WO2015143802A1 - 业务功能链处理方法及装置 - Google Patents

业务功能链处理方法及装置 Download PDF

Info

Publication number
WO2015143802A1
WO2015143802A1 PCT/CN2014/082846 CN2014082846W WO2015143802A1 WO 2015143802 A1 WO2015143802 A1 WO 2015143802A1 CN 2014082846 W CN2014082846 W CN 2014082846W WO 2015143802 A1 WO2015143802 A1 WO 2015143802A1
Authority
WO
WIPO (PCT)
Prior art keywords
forwarding
packet
sfc
forwarding table
forwarding device
Prior art date
Application number
PCT/CN2014/082846
Other languages
English (en)
French (fr)
Inventor
孟伟
王翠
吴波
范亮
Original Assignee
中兴通讯股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 中兴通讯股份有限公司 filed Critical 中兴通讯股份有限公司
Priority to EP14887702.0A priority Critical patent/EP3125476B1/en
Priority to US15/124,196 priority patent/US10084706B2/en
Publication of WO2015143802A1 publication Critical patent/WO2015143802A1/zh

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00Routing or path finding of packets in data switching networks
    • H04L45/74Address processing for routing
    • H04L45/745Address table lookup; Address filtering
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00Data switching networks
    • H04L12/64Hybrid switching systems
    • H04L12/6418Hybrid transport
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00Routing or path finding of packets in data switching networks
    • H04L45/302Route determination based on requested QoS
    • H04L45/306Route determination based on the nature of the carried application
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00Routing or path finding of packets in data switching networks
    • H04L45/54Organization of routing tables
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00Routing or path finding of packets in data switching networks
    • H04L45/64Routing or path finding of packets in data switching networks using an overlay routing layer
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00Network arrangements, protocols or services for addressing or naming
    • H04L61/09Mapping addresses
    • H04L61/25Mapping addresses of the same type
    • H04L61/2503Translation of Internet protocol [IP] addresses
    • H04L61/256NAT traversal
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00Network arrangements, protocols or services for addressing or naming
    • H04L61/50Address allocation
    • H04L61/5007Internet protocol [IP] addresses
    • H04L61/5014Internet protocol [IP] addresses using dynamic host configuration protocol [DHCP] or bootstrap protocol [BOOTP]
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00Routing or path finding of packets in data switching networks
    • H04L45/38Flow based routing

Definitions

  • the present invention relates to the field of communications, and in particular to a method and apparatus for processing a service function chain.
  • SFC Service Function Chaining
  • the network edge Since the development of the data center network to the Overlay network, the network edge has become the demarcation point between the virtual network and the physical network, where the network edge is Server or ToR, and may also be Gateway.
  • Overlay technology does not solve all the problems.
  • Middlewares in the data center such as firewall/load balancer. These devices are processed based on user services. If you traverse these devices through tunnels, it is obviously not acceptable.
  • FIG. 1 is a SFC according to the related art. Schematic diagram of the (business function chain), as shown in Figure 1, the solid line/dashed line represents two Service Chains.
  • the framework of the SFC can basically include the following components: (1) Service Overlay, that is, an overlay technology that each network edge node needs to communicate;
  • GSCP Generic Service Control Plane
  • Service Classification that is, need to identify the stream, and then perform specific Service Function Chaining processing on the specific stream
  • Control plane metadata Dataplane Metadata
  • Metadata allows each edge service processing node to exchange information with each other to achieve certain business processing purposes.
  • SFC is a way to separate the network device service function and the forwarding function, thereby implementing independent operation and processing of the service function, and improving the forwarding performance of the network device.
  • the session and forwarding table generated by the service is usually created and saved on the SFC. It is not clear that the created forwarding table needs to be sent to the router, switch, hardware firewall, and customer pre-device. (Customer Premise Equipment, referred to as CPE) and other forwarding devices.
  • CPE Customer Premise Equipment
  • FIG. 2 is a schematic diagram of an application of a CPE (Customer Pre-Equipment) in an SFC scenario according to the related art.
  • a CPE Customer Pre-Equipment
  • FIG. 2 a group of user terminals directly accesses a CPE, and a Service Classification component is integrated on the CPE.
  • the business that each CPE needs to process needs to be uploaded to a group of SFCs for processing.
  • the SFC creates the relevant session, the forwarding table. If only the CPE integrates the Service Classification component of the SFC, the network device of the external network does not implement SFC. In this scenario, the traffic of the inbound traffic (that is, the traffic from the external network to the internal network (internet users)) needs to be forwarded to the CPE. The CPE then processes the service into the SFC for processing. . Because the SFC manages multiple CPE devices, the SFC is not directly connected to the user terminal. The SFC cannot send the processed packets directly to the user terminal. In the related art, the SFC does not send the forwarding table created by the SFC to the forwarding device, which causes the data traffic forwarding failure. Currently, no effective solution has been proposed.
  • a service function chain processing method including: a service function chain (SFC) receiving a message sent by a forwarding device; and an SFC generating a forwarding table corresponding to the message; When the state of the switch is on, the SFC sends the forwarding table to the forwarding device, so that the forwarding device can forward the packet according to the forwarding table when receiving the packet, where the forwarding table is sent to indicate Whether the SFC sends the forwarding table to the forwarding device.
  • SFC service function chain
  • the packet forwarding manner corresponding to the forwarding switch is: the forwarding device forwards, wherein the forwarding device forwards, after the SFC generates the forwarding table, the forwarding table is sent to the forwarding device, and when the packet enters the forwarding device, The forwarding device first searches for a forwarding table corresponding to the packet. If yes, the forwarding device forwards the packet according to the forwarding table. If not, the forwarding device sends the packet to the SFC, and the SFC creates a forwarding table for the packet. Send the forwarding table to the forwarding device.
  • the packet forwarding manner corresponding to the sending switch of the forwarding table includes: SFC forwarding, where the SFC does not forward the forwarding table to the forwarding device after the SFC generates the forwarding table, and forwards the packet when the packet enters the forwarding device.
  • the device sends the packet to the SFC.
  • the SFC creates a forwarding table for the packet and forwards the packet according to the forwarding table.
  • the information used to generate the forwarding table includes one of the following: a routing table, a network address translation NAT mapping entry, and an open flow openflow table.
  • a service function chain processing apparatus including: a receiving module, configured to receive a packet sent by a forwarding device; a generating module, configured to generate a forwarding table corresponding to the packet; and a sending module, When the state in which the switch is sent in the forwarding table is set to be on, the forwarding table is sent to the forwarding device, so that the forwarding device can forward the packet according to the forwarding table when receiving the packet, where The forwarding table sending switch is used to indicate whether the service function chain (SFC) sends the forwarding table to the forwarding device.
  • SFC service function chain
  • the information used to generate the forwarding table includes one of the following: a routing table, a network address translation NAT mapping entry, and an open flow openflow table.
  • a service function chain processing method including: a service function chain (SFC) receiving a packet sent by a forwarding device, where the packet carries a network service packet header; If the loopback flag is set in the header of the packet, the SFC creates a forwarding table corresponding to the packet, processes the packet according to the forwarding table, and sends the processed packet to the forwarding device.
  • the processing operation comprises at least one of: encapsulation/decapsulation, message field processing.
  • a service function chain processing apparatus including: a receiving module, configured to receive a packet sent by a forwarding device, where the packet carries a network service packet header; a processing module, setting In the case that the loopback flag pre-set in the network service packet header has been set, the service function chain (SFC) creates a forwarding table corresponding to the packet, and processes the packet according to the forwarding table, and processes the packet. The subsequent packet is sent to the forwarding device for packet forwarding.
  • a receiving module configured to receive a packet sent by a forwarding device, where the packet carries a network service packet header
  • a processing module setting In the case that the loopback flag pre-set in the network service packet header has been set, the service function chain (SFC) creates a forwarding table corresponding to the packet, and processes the packet according to the forwarding table, and processes the packet.
  • the subsequent packet is sent to the forwarding device for packet forwarding.
  • the processing operation comprises at least one of: encapsulation/decapsulation, message field processing.
  • the method of the present invention is to solve the problem that the SFC does not send the forwarding table created by the SFC to the forwarding device, which causes the data traffic to be forwarded, which is improved by the method of adding the forwarding switch or the loopback label.
  • the success rate of SFC forwarding data improves the data forwarding performance of network devices.
  • FIG. 1 is a schematic diagram of an SFC (Business Function Chain) according to the related art
  • FIG. 2 is a schematic diagram of an application of a CPE (Customer Pre-Equipment) in an SFC scenario according to the related art
  • FIG. 3 is an implementation according to the present invention.
  • FIG. 4 is a structural block diagram of a service function chain processing apparatus according to Embodiment 1 of the present invention.
  • FIG. 5 is a flowchart of a service function chain processing method according to Embodiment 2 of the present invention
  • FIG. 7 is a structural diagram of a service chain processing apparatus according to a second embodiment of the present invention
  • FIG. 7 is an application scenario diagram of a new forwarding table sending switch according to a preferred embodiment 1 of the present invention
  • FIG. 8A is a preferred embodiment 1 according to the present invention.
  • Figure 8B is a flow chart of message processing on an SFC according to a preferred embodiment 1 of the present invention
  • Figure 9 is a message exchange and forwarding table issued according to a preferred embodiment 1 of the present invention
  • FIG. 10 is an application scenario diagram of a newly added loopback mark according to a preferred embodiment 2 of the present invention;
  • FIG. 10 is an application scenario diagram of a newly added loopback mark according to a preferred embodiment 2 of the present invention
  • Embodiment 1 of the present invention provides a service function chain processing method.
  • FIG. 3 is a flowchart of a method for processing a service function chain according to the first embodiment of the present invention. As shown in FIG.
  • the method mainly includes the following steps (step S302-step S306): Step S302, a service function chain (SFC) receiving and forwarding device Sending a message; Step S304, the SFC generates a forwarding table corresponding to the message; Step S306: When the state of the previously issued forwarding table is set to ON, the SFC sends the forwarding table to the forwarding device to enable forwarding. When receiving the packet, the device can forward the packet according to the forwarding table. The forwarding table is sent to the SFC to send the forwarding table to the forwarding device.
  • the operator can deploy the SFC and open the forwarding device forwarding switch to enable the traditional router to receive the forwarding table delivered by the SFC without replacing the traditional router as a new forwarding device.
  • the packet forwarding mode corresponding to the forwarding switch of the forwarding table may include: forwarding by the forwarding device, where the forwarding device forwards the forwarding table to the forwarding device after the SFC generates the forwarding table, and the packet is sent to the forwarding device.
  • the forwarding device first searches for a forwarding table corresponding to the packet. If yes, the forwarding device forwards the packet according to the forwarding table. If not, the forwarding device sends the packet to the SFC.
  • the SFC sends the packet to the SFC. Create a forwarding table and send the forwarding table to the forwarding device.
  • the packet forwarding mode corresponding to the forwarding switch of the forwarding table may further include: SFC forwarding, where the SFC does not send the forwarding table to the forwarding device after the SFC generates the forwarding table, and the packet is sent.
  • the forwarding device sends the packet to the SFC.
  • the SFC creates a forwarding table for the packet and forwards the packet according to the forwarding table.
  • the applicable scenario of the service function chain processing method provided by the first embodiment may include: a network address translation NAT based on the service function SF, a dynamic host configuration protocol DHCP, and an internet protocol security IPsec.
  • the first embodiment of the present invention further provides a service function chain processing apparatus, which is used to implement the service function chain processing method provided in Embodiment 1.
  • 4 is a structural block diagram of a service function chain processing apparatus according to a first embodiment of the present invention. As shown in FIG. 4, the apparatus includes: a receiving module 10, a generating module 20, and a transmitting module 30.
  • the receiving module 10 is configured to receive the packet sent by the forwarding device, and the generating module 20 is configured to generate a forwarding table corresponding to the packet.
  • the sending module 30 is configured to send the switch to the pre-set forwarding table.
  • the forwarding table is sent to the forwarding device, so that the forwarding device can forward the packet according to the forwarding table when receiving the packet, where the forwarding table is sent to indicate whether the service function chain (SFC) is Send the forwarding table to the forwarding device.
  • the information used to generate the forwarding table may include one of the following: a routing table, a network address translation NAT mapping entry, and an open flow openflow table.
  • Embodiment 2 of the present invention provides a service function chain processing method.
  • FIG. 5 is a flowchart of a service function chain processing method according to Embodiment 2 of the present invention. As shown in FIG.
  • the method mainly includes the following steps (Step S502 - Step S504): Step S502, a Service Function Chain (SFC) receiving and forwarding device
  • the packet sent wherein the packet carries a network service packet header; and in step S504, when the loopback flag preset in the network service packet header has been set, the SFC creates a packet corresponding to the packet.
  • the device performs the processing of the packet according to the forwarding table, and sends the processed packet to the forwarding device for packet forwarding.
  • the operator can enable the loopback switch and set the switch in the service packet header of the packet.
  • the SFC component After the SFC component processes the packet, the SFC component sends the packet back to the source router and uses the route in the source router.
  • FIG. 6 is a structural block diagram of a service function chain processing apparatus according to Embodiment 2 of the present invention. As shown in FIG. 6, the apparatus includes: a receiving module 40 and a processing module 50.
  • the receiving module 40 is configured to receive a packet sent by the forwarding device, where the packet carries a network service packet header, and the processing module 50 is configured to set a loopback flag preset in the network service packet header.
  • the service function chain SFC
  • the processing operation may include at least one of the following: encapsulation/decapsulation, and message field processing.
  • the service function chain processing method provided in the foregoing Embodiment 1 or Embodiment 2 can solve the problem that the SFC cannot successfully forward data in a specific scenario by increasing the setting of the forwarding switch or the loopback label in the forwarding table, thereby improving the SFC forwarding data.
  • the success rate of the network device improves the data forwarding performance of the network device.
  • the service function chain processing method provided in the foregoing Embodiment 1 and Embodiment 2 is further described and illustrated in the following with reference to FIG. 7 to FIG. 12 and the preferred embodiment 1 and the preferred embodiment 2.
  • FIG. 7 is an application scenario diagram of a new forwarding table sending switch according to a preferred embodiment 1 of the present invention.
  • the foregoing Embodiment 1 can be implemented in the following manner:
  • the SFC node generates a forwarding entry (that is, the forwarding table) according to the received packet, and determines whether to forward the forwarding entry to the forwarding device according to the forwarding switch.
  • the forwarding entry is a table for forwarding packets according to the packet field information and some configuration information, such as a routing table of a traditional router, a NAT (Network Address Translation) mapping entry, an openflow (open flow) flow table, and the like.
  • the forwarding switch is one of forwarding device forwarding and SFC forwarding. After the forwarding device is forwarded, the SFC node sends the forwarding entry to the forwarding device. After the packet enters the forwarding device, it first looks up the forwarding table.
  • the forwarding device If the corresponding entry is found, it is forwarded by the forwarding device. If the corresponding entry is not found, the forwarding device sends the packet to the Service Classification component, and then sends the packet to the SFC node for processing. Forward the device.
  • SFC forwarding means that the SFC node does not send the forwarding entry to the forwarding device after it generates the forwarding entry. After receiving the packet, the forwarding device does not perform a lookup table. After the packet is sent to the Service Classification component, the packet is sent to the SFC node for processing.
  • the SFC node creates a forwarding entry and forwards the packet.
  • the forwarding switch can be configured by the user and notify the switch state of the SFC.
  • Step S8A02 a packet enters a message entry of a forwarding device
  • Step S8A04 forward The device determines whether the corresponding forwarding entry can be found. If yes, step S8A06 is performed. If no, step S8A08 is performed.
  • Step S8A06 the forwarding device processes the packet according to the content of the entry and forwards the packet.
  • Step S8A08 the forwarding device sends the packet. Go to the business classification component; Step S8A10, the business classification component is distributed to the corresponding business function chain component processing.
  • Step S8B02 a message enters a message entry of a service function chain (SFC); S8B04, the SFC determines whether the corresponding forwarding entry can be found. If yes, step S8B06 is performed. If no, step S8B08 is performed. Step S8B06, the SFC processes the packet according to the content of the entry and forwards the message; Step S8B08, SFC creates the packet. Forwarding the entry; Step S8B10: The SFC determines whether the packet forwarding mode corresponding to the switch sent by the forwarding table is forwarded by the device.
  • SFC service function chain
  • FIG. 9 is a schematic diagram of a message exchange and forwarding table delivery according to a preferred embodiment 1 of the present invention. Referring to FIG. 9, the process may include the following steps: Step S902: A user configures a forwarding table to be sent as a forwarding device.
  • Step S904 The internal network terminal sends a packet for accessing the Internet, and after reaching a series of network devices, The forwarding device shown in step S906, the forwarding device (router) receives the packet, searches the forwarding table, does not find the corresponding forwarding entry, and then sends the packet to the service classification component, after the component processing, and Sending to the SFC node; Step S908, the SFC node checks the forwarding table according to the received packet, and does not find the related forwarding entry.
  • step S9010 the SFC node continues to process the packet, and the SFC node takes out an IP address of the public address pool and selects a port as the translated IP address and port, and the source IP address and source in the packet. The port number and the protocol type are combined to generate a forwarding entry.
  • step S9012 the SFC node performs the network address and port conversion according to the created forwarding table, and sends the packet to the next hop.
  • step S9014 the SFC node determines that the forwarding table is sent. The switch is configured to forward the forwarding device, and then the generated forwarding entry is delivered to the forwarding device.
  • the inbound traffic processing (that is, processing the data traffic sent from the external network to the internal network) includes: Step S9016: When the subsequent traffic enters the forwarding device, the forwarding device searches the forwarding table and finds the related table. The forwarding device directly performs the address translation operation on the packet and then sends the message to the next hop. Step S9018: After the external network side message is sent to the forwarding device, the forwarding device searches for the related forwarding table. Step S9020, find the relevant Forwarding the entry, the packet is forwarded to the network address and port, and sent to the next hop until the internal network; Step S9022, if no related forwarding entry is found, the packet is discarded (or other processing is performed, according to specific Configuration).
  • Dataplane Metadata allows each edge service processing node to exchange information with each other for a certain business processing purpose, defining data fields for existing SFC frameworks.
  • the relevant loopback flag is not added in the Network Service Header (part of Metadata) (the loopback flag is an identifier bit).
  • 11 is a schematic diagram of a location of a loopback marker in a Network Service Header according to a preferred embodiment 2 of the present invention. Referring to FIG. 11, when a packet is sent from the forwarding device 1 to the SFC node, the identifier is encapsulated. In the Network Service Header, it is sent to the SFC node together. If Network Service
  • FIG. 12 is a schematic diagram of message interaction according to a preferred embodiment 2 of the present invention. Referring to FIG. 12, the process may include the following steps: Step S1202: A user configures a loopback flag to be open.
  • the process of the outbound traffic processing (that is, processing the data traffic sent from the internal network to the external network) includes: Step S1204: The internal network terminal sends a packet for accessing the Internet, and after passing through a series of network devices, arrives at the figure. The forwarding device is shown; Step S1206: The router receives the packet, and sends the packet to the service classification component. After the component processes, the loopback flag in the Network Service Header of the metadata is set and sent to the SFC node. Step S1208 The SFC node checks the forwarding table according to the received packet, and does not find the related forwarding entry.
  • step S1210 the SFC node continues to process the packet, and the SFC node takes out an IP address of the public address pool and selects a port as the translated IP address and port, and the source IP address and source in the packet. The port number and the protocol type are combined to generate a forwarding entry.
  • step S1212 the SFC node performs network address and port conversion according to the created forwarding table.
  • step S1214 the SFC node determines that the loopback flag is set, and then reports The file is forwarded to the forwarding device, and the forwarding device forwards the packet to the next hop.
  • each of the above modules can be implemented by hardware.
  • a processor including the above modules, or each of the above modules is located in one processor.
  • a software is provided that is configured to perform the technical solutions described in the above embodiments and preferred embodiments.
  • a storage medium is provided, the software being stored, including but not limited to: an optical disk, a floppy disk, a hard disk, a rewritable memory, and the like.
  • the present invention achieves the following technical effects: Since the conventional router supports forwarding data packets based on a forwarding table such as a routing table or a NAT conversion table, the method provided by the above (preferred) embodiment 1 is provided.
  • the operator can deploy the SFC and open the forwarding device forwarding switch to enable the traditional router to receive the forwarding table delivered by the SFC, thereby flexibly upgrading the network composed of the traditional router to the SFC network without replacing the traditional
  • the router is a new type of forwarding device, which reduces the cost of the operator.
  • the SFC is deployed in the network formed by the traditional router.
  • the operator can open the loopback switch and set the switch in the service packet header of the packet, so that the SFC component can be processed.
  • the packet is sent back to the source router, and the routing table in the source router is used to perform the forwarding operation, so that the network composed of the traditional router can be easily and conveniently upgraded to the SFC network.
  • the above modules or steps of the present invention can be implemented by a general-purpose computing device, which can be concentrated on a single computing device or distributed over a network composed of multiple computing devices.
  • the computing device may be implemented by program code executable by the computing device, such that they may be stored in the storage device by the computing device and, in some cases, may be different from The steps shown or described are performed sequentially, or they are separately fabricated into individual integrated circuit modules, or a plurality of modules or steps thereof are fabricated into a single integrated circuit module.
  • the invention is not limited to any specific combination of hardware and software.
  • the above is only the preferred embodiment of the present invention, and is not intended to limit the present invention, and various modifications and changes can be made to the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and scope of the present invention are intended to be included within the scope of the present invention.
  • the service function chain processing method and apparatus provided by the embodiments of the present invention have the following beneficial effects:
  • the operator can deploy the SFC and enable the traditional router to receive the SFC by opening the "forwarding device forwarding" switch.
  • the forwarding table is delivered, and the network composed of the traditional router can be flexibly upgraded into an SFC network without replacing the traditional router as a new forwarding device, thereby reducing the cost of the operator.
  • the operator can also enable the loopback switch and set the switch in the service packet header of the packet.
  • the SFC component After the SFC component processes the packet, it sends the packet back to the source router and uses the routing table in the source router. Forwarding operation, which can easily and conveniently upgrade a network composed of traditional routers to an SFC network.

Abstract

本发明公开了一种业务功能链处理方法及装置。其中,该方法包括:业务功能链 (SFC)接收转发设备发送的报文;SFC生成对应于报文的转发表;在预先设置的转发表下发开关的状态为开的情况下,SFC将转发表发送给转发设备,以使转发设备在接收到报文时,能够根据转发表对报文进行转发,其中,转发表下发开关用于指示SFC 是否将转发表发送给转发设备。通过本发明,达到了提高SFC转发数据的成功率的效果。

Description

业务功能链处理方法及装置 技术领域 本发明涉及通信领域, 具体而言, 涉及一种业务功能链处理方法及装置。 背景技术 业务功能链 (Service Function Chaining, 简称为 SFC) 是目前正在研究和标准化 的一种网络技术。 自从数据中心网络向 Overlay 网络发展以后, 网络边缘成为了虚拟 网络与物理网络的分界点, 其中网络边缘为 Server或者 ToR, 也可能为 Gateway。 然 而, Overlay技术并没有解决所有问题, 数据中心中还有很多 Middleware, 如防火墙 / 负载均衡器等,这些设备都是基于用户业务来处理的,如果通过隧道而穿越这些设备, 显然是不行的。 数据中心的这种部署模型, 要求虚拟防火墙 /负载均衡器可以在网络中任意部署, 也就是与网络拓扑无关。 这样产生的新问题是: 如何将流量能够灵活地通过虚拟防火 墙 /负载均衡器进行处理? 于是产生了虚拟防火墙 /负载均衡器等新型中间件,这些虚拟 防火墙 /负载均衡器, 部署在网络的边缘, 可以由标准服务器来实现。 虚拟防火墙 /负载均衡器 /网关等业务处理功能称为业务功能 (Service Function), 而流量经过一系列的 Service Function 的处理后形成业务功能链 ( Service Function Chaining). 图 1是根据相关技术的 SFC (业务功能链) 的示意图, 如图 1所示, 实线 /虚线代表两条 Service Chain。 目前现有技术中, SFC的框架基本可以包括如下组件: ( 1 )业务叠加(Service Overlay),即各个网络边缘节点需要通信的叠加(Overlay) 技术;
(2) 通用业务控制平面 (Generic Service Control Plane, 简称为 GSCP), 就是形 成 Service Function Chaining的控制器;
(3 ) 业务分类 (Service Classification), 即需要进行流识别, 然后对特定的流进 行特定的 Service Function Chaining处理; (4)控制平面元数据 (Dataplane Metadata), 这是一大特点, 元数据 (Metadata) 允许各个边缘业务处理节点, 能够互相交换信息, 达到某种业务处理目的。 综上所述, SFC是一种可以将网络设备业务功能和转发功能分离开来, 从而实现 业务功能的独立运算和处理, 并能够提升网络设备的转发性能。 对于现有 SFC技术来说,业务产生的会话和转发表通常是放在 SFC上创建和保存 的, 并没有明确需要将创建好的转发表下发到路由器、 交换机、 硬件防火墙、 客户前 置设备 (Customer Premise Equipment, 简称为 CPE) 等转发设备上。 但是,在某些特定场景下,现有技术的 SFC数据转发会导致数据流量的转发失败。 举例而言, 图 2是根据相关技术的 CPE (客户前置设备)在 SFC场景下的应用示 意图, 如图 2所示, 一组用户终端直接接入一个 CPE, Service Classification组件集成 在 CPE上, 每个 CPE需要处理的业务需要上传到一组 SFC进行处理。 对于出向数据 首包, 即内部网络 (内网用户) 到外部网络的某个数据连接的第一个报文, 每个 CPE 将该业务进行 Service Classification处理后,将业务放入 SFC处理后,转发到外部网络, 此时 SFC 创建了相关的会话, 即转发表。 如果仅有 CPE 集成了 SFC 的 Service Classification组件, 外部网络的网络设备并未实现 SFC。 在此场景下, 现有技术对于 入向流量 (即外部网络到内部网络 (内网用户) 的流量) 首先需要转发到 CPE, CPE 再将该业务进行 Service Classification组件处理后送给 SFC进行业务处理。 由于 SFC 管理多个 CPE装置, SFC也没有和用户终端直连, SFC无法将处理后的报文直接送到 用户终端。 针对相关技术中 SFC并不将其创建的转发表发送给转发设备而导致数据流量转发 失败的问题, 目前尚未提出有效的解决方案。 发明内容 本发明提供了一种业务功能链处理方法及装置, 以至少解决上述问题。 根据本发明的一个方面, 提供了一种业务功能链处理方法, 包括: 业务功能链 ( SFC) 接收转发设备发送的报文; SFC 生成对应于报文的转发表; 在预先设置的转 发表下发开关的状态为开的情况下, SFC将转发表发送给转发设备, 以使转发设备在 接收到报文时,能够根据转发表对报文进行转发,其中,转发表下发开关用于指示 SFC 是否将转发表发送给转发设备。 优选地, 转发表下发开关对应的报文转发方式包括: 转发设备转发, 其中, 转发 设备转发, 是指 SFC生成转发表后, 将转发表发送给转发设备, 当报文进入转发设备 时, 转发设备先查找是否存在对应于报文的转发表, 如果存在, 由转发设备根据转发 表转发报文, 如果不存在, 转发设备将报文发送到 SFC, 由 SFC为报文创建转发表, 并将转发表发送给转发设备。 优选地, 转发表下发开关对应的报文转发方式包括: SFC转发, 其中, SFC转发, 是指 SFC生成转发表之后, 不将转发表发送给转发设备, 当报文进入转发设备时, 转 发设备将报文发送到 SFC, 由 SFC为报文创建转发表并根据转发表转发报文。 优选地, 用于生成转发表的信息包括以下之一: 路由表、 网络地址转换 NAT映射 条目、 开放流 openflow表。 优选地, 该方法的适用场景包括: 基于业务功能 SF 的网络地址转换 (Network Address Translation, 简称为 NAT)、 动态主机配置协议 (Dynamic Host Configuration Protocol, 简称为 DHCP)、 以及互联网协议安全性 (Internet Protocol security, 简称为 IPsec)。 根据本发明的另一方面, 提供了一种业务功能链处理装置, 包括: 接收模块, 设 置为接收转发设备发送的报文; 生成模块, 设置为生成对应于报文的转发表; 发送模 块, 设置为在预先设置的转发表下发开关的状态为开的情况下, 将转发表发送给转发 设备, 以使转发设备在接收到报文时, 能够根据转发表对报文进行转发, 其中, 转发 表下发开关用于指示业务功能链 (SFC) 是否将转发表发送给转发设备。 优选地, 用于生成转发表的信息包括以下之一: 路由表、 网络地址转换 NAT映射 条目、 开放流 openflow表。 根据本发明的又一个方面, 提供了一种业务功能链处理方法, 包括: 业务功能链 ( SFC ) 接收转发设备发送的报文, 其中, 报文中携带有网络业务报文头; 在网络业 务报文头中预先设置的环回标记已经被置位的情况下, SFC创建对应于报文的转发表, 根据转发表对报文进行处理操作, 并将处理后的报文发送给转发设备进行报文转发。 优选地, 处理操作包括以下至少之一: 封装 /解封装、 报文字段处理。 优选地, 该方法的适用场景包括: 基于业务功能 SF的网络地址转换 NAT、 动态 主机配置协议 DHCP、 以及互联网协议安全性 IPsec。 根据本发明的还一方面, 提供了一种业务功能链处理装置, 包括: 接收模块, 设 置为接收转发设备发送的报文, 其中, 报文中携带有网络业务报文头; 处理模块, 设 置为在网络业务报文头中预先设置的环回标记已经被置位的情况下, 业务功能链 ( SFC ) 创建对应于报文的转发表, 根据转发表对报文进行处理操作, 并将处理后的 报文发送给转发设备进行报文转发。 优选地, 处理操作包括以下至少之一: 封装 /解封装、 报文字段处理。 通过本发明, 采用增加设置转发表下发开关或环回标记的方式, 解决了相关技术 中 SFC并不将其创建的转发表发送给转发设备而导致数据流量转发失败的问题,进而 达到了提高 SFC转发数据的成功率, 提升网络设备的数据转发性能的效果。 附图说明 此处所说明的附图用来提供对本发明的进一步理解, 构成本申请的一部分, 本发 明的示意性实施例及其说明用于解释本发明, 并不构成对本发明的不当限定。 在附图 中: 图 1是根据相关技术的 SFC (业务功能链) 的示意图; 图 2是根据相关技术的 CPE (客户前置设备) 在 SFC场景下的应用示意图; 图 3是根据本发明实施例一的业务功能链处理方法流程图; 图 4是根据本发明实施例一的业务功能链处理装置的结构框图; 图 5是根据本发明实施例二的业务功能链处理方法流程图; 图 6是根据本发明实施例二的业务功能链处理装置的结构框图; 图 7是根据本发明优选实施例 1的新增转发表下发开关的应用场景图; 图 8A是根据本发明优选实施例 1的转发设备上的报文处理流程图; 图 8B是根据本发明优选实施例 1的 SFC上的报文处理流程图; 图 9是根据本发明优选实施例 1的报文交互及转发表下发示意图; 图 10是根据本发明优选实施例 2的新增环回标记的应用场景图; 图 11是根据本发明优选实施例 2的环回标记在 Network Service Header中所处的 位置示意图; 图 12是根据本发明优选实施例 2的报文交互示意图。 具体实施方式 下文中将参考附图并结合实施例来详细说明本发明。 需要说明的是, 在不冲突的 情况下, 本申请中的实施例及实施例中的特征可以相互组合。 本发明的实施例一提供了一种业务功能链处理方法。 图 3是根据本发明实施例一 的业务功能链处理方法流程图, 如图 3所示, 该方法主要包括以下步骤 (步骤 S302- 步骤 S306): 步骤 S302, 业务功能链 (SFC ) 接收转发设备发送的报文; 步骤 S304, SFC生成对应于报文的转发表; 步骤 S306, 在预先设置的转发表下发开关的状态为开的情况下, SFC将转发表发 送给转发设备, 以使转发设备在接收到报文时, 能够根据转发表对报文进行转发, 其 中, 转发表下发开关用于指示 SFC是否将转发表发送给转发设备。 通过上述各个步骤, 运营商可以部署 SFC并通过打开 "转发设备转发"开关的方 式, 使得传统路由器能够接收 SFC下发的转发表, 而不需要替换传统路由器为新型转 发设备, 从而可以灵活地将由传统路由器组成的网络升级成为 SFC网络。 在本实施例一中,转发表下发开关对应的报文转发方式可以包括:转发设备转发, 其中, 转发设备转发, 是指 SFC生成转发表后, 将转发表发送给转发设备, 当报文进 入转发设备时, 转发设备先查找是否存在对应于报文的转发表, 如果存在, 由转发设 备根据转发表转发报文, 如果不存在, 转发设备将报文发送到 SFC, 由 SFC为报文创 建转发表, 并将转发表发送给转发设备。 在本实施例一中, 转发表下发开关对应的报文转发方式还可以包括: SFC转发, 其中, SFC转发, 是指 SFC生成转发表之后, 不将转发表发送给转发设备, 当报文进 入转发设备时, 转发设备将报文发送到 SFC, 由 SFC为报文创建转发表并根据转发表 转发报文。 在实际应用中, 本实施例一提供的业务功能链处理方法的适用场景可以包括: 基 于业务功能 SF的网络地址转换 NAT、 动态主机配置协议 DHCP、 以及互联网协议安 全性 IPsec。 本发明的实施例一还提供了一种业务功能链处理装置, 该装置用以实现实施例一 提供的业务功能链处理方法。 图 4是根据本发明实施例一的业务功能链处理装置的结 构框图, 如图 4所示, 该装置包括: 接收模块 10, 生成模块 20以及发送模块 30。 其 中: 接收模块 10, 设置为接收转发设备发送的报文; 生成模块 20, 设置为生成对应于 报文的转发表; 发送模块 30, 设置为在预先设置的转发表下发开关的状态为开的情况 下, 将转发表发送给转发设备, 以使转发设备在接收到报文时, 能够根据转发表对报 文进行转发, 其中, 转发表下发开关用于指示业务功能链 (SFC) 是否将转发表发送 给转发设备。 在本实施例一中, 用于生成转发表的信息可以包括以下之一: 路由表、 网络地址 转换 NAT映射条目、 开放流 openflow表。 本发明的实施例二提供了一种业务功能链处理方法。 图 5是根据本发明实施例二 的业务功能链处理方法流程图, 如图 5所示, 该方法主要包括以下步骤 (步骤 S502- 步骤 S504): 步骤 S502, 业务功能链 (SFC) 接收转发设备发送的报文, 其中, 报文中携带有 网络业务报文头; 步骤 S504, 在网络业务报文头中预先设置的环回标记已经被置位的情况下, SFC 创建对应于报文的转发表, 根据转发表对报文进行处理操作, 并将处理后的报文发送 给转发设备进行报文转发。 通过上述各个步骤,运营商可以打开环回开关并在报文的业务报文头设置该开关, 可以使 SFC组件处理完报文之后, 把报文发回源路由器, 并利用源路由器中的路由表 进行转发操作, 从而可以简单、 方便地将由传统路由器组成的网络升级为 SFC网络。 在实际应用中, 本实施例二提供的业务功能链处理方法的适用场景可以包括: 基 于业务功能 SF的网络地址转换 NAT、 动态主机配置协议 DHCP、 以及互联网协议安 全性 IPsec。 本发明的实施例二还提供了一种业务功能链处理装置, 该装置用以实现实施例二 提供的业务功能链处理方法。 图 6是根据本发明实施例二的业务功能链处理装置的结 构框图, 如图 6所示, 该装置包括: 接收模块 40和处理模块 50。 其中: 接收模块 40, 设置为接收转发设备发送的报文, 其中, 报文中携带有网络业务报 文头; 处理模块 50, 设置为在网络业务报文头中预先设置的环回标记已经被置位的情 况下, 业务功能链 (SFC) 创建对应于报文的转发表, 根据转发表对报文进行处理操 作, 并将处理后的报文发送给转发设备进行报文转发。 在本实施例二中,处理操作可以包括以下至少之一:封装 /解封装、报文字段处理。 采用上述实施例一或实施例二提供的业务功能链处理方法, 通过增加设置转发表 下发开关或环回标记的方式, 可以解决特定场景下 SFC无法成功转发数据的问题, 从 而提高 SFC转发数据的成功率, 提升网络设备的数据转发性能。 以下结合图 7至图 12以及优选实施例 1和优选实施例 2对上述实施例一和实施例 二提供的业务功能链处理方法进行进一步的描述和说明。 图 7是根据本发明优选实施例 1的新增转发表下发开关的应用场景图, 在该应用 场景下, 上述实施例一可以通过以下的方式来实现:
SFC节点根据所接收到的报文, 生成转发表项(即上述转发表), 并根据转发表下 发开关决定是否将转发表项下发给转发设备。 其中, 转发表项, 是根据报文字段信息 和一些配置信息生成的用于转发报文的表, 例如传统路由器的路由表、 NAT (网络地 址转换) 映射条目、 openflow (开放流) 流表等。 其中, 转发表下发开关, 是指转发设备转发、 SFC转发二者之一。 转发设备转发, 是指 SFC节点创建转发表项之后, 下发到转发设备。 报文进入转 发设备之后, 先查找转发表。 如果查找到对应的表项, 由转发设备转发; 如果查找不 到对应的表项,则转发设备发送该报文至 Service Classification组件处理后,发送到 SFC 节点处理, 创建转发表项, 下发到转发设备。 SFC转发, 是指 SFC节点生成转发表项之后, 不下发到转发设备。 转发设备收到 报文后不进行查表,发送该报文至 Service Classification组件处理后,发送到 SFC节点 处理, SFC节点创建转发表项并转发该报文。 在实际应用中, 转发表下发开关可以由用户进行配置, 并通知 SFC的开关状态。 图 8A是根据本发明优选实施例 1的转发设备上的报文处理流程图,如图 8A所示, 该流程包括以下步骤: 步骤 S8A02, 报文进入转发设备的报文入口; 步骤 S8A04 , 转发设备判断是否能查找到相应的转发表项, 如果是, 执行步骤 S8A06, 如果否, 执行步骤 S8A08; 步骤 S8A06, 转发设备根据表项内容处理报文并转发; 步骤 S8A08, 转发设备将报文发送到业务分类组件; 步骤 S8A10, 业务分类组件分发给相应的业务功能链组件处理。 图 8B是根据本发明优选实施例 1的 SFC上的报文处理流程图, 如图 8B所示, 该流程包括以下步骤: 步骤 S8B02, 报文进入业务功能链 (SFC) 的报文入口; 步骤 S8B04, SFC判断是否能查找到相应的转发表项, 如果是, 执行步骤 S8B06, 如果否, 执行步骤 S8B08 ; 步骤 S8B06, SFC根据表项内容处理报文并转发; 步骤 S8B08 , SFC为报文创建转发表项; 步骤 S8B10, SFC判断转发表下发开关对应的报文转发方式是否转发设备转发? 如果是, 执行步骤 S8B12, 如果否, 执行步骤 S8B14; 步骤 S8B12, SFC下发所创建的转发表项至转发设备, 执行步骤 S8B14; 步骤 S8B14, SFC处理该报文并转发。 优选实施例 1 图 9是根据本发明优选实施例 1的报文交互及转发表下发示意图, 请参考图 9, 该流程可以包括以下步骤: 步骤 S902, 用户配置转发表下发开关为转发设备转发; Outbound流量处理(即为对从内部网络发到外部网络的数据流量进行处理) 的流 程, 具体包括: 步骤 S904, 内网终端发出一个访问 Internet的报文, 通过一系列网络设备之后, 到达如图 9所示的转发设备 步骤 S906, 转发设备 (路由器) 收到该报文, 查找转发表, 没有查找到相应的转 发表项, 于是将报文发送到业务分类组件, 经过该组件处理后, 并发送到 SFC节点; 步骤 S908, SFC节点根据所接收到的报文查转发表,没有查找到相关的转发表项。 步骤 S9010, SFC节点继续将报文进行 NAT处理, SFC节点将公网地址池的一个 IP地址取出, 并选取一个端口, 作为转换后的 IP地址和端口, 和报文中的源 IP地址、 源端口号、 协议类型结合生成一个转发表项; 步骤 S9012, SFC节点根据所创建的转发表将该报文进行网络地址和端口转换, 发送到下一跳; 步骤 S9014, SFC节点判断转发表下发开关设置为转发设备转发, 于是将所生成 的转发表项下发到转发设备。 Inbound流量处理(即为对从外部网络发到内部网络的数据流量进行处理)的流程, 具体包括: 步骤 S9016, 当后续流量进入转发设备的时候, 转发设备将查找转发表, 发现有 相关的表项, 转发设备直接对报文进行地址转换等操作后发送到下一跳; 步骤 S9018, 外部网络侧报文发送到至转发设备之后, 转发设备查找相关的转发 表; 步骤 S9020, 查找到相关的转发表项, 将报文进行网络地址和端口转换, 发送到 下一跳, 直到内部网络; 步骤 S9022, 若没有查找到相关的转发表项, 则丢弃该报文 (或进行其他处理, 根据具体配置)。 图 10是根据本发明优选实施例 2的新增环回标记的应用场景图,在该应用场景下, 上述实施例二可以通过以下的方式来实现: 控制平面元数据 (Dataplane Metadata) 允许各个边缘业务处理节点, 能够互相交 换信息, 达到某种业务处理目的, 为现有 SFC框架定义的数据字段。 在现有技术中, 并没有在网络业务报文头 (Network Service Header, 即 Metadata的一部分) 中增加相 关的环回标记 (环回标记是一个标识位)。 图 11是根据本发明优选实施例 2的环回标记在 Network Service Header中所处的 位置示意图, 请参考图 11, 当一个报文从转发设备 1发送至 SFC节点时, 该标识位会 被封装在 Network Service Header中, 一起发送给 SFC节点。 如果 Network Service
Header中环回标记被置位, 则由 SFC对数据包进行相应的处理后得到一个新的报文, 再发送该报文至转发设备 1进行下一步转发。 在标识位被置位的情况下, SFC失去了转发报文到下一跳的功能, 仅能执行对报 文的封装和解封装等修改, 处理完成后需要发送回原转发设备进行转发。 如果环回标 记没有被置位,则 SFC节点有对报文进行转发到下一跳的功能,即数据报文在经过 SFC 进行封装解封装等修改后, 由 SFC转发。 其中, 环回标记可以由用户通过对 SFC节点的配置来设置。 优选实施例 2 图 12是根据本发明优选实施例 2的报文交互示意图, 请参考图 12, 该流程可以 包括以下步骤: 步骤 S1202, 用户将环回标记配置为打开。
Outbound流量处理(即对从内部网络发到外部网络的数据流量进行处理)的流程, 具体包括: 步骤 S1204, 内网终端发出一个访问 Internet的报文, 通过一系列网络设备之后, 到达如图所示的转发设备; 步骤 S1206, 路由器收到该报文, 将报文发送到业务分类组件, 经过该组件处理 后, 将 metadata的 Network Service Header中环回标记置位, 并发送到 SFC节点; 步骤 S1208, SFC节点根据所接收到的报文查转发表, 没有查找到相关的转发表 项。 步骤 S1210, SFC节点继续将报文进行 NAT处理, SFC节点将公网地址池的一个 IP地址取出, 并选取一个端口, 作为转换后的 IP地址和端口, 和报文中的源 IP地址、 源端口号、 协议类型结合生成一个转发表项; 步骤 S1212, SFC节点根据所创建的转发表将该报文进行网络地址和端口转换; 步骤 S1214, SFC节点判断环回标记为置位, 于是将报文转发给上述转发设备, 转发设备将该报文转发至下一跳。
Inbound流量处理 (即对从外部网络发到内部网络的数据流量进行处理) 的流程, 与 Outbound流量处理方法是一致的。 需要说明的是, 上述各个模块是可以通过硬件来实现的。 例如: 一种处理器, 包 括上述各个模块, 或者, 上述各个模块分别位于一个处理器中。 在另外一个实施例中, 还提供了一种软件, 该软件设置为执行上述实施例及优选 实施方式中描述的技术方案。 在另外一个实施例中, 还提供了一种存储介质, 该存储介质中存储有上述软件, 该存储介质包括但不限于: 光盘、 软盘、 硬盘、 可擦写存储器等。 从以上的描述中, 可以看出, 本发明实现了如下技术效果: 由于传统路由器支持是基于路由表、 NAT转换表等转发表转发数据报文, 因此通 过上述(优选) 实施例一提供的方法, 运营商可以部署 SFC并通过打开 "转发设备转 发"开关的方式, 使得传统路由器能够接收 SFC下发的转发表, 进而可以灵活地将由 传统路由器组成的网络升级成为 SFC网络,而不需要替换传统路由器为新型转发设备, 从而降低了运营商的成本。 同样地, 在传统路由器组成的网络中部署 SFC, 通过上述 (优选) 实施例二提供 的方法, 运营商可以打开环回开关并在报文的业务报文头设置该开关, 可以使 SFC组 件处理完报文之后,把报文发回源路由器, 并利用源路由器中的路由表进行转发操作, 从而可以简单、 方便地将由传统路由器组成的网络升级为 SFC网络。 显然, 本领域的技术人员应该明白, 上述的本发明的各模块或各步骤可以用通用 的计算装置来实现, 它们可以集中在单个的计算装置上, 或者分布在多个计算装置所 组成的网络上, 可选地, 它们可以用计算装置可执行的程序代码来实现, 从而, 可以 将它们存储在存储装置中由计算装置来执行, 并且在某些情况下, 可以以不同于此处 的顺序执行所示出或描述的步骤, 或者将它们分别制作成各个集成电路模块, 或者将 它们中的多个模块或步骤制作成单个集成电路模块来实现。 这样, 本发明不限制于任 何特定的硬件和软件结合。 以上所述仅为本发明的优选实施例而已, 并不用于限制本发明, 对于本领域的技 术人员来说, 本发明可以有各种更改和变化。 凡在本发明的精神和原则之内, 所作的 任何修改、 等同替换、 改进等, 均应包含在本发明的保护范围之内。 工业实用性 如上所述, 本发明实施例提供的一种业务功能链处理方法及装置具有以下有益效 果: 运营商可以部署 SFC并通过打开 "转发设备转发"开关的方式, 使得传统路由器 能够接收 SFC 下发的转发表, 进而可以灵活地将由传统路由器组成的网络升级成为 SFC网络, 而不需要替换传统路由器为新型转发设备, 从而降低了运营商的成本。 此 外, 运营商还可以打开环回开关并在报文的业务报文头设置该开关, 可以使 SFC组件 处理完报文之后, 把报文发回源路由器, 并利用源路由器中的路由表进行转发操作, 从而可以简单、 方便地将由传统路由器组成的网络升级为 SFC网络。

Claims

权 利 要 求 书
1. 一种业务功能链处理方法, 包括:
业务功能链 SFC接收转发设备发送的报文;
所述 SFC生成对应于所述报文的转发表; 在预先设置的转发表下发开关的状态为开的情况下,所述 SFC将所述转发 表发送给所述转发设备, 以使所述转发设备在接收到报文时, 能够根据所述转 发表对报文进行转发, 其中, 所述转发表下发开关用于指示所述 SFC是否将所 述转发表发送给所述转发设备。
2. 根据权利要求 1所述的方法, 其中, 所述转发表下发开关对应的报文转发方式 包括: 转发设备转发, 其中,
所述转发设备转发, 是指所述 SFC生成所述转发表后, 将所述转发表发送 给所述转发设备, 当报文进入所述转发设备时, 所述转发设备先查找是否存在 对应于报文的转发表, 如果存在, 由所述转发设备根据转发表转发报文, 如果 不存在,所述转发设备将报文发送到所述 SFC,由所述 SFC为报文创建转发表, 并将所述转发表发送给所述转发设备。
3. 根据权利要求 1所述的方法, 其中, 所述转发表下发开关对应的报文转发方式 包括: SFC转发, 其中, 所述 SFC转发, 是指所述 SFC生成所述转发表之后, 不将所述转发表发 送给所述转发设备, 当报文进入所述转发设备时, 所述转发设备将所述报文发 送到所述 SFC,由所述 SFC为所述报文创建转发表并根据转发表转发所述报文。
4. 根据权利要求 1至 3中任一项所述的方法, 其中, 用于生成所述转发表的信息 包括以下之一: 路由表、 网络地址转换 NAT映射条目、 开放流 openflow表。
5. 根据权利要求 1至 3中任一项所述的方法, 其中, 所述方法的适用场景包括: 基于业务功能 SF的网络地址转换 NAT、 动态主机配置协议 DHCP、 以及互联 网协议安全性 IPsec。
6. 一种业务功能链处理装置, 包括: 接收模块, 设置为接收转发设备发送的报文; 生成模块, 设置为生成对应于所述报文的转发表;
发送模块, 设置为在预先设置的转发表下发开关的状态为开的情况下, 将 所述转发表发送给所述转发设备, 以使所述转发设备在接收到报文时, 能够根 据所述转发表对报文进行转发, 其中, 所述转发表下发开关用于指示所述 SFC 是否将所述转发表发送给所述转发设备。
7. 根据权利要求 6所述的装置,其中,用于生成所述转发表的信息包括以下之一: 路由表、 网络地址转换 NAT映射条目、 开放流 openflow表。
8. —种业务功能链处理方法, 包括:
业务功能链 SFC接收转发设备发送的报文, 其中, 所述报文中携带有网络 业务报文头;
在所述网络业务报文头中预先设置的环回标记已经被置位的情况下, 所述 SFC创建对应于所述报文的转发表, 根据所述转发表对报文进行处理操作, 并 将处理后的报文发送给所述转发设备进行报文转发。
9. 根据权利要求 8 所述的方法, 其中, 所述处理操作包括以下至少之一: 封装 / 解封装、 报文字段处理。
10. 根据权利要求 8或 9所述的方法, 其中, 所述方法的适用场景包括: 基于业务 功能 SF的网络地址转换 NAT、 动态主机配置协议 DHCP、 以及互联网协议安 全性 IPsec。
11. 一种业务功能链处理装置, 包括: 接收模块, 设置为接收转发设备发送的报文, 其中, 所述报文中携带有网 络业务报文头; 处理模块, 设置为在所述网络业务报文头中预先设置的环回标记已经被置 位的情况下, 所述 SFC创建对应于所述报文的转发表, 根据所述转发表对报文 进行处理操作, 并将处理后的报文发送给所述转发设备进行报文转发。
12. 根据权利要求 11所述的装置, 其中, 所述处理操作包括以下至少之一: 封装 / 解封装、 报文字段处理。
PCT/CN2014/082846 2014-03-27 2014-07-23 业务功能链处理方法及装置 WO2015143802A1 (zh)

Priority Applications (2)

Application Number Priority Date Filing Date Title
EP14887702.0A EP3125476B1 (en) 2014-03-27 2014-07-23 Service function chaining processing method and device
US15/124,196 US10084706B2 (en) 2014-03-27 2014-07-23 Method and device for processing service function chaining

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201410121367.9 2014-03-27
CN201410121367.9A CN104954245B (zh) 2014-03-27 2014-03-27 业务功能链处理方法及装置

Publications (1)

Publication Number Publication Date
WO2015143802A1 true WO2015143802A1 (zh) 2015-10-01

Family

ID=54168616

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2014/082846 WO2015143802A1 (zh) 2014-03-27 2014-07-23 业务功能链处理方法及装置

Country Status (4)

Country Link
US (1) US10084706B2 (zh)
EP (1) EP3125476B1 (zh)
CN (1) CN104954245B (zh)
WO (1) WO2015143802A1 (zh)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2018000442A1 (zh) * 2016-07-01 2018-01-04 华为技术有限公司 业务功能链sfc中用于转发报文的方法、装置和系统

Families Citing this family (16)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US10003530B2 (en) 2014-07-22 2018-06-19 Futurewei Technologies, Inc. Service chain header and metadata transport
WO2017037193A1 (en) * 2015-09-02 2017-03-09 Telefonaktiebolaget Lm Ericsson (Publ) Methods and network nodes for scalable top-of-chain selection in mobile service chaining
CN106921579B (zh) * 2015-12-28 2020-02-14 华为技术有限公司 基于业务功能链sfc的通信方法和装置
CN106982134A (zh) * 2016-01-18 2017-07-25 中兴通讯股份有限公司 报文生成方法、报文转发方法及装置
CN107046506B (zh) * 2016-02-06 2020-02-14 华为技术有限公司 一种报文处理方法、流分类器和业务功能实例
US10374922B2 (en) * 2016-02-24 2019-08-06 Cisco Technology, Inc. In-band, health-based assessments of service function paths
US20190215268A1 (en) * 2016-04-12 2019-07-11 Hewlett Packard Enterprise Development Lp Service function chaining based on mac addresses
CN106130894B (zh) * 2016-06-03 2019-04-19 上海华为技术有限公司 一种业务功能链的创建方法及系统
EP4231605A3 (en) 2016-07-01 2023-09-27 Huawei Technologies Co., Ltd. Service function chaining sfc-based packet forwarding method, apparatus, and system
US10187263B2 (en) * 2016-11-14 2019-01-22 Futurewei Technologies, Inc. Integrating physical and virtual network functions in a service-chained network environment
US10616085B2 (en) * 2017-08-31 2020-04-07 Zte Corporation Residence time measurement for optimizing network services
CN111314220B (zh) * 2018-12-11 2022-05-17 中国电信股份有限公司 最小化sfc时延的方法和系统
CN111970209A (zh) * 2020-07-13 2020-11-20 珠海高凌信息科技股份有限公司 Sip业务均衡系统
CN114363183A (zh) * 2020-09-30 2022-04-15 中兴通讯股份有限公司 一种业务链地址池切片处理方法、装置及系统
CN114666271A (zh) * 2020-12-23 2022-06-24 中国移动通信有限公司研究院 一种路由、路由表处理方法、设备及存储介质
CN115708384A (zh) * 2021-08-20 2023-02-21 中兴通讯股份有限公司 分布式业务转发方法、装置、系统、存储介质及电子设备

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101047636A (zh) * 2006-06-07 2007-10-03 华为技术有限公司 端到端伪线仿真虚拟租用线接入虚拟专用网的方法及系统
CN101442493A (zh) * 2008-12-26 2009-05-27 华为技术有限公司 Ip报文分发方法、集群系统和负载均衡器
CN101795223A (zh) * 2009-12-14 2010-08-04 福建星网锐捷网络有限公司 组播安全控制方法、系统及传输节点

Family Cites Families (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6724728B1 (en) * 1999-10-15 2004-04-20 Cisco Technology, Inc. Method and system for distributed processing of traffic in a telecommunications node
US10097452B2 (en) * 2012-04-16 2018-10-09 Telefonaktiebolaget Lm Ericsson (Publ) Chaining of inline services using software defined networking
US9668161B2 (en) * 2012-07-09 2017-05-30 Cisco Technology, Inc. System and method associated with a service flow router
EP2993835B1 (en) * 2013-05-23 2018-07-11 Huawei Technologies Co., Ltd. Service routing system, device and method
CN103532856A (zh) * 2013-10-23 2014-01-22 杭州华三通信技术有限公司 一种报文传输方法和设备
US9614739B2 (en) * 2014-01-30 2017-04-04 Cisco Technology, Inc. Defining service chains in terms of service functions
CN105379218B (zh) * 2014-06-17 2018-09-07 华为技术有限公司 业务流的处理方法、装置及设备
WO2016045710A1 (en) * 2014-09-23 2016-03-31 Nec Europe Ltd. Efficient service function chaining over a transport network
US9923815B2 (en) * 2014-11-11 2018-03-20 Avago Technologies General Ip (Singapore) Pte. Ltd. Network based service function chaining on top of rack switches

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101047636A (zh) * 2006-06-07 2007-10-03 华为技术有限公司 端到端伪线仿真虚拟租用线接入虚拟专用网的方法及系统
CN101442493A (zh) * 2008-12-26 2009-05-27 华为技术有限公司 Ip报文分发方法、集群系统和负载均衡器
CN101795223A (zh) * 2009-12-14 2010-08-04 福建星网锐捷网络有限公司 组播安全控制方法、系统及传输节点

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
See also references of EP3125476A4 *

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2018000442A1 (zh) * 2016-07-01 2018-01-04 华为技术有限公司 业务功能链sfc中用于转发报文的方法、装置和系统
US11075839B2 (en) 2016-07-01 2021-07-27 Huawei Technologies Co., Ltd. Method, apparatus, and system for forwarding packet in service function chaining SFC
US11671364B2 (en) 2016-07-01 2023-06-06 Huawei Technologies Co., Ltd. Method, apparatus, and system for forwarding packet in service function chaining SFC

Also Published As

Publication number Publication date
EP3125476B1 (en) 2021-09-01
EP3125476A1 (en) 2017-02-01
EP3125476A4 (en) 2017-08-09
US20170019334A1 (en) 2017-01-19
US10084706B2 (en) 2018-09-25
CN104954245A (zh) 2015-09-30
CN104954245B (zh) 2019-07-16

Similar Documents

Publication Publication Date Title
WO2015143802A1 (zh) 业务功能链处理方法及装置
US11979322B2 (en) Method and apparatus for providing service for traffic flow
US10574763B2 (en) Session-identifer based TWAMP data session provisioning in computer networks
JP5992602B2 (ja) IPv6ネットワークにおいてラベル配布プロトコル(LDP)を使用するためのシステムおよび方法
EP3113426B1 (en) Data packet processing method and device
US20210036953A1 (en) Flow modification including shared context
US7917948B2 (en) Method and apparatus for dynamically securing voice and other delay-sensitive network traffic
WO2016210196A1 (en) Media relay server
US8817815B2 (en) Traffic optimization over network link
WO2020084335A1 (en) Using location indentifier separation protocol to implement a distributed user plane function architecture for 5g mobility
WO2012106869A1 (zh) 一种报文处理方法及相关设备
WO2016210202A1 (en) Media relay server
US10178023B2 (en) Packet processing method and apparatus
WO2015184771A1 (zh) 一种业务功能链操作、管理和维护方法及节点设备
US11343332B2 (en) Method for seamless migration of session authentication to a different stateful diameter authenticating peer
US9755939B2 (en) Network wide source group tag binding propagation
WO2019041332A1 (zh) 一种加速网络传输优化方法以及系统
JP2024517717A (ja) Pfcpセッション負荷分散装置
WO2006131057A1 (fr) Procédé et appareil d’implémentation du proxy de signalisation
JP2024517716A (ja) セルラーデータパケットのルーティングの為のipネットワークの改善された使用
WO2015014167A1 (zh) 一种处理原始ip报文的方法和相应装置
US11876881B2 (en) Mechanism to enable third party services and applications discovery in distributed edge computing environment
WO2013056999A1 (en) Method and system for enabling nat traversal for multi-homing protocols
JP2017208718A (ja) 通信装置および通信方法
CN113542441A (zh) 一种通信处理方法及装置

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 14887702

Country of ref document: EP

Kind code of ref document: A1

REEP Request for entry into the european phase

Ref document number: 2014887702

Country of ref document: EP

WWE Wipo information: entry into national phase

Ref document number: 2014887702

Country of ref document: EP

WWE Wipo information: entry into national phase

Ref document number: 15124196

Country of ref document: US

NENP Non-entry into the national phase

Ref country code: DE