent the registration message passes the validity check, and checks whether the active source node that sends the registration message is a new discovery. Activity source node and whether an activity source tag has been added;

The step of adding an activity source tag to the activity source node that is detected by the validity, and setting the tag timestamp to the current time includes: recording and saving the newly discovered activity source node for the newly discovered activity source node, for the new The discovered activity source node adds the activity source tag and sets the tag timestamp to the current time; for the non-newly discovered activity source node to which the activity source tag is not added, adds the activity source tag, and sets the tag timestamp to the current time;

The step of updating the tag timestamp of the activity source node detected by the validity, and setting the updated tag timestamp to the current time includes: updating the activity for the activity source node of the non-newly discovered added activity source tag The timestamp of the source tag is the current time.

6. The method of claim 4 or 5, wherein, during the period in which the RP checks the active source tag:

Checking the active source in the period when the active source node marked with the active source tag is directly connected to the RP and the RP is a DR on the shared network segment where the RP and the active source node are located Whether there is traffic forwarding on the node. If there is traffic forwarding, after updating the tag timestamp of the active source node to the current time, it is determined whether the interval between the tag timestamp of the active source node and the current time exceeds the valid time. If there is no traffic forwarding, it is directly determined whether the interval exceeds the valid time;

When the active source node marked with the active source tag is not directly connected to the RP or the RP is not a DR on the shared network segment where the RP and the active source node are located, directly determining the active source node Whether the interval between the tag timestamp and the current time exceeds the valid time.

7. A device for detecting validity of an activity source of the domain, comprising: a determination module, a configuration maintenance module, an inspection module, and a deletion module, wherein

The configuration maintenance module is configured to: add an activity source tag to the active source node that is detected, and set the tag timestamp to the current time; and, update the tag timestamp of the active source node that is detected, and set the updated Mark the timestamp as the current time;

8. The detecting device according to claim 7, wherein

The determining module is configured to perform validity detection on the active source node by: checking whether a multicast source node that sends data traffic is directly connected to the detecting device, and at the detecting device and the multicast source node Whether the detecting device is the designated router DR on the shared network segment; when the detecting device is not the DR on the shared network segment or the multicast source node is not directly connected to the RP, determining the multicast The validity detection of the source node fails; when the detecting device is a DR on the shared network segment and the multicast source node is directly connected to the detecting device, determining validity detection of the multicast source node Passing, checking whether the multicast source node is a newly discovered active source node, and whether an activity source tag is added, and notifying the configuration maintenance module of the check result; The configuration maintenance module is configured to add an activity source tag to the activity source node that is detected by the validity, and set the tag timestamp to the current time: for the newly discovered activity source node, record and save the newly discovered The activity source node adds an activity source tag to the newly discovered activity source node, and sets the tag timestamp to the current time; for the non-newly discovered activity source node to which the activity source tag is not added, adds the activity source tag, and sets the tag time Placing the current time; and, the configuration maintenance module is configured to update the tag timestamp of the active source node detected by the validity by updating the tag for the non-newly discovered active source node of the added activity source tag The timestamp is the current time;

The configuration maintenance module is further configured to: when adding an active source tag to the active source node that passes the validity check, the multicast source discovery protocol MSDP session router to the local domain discovers the new active source node.

9. The detecting device according to claim 8, wherein the determining module is further configured to perform validity detection by:

Checking the received registration message sent by the active source node by using the first hop DR; if the registration message is a registration message registered with the detection device, determining the activity source for sending the registration message The validity check of the node passes, and checks whether the active source node that sends the registration message is the newly discovered active source node and whether the active source tag is added, and notifies the configuration maintenance module of the check result.

The detecting device according to claim 8 or 9, wherein

The determining module is further configured to: when the checking module checks the active source mark in the configuration maintenance module, when the active source node marked with the active source mark is directly connected to the detecting device and is in the detecting And when the detecting device is a DR on the shared network segment where the active source node is located, checking whether the active source node has traffic forwarding, and if yes, notifying the configuration maintenance module;

The configuration maintenance module is further configured to update the target time stamp of the active source node marked with the active source tag to the current time according to the notification of the decision module.