WO2016188124A1 - 报文的转发处理方法、装置及系统 - Google Patents

报文的转发处理方法、装置及系统 Download PDF

Info

Publication number
WO2016188124A1
WO2016188124A1 PCT/CN2016/070076 CN2016070076W WO2016188124A1 WO 2016188124 A1 WO2016188124 A1 WO 2016188124A1 CN 2016070076 W CN2016070076 W CN 2016070076W WO 2016188124 A1 WO2016188124 A1 WO 2016188124A1
Authority
WO
WIPO (PCT)
Prior art keywords
domain
packet
sfpid
message
service function
Prior art date
Application number
PCT/CN2016/070076
Other languages
English (en)
French (fr)
Inventor
敖婷
吴波
Original Assignee
中兴通讯股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 中兴通讯股份有限公司 filed Critical 中兴通讯股份有限公司
Priority to US15/577,429 priority Critical patent/US10645060B2/en
Priority to JP2017561279A priority patent/JP6730326B2/ja
Priority to EP16799013.4A priority patent/EP3306869B1/en
Priority to CA2987314A priority patent/CA2987314C/en
Publication of WO2016188124A1 publication Critical patent/WO2016188124A1/zh

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W76/00—Connection management
    • H04W76/10—Connection setup
    • H04W76/11—Allocation or use of connection identifiers
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00—Network arrangements, protocols or services for addressing or naming
    • H04L61/09—Mapping addresses
    • H04L61/25—Mapping addresses of the same type
    • H04L61/2596—Translation of addresses of the same type other than IP, e.g. translation from MAC to MAC addresses
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L47/00—Traffic control in data switching networks
    • H04L47/10—Flow control; Congestion control
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/46—Interconnection of networks
    • H04L12/4633—Interconnection of networks using encapsulation techniques, e.g. tunneling
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/66—Arrangements for connecting between networks having differing types of switching systems, e.g. gateways
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00—Routing or path finding of packets in data switching networks
    • H04L45/02—Topology update or discovery
    • H04L45/04—Interdomain routing, e.g. hierarchical routing
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00—Routing or path finding of packets in data switching networks
    • H04L45/302—Route determination based on requested QoS
    • H04L45/306—Route determination based on the nature of the carried application
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00—Routing or path finding of packets in data switching networks
    • H04L45/64—Routing or path finding of packets in data switching networks using an overlay routing layer
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00—Network arrangements, protocols or services for addressing or naming
    • H04L61/45—Network directories; Name-to-address mapping
    • H04L61/4541—Directories for service discovery
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00—Network arrangements, protocols or services for addressing or naming
    • H04L61/50—Address allocation
    • H04L61/5076—Update or notification mechanisms, e.g. DynDNS
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00—Routing or path finding of packets in data switching networks
    • H04L45/42—Centralised routing

Definitions

  • the present invention relates to the field of communications, and in particular, to a packet processing method, apparatus, and system.
  • data enters a large number of value-added service devices, such as an anti-virus device, an acceleration device, a firewall device, and a network address translation (NAT) device.
  • value-added service devices such as an anti-virus device, an acceleration device, a firewall device, and a network address translation (NAT) device.
  • NAT network address translation
  • a service chain (SFC) is proposed, which integrates all service services, virtualizes the service overlay layer, forms its own service topology, and decouples the underlying network. Restricted by the underlying network structure, the architecture is shown in Figure 1.
  • the traffic to be flowed through is determined by the SFC.
  • the SFC adds different SFCs (by the ingress grading device) to different levels of traffic by adding a Service Function Path Identifier (SFPID) and classifying the packets.
  • SFPID Service Function Path Identifier
  • the forwarding device forwards the packet according to the identifier of the SFC. Therefore, different service flows can be implemented for different traffic, and differentiated requirements can be realized.
  • the current service function chain is processed as shown in Figure 1.
  • the service function (Service Function, hereinafter referred to as SF) is used as the service function forwarder.
  • the SFPID carried in the packet is used to select different SF or SFF to forward the packet.
  • the SFF received from the classifier or the SFF will be forwarded to the SF that belongs to the service chain path according to the SFPID of the packet.
  • the SFF will select the next hop according to the SFPID of the packet.
  • the message is then sent to the next SFF based on the address of the next hop.
  • some of the service functions may lease the service functions of other networks for complex processing, such as renting some service functions in the data center network, and doing some special processing on the traffic. Therefore, traffic needs to enter this data center network at this time.
  • the specific service functions and connection relationships in the data center network are blocked for the tenant, and the devices in the data center network cannot identify the SFC identifier of the WAN. In this scenario, related technologies cannot implement SFC support for end-to-end traffic.
  • the embodiment of the invention provides a method, a device and a system for processing packet forwarding, so as to at least solve the problem that the SFC support for end-to-end traffic cannot be implemented in the related art.
  • a packet processing method including: a second device in a second domain receives a first packet from a first domain; and the second device is the first Transmitting, by the second device, a second service function path identifier SFPID corresponding to the service function chain SFC in the second domain, to obtain a second packet, where the second device sends the second packet to the second domain Other devices than the second device.
  • the first packet carries the first SFPID allocated by the first domain to the first packet.
  • the receiving by the second device in the second domain, the first packet from the first domain, the second device, by using the gateway device of the second domain, receiving the first packet.
  • the first packet is sent by the first domain to the second domain according to the address of the gateway device of the second domain, where the address of the gateway device of the second domain is The first domain is obtained by the coordination management entity, and the address of the gateway device of the second domain is the address of the service function entity SF of the first domain corresponding to the SFC.
  • the second device allocates a second service function path identifier SFPID corresponding to the second intra-domain service function chain SFC, and the second packet includes: the second device The first packet is classified, and the second SFPID is generated according to the classification result; the second device encapsulates the second SFPID outside the first packet to obtain the second packet.
  • the classifying, by the second device, the first packet includes: the classifier of the second domain according to the header information of the first packet and/or the first SFPID pair A message is classified.
  • the classifier of the second domain classifies the first packet according to the header information of the first packet and/or the first SFPID, where the first domain and the second domain are coordinated by the management entity. Coordinating, the classifier of the second domain acquires a correspondence between the first SFPID and the second SFPID.
  • the second function of the second domain includes forwarding The SFF strips the second SFPID packet of the second packet to obtain the first packet, and the SFF sends the first packet to the gateway device by using the second domain. Other domains outside the second domain.
  • the second device allocates a second service function path identifier SFPID corresponding to the second intra-domain service function chain SFC, and the second packet includes: the second device And classifying the first packet to obtain a classification result; the second device generates the second SFPID according to the classification result; and the second device sends the first packet in the header of the first packet Substituting an SFPID for the second SFPID, the second message is obtained.
  • the classifying, by the second device, the first packet includes: the classifier of the second domain according to the header information of the first packet and/or the first SFPID pair A message is classified.
  • the SFF of the last hop of the second domain is Rewriting the second SFPID to the first SFPID to obtain the first packet; the SFF sending the first packet to the gateway device of the second domain to be sent by the second domain Other domains.
  • the second device allocates a second service function path identifier SFPID corresponding to the second intra-domain service function chain SFC, and the second packet is obtained according to the first Assigning, by the SFPID and the second SFPID, the second SFPID corresponding to the first SFPID to the first packet, and saving the first SFPID in the metadata, to obtain the second report Text.
  • SFPID service function path identifier
  • the sending, by the second device, the second packet to the second domain except the second device includes: an SFF slave of the last hop of the second domain
  • the first SFPID is obtained in the data, and the first SFPID is mapped to the first SFPID, and the first packet that encapsulates the second SFPID is restored to the first packet.
  • the SFF sends the first packet to the other domain than the second domain by using the gateway device of the second domain
  • the SFF does not provide the first domain
  • the gateway device in the second domain sends a notification message for deleting the service function SF provided by the second domain to the first domain.
  • the second domain includes: a primary domain and a secondary domain.
  • the second device is a classifier in the second domain.
  • a packet forwarding processing apparatus where the apparatus is applied to a second device in a second domain, the apparatus comprising: a receiving module, configured to be from the first domain Receiving a first packet; the allocating module is configured to allocate, for the first packet, a second service function path identifier SFPID corresponding to the service chain SFC in the second domain, to obtain a second packet; Set to send the second message to other devices in the second domain than the second device.
  • the first packet carries the first SFPID allocated by the first domain to the first packet.
  • the receiving module is further configured to send an address of the gateway device of the second domain to the first domain, and receive, by the gateway device of the second domain, the first packet.
  • the allocating module further includes: a first classifying unit, configured to classify the first packet to obtain a classification result; and the first generating unit is configured to generate the second SFPID according to the classification result; The encapsulating unit is configured to encapsulate the second SFPID part outside the first packet to obtain the second packet.
  • the allocating module further includes: a second classifying unit, configured to classify the first packet to obtain a classification result; and the second generating unit is configured to generate the second SFPID according to the classification result;
  • the replacing unit is configured to replace the first SFPID in the header of the first packet with the second SFPID, and save the first SFPID in the metadata to obtain the second packet.
  • the allocating module further includes: an acquiring unit, configured to acquire a correspondence between the first SFPID and the second SFPID, and allocate the first packet corresponding to the first SFPID to the first packet The second SFPID obtains the second message.
  • the second device is a classifier in the second domain.
  • a packet forwarding processing system including: a first device located in a first domain, and a second device located in a second domain: the second device is configured to Receiving the first message sent by the first device a message, a second service function path identifier SFPID corresponding to the service chain SFC in the second domain is allocated to the first packet, the second packet is obtained, and the second packet is sent to the first packet.
  • Other devices in the second domain than the second device are further provided, including: a first device located in a first domain, and a second device located in a second domain: the second device is configured to Receiving the first message sent by the first device a message, a second service function path identifier SFPID corresponding to the service chain SFC in the second domain is allocated to the first packet, the second packet is obtained, and the second packet is sent to the first packet.
  • Other devices in the second domain than the second device.
  • the system further includes: a gateway device located in the second domain and an SFF of the last hop, and a third device located in a domain other than the second domain: the SFF of the last hop is set to Recovering the second packet to the first packet, and sending the first packet to the gateway device; the gateway device is configured to receive the first packet from the first domain And sending the first packet to the second device, and sending the first packet that is recovered by the SFF of the last hop to the third device.
  • the first device receives the first packet from the first domain by using the second device in the second domain, and the second device allocates the second service function path identifier corresponding to the service chain SFC in the second domain for the first packet.
  • SFPID the second message is obtained; the second device sends the second message to other devices in the second domain except the second device.
  • 1 is a schematic diagram of an existing forwarding mode of an SFC
  • FIG. 2 is a flowchart of a method for processing a packet according to an embodiment of the present invention
  • FIG. 3 is a structural block diagram of a packet forwarding processing apparatus according to an embodiment of the present invention.
  • FIG. 4 is a structural block diagram (1) of a packet forwarding processing apparatus according to an embodiment of the present invention.
  • FIG. 5 is a structural block diagram (2) of a packet forwarding processing apparatus according to an embodiment of the present invention.
  • FIG. 6 is a structural block diagram (3) of a packet forwarding processing apparatus according to an embodiment of the present invention.
  • FIG. 7 is a schematic diagram of traffic transmission according to Embodiment 1 of the present invention.
  • FIG. 8 is a schematic diagram of a nesting format of an SFC header according to Embodiment 1 of the present invention.
  • FIG. 9 is a schematic diagram of a format of an SFC header according to Embodiment 2 of the present invention.
  • FIG. 10 is a schematic diagram of traffic transmission according to Embodiment 5 of the present invention.
  • Figure 11 is a schematic diagram of an SFC head in accordance with a fifth embodiment of the present invention.
  • FIG. 2 is a flowchart of a packet forwarding processing method according to an embodiment of the present invention. As shown in FIG. 2, the process includes the following steps:
  • Step S202 The second device in the second domain receives the first packet from the first domain.
  • Step S204 The second device allocates a second service function path identifier SFPID corresponding to the service function chain SFC in the second domain to obtain a second packet.
  • Step S206 The second device sends the second packet to other devices in the second domain than the second device.
  • the above steps can effectively provide various service processing for packets traversing different domains. Compared with the related technologies, the specific service functions and connection relationships in the data center domain to be used are blocked by the tenant. The above steps are solved. In the related art, the problem of SFC support for cross-domain end-to-end traffic cannot be realized, thereby implementing a service function chain traversing in multiple domains and ensuring the privacy of the internal service chain of the data center domain.
  • the first packet carries a first SFPID that is allocated by the first domain to the first packet. In order to facilitate the transmission of the first message.
  • the second device receives the first packet, and in an optional embodiment, the second device receives the first packet by using the gateway device of the second domain.
  • the first packet is sent by the first domain to the second domain according to the address of the gateway device of the second domain, where the address of the gateway device of the second domain is coordinated by the first domain.
  • the address of the gateway device of the second domain obtained by the entity is the address of the service function entity SF of the first domain corresponding to the SFC.
  • the foregoing step S204 involves the second device assigning a second service function path identifier SFPID corresponding to the service chain SFC in the second domain to obtain a second packet, which needs to be described in multiple manners.
  • a second message is obtained, which is exemplified below.
  • the second device classifies the first packet to obtain a classification result, and the second device generates a second SFPID according to the classification result, where the second device encapsulates the header of the first packet.
  • the second SFPID obtains the second message.
  • the classifier of the second domain performs the first packet according to the header information of the first packet and/or the first SFPID. classification.
  • the header information of the first packet includes: the first SFPID and/or other information except the first SFPID in the header information of the first packet.
  • the first domain and the second domain are coordinated by the coordination management entity, and the classifier of the second domain acquires the correspondence between the first SFPID and the second SFPID, thereby completing the classifier of the second domain.
  • the first packet is classified according to the header information of the first packet and/or the first SFPID.
  • the second device sends the second packet to another device in the second domain other than the second device, in order to provide various service processing for the traffic to traverse the different domains.
  • the service function repeater SFF of the last hop of the second domain strips the second SFPID of the second packet to obtain the first packet, and the SFF sends the first packet to the second domain by using the gateway device of the second domain. Other domains outside.
  • the service function forwarder SFF of the last hop of the second domain The last received SFF of the second message in the second domain.
  • the foregoing step S204 involves the second device assigning a second service function path identifier SFPID corresponding to the service chain SFC in the second domain to obtain a second packet, which needs to be described in multiple manners.
  • a second message is obtained, which is exemplified below.
  • the second device classifies the first packet to obtain a classification result, and the second device generates a second SFPID according to the classification result, and the second device replaces the first SFPID in the header of the first packet with the second SFPID to obtain the first packet.
  • Two messages are examples of the first packet to obtain a classification result, and the second device generates a second SFPID according to the classification result, and the second device replaces the first SFPID in the header of the first packet with the second SFPID to obtain the first packet.
  • the second device sends the second packet to another device in the second domain other than the second device, in order to provide various service processing for the traffic to traverse the different domains.
  • the SFF of the last hop of the second domain replaces the second SFPID with the first SFPID to obtain the first packet, and the SFF sends the first packet to the other domain except the second domain by using the gateway device of the second domain.
  • the foregoing step S204 involves the second device assigning a second service function path identifier SFPID corresponding to the service chain SFC in the second domain to obtain a second packet, which needs to be described in multiple manners.
  • a second message is obtained, which is exemplified below.
  • the second device sends the second packet to another device in the second domain other than the second device, in order to provide various service processing for the traffic to traverse the different domains.
  • the SFF of the last hop of the second domain obtains the first SFPID from the metadata, and the second SFPID is mapped to the first SFPID, and the first packet that encapsulates the second SFPID is restored to the first packet, and the SFF is the first packet.
  • the gateway device via the second domain sends to other domains than the second domain.
  • the second domain does not provide the service function processing of the first packet.
  • the gateway device in the second domain sends a notification message for deleting the SF provided by the second domain to the first domain. So that the traffic of the first domain is no longer sent to the second domain.
  • the second domain includes: a primary domain and a secondary domain. Enable the alternate domain after the primary domain fails.
  • the second device is a classifier in the second domain.
  • a packet forwarding processing device is further provided, and the device is configured to implement the foregoing embodiments and preferred embodiments, and details are not described herein.
  • the term "module” may implement a combination of software and/or hardware of a predetermined function.
  • the apparatus described in the following embodiments is preferably implemented in software, hardware, or a combination of software and hardware, is also possible and contemplated.
  • FIG. 3 is a structural block diagram of a packet forwarding processing apparatus according to an embodiment of the present invention.
  • the apparatus is applied to a second device in a second domain.
  • the apparatus includes: a receiving module 32, configured to be located from The first device in the first domain receives the first packet, and the allocation module 34 is configured to allocate, for the first packet, a second service function path identifier SFPID corresponding to the service function chain SFC in the second domain, to obtain a second
  • the message sending module 36 is configured to send the second message to other devices in the second domain than the second device.
  • the first packet carries a first SFPID that is allocated by the first domain to the first packet.
  • the receiving module 32 is further configured to send the address of the gateway device of the second domain to the first domain, and receive the first packet by the gateway device of the second domain.
  • the allocation module 34 further includes: a first classification unit 342, configured to classify the first packet,
  • the first generation unit 344 is configured to generate a second SFPID according to the classification result.
  • the encapsulating unit 346 is configured to encapsulate the second SFPID outside the first packet to obtain a second packet.
  • the allocation module 34 further includes: a second classification unit 348, configured to classify the first packet, Obtaining a classification result; the second generation unit 350 is configured to generate a second SFPID according to the classification result; the replacing unit 352 is configured to replace the first SFPID in the header of the first packet with the second SFPID, and the first SFPID Saved in the metadata to get the second message.
  • a second classification unit 348 configured to classify the first packet, Obtaining a classification result
  • the second generation unit 350 is configured to generate a second SFPID according to the classification result
  • the replacing unit 352 is configured to replace the first SFPID in the header of the first packet with the second SFPID, and the first SFPID Saved in the metadata to get the second message.
  • FIG. 6 is a structural block diagram (3) of a packet forwarding processing apparatus according to an embodiment of the present invention.
  • the allocation module 34 further includes: an obtaining unit 354, configured to acquire a correspondence between the first SFPID and the second SFPID. The relationship is that the second SFPID corresponding to the first SFPID is allocated to the first packet, and the second packet is obtained.
  • the second device is a classifier in the second domain.
  • a packet forwarding processing system including: a first domain, a second device located in the second domain: a second device, configured to receive the first sent by the first device Transmitting a second service function path identifier SFPID corresponding to the service function SFC in the second domain, obtaining a second packet, and sending the second packet to the second domain Other devices than the two devices.
  • the system further includes: a gateway device located in the second domain and an SFF of the last hop, and a third device located in a domain other than the second domain: the SFF of the last hop is set to be The second packet is restored to the first packet, and the first packet is sent to the gateway device.
  • the gateway device is configured to receive the first packet from the first domain and send the first packet to the second device. Sending the first message of the SFF recovered by the last hop to the third device.
  • each of the above modules may be implemented by software or hardware.
  • the foregoing may be implemented by, but not limited to, the foregoing modules are all located in the same processor; or, the above modules are respectively located.
  • the first processor, the second processor, and the third processor In the first processor, the second processor, and the third processor.
  • a hierarchical SFC is provided, so that various service processing can be effectively provided for traffic passing through different networks.
  • the present invention adopts the following technical solutions.
  • the various service functions provided by the leased network present an inter-domain service function for the wide area network, and are identified by an SFID in the SFC domain of the wide area network.
  • the WAN controller/manager applies for the SF service to the Data Centre (DC) controller, and the DC controller/manager feeds back an SFID to the WAN controller/manager.
  • the WAN controller/manager feeds back to the SFPID where the SFID of this DC is located.
  • the DC controller/manager establishes an SFC path inside the DC network for the characteristics of the SFID.
  • the SFC path inside the strip and the SFPID of the wide area network are mapped on the DC classification device.
  • the classifier on the WAN assigns a traffic function chain path identifier SFPID1 to the traffic according to the characteristics of the traffic (for example, a 5-tuple of traffic), and adds the SFPID1 to the header of the packet, on the WAN.
  • the service function entity processes and forwards the message according to the SFPID1.
  • the message When the message is to be processed by the service function in the DC network, the message is first sent to the gateway of the leased network, and the gateway continues to send it to the classifier of the DC network to further classify the message.
  • the classifier here can be separated from the gateway or it can be physically integrated.
  • the classifier needs to perform the classification in the DC network together with the SFPID1 of the WAN that the packet already carries, and generate the service function chain path identifier SFPID2 in the DC network according to the classification result, and join the SFPID2 again.
  • the SFPID1 before the message is encapsulated in the SFPID2 header.
  • the service function entity in the DC network processes and forwards the packet according to the SFPID2, and does not sense and process the SFPID1.
  • the forwarding device SFF connected to the service function of the last processed packet will be stripped of the SPFID2 and then forwarded to the gateway of the network, and then sent by the gateway to the WAN or the next DC network.
  • the inter-domain service function is used by the service function to perform subsequent processing on the packet.
  • the classifier of the DC network may perform mapping translation on the SFC header identifier SFPID of the original message, translate the external SFPID into an internal SFPID, and internally forward the internal SFPID.
  • the last SFPID mapping is translated by the last SF device into an external SFPID.
  • Embodiment 1 Networking As shown in FIG. 1, the source device S sends traffic to the destination device D, and the traffic needs to pass through the service function entities SF1, SF2, SF3, and SF4.
  • FIG. 7 is a schematic diagram of traffic transmission according to Embodiment 1 of the present invention.
  • each service function herein may be an inter-domain SF.
  • the inter-domain SF here is an SFC in the DC network, and for the wide area network, it can be abstracted as an inter-domain SF.
  • the DC network provides only the abstracted SF to the upper WAN.
  • the upper layer does not care about the path of the SFC inside the DC network.
  • the upper layer network When the upper layer network needs certain service functions, it can lease certain service functions, such as DPI, calculation, etc., to the DC network. At this time, the DC provides only one DPI plus calculated SF2 to the WAN control plane. For the WAN. This SF2, like other SF1s, also has an SFID2 identifier corresponding to the inter-domain service function of SF2.
  • the DC network For the control plane of the WAN, the DC network needs to provide this SFID2, and the gateway address as the next hop of the WAN SFC.
  • the control plane of the WAN needs to inform the DC network which SFCs will lease the service functions within the DC, ie the SFPID1 of the WAN.
  • the DC network needs to determine the correspondence between SPFID1 and SFC (SPFID2) in the network. It is necessary to reselect an SFC (corresponding to SFPID2) inside the DC according to the information of the SPFID1 entering the DC network and the 5-member ancestor of the message.
  • FIG. 8 is a schematic diagram of a nested format of an SFC header according to the first embodiment of the present invention.
  • the packet sent by the source device S is classified in the classifier of the WAN, and encapsulates the packet according to the classification result.
  • each SFF is forwarded according to SFPID1.
  • the gateway sends the packet to the classifier of the DC network according to the policy, and the classifier of the DC network classifies the packet into the network.
  • the classifier receives the packet with the SFC header and classifies the packet according to the SPFID1 of the SFC header and/or other header information of the packet, and obtains the sub-SFC path identifier SPFID2 in the DC network. And add the DC network's own SFC header based on the original SFC header, as shown in Figure 7.
  • the packets are forwarded according to SPFID2 in the DC network and sent to different service function entities SF for processing.
  • the outer layer DC network SFPID2 After processing in the DC network, on the last SFF of the sub-SFC of the DC network, the outer layer DC network SFPID2 will be stripped, leaving the SFC header of the original WAN and sent to the gateway of the DC network. Again, according to the transmission of the message sent from the DC to the next SF processing of the WAN, SF3 performs the next processing.
  • Each SF in this embodiment may be a DC inter-domain SF, or it may be an independent SF.
  • Embodiment 2 The network scenario is still as shown in FIG. 1 , and is different from the first embodiment in that the Classifier in the DC replaces the SPFID1 of the original SFC header with SFPID2, and saves the SFPID2 in an Outer TLV of the current SFC header. At the same time, a flag O2 is set in the SFC header.
  • Embodiment 3 The network scenario is still as shown in FIG. 1.
  • the traffic of the source device S is processed by the SFC and reaches the destination device D.
  • This SFC needs to traverse a DC network and lease some of the business functions of the DC network.
  • the classifier of the DC network needs to obtain the mapping relationship between the external SFC and the internal SFC through the control plane, that is, the correspondence between SPFID1 and SPFID2.
  • the packet arrives at the classifier of the WAN.
  • the classifier classifies the packet, encapsulates the header of the SPFID1 in the packet, and forwards it to the SF1 according to the SPFID1.
  • the next hop is detected as a DC network gateway (Gateway, GW for short).
  • the DC gateway After receiving the packet from the outside of the network, the DC gateway forwards the packet to the Classifier of the DC network.
  • the classifier reclassifies the packet based on the SPFID1 and the packet header information of the packet, and maps the SPFID1 of the SFC header to the SPFID2 according to the previously obtained mapping information.
  • the packet After entering the DC network, the packet carries the SFC of the SPFID2.
  • the header is forwarded inside the DC. On the forwarding device connected to the last service function of the SFC path, SPFID2 to SPFID1 are mapped again, and the SFC header of the packet is restored to SFPID1 for subsequent forwarding.
  • Embodiment 4 As shown in FIG. 2, for the inter-domain SF2 provided by the DC network, if the traffic no longer requires inter-domain SF2 processing, the gateway of the DC network sends a message to the WAN controller/manager, the DC network. The inter-domain SF2 provided will be offloaded from the SFC chain of the wide area network. At the same time, the controller establishes a connection between SF1 and SF3.
  • FIG. 10 is a schematic diagram of traffic transmission according to Embodiment 5 of the present invention.
  • inter-domain SF2 and inter-domain SF2' are backups of each other.
  • SF2 and SF2' are simultaneously registered in the wide area network to provide business services.
  • this SFC first selected SF2 as one of the business function entities.
  • SF2' acts as a backup business function entity.
  • control The controller will advertise to the forwarder SFF of SF1 to change the next hop to the gateway address of SF2'.
  • the SF2' When the traffic enters the inter-domain SF2' from the SF1, the SF2' encapsulates a SFPID2' in the DC2 network according to the SFPID of the SFC header of the traffic.
  • the service function of the SFPID2' and the inter-domain SF2' is corresponding.
  • the SFC header format of the traffic in the DC2 network at this time is as shown in FIG. SFPID2 and SFPID' are independent of each other. They can be the same or different, but they are all mapped from SFPID1, and the service function is the forwarding identifier in the DC network.
  • Embodiment 6 This embodiment mainly describes the interaction between the data center gateway and the wide area network and the mapping of information.
  • the data center controller or management system will need to interact with the WAN controller or management system, and the inter-domain will be leased.
  • the SF is provided as an SFID to the controller or management system of the WAN, and the controller or management system provided to the WAN also includes the address of the data center gateway connected to the WAN as the next hop address of the WAN SFC.
  • the controller or management system of the WAN configures the inter-domain SF information (SFID, next hop address) provided by the data center to the SFC chain of the wide area network.
  • the controller or management system of the WAN provides the SFPID of all SFCs passing through the inter-domain SF to the controller or management system of the data center network.
  • the controller or management system of the data center network configures an SFC chain within the network for the inter-domain SF to correspond to the inter-domain SF.
  • the controller configures the data center gateway. For the received packets, according to the configured policy, the packets that need to be processed are first sent to the classifier Classifier for classification.
  • the controller configures the classifier to map the SFPID inside the data center network according to the SFPID in the SFC header of the packet for the packet carrying the SFC header, and then encapsulates an outer layer of the packet.
  • the SFC header, the outer SFC header carries the SFPID within the data center network. Or, replace the SFPID of the original message's SFC header with the SFPID inside the data center network.
  • the controller configures the SFF of the path through which the SFC passes, and the network device establishes such an SFC channel.
  • the controller can also configure the classifier.
  • the header of the packet needs to be further classified to obtain the data center. Internal SFPID.
  • the controller also needs to specifically configure the SFF of the last hop, and provide mapping information, and replace the SFPID inside the data center network originally carried in the packet.
  • the SFPID for the WAN The message is then sent to the gateway to send out the data center network.
  • the present invention introduces a hierarchical SFC solution, which can implement a service function chain to traverse across multiple networks, while ensuring the privacy of the internal service chain of the data center network, and renting other services on the WAN.
  • Functional scenes have very important practical implications.
  • a storage medium is further provided, where the software is stored in the storage medium, and the storage Media includes, but is not limited to, optical disks, floppy disks, hard disks, rewritable memories, and the like.
  • modules or steps of the present invention described above can be implemented by a general-purpose computing device that can be centralized on a single computing device or distributed across a network of multiple computing devices. Alternatively, they may be implemented by program code executable by the computing device such that they may be stored in the storage device by the computing device and, in some cases, may be different from the order herein.
  • the steps shown or described are performed, or they are separately fabricated into individual integrated circuit modules, or a plurality of modules or steps thereof are fabricated as a single integrated circuit module.
  • the invention is not limited to any specific combination of hardware and software.
  • a packet forwarding processing method, apparatus, and system provided by an embodiment of the present invention have the following beneficial effects: a service function chain is traversed in multiple networks, and an internal service chain of the data center network is ensured. The privacy.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Power Engineering (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

本发明提供了一种报文的转发处理方法、装置及系统，其中，该方法包括：第二域中的第二设备从位于第一域接收第一报文；第二设备为第一报文分配用于与第二域内业务功能链SFC对应的第二业务功能路径标识SFPID，得到第二报文；第二设备将第二报文发送至第二域中除该第二设备之外的其它设备。通过本发明解决了相关技术中无法实现对跨域端到端流量的SFC支持的问题，进而实现了一条业务功能链在多个域中穿越，同时保证了数据中心域的内部业务链的私密性。

Description

报文的转发处理方法、装置及系统 技术领域
本发明涉及通信领域，具体而言，涉及一种报文的转发处理方法、装置及系统。
背景技术
在相关技术中，数据在进入网络时要接入大量的增值业务设备，如防病毒设备、加速设备、防火墙设备以及网络地址转换(Network Address Translation，简称为NAT)设备等。流量没有差异化的区分必须一次通过这些业务设备，给这些设备造成了不必要的负担，限制了服务资源的优化，配置复杂，很难实现服务配置的快速变化。
针对上述问题，目前提出了一种业务链(Service Function Chain，简称为SFC)的方式，即把所有的服务业务整合，虚拟出Service overlay层，形成自己的服务拓扑，和底层网络解耦合，不再受到底层网络结构的限制，架构如图1所示。流量所要经过的业务由SFC决定。SFC通过增加对每条SFC的标识(Service Function Path Identifier，简称为SFPID)，并对报文进行分级，给不同级别的流量分配不同的SFC(由入口分级设备来做)。转发设备则依据SFC的标识来对报文进行转发。从而实现针对不同的流量，可以实施不同的业务链处理，实现差异化需求。
目前业务功能链的处理如图1所示，业务功能(Service Function，简称为SF)，SFF是业务功能转发器，依据报文中携带的SFPID选择不同的SF或者SFF对报文进行转发，即从分类器或SFF收到的报文，SFF会依据报文的SFPID转发到属于这条业务链路径的SF；从SF收到的报文，SFF会依据报文的SFPID选择出下一跳，然后根据下一跳的地址将报文送到下一个SFF上。
对于广域网来说，其中的一些业务功能可能会租用其他网络的业务功能来进行复杂的处理，例如租用数据中心网络中的一些业务功能，对流量做一些特殊的处理。因此，此时流量需要进入到这个数据中心网络中。但是数据中心网络中的具体的业务功能和连接关系对于租户来说是被屏蔽的，数据中心网络内的设备对于广域网的SFC标识也无法识别。在这种场景下，相关技术无法实现对端到端流量的SFC支持。
针对相关技术中，无法实现对跨网络端到端流量的SFC支持的问题，还未提出有效的解决方案。
发明内容
本发明实施例提供了一种报文的转发处理方法、装置及系统，以至少解决相关技术中无法实现对端到端流量的SFC支持的问题。
根据本发明实施例的一个方面，提供了一种报文的转发处理方法，包括：第二域中的第二设备从第一域接收第一报文；所述第二设备为所述第一报文分配用于与所述第二域内业务功能链SFC对应的第二业务功能路径标识SFPID，得到第二报文；所述第二设备将所述第二报文发送至所述第二域中除所述第二设备之外的其它设备。
进一步地，所述第一报文携带有所述第一域为所述第一报文分配的第一SFPID。
进一步地，第二域中的第二设备从第一域接收第一报文包括：所述第二设备通过所述第二域的网关设备接收所述第一报文。
进一步地，所述第一报文是由所述第一域依据所述第二域的网关设备的地址发送给所述第二域，其中，所述第二域的网关设备的地址是由所述第一域通过协调管理实体获取到的，所述第二域的网关设备的地址作为与所述SFC对应的所述第一域的业务功能实体SF的地址。进一步地，所述第二设备为所述第一报文分配用于与所述第二域内业务功能链SFC对应的第二业务功能路径标识SFPID，得到第二报文包括：所述第二设备对所述第一报文进行分类，根据分类结果生成所述第二SFPID；所述第二设备在所述第一报文外封装所述第二SFPID，得到所述第二报文。
进一步地，所述第二设备对所述第一报文进行分类包括：所述第二域的分类器根据所述第一报文的头部信息和/或所述第一SFPID对所述第一报文进行分类。
进一步地，所述第二域的分类器根据所述第一报文的头部信息和/或第一SFPID对所述第一报文进行分类包括：第一域和第二域由协调管理实体协调，所述第二域的分类器获取所述第一SFPID和所述第二SFPID的对应关系。
进一步地，所述第二设备将所述第二报文发送至所述第二域中除所述第二设备之外的其它设备之后包括：所述第二域的最后一跳的业务功能转发器SFF将所述第二报文所述第二SFPID封装剥离，得到所述第一报文；所述SFF将所述第一报文经由所述第二域的网关设备发送给除所述第二域之外的其它域。
进一步地，所述第二设备为所述第一报文分配用于与所述第二域内业务功能链SFC对应的第二业务功能路径标识SFPID，得到第二报文包括：所述第二设备对所述第一报文进行分类，得到分类结果；所述第二设备根据所述分类结果生成所述第二SFPID；所述第二设备将所述第一报文的头部中所述第一SFPID替代为所述第二SFPID，得到所述第二报文。
进一步地，所述第二设备对所述第一报文进行分类包括：所述第二域的分类器根据所述第一报文的头部信息和/或所述第一SFPID对所述第一报文进行分类。
进一步地，所述第二设备将所述第二报文发送至所述第二域中除所述第二设备之外的其它设备之后包括：所述第二域的最后一跳的SFF将所述第二SFPID重新取代为所述第一SFPID，得到所述第一报文；所述SFF将所述第一报文经由所述第二域的网关设备发送给除所述第二域之外的其它域。
进一步地，所述第二设备为所述第一报文分配用于与所述第二域内业务功能链SFC对应的第二业务功能路径标识SFPID，得到第二报文包括：依据所述第一SFPID和所述第二SFPID的对应关系，为所述第一报文分配与所述第一SFPID对应的所述第二SFPID，并将第一SFPID保存在元数据中，得到所述第二报文。
进一步地，所述第二设备将所述第二报文发送至所述第二域中除所述第二设备之外的其它设备之后包括：所述第二域的最后一跳的SFF从元数据中获取第一SFPID，将所述第二SFPID映射为所述第一SFPID，将封装所述第二SFPID的所述第一报文恢复为所述第一报文。
进一步地，所述SFF将所述第一报文经由所述第二域的网关设备发送给除所述第二域之外的其它域之后包括：所述第二域不再提供所述第一报文的业务功能处理时，所述第二域内的网关设备向所述第一域发送用于删除所述第二域提供的业务功能SF的通知消息。
进一步地，所述第二域包括：主用域和备用域。
进一步地，所述第二设备为所述第二域中的分类器。
根据本发明实施例的另一个方面，还提供了一种报文的转发处理装置，所述装置应用于第二域中的第二设备，所述装置包括：接收模块，设置为从第一域接收第一报文；分配模块，设置为为所述第一报文分配用于与所述第二域内业务功能链SFC对应的第二业务功能路径标识SFPID，得到第二报文；发送模块，设置为将所述第二报文发送至所述第二域中除所述第二设备之外的其它设备。
进一步地，所述第一报文携带有所述第一域为所述第一报文分配的第一SFPID。
进一步地，所述接收模块还设置为将所述第二域的网关设备的地址发送至所述第一域，通过所述第二域的网关设备接收所述第一报文。
进一步地，所述分配模块还包括：第一分类单元，设置为对所述第一报文进行分类，得到分类结果；第一生成单元，设置为根据所述分类结果生成所述第二SFPID；封装单元，设置为在所述第一报文外封装所述第二SFPID部，得到所述第二报文。
进一步地，所述分配模块还包括：第二分类单元，设置为对所述第一报文进行分类，得到分类结果；第二生成单元，设置为根据所述分类结果生成所述第二SFPID；替代单元，设置为将所述第一报文的头部中所述第一SFPID替代为所述第二SFPID，并将第一SFPID保存在元数据中，得到所述第二报文。
进一步地，所述分配模块还包括：获取单元，设置为获取所述第一SFPID和所述第二SFPID的对应关系，为所述第一报文分配与所述第一SFPID对应的所述第二SFPID，得到所述第二报文。
进一步地，所述第二设备为所述第二域中的分类器。
根据本发明实施例的另一个方面，还提供了一种报文的转发处理系统，包括：位于第一域的第一设备、位于第二域的第二设备：所述第二设备，设置为接收所述第一设备发送的第 一报文；为所述第一报文分配用于与所述第二域内业务功能链SFC对应的第二业务功能路径标识SFPID，得到第二报文，以及将所述第二报文发送至所述第二域中除所述第二设备之外的其它设备。
进一步地，所述系统还包括：位于第二域的网关设备和最后一跳的SFF，位于除所述第二域之外的其它域中的第三设备：所述最后一跳的SFF设置为将所述第二报文恢复为所述第一报文，并将所述第一报文发送至所述网关设备；所述网关设备，设置为从所述第一域接收所述第一报文并将所述第一报文发送至所述第二设备，将所述最后一跳的SFF恢复的所述第一报文发送给所述第三设备。
通过本发明，采用第二域中的第二设备从第一域接收第一报文；第二设备为第一报文分配用于与第二域内业务功能链SFC对应的第二业务功能路径标识SFPID，得到第二报文；第二设备将第二报文发送至第二域中除该第二设备之外的其它设备。解决了相关技术中无法实现对端到端流量的SFC支持的问题，进而实现了一条业务功能链在多个域中穿越，同时保证了数据中心域的内部业务链的私密性。
附图说明
此处所说明的附图用来提供对本发明的进一步理解，构成本申请的一部分，本发明的示意性实施例及其说明用于解释本发明，并不构成对本发明的不当限定。在附图中：
图1是SFC的现有转发方式示意图；
图2是根据本发明实施例的报文的转发处理方法的流程图；
图3是根据本发明实施例的报文的转发处理装置的结构框图；
图4是根据本发明实施例的报文的转发处理装置的结构框图(一)；
图5是根据本发明实施例的报文的转发处理装置的结构框图(二)；
图6是根据本发明实施例的报文的转发处理装置的结构框图(三)；
图7是根据本发明实施例一的流量发送示意图；
图8是根据本发明实施例一的SFC头部嵌套格式示意图；
图9是根据本发明实施例二的SFC头部格式示意图；
图10是根据本发明实施例五的流量发送示意图；
图11是根据本发明实施例五的SFC头部示意图。
具体实施方式
下文中将参考附图并结合实施例来详细说明本发明。需要说明的是，在不冲突的情况下， 本申请中的实施例及实施例中的特征可以相互组合。
在本实施例中提供了一种报文的转发处理方法，图2是根据本发明实施例的报文的转发处理方法的流程图，如图2所示，该流程包括如下步骤：
步骤S202，第二域中的第二设备从第一域接收第一报文；
步骤S204，第二设备为第一报文分配用于与第二域内业务功能链SFC对应的第二业务功能路径标识SFPID，得到第二报文；
步骤S206，第二设备将第二报文发送至第二域中除第二设备之外的其它设备。
通过上述步骤，可以有效的对穿越不同域的报文提供各种业务处理，相比于相关技术中，需要使用的数据中心域中的具体的业务功能和连接关系对租户屏蔽，上述步骤解决了相关技术中无法实现对跨域端到端流量的SFC支持的问题，进而实现了一条业务功能链在多个域中穿越，同时保证了数据中心域的内部业务链的私密性。
在一个可选实施例中，上述第一报文携带有第一域为第一报文分配的第一SFPID。以便于对第一报文的传输。
上述步骤S202中涉及到第二设备接收第一报文，在一个可选实施例中，第二设备通过该第二域的网关设备接收第一报文。
在一个可选实施例中，第一报文是由第一域依据第二域的网关设备的地址发送给第二域，其中，第二域的网关设备的地址是由第一域通过协调管理实体获取到的，第二域的网关设备的地址作为与SFC对应的第一域的业务功能实体SF的地址。
上述步骤S204涉及到第二设备为第一报文分配用于与第二域内业务功能链SFC对应的第二业务功能路径标识SFPID，得到第二报文，需要说明的是，可以通过多种方式得到第二报文，下面对此进行举例说明。在一个可选实施例中，第二设备对第一报文进行分类，得到分类结果，第二设备根据上述分类结果生成第二SFPID，第二设备在第一报文的头部外封装所述第二SFPID，得到第二报文。
在第二设备对第一报文进行分类的过程中，在一个可选实施例中，第二域的分类器根据第一报文的头部信息和/或第一SFPID对第一报文进行分类。其中，第一报文的头部信息包括：第一SFPID和/或第一报文的头部信息中除第一SFPID之外的其它信息。在一个可选实施例中，第一域和第二域由协调管理实体协调，第二域的分类器获取该第一SFPID和该第二SFPID的对应关系，从而完成了第二域的分类器根据第一报文的头部信息和/或第一SFPID对该第一报文进行分类。
由于要对穿越不同域给流量提供各种业务处理，因此，在一个可选实施例中，第二设备将第二报文发送至第二域中除第二设备之外的其它设备之后，第二域的最后一跳的业务功能转发器SFF将第二报文的第二SFPID封装剥离，得到第一报文，SFF将第一报文经由第二域的网关设备发送给除第二域之外的其它域。其中，第二域的最后一跳的业务功能转发器SFF 为第二域中最后一个接收到第二报文的SFF。
上述步骤S204涉及到第二设备为第一报文分配用于与第二域内业务功能链SFC对应的第二业务功能路径标识SFPID，得到第二报文，需要说明的是，可以通过多种方式得到第二报文，下面对此进行举例说明。第二设备对第一报文进行分类，得到分类结果，第二设备根据该分类结果生成第二SFPID，第二设备将第一报文的头部中第一SFPID替代为第二SFPID，得到第二报文。
由于要对穿越不同域给流量提供各种业务处理，因此，在一个可选实施例中，第二设备将第二报文发送至第二域中除第二设备之外的其它设备之后，第二域的最后一跳的SFF将第二SFPID重新取代为该第一SFPID，得到第一报文，SFF将第一报文经由第二域的网关设备发送给除第二域之外的其它域。
上述步骤S204涉及到第二设备为第一报文分配用于与第二域内业务功能链SFC对应的第二业务功能路径标识SFPID，得到第二报文，需要说明的是，可以通过多种方式得到第二报文，下面对此进行举例说明。依据第一SFPID和该第二SFPID的对应关系，为第一报文分配与第一SFPID对应的第二SFPID，并将第一SFPID保存在元数据中，得到第二报文。
由于要对穿越不同域给流量提供各种业务处理，因此，在一个可选实施例中，第二设备将第二报文发送至第二域中除第二设备之外的其它设备之后，第二域的最后一跳的SFF从元数据中获取第一SFPID，将第二SFPID映射为第一SFPID，将封装第二SFPID的第一报文恢复为第一报文，SFF将第一报文经由该第二域的网关设备发送给除该第二域之外的其它域。
在一个可选实施例中，SFF将第一报文经由第二域的网关设备发送给除第二域之外的其它域之后，第二域不再提供第一报文的业务功能处理时，第二域内的网关设备向该第一域发送用于删除第二域提供的SF的通知消息。以便于第一域的流量不再发送给第二域。
在一个可选实施例中，第二域包括：主用域和备用域。在主用域出现故障后启用备用域。
在一个可选实施例中，第二设备为第二域中的分类器。
在本实施例中还提供了一种报文的转发处理装置，该装置设置为实现上述实施例及优选实施方式，已经进行过说明的不再赘述。如以下所使用的，术语“模块”可以实现预定功能的软件和/或硬件的组合。尽管以下实施例所描述的装置较佳地以软件来实现，但是硬件，或者软件和硬件的组合的实现也是可能并被构想的。
图3是根据本发明实施例的报文的转发处理装置的结构框图，该装置应用于第二域中的第二设备，如图3所示，该装置包括：接收模块32，设置为从位于第一域中的第一设备接收第一报文；分配模块34，设置为为第一报文分配用于与该第二域内业务功能链SFC对应的第二业务功能路径标识SFPID，得到第二报文；发送模块36，设置为将第二报文发送至第二域中除第二设备之外的其它设备。
可选地，第一报文携带有第一域为第一报文分配的第一SFPID。
可选地，接收模块32还设置为将第二域的网关设备的地址发送至第一域，通过第二域的网关设备接收第一报文。
图4是根据本发明实施例的报文的转发处理装置的结构框图(一)，如图4所示，分配模块34还包括：第一分类单元342，设置为对第一报文进行分类，得到分类结果；第一生成单元344，设置为根据分类结果生成第二SFPID；封装单元346，设置为在第一报文的外封装第二SFPID，得到第二报文。
图5是根据本发明实施例的报文的转发处理装置的结构框图(二)，如图5所示，分配模块34还包括：第二分类单元348，设置为对第一报文进行分类，得到分类结果；第二生成单元350，设置为根据分类结果生成第二SFPID；替代单元352，设置为将第一报文的头部中第一SFPID替代为该第二SFPID，并将第一SFPID保存在元数据中，得到第二报文。
图6是根据本发明实施例的报文的转发处理装置的结构框图(三)，如图6所示，分配模块34还包括：获取单元354，设置为获取第一SFPID和第二SFPID的对应关系，为第一报文分配与第一SFPID对应的第二SFPID，得到第二报文。
可选地，上述第二设备为第二域中的分类器。
在另一个可选实施例中，还提供了一种报文的转发处理系统，包括：第一域、位于第二域的第二设备：第二设备，设置为接收第一设备发送的第一报文；为第一报文分配用于与第二域内业务功能链SFC对应的第二业务功能路径标识SFPID，得到第二报文，以及将第二报文发送至该第二域中除第二设备之外的其它设备。
可选地，上述系统还包括：位于第二域的网关设备和最后一跳的SFF，位于除该第二域之外的其它域中的第三设备：该最后一跳的SFF设置为将该第二报文恢复为该第一报文，并将该第一报文发送至该网关设备；网关设备，设置为从第一域接收第一报文并将第一报文发送至第二设备，将最后一跳的SFF恢复的第一报文发送给该第三设备。
需要说明的是，上述各个模块是可以通过软件或硬件来实现的，对于后者，可以通过以下方式实现，但不限于此：上述各个模块均位于同一处理器中；或者，上述各个模块分别位于第一处理器、第二处理器和第三处理器…中。
针对相关技术中存在的上述问题，下面结合具体的可选实施例进行说明，在下述可选实施例中结合了上述可选实施例及其可选实施方式。
本可选实施例中提供了一种层次化的SFC，从而能够有效的对穿越不同网络给流量提供各种业务处理。本发明采用以下技术方案，所租用的网络提供的各种业务功能对于广域网来说，呈现出一个域间业务功能，在广域网的SFC域中用一个SFID来标识。
广域网控制器/管理器向数据中心(Data Centre，简称为DC)控制器申请SF服务，DC控制器/管理器反馈一个SFID给广域网控制器/管理器。广域网控制器/管理器反馈给这个DC的SFID所在的SFPID。DC控制器/管理器针对SFID的特性在本DC网络内部建立SFC路径， 并将该条内部的SFC路径和广域网的SFPID在DC分类设备上做出映射。
当流量进入广域网时，广域网上的分类器会根据流量的特征(例如流量的5元组)给该流量分配一个业务功能链路径标识SFPID1，将该SFPID1加入到报文的头部，广域网上的业务功能实体会根据这个SFPID1对报文进行处理和转发。
当报文要利用DC网络中的业务功能进行处理时，报文首先会送到租用网络的网关处，网关则会继续送到本DC网络的分类器中对该报文进一步做出分类。这里的分类器可以和网关分离，也可以是物理一体的。分类器在对报文进行分类时需要结合报文已经携带的广域网的SFPID1一起进行DC网络内的分类，同时依据分类结果生成本DC网络内的业务功能链路径标识SFPID2，并将该SFPID2再次加入到报文的头部，报文之前的SFPID1被封装在SFPID2头部里面。
对于DC网络内的业务功能实体会根据这个SFPID2对报文进行处理和转发，对SFPID1并不感知和处理。
当报文要离开这个租用网络时，最后处理报文的业务功能所连接的转发设备SFF会将这个SPFID2的封装剥离后再转发给本网络的网关，由网关再送到广域网或下一个DC网络的域间业务功能，由该业务功能对报文做后续的处理。
另外，也可以在进入DC网络时，DC网络的分类器(Classifier)对原报文的SFC头部标识SFPID进行映射翻译，将外部的SFPID翻译为内部的SFPID，内部通过内部SFPID进行转发。当报文要离开本DC时，再由最后一个SF设备将内部SFPID映射翻译为外部SFPID。
实施例一：组网如图1所示，源设备S发送流量到目的设备D，该流量需要经过业务功能实体SF1、SF2、SF3、SF4。图7是根据本发明实施例一的流量发送示意图，如图7所示，这里的每个业务功能都可以是一个域间SF。这里的域间SF是DC网络中的一个SFC，对于广域网来说，可以抽象为一个域间SF。DC网络提供给上层广域网的只有抽象出来的SF，上层网络并不关心DC网络内部的SFC是怎样的路径。
当上层网络需要某些特定的业务功能时，可以到DC网络中租用某些业务功能，如DPI、计算等，此时DC提供给广域网控制面的只是一个DPI加计算的SF2，对于广域网来说，这个SF2和其他SF1一样，也有一个SFID2标识对应SF2这个域间业务功能。
对于广域网的控制平面来说，DC网络需要提供的就是这个SFID2，以及网关地址作为广域网SFC的下一跳。广域网的控制面需要告知DC网络哪些SFC将会租用到DC内的业务功能，即广域网的SFPID1。DC网络内部需要决定SPFID1和本网络内的SFC(SPFID2)的对应。需要依据进入DC网络的SPFID1以及报文的5元祖等信息重新选择DC内部的一条SFC(对应SFPID2)。
图8是根据本发明实施例一的SFC头部嵌套格式示意图，如图8所示，源设备S发出的报文在广域网的Classifier中进行分类处理，并依据分类结果给该报文封装一个SFC的头部SFPID1，在这条SFC路径上，各个SFF按照SFPID1进行转发。当报文转发到DC网的网关 时，网关依据策略将报文送到DC网的Classifier，由DC网的Classifier给报文进行网络内的分类。Classifier接收到带有SFC头部的报文，会依据该SFC头部的SPFID1和/或报文其他头部信息对报文分类，得到在本DC网络的sub-SFC路径标识SPFID2。并在原来SFC头部的基础上增加DC网络自己的SFC头部，如图7所示。在DC网络内部将依据SPFID2对报文进行转发，分别送到不同的业务功能实体SF进行处理。
当在DC网络内处理完毕后，在DC网络的sub-SFC的最后一个SFF上，会将外层的DC网络SFPID2剥离，留下原来广域网的SFC头部，送到DC网的网关，网关会再次依据从DC内部发来的报文的发送到广域网的下一个SF处理，即SF3进行下一步的处理。
本实施例中的每一个SF都有可能是一个DC的域间SF，也有可能是一个独立的SF。
实施例二：网络场景仍然如图1所示，和实施例一的不同在于，DC内部的Classifier将原SFC头部的SPFID1取代为SFPID2，同时将SFPID2保存在当前SFC头部的一个Outer TLV中，同时在SFC头部一个标识位O2置位。图9是根据本发明实施例二的SFC头部格式示意图，SFC头部格式如图9所示。在离开DC网络之前的最后一个SF上，该SF所连接的最后SFF(即Index＝0)需要根据O2标识，如果置位，则把Outer TLV中的SFPID1恢复到SFC头部的SFPID字段中再转发离开DC网络。
实施例三：网络场景仍然如图1所示，源设备S的流量要经过SFC的处理后到达目的设备D。这条SFC需要穿越一个DC网络，租用了DC网络的一些业务功能处理。
在DC网络的Classifier，需要通过控制面获取外部SFC和内部SFC的映射关系，即SPFID1和SPFID2的对应关系。
该报文到达广域网的Classifier，由Classifier对该报文进行分类，给报文封装一个SPFID1的头部，并按照SPFID1转发至SF1处理。在SF1处理完成后查出下一跳是DC网络网关(Gateway，简称为GW)。
DC网关收到网络外部进入的报文后会首先将该报文转发到DC网络自己的Classifier处。该Classifier会针对报文的SPFID1和报文头部信息对报文重新分类，并依据之前获取的映射信息将报文SFC头部的SPFID1映射为SPFID2，进入DC网络后，报文携带SPFID2的SFC头部在DC内部进行转发。在该SFC路径的最后一个业务功能连接的转发设备上会再次对SPFID2到SPFID1做一次映射，将报文的SFC头部恢复为SFPID1进行后续的转发。
实施例四：仍然如图2所示，对于DC网络提供的域间SF2，如果流量不再需要域间SF2处理，则DC网络的网关会发消息通告给广域网控制器/管理器，本DC网络提供的域间SF2将从该广域网的SFC链中offload。同时控制器建立SF1和SF3之间的连接。
实施例五：图10是根据本发明实施例五的流量发送示意图，如图10所示，域间SF2和域间SF2’互为备份。SF2和SF2’同时在广域网中注册提供业务服务。对于广域网来说，这条SFC首先选择了SF2作为其中一个业务功能实体。SF2’作为备份业务功能实体。当DC1网络所提供的SF2业务功能实体被收回或出现其他问题，不再能被广域网的该条SFC使用，则控 制器会通告给SF1的转发器SFF将下一跳改为SF2’的网关地址。当流量从SF1进入到域间SF2’时，SF2’会依据该流量的SFC头部的SFPID给该报文封装一个DC2网络内的一个SFPID2’，该SFPID2’和域间SF2’的业务功能是对应的。此时在DC2网络内流量的SFC头部格式如图11所示。SFPID2和SFPID’是相互独立的，他们可以相同，也可以不同，但都是从SFPID1映射过来的，在DC网络中做业务功能处理是的转发标识。
实施例六：本实施例主要说明数据中心网关和广域网之间的交互和信息的映射。如图1所示，当数据中心租给广域网一个域间SF(虚拟的，逻辑的)，数据中心的控制器或管理系统将需要和和广域网的控制器或管理系统交互，将要出租的域间SF作为一个SFID提供给广域网的控制器或管理系统，同时提供给广域网的控制器或管理系统还包括了与广域网连接的数据中心网关的地址作为广域网SFC的下一跳地址。
广域网的控制器或管理系统将数据中心提供的这域间SF信息(SFID、下一跳地址)配置到广域网的SFC链上。同时，广域网的控制器或管理系统会将经过这个域间SF的所有SFC的SFPID都提供给数据中心网的控制器或管理系统。
数据中心网的控制器或管理系统针对这个域间SF，在网络内部配置一个SFC链与该域间SF对应。主要包括了：
1.控制器配置数据中心网关，对于收到的报文，依据配置的策略，将需要进行业务处理的报文首先送入到分类器Classifier中进行分类。
2.控制器配置所述分类器，对于携带有SFC头部的报文，则依据该报文的SFC头部中的SFPID映射一个数据中心网络内部的SFPID，然后再给报文封装一个外层的SFC头部，该外层的SFC头部携带的是数据中心网络内的SFPID。或者，给原报文的SFC头部的SFPID替代为数据中心网络内部的SFPID。
3.控制器配置该条SFC所经过路径的SFF，网络设备，建立这样一条SFC的通道。
对于实施例一来说，在本实施例的第2步骤控制器也可以配置分类器，在对SFC头部的SFPID做映射外，还需要进一步做报文的头部进行分类后才得到数据中心内部的SFPID。
对于实施例二来说，在本实施例的第3步骤，控制器还需要特别对最后一跳的SFF做出配置，给出映射信息，将报文中原来携带的数据中心网络内部的SFPID替代为广域网的SFPID。之后再将报文发送给网关送出数据中心网。
综上所述，本发明引入了一种层次化的SFC解决方案，可以实现一条业务功能链在多个网络中穿越，同时保证了数据中心网络的内部业务链的私密性，在广域网租用其他业务功能的场景中有非常重要的现实意义。
在另外一个实施例中，还提供了一种软件，该软件用于执行上述实施例及优选实施方式中描述的技术方案。
在另外一个实施例中，还提供了一种存储介质，该存储介质中存储有上述软件，该存储 介质包括但不限于：光盘、软盘、硬盘、可擦写存储器等。
显然，本领域的技术人员应该明白，上述的本发明的各模块或各步骤可以用通用的计算装置来实现，它们可以集中在单个的计算装置上，或者分布在多个计算装置所组成的网络上，可选地，它们可以用计算装置可执行的程序代码来实现，从而，可以将它们存储在存储装置中由计算装置来执行，并且在某些情况下，可以以不同于此处的顺序执行所示出或描述的步骤，或者将它们分别制作成各个集成电路模块，或者将它们中的多个模块或步骤制作成单个集成电路模块来实现。这样，本发明不限制于任何特定的硬件和软件结合。
以上所述仅为本发明的优选实施例而已，并不用于限制本发明，对于本领域的技术人员来说，本发明可以有各种更改和变化。凡在本发明的精神和原则之内，所作的任何修改、等同替换、改进等，均应包含在本发明的保护范围之内。
工业实用性
如上所述，本发明实施例提供的一种报文的转发处理方法、装置及系统具有以下有益效果：实现了一条业务功能链在多个网络中穿越，同时保证了数据中心网络的内部业务链的私密性。

Claims (24)

  1. 一种报文的转发处理方法，包括：
    第二域中的第二设备从第一域中接收第一报文；
    所述第二设备为所述第一报文分配用于与所述第二域内业务功能链SFC对应的第二业务功能路径标识SFPID，得到第二报文；
    所述第二设备将所述第二报文发送至所述第二域中除所述第二设备之外的其它设备。
  2. 根据权利要求1所述的方法，其中，所述第一报文携带有所述第一域为所述第一报文分配的第一SFPID。
  3. 根据权利要求1所述的方法，其中，第二域中的第二设备从第一域中接收第一报文包括：
    所述第二设备通过所述第二域的网关设备接收所述第一报文。
  4. 根据权利要求3所述的方法，其中，所述第一报文是由所述第一域依据所述第二域的网关设备的地址发送给所述第二域，其中，所述第二域的网关设备的地址是由所述第一域通过协调管理实体获取到的，所述第二域的网关设备的地址作为与所述SFC对应的所述第一域的业务功能实体SF的地址。
  5. 根据权利要求2所述的方法，其中，所述第二设备为所述第一报文分配用于与所述第二域内业务功能链SFC对应的第二业务功能路径标识SFPID，得到第二报文包括：
    所述第二设备对所述第一报文进行分类，根据分类结果生成所述第二SFPID；
    所述第二设备在所述第一报文外封装所述第二SFPID，得到所述第二报文。
  6. 根据权利要求5所述的方法，其中，所述第二设备根据所述第一报文的头部信息和/或第一SFPID对所述第一报文进行分类包括：
    所述第一域和所述第二域由协调管理实体协调，所述第二域的分类器获取所述第一SFPID和所述第二SFPID的对应关系。
  7. 根据权利要求1所述的方法，其中，所述第二设备将所述第二报文发送至所述第二域中除所述第二设备之外的其它设备之后包括：
    所述第二域的最后一跳的业务功能转发器SFF将所述第二报文的所述第二SFPID封装剥离，得到所述第一报文；
    所述SFF将所述第一报文经由所述第二域的网关设备发送给除所述第二域之外的其它域。
  8. 根据权利要求2所述的方法，其中，所述第二设备为所述第一报文分配用于与所述第二域内业务功能链SFC对应的第二业务功能路径标识SFPID，得到第二报文包括：
    所述第二设备对所述第一报文进行分类，得到分类结果；
    所述第二设备根据所述分类结果生成所述第二SFPID；
    所述第二设备将所述第一报文的头部中所述第一SFPID替代为所述第二SFPID，并将第一SFPID保存在元数据中，得到所述第二报文。
  9. 根据权利要求5或者8中任一项所述的方法，其中，所述第二设备对所述第一报文进行分类包括：
    所述第二设备根据所述第一报文的头部信息和/或所述第一SFPID对所述第一报文进行分类。
  10. 根据权利要求8所述的方法，其中，所述第二设备将所述第二报文发送至所述第二域中除所述第二设备之外的其它设备之后包括：
    所述第二域的最后一跳的SFF从元数据中获取第一SFPID，将所述第二SFPID重新取代为所述第一SFPID，得到所述第一报文；
    所述SFF将所述第一报文经由所述第二域的网关设备发送给除所述第二域之外的其它域。
  11. 根据权利要求2所述的方法，其中，所述第二设备为所述第一报文分配用于与所述第二域内业务功能链SFC对应的第二业务功能路径标识SFPID，得到第二报文包括：
    依据所述第一SFPID和所述第二SFPID的对应关系，为所述第一报文分配与所述第一SFPID对应的所述第二SFPID，得到所述第二报文。
  12. 根据权利要求11所述的方法，其中，所述第二设备将所述第二报文发送至所述第二域中除所述第二设备之外的其它设备之后包括：
    所述第二域的最后一跳的SFF将所述第二SFPID映射为所述第一SFPID，将封装所述第二SFPID的所述第一报文恢复为所述第一报文。
  13. 根据权利要求7或者权利要求10或者权利要求12中任一项所述的方法，其中，所述SFF将所述第一报文经由所述第二域的网关设备发送给除所述第二域之外的其它域之后包括：
    所述第二域不再提供所述第一报文的业务功能处理时，所述第二域内的网关设备向所述第一域发送用于删除所述第二域提供的SF的通知消息。
  14. 根据权利要求1-13中任一项所述的方法，其中，所述第二域包括：主用域和备用域。
  15. 根据权利要求1-14中任一项所述的方法，其中，所述第二设备为所述第二域中的分类器。
  16. 一种报文的转发处理装置，所述装置应用于第二域中的第二设备，所述装置包括：
    接收模块，设置为从第一域中接收第一报文；
    分配模块，设置为为所述第一报文分配用于与所述第二域内业务功能链SFC对应的第二业务功能路径标识SFPID，得到第二报文；
    发送模块，设置为将所述第二报文发送至所述第二域中除所述第二设备之外的其它设备。
  17. 根据权利要求16所述的装置，其中，所述第一报文携带有所述第一域为所述第一报文分配的第一SFPID。
  18. 根据权利要求16所述的装置，其中，所述接收模块还设置为将所述第二域的网关设备的地址发送至所述第一域，通过所述第二域的网关设备接收所述第一报文。
  19. 根据权利要求17所述的装置，其中，所述分配模块还包括：
    第一分类单元，设置为对所述第一报文进行分类，得到分类结果；
    第一生成单元，设置为根据所述分类结果生成所述第二SFPID；
    封装单元，设置为在所述第一报文外封装所述第二SFPID，得到所述第二报文。
  20. 根据权利要求17所述的装置，其中，所述分配模块还包括：
    第二分类单元，设置为对所述第一报文进行分类，得到分类结果；
    第二生成单元，设置为根据所述分类结果生成所述第二SFPID；
    替代单元，设置为将所述第一报文的头部中所述第一SFPID替代为所述第二SFPID，并将第一SFPID保存在元数据中，得到所述第二报文。
  21. 根据权利要求17所述的装置，其中，所述分配模块还包括：
    获取单元，设置为获取所述第一SFPID和所述第二SFPID的对应关系，为所述第一报文分配与所述第一SFPID对应的所述第二SFPID，得到所述第二报文。
  22. 根据权利要求16-21中任一项所述的装置，其中，所述第二设备为所述第二域中的分类器。
  23. 一种报文的转发处理系统，包括：位于第一域、位于第二域的第二设备：
    所述第二设备，设置为接收所述第一域发送的第一报文；为所述第一报文分配用于与所述第二域内业务功能链SFC对应的第二业务功能路径标识SFPID，得到第二报文，以及将所述第二报文发送至所述第二域中除所述第二设备之外的其它设备。
  24. 根据权利要求23所述的系统，其中，所述系统还包括：位于第二域的网关设备和最后一跳的SFF，位于除所述第二域之外的其它域中的第三设备：
    所述最后一跳的SFF设置为将所述第二报文恢复为所述第一报文，并将所述第一报 文发送至所述网关设备；所述网关设备，设置为从所述第一域接收所述第一报文并将所述第一报文发送至所述第二设备，将所述最后一跳的SFF恢复的所述第一报文发送给所述第三设备。
PCT/CN2016/070076 2015-05-28 2016-01-04 报文的转发处理方法、装置及系统 WO2016188124A1 (zh)

Priority Applications (4)

Application Number Priority Date Filing Date Title
US15/577,429 US10645060B2 (en) 2015-05-28 2016-01-04 Method, device and system for forwarding message
JP2017561279A JP6730326B2 (ja) 2015-05-28 2016-01-04 メッセージの転送処理方法、装置及びシステム
EP16799013.4A EP3306869B1 (en) 2015-05-28 2016-01-04 Message forwarding method, apparatus and system
CA2987314A CA2987314C (en) 2015-05-28 2016-01-04 Method, device and system for forwarding message

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201510283760.2 2015-05-28
CN201510283760.2A CN106302206B (zh) 2015-05-28 2015-05-28 报文的转发处理方法、装置及系统

Publications (1)

Publication Number Publication Date
WO2016188124A1 true WO2016188124A1 (zh) 2016-12-01

Family

ID=57393459

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2016/070076 WO2016188124A1 (zh) 2015-05-28 2016-01-04 报文的转发处理方法、装置及系统

Country Status (6)

Country Link
US (1) US10645060B2 (zh)
EP (1) EP3306869B1 (zh)
JP (1) JP6730326B2 (zh)
CN (1) CN106302206B (zh)
CA (1) CA2987314C (zh)
WO (1) WO2016188124A1 (zh)

Families Citing this family (18)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US9225638B2 (en) 2013-05-09 2015-12-29 Vmware, Inc. Method and system for service switching using service tags
US10225137B2 (en) 2014-09-30 2019-03-05 Nicira, Inc. Service node selection by an inline service switch
US9935827B2 (en) 2014-09-30 2018-04-03 Nicira, Inc. Method and apparatus for distributing load among a plurality of service nodes
US10609091B2 (en) 2015-04-03 2020-03-31 Nicira, Inc. Method, apparatus, and system for implementing a content switch
US10397108B2 (en) * 2016-01-25 2019-08-27 Futurewei Technologies, Inc. Service function chaining across multiple subnetworks
US10797966B2 (en) 2017-10-29 2020-10-06 Nicira, Inc. Service operation chaining
US10797910B2 (en) 2018-01-26 2020-10-06 Nicira, Inc. Specifying and utilizing paths through a network
US10805192B2 (en) 2018-03-27 2020-10-13 Nicira, Inc. Detecting failure of layer 2 service using broadcast messages
US11595250B2 (en) 2018-09-02 2023-02-28 Vmware, Inc. Service insertion at logical network gateway
US10873528B2 (en) * 2018-11-24 2020-12-22 Nanning Fugui Precision Industrial Co., Ltd. Packet forwarding method and device utilizing the same
US10929171B2 (en) 2019-02-22 2021-02-23 Vmware, Inc. Distributed forwarding for performing service chain operations
US11140218B2 (en) 2019-10-30 2021-10-05 Vmware, Inc. Distributed service chain across multiple clouds
US11283717B2 (en) 2019-10-30 2022-03-22 Vmware, Inc. Distributed fault tolerant service chain
US11223494B2 (en) 2020-01-13 2022-01-11 Vmware, Inc. Service insertion for multicast traffic at boundary
US11659061B2 (en) 2020-01-20 2023-05-23 Vmware, Inc. Method of adjusting service function chains to improve network performance
US11743172B2 (en) 2020-04-06 2023-08-29 Vmware, Inc. Using multiple transport mechanisms to provide services at the edge of a network
US11611625B2 (en) 2020-12-15 2023-03-21 Vmware, Inc. Providing stateful services in a scalable manner for machines executing on host computers
US11734043B2 (en) 2020-12-15 2023-08-22 Vmware, Inc. Providing stateful services in a scalable manner for machines executing on host computers

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104022949A (zh) * 2013-02-28 2014-09-03 中兴通讯股份有限公司 一种跨域路径信息长久保存的方法及装置
US20150092564A1 (en) * 2013-09-27 2015-04-02 Futurewei Technologies, Inc. Validation of Chained Network Services
CN104639414A (zh) * 2015-01-30 2015-05-20 杭州华三通信技术有限公司 一种报文转发方法和设备

Family Cites Families (15)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7570175B2 (en) * 2006-02-16 2009-08-04 Intelliserv International Holding, Ltd. Node discovery in physically segmented logical token network
CN101106515B (zh) * 2006-07-10 2010-04-14 华为技术有限公司 组播网络中的服务质量保证方法及系统
CN101102273A (zh) * 2007-07-20 2008-01-09 中兴通讯股份有限公司 宽带接入设备及宽带接入方法
US8442043B2 (en) * 2008-12-29 2013-05-14 Cisco Technology, Inc. Service selection mechanism in service insertion architecture data plane
EP3407547B1 (en) * 2011-08-17 2020-01-22 Nicira, Inc. Hierarchical controller clusters for interconnecting different logical domains
US9191309B2 (en) * 2013-05-31 2015-11-17 Metanoia Communications Inc. Inter-medium bridging with inter-domain routing and multi-medium domain coordination
US9467382B2 (en) * 2014-02-03 2016-10-11 Cisco Technology, Inc. Elastic service chains
US10003530B2 (en) * 2014-07-22 2018-06-19 Futurewei Technologies, Inc. Service chain header and metadata transport
CN109714274B (zh) * 2014-08-14 2022-04-05 华为技术有限公司 一种获取对应关系的方法和路由设备
US20160119253A1 (en) * 2014-10-23 2016-04-28 Kt Corporation Method and system of performing service function chaining
US10374833B2 (en) * 2014-12-03 2019-08-06 Hewlett Packard Enterprise Development Lp Modifying an address to forward a packet to a service function
US9531850B2 (en) * 2014-12-04 2016-12-27 Cisco Technology, Inc. Inter-domain service function chaining
US9660909B2 (en) * 2014-12-11 2017-05-23 Cisco Technology, Inc. Network service header metadata for load balancing
US10122622B2 (en) * 2015-05-29 2018-11-06 Futurewei Technologies, Inc. Exchanging application metadata for application context aware service insertion in service function chain
WO2016197344A1 (zh) * 2015-06-10 2016-12-15 华为技术有限公司 实现业务链接的方法、设备及系统

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104022949A (zh) * 2013-02-28 2014-09-03 中兴通讯股份有限公司 一种跨域路径信息长久保存的方法及装置
US20150092564A1 (en) * 2013-09-27 2015-04-02 Futurewei Technologies, Inc. Validation of Chained Network Services
CN104639414A (zh) * 2015-01-30 2015-05-20 杭州华三通信技术有限公司 一种报文转发方法和设备

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
See also references of EP3306869A4 *

Also Published As

Publication number Publication date
CN106302206A (zh) 2017-01-04
EP3306869A4 (en) 2018-06-13
CA2987314A1 (en) 2016-12-01
JP2018516022A (ja) 2018-06-14
US20180152414A1 (en) 2018-05-31
EP3306869B1 (en) 2022-04-20
US10645060B2 (en) 2020-05-05
CA2987314C (en) 2022-11-15
JP6730326B2 (ja) 2020-07-29
EP3306869A1 (en) 2018-04-11
CN106302206B (zh) 2020-04-24

Similar Documents

Publication Publication Date Title
WO2016188124A1 (zh) 报文的转发处理方法、装置及系统
WO2020156105A1 (zh) 数据转发方法及相关装置
EP2945330B1 (en) Route management method, route method, network controller and router
WO2018006675A1 (zh) 数据处理方法及装置
WO2019007166A1 (zh) 跨域的路径的标识信息的确定方法、装置及存储介质
WO2017124709A1 (zh) 流量工程隧道建立方法和装置
EP3780514B1 (en) Tunnel setup method, apparatus, and system
CN107306222B (zh) 标签交换路径上的流量工程隧道建立的方法和设备
US11522795B1 (en) End to end application identification and analytics of tunnel encapsulated traffic in the underlay
CN115004656B (zh) 一种报文发送方法、设备及系统
JP6206508B2 (ja) パケット転送装置、制御装置、通信システム、通信方法及びプログラム
US11516184B2 (en) Firewall service insertion across secure fabric preserving security group tags end to end with dual homed firewall
CN113132235B (zh) 基于虚电路的数据报文处理方法、转发表项的构建方法
WO2019007316A1 (zh) 实现双向segment routing隧道的方法及装置、存储介质及设备
WO2022110535A1 (zh) 一种报文发送方法、设备及系统
US20150131675A1 (en) Traffic Engineering Resource Collection and Coordination
WO2021179935A1 (zh) 路由确定方法、装置和网络设备
CN103209124A (zh) 报文处理方法、装置及系统
WO2023051179A1 (zh) 边界网关协议路由的接收、发送方法及装置和存储介质
CN112511444B (zh) 一种组播流量传输方法、装置、通信节点及存储介质
US20230261963A1 (en) Underlay path discovery for a wide area network
CN112511444A (zh) 一种组播流量传输方法、装置、通信节点及存储介质
CN115865823A (zh) 流量传输方法、装置、计算机设备及存储介质
CN117527692A (zh) 算力网络中算力通告和路由方法、电子设备和存储介质

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 16799013

Country of ref document: EP

Kind code of ref document: A1

ENP Entry into the national phase

Ref document number: 2017561279

Country of ref document: JP

Kind code of ref document: A

ENP Entry into the national phase

Ref document number: 2987314

Country of ref document: CA

WWE Wipo information: entry into national phase

Ref document number: 15577429

Country of ref document: US

NENP Non-entry into the national phase

Ref country code: DE

WWE Wipo information: entry into national phase

Ref document number: 2016799013

Country of ref document: EP