WO2011120381A1

WO2011120381A1 - Quality of service processing method and device for virtual private network traffic

Info

Publication number: WO2011120381A1
Application number: PCT/CN2011/071836
Authority: WO
Inventors: 孙蓓; 钱勇; 孔玲丽
Original assignee: 中兴通讯股份有限公司
Priority date: 2010-04-01
Filing date: 2011-03-15
Publication date: 2011-10-06
Also published as: CN101848143A

Abstract

The present invention discloses a Quality of Service (QoS) processing method and device for Virtual Private Network (VPN) traffic, which are used for guaranteeing the QoS of the Virtual Private Network. When a VPN message is received, according to a configured corresponding relationship between VPN attribute information and a QoS strategy, the QoS strategy corresponding to the VPN attribute information of the message can be determined, wherein the VPN attribute information includes a VPN type and/or a VPN access attribute; and the QoS processing is performed for the message according to the determined QoS strategy.

Description

Method and device for processing quality of service of virtual private network traffic

The present invention relates to the field of data communication technologies, and in particular, to a method and apparatus for performing quality of service processing on virtual private network traffic. Background technique

Virtual Private Network (VPN) technology is a private private network to implement private dedicated technology. Multiprotocol Label Switching (MPLS) VPN has low cost, good scalability, high bandwidth, etc. Applications. There are two types of MPLS-based (Virtual Private LAN Service, VPLS) and Virtual Private Wire Service (VPWS). Among them, VPLS provides multi-point to multi-point VPN technology, and VPWS provides point-to-point Layer 2 VPN technology. The structure of the Layer 2 VPN network is as shown in Figure 1. It is mainly composed of CE, P, and PE (Provider Edge, the carrier's border device). The CE is the user edge device and the PE is the carrier edge device. The P device is the backbone device of the carrier and is only responsible for forwarding the label.

With the development of the telecom market, various services have emerged. Different users and different services have different requirements on bandwidth and delay. For example, services such as VoIP and IPTV require Quality of Service (QoS). It is guaranteed that bandwidth guarantee, low latency, low jitter, and priority scheduling are required. At the same time, for security or other reasons, these services are often required to be opened based on VPN. Therefore, it is very important to perform QoS processing on VPN traffic.

At present, the QoS policy for VPN users is relatively small. Generally, the existing QoS processing technologies are mostly for traditional Layer 3 services or MPLS services, and cannot be well targeted for VPN traffic, and cannot achieve different VPN connections. Different QoS guarantees are entered, which may result in failure to guarantee high-priority users or service resources requiring high delay jitter. Summary of the invention

Embodiments of the present invention provide a method and apparatus for performing QoS processing on VPN traffic, which are used to implement QoS guarantee for VPN.

In order to achieve the above object, the technical solution of the present invention is achieved as follows:

A method for performing QoS processing on VPN traffic, including:

When the VPN packet is received, the QoS policy corresponding to the VPN attribute information of the "3⁄4 text" is determined according to the corresponding relationship between the configured VPN attribute information and the QoS policy; wherein the VPN attribute information includes: a VPN type and/or VPN access attribute;

■

The corresponding relationship between the configured VPN attribute information and the QoS policy includes:

Configuring a correspondence between the VPN type and the QoS index, and generating a correspondence between the VPN access attribute and the QoS index according to the corresponding relationship and the saved VPN access attribute;

Configure the correspondence between the QoS index and the QoS policy.

The determining the QoS policy corresponding to the VPN attribute information of the packet includes: determining, according to the correspondence between the generated VPN access attribute and the QoS index, the VPN access attribute corresponding to the VPN attribute information of the packet a QoS index;

And determining, according to the corresponding relationship between the configured QoS index and the QoS policy, the QoS policy corresponding to the first QoS index.

Configure the mapping between VPN access attributes and QoS indexes.

Configure the correspondence between the QoS index and the QoS policy.

The determining the QoS policy corresponding to the VPN attribute information of the packet includes: determining, according to the corresponding relationship between the configured VPN access attribute and the QoS index, the VPN access attribute corresponding to the VPN attribute information of the packet Two QoS indexes;

Determining the second QoS index according to a correspondence between the configured QoS index and the QoS policy Corresponding QoS policy.

Configure the mapping between VPN access attributes and QoS indexes.

Configure the correspondence between the QoS index and the QoS policy.

The determining the QoS policy corresponding to the VPN attribute information of the text includes: determining, according to the correspondence between the generated VPN access attribute and the QoS index, and the corresponding relationship between the configured VPN access attribute and the QoS index, The third QoS index corresponding to the VPN access attribute in the VPN attribute information of the text;

And determining, according to the configured QoS index and the QoS policy, the QoS policy corresponding to the third QoS index.

A device for performing quality of service processing on virtual private network traffic, including:

a configuration unit, configured to configure a correspondence between the virtual private network VPN attribute information and the quality of service QoS policy, where the attribute information includes: a VPN type and/or a VPN access attribute; and a searching unit, configured to receive the virtual private network In the message, according to the correspondence between the VPN attribute information and the QoS policy configured by the configuration unit, the corresponding VPN attribute information corresponding to the “3⁄4 text” is determined.

QoS policy; the configuration unit includes:

a first configuration sub-unit, configured to configure a correspondence between a VPN type and a QoS index, and generate a correspondence between the VPN access attribute and the QoS index according to the correspondence and the saved VPN access attribute;

a second configuration sub-unit, configured to configure a correspondence between the QoS index and the QoS policy; a first determining subunit, configured to determine, according to a correspondence between the generated VPN access attribute and the QoS index, a first QoS index corresponding to the VPN access attribute in the VPN attribute information of the packet;

And a second determining subunit, configured to determine a QoS policy corresponding to the first QoS index according to the corresponding relationship between the configured QoS index and the QoS policy.

The configuration unit includes:

The third sub-unit configured to configure VPN access attributes corresponding relationship between QoS index; subunit fourth configuration, the index for the correspondence configuration QoS to QoS policies; shellfish ¹ J, the searching unit comprises:

a third determining sub-unit, configured to determine, according to the corresponding relationship between the configured VPN access attribute and the QoS index, the second QoS index corresponding to the VPN access attribute in the VPN attribute information of the packet;

And a fourth determining subunit, configured to determine a QoS policy corresponding to the second QoS index according to the correspondence between the QoS index and the QoS policy.

The configuration unit includes:

The fifth configuration sub-unit is configured to configure a correspondence between the VPN type and the QoS index, and generate a correspondence between the VPN access attribute and the QoS cable according to the corresponding relationship and the saved VPN access attribute, and configure the VPN. Correspondence between access attributes and QoS indexes;

A sixth sub-unit configuration, the index for the correspondence configuration QoS to QoS policies; shellfish ¹ J, the searching unit comprises:

a fifth determining sub-unit, configured to determine, according to the correspondence between the generated VPN access attribute and the QoS index, and the corresponding relationship between the configured VPN access attribute and the QoS index, determining VPN access in the VPN attribute information of the packet a third QoS index corresponding to the attribute;

And a sixth determining subunit, configured to determine a QoS policy corresponding to the third QoS index according to the configured QoS index and the QoS policy correspondence. In the embodiment of the present invention, when the access side of the PE receives the virtual private network packet, the QoS policy corresponding to the VPN attribute information of the packet is determined according to the corresponding relationship between the configured VPN attribute information and the QoS policy, according to the determining. The QoS policy performs QoS processing on the message. In this way, not only QoS processing for VPN traffic can be implemented on the access side of the PE device, but also QoS guarantee for different accesses in the VPN can be realized. DRAWINGS

1 is a schematic diagram of a basic networking architecture of a Layer 2 VPN in the prior art;

2 is a flowchart of performing QoS processing on VPN traffic according to an embodiment of the present invention;

FIG. 3 is a flowchart of performing QoS processing on VPN traffic according to Embodiment 1 of the present invention; FIG. 4 is a structural diagram of an apparatus for performing QoS processing on VPN traffic according to an embodiment of the present invention. detailed description

In the basic networking structure of the Layer 2 VPN as shown in Figure 1, the PE is mainly responsible for VPN access. VPN access has multiple access modes, including: port access mode, port and virtual local area network (VLAN) access mode, or port and QinQ access mode, where QinQ is two. Layer VLAN, that is, outer VLAN and inner VLAN. Therefore, in the embodiment of the present invention, for the VPN traffic and the different access traffic in the VPN, three key factors for identifying the VPN access PE of the packet, that is, the port, the outer VLAN, and the inner VLAN are required. In this way, different QoS policies can be used according to different VPN traffic and different access modes in the VPN, thereby implementing QoS processing of VPN traffic.

Referring to FIG. 2, the process of performing QoS processing on VPN traffic in the embodiment of the present invention includes: Step 201: Receive a VPN message.

A port on the access side of the PE receives a VPN packet. The packet does not carry VLAN information, carries a layer of VLAN information, or carries two layers of VLAN information. After receiving the packet, the packet is received according to the packet. The access port, the VLAN information carried in the packet, and the VPN of the packet. Access properties.

Step 202: Determine, according to the corresponding relationship between the configured VPN attribute information and the QoS policy, the QoS policy corresponding to the received VPN attribute information.

In the embodiment of the present invention, the VPN attribute information includes: a VPN type and/or a VPN access attribute, where the VPN access attribute includes one or more of a port, an outer VLAN, and an inner VLAN.

When VPN configuration is performed on the access side of the PE, the VPN access attributes of each VPN are configured. That is, the VPN access attribute includes one or more of a port, an outer VLAN, and an inner VLAN. For example, VPN access attributes corresponding to VPN1 include: port XI; port X2 and outer VLAN 200. The VPN access attributes corresponding to VPN2 include: port X3, inner VLAN 20, and outer VLAN 400; port X4, inner VLAN 30, and outer VLAN 400. In this way, the PE access side can save the VPN access attribute of each VPN in the VPN access attribute QoS table, as shown in Table 1 below.

In the embodiment of the present invention, the mapping between the VPN attribute information and the QoS policy may include: configuring one QoS policy corresponding to each VPN, that is, configuring a QoS policy for the VPN type; or configuring corresponding for each VPN access. A QoS policy, that is, configuring a QoS policy for a VPN access attribute; or, for some VPNs accessing the PE side, one QoS policy corresponding to each VPN configuration, and some other VPNs use each VPN access attribute. To configure a corresponding QoS policy.

The configuration of the QoS policy for the VPN type includes:

Configuring a mapping between the VPN type and the QoS index, and generating a correspondence between the VPN access attribute and the QoS index according to the configured relationship between the configured VPN type and the QoS index, and the saved VPN access attribute; and configuring the QoS index and the QoS The corresponding relationship of the strategy. Thus, each VPN corresponds to a QoS index. For example: There are three VPNs accessing the PE, VPN1 corresponds to the QoS index N1, VPN2 corresponds to the QoS index N2, and VPN3 corresponds to the QoS index N3. Here, The correspondence between the VPN type and the QoS index is saved in the VPN access attribute QoS table, as shown in Table 1:

Table 1

According to Table 1, the VPNs that are accessed are different, and the corresponding VPN traffic is different. Therefore, the corresponding QoS index is different. Of course, the correspondence between the configured QoS index and the QoS policy can be as shown in Table 2:

After the mapping between the access attribute and the QoS policy is configured, and the access attribute of the received message is obtained, the QoS policy corresponding to the attribute information of the received message is determined to be: Corresponding relationship between the inbound attribute and the QoS index, determining the first QoS index corresponding to the VPN access attribute in the VPN attribute information of the information, and then determining the QoS corresponding to the first QoS index according to the correspondence between the QoS index and the QoS policy Strategy.

For example, the mapping between the VPN type and the QoS index is as shown in the first column and the fifth column in Table 1. In the corresponding relationship shown, the saved VPN access attributes are as shown in the first column, the second column, the third column, and the fourth column in Table 1, thereby generating a correspondence between the VPN access attribute and the QoS index. The second column, the third column, and the correspondence between the fourth column and the fifth column are shown in Table 1. Then, when the port of the received packet is X3, the VLAN information carried in the packet includes: VLAN 20 and VLAN 400. The QoS index found according to Table 1 is N2, and the QoS policy found according to Table 2 is QoS policy 2.

In the embodiment of the present invention, the QoS policy may be configured for the VPN access, that is, the QoS policy is configured for the VPN access attribute, including:

Configure the mapping between the VPN access attribute and the QoS index, and the correspondence between the QoS index and the QoS policy. That is, each VPN access attribute is configured with a QoS index. For example: There are three VPN access PEs, VPN 1 has two VPN accesses, VPN2 also has two VPN accesses, and VPN3 has one VPN access. Each VPN access attribute corresponds to one QoS index. Here, the VPN is connected. The correspondence between the ingress attribute and the QoS index is saved in the VPN access attribute table QoS, as shown in Table 3:

Table 3 According to Table 3, different access attributes correspond to different access traffic in the VPN, and the corresponding QoS indexes are also different. The corresponding relationship between the configured QoS index and the QoS policy can be as shown in Table 4: QoS index QoS policy

Nl QoS Policy 5

N2 QoS Policy 1

N3 QoS Policy 3

N4 QoS Policy 2

N5 QoS Policy 4

After the mapping between the access attribute and the QoS policy is configured, and the access attribute of the received packet is obtained, the QoS policy corresponding to the attribute information of the received packet is determined as follows: First, according to the configured VPN Corresponding relationship between the access attribute and the QoS index, determining a second QoS index corresponding to the VPN access attribute in the VPN attribute information of the packet, and then determining, according to the correspondence between the QoS index and the QoS policy, the second QoS index QoS policy.

For example, the correspondence between the configured VPN access attribute and the QoS index is as shown in the second column, the third column, and the fourth column and the fifth column in Table 3, and the access attribute of the received packet. For: port X3, inner VLAN 20, and outer VLAN 400, according to Table 3, the QoS index is determined to be N3. According to Table 4, the QoS policy found is QoS policy 3.

In the embodiment of the present invention, when configuring the access side of the PE, the mapping between the VPN attribute information and the QoS policy may further include:

Configure the mapping between the VPN type and the QoS index, and generate the mapping between the VPN access attribute and the QoS index according to the mapping between the configured VPN type and the QoS index, and the saved VPN access attributes. Configure VPN access attributes and QoS. The correspondence between the indexes; and, the correspondence between the QoS index and the QoS policy. That is, some VPNs that access the PE use one QoS policy for each VPN configuration, and some other VPNs use one VPN access to configure one QoS policy. For example: There are three VPNs accessing the PE, VPN1 has two accesses, and VPN2 also has Two accesses, VPN3 has one access, wherein, for VPN1, a QoS policy is configured, and for each access attribute of VPN2 and VPN3, a corresponding QoS index is configured, where the above two correspondences are saved to the VPN. Access the attribute table QoS, as described in Table 5:

The corresponding relationship between the configured QoS index and the QoS policy can be as shown in Table 6:

Table 6

In this way, determining the QoS policy corresponding to the attribute information of the received message includes:

Determining, according to the correspondence between the generated VPN access attribute and the QoS index, and the corresponding relationship between the configured VPN access attribute and the QoS index, determining a third QoS index corresponding to the VPN access attribute in the VPN attribute information of the packet; The QoS policy corresponding to the third QoS index is determined according to the correspondence between the QoS index and the QoS policy. For example, the mapping between the configured VPN type and the QoS index is as shown in the first row and the second row and the fifth row in the first column of Table 5, and the saved VPN access attribute is saved. As shown in the first column, the second column, the third column, and the fourth column in Table 5, the corresponding relationship between the generated VPN access attribute and the QoS index is as shown in the second column, the third column, and the The correspondence between the first row and the second row and the fifth row in the first row and the second row, and the corresponding relationship between the configured VPN access attribute and the QoS index is as shown in the second column and the second column in Table 5. The three columns, and the corresponding relationship between the fourth row and the other rows in the fifth column, when the received message access mode is: port X2, and the outer VLAN 200, according to Table 5, the QoS index is determined to be N1. According to Table 6, the QoS policy found is QoS Policy 4.

Step 203: Perform QoS processing on the received packet according to the determined QoS policy. This process ends.

The QoS policy includes: providing bandwidth guarantee and/or prioritizing packets. Of course, the embodiments of the present invention are not limited thereto, and other QoS policies are also included.

In the above embodiment, the VPN access attribute QoS table is only one representation of the corresponding relationship, and other similar expressions may also indicate the above correspondence.

The embodiments of the present invention are further described in detail below with reference to the accompanying drawings.

Embodiment 1 In this embodiment, an inner VLAN indicates a user terminal, for example, VLAN 20 indicates user terminal A, and VLAN 30 indicates user terminal B. The outer VLAN indicates the service type. For example, VLAN 400 indicates VoIP service and VLAN 500 indicates IPTV service. In this embodiment, the mapping between the configured attribute information and the QoS policy is as shown in Table 5 and Table 6, and the process of performing QoS processing on the VPN traffic includes:

Step 301: The switch receives the virtual private network.

A port of the switch accesses the packet, and the packet carries the VLAN information.

Step 302: Determine, according to the correspondence between the configured VPN type and the QoS index, and the correspondence between the VPN access attribute and the QoS index, determine the third corresponding to the VPN attribute information of the packet. QoS index.

Here, according to the correspondence between the configured VPN type and the QoS index, and the saved VPN attribute, the correspondence between the generated VPN access attribute and the QoS index, and the corresponding relationship between the configured VPN access attribute and the QoS index are as shown in Table 5. Show. According to Table 5, when the receiving port of the switch is X3, the VLAN information carried in the accessed packet includes: the inner VLAN is VLAN 20 and the outer VLAN is VLAN 400. Then, according to Table 5, the third QoS index can be determined. For N2. That is, the index corresponding to the VoIP service of user A is N2. When the receiving port of the switch is X4, the VLAN information carried in the packets is as follows: VLAN is VLAN 30 and outer VLAN is VLAN 500. Then, according to Table 5, the third QoS index can be determined as N4. That is, the QoS index corresponding to User B's IPTV service is N4. Of course, different services of different user terminals have corresponding third QoS indexes, and the details are not exhaustive.

Step 303: Determine a QoS policy corresponding to the third QoS index according to the corresponding relationship between the configured QoS index and the QoS policy.

The corresponding relationship between the configured QoS index and the QoS policy is as shown in Table 6. When the third QoS index is N2, according to Table 6, the corresponding QoS policy is determined as QoS policy 1; when the third QoS index is N4, according to the table 6. Determine the corresponding QoS policy as QoS Policy 2.

Step 304: Perform QoS processing on the received packet according to the determined QoS policy. This process ends.

Of course, in the embodiment of the present invention, the outer VLAN indicates that the service type is not limited to this, and other different service types may be represented by different outer VLANs.

According to the foregoing method for performing QoS processing on the VPN, an apparatus for performing QoS processing on the VPN traffic may be constructed. Referring to FIG. 4, the configuration unit 100 includes a configuration unit 100, a searching unit 200, and a processing unit 300.

The configuration unit 100 is configured to configure a correspondence between the attribute information and the QoS policy, where the attribute information includes: a VPN type and/or a VPN access attribute. The searching unit 200 is configured to determine, according to the correspondence between the VPN attribute information and the QoS policy configured by the configuration unit, the QoS policy corresponding to the VPN attribute information of the packet, when the virtual private network packet is received. In the embodiment of the present invention, the configuration unit 100 may configure a corresponding QoS policy for each VPN, that is, configure a QoS policy for the VPN type; or configure a corresponding QoS policy for each VPN access, that is, for the VPN connection. The ingress attribute configures the QoS policy; or, for some of the VPNs, one QoS policy corresponding to each VPN configuration is used, and some other VPNs use each VPN access to configure a corresponding QoS policy.

Therefore, in the embodiment of the present invention, the configuration unit 100 includes:

The first configuration sub-unit is configured to configure a correspondence between the VPN type and the QoS index, and generate a correspondence between the VPN access attribute and the QoS index according to the configured correspondence and the saved VPN access attribute.

The second configuration sub-unit is configured to configure a correspondence between the QoS index and the QoS policy.

Then, the searching unit 200 includes:

The first determining sub-unit is configured to determine, according to the correspondence between the generated VPN access attribute and the QoS index, the first QoS index corresponding to the VPN access attribute in the VPN attribute information of the packet.

Alternatively, in another embodiment of the present invention, the configuration unit 100 includes:

The third configuration sub-unit is configured to configure a correspondence between the VPN access attribute and the QoS index. The fourth configuration sub-unit is configured to configure a correspondence between the QoS index and the QoS policy.

Then, the searching unit 200 includes:

a third determining subunit, configured to correspond to the QoS index according to the configured VPN access attribute And determining a second QoS index corresponding to the VPN access attribute in the VPN attribute information of the packet.

In another embodiment, the configuration unit 100 includes:

The fifth configuration sub-unit is configured to configure a correspondence between the VPN type and the QoS index, and generate a correspondence between the VPN access attribute and the QoS index according to the configured correspondence and the saved VPN access attribute, and configure the VPN. Correspondence between access attributes and QoS indexes.

The sixth configuration sub-unit is configured to configure a correspondence between the QoS index and the QoS policy.

Then, the searching unit includes:

a fifth determining sub-unit, configured to determine, according to the correspondence between the generated VPN access attribute and the QoS index, and the corresponding relationship between the configured VPN access attribute and the QoS index, determining VPN access in the VPN attribute information of the packet The third QoS index corresponding to the attribute.

And a sixth determining subunit, configured to determine a QoS policy corresponding to the third QoS index according to the configured QoS index and the QoS policy correspondence.

In the embodiment of the present invention, when the access side of the PE receives the virtual private network packet, the QoS policy corresponding to the VPN attribute information of the packet is determined according to the corresponding relationship between the configured VPN attribute information and the QoS policy, according to the determined The QoS policy performs QoS processing on the text. The VPN attribute information includes: access VPN type and/or VPN access attribute, so that not only the QoS for VPN traffic can be implemented on the access side of the PE device, but also the QoS guarantee for different access in the VPN can be realized. The spirit and scope of the invention. Thus, it is intended that the present invention cover the modifications and modifications of the invention

Claims

Claim

A method for performing quality of service QoS processing on VPN traffic of a virtual private network, wherein the method includes:

2. The method of claim 1 wherein:

Configure the correspondence between the QoS index and the QoS policy.

The determining the QoS policy corresponding to the VPN attribute information of the text includes: determining, according to the correspondence between the generated VPN access attribute and the QoS index, the packet

The first QoS index corresponding to the VPN access attribute in the VPN attribute information;

3. The method of claim 1 wherein:

Configure the mapping between VPN access attributes and QoS indexes.

Configure the correspondence between the QoS index and the QoS policy.

4. The method of claim 1 wherein:

Configure the mapping between VPN access attributes and QoS indexes.

Configure the correspondence between the QoS index and the QoS policy.

5. A device for performing quality of service processing on virtual private network traffic, characterized in that:

a configuration unit, configured to configure a correspondence between the virtual private network VPN attribute information and the quality of service QoS policy, where the attribute information includes: a VPN type and/or a VPN access attribute; and a searching unit, configured to receive the virtual private network And determining, according to the correspondence between the VPN attribute information and the QoS policy configured by the configuration unit, the QoS policy corresponding to the VPN attribute information of the “3⁄4 text”;

6. Apparatus according to claim 5 wherein:

The configuration unit includes:

The first configuration sub-unit is configured to configure a correspondence between the VPN type and the QoS index, and generate a VPN access attribute and a QoS cable according to the corresponding relationship and the saved VPN access attribute. Corresponding relationship

a second configuration subunit, configured to configure a correspondence between the QoS index and the QoS policy;

a first determining sub-unit, configured to determine, according to the corresponding relationship between the generated VPN access attribute and the QoS index, the first QoS index corresponding to the VPN access attribute in the VPN attribute information of the packet;

7. Apparatus according to claim 5 wherein:

The configuration unit includes:

a third configuration sub-unit, configured to configure a correspondence between a VPN access attribute and a QoS index; a fourth configuration sub-unit, configured to configure a correspondence between the QoS index and the QoS policy;

8. Apparatus according to claim 5 wherein:

The configuration unit includes:

The fifth configuration sub-unit is configured to configure a correspondence between the VPN type and the QoS index, and generate a correspondence between the VPN access attribute and the QoS index according to the corresponding relationship and the saved VPN access attribute, and configure VPN access. Correspondence between attributes and QoS indexes;

a sixth configuration sub-unit, configured to configure a correspondence between the QoS index and the QoS policy; a fifth determining sub-unit, configured to determine, according to the correspondence between the generated VPN access attribute and the QoS index, and the corresponding relationship between the configured VPN access attribute and the QoS index, determining VPN access in the VPN attribute information of the packet a third QoS index corresponding to the attribute;