WO2012175011A1

WO2012175011A1 - Method and device for realizing qos in virtual private network

Info

Publication number: WO2012175011A1
Application number: PCT/CN2012/077150
Authority: WO
Inventors: 钱勇; 孙蓓; 张舒兴
Original assignee: 中兴通讯股份有限公司
Priority date: 2011-06-20
Filing date: 2012-06-19
Publication date: 2012-12-27
Also published as: CN102202003A

Abstract

Disclosed are a method and device for realizing QoS in a virtual private network, capable of configuring attribute values of an access attribute list for one or more access users who access PE, and acquiring the correspondence between the attribute values and QoS policies;in the case of an access message of an access user meeting an access condition, acquiring a QoS policy corresponding to the access message according to the correspondence so as to determine the internal priority of the access message; and performing QoS processing on the access message according to the determined internal priority.The present invention can enable different access users to select different QoS policies at the ingress PE equipment, providing a more flexible QoS policy for network operation.

Description

QoS implementation method and device for virtual private network

The present invention relates to the field of communications, and in particular, to a method and apparatus for implementing a quality of service (QoS) of a virtual private network. Background technique

With the rapid development of LAN technology, network IP has become a trend in the industry. Traditional communication networks are gradually being replaced by data networks, and some new services also have IP characteristics.

In recent years, in order to pursue a higher Total Cost of Ownership (TCO), network operators often choose more cost-effective Ethernet technologies in the process of transforming existing networks and building new ones.

As an important carrier technology, Packet Transport Network (PTN) technology emphasizes packet transmission and uses IP technology for connection-oriented multi-service transmission. Compared with traditional transmission network technology and IP/MPLS (multi-protocol label switching) technology, PTN technology has the following characteristics: multi-service unified bearer, hierarchical QoS function, carrier-class protection switching, clock synchronization technology, carrier-class network management Wait.

With the development of the operator market, the service requirements of users are diversified, and the performance requirements such as bandwidth, delay, and jitter are different. For example, services such as VoIP and IPTV require higher QoS guarantee requirements, and need to be in bandwidth and time. The QoS guarantee is guaranteed by the extension, or the large customers need to guarantee a certain QoS. Therefore, providing diverse QoS guarantees for different levels of users and services is an important aspect of PTN technology.

1 is a schematic structural diagram of a virtual private network (VPN) basic networking according to the prior art; FIG. 2 is a schematic structural diagram of a VPN QoS differential service model according to the prior art; FIG. 3 is a schematic diagram of a VPN QoS differential service model according to the prior art; Knot of VPN pipe mode with multiple user access Schematic diagram.

MPLS VPN is a common PTN networking mode. It has the characteristics of low cost, good scalability, and high bandwidth. Its network structure is shown in Figure 1. It is mainly composed of CE (User Edge Equipment) and P (Operator Backbone Network Equipment). ), PE (operator edge device), where the PE is mainly responsible for user access, and the P device is responsible for data forwarding according to the label.

VPN QoS technology is a combination of integrated service model (IntServ model) and differential service model (DiffServ model). IntServ model provides resource reservation for each stream through RSVP (Resource Reservation Protocol), providing end-to-end QoS; DiffServ model does not The state of the flow needs to be maintained. Only the boundary nodes classify the packets, assign different service levels to each type of packets, and perform different actions according to different service levels in the core layer network. Because IntServ maintains the RSVP state for each flow, there is a problem in the application of the large network. DiffServ provides a service that treats different services differently, and sets different priorities and forwarding characteristics for different services, but does not specify how Forwarding and no way to eliminate congestion, these two models have their own shortcomings, so the combination of these two models has developed VPN QoS technology.

At present, the DiffServ model part of VPN QoS is shown in Figure 2. When the VPN is connected to the network, a QoS mode is selected, including: unified mode, pipe mode, and short pipe mode. The three modes work as follows:

Unified mode: When a packet enters the VPN domain, the packet-encapsulated label priority inherits the priority of the user packet. When leaving the VPN domain, the egress PE device schedules the label according to the label priority and maps the label priority to the user. Priority of the text.

Pipeline mode: When a packet enters the VPN domain, the packet priority of the packet is specified by the network operator. When the VPN domain is removed, the egress PE is scheduled according to the label priority, but the label priority does not need to be mapped to the user packet. .

Short pipe mode: When a packet enters the VPN domain, the packet encapsulation priority is specified by the network operator. When leaving the VPN domain, the egress PE device performs scheduling according to the priority of the user packet. And the priority of the label does not need to be mapped to the user message.

As shown in Figure 3, the pipe/short pipe mode enables operators to better manage QoS, select different QoS policies for different customers and services, and get more favors from operators in practical applications. When multiple users access the same VPN, and the VPN is configured in the tunnel mode, all users accessing the VPN are assigned the same priority. The QoS policy cannot be flexibly selected for different access users in the VPN.

When multiple users of the above-mentioned prior art access the VPN of the same pipeline mode, the problem of flexible selection of QoS policies for different access users in the VPN cannot be realized, and an effective solution has not yet appeared. Summary of the invention

The main purpose of the present invention is to provide a QoS implementation method and apparatus for a virtual private network, so as to solve the problem that multiple users in the prior art access the VPN in the same pipeline mode cannot implement flexible selection for different access users in the VPN. The problem with QoS policies.

In order to solve the above problems, the technical solution of the present invention is implemented as follows:

A service quality QoS implementation method for a virtual private network, including:

Configuring an attribute value of the access attribute table for one or more access users of the access edge device PE, and obtaining a correspondence between the attribute value and the QoS policy;

If the access message of the access user meets the access condition, the QoS policy corresponding to the access packet is obtained according to the corresponding relationship, to determine an internal priority of the access packet; The determined internal priority performs QoS processing on the access message.

The one or more access users accessing the PE respectively configure the attribute values of the access attribute table, and obtain the corresponding relationship between the attribute value and the QoS policy, including:

Assigning an access attribute table to one or more access users accessing the PE;

Specifying a user message priority and a QoS index base address for each of the access users to obtain the QoS policy, and saving the QoS index base address to the access attribute table. The method further includes: before specifying a user packet priority and a QoS index base address for each of the access users, the method further includes:

Configuring a virtual access network VPN pipe mode, where the VPN pipe mode includes: a unified mode, a pipe mode, or a short pipe mode;

Wherein, specifying a QoS index base address for each of the access users includes:

If the VPN pipe mode is a unified mode, the QoS index base address is specified as 0; if the VPN pipe mode is a pipe mode or a short pipe mode, specifying the QoS index base address and the user packet priority Level - corresponding.

If the access packet of the access user meets the access condition, the QoS policy corresponding to the access packet is obtained according to the corresponding relationship, to determine an internal priority of the access packet. Includes:

The access side of the PE receives the access packet;

And in the case that the access packet meets the VPN access condition, querying, in the access attribute table, a QoS index base address corresponding to the access packet;

Combining the QoS index base address with the corresponding user message priority to obtain a QoS index;

Querying in the QoS attribute table by using the QoS index to obtain an internal priority of the access message.

After the QoS processing is performed on the access packet according to the determined internal priority, the method further includes:

When the access packet is egress encapsulated, the internal priority is mapped to a label priority.

A QoS implementation device for a virtual private network, comprising:

a configuration module, configured to separately configure an attribute value of the access attribute table for one or more access users accessing the PE, and obtain a correspondence between the attribute value and the QoS policy; a determining module, configured to obtain, according to the corresponding relationship, a QoS policy corresponding to the access packet, to determine the access packet, if the access packet of the access user meets an access condition, Internal priority

The QoS processing module is configured to perform QoS processing on the access packet according to the determined internal priority.

The configuration module includes:

An allocation module, configured to separately allocate an access attribute table for one or more access users accessing the PE;

And a specifying module, configured to specify a user message priority and a QoS index base address for each of the access users, to obtain the QoS policy, and save the QoS index base address to the access attribute table.

The device further includes:

a configuration mode module, configured to configure a VPN pipe mode, where the VPN pipe mode includes: a unified mode, a pipeline mode, or a short pipe mode;

The specifying module, when specifying a QoS index base address for each of the access users, is configured to: if the VPN pipe mode is a unified mode, specify the QoS index base address to be 0; The pipeline mode is a pipeline mode or a short pipe mode, and the QoS index base address is specified to correspond to the user priority.

The determining module includes:

a receiving module, where the access side of the PE receives the access message;

a first querying module, configured to query, in the access attribute table, a QoS index base address corresponding to the access packet, if the access packet meets the VPN access condition;

An obtaining module, configured to combine the QoS index base address and the corresponding user packet priority to obtain a QoS index;

a second query module, configured to query the QoS attribute table by using the QoS index, to obtain The internal priority of the access message.

The device further includes:

The egress mapping module is configured to map the internal priority to the label priority when the access packet is egress-encapsulated.

According to the present invention, the attribute value of the access attribute table is separately configured for one or more access users accessing the PE, and the correspondence between the attribute value and the QoS policy is obtained; the access message of the access user satisfies the access If the condition is met, the QoS policy corresponding to the access packet is obtained according to the corresponding relationship, and the internal priority of the access packet is determined; the QoS processing is performed on the access packet according to the determined internal priority, and the prior art is solved. When multiple users access the VPN in the same pipe mode, the problem of flexible selection of QoS policies for different access users in the VPN cannot be implemented. Currently, effective problems have not occurred, and the access can be implemented on the ingress PE device. Users choose different QoS policies to provide more flexible QoS policies for network operations. DRAWINGS

1 is a schematic structural diagram of a basic networking of a VPN according to the prior art;

2 is a schematic structural diagram of a VPN QoS differential service model according to the prior art; FIG. 3 is a schematic structural diagram of a VPN pipe mode with multiple user access according to the prior art;

4 is a schematic structural diagram of a QoS implementation apparatus of a virtual private network according to an embodiment of the present invention; FIG. 5 is a schematic structural diagram of a QoS implementation apparatus of a virtual private network according to an embodiment of the present invention;

6 is a schematic structural diagram of a VPN pipe mode with multiple user accesses according to an embodiment of the present invention;

7 is a flowchart of a QoS implementation method of a virtual private network according to an embodiment of the present invention; FIG. 8 is a flowchart of a configuration process in the embodiment shown in FIG. 7;

9 is a QoS attribute table created in the embodiment shown in FIG. 8; FIG. 10 is a flowchart of implementing QoS of a VPN in the embodiment shown in FIG. 7. detailed description

The present invention will be further described in detail below with reference to the accompanying drawings and embodiments in order to make the present invention. It is understood that the specific embodiments described herein are merely illustrative of the invention and are not intended to limit the invention.

The invention provides a QoS implementation device for a virtual private network. 4 is a schematic structural diagram of a QoS implementation apparatus of a virtual private network according to an embodiment of the present invention; and FIG. 5 is a schematic diagram of a preferred structure of a QoS implementation apparatus of a virtual private network according to an embodiment of the present invention.

As shown in FIG. 4, the apparatus includes: a configuration module 10, a determination module 30, and a QoS processing module 50.

The configuration module 10 is configured to separately configure an attribute value of the access attribute table for one or more access users accessing the PE, and obtain a correspondence between the attribute value and the QoS policy; the determining module 30 is configured to be in the access If the access message of the user meets the access condition, the QoS policy corresponding to the access packet is obtained according to the corresponding relationship to determine the internal priority of the access packet. The QoS processing module 50 is configured to determine the internal priority according to the internal priority. The level performs QoS processing on the access packet.

The foregoing embodiment of the present invention implements QoS for a VPN, allocates an access attribute table for each access user, and specifies an attribute value in the access attribute table, and each attribute value corresponds to the formulated QoS policy, which can be implemented on the ingress PE device. Different access users select different QoS policies, and can assign different priorities to different users accessing the same VPN, providing a more flexible QoS policy for network operations.

Specifically, as shown in FIG. 4 and FIG. 5, the configuration module 10 in the foregoing embodiment is configured to configure a VPN attribute, a user access instance, and a specified QoS policy, and save related attributes to the access attribute table.

The apparatus of the foregoing embodiments may further include: an egress mapping module 70, configured to map an internal priority to a label priority when the access packet performs egress encapsulation. In the access message When exporting encapsulation, it maps the priority of packets.

In the foregoing embodiment of the present invention, the configuration module 10 may include: an allocating module 101, configured to respectively allocate an access attribute table for one or more access users accessing the PE; and a specifying module 102, configured for each access user Specify the user packet priority and QoS index base address to obtain the QoS policy, and save the QoS index base address to the access attribute table.

The device of the foregoing embodiment of the present invention may further include: a configuration mode module, configured to configure a VPN pipe mode, where the VPN pipe mode includes: a unified mode, a pipe mode, or a short pipe mode, where: assigning a QoS index base address to each access user includes : If the VPN pipe mode is the unified mode, specify the QoS index base address as 0; if the VPN pipe mode is the pipe mode or the short pipe mode, specify the QoS index base address to correspond to the user message priority.

The determining module 30 in the foregoing embodiment may include: a receiving module 301, where the access side of the PE receives the access message; the first querying module 302 is configured to: when the access message meets the VPN access condition, Querying the QoS index base address corresponding to the access packet in the access attribute table; the obtaining module 303 is configured to combine the QoS index base address with the corresponding user packet priority to obtain the QoS index; the second query module 304, configured to query in the QoS attribute table by using a QoS index, to obtain an internal priority of the access message. In this embodiment, when the virtual private network access message is received, the QoS policy corresponding to the VPN attribute information of the template is determined according to the correspondence between the VPN attribute information and the QoS policy configured by the configuration module 10, and The internal priority is determined by the two locating modules to implement the QoS policy used by the access user.

6 is a schematic structural diagram of a VPN pipe mode with multiple user accesses according to an embodiment of the present invention. As shown in FIG. 6, in combination with the apparatus of the present invention shown in FIG. 4, the configuration module 10 allocates an access entry for each access user of the access device PE, and selects a corresponding QoS index base address, and sets the QoS index base. The address is saved in the corresponding access entry.

The QoS index base address can be used to calculate a QoS index corresponding to a QoS attribute table that holds an internal priority value. When the PE accessing party that receives the CE receives the packet, if the access condition is met, the corresponding access entry is queried, the QoS index base address is obtained, the QoS index is calculated, and the corresponding QoS attribute table is queried to obtain the internal priority. The priority is used for scheduling and is mapped to the label priority at the time of egress encapsulation.

7 is a flow chart of a method for implementing QoS of a virtual private network according to an embodiment of the present invention. As shown in FIG. 7, the QoS implementation method of the virtual private network includes the following steps:

Step S102: The configuration module 10 shown in FIG. 4 is configured to separately configure an attribute value of the access attribute table for one or more access users accessing the PE, and obtain a correspondence between the attribute value and the QoS policy.

In step S104, the determining module 30 shown in FIG. 4 is configured to obtain the QoS policy corresponding to the access packet according to the corresponding relationship, and determine the access packet. Internal priority

In step S106, the QoS processing module 50 shown in FIG. 4 implements QoS processing on the access packet according to the determined internal priority.

The foregoing embodiment is directed to a method for implementing QoS for a VPN, by assigning an access attribute table to each access user, and specifying an attribute value in the access attribute table, each attribute value corresponding to the formulated QoS policy, achieving different implementations at the ingress PE device. The access user selects different QoS policies and can assign different priorities to different users accessing the same VPN to provide a more flexible QoS policy for network operations.

The one or more access users accessing the PE in step S102 in the foregoing embodiment respectively configure the attribute value of the access attribute table, and obtain the corresponding relationship between the attribute value and the QoS policy, including: one or more accesses for accessing the PE The user respectively assigns an access attribute table; specifies a user message priority and a QoS index base address for each access user to obtain a QoS policy, and saves the QoS index base address to the access attribute table.

Preferably, before each user is assigned a user message priority and a QoS index base address, The method further includes: configuring a VPN pipe mode, where the VPN pipe mode includes: a unified mode, a pipe mode, or a short pipe mode, wherein specifying a QoS index base address for each access user includes: if the VPN pipe mode is a unified mode, specifying QoS The index base address is 0. If the VPN pipe mode is the pipe mode or the short pipe mode, the specified QoS index base address corresponds to the user message priority.

In the foregoing embodiment, in step S104, if the access message of the access user meets the access condition, the QoS policy corresponding to the access message is obtained according to the corresponding relationship, to determine the internal priority of the access message, including: PE The access side receives the access packet; when the access packet satisfies the VPN access condition, the QoS index base address corresponding to the access packet is queried in the access attribute table; The base address is combined with its corresponding user packet priority to obtain the QoS index. The QoS index is queried in the QoS attribute table to obtain the internal priority of the access packet.

Preferably, after performing QoS processing on the access packet according to the determined internal priority, the method further includes: mapping the internal priority to the label priority when the access packet is egress-encapsulated.

Figure 8 is a flow chart showing the configuration process in the embodiment shown in Figure 7; Figure 9 is a QoS attribute table created in the embodiment shown in Figure 8.

As shown in FIG. 4 and FIG. 7, the configuration process embodiment performs the following configuration processing, as shown in FIG. 8, the steps are as follows:

Step 1: Create a QoS attribute table, as shown in Figure 9.

Specifically, the QoS attribute table is a linear table whose entry content is innerCos, which is the internal priority used by the system; qoslndex represents the index of the QoS attribute table, which is divided into two parts: QosBase and pri, where qosBase puts the QoS attribute The table is divided into 9 blocks, and pri is used as a sub-index of each inner table entry.

Step 2: Configure VPN user access on the PE and assign an access attribute entry to each access user.

Step 3: Configure the VPN pipe mode.

Step 4: Specify the access user QoS policy, that is, assign priority to each access user. Each access user in step 2 allocates a QoS index base address, and the allocation method is as follows: If it is a unified mode, the QoS index base address is 0; if it is a pipe or a short pipe mode, the QoS index base address is assigned with the specified priority. Level - corresponding.

Step 5: Save the QoS index base address assigned in step four to the user access attribute entry in step 2.

FIG. 10 is a flowchart of implementing QoS of a VPN in the embodiment shown in FIG. 7. The embodiment implements the process of virtual private network QoS, as shown in FIG. 10, the steps are as follows:

Step 1: The Layer 2 packet enters the switch forwarding process to determine whether the VPN access condition is met.

Step 2: If not, perform the normal forwarding process. Otherwise, go to step 3. Step 3: Query the user access attribute table to obtain the QoS index base address.

Step 4: Use the QoS index base address obtained in step 3 to form a priority with the user packet.

QoS index, check the QoS attribute table, and get the internal priority.

Step 5: The QoS processing module 50 uses the internal priority returned in step 4 to perform packet scheduling. Step 6: The egress mapping module 70 performs the priority mapping of the encapsulated label using the internal priority returned in step four.

It should be noted that the steps shown in the flowchart of the accompanying drawings of the embodiments of the present invention may be executed in a computer system such as a set of computer executable instructions, and although a logical sequence is shown in the flowchart, In some cases, the steps shown or described may be performed in an order different than that described herein.

It can be seen from the description of the foregoing embodiments that the present invention achieves the following technical effects: enabling different access users to select different QoS policies at the ingress PE device, and different users for accessing the same VPN. Priority, providing a more flexible QoS strategy for network operations.

It will be apparent to those skilled in the art that the various modules or steps of the invention described above are apparent. It can be implemented by a general-purpose computing device, which can be centralized on a single computing device or distributed over a network of multiple computing devices. Alternatively, they can be implemented by program code executable by the computing device. They may be stored in a storage device by a computing device, or they may be fabricated into a plurality of integrated circuit modules, or a plurality of modules or steps thereof may be implemented as a single integrated circuit module. Thus, the invention is not limited to any specific combination of hardware and software.

The above is only the preferred embodiment of the present invention and is not intended to limit the scope of the present invention.

Claims

Claim

1. A service quality QoS implementation method for a virtual private network, including:

The method according to claim 1, wherein the one or more access users accessing the PE respectively configure the attribute value of the access attribute table, and obtain the corresponding relationship between the attribute value and the QoS policy, including:

Specifying a user message priority and a QoS index base address for each of the access users to obtain the QoS policy, and saving the QoS index base address to the access attribute table.

The method according to claim 2, wherein, before the user message priority and the QoS index base address are specified for each of the access users, the method further includes:

The method according to claim 2 or 3, wherein, when the access message of the access user meets the access condition, the QoS policy corresponding to the access message is obtained according to the corresponding relationship. , determining the internal priority of the access message includes:

The access side of the PE receives the access message; And querying, in the access attribute table, a QoS index base address corresponding to the access packet, where the access packet meets the VPN access condition;

The method according to claim 1, wherein after the QoS processing is performed on the access packet according to the determined internal priority, the method further includes:

6. A QoS implementation device for a virtual private network, comprising:

a configuration module, configured to separately configure an attribute value of the access attribute table for one or more access users accessing the PE, and obtain a correspondence between the attribute value and the QoS policy;

a determining module, configured to obtain, according to the corresponding relationship, a QoS policy corresponding to the access packet, to determine the access packet, if the access packet of the access user meets an access condition, Internal priority

The device according to claim 6, wherein the configuration module includes: an allocation module, configured to separately allocate an access attribute table for one or more access users accessing the PE;

8. The device according to claim 7, wherein the device further comprises: a configuration mode module, configured to configure a VPN pipe mode, where the VPN pipe mode includes: a unified mode, a pipeline mode, or a short pipe mode;

The device according to claim 7 or 8, wherein the determining module comprises: a receiving module, configured to receive, by the access side of the PE, the access message;

The second query module is configured to query the QoS attribute table by using the QoS index to obtain an internal priority of the access message.

10. The device according to claim 6, wherein the device further comprises: