WO2015143982A1 - 一种转发报文的方法、系统 - Google Patents

一种转发报文的方法、系统 Download PDF

Info

Publication number
WO2015143982A1
WO2015143982A1 PCT/CN2015/073790 CN2015073790W WO2015143982A1 WO 2015143982 A1 WO2015143982 A1 WO 2015143982A1 CN 2015073790 W CN2015073790 W CN 2015073790W WO 2015143982 A1 WO2015143982 A1 WO 2015143982A1
Authority
WO
WIPO (PCT)
Prior art keywords
packet
layer
tunneling protocol
l2tp
enterprise tenant
Prior art date
Application number
PCT/CN2015/073790
Other languages
English (en)
French (fr)
Inventor
管红光
Original Assignee
华为技术有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 华为技术有限公司 filed Critical 华为技术有限公司
Publication of WO2015143982A1 publication Critical patent/WO2015143982A1/zh

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/46—Interconnection of networks
    • H04L12/4633—Interconnection of networks using encapsulation techniques, e.g. tunneling
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00—Routing or path finding of packets in data switching networks
    • H04L45/74—Address processing for routing
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L69/00—Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
    • H04L69/30—Definitions, standards or architectural aspects of layered protocol stacks
    • H04L69/32—Architecture of open systems interconnection [OSI] 7-layer type protocol stacks, e.g. the interfaces between the data link level and the physical level
    • H04L69/322—Intralayer communication protocols among peer entities or protocol data unit [PDU] definitions
    • H04L69/324—Intralayer communication protocols among peer entities or protocol data unit [PDU] definitions in the data link layer [OSI layer 2], e.g. HDLC

Definitions

  • the present invention belongs to the field of cloud computing, and in particular, to a method and system for forwarding a message.
  • the virtualization of the network needs to support two demands.
  • One is multi-tenant, which can support a larger number of enterprises to make full use of the resources of the physical network and achieve greater commercial value.
  • the virtual network established by the operator must also meet the needs of the enterprise tenant to be interconnected in the same way as the local network within the enterprise. That is, the private cloud must be able to provide the ability to open a large Layer 2 network across the three-layer network. force.
  • VXLAN Virtual eXtensible LAN
  • VMware a technology for implementing network virtualization
  • the main technical implementation of VXLAN is to build a Layer 2 tunnel based on a Layer 3 network, and transmit large Layer 2 data through the tunnel to achieve the purpose of letting the internal Layer 2 network span the Layer 3 network.
  • Network virtualization using the VXLAN protocol requires a new upgrade of the carrier's network infrastructure, including enterprise egress gateways and carrier data center gateways, and increased support for the VXLAN protocol by the underlying hardware of the gateway router and the upper layer software.
  • VXLAN protocol is a newly developed protocol.
  • the protocol is still in the drafting stage of the Internet Research Task Force (IETF) and has not yet become a practical standard. Therefore, there is currently no basic network equipment and corresponding network operation and maintenance software that can support VXLAN. Operators need network equipment vendors to develop corresponding new equipment and software, and replace the existing network equipment as a whole, which is a huge investment for operators. The business has a long time to go online.
  • the gateway device that implements the VXLAN protocol will add 50 bytes of the outer header directly before the user data, which will inevitably bring about the Maximum Transmission Unit (MTU) problem of the network device.
  • MTU Maximum Transmission Unit
  • the increased length of the outer header will result in a decrease in the length of the available data content of the device, and an increase in the overhead field.
  • the original service may be interrupted and the service processing has to be re-modified. .
  • the embodiment of the invention provides a method and a system for forwarding a message, which are to solve two problems that cannot be solved when the existing VXLAN technology implements network virtualization.
  • the first aspect provides a method for forwarding a message, where the method includes:
  • the second layer tunneling protocol device receives the user side message sent by the client;
  • the second layer tunneling protocol device determines, according to the destination address included in the user-side packet, whether the user-side packet needs to be forwarded to the enterprise tenant, and if yes, sets the second-layer tunnel according to the user-side packet.
  • a session header of the protocol L2TP where the session header includes a special escape identifier field and an enterprise tenant network identifier field;
  • the Layer 2 tunneling protocol device inserts the session header into the front of the user-side packet to generate an L2TP packet, where the special escaping identifier field is used to identify whether the L2TP packet is an enterprise tenant service packet. ;
  • the Layer 2 tunneling protocol device sends the L2TP packet to a Layer 2 tunneling protocol network server of the operator data center.
  • the second layer tunneling protocol device reads the destination address in the user side packet, and the correspondence between the enterprise tenant network identifier and the physical address of the enterprise tenant The enterprise tenant network identifier corresponding to the destination address is found in the relationship table.
  • the session header further includes: a frame type identifier field and a cookie field;
  • the second layer tunneling protocol device sets a first bit of the session header to a special escape identifier field
  • the second layer tunneling protocol device sets the second and fourth bytes of the session header to be frame type identification fields
  • the second layer tunneling protocol device sets the fifth to seventh bytes of the session header to be an enterprise tenant network identification field
  • the Layer 2 tunneling protocol device sets the last 4 bytes of the session header to be a cookie field.
  • a second layer tunneling protocol device where the second layer tunneling protocol device includes:
  • a user side message receiving unit configured to receive a user side message sent by the client
  • a packet type determining unit configured to determine, according to the destination address included in the user-side packet, whether the user-side message needs to be forwarded to the enterprise tenant;
  • a session header setting unit configured to: if the user side message needs to be forwarded to the enterprise tenant, set a session header of the second layer tunneling protocol L2TP according to the user side message, where the session header includes a special escaping identifier field And enterprise tenant network identification fields;
  • the L2TP packet generating unit is configured to insert the session header into the user-side packet to generate an L2TP packet, where the special escaping identifier field is used to identify whether the L2TP packet is an enterprise tenant service packet. ;
  • the L2TP packet sending unit is configured to send the L2TP packet to the second layer tunneling protocol network server of the operator data center.
  • the session header setting unit includes:
  • a destination address obtaining module configured to read a destination address included in the user side packet
  • the enterprise tenant network identifier obtaining module is configured to find an enterprise tenant network identifier corresponding to the destination address from a correspondence table between the enterprise tenant network identifier and the physical address of the enterprise tenant.
  • the session header further includes: a frame type identifier field and a cookie field;
  • the session header setting unit further includes:
  • a special escaping identifier field setting module configured to set a first bit of the session header to a special escaping identifier field
  • a frame type identifier field setting module configured to set a second type and a fourth byte of the session header as a frame type identifier field
  • the enterprise tenant network identifier field setting module is configured to set the fifth to seventh bytes of the session header to be an enterprise tenant network identification field;
  • a cookie field setting module is configured to set a last four bytes of the session header as a cookie field.
  • a second layer tunneling protocol network server includes:
  • the L2TP packet receiving unit is configured to receive a Layer 2 tunneling protocol L2TP packet sent by the Layer 2 tunneling protocol device, where the L2TP packet includes an L2TP session header, where the session header includes a special escaping identifier field and An enterprise tenant network identifier field, where the special escaping identifier field is used to identify whether the L2TP packet is an enterprise tenant service packet;
  • a packet type determining unit configured to determine whether the L2TP packet is a home user broadband access service packet or an enterprise tenant service packet
  • the enterprise tenant packet forwarding unit is configured to: if the L2TP packet is an enterprise tenant service packet, extract the enterprise tenant network identifier and the user side packet from the L2TP packet, and according to the enterprise tenant The network identifier forwards the user side message to a corresponding host in the corresponding enterprise tenant network.
  • the packet type determining unit includes:
  • a special escaping identifier obtaining module configured to read a special escaping identifier included in the session header
  • the packet type judging module is configured to determine, according to the special escaping identifier, whether the L2TP packet is a home user broadband access service packet or an enterprise tenant service packet.
  • a fourth aspect provides a system for forwarding a message, including a client, where the system further includes a layer 2 tunneling protocol device as described above and a layer 2 tunneling protocol network server as described above, the second layer A tunneling protocol device is connected between the client and the Layer 2 tunneling protocol network server.
  • the existing L2TP protocol can be escaping, so that the original L2TP can support the enterprise tenant service, and the enterprise tenant can establish a dedicated virtual network on the operator's data center through the escaping message. And communicate with it to complete the task of network virtualization, and at the same time compatible with the services of existing protocols.
  • the L2TP protocol is escaped and the L2TP-VP protocol is obtained, which will not bring additional data headers. It will cause MTU problems of network devices, and the advantages brought by escaping actions are obvious.
  • FIG. 1 is a schematic diagram of a connection relationship between a home user or an enterprise tenant client, a Layer 2 tunneling protocol device, an LNS, and a data center;
  • FIG. 2 is a flowchart of implementing a method for forwarding a packet according to Embodiment 1 of the present invention
  • FIG. 3 is a schematic diagram of indications of bit positions of a session header of a modified Layer 2 tunneling protocol L2TP according to Embodiment 1 of the present invention
  • FIG. 4 is a structural block diagram of a layer 2 tunneling protocol device according to Embodiment 2 of the present invention.
  • FIG. 5 is a structural block diagram of a second layer tunneling protocol device according to Embodiment 3 of the present invention.
  • FIG. 6 is a structural block diagram of a second layer tunneling protocol network server according to Embodiment 4 of the present invention.
  • FIG. 7 is a structural block diagram of a second layer tunneling protocol network server according to Embodiment 5 of the present invention.
  • the second layer tunneling protocol device is a network access device on the enterprise tenant side, and is also a network access device on the ordinary home broadband user side, and all enterprises or home users pass the second layer.
  • the tunneling protocol device is connected to the data center.
  • the Layer 2 Tunneling Protocol Network Server (LNS) is the device on the carrier side. The two sides of the LNS are connected to the Layer 2 tunneling protocol device and the data center. As shown in Figure 1, the home user is connected. Or the enterprise tenant client connects to the LNS through the Layer 2 tunneling protocol device, and then accesses various resources in the data center.
  • LNS Layer 2 Tunneling Protocol Network Server
  • FIG. 2 is a flowchart of an implementation of a method for forwarding a packet according to Embodiment 1 of the present invention.
  • the method for receiving a client by a Layer 2 tunneling protocol device is described as an example.
  • step S201 the second layer tunneling protocol device receives the user side message sent by the client.
  • the client sends the user-side packet to the Layer 2 tunneling protocol device, and the second-layer tunneling protocol device processes the user-side packet and sends the message to the LNS.
  • the user of the client may be a corporate tenant, or So ordinary household broadband users.
  • the second layer tunneling protocol device determines, according to the destination address included in the user side packet, whether the user side message needs to be forwarded to the enterprise tenant, and if so, the user side message is set according to the user side message.
  • the second-layer tunneling protocol device after receiving the user-side message sent by the client, the second-layer tunneling protocol device reads the destination address included in the user-side packet, and then determines whether the forwarding needs to be performed according to the destination address.
  • the user side message is sent to the enterprise tenant. If yes, the steps subsequent to steps S102 and S102 are performed. Otherwise, the second layer tunneling protocol device fills the Layer 2 Tunneling Protocol according to the home user broadband access service process.
  • the session identifier in the session header of the L2TP identifies the Session id and the cookie field, the filled session header is inserted into the front of the user side message and sent to the LNS.
  • the Layer 2 tunneling protocol device is pre-configured with the broadband access service of the home user, and the service number of the broadband access service of the home user ranges from 0 to 2 to the power of 32 to 1.
  • the Layer 2 tunneling protocol device draws half of the 32-th party-1 of the service number range 0 to 2 of the broadband access service of the home user, and the 31-th power of 0 to 2 -1 continues to be used for broadband access services for home users; 2 to 31 powers of 2 to 32 are used for enterprise tenant services.
  • the Layer 2 tunneling protocol device pre-configures the enterprise tenant network identifier number and the cookie, and locally stores a correspondence table between the enterprise tenant network identifier number and the physical address of the enterprise tenant.
  • the device can search the correspondence table, and if the destination address is found The matching physical address indicates that the user-side message needs to be sent to the enterprise tenant.
  • the Layer 2 tunneling protocol device determines that the received user-side packet needs to be sent to the enterprise tenant, the destination address in the user-side packet is read first, and the enterprise tenant network identifier number is between the enterprise tenant network identifier number and the enterprise tenant physical address.
  • the enterprise tenant network identifier number corresponding to the destination address is found in the corresponding relationship table, and then the session header of the second layer tunneling protocol L2TP is set according to the found enterprise tenant network identifier number.
  • the session header of the Layer 2 tunneling protocol L2TP is modified.
  • the session header of the Layer 2 tunneling protocol L2TP includes a special escaping identifier field and an enterprise tenant network identifier field.
  • the first bit of the session header is set to a special escape identifier field
  • the second and fourth bytes of the session header are set to a frame type identifier field
  • the fifth to the session header is set.
  • the seventh byte is the enterprise tenant network identification field, and other bits are set as reserved fields.
  • the frame type identifier field may not be set in the session header.
  • the frame type of the message type must be of the Ether type.
  • the frame type is such that the LNS can easily parse the destination address of the corresponding host in the enterprise tenant network from the inner layer packet according to the frame type.
  • the length of the frame type identification field and the tenant network identification field and the location of the tenant network identifier field may be not limited, and may be set according to specific conditions.
  • a cookie field may be set in the session header to provide an isolation mechanism between the enterprise tenants to improve the security of the network.
  • the length of the cookie field and the location of the cookie may be left unrestricted, and may be set according to specific conditions. Be specific.
  • the last 4 bytes of the session header are set to be a cookie field.
  • the indication of each bit position of the session header of the modified Layer 2 tunneling protocol L2TP in the embodiment of the present invention is unchanged, and the highest bit is set as a special escaping identifier, meaning: highest bit Set to 0, indicating that the data frame header is a traditional data frame header, parsed according to the traditional format; the highest bit is set to 1, indicating that the data frame header is escaped and parsed according to the new frame header format.
  • the special escaping identifier field is followed by the 15-bit reserved bit Reserved, which is reserved.
  • the 15-bit reserved bit is the 16-bit frame type identifier indicating the frame type, which is used to indicate the frame type of the inner-layer packet, such as the Point to Point Protocol. , PPP) or ether.
  • the second and fourth bytes are frame type identification fields, which are used to identify the type of user-side packets.
  • the fifth to seventh bytes are 24-bit Tenant Network Identifiers (TNIs), which will be used in the network.
  • the virtual private cloud is assigned to the enterprise by the operator.
  • the enterprise tenant network identifier is the unique identification number in the entire network.
  • the 8th byte is reserved for Reserved.
  • the 64-bit cookie field in the compressed header of the traditional L2TP is a 32-bit cookie field.
  • step S203 the second layer tunneling protocol device inserts the session header in front of the user side packet to generate an L2TP packet.
  • the special escaping identifier field is used to identify whether the L2TP packet is an enterprise tenant service packet.
  • step S204 the Layer 2 tunneling protocol device sends the L2TP packet to the Layer 2 tunneling protocol network server of the operator data center.
  • the LNS after receiving the L2TP packet sent by the Layer 2 tunneling device, the LNS first determines whether the L2TP packet is a home user broadband access service packet or an enterprise tenant service packet according to the session header of the L2TP packet. If the user is a broadband access service packet, the user-side packet in the L2TP packet is directly extracted, and the user-side packet is forwarded to the host in the data center; Then extract the enterprise from the conversation header
  • the tenant network identifier is sent to the corresponding enterprise tenant network in the data center according to the enterprise tenant network identifier, and then the real user side packet is extracted from the L2TP packet, and the real user side report is sent. The text is forwarded to the corresponding host in the enterprise tenant network.
  • Step 1 The LNS determines whether the L2TP packet is an enterprise tenant service packet according to the value of the first bit of the L2TP packet session header. If not, step 2 is performed; otherwise, step 3 is performed.
  • Step 2 If the home user accesses the broadband service packet, the LNS extracts the user-side packet from the L2TP packet, and sends the user-side packet to the data center according to the home user broadband access service flow. Host.
  • Step 3 If the enterprise tenant service packet is received, the LNS extracts the enterprise tenant network identifier from the session header of the L2TP packet. Based on the extracted enterprise tenant network identifier, the LNS can know which enterprise tenant network should be sent from the user side to the data center, and then extract the real user side message (completely recovering the user's message to the Layer 2 tunneling protocol device. Message).
  • Step 4 The enterprise tenant network device in the data center receives the recovered user-side packet sent by the LNS, and performs the routing or switching action of the traditional network device according to the frame type, the MAC address, the IP address, and the like, and can send the user.
  • the side message is sent to the corresponding destination host.
  • the enterprise tenant network device in the data center parses the received user-side packet and extracts the inner destination destination MAC address and destination IP address of the data frame according to the Ethernet packet format.
  • the task of network virtualization is completed by escaping the existing L2TP protocol, and is compatible with the services of the existing protocol.
  • the main benefits are reflected in:
  • the L2TP protocol is a mature protocol, and the protocol has mature standards. At present, most devices can support the L2TPv3 protocol. Operators do not need to upgrade the existing network devices to implement network virtualization, and build an enterprise-level virtual private cloud. The investment is small for operators and the processing time is short.
  • the L2TP-VP protocol is obtained, which will not bring additional data headers, and will not cause the MTU problem of the network device.
  • the advantage brought by the escaping action is obvious.
  • the L2TP-VP protocol has a cookie field that provides certain network security to enterprise tenants.
  • FIG. 4 is a block diagram showing a specific structure of a layer 2 tunneling protocol device according to Embodiment 2 of the present invention. For convenience of description, only parts related to the embodiment of the present invention are shown.
  • the Layer 2 tunneling protocol device may be connected between the client and the Layer 2 tunneling protocol network server, and together with the client and the Layer 2 tunneling protocol network server, form a system for forwarding packets, and the Layer 2 tunneling protocol device 4 includes a user side message receiving unit 41, a message type determining unit 42, a session header setting unit 43, an L2TP message generating unit 44, and an L2TP message transmitting unit 45.
  • the user side message receiving unit 41 is configured to receive a user side message sent by the client.
  • the packet type determining unit 42 is configured to determine, according to the destination address included in the user-side packet, whether the user-side message needs to be forwarded to the enterprise tenant;
  • the session header setting unit 43 is configured to: if the user side message needs to be forwarded to the enterprise tenant, set a session header of the second layer tunneling protocol L2TP according to the user side message, where the session header includes a special escaping identifier Field and enterprise tenant network identification fields;
  • the L2TP packet generating unit 44 is configured to insert the session header into the front of the user side packet to generate an L2TP packet, where the special escaping identifier field is used to identify whether the L2TP packet is an enterprise tenant service report.
  • the L2TP packet sending unit 45 is configured to send the L2TP packet to the Layer 2 tunneling protocol network server of the operator data center.
  • the conversation header setting unit 43 includes:
  • a destination address obtaining module configured to acquire a destination address included in the user side packet
  • the enterprise tenant network identifier obtaining module is configured to find an enterprise tenant network identifier corresponding to the destination address from a correspondence table between the enterprise tenant network identifier and the physical address of the enterprise tenant.
  • the session header further includes: a frame type identifier field and a cookie field
  • the session header setting unit 43 further includes:
  • a special escaping identifier field setting module configured to set a first bit of the session header to a special escaping identifier field
  • a frame type identifier field setting module configured to set a second type and a fourth byte of the session header as a frame type identifier field
  • the enterprise tenant network identifier field setting module is configured to set the fifth to seventh bytes of the session header to be an enterprise tenant network identification field;
  • a cookie field setting module is configured to set a last four bytes of the session header as a cookie field.
  • the device of the second layer of the tunneling protocol provided by the embodiment of the present invention may be applied to the foregoing corresponding method embodiment 1.
  • the device of the second layer of the tunneling protocol provided by the embodiment of the present invention may be applied to the foregoing corresponding method embodiment 1.
  • FIG. 5 is a block diagram showing a specific structure of a Layer 2 tunneling protocol device according to Embodiment 3 of the present invention. For convenience of description, only parts related to the embodiment of the present invention are shown.
  • the Layer 2 tunneling protocol device may be connected between the client and the Layer 2 tunneling protocol network server, and together with the client and the Layer 2 tunneling protocol network server, form a system for forwarding packets, and the Layer 2 tunneling protocol device 5 includes a receiver 51, a processor 52, and a transmitter 53.
  • the sender 51 is configured to receive a user side message sent by the client.
  • the processor 52 is configured to determine, according to the destination address included in the user-side packet, whether to forward the user-side packet to the enterprise tenant, and if the user-side packet needs to be forwarded to the enterprise tenant, according to the user
  • the session header is set to the session header of the Layer 2 tunneling protocol L2TP, and the session header is inserted in front of the user-side packet to generate an L2TP packet, where the session header includes a special escaping identifier field and an enterprise tenant network.
  • An identifier field where the special escaping identifier field is used to identify whether the L2TP packet is an enterprise tenant service packet;
  • the transmitter 53 is configured to send the L2TP packet to a Layer 2 tunneling protocol network server of the operator data center.
  • the processor 52 first obtains a destination address included in the user-side packet, and then searches for a correspondence corresponding to the destination address from a correspondence table between the enterprise tenant network identifier and the physical address of the enterprise tenant. Enterprise tenant network ID.
  • the session header further includes: a frame type identifier field and a cookie field
  • the processor 52 is further configured to: set a first bit of the session header to a special escape identifier field, and set the conference
  • the 2nd and 4th bytes of the header are frame type identification fields, and the 5th to 7th bytes of the session header are set to be an enterprise tenant network identification field, and the last 4 bytes of the session header are set as a cookie field.
  • the device of the second layer of the tunneling protocol provided by the embodiment of the present invention may be applied to the foregoing corresponding method embodiment 1.
  • the device of the second layer of the tunneling protocol provided by the embodiment of the present invention may be applied to the foregoing corresponding method embodiment 1.
  • FIG. 6 is a block diagram showing a specific structure of a Layer 2 tunneling protocol network server according to Embodiment 4 of the present invention. For convenience of description, only parts related to the embodiment of the present invention are shown.
  • the Layer 2 tunneling protocol network server is connected to the Layer 2 tunneling protocol device, and can form a system for forwarding packets together with the client and the Layer 2 tunneling protocol device.
  • the Layer 2 tunneling protocol network server 6 includes: an L2TP packet.
  • the text receiving unit 61, the message type determining unit 62, and the enterprise tenant message forwarding unit 63 are examples of the message packets.
  • the L2TP packet receiving unit 61 is configured to receive a Layer 2 tunneling protocol L2TP packet sent by the Layer 2 tunneling protocol device, where the L2TP packet includes an L2TP session header, and the session header includes a special escaping.
  • the packet type determining unit 62 is configured to determine whether the L2TP packet is a home user broadband access service packet or an enterprise tenant service packet;
  • the enterprise tenant packet forwarding unit 63 is configured to: if the L2TP packet is an enterprise tenant service packet, extract the enterprise tenant network identifier and the user side packet from the L2TP packet, and according to the enterprise The tenant network identifier forwards the user side message to the corresponding host in the corresponding enterprise tenant network.
  • the message type determining unit 62 includes:
  • a special escaping identifier obtaining module configured to acquire a special escaping identifier included in the session header
  • the packet type judging module is configured to determine, according to the special escaping identifier, whether the L2TP packet is a home user broadband access service packet or an enterprise tenant service packet.
  • the second layer tunneling protocol network server provided by the embodiment of the present invention may be applied to the foregoing corresponding method embodiment 1.
  • the second layer tunneling protocol network server provided by the embodiment of the present invention may be applied to the foregoing corresponding method embodiment 1.
  • FIG. 7 is a block diagram showing a specific structure of a Layer 2 tunneling protocol network server according to Embodiment 5 of the present invention. For convenience of description, only parts related to the embodiment of the present invention are shown.
  • the Layer 2 tunneling protocol network server is connected to the Layer 2 tunneling protocol device, and can form a system for forwarding packets together with the client and the Layer 2 tunneling protocol device.
  • the Layer 2 tunneling protocol network server 7 includes: a receiver. 71. Processor 72 and transmitter 73.
  • the receiver 71 is configured to receive a Layer 2 tunneling protocol L2TP packet sent by the Layer 2 tunneling protocol device, where the L2TP packet includes an L2TP session header, where the session header includes a special escaping identifier field and An enterprise tenant network identifier field, where the special escaping identifier field is used to identify whether the L2TP packet is an enterprise tenant service packet;
  • the processor 72 is configured to determine whether the L2TP packet is a home user broadband access service packet or an enterprise tenant service packet, and if the L2TP packet is an enterprise tenant service packet, extract the L2TP packet from the L2TP packet.
  • the sender 73 is configured to forward the user side message to a corresponding host in the corresponding enterprise tenant network according to the enterprise tenant network identifier.
  • the processor 72 first acquires a special escaping identifier included in the session header, and then according to the special transfer The identifier identifies whether the L2TP packet is a home user broadband access service packet or an enterprise tenant service packet.
  • the second layer tunneling protocol network server provided by the embodiment of the present invention may be applied to the foregoing corresponding method embodiment 1.
  • the second layer tunneling protocol network server provided by the embodiment of the present invention may be applied to the foregoing corresponding method embodiment 1.
  • each unit included is only divided according to functional logic, but is not limited to the above division, as long as the corresponding function can be implemented; in addition, the specific name of each functional unit It is also for convenience of distinguishing from each other and is not intended to limit the scope of protection of the present invention.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

本发明适用于云计算领域，提供了一种转发报文的方法、系统，所述方法包括：第二层隧道协议设备接收客户端发送的用户侧报文；所述第二层隧道协议设备根据所述用户侧报文中包括的目的地址判断是否需要转发所述用户侧报文至企业租户，如果是，则根据所述用户侧报文设置第二层隧道协议L2TP的会话头，所述会话头中包括特殊转义标识字段和企业租户网络标识字段；所述第二层隧道协议设备将所述会话头插入所述用户侧报文的前面，生成L2TP报文；所述第二层隧道协议设备发送所述L2TP报文至运营商数据中心的第二层隧道协议网络服务器。本发明，不会带来额外的数据头，不会造成网络设备的MTU问题，转义动作带来的优势明显。

Description

一种转发报文的方法、系统
本申请要求于2014年3月28日提交中国专利局、申请号为201410123233.0、发明名称为“一种转发报文的方法、系统”的中国专利申请的优先权，其全部内容通过引用结合在本申请中。
技术领域
本发明属于云计算领域，尤其涉及一种转发报文的方法、系统。
背景技术
云计算(Cloud Computing)技术的迅猛发展彻底改变了人们对于计算资源的认识，从传统的关注物理主机、物理网络、物理资源视角逐渐向关注虚拟主机、虚拟网络、虚拟资源视角转变。一批领先的企业在此转变过程中率先建立了自己的私有云并对外开放，获得了巨大的成功，进一步推动了云计算技术和市场的发展。
鉴于已有的商业案例，以及私有云能够更充分地利用现有计算资源、降低IT运维成本和能源消耗的优势，很多企业都在考虑建设或者引入自己的私有云，将自身内部网络的边界无限扩大，以适应业务不断发展的需求，同时通过提高硬件资源的利用率来实现更高的效率，大幅节约能源，最大程度地控制成本增加。
为了在企业云市场分一杯羹，拥有建设和部署企业级私有云的能力成为了网络运营商升级为云服务提供商的关键。网络运营商建设企业私有云，其本质是利用其遍布各地的数据中心，在现有的物理网络上建立属于每个企业自己私有的虚拟网络，从而将一张物理网络虚拟化成多张企业内部网络。只有如此，运营商的一个物理网络才能不再被一个租户所独享，方能同时为多个企业租户使用。每个企业属于一个租户，企业原本自行购买服务器，建数据中心，自行运维来满足其内部的IT办公、运营等需求；进入云时代，运营商利用其遍布各地的大型机房和数据中心资源，通过虚拟化技术将数据中心同时租用给多个企业使用，企业相互之间并不感知、也无法通信。这样，每个企业租户使用时都会觉得自己从运营商租用到的是一个只属于自己的数据中心。
由此可见，运营商实现网络的虚拟化需要支持两个诉求，一为多租户，能够支持更多数量的企业才能更充分地利用好物理网络的资源，实现更大的商业价值；二为大二层，运营商建立的虚拟网络还必须满足企业租户在不同地域都能够像企业内部的本地网络一样互联互通的需求，即私有云必须能提供跨越三层网络打通大二层网络的能 力。
实现网络虚拟化的技术，比如，Vmware提出的虚拟可扩展局域网接入技术(Virtual eXtensible LAN，VXLAN)，其中，LAN(Local Area Network)的中文名为局域网。VXLAN主要的技术实现手段是基于三层网络构建二层隧道，通过隧道来传输大二层数据，达到让企业内部二层网络跨越三层网络的目的。使用VXLAN协议实现网络虚拟化需要全新升级运营商的网络基础设施，包括企业出口网关以及运营商数据中心网关，增加网关路由器底层硬件、上层软件对VXLAN新协议的支持。
VXLAN技术实现网络虚拟化的缺点如下：
1)、VXLAN协议属于全新开发的协议，协议目前仍然处于互联网研究任务组(Internet Research Task Force，IETF)标准化草案阶段，尚未成为实际标准。因此目前还没有能够支持VXLAN的基础网络设备及相应网络运维软件，运营商需要网络设备商开发出相应的新设备及软件，并对现网设备进行整体替换，对运营商来说投资巨大，业务上线耗期长。
2)、实现VXLAN协议的网关设备将直接在用户数据前增加50字节的外层头，这就势必带来网络设备的最大传输单元(Maximum Transmission Unit，MTU)问题。对于可调整MTU的设备，增加的外层头长度将导致该设备可用数据内容长度的减少，开销字段的增加；对于不可调整MTU的设备，将可能导致原有业务中断，不得不重新修改业务处理。
发明内容
本发明实施例提供了一种转发报文的方法、系统，旨在解决现有的VXLAN技术实现网络虚拟化时无法解决的两个问题。
第一方面，提供一种转发报文的方法，所述方法包括：
第二层隧道协议设备接收客户端发送的用户侧报文；
所述第二层隧道协议设备根据所述用户侧报文中包括的目的地址判断是否需要转发所述用户侧报文至企业租户，如果是，则根据所述用户侧报文设置第二层隧道协议L2TP的会话头，所述会话头中包括特殊转义标识字段和企业租户网络标识字段；
所述第二层隧道协议设备将所述会话头插入所述用户侧报文的前面，生成L2TP报文，所述特殊转义标识字段用于标识所述L2TP报文是否是企业租户业务报文；
所述第二层隧道协议设备发送所述L2TP报文至运营商数据中心的第二层隧道协议网络服务器。
在第一方面的第一种可能的实现方式中，所述第二层隧道协议设备读取所述用户侧报文中的目的地址，从企业租户网络标识与企业租户的物理地址之间的对应关系表中查找到与所述目的地址对应的企业租户网络标识。
结合第一方面的第一种可能的实现方式，在第二种可能的实现方式中，所述会话头中还包括：帧类型标识字段和cookie字段；
所述第二层隧道协议设备设置所述会话头的第一个比特位为特殊转义标识字段；
所述第二层隧道协议设备设置所述会话头的第2和第4字节为帧类型标识字段；
所述第二层隧道协议设备设置所述会话头的第5至第7字节为企业租户网络标识字段；
所述第二层隧道协议设备设置所述会话头的最后4个字节为cookie字段。
第二方面，提供一种第二层隧道协议设备，所述第二层隧道协议设备包括：
用户侧报文接收单元，用于接收客户端发送的用户侧报文；
报文类型判断单元，用于根据所述用户侧报文中包括的目的地址判断是否需要转发所述用户侧报文至企业租户；
会话头设置单元，用于如果需要转发所述用户侧报文至企业租户，则根据所述用户侧报文设置第二层隧道协议L2TP的会话头，所述会话头中包括特殊转义标识字段和企业租户网络标识字段；
L2TP报文生成单元，用于将所述会话头插入所述用户侧报文的前面，生成L2TP报文，所述特殊转义标识字段用于标识所述L2TP报文是否是企业租户业务报文；
L2TP报文发送单元，用于发送所述L2TP报文至运营商数据中心的第二层隧道协议网络服务器。
在第二方面的第一种可能的实现方式中，所述会话头设置单元包括：
目的地址获取模块，用于读取所述用户侧报文中包括的目的地址；
企业租户网络标识获取模块，用于从企业租户网络标识与企业租户的物理地址之间的对应关系表中查找到与所述目的地址对应的企业租户网络标识。
结合第二方面的第一种可能的实现方式，在第二种可能的实现方式中，所述会话头中还包括：帧类型标识字段和cookie字段；
所述会话头设置单元还包括：
特殊转义标识字段设置模块，用于设置所述会话头的第一个比特位为特殊转义标识字段；
帧类型标识字段设置模块，用于设置所述会话头的第2和第4字节为帧类型标识字段；
企业租户网络标识字段设置模块，用于设置所述会话头的第5至第7字节为企业租户网络标识字段；
cookie字段设置模块，用于设置所述会话头的最后4个字节为cookie字段。
第三方面，提供一种第二层隧道协议网络服务器，所述第二层隧道协议网络服务器包括：
L2TP报文接收单元，用于接收第二层隧道协议设备发送的第二层隧道协议L2TP报文，所述L2TP报文中包括L2TP的会话头，所述会话头中包括特殊转义标识字段和企业租户网络标识字段，所述特殊转义标识字段用于标识所述L2TP报文是否是企业租户业务报文；
报文类型判断单元，用于判断所述L2TP报文是家庭用户宽带接入业务报文还是企业租户业务报文；
企业租户报文转发单元，用于若所述L2TP报文是企业租户业务报文，则从所述L2TP报文中提取出企业租户网络标识和所述用户侧报文，并根据所述企业租户网络标识将所述用户侧报文转发至相应企业租户网络内的相应主机中。
在第三方面的第一种可能的实现方式中，报文类型判断单元包括：
特殊转义标识获取模块，用于读取所述会话头中包括的特殊转义标识；
报文类型判断模块，用于根据所述特殊转义标识判断所述L2TP报文是家庭用户宽带接入业务报文还是企业租户业务报文。
第四方面，提供一种转发报文的系统，包括客户端，所述系统还包括如上所述的第二层隧道协议设备和如上所述的第二层隧道协议网络服务器，所述第二层隧道协议设备连接于所述客户端和所述第二层隧道协议网络服务器之间。
在本发明实施例，通过对现有L2TP协议进行转义，使得原有的L2TP能够支持企业租户业务，企业租户通过转义后的报文能够在运营商的数据中心上建立自己专属的虚拟网络并与之通信，完成网络虚拟化的任务，同时兼容现有协议的业务。相比现有网络虚拟化技术，对L2TP协议进行转义后得到L2TP-VP协议，不会带来额外的数据头，不 会造成网络设备的MTU问题，转义动作带来的优势明显。
附图说明
图1是家庭用户或企业租户客户端、第二层隧道协议设备、LNS和数据中心之间的连接关系示意图；
图2本发明实施例一提供的转发报文的方法的实现流程图；
图3本发明实施例一提供的改造后的第二层隧道协议L2TP的会话头的各bit位的指示示意图；
图4是本发明实施例二提供的第二层隧道协议设备的结构框图；
图5是本发明实施例三提供的第二层隧道协议设备的结构框图；
图6是本发明实施例四提供的第二层隧道协议网络服务器的结构框图；
图7是本发明实施例五提供的第二层隧道协议网络服务器的结构框图。
具体实施方式
为了使本发明的目的、技术方案及优点更加清楚明白，以下结合附图及实施例，对本发明进行进一步详细说明。应当理解，此处所描述的具体实施例仅仅用以解释本发明，并不用于限定本发明。
在本发明实施例中，第二层隧道协议设备为每个企业租户侧的网络接入设备，同时也将是普通家庭宽带用户侧的网络接入设备，所有企业或者家庭用户都通过第二层隧道协议设备接入到数据中心。第二层隧道协议网络服务器(Layer Two Tunneling Protocol Network Server，LNS)则为运营商侧的设备，LNS两侧分别连接的是第二层隧道协议设备以及数据中心，如图1所示，家庭用户或企业租户客户端通过第二层隧道协议设备连接至LNS，再去访问数据中心内的各种资源。
以下结合具体实施例对本发明的实现进行详细描述：
实施例一
图2示出了本发明实施例一提供的转发报文的方法的实现流程，以第二层隧道协议设备接收客户端为例来进行说明，详述如下：
在步骤S201中，第二层隧道协议设备接收客户端发送的用户侧报文。
在本实施例中，客户端发送用户侧报文至第二层隧道协议设备，由第二层隧道协议设备对用户侧报文进行处理后，发送至LNS。所述客户端的用户可以是企业租户，也可 以是普通家庭宽带用户。
在步骤S202中，第二层隧道协议设备根据所述用户侧报文中包括的目的地址判断是否需要转发所述用户侧报文至企业租户，如果是，则根据所述用户侧报文设置第二层隧道协议L2TP的会话头，所述会话头中包括特殊转义标识字段和企业租户网络标识字段。
在本实施例中，第二层隧道协议设备接收到客户端发送的用户侧报文后，从中读取出用户侧报文中包括的目的地址，然后根据所述目的地址判断是否需要转发所述用户侧报文至企业租户，如果是，则才执行步骤S102以及S102之后的步骤，否则，第二层隧道协议设备按照家庭用户宽带接入业务流程填充第二层隧道协议(Layer Two Tunneling Protocol，L2TP)的会话头中的会话标识Session id和cookie字段后，将填充好的会话头插入用户侧报文的前面发送至LNS。
具体的，第二层隧道协议设备预先配置了家庭用户宽带接入业务，家庭用户宽带接入业务的业务号范围为0～2的32次方-1。
本发明实施例中，为了支持企业租户业务，第二层隧道协议设备从家庭用户宽带接入业务的业务号范围0～2的32次方-1中划出一半，0～2的31次方-1继续用于家庭用户宽带接入业务；2的31次方～2的32次方-1用于企业租户业务。
另外，第二层隧道协议设备预先配置企业租户网络标识number及cookie，并在本地存储企业租户网络标识number与企业租户的物理地址之间的对应关系表。当第二层隧道协议设备接收到客户端发送的用户侧报文后，从中读取出用户侧报文中包括的目的地址后，可以查找该对应关系表，如果从中查找到与所述目的地址匹配的物理地址，则表示需要将所述用户侧报文发送至企业租户。当第二层隧道协议设备确定接收到的用户侧报文需要发送给企业租户时，先读取所述用户侧报文中的目的地址，从企业租户网络标识number与企业租户的物理地址之间的对应关系表中查找到与所述目的地址对应的企业租户网络标识number，然后根据查找到的企业租户网络标识number设置第二层隧道协议L2TP的会话头。
其中，发明实施例中，对第二层隧道协议L2TP的会话头进行改造，第二层隧道协议L2TP的会话头中包括特殊转义标识字段和企业租户网络标识字段。
具体实现时，设置所述会话头的第一个比特位为特殊转义标识字段，设置所述会话头的第2和第4字节为帧类型标识字段，设置所述会话头的第5至第7字节为企业租户网络标识字段，设置其它比特位为保留字段。
需要说明的是，在会话头中也可以不设置帧类型标识字段，因为用户侧报文需要发送给企业租户时，该报文的帧类型一定是以太类型，当然为了清楚的标识出报文的帧类型，以便LNS能方便的根据帧类型从内层报文中解析出企业租户网络内的相应主机的目的地址。另外，帧类型标识字段和租户网络标识字段的长度以及所在的位置可以不做限制，可以根据具体情况来进行设定。
另外，优选地，在会话头中也可以设置cookie字段，为企业租户之间提供隔离机制，提高网络的安全性，cookie字段的长度以及所在的位置可以不做限制，可以根据具体情况来进行设定具体的。本实施例中，设置会话头的最后4个字节为cookie字段。
详细的，如图3所示，本发明实施例改造后的第二层隧道协议L2TP的会话头的各bit位的指示。本发明实施例改造后的第二层隧道协议L2TP的会话头中保持L2TP的会话头的12个字节的总长度不变，将最高比特位设置为特殊转义标识，含义为：最高比特位设置为0，表示本数据帧头为传统数据帧头，按传统格式解析；最高比特位设置为1，表示本数据帧头被转义，按新帧头格式解析。特殊转义标识字段后跟15bit保留位Reserved，为保留字段，15bit保留位后是16bit帧类型标识指示位Frame Type，用于指示内层报文的帧类型，如点到点协议(Point to Point Protocol，PPP)或以太。第2和第4字节为帧类型标识字段，用于标识用户侧报文的类型，第5至第7字节为24bit的企业租户网络标识字段(Tenant Network Identifier，TNI)，将用于网络运营商分配给企业的虚拟私有云使用，企业租户网络标识是整个网络中的唯一识别编号。第8个字节为保留字段Reserved。压缩传统L2TP的会话头中64bit的cookie字段为32bit的cookie字段。
在步骤S203中，第二层隧道协议设备将所述会话头插入所述用户侧报文的前面，生成L2TP报文。
本发明实施例中，所述特殊转义标识字段用于标识所述L2TP报文是否是企业租户业务报文。
在步骤S204中，第二层隧道协议设备发送所述L2TP报文至运营商数据中心的第二层隧道协议网络服务器。
本发明实施例中，LNS接收到第二层隧道协议设备发送的L2TP报文后，首先根据L2TP报文的会话头判断所述L2TP报文是家庭用户宽带接入业务报文还是企业租户业务报文，若为家庭用户宽带接入业务报文，则直接提取所述L2TP报文中的用户侧报文，转发所述用户侧报文至数据中心内的主机；若为企业租户业务报文，则从会话头中提取企 业租户网络标识，根据该企业租户网络标识将该报文发送至数据中心内的相应企业租户网络，然后从所述L2TP报文提取出真正的用户侧报文，将所述真正的用户侧报文转发至企业租户网络内的相应主机。
详细过程包括如下步骤：
步骤1、LNS根据所述L2TP报文会话头第一个比特位的值判断所述L2TP报文是否是企业租户业务报文，如果否，则执行步骤2，否则执行步骤3。
步骤2、若为家庭用户宽带接入业务报文，LNS从所述L2TP报文中提取出用户侧报文，并按照家庭用户宽带接入业务流程发送所述用户侧报文至数据中心内的主机。
步骤3、若为企业租户业务报文，LNS从所述L2TP报文的会话头中提取出企业租户网络标识。LNS根据提取出的企业租户网络标识，可以知道应该发送用户侧报文至数据中心内的哪个企业租户网络，然后提取真正的用户侧报文(完全恢复出用户发给第二层隧道协议设备的报文)。
步骤4、数据中心内的企业租户网络设备接收到LNS发送的恢复出来的用户侧报文，按照其帧类型、MAC地址、IP地址等进行传统网络设备的路由或交换动作即可发送所述用户侧报文到对应的目的主机。
具体步骤为：
数据中心内的企业租户网络设备解析接收到的用户侧报文，按照以太网报文格式提取数据帧的内层目的MAC地址及目的IP地址。
本实施例，通过对现有L2TP协议进行转义，完成网络虚拟化的任务，同时兼容现有协议的业务。相比现有网络虚拟化技术，主要有益效果体现在：
1、L2TP协议属于成熟协议，协议已经有成熟的标准。目前大多数设备均能够支持L2TPv3协议，运营商不需要对现网设备升级即可实现网络虚拟化，构建企业级虚拟私有云，对运营商来说投资小，耗期短。
2、对L2TP协议进行转义后得到L2TP-VP协议，不会带来额外的数据头，不会造成网络设备的MTU问题，转义动作带来的优势明显。
3、本L2TP-VP协议拥有cookie字段，能够向企业租户提供一定的网络安全性。
本领域普通技术人员可以理解实现上述各实施例方法中的全部或部分步骤是可以通过程序来指令相关的硬件来完成，相应的程序可以存储于一计算机可读取存储介质中，所述的存储介质，如ROM/RAM、磁盘或光盘等。
实施例二
图4示出了本发明实施例二提供的第二层隧道协议设备的具体结构框图，为了便于说明，仅示出了与本发明实施例相关的部分。该第二层隧道协议设备可以连接于客户端和第二层隧道协议网络服务器之间，与客户端和第二层隧道协议网络服务器一起组成一个转发报文的系统，该第二层隧道协议设备4包括：用户侧报文接收单元41、报文类型判断单元42、会话头设置单元43、L2TP报文生成单元44和L2TP报文发送单元45。
其中，用户侧报文接收单元41，用于接收客户端发送的用户侧报文；
报文类型判断单元42，用于根据所述用户侧报文中包括的目的地址判断是否需要转发所述用户侧报文至企业租户；
会话头设置单元43，用于如果需要转发所述用户侧报文至企业租户，则根据所述用户侧报文设置第二层隧道协议L2TP的会话头，所述会话头中包括特殊转义标识字段和企业租户网络标识字段；
L2TP报文生成单元44，用于将所述会话头插入所述用户侧报文的前面，生成L2TP报文，所述特殊转义标识字段用于标识所述L2TP报文是否是企业租户业务报文；
L2TP报文发送单元45，用于发送所述L2TP报文至运营商数据中心的第二层隧道协议网络服务器。
具体的，会话头设置单元43包括：
目的地址获取模块，用于获取所述用户侧报文中包括的目的地址；
企业租户网络标识获取模块，用于从企业租户网络标识与企业租户的物理地址之间的对应关系表中查找到与所述目的地址对应的企业租户网络标识。
具体的，所述会话头中还包括：帧类型标识字段和cookie字段，所述会话头设置单元43还包括：
特殊转义标识字段设置模块，用于设置所述会话头的第一个比特位为特殊转义标识字段；
帧类型标识字段设置模块，用于设置所述会话头的第2和第4字节为帧类型标识字段；
企业租户网络标识字段设置模块，用于设置所述会话头的第5至第7字节为企业租户网络标识字段；
cookie字段设置模块，用于设置所述会话头的最后4个字节为cookie字段。
本发明实施例提供的第二层隧道协议设备可以应用在前述对应的方法实施例一中，详情参见上述实施例一的描述，在此不再赘述。
实施例三
图5示出了本发明实施例三提供的第二层隧道协议设备的具体结构框图，为了便于说明，仅示出了与本发明实施例相关的部分。该第二层隧道协议设备可以连接于客户端和第二层隧道协议网络服务器之间，与客户端和第二层隧道协议网络服务器一起组成一个转发报文的系统，该第二层隧道协议设备5包括：接收器51、处理器52和发送器53。
其中，发送器51，用于接收客户端发送的用户侧报文；
处理器52，用于根据所述用户侧报文中包括的目的地址判断是否需要转发所述用户侧报文至企业租户，如果需要转发所述用户侧报文至企业租户，则根据所述用户侧报文设置第二层隧道协议L2TP的会话头，并将所述会话头插入所述用户侧报文的前面，生成L2TP报文，所述会话头中包括特殊转义标识字段和企业租户网络标识字段，所述特殊转义标识字段用于标识所述L2TP报文是否是企业租户业务报文；
发送器53，用于发送所述L2TP报文至运营商数据中心的第二层隧道协议网络服务器。
具体的，所述处理器52先获取所述用户侧报文中包括的目的地址，再从企业租户网络标识与企业租户的物理地址之间的对应关系表中查找到与所述目的地址对应的企业租户网络标识。
具体的，所述会话头中还包括：帧类型标识字段和cookie字段，所述处理器52还用于，设置所述会话头的第一个比特位为特殊转义标识字段，设置所述会话头的第2和第4字节为帧类型标识字段，设置所述会话头的第5至第7字节为企业租户网络标识字段，设置所述会话头的最后4个字节为cookie字段。
本发明实施例提供的第二层隧道协议设备可以应用在前述对应的方法实施例一中，详情参见上述实施例一的描述，在此不再赘述。
实施例四
图6示出了本发明实施例四提供的第二层隧道协议网络服务器的具体结构框图，为了便于说明，仅示出了与本发明实施例相关的部分。该第二层隧道协议网络服务器与第二层隧道协议设备连接，可以与客户端和第二层隧道协议设备一起组成一个转发报文的系统，该第二层隧道协议网络服务器6包括：L2TP报文接收单元61、报文类型判断单元62和企业租户报文转发单元63。
其中，L2TP报文接收单元61，用于接收第二层隧道协议设备发送的第二层隧道协议L2TP报文，所述L2TP报文中包括L2TP的会话头，所述会话头中包括特殊转义标识字段和企业租户网络标识字段，所述特殊转义标识字段用于标识所述L2TP报文是否是企业租户业务报文；
报文类型判断单元62，用于判断所述L2TP报文是家庭用户宽带接入业务报文还是企业租户业务报文；
企业租户报文转发单元63，用于若所述L2TP报文是企业租户业务报文，则从所述L2TP报文中提取出企业租户网络标识和所述用户侧报文，并根据所述企业租户网络标识将所述用户侧报文转发至相应企业租户网络内的相应主机中。
具体的，报文类型判断单元62包括：
特殊转义标识获取模块，用于获取所述会话头中包括的特殊转义标识；
报文类型判断模块，用于根据所述特殊转义标识判断所述L2TP报文是家庭用户宽带接入业务报文还是企业租户业务报文。
本发明实施例提供的第二层隧道协议网络服务器可以应用在前述对应的方法实施例一中，详情参见上述实施例一的描述，在此不再赘述。
实施例五
图7示出了本发明实施例五提供的第二层隧道协议网络服务器的具体结构框图，为了便于说明，仅示出了与本发明实施例相关的部分。该第二层隧道协议网络服务器与第二层隧道协议设备连接，可以与客户端和第二层隧道协议设备一起组成一个转发报文的系统，该第二层隧道协议网络服务器7包括：接收器71、处理器72和发送器73。
其中，接收器71，用于接收第二层隧道协议设备发送的第二层隧道协议L2TP报文，所述L2TP报文中包括L2TP的会话头，所述会话头中包括特殊转义标识字段和企业租户网络标识字段，所述特殊转义标识字段用于标识所述L2TP报文是否是企业租户业务报文；
处理器72，用于判断所述L2TP报文是家庭用户宽带接入业务报文还是企业租户业务报文，若所述L2TP报文是企业租户业务报文，则从所述L2TP报文中提取出企业租户网络标识和所述用户侧报文；
发送器73，用于根据所述企业租户网络标识将所述用户侧报文转发至相应企业租户网络内的相应主机中。
具体的，处理器72先获取所述会话头中包括的特殊转义标识，再根据所述特殊转 义标识判断所述L2TP报文是家庭用户宽带接入业务报文还是企业租户业务报文。
本发明实施例提供的第二层隧道协议网络服务器可以应用在前述对应的方法实施例一中，详情参见上述实施例一的描述，在此不再赘述。
值得注意的是，上述系统实施例中，所包括的各个单元只是按照功能逻辑进行划分的，但并不局限于上述的划分，只要能够实现相应的功能即可；另外，各功能单元的具体名称也只是为了便于相互区分，并不用于限制本发明的保护范围。
以上所述仅为本发明的较佳实施例而已，并不用以限制本发明，凡在本发明的精神和原则之内所作的任何修改、等同替换和改进等，均应包含在本发明的保护范围之内。

Claims (9)

  1. 一种转发报文的方法，其特征在于，所述方法包括：
    第二层隧道协议设备接收客户端发送的用户侧报文；
    所述第二层隧道协议设备根据所述用户侧报文中包括的目的地址判断是否需要转发所述用户侧报文至企业租户，如果是，则根据所述用户侧报文设置第二层隧道协议L2TP的会话头，所述会话头中包括特殊转义标识字段和企业租户网络标识字段；
    所述第二层隧道协议设备将所述会话头插入所述用户侧报文的前面，生成L2TP报文，所述特殊转义标识字段用于标识所述L2TP报文是否是企业租户业务报文；
    所述第二层隧道协议设备发送所述L2TP报文至运营商数据中心的第二层隧道协议网络服务器。
  2. 如权利要求1所述的方法，其特征在于，所述第二层隧道协议设备读取所述用户侧报文中的目的地址，从企业租户网络标识与企业租户的物理地址之间的对应关系表中查找到与所述目的地址对应的企业租户网络标识。
  3. 如权利要求2所述的方法，其特征在于，所述会话头中还包括：帧类型标识字段和cookie字段；
    所述第二层隧道协议设备设置所述会话头的第一个比特位为特殊转义标识字段；
    所述第二层隧道协议设备设置所述会话头的第2和第4字节为帧类型标识字段；
    所述第二层隧道协议设备设置所述会话头的第5至第7字节为企业租户网络标识字段；
    所述第二层隧道协议设备设置所述会话头的最后4个字节为cookie字段。
  4. 一种第二层隧道协议设备，其特征在于，所述第二层隧道协议设备包括：
    用户侧报文接收单元，用于接收客户端发送的用户侧报文；
    报文类型判断单元，用于根据所述用户侧报文中包括的目的地址判断是否需要转发所述用户侧报文至企业租户；
    会话头设置单元，用于如果需要转发所述用户侧报文至企业租户，则根据所述用户侧报文设置第二层隧道协议L2TP的会话头，所述会话头中包括特殊转义标识字段和企业租户网络标识字段；
    L2TP报文生成单元，用于将所述会话头插入所述用户侧报文的前面，生成L2TP报文，所述特殊转义标识字段用于标识所述L2TP报文是否是企业租户业务报文；
    L2TP报文发送单元，用于发送所述L2TP报文至运营商数据中心的第二层隧道协 议网络服务器。
  5. 如权利要求4所述的第二层隧道协议设备，其特征在于，所述会话头设置单元包括：
    目的地址获取模块，用于读取所述用户侧报文中包括的目的地址；
    企业租户网络标识获取模块，用于从企业租户网络标识与企业租户的物理地址之间的对应关系表中查找到与所述目的地址对应的企业租户网络标识。
  6. 如权利要求5所述的第二层隧道协议设备，其特征在于，所述会话头中还包括：帧类型标识字段和cookie字段；
    所述会话头设置单元还包括：
    特殊转义标识字段设置模块，用于设置所述会话头的第一个比特位为特殊转义标识字段；
    帧类型标识字段设置模块，用于设置所述会话头的第2和第4字节为帧类型标识字段；
    企业租户网络标识字段设置模块，用于设置所述会话头的第5至第7字节为企业租户网络标识字段；
    cookie字段设置模块，用于设置所述会话头的最后4个字节为cookie字段。
  7. 一种第二层隧道协议网络服务器，其特征在于，所述第二层隧道协议网络服务器包括：
    L2TP报文接收单元，用于接收第二层隧道协议设备发送的第二层隧道协议L2TP报文，所述L2TP报文中包括L2TP的会话头，所述会话头中包括特殊转义标识字段和企业租户网络标识字段，所述特殊转义标识字段用于标识所述L2TP报文是否是企业租户业务报文；
    报文类型判断单元，用于判断所述L2TP报文是家庭用户宽带接入业务报文还是企业租户业务报文；
    企业租户报文转发单元，用于若所述L2TP报文是企业租户业务报文，则从所述L2TP报文中提取出企业租户网络标识和所述用户侧报文，并根据所述企业租户网络标识将所述用户侧报文转发至相应企业租户网络内的相应主机中。
  8. 如权利要求7所述的第二层隧道协议服务器，其特征在于，报文类型判断单元包括：
    特殊转义标识获取模块，用于读取所述会话头中包括的特殊转义标识；
    报文类型判断模块，用于根据所述特殊转义标识判断所述L2TP报文是家庭用户宽带接入业务报文还是企业租户业务报文。
  9. 一种转发报文的系统，包括客户端，其特征在于，所述系统还包括如权利要求4至6任一项所述的第二层隧道协议设备和如权利要求7至8任一项所述的第二层隧道协议网络服务器，所述第二层隧道协议设备连接于所述客户端和所述第二层隧道协议网络服务器之间。
PCT/CN2015/073790 2014-03-28 2015-03-06 一种转发报文的方法、系统 WO2015143982A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201410123233.0 2014-03-28
CN201410123233.0A CN104954333B (zh) 2014-03-28 2014-03-28 一种转发报文的方法、系统

Publications (1)

Publication Number Publication Date
WO2015143982A1 true WO2015143982A1 (zh) 2015-10-01

Family

ID=54168693

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2015/073790 WO2015143982A1 (zh) 2014-03-28 2015-03-06 一种转发报文的方法、系统

Country Status (2)

Country Link
CN (1) CN104954333B (zh)
WO (1) WO2015143982A1 (zh)

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2020019073A1 (en) * 2018-07-26 2020-01-30 Kaloom Inc Computing device and method for optimizing the tunneling of ip packets
CN111698142A (zh) * 2020-05-26 2020-09-22 新华三信息安全技术有限公司 一种报文转发方法、装置、电子设备及存储介质
CN113301106A (zh) * 2021-03-23 2021-08-24 阿里巴巴新加坡控股有限公司 运维处理系统、方法以及装置
CN113973045A (zh) * 2020-07-24 2022-01-25 中移(苏州)软件技术有限公司 一种报文传输方法及装置

Families Citing this family (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN107800602B (zh) 2016-08-29 2021-01-15 华为技术有限公司 一种报文处理方法、设备及系统
CN109117650B (zh) * 2018-07-25 2022-03-18 华为云计算技术有限公司 一种企业云的创建方法和管理平台
CN111464638A (zh) * 2020-03-31 2020-07-28 潍柴动力股份有限公司 数据报文的处理方法及装置
CN111817958B (zh) * 2020-06-10 2023-04-07 新华三信息安全技术有限公司 一种报文转发方法及网络设备
CN114793187B (zh) * 2021-01-07 2024-03-01 大唐移动通信设备有限公司 L2tp消息的处理方法、装置及存储介质

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20020176427A1 (en) * 2001-05-28 2002-11-28 Mitsuhiro Noda Gateway apparatus with LAC function
CN1863141A (zh) * 2005-07-29 2006-11-15 华为技术有限公司 一种ip分片报文传输处理方法
CN102404221A (zh) * 2011-11-27 2012-04-04 深圳市掌控无限科技有限公司 一种多链路聚合的数据传输方法及系统
CN102546349A (zh) * 2012-02-09 2012-07-04 杭州华三通信技术有限公司 一种报文转发方法和设备

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20020176427A1 (en) * 2001-05-28 2002-11-28 Mitsuhiro Noda Gateway apparatus with LAC function
CN1863141A (zh) * 2005-07-29 2006-11-15 华为技术有限公司 一种ip分片报文传输处理方法
CN102404221A (zh) * 2011-11-27 2012-04-04 深圳市掌控无限科技有限公司 一种多链路聚合的数据传输方法及系统
CN102546349A (zh) * 2012-02-09 2012-07-04 杭州华三通信技术有限公司 一种报文转发方法和设备

Cited By (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2020019073A1 (en) * 2018-07-26 2020-01-30 Kaloom Inc Computing device and method for optimizing the tunneling of ip packets
US10979247B2 (en) 2018-07-26 2021-04-13 Kaloom Inc. Computing device and method for optimizing the tunneling of IP packets
CN111698142A (zh) * 2020-05-26 2020-09-22 新华三信息安全技术有限公司 一种报文转发方法、装置、电子设备及存储介质
CN111698142B (zh) * 2020-05-26 2023-03-31 新华三信息安全技术有限公司 一种报文转发方法、装置、电子设备及存储介质
CN113973045A (zh) * 2020-07-24 2022-01-25 中移(苏州)软件技术有限公司 一种报文传输方法及装置
CN113973045B (zh) * 2020-07-24 2024-02-23 中移(苏州)软件技术有限公司 一种报文传输方法及装置
CN113301106A (zh) * 2021-03-23 2021-08-24 阿里巴巴新加坡控股有限公司 运维处理系统、方法以及装置

Also Published As

Publication number Publication date
CN104954333A (zh) 2015-09-30
CN104954333B (zh) 2018-03-27

Similar Documents

Publication Publication Date Title
WO2015143982A1 (zh) 一种转发报文的方法、系统
US9065766B2 (en) Medium for storing packet conversion program, packet conversion apparatus and packet conversion method
US20200412578A1 (en) NSH Encapsulation for Traffic Steering
US7385973B1 (en) Method and apparatus for VLAN ID discovery
WO2018059284A1 (zh) 一种数据传输的方法及网络设备
US9654395B2 (en) SDN-based service chaining system
CN104010049B (zh) 基于sdn的以太网ip报文封装方法及网络隔离和dhcp实现方法
WO2021073565A1 (zh) 业务服务提供方法及系统
US9900238B2 (en) Overlay network-based original packet flow mapping apparatus and method therefor
WO2017054576A1 (zh) 单播隧道建立方法、装置和系统
WO2014101394A1 (zh) 可扩展虚拟局域网报文的传输方法及装置、系统
WO2014201974A1 (zh) 业务路由报文处理方法、装置及网络系统
WO2021073555A1 (zh) 业务服务提供方法及系统、远端加速网关
WO2016180020A1 (zh) 一种报文处理方法、设备和系统
WO2012155867A1 (zh) 一种报文发送方法及接入控制器
WO2021083332A1 (zh) 发送报文的方法、装置及系统
WO2014134919A1 (zh) 同一租户内服务器间的通信控制方法及网络设备
WO2012130151A1 (zh) 报文转发方法及系统与中继代理设备
CN104995882A (zh) 报文处理方法及装置
WO2015131739A1 (zh) 数据交互方法、基带处理单元、射频拉远单元及中继单元
WO2014110986A1 (zh) Trill网络互联方法、装置及系统
WO2009076839A1 (zh) 供应商边缘设备之间传送报文的方法、系统及设备
WO2014190843A1 (zh) 生成输入参数的方法及设备
JP5940632B2 (ja) ネットワークグループ分けシステム及びそのネットワークグループ分け方法
CN107547691B (zh) 地址解析协议报文代理方法和装置

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 15770151

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase
122 Ep: pct application non-entry in european phase

Ref document number: 15770151

Country of ref document: EP

Kind code of ref document: A1