WO2015124015A1

WO2015124015A1 - Data packet forwarding method and device

Info

Publication number: WO2015124015A1
Application number: PCT/CN2014/093014
Authority: WO
Inventors: 沈伟锋; 钟来军; 刘洪宽
Original assignee: 华为技术有限公司
Priority date: 2014-02-21
Filing date: 2014-12-04
Publication date: 2015-08-27
Also published as: CN104869062B; CN104869062A

Abstract

Disclosed is a data packet forwarding method, which is applied to an OpenFlow switch. In the application process, the method comprises: when a first packet of fragmented data packets reaches an OpenFlow switch, generating an index record in accordance with the first packet, the index record containing a correlation between a data packet identifier of a data packet where the first packet is located and the fourth layer of information in the first packet; and when a fragmented data packet of a non-first packet corresponding to the first packet reaches the OpenFlow switch, reading the fourth layer of information in the index record, and forwarding the fragmented data packet of a non-first packet in accordance with the fourth layer of information, thereby solving the problem that an OpenFlow switch cannot forward data packets except the non-first packet in accordance with the fourth layer of information.

Description

Data packet forwarding method and device

Technical field

The present application relates to the field of network communications, and in particular, to a packet forwarding method and device.

Background technique

The OpenFlow technology was first proposed by Stanford University. Based on the existing TCP/IP technology conditions, the OpenFlow technology aims to solve the bottlenecks caused by the current network facing new services based on the innovative network interconnection concept. Its core idea is to transform the packet forwarding process, which was originally controlled by the switch/router, into an independent process completed by the OpenFlow switch and the control server respectively.

In the process of forwarding a complete data packet, when the length of the data packet exceeds the Maximum Transmission Unit (MTU) of the link layer, the IP layer performs packet fragmentation on the data packet and obtains the fragmentation. The first packet is called the first packet. The first packet contains the fourth layer information of the open system interconnection OSI required in the packet forwarding process. The other packets except the first packet do not contain the fourth layer information of the OSI. .

The inventor found that when the OpenFlow switch forwards the fragmented non-first packet, the OpenFlow switch cannot be used because the fragmented non-first packet does not contain the fourth layer of OSI information. The fourth layer information is forwarded to data packets other than the first packet.

Summary of the invention

The embodiment of the invention provides a data packet forwarding method and device, so as to solve the problem that an OpenFlow switch cannot forward data packets other than the first packet according to the fourth layer information.

To achieve the above objective, the embodiment of the present invention provides the following technical solutions:

In a first aspect, a data packet forwarding method is provided, including:

Receiving a fragmented data packet that is not the first packet;

Determining, according to the data packet identifier in the fragment data packet, an index record corresponding to the data packet identifier in the index table;

Reading the index record when the index record corresponding to the packet identifier is found The open system of the recorded system interconnects the fourth layer information of the OSI, and forwards the fragmented data packet according to the fourth layer information;

The index record is generated according to a first packet corresponding to the fragment data packet, where the index record includes a correspondence between the data packet identifier and the fourth layer information in the first packet. relationship.

With reference to the first aspect, in a first possible implementation manner, the process of establishing the index record includes:

And acquiring, when the first packet is received, the data packet identifier and the fourth layer information included in the first packet;

Establishing an index relationship between the data packet identifier and the fourth layer information;

And generating, according to the index relationship, the index record that includes a correspondence between the data packet identifier and the fourth layer information in the index table.

In combination with the first aspect, in a second possible implementation manner, the method further includes:

When the index record is not found, the fragment data packet is cached; and when the cache duration meets a preset cache period, the index record is re-searched in the index table.

With reference to the first aspect, in a third possible implementation, the forwarding, by the fourth layer information, the fragment data packet includes:

Adding the fourth layer information to the forwarding information corresponding to the fragment data packet;

And forwarding the fragmented data packet according to the forwarding information.

In conjunction with the third possible implementation of the first aspect, in a fourth possible implementation, the method further includes:

The fourth layer information in the fragmented data packet is marked as unmodifiable information.

With reference to the first aspect, or the first possible implementation manner of the first aspect, in a fifth possible implementation manner, the method further includes:

The index record is deleted according to a preset deletion condition.

In a second aspect, a packet forwarding device is provided, including:

a receiving unit, configured to receive a fragmented data packet that is not the first packet;

a searching unit, configured to be connected to the receiving unit, configured to search, according to the data packet identifier in the fragment data packet, an index record corresponding to the data packet identifier in the index table;

a forwarding unit, configured to connect to the searching unit, to read the fourth of the open system interconnection OSI in the index record when the index record corresponding to the data packet identifier is found Layer information, and forwarding the fragment data packet according to the fourth layer information;

In combination with the second aspect, in the first possible implementation manner, the method further includes:

An obtaining unit, configured to acquire, when the first packet is received, the data packet identifier and the fourth layer information included in the first packet;

An establishing unit, configured to be connected to the acquiring unit, configured to establish an index relationship between the data packet identifier and the fourth layer information;

a generating unit, configured to be connected to the establishing unit, configured to generate, in the index table, the index record that includes a correspondence between the data packet identifier and the fourth layer information according to the index relationship.

In combination with the second aspect, in a second possible implementation manner, the method further includes:

And a cache unit, configured to be connected to the search unit, configured to cache the fragment data packet when the index record is not found.

In combination with the second aspect, in a third possible implementation manner, the method further includes:

The deleting unit is configured to delete the index record according to a preset deletion condition.

According to the technical solution provided by the embodiment of the present invention, a data packet forwarding method is provided in the embodiment of the present invention. The method is applied to an OpenFlow switch. When the method is applied, when the first packet of the fragmented data packet arrives at the OpenFlow The switch generates an index record according to the first packet, where the index record includes a correspondence between a data packet identifier of the data packet in which the first packet is located and fourth layer information in the first packet; When the non-first packet fragment data packet of the packet arrives at the OpenFlow switch, the fourth layer information in the index record is read, and the non-first packet fragment data packet is performed according to the fourth layer information. Forwarding solves the problem that the OpenFlow switch cannot forward packets other than the first packet according to the fourth layer information.

DRAWINGS

In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings used in the embodiments or the prior art description will be briefly described below. Obviously, the drawings in the following description are only in the present application. Some of the embodiments described are for those of ordinary skill in the art, not Other drawings can also be obtained from these drawings on the premise of creative work.

FIG. 1 is a schematic structural diagram of an IP fragment data packet according to an embodiment of the present disclosure;

2 is a flowchart of a method for forwarding a data packet according to an embodiment of the present invention;

FIG. 3 is a flowchart of a specific method for forwarding a data packet according to an embodiment of the present invention;

4 is a schematic structural diagram of an index table according to an embodiment of the present invention;

FIG. 5 is a flowchart of a specific method for forwarding a data packet according to an embodiment of the present invention;

FIG. 6 is a schematic structural diagram of a data packet forwarding device according to an embodiment of the present disclosure;

FIG. 7 is a schematic structural diagram of a data packet forwarding device according to an embodiment of the present disclosure;

FIG. 8 is still another schematic structural diagram of a data packet forwarding device according to an embodiment of the present invention.

detailed description

In order to enable those skilled in the art to better understand the solution of the present application. The technical solutions in the embodiments of the present application are clearly and completely described in the following with reference to the drawings in the embodiments of the present application. It is obvious that the described embodiments are only a part of the embodiments of the present application, and not all of the embodiments. All other embodiments obtained by a person of ordinary skill in the art based on the embodiments of the present application without departing from the inventive scope shall fall within the scope of the application.

IP packets are fragmented in the IP packet during network transmission. Because the link layer has the Maximum Transmission Unit (MTU) feature, it limits the maximum length of data frames, and different network types have an upper limit. The MTU of Ethernet is 1500. If the IP layer has a data packet to transmit and the length of the data packet exceeds the MTU, then the IP layer performs a fragmentation operation on the data packet so that each slice has a length less than or equal to the MTU.

A complete data packet in the transmission process, the data packet contains multi-layer information of the open system interconnection OSI, and the multi-layer information of the OSI includes: the first layer information L1 refers to a physical transmission medium, such as an optical fiber, Network line, etc.; the second layer of information L2 refers to the mac address; the third layer of information L3 refers to the IP address; the fourth layer of information L4 refers to the port, for example, the web service generally uses port 80; the fourth layer of information refers to a specific network protocol, such as http Agreement, or https protocol, etc.

When the IP layer fragments a data packet, the first data packet obtained by the fragmentation is called the first packet, and the first packet is encapsulated. Contains all packet information: Layer 1 information, Layer 2 information, Layer 3 information, Layer 4 information, and Layer 4 and above information. The slice data packet after the first packet does not include the fourth layer information and the fourth layer or more information, that is, the fragment data packet other than the first packet contains only the mac address and the ip information.

FIG. 1 is a schematic structural diagram of an IP fragment data packet. After a complete data packet is fragmented, each fragment data packet has the same segment identifier, and the segment identifier is used to indicate that each fragment data packet belongs to the same data pack. The DF identifier in the IP fragment packet structure indicates whether the fragment packet is a fragmented packet, and the MF identifier indicates whether the current fragment packet has a subsequent fragment packet.

When the OpenFlow switch forwards the fragmented data packet according to the preset forwarding rule, when the preset forwarding rule specifies that the data packet is forwarded according to the second layer information or the third layer information, the OpenFlow switch is based on the fragmented data packet. The second layer information or the third layer information in the middle is forwarded to each fragment data packet.

When the preset forwarding rule specifies that the fragmented data packet is forwarded according to the fourth layer information, the first packet includes the fourth layer information, and the OpenFlow switch may directly forward the first packet according to the fourth layer information in the first packet. . The layered data packet other than the first packet does not contain the fourth layer information, so OpenFlow cannot forward the fragmented data packet that is not the first packet according to the preset forwarding rule.

The present invention provides a data packet forwarding method, which is applied to an OpenFlow switch, and its execution subject may be a processor component in an OpenFlow switch or an Openflow switch. Referring to FIG. 2, the present invention is shown in the present invention. A schematic diagram of a structure of a packet forwarding method, including:

Step S101: Receive a fragment data packet that is not the first packet;

When the OpenFlow switch receives the data packet, it can determine whether the received data packet is a fragmented data packet according to the segment identifier in the data packet, and can determine the DF identifier, the MF identifier, and the segment offset in the data packet. Whether the received fragmented packet is the first packet.

When the received data packet is a complete data packet or a first packet, the data packet may be directly forwarded according to the preset forwarding rule, and the forwarding rule is to forward the data packet according to the fourth layer information in the data packet.

When it is determined that the received data packet is a non-first packet fragment data packet, the fragment data packet is used as a target data packet for subsequent processing.

Step S102: Searching, according to the data packet identifier in the fragment data packet, an index record corresponding to the data packet identifier in the index table;

In the embodiment of the present invention, the data packet identifier in the fragment data packet is obtained, where the data packet identifier may be a segment identifier in the fragment data packet, or may be a destination IP included in the fragment data packet. And combining the source IP and the IP packet identifier, and then searching for an index record corresponding to the data packet identifier according to the data packet identifier.

The index record in the embodiment of the present invention is generated according to the first packet corresponding to the fragment data packet received by the OpenFlow switch, where the index record includes the data packet identifier and the first packet. The correspondence between the fourth layer of information. The generated index record is stored in a pre-established index table.

In the embodiment of the present invention, the first packet corresponding to the fragmented data packet refers to a first packet that belongs to the same complete data packet as the fragmented data packet, and the first packet has the same data as the fragmented data packet. The package identifier has the same segment identifier.

Step S103: When the index record corresponding to the data packet identifier is found, read the fourth layer information of the Open System Interconnection OSI in the index record, and according to the fourth layer information The fragmented data packet is forwarded.

In the embodiment of the present invention, after the index record corresponding to the data packet identifier of the fragmented data packet is found in the OpenFlow switch, the fourth layer information in the index record is read, and the fourth layer information is The fourth layer information in the first packet corresponding to the fragmented data packet is forwarded, so that the fragmented data packet can be forwarded according to the fourth layer information in the index record.

When the OpenFlow switch forwards the fragmented data packet, when the forwarding rule forwards all the fragmented data packets according to the fourth layer information, the OpenFlow switch generates an index according to the received first packet when receiving the first packet. Recording, referring to FIG. 3, shows an index of an embodiment of the present invention. Record generation process, including:

Step S201: When the first packet is received, obtain the data packet identifier and the fourth layer information included in the first packet.

When receiving the fragmented data packet, the OpenFlow switch determines whether the received fragmented data packet is the first packet according to the DF identifier, the MF identifier, and the segment offset in the fragmented data packet, and determines the received fragmented data packet. For the first packet, the packet identifier and the fourth layer information included in the first packet are obtained, and the packet identifier of the first packet may be the segment identifier in the first packet, or may be the destination IP included in the first packet. , a combination of source IP and IP packet identifiers.

Step S202: Establish an index relationship between the data packet identifier and the fourth layer information.

As shown in FIG. 4 of the embodiment of the present invention, the combination of the destination IP, the source IP, and the IP packet identifier in the first packet is used as the packet identifier of the first packet, and the fourth layer information in the first packet is obtained, that is, the source of the forwarding. Port information and destination port information; establishing an index relationship between the data packet identifier of the first packet and the fourth layer information.

Step S203: Generate, in the index table, the index record that includes the correspondence between the data packet identifier and the fourth layer information according to the index relationship.

An index record is generated according to the established index table relationship, and the packet identifier of the first packet is used as an index record identifier of the index record. As shown in FIG. 4, the index record includes the packet identifier of the first packet and the fourth layer information in the first packet.

The packet forwarding method provided by the embodiment of the present invention is applicable, because the first packet and the non-first packet fragment data packet belonging to the same complete data packet all contain the same data packet identifier, and therefore the fragment data of the non-first packet is received. When the packet is used, the index record having the same packet identifier can be searched according to the packet identifier of the non-first packet, and then the fourth layer information in the index record is read, and the non-first packet received according to the fourth layer information is received. The fragmented packets are forwarded.

In the data packet forwarding method provided by the embodiment of the present invention, an OpenFlow switch receives a plurality of different first packets, and an index record corresponding to the first packet is generated for each first packet OpenFlow switch. Obtaining a packet identifier of the fragmented data packet when receiving a fragmented data packet that is not the first packet; Each index record of the OpenFlow switch is traversed one by one according to the data packet identifier.

When the index record having the same data packet identifier as the received fragment data packet is found, it is indicated that the index record is established according to the first packet corresponding to the fragment data packet, and the index record is determined as The data packet of the fragmented data packet identifies a corresponding index table.

FIG. 5 is a flowchart of a detailed method for forwarding a data packet according to an embodiment of the present invention, including:

Step S301: Receive a fragment data packet;

Step S302: determining whether the fragmented data packet is the first packet, if yes, executing step S303; otherwise, executing step S304;

Step S303: generating an index record according to the first packet, and performing a step S309;

Step S304: Find an index record corresponding to the fragment data packet;

Step S305: determining whether the index record is found, when found, step S307; otherwise, executing step S306;

Step S306: Cache the fragment data packet for a preset period of time, and return to step S304 again;

After a complete packet is IP fragmented, the fragmented packet obtained by the fragment will arrive at the OpenFlow switch in a certain period of time. If the fragmented packet of the non-first packet arrives at the OpenFlow switch before the first packet, it is not the first packet. The fragmented data packet cannot be found with the corresponding index record. At this time, the non-first packet fragment data packet that has been received is cached for a period of time, and then the corresponding index record is searched in the OpenFlow switch.

Step S307: The fourth layer information in the index record is added to the forwarding information of the fragment data packet;

In the embodiment of the present invention, for the received fragmented data packet of the non-first packet, after the index record corresponding to the fragment data packet is found, the fourth layer information in the index record is read, and the The four layers of information are added to the forwarding information corresponding to the fragmented data packet, and then according to the forwarding information. The fourth layer of information forwards the fragmented data packet. After receiving each fragmented data packet, the fragmented data packet needs to be analyzed, the forwarding information of the fragmented data packet is obtained, and the fragmented data packet is forwarded according to the forwarding information. The forwarding information obtained by analyzing the fragment data packet does not include the fourth layer information. Here, the fourth layer information is added to the forwarding information corresponding to the fragment data packet, so that the fourth layer information can be forwarded according to the fourth layer information. The forwarding information is rule information required in the data packet forwarding process, and includes information such as a port and a protocol corresponding to the packet forwarding.

Step S308: Marking the fourth layer information in the fragment data packet as unmodifiable information;

Since the received non-first packet fragment data packet does not include the fourth layer information, only the fourth layer information is added in the forwarding information of the fragment data packet, so the fourth layer information in the fragmented data packet needs to be marked. The information cannot be modified to prevent the modification of the fourth layer information in the fragmented data packet in the subsequent forwarding process, which affects the subsequent forwarding process.

Step S309: Query the multi-level flow table in the OpenFlow switch, and forward the fragmented data packet.

In the embodiment of the present invention, after the complete layer 4 information is added to the forwarding information of the non-first packet of the fragmented data packet, the multi-level flow table in the OpenFlow switch may be queried to forward the fragmented data packet.

In the embodiment of the present invention, for a complete data packet, after all the fragment data packets of the complete data packet are forwarded, the established index table may be deleted according to a preset deletion condition to release the memory. space.

The preset deletion condition may be set to a certain time interval. When the time interval is reached, the established index record is deleted, and the established index may be directly determined after determining that each fragment packet of a complete data packet is forwarded. The record is deleted.

For the above data packet forwarding method, a detailed example of the implementation of each step is described in detail in the embodiment of the present invention:

For a completed data packet A, after the IP fragmentation, the first packet a, the fragmented data packet b, and the fragmented data packet c are obtained; in a certain time interval, the time of the above three data packets reaching the OpenFlow is compliant. The sequence is fragmented packet b, first packet a, and fragment packet c.

When the fragmented data packet b reaches the OpenFlow switch, it is determined that the fragmented data packet b is a fragmented data packet that is not the first packet, and the fragmented data packet b is used as a target data packet to be processed, and according to the fragmented data packet b In the data packet identifier, the index record corresponding to the packet identifier of the fragmented data packet b is searched, and since the fragmented data packet b arrives before the first packet a, the corresponding index record cannot be found, and the fragmented data packet is obtained. b cache for a while.

When the first packet a arrives at the OpenFlow switch, when the OpenFlow switch determines that the first packet a is the first packet, the packet identifier of the first packet a and the fourth layer information in the first packet a are read, and the packet identifier of the first packet a is established. Index relationship with the fourth layer of information, and generate an index record. At the same time, the first packet a is forwarded according to a preset forwarding rule.

When the fragmented data packet c arrives at the OpenFlow switch, it is determined that the fragmented data packet c is a fragmented data packet that is not the first packet, and the fragmented data packet c is used as a target data packet to be processed, and according to the fragmented data packet. The packet identifier in the packet c is searched for an index record corresponding to the fragment packet c, and the index record is established according to the first packet a. The fragmented data packet c has the same data packet identifier as the first packet a. When found, the fourth layer information in the index record is read, and the fourth layer information is added to the forwarding information corresponding to the fragmented data packet c. In the table, the fourth layer information is marked as non-modifiable information. The fragmented data packet c is then forwarded according to the fourth layer information in the forwarding information table.

When the buffer time of the fragmented data packet b satisfies the condition, the index record is re-discovered, and the same execution process as the fragmented data packet c is performed, and when the first packet a, the fragmented data packet b, and the fragmented data packet c are all forwarded. After that, delete the created index table.

Corresponding to the foregoing packet forwarding method, the embodiment of the present invention further provides a data packet forwarding device, and FIG. 6 is a schematic structural diagram of the device. The device may be an OpenFlow switch, and the device includes:

The receiving unit 401 is configured to receive a fragmented data packet that is not the first packet;

When receiving the data packet, the receiving unit 401 can determine the receiving according to the segment identifier in the data packet. Whether the received data packet is a fragmented data packet, according to the DF identifier, the MF identifier, and the segment offset in the data packet, it can be determined whether the received fragmented data packet is the first packet.

The searching unit 402 is connected to the receiving unit 401, and configured to search, according to the data packet identifier in the fragment data packet, an index record corresponding to the data packet identifier in the index table;

In the embodiment of the present invention, the data packet identifier in the fragment data packet is obtained, where the data packet identifier may be a segment identifier in the fragment data packet, or may be a destination IP included in the fragment data packet. And a combination of the source IP and the IP packet identifier, the searching unit 402 searches for an index record corresponding to the data packet identifier according to the data packet identifier.

The forwarding unit 403 is connected to the searching unit, and is configured to read the fourth layer information of the Open System Interconnection OSI in the index record when the index record corresponding to the data packet identifier is found. And forwarding the fragment data packet according to the fourth layer information;

In the embodiment of the present invention, after the index record corresponding to the data packet identifier of the fragmented data packet is found, the forwarding unit 403 reads the fourth layer information in the index record, where the fourth layer information is the The fourth layer of information in the first packet corresponding to the slice data packet, so it can be based on the first in the index record The four layers of information forward the fragmented data packet.

FIG. 7 is a schematic structural diagram of a data packet forwarding device according to an embodiment of the present invention. The data packet forwarding device in the present invention further includes:

The obtaining unit 404 is configured to acquire, when the first packet is received, the data packet identifier and the fourth layer information included in the first packet.

The establishing unit 405 is connected to the obtaining unit 404, and establishes an index relationship between the data packet identifier and the fourth layer information.

The generating unit 406 is connected to the establishing unit 405, and configured to generate, in the index table, the index record that includes the correspondence between the data packet identifier and the fourth layer information according to the index relationship.

Preferably, the data packet forwarding device provided by the embodiment of the present invention further includes:

The cache unit 407 is connected to the search unit 402, and is configured to buffer the fragment data packet when the index record is not found.

The deleting unit 408 is configured to delete the index record according to a preset deletion condition.

Referring to FIG. 8, another schematic structural diagram of a data packet forwarding device in an embodiment of the present invention is shown. The data packet forwarding device 500 may include a CPU 501 and a memory 502 in hardware. The CPU 501 can at least perform the following steps by running the software program 503 stored in the memory 502 and calling the data stored in the memory 502:

Receiving a fragmented data packet that is not the first packet;

When the index record corresponding to the data packet identifier is found, the fourth layer information of the Open System Interconnection OSI in the index record is read, and the fragment is compared according to the fourth layer information. The data packet is forwarded;

Wherein the index record is generated according to a first packet corresponding to the fragmented data packet, The index record includes a correspondence between the data packet identifier and the fourth layer information in the first packet.

For detailed implementation of the above various steps, refer to the introduction of the foregoing method herein, and no further description is provided herein.

The foregoing memory may specifically be a DDR SDRAM, an SRAM, a FLASH, an SSD, etc., and mainly includes a program storage area and a data storage area, wherein the program storage area may store an operating system and an application required for at least one function (for example, the above software program) 503) and the like; the data storage area may store data finally generated according to the execution condition of the CPU, and the intermediate data generated by the CPU in executing the above steps is stored in the memory.

It should be noted that the CPU 501 and the memory 502 can be integrated into the same chip, or can be two independent devices.

The program in the embodiment of the present invention may specifically include:

The details of the structure and function of the receiving unit, the searching unit, and the forwarding unit are described in the foregoing description, and are not described herein again.

For the solution provided by the embodiment of the present invention, those skilled in the art can clearly understand that for the convenience and brevity of the description, the specific working process of the foregoing device and module can refer to the corresponding process in the foregoing method embodiment. Description, no longer repeat here.

A person skilled in the art can understand that all or part of the steps of implementing the above method embodiments may be completed by using hardware related to the program instructions. The foregoing program may be stored in a computer readable storage medium, and the program is executed when executed. The foregoing steps include the steps of the foregoing method embodiments; and the foregoing storage medium includes: a medium that can store program codes, such as a ROM, a RAM, a magnetic disk, or an optical disk.

In the several embodiments provided by the present application, it should be understood that the disclosed apparatus and method may be implemented in other manners. For example, the device embodiments described above are merely illustrative. For example, the division of the modules is only a logical function division. In actual implementation, there may be another division manner, for example, multiple modules or components may be combined or Can be integrated into another device, Or some features can be ignored or not executed. In addition, the mutual coupling or direct coupling or communication connection shown or discussed may be an indirect coupling or communication connection through some communication interface, device or module, and may be in an electrical, mechanical or other form.

The modules described as separate components may or may not be physically separated, and the components displayed as modules may or may not be physical units, that is, may be located in one place, or may be distributed to multiple network units. Some or all of the modules may be selected according to actual needs to implement the objectives of the solution of the embodiment.

In addition, each functional module in each embodiment of the present invention may be integrated into one processing module, or each module may exist physically separately, or two or more modules may be integrated into one module.

Finally, it should be noted that the above embodiments are merely illustrative of the technical solutions of the present invention, and are not intended to be limiting; although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art will understand that The technical solutions described in the foregoing embodiments may be modified, or some or all of the technical features may be equivalently replaced; and the modifications or substitutions do not deviate from the technical solutions of the embodiments of the present invention. range.

Claims

A data packet forwarding method, comprising:

Receiving a fragmented data packet that is not the first packet;

Determining, according to the data packet identifier in the fragment data packet, an index record corresponding to the data packet identifier in the index table;

When the index record corresponding to the data packet identifier is found, the fourth layer information of the Open System Interconnection OSI in the index record is read, and the fragment is compared according to the fourth layer information. The data packet is forwarded;

The index record is generated according to a first packet corresponding to the fragment data packet, where the index record includes a correspondence between the data packet identifier and the fourth layer information in the first packet. relationship.
The method according to claim 1, wherein the process of establishing the index record comprises:

And acquiring, when the first packet is received, the data packet identifier and the fourth layer information included in the first packet;

Establishing an index relationship between the data packet identifier and the fourth layer information;

And generating, according to the index relationship, the index record that includes a correspondence between the data packet identifier and the fourth layer information in the index table.
The method of claim 1 further comprising:

When the index record is not found, the fragment data packet is cached; and when the cache duration meets a preset cache period, the index record is re-searched in the index table.
The method according to claim 1, wherein the forwarding the fragment data packet according to the fourth layer information comprises:

Adding the fourth layer information to the forwarding information corresponding to the fragment data packet;

And forwarding the fragmented data packet according to the forwarding information.
The method of claim 4, further comprising:

The fourth layer information in the fragmented data packet is marked as unmodifiable information.
The method according to claim 1 or 2, further comprising:

The index record is deleted according to a preset deletion condition.
A packet forwarding device, comprising:

a receiving unit, configured to receive a fragmented data packet that is not the first packet;

a searching unit, configured to be connected to the receiving unit, configured to search, according to the data packet identifier in the fragment data packet, an index record corresponding to the data packet identifier in the index table;

a forwarding unit, configured to be configured to read, when the index record corresponding to the data packet identifier is found, read the fourth layer information of the open system interconnection OSI in the index record, And forwarding the fragment data packet according to the fourth layer information;

The index record is generated according to a first packet corresponding to the fragment data packet, where the index record includes a correspondence between the data packet identifier and the fourth layer information in the first packet. relationship.
The device according to claim 7, further comprising:

An obtaining unit, configured to acquire, when the first packet is received, the data packet identifier and the fourth layer information included in the first packet;

An establishing unit, configured to be connected to the acquiring unit, configured to establish an index relationship between the data packet identifier and the fourth layer information;

a generating unit, configured to be connected to the establishing unit, configured to generate, in the index table, the index record that includes a correspondence between the data packet identifier and the fourth layer information according to the index relationship.
The device according to claim 7, further comprising:

And a cache unit, configured to be connected to the search unit, configured to cache the fragment data packet when the index record is not found.
The device according to claim 8, further comprising:

The deleting unit is configured to delete the index record according to a preset deletion condition.