WO2017114378A1 - Ip数据包的转发 - Google Patents
Ip数据包的转发 Download PDFInfo
- Publication number
- WO2017114378A1 WO2017114378A1 PCT/CN2016/112270 CN2016112270W WO2017114378A1 WO 2017114378 A1 WO2017114378 A1 WO 2017114378A1 CN 2016112270 W CN2016112270 W CN 2016112270W WO 2017114378 A1 WO2017114378 A1 WO 2017114378A1
- Authority
- WO
- WIPO (PCT)
- Prior art keywords
- data packet
- fragmented
- packet
- port information
- network device
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Ceased
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L47/00—Traffic control in data switching networks
- H04L47/10—Flow control; Congestion control
- H04L47/24—Traffic characterised by specific attributes, e.g. priority or QoS
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/50—Network services
- H04L67/51—Discovery or management thereof, e.g. service location protocol [SLP] or web services
Definitions
- MTU Maximum Transmission Unit
- IP Internet Protocol
- the IP data in the IP data packet can be split into IP data 1 and IP data 2, and then the IP data packet is The IP headers are repackaged into IP data packet 1 and IP data packet 2 with IP data 1 and IP data 2, respectively.
- the length of the IP data packet 1 is not greater than the MTU
- the length of the IP data packet 2 is not greater than the MTU.
- the first IP data packet (for example, IP data packet 1) obtained by the splitting may be referred to as the first data packet of the IP data packet, and other IP data packets other than the first IP data packet (for example, IP) Packet 2) is a subsequent packet called an IP packet.
- FIG. 1 is a schematic diagram of fragmenting an IP packet according to the value of the MTU.
- FIG. 2 is a schematic diagram of an application scenario in an example of the present disclosure.
- FIG. 3 is a schematic flowchart of a method for forwarding an IP data packet in an example of the present disclosure.
- FIG. 4 is a schematic flowchart of a method for forwarding an IP data packet in another example of the present disclosure.
- FIG. 5 is a schematic hardware configuration diagram of a network device in an example of the present disclosure.
- FIG. 6 is a schematic structural diagram of a forwarding device of an IP packet in an example of the present disclosure.
- FIG. 2 is a schematic diagram of an application scenario of an example of the present disclosure.
- the method may be applied to the network device 201 or the network device 202, and the network device 202 is taken as an example.
- the source device 21 transmits an IP packet to the destination device 22, it is possible to determine whether to slice the IP packet based on the MTU.
- the source device 21 can divide the IP data packet into an IP data packet 1 and an IP data packet 2.
- Each data packet obtained by fragmenting an IP data packet such as IP data packet 1 and IP data packet 2, may be referred to as a "sliced IP data packet.”
- the network device 201 receives the IP data packet 1 and the IP data packet 2, respectively, and can transmit the IP data packet 1 and the IP data packet 2 to the network device 202, respectively.
- the processing of the IP data packet 1 and the IP data packet 2 by the network device 202 is taken as an example.
- the method for processing the IP data packet includes the following steps:
- the network device 202 can receive the fragmented IP data packet, and determine the service type of the fragmented IP data packet.
- Step 302 When the fragmented IP data packet belongs to a service type that depends on the port information, the network device 202 may determine whether the fragmented IP data packet is the first data packet. If yes, go to step 303; if no, go to step 304.
- the fragmented IP data packet may further include information such as a fragmentation mark and a fragmentation offset.
- the fragmentation flag indicates that the current IP packet is a fragmented IP packet.
- the slice offset indicates that the current IP packet is the first packet, or the second IP packet, or the last IP packet. Based on the fragment offset, it can be determined whether the current IP packet is the first packet.
- the fragmentation offset of the first packet is 0. If the length of the first packet is 100 bytes, the fragmentation offset of the second IP packet is 101 bytes, if the second IP packet The length of the packet is 100 bytes, and the slice offset of the third IP packet is 201 bytes, and so on. Based on this, if the fragmentation offset of the current IP data packet is 0, it can be determined that the current IP data packet is the first data packet, and if the fragmentation offset of the current IP data packet is not 0, the current IP data packet can be determined. Not the first packet.
- the network device 202 Upon receiving the IP packet 1, the network device 202 determines that the IP packet 1 is the first packet. Upon receiving the IP packet 2, the network device 202 determines that the IP packet 2 is not the first packet.
- the IP packet 1 includes an IP header and IP data 1
- the IP packet 2 includes an IP header and IP data 2.
- the IP header of the IP packet 1 is the same as the IP header of the IP packet 2, and is an IP header in the IP packet before fragmentation.
- the initial IP data packet without fragmentation may include IP header and IP data
- the information in the IP header may be referred to as IP header information
- the IP data portion immediately following the IP header may include port information. Based on this, after the fragmentation process, the port information can be included in the IP data of the first packet.
- the IP header information may specifically include, but is not limited to, any one or more of the following: an identifier, a source IP address, a destination IP address, and a protocol identifier.
- the port information may include, but is not limited to, any one or more of the following: a destination port identifier and a source port identifier.
- the service type that depends on the port information may be a network address translation (NAT) service, a packet filtering service, or the like.
- the network device 202 can perform service processing based on the IP header information and the port information. For example, for the NAT service, the network device 202 can query the NAT mapping table based on the source port identifier included in the source IP address and port information included in the IP header information of the IP data packet, and modify the source IP address and the source port identifier to NAT. The IP address and port identifier recorded in the mapping table.
- the processing of the NAT service is not described in detail.
- the network device 202 may query the filtering table based on the source IP address, the destination IP address, and the source port identifier and the destination port identifier included in the port information of the IP data packet, which are included in the IP header information of the IP data packet. Determine whether to discard the IP data packet.
- the processing of the packet filtering service is not described in detail.
- Step 303 The network device 202 may establish a fragment forwarding entry, where the IP header information and the port information of the fragmented IP data packet are recorded in the fragment forwarding entry, and the fragmented IP data packet may be serviced by using the port information. deal with.
- Step 304 The network device 202 may associate the port information recorded in the fragment forwarding entry corresponding to the IP header information of the fragmented IP data packet with the fragmented IP data packet, and use the port information to segment the fragmented IP data.
- the package performs business processing.
- the network device 202 may establish a fragment forwarding entry, where the fragment forwarding entry records the IP header information and port information included in the IP data packet 1.
- the network device 202 can directly perform the NAT service processing, the packet filtering service processing, and the like on the IP data packet 1 by using the port information.
- the network device 202 determines the corresponding port information by searching for the fragment forwarding entry corresponding to the IP header information of the IP data packet 2 (that is, the fragment forwarding entry including the IP header information and the port information in the IP data packet 1). That is, the port information in the IP packet 1 is associated with the IP packet 2, and the IP packet 2 is processed by the port information.
- the process of associating the port information recorded in the fragment forwarding entry corresponding to the IP header information of the fragmented IP data packet with the fragmented IP data packet may include but is not limited to The method is as follows: Query whether there is a fragment forwarding entry corresponding to the IP header information of the fragment IP packet. If the fragment forwarding entry corresponding to the IP header information exists, the port information in the fragment forwarding entry is directly associated with the fragmented IP data packet. If there is no fragment forwarding entry corresponding to the IP header information, the fragmented IP data packet is cached first, and the first data packet is waited for. When the first data packet arrives, the fragment forwarding entry may be established according to the IP header information and the port information in the first data packet, and then the port information is associated with the cached fragmented IP data packet.
- the process of associating the port information with the fragmented IP data packet may include, but is not limited to, the following manner: mode 1: between recording port information and the fragmented IP data packet in a local data structure Corresponding relationship; or, method 2, adding port information to the storage area corresponding to the fragment IP data packet.
- the network device may allocate a corresponding storage area for each received IP data packet.
- the port information may be added to the storage corresponding to the IP data packet.
- the port information corresponding to the IP data packet can be directly obtained from the storage area, and then the port data is used to perform service processing on the IP data packet.
- the network device 202 can receive the IP data packet 1 first and then receive the IP data packet 2.
- the fragment forwarding entry since the fragment forwarding entry has been established based on the IP packet 1, the fragment forwarding entry corresponding to the IP header information of the IP packet 2 can be queried.
- the port information recorded in the fragment forwarding entry may be added to the storage area corresponding to the IP packet 2.
- the IP packet 2 can then be processed according to the port information.
- the network device 202 can receive the IP data packet 2 first and then receive the IP data packet 1.
- the port information cannot be added to the storage area corresponding to the IP packet 2, and the IP packet 2 is cached first.
- the fragment forwarding entry corresponding to the IP header information of the IP data packet 2 can be queried. Therefore, the port information recorded in the fragment forwarding entry can be added to the storage area corresponding to the IP packet 2.
- the IP data packet 1 and the IP data packet 2 can then be processed according to the port information.
- the network device 202 can directly send the IP data packet 1 to the destination device 22 after performing service processing on the IP data packet 1.
- the network device 202 can directly send the IP data packet 2 to the destination device 22.
- the service type of the fragmented IP data packet can be distinguished. If the fragmented IP packet belongs to a service type that depends on port information, you can wait for the first packet first. When the first data packet arrives, the port information of the first data packet can be associated with the subsequent data packet. In this way, the port information of all the fragmented IP data packets can be obtained, and each fragmented IP data packet can be processed by using the corresponding port information. While satisfying the business processing requirements, it is not necessary to reorganize all the fragmented IP data packets, minimize the buffering of the fragmented IP data packets, and improve the overall processing efficiency and forwarding efficiency of the system.
- Step 401 The network device may receive the fragmented IP data packet, and determine a service type of the fragmented IP data packet.
- step 402 When the fragmented IP data packet belongs to the service type of the port information, step 402 is performed; when the fragmented IP data packet belongs to the service type of the content information, step 405 is performed; when the fragmented IP data packet belongs to When the type of service that does not need to be processed is performed, step 408 is performed.
- the service type that depends on the port information may be a NAT service or a packet filtering service.
- Service types that depend on content information such as TCP (Transmission Control Protocol) port, HTTP (Hyper Text Transfer Protocol) content, etc.), such as DPI (Deep Packet Inspection) services. .
- the IP data packet can be considered to be directly forwarded without performing service processing.
- the service type of the IP data packet can be selected according to the priority of each service type.
- the priority order of the service type may be: a service type that depends on the content information > a service type that depends on the port information > no business processing.
- the service type of the IP data packet may be selected as the service type that depends on the content information.
- Step 402 When the fragmented IP data packet belongs to a service type that depends on the port information, the network device may determine whether the IP data packet is the first data packet. If yes, step 403 can be performed; if not, step 404 can be performed.
- the fragmented IP data packet may further include information such as a fragmentation mark and a fragmentation offset.
- the fragmentation flag indicates that the current IP packet is a fragmented IP packet.
- the slice offset indicates that the current IP packet is the first packet, or the second IP packet, or the last IP packet. Based on the fragment offset, it can be determined whether the current IP packet is the first packet.
- the fragmentation offset of the first packet is 0. If the length of the first packet is 100 bytes, the fragmentation offset of the second IP packet is 101 bytes, if the second IP packet The length of the packet is 100 bytes, and the slice offset of the third IP packet is 201 bytes, and so on. Based on this, if the fragmentation offset of the current IP data packet is 0, it can be determined that the current IP data packet is the first data packet, and if the fragmentation offset of the current IP data packet is not 0, the current IP data packet can be determined. Not the first packet.
- Step 403 The network device may establish a fragment forwarding entry, where the IP header information and port information of the fragmented IP data packet are recorded in the fragment forwarding entry, and the fragmented IP data packet may be serviced by using the port information. deal with.
- Step 404 The network device associates the port information recorded in the fragment forwarding entry corresponding to the IP header information of the fragmented IP data packet with the fragmented IP data packet, and uses the port information to segment the fragmented IP data packet. Conduct business processing.
- the IP header information may specifically include, but is not limited to, any one or more of the following: an identifier, a source IP address, a destination IP address, and a protocol identifier.
- the port information may include, but is not limited to, any one or more of the following: a destination port identifier and a source port identifier.
- the process of associating the port information recorded in the fragment forwarding entry corresponding to the IP header information of the fragmented IP data packet with the fragmented IP data packet may include but is not limited to The method is as follows: querying the fragment forwarding entry by using the IP header information of the fragmented IP data packet. If there is a fragment forwarding entry corresponding to the IP header information, the port information in the fragment forwarding entry may be directly associated with the fragmented IP data packet. If there is no fragment forwarding entry corresponding to the IP header information, the fragmented IP data packet may be cached first and wait for the first data packet to arrive. When the first data packet arrives, the fragment forwarding entry may be established according to the IP header information and the port information in the first data packet, and then the port information is associated with the cached fragmented IP data packet.
- the process of associating the port information with the fragmented IP data packet may include, but is not limited to, the following manner: mode 1: between recording port information and the fragmented IP data packet in a local data structure Corresponding relationship; or, method 2, adding port information to the storage area corresponding to the fragment IP data packet.
- the network device may allocate a corresponding storage area for each received fragmented IP data packet. Based on this, in the example of the present disclosure, port information can be added to the storage area corresponding to the fragmented IP data packet.
- the port information corresponding to the fragmented IP data packet may be directly obtained from the storage area, and then the port information is used to perform service processing on the fragmented IP data packet.
- step 402 to step 404 is similar to the processing of step 302 to step 304, and details are not described herein again.
- the service type of the fragmented IP data packet can be distinguished. If the fragmented IP packet belongs to a service type that depends on the port information, the first packet may be waited for first. When the first data packet arrives, the port information of the first data packet can be associated with the subsequent data packet, so that the port information of all the fragmented IP data packets can be obtained, and each fragmented IP data packet can be obtained by using the corresponding port information. Conduct business processing.
- Step 405 When the fragment IP data packet belongs to a service type that depends on the content information, the network device may determine the original IP address. Whether all the fragmented IP data packets corresponding to the data packet have been received; if not, step 406 can be performed; if yes, step 407 can be performed.
- each fragmented IP packet carries a fragment offset
- the last fragmented IP packet carries a flag indicating that it is the last packet. Based on the fragment offset of each fragmented IP packet and the label of the last packet, it can be determined whether all fragmented IP packets are currently present.
- the fragmentation offset of the fragmented IP data packet is 301 bytes, and if the fragment offset is currently received, A fragmented IP packet with a packet length of 100 bytes, a fragmented IP packet with a slice offset of 101 bytes and a packet length of 100 bytes, and a slice offset of 201 bytes. If the packet is a 100-byte fragmented IP packet, the four fragmented IP packets form a complete IP packet. Therefore, it is determined that all fragmented IP packets already exist.
- the network device may buffer the fragmented IP data packet and continue to receive other fragmented IP data packets.
- Step 407 The network device reassembles all the fragmented IP data packets corresponding to the original IP data packet, and performs service processing on the reassembled IP data packet.
- the network device 202 when the network device 202 first receives the IP data packet 1 and has not received the IP data packet 2, the IP data packet 1 can be cached. When the IP packet 2 is also received, since all the fragmented IP data packets corresponding to the original IP data packet already exist, the network device 202 can apply all the fragmented IP data packets (IP data packet 1 and IP data packet 2). Reorganize to obtain the reassembled IP data packet and perform business processing on the reassembled IP data packet.
- IP data packet 1 and IP data packet 2 need to be reassembled into IP data packets that are not fragmented, and service processing is performed on the reassembled IP data packet.
- the source IP address, the destination IP address, the protocol identifier, the fragmentation mark, the fragmentation offset, and the IP included in the IP data packet 1 may be used.
- the source IP address, the destination IP address, the protocol identifier, the fragmentation flag, the fragmentation offset, and the like included in the packet 2 are reassembled, and the IP packet 1 and the IP packet 2 are reassembled, and the IP packet generated after the reassembly is IP packets without fragmentation have the same content.
- the network device 202 may directly send the reassembled IP data packet to the destination device 22.
- the network device 202 may also fragment the reassembled IP data packet into IP data packet 1 and IP data packet 2 according to the MTU, and send the IP data packet 1 and the IP data packet 2 to the destination device 22, respectively.
- Step 408 When the fragmented IP data packet belongs to a service type that is not used for service processing, the fragmented IP data packet may be forwarded by using the IP header information of the fragmented IP data packet.
- the IP header information may include, but is not limited to, one or more of the following: an identifier, a source IP address, a destination IP address, and a protocol identifier.
- the network device 202 can transmit the IP data packet 1 to the destination device 22 by using the identifier, the source IP address, the destination IP address, and the protocol identifier carried in the IP data packet 1.
- the network device 202 can transmit the IP data packet 2 to the destination device 22 by using the source IP address, the destination IP address, and the protocol identifier carried in the IP data packet 2.
- a forwarding device for an IP data packet the forwarding device of the IP data packet being applicable to a network device.
- the forwarding device of the IP data packet may be implemented by software, or may be implemented by hardware or a combination of hardware and software.
- Taking the software implementation as an example as a logical device, it is formed by reading a corresponding machine readable program instruction in a non-volatile storage medium through a processor of the network device in which it is located.
- FIG. 5 a hardware structure diagram of a network device where an IP packet forwarding device according to the present disclosure is located is provided.
- the network device may further include other hardware, such as a forwarding chip, a network interface, a memory, and the like, which are responsible for processing the message.
- the network device may also be a distributed device, and may include multiple interface cards for extension of packet processing.
- FIG. 6 is a structural diagram of an apparatus for forwarding an IP data packet according to the present disclosure.
- the apparatus may include: a determining module 11 configured to receive a fragmented IP data packet, and determine the fragmented IP data packet. a service type; the determining module 12 is configured to determine, when the fragmented IP data packet belongs to a service type that depends on the port information, whether the fragmented IP data packet is a first data packet, and the processing module 13 is configured to use the fragmentation If the IP data packet is the first data packet, the fragment forwarding entry is established, and the IP header information and the port information of the fragmented IP data packet are recorded in the fragment forwarding entry, and the port information is used.
- the fragment forwarding table corresponding to the IP header information of the fragmented IP data packet The port information recorded in the item is associated with the fragmented IP data packet, and performs service processing on the fragmented IP data packet by using the port information.
- the processing module 13 is configured to: in the process of associating the port information recorded in the fragment forwarding entry corresponding to the IP header information of the fragmented IP data packet with the fragmented IP data packet, whether the query is a fragment forwarding entry corresponding to the IP header information of the fragmented IP data packet; if the fragment forwarding entry corresponding to the IP header information exists, the port information in the fragment forwarding entry is Correlating with the fragmented IP data packet; if there is no fragment forwarding entry corresponding to the IP header information, buffering the fragmented IP data packet, and waiting for the receiving of the first data packet, When the first data packet is received, the port information in the first data packet is associated with the cached fragmented IP data packet.
- the determining module 12 is further configured to: when the fragmented IP data packet belongs to a service type that depends on the content information, determine Whether all fragmented IP data packets corresponding to the original IP data packet are received;
- the processing module 13 is further configured to: when the fragmented IP data packet corresponding to the original IP data packet is not received, buffer the fragmented IP data packet, and continue to receive the other corresponding to the original IP data packet. Fragmented IP data packet; if all fragmented IP data packets corresponding to the original IP data packet are received, all fragmented IP data packets corresponding to the original IP data packet are reassembled, and the reassembled IP packet is reconstructed Packets are processed for business.
- the processing module 13 is further configured to: when the fragmented IP data packet belongs to a service type that is not used for service processing, forward the IP data packet by using the IP header information of the IP data packet.
- the IP header information includes any one or more of the following: an identifier, a source IP address, a destination IP address, and a protocol identifier; and the port information includes any one or more of the following: a destination port identifier and Source port identifier.
- the modules of the disclosed device may be integrated or deployed separately.
- the above modules can be combined into one module, or can be further split into multiple sub-modules.
- modules in the devices in the examples may be distributed in the device of the present example as described, or may be correspondingly changed in one or more devices different from the present examples.
- the modules of the above examples can be combined into one module, or can be further split into multiple sub-modules.
- the above-described examples of the present disclosure are merely for the purpose of description and do not represent the advantages and disadvantages of the examples.
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
在示例中,网络设备可接收分片IP数据包,并确定所述分片IP数据包的业务类型;当所述分片IP数据包属于依赖端口信息的业务类型时,判断所述分片IP数据包是否为首数据包;如果是,则建立分片转发表项,所述分片转发表项中记录了所述分片IP数据包的IP头信息和端口信息,利用所述端口信息对所述分片IP数据包进行业务处理;如果否,则将所述分片IP数据包的IP头信息对应的分片转发表项中记录的端口信息,与所述分片IP数据包进行关联,并利用所述端口信息对所述分片IP数据包进行业务处理。
Description
相关申请的交叉引用
本专利申请要求2015年12月28日提交的、申请号为201511005543.3、发明名称为“一种IP数据包的处理方法和装置”的中国专利申请的优先权,该申请的全文以引用的方式并入本文中。
MTU(Maximum Transmission Unit,最大传输单元)指数据链路层上能够传输的数据包的最大长度。在IP(Internet protocol)数据包经由路由寻址后要交由数据链路层进行传输时,可以根据MTU对IP数据包进行分片,以确保IP数据包能够被传输。
如图1所示,如果包含IP头和IP数据的IP数据包的长度大于MTU,则可将该IP数据包中的IP数据拆分成IP数据1和IP数据2,然后将IP数据包中的IP头分别与IP数据1和IP数据2重新封装成IP数据包1和IP数据包2。这样,IP数据包1的长度不大于MTU,且IP数据包2的长度不大于MTU。其中,可将拆分得到的第一个IP数据包(例如,IP数据包1)称为IP数据包的首数据包,将第一个IP数据包之外的其它IP数据包(例如,IP数据包2)称为IP数据包的后续数据包。
图1是根据MTU的值对IP数据包进行分片的示意图。
图2是本公开一示例中的应用场景示意图。
图3是本公开一示例中的IP数据包的转发方法的示意性流程图。
图4是本公开另一示例中的IP数据包的转发方法的示意性流程图。
图5是本公开一示例中的网络设备的示意性硬件结构图。
图6是本公开一示例中的IP数据包的转发装置的示意性结构图。
下面将结合附图对本公开中的技术方案进行清楚、完整地描述,显然,所描述的示例仅
仅是本公开一部分示例,而不是全部的示例。基于本公开中的示例,本领域普通技术人员在没有做出创造性劳动前提下所获得的所有其他示例,都属于本公开保护的范围。
本公开示例中提出一种IP数据包的转发方法,该方法可以应用在源设备与目的设备之间的网络设备上。图2为本公开示例的应用场景示意图,该方法可以应用在网络设备201或者网络设备202上,以网络设备202为例。在源设备21向目的设备22发送IP数据包时,可以根据MTU判断是否对IP数据包进行分片。在IP数据包要被分片的情况下,以图1为例,源设备21可将IP数据包分成IP数据包1和IP数据包2。通过对IP数据包分片得到的各个数据包,例如IP数据包1和IP数据包2可以称为“分片IP数据包”。网络设备201分别收到IP数据包1和IP数据包2,并可分别将IP数据包1和IP数据包2发送给网络设备202。在上述应用场景下,以网络设备202对IP数据包1和IP数据包2的处理为例。如图3所示,该IP数据包的处理方法包括以下步骤:
步骤301,网络设备202可接收分片IP数据包,确定该分片IP数据包的业务类型。
步骤302,在所述分片IP数据包属于依赖端口信息的业务类型时,网络设备202可判断该分片IP数据包是否为首数据包。如果是,执行步骤303;如果否,执行步骤304。
其中,分片IP数据包中还可以包含分片标记、分片偏移量等信息。分片标记表示当前IP数据包是经过分片处理的IP数据包。分片偏移量表示当前IP数据包是首数据包、或者第二个IP数据包、或者最后一个IP数据包等。基于分片偏移量,可以判断当前IP数据包是否为首数据包。
例如,首数据包的分片偏移量为0,如果首数据包的长度为100字节,则第二个IP数据包的分片偏移量为101字节,如果第二个IP数据包的长度为100字节,则第三个IP数据包的分片偏移量为201字节,以此类推。基于此,如果当前IP数据包的分片偏移量是0,则可确定当前IP数据包是首数据包,如果当前IP数据包的分片偏移量不是0,则可确定当前IP数据包不是首数据包。
网络设备202在接收到IP数据包1时,确定IP数据包1是首数据包。网络设备202在接收到IP数据包2时,确定IP数据包2不是首数据包。IP数据包1包括IP头和IP数据1,IP数据包2中包括IP头和IP数据2。其中,IP数据包1的IP头与IP数据包2的IP头相同,均为分片前的IP数据包中的IP头。在实际应用中,未经分片处理的初始IP数据包可包含IP头和IP数据,IP头中的信息可称为IP头信息,而紧跟着IP头的IP数据部分可包含端口信息。基于此,经过分片处理后,该端口信息可被包含在首数据包的IP数据中。
本公开示例中,IP头信息具体可以包括但不限于以下任意一种或者多种:标识符、源IP地址、目的IP地址、协议标识。端口信息具体可以包括但不限于以下任意一种或者多种:目的端口标识、源端口标识。
其中,依赖端口信息的业务类型可以为NAT(Network Address Translation,网络地址转换)业务,包过滤业务等。网络设备202可以根据IP头信息和端口信息进行业务处理。例如,针对NAT业务,网络设备202可以基于IP数据包的IP头信息中包括的源IP地址和端口信息中包括的源端口标识查询NAT映射表,并将源IP地址和源端口标识修改为NAT映射表中记录的IP地址和端口标识,该NAT业务的处理过程不再详加赘述。针对包过滤业务,网络设备202可以基于IP数据包的IP头信息中包括的源IP地址、目的IP地址、以及IP数据包的端口信息中包括的源端口标识、目的端口标识查询过滤表,以确定是否丢弃IP数据包,该包过滤业务的处理过程不再详加赘述。
步骤303,网络设备202可建立分片转发表项,该分片转发表项中记录了分片IP数据包的IP头信息和端口信息,并可利用端口信息对该分片IP数据包进行业务处理。
步骤304,网络设备202可将分片IP数据包的IP头信息对应的分片转发表项中记录的端口信息,与该分片IP数据包进行关联,并利用该端口信息对分片IP数据包进行业务处理。
针对步骤303,网络设备202在接收到IP数据包1时,可建立分片转发表项,该分片转发表项记录了IP数据包1中包括的IP头信息和端口信息。网络设备202可以直接利用该端口信息对IP数据包1进行NAT业务处理、包过滤业务处理等过程。
针对步骤304,网络设备202在接收到IP数据包2时,由于IP数据包2中不包含端口信息,因此,网络设备202无法直接利用端口信息对IP数据包2进行NAT业务处理、包过滤业务处理等过程。网络设备202可通过查找IP数据包2的IP头信息对应的分片转发表项(即包含IP数据包1中的IP头信息和端口信息的分片转发表项),确定对应的端口信息(即IP数据包1中的端口信息),并将该端口信息与该IP数据包2进行关联,并利用该端口信息对IP数据包2进行业务处理。
本公开示例中,针对步骤304,将分片IP数据包的IP头信息对应的分片转发表项中记录的端口信息,与该分片IP数据包进行关联的过程,具体可以包括但不限于如下方式:查询是否存在与该分片IP数据包的IP头信息对应的分片转发表项。如果存在与该IP头信息对应的分片转发表项,则直接将该分片转发表项中的端口信息与该分片IP数据包进行关联。如果不存在与该IP头信息对应的分片转发表项,则先缓存该分片IP数据包,并等待首数据包到来。
当首数据包到来时,可根据首数据包中的IP头信息和端口信息建立分片转发表项,然后将该端口信息与缓存的分片IP数据包进行关联。
本公开示例中,将端口信息与该分片IP数据包进行关联的过程,具体可以包括但不限于如下方式:方式一、在本地的数据结构中记录端口信息与该分片IP数据包之间的对应关系;或者,方式二、将端口信息添加到该分片IP数据包对应的存储区域中。
为了方便描述,后续以方式二为例进行说明。针对方式二,在实际应用中,网络设备可针对每个收到的IP数据包,分配对应的存储区域,在此基础上,本公开示例中,可以将端口信息添加到IP数据包对应的存储区域中,而在对IP数据包进行业务处理时,可以直接从该存储区域中得到该IP数据包对应的端口信息,继而利用该端口信息对IP数据包进行业务处理。
假设网络设备202可先接收到IP数据包1,后接收到IP数据包2。在接收到IP数据包2时,由于已经基于IP数据包1建立了分片转发表项,因此,可以查询到IP数据包2的IP头信息对应的分片转发表项。可将该分片转发表项中记录的端口信息添加到IP数据包2对应的存储区域。之后可根据该端口信息对IP数据包2进行业务处理。
假设网络设备202可先接收到IP数据包2,后接收到IP数据包1。在接收到IP数据包2时,由于当前还没有基于IP数据包1建立分片转发表项,因此,无法在IP数据包2对应的存储区域中添加端口信息,先缓存IP数据包2。在接收到IP数据包1,并基于IP数据包1建立分片转发表项之后,则可以查询到IP数据包2的IP头信息对应的分片转发表项。因此,可以将该分片转发表项中记录的端口信息添加到IP数据包2对应的存储区域。之后可根据该端口信息对IP数据包1和IP数据包2进行业务处理。
针对步骤303,网络设备202在对IP数据包1进行业务处理后,可以直接将IP数据包1发送给目的设备22。针对步骤304,网络设备202在对IP数据包2进行业务处理后,可以直接将IP数据包2发送给目的设备22。
基于上述技术方案,本公开示例中,在接收到分片IP数据包后,可以区分分片IP数据包的业务类型。如果分片IP数据包属于依赖端口信息的业务类型,可以先等待首数据包。当首数据包到来时,可将首数据包的端口信息,与后续数据包进行关联。以这种方式,可获得所有分片IP数据包的端口信息,并可利用各自对应的端口信息对各分片IP数据包进行业务处理。在满足业务处理需求的同时,不需要对所有分片IP数据包进行重组,尽可能减少分片IP数据包的缓存,提升系统整体处理效率和转发效率。
以下结合图4所示的流程图对上述IP数据包的转发方法进行详细说明。
步骤401,网络设备可接收分片IP数据包,确定该分片IP数据包的业务类型。当该分片IP数据包属于依赖端口信息的业务类型时,则执行步骤402;当该分片IP数据包属于依赖内容信息的业务类型时,则执行步骤405;当该分片IP数据包属于不用进行业务处理的业务类型时,则执行步骤408。
其中,依赖端口信息的业务类型,可以如NAT业务,包过滤业务等。依赖内容信息(如TCP(Transmission Control Protocol,传输控制协议)端口、HTTP(Hyper Text Transfer Protocol,超文本传输协议)内容等)的业务类型,可以如DPI(Deep Packet Inspection,深度包检测)业务等。不用进行业务处理,即IP数据包可以直接进行转发。
其中,当网络设备上没有配置依赖端口信息的业务类型的业务,且没有配置依赖内容信息的业务类型的业务时,则可以认为IP数据包不用进行业务处理而被直接转发。
在实际应用中,假设IP数据包的业务类型同时为多个,则可以按照各业务类型的优先级选择IP数据包的业务类型。例如,业务类型的优先级顺序可以为:依赖内容信息的业务类型>依赖端口信息的业务类型>不用进行业务处理。当IP数据包同时具有依赖内容信息的业务类型和依赖端口信息的业务类型时,如对IP数据包进行NAT业务和DPI业务,则可选择IP数据包的业务类型为依赖内容信息的业务类型。
步骤402,当该分片IP数据包属于依赖端口信息的业务类型时,网络设备可判断该IP数据包是否为首数据包。如果是,可执行步骤403;如果否,可执行步骤404。
其中,分片IP数据包中还可以包含分片标记、分片偏移量等信息。分片标记表示当前IP数据包是经过分片处理的IP数据包。分片偏移量表示当前IP数据包是首数据包、或者第二个IP数据包、或者最后一个IP数据包等。基于分片偏移量,可以判断当前IP数据包是否为首数据包。
例如,首数据包的分片偏移量为0,如果首数据包的长度为100字节,则第二个IP数据包的分片偏移量为101字节,如果第二个IP数据包的长度为100字节,则第三个IP数据包的分片偏移量为201字节,以此类推。基于此,如果当前IP数据包的分片偏移量是0,则可确定当前IP数据包是首数据包,如果当前IP数据包的分片偏移量不是0,则可确定当前IP数据包不是首数据包。
步骤403,网络设备可建立分片转发表项,该分片转发表项中记录了分片IP数据包的IP头信息和端口信息,并可利用该端口信息对该分片IP数据包进行业务处理。
步骤404,网络设备可将分片IP数据包的IP头信息对应的分片转发表项中记录的端口信息,与该分片IP数据包进行关联,并利用该端口信息对分片IP数据包进行业务处理。
本公开示例中,IP头信息具体可以包括但不限于以下任意一种或者多种:标识符、源IP地址、目的IP地址、协议标识。端口信息具体可以包括但不限于以下任意一种或者多种:目的端口标识、源端口标识。
本公开示例中,针对步骤404,将分片IP数据包的IP头信息对应的分片转发表项中记录的端口信息,与该分片IP数据包进行关联的过程,具体可以包括但不限于如下方式:利用该分片IP数据包的IP头信息查询分片转发表项。如果存在对应该IP头信息的分片转发表项,则可直接将该分片转发表项中的端口信息与该分片IP数据包进行关联。如果不存在对应该IP头信息的分片转发表项,则可先缓存该分片IP数据包,并等待首数据包到来。当首数据包到来时,可根据首数据包中的IP头信息和端口信息建立分片转发表项,然后将该端口信息与缓存的分片IP数据包进行关联。
本公开示例中,将端口信息与该分片IP数据包进行关联的过程,具体可以包括但不限于如下方式:方式一、在本地的数据结构中记录端口信息与该分片IP数据包之间的对应关系;或者,方式二、将端口信息添加到该分片IP数据包对应的存储区域中。
为了方便描述,后续以方式二为例进行说明。针对方式二,在实际应用中,网络设备可针对每个收到的分片IP数据包分配对应的存储区域。在此基础上,本公开示例中,可以将端口信息添加到分片IP数据包对应的存储区域中。而在对分片IP数据包进行业务处理时,可以直接从该存储区域中得到该分片IP数据包对应的端口信息,继而利用该端口信息对分片IP数据包进行业务处理。
步骤402至步骤404的处理与步骤302至步骤304的处理类似,在此不再赘述。
基于步骤402至步骤404的技术方案,在接收到分片IP数据包后,可以区分该分片IP数据包的业务类型。如果该分片IP数据包属于依赖端口信息的业务类型,可以先等待首数据包。当首数据包到来时,可将首数据包的端口信息与后续数据包进行关联,使得能够获得所有分片IP数据包的端口信息,并可利用各自对应的端口信息对各分片IP数据包进行业务处理。在满足业务处理需求的同时,不需要对所有分片IP数据包进行重组,尽可能减少分片IP数据包的缓存,提升系统整体处理效率和转发效率,尽可能快的转发分片IP数据包,缩短了时延。
步骤405,当该分片IP数据包属于依赖内容信息的业务类型时,网络设备可判断与原IP
数据包对应的所有分片IP数据包是否均已接收;如果否,可执行步骤406;如果是,可执行步骤407。
在实际应用中,每个分片IP数据包中均会携带分片偏移量,且最后一个分片IP数据包中还会携带表示其是最后数据包的标记。基于各分片IP数据包的分片偏移量以及最后数据包的标记,可以判断出当前是否已存在所有分片IP数据包。
例如,假设已经收到携带表示最后数据包的标记的分片IP数据包,该分片IP数据包的分片偏移量为301字节,如果当前已经收到分片偏移量为0、数据包的长度为100字节的分片IP数据包,分片偏移量为101字节、数据包的长度为100字节的分片IP数据包,分片偏移量为201字节、数据包的长度为100字节的分片IP数据包,则这4个分片IP数据包正好组成一个完整的IP数据包,因此,判断出当前已存在所有分片IP数据包。
步骤406,网络设备可缓存分片IP数据包,继续接收其它分片IP数据包。
步骤407,网络设备可对原IP数据包对应的所有分片IP数据包进行重组,并对重组后的IP数据包进行业务处理。
例如,网络设备202在先接收到IP数据包1尚未接收到IP数据包2时,可缓存IP数据包1。在IP数据包2也被接收到时,由于当前已经存在原IP数据包对应的所有分片IP数据包,因此网络设备202可对所有分片IP数据包(IP数据包1和IP数据包2)进行重组,得到重组后的IP数据包,并对重组后的IP数据包进行业务处理。
其中,针对依赖内容信息的业务类型,例如,DPI业务,网络设备202在仅接收到IP数据包1或者IP数据包2时,由于IP数据包1或者IP数据包2均只包含部分IP数据,因此无法单独基于IP数据包1或者IP数据包2进行业务处理。在此基础上,需要将IP数据包1和IP数据包2重组成未经分片处理的IP数据包,并对重组后的IP数据包进行业务处理。
其中,在对IP数据包1和IP数据包2进行重组的过程中,可以根据IP数据包1中包含的源IP地址、目的IP地址、协议标识、分片标记、分片偏移量,IP数据包2中包含的源IP地址、目的IP地址、协议标识、分片标记、分片偏移量等信息,对IP数据包1和IP数据包2进行重组,重组后生成的IP数据包与未经分片处理的IP数据包内容相同。
针对步骤407,网络设备202在对重组后的IP数据包进行业务处理后,可以直接将重组后的IP数据包发送给目的设备22。或者,网络设备202也可以根据MTU将重组后的IP数据包分片成IP数据包1和IP数据包2,并分别将IP数据包1和IP数据包2发送给目的设备22。
步骤408,当该分片IP数据包属于不用进行业务处理的业务类型时,可利用该分片IP数据包的IP头信息转发该分片IP数据包。其中,该IP头信息具体可以包括但不限于以下一种或者多种:标识符、源IP地址、目的IP地址、协议标识。
例如,网络设备202在接收到IP数据包1之后,可以利用IP数据包1中携带的标识符、源IP地址、目的IP地址、协议标识,将IP数据包1发送给目的设备22。网络设备202在接收到IP数据包2之后,可以利用IP数据包2中携带的源IP地址、目的IP地址、协议标识,将IP数据包2发送给目的设备22。
本公开示例中还提供了一种IP数据包的转发装置,该IP数据包的转发装置可以应用在网络设备上。其中,该IP数据包的转发装置可以通过软件实现,也可以通过硬件或者软硬件结合的方式实现。以软件实现为例,作为一个逻辑意义上的装置,是通过其所在的网络设备的处理器,读取非易失性存储介质中对应的机器可读程序指令形成的。如图5所示,为本公开提出的IP数据包的转发装置所在的网络设备的一种硬件结构图。除了图5所示的处理器501、非易失性存储介质502外,网络设备还可以包括其他硬件,如负责处理报文的转发芯片、网络接口、内存等。从硬件结构上来讲,该网络设备还可能是分布式设备,可能包括多个接口卡,以便进行报文处理的扩展。
如图6所示,为本公开提出的IP数据包的转发装置的结构图,所述装置可包括:确定模块11,用于接收分片IP数据包,并确定所述分片IP数据包的业务类型;判断模块12,用于当所述分片IP数据包属于依赖端口信息的业务类型时,判断所述分片IP数据包是否为首数据包;处理模块13,用于在所述分片IP数据包是首数据包的情况下,建立分片转发表项,所述分片转发表项中记录了所述分片IP数据包的IP头信息和端口信息,并利用所述端口信息对所述分片IP数据包进行业务处理;在所述分片IP数据包是首数据包以外的后续数据包的情况下,将所述分片IP数据包的IP头信息对应的分片转发表项中记录的端口信息,与所述分片IP数据包进行关联,并利用所述端口信息对所述分片IP数据包进行业务处理。
所述处理模块13,用于在将所述分片IP数据包的IP头信息对应的分片转发表项中记录的端口信息,与所述分片IP数据包进行关联的过程中,查询是否存在对应所述分片IP数据包的IP头信息的分片转发表项;在存在所述IP头信息对应的分片转发表项的情况下,将所述分片转发表项中的端口信息与所述分片IP数据包进行关联;在不存在所述IP头信息对应的分片转发表项的情况下,缓存所述分片IP数据包,并等待所述首数据包的接收,在所述首数据包被接收时,将所述首数据包中的的端口信息与缓存的所述分片IP数据包进行关联。
所述判断模块12,还用于在所述分片IP数据包属于依赖内容信息的业务类型时,判断与
原IP数据包对应的所有分片IP数据包是否均被接收;
所述处理模块13,还用于在尚有与原IP数据包对应的分片IP数据包未被接收的情况下,缓存所述分片IP数据包,继续接收与原IP数据包对应的其它分片IP数据包;在与原IP数据包对应的所有分片IP数据包均被接收的情况下,对与原IP数据包对应的所有分片IP数据包进行重组,并对重组后的IP数据包进行业务处理。
所述处理模块13,还用于当所述分片IP数据包属于不用进行业务处理的业务类型时,利用所述IP数据包的IP头信息转发所述IP数据包。
本公开示例中,所述IP头信息包括以下任意一种或者多种:标识符、源IP地址、目的IP地址、协议标识;所述端口信息包括以下任意一种或者多种:目的端口标识和、源端口标识。
其中,本公开装置的各个模块可以集成于一体,也可以分离部署。上述模块可以合并为一个模块,也可以进一步拆分成多个子模块。
通过以上示例的描述,本领域的技术人员可以清楚地了解到本公开可借助软件加通用硬件平台的方式来实现,当然也可以通过硬件来实现。基于这样的理解,本公开的技术方案本质上或者说对现有技术做出贡献的部分可以以软件产品的形式体现出来,该计算机软件产品存储在一个存储介质中,包括若干指令用以使得一台机器可执行设备(可以是个人计算机,服务器,或者网络设备等)执行本公开各个示例所述的方法。本领域技术人员可以理解附图只是一个优选示例的示意图,附图中的模块或流程并不一定是实施本公开所必须的。
本领域技术人员可以理解示例中的装置中的模块可以按照描述分布于本示例的装置中,也可以进行相应变化位于不同于本示例的一个或多个装置中。上述示例的模块可以合并为一个模块,也可进一步拆分成多个子模块。上述本公开示例序号仅仅为了描述,不代表示例的优劣。
以上仅为本公开的示例,但是,本公开并非局限于此,任何本领域的技术人员能思之的变化都应落入本公开的保护范围。
Claims (10)
- 一种互联网协议(IP)数据包的转发方法,包括:网络设备接收分片IP数据包,并确定所述分片IP数据包的业务类型;当所述分片IP数据包属于依赖端口信息的业务类型时,所述网络设备判断所述分片IP数据包是否为首数据包;在所述分片IP数据包是首数据包的情况下,所述网络设备建立分片转发表项,所述分片转发表项记录了所述分片IP数据包的IP头信息和端口信息,并且所述网络设备利用所述端口信息对所述分片IP数据包进行业务处理;在所述分片IP数据包是首数据包以外的后续数据包的情况下,所述网络设备将所述分片IP数据包的IP头信息对应的分片转发表项中记录的端口信息,与所述分片IP数据包进行关联,并且所述网络设备利用所述端口信息对所述分片IP数据包进行业务处理。
- 根据权利要求1所述的方法,其特征在于,将所述分片IP数据包的IP头信息对应的分片转发表项中记录的端口信息,与所述分片IP数据包进行关联,包括:所述网络设备查询是否存在与所述分片IP数据包的IP头信息对应的分片转发表项;在存在所述IP头信息对应的分片转发表项的情况下,所述网络设备将所述分片转发表项中的端口信息与所述分片IP数据包进行关联;在不存在所述IP头信息对应的分片转发表项的情况下,所述网络设备缓存所述分片IP数据包,并等待所述首数据包的接收,在所述首数据包被接收时,所述网络设备将所述首数据包中的端口信息与缓存的所述分片IP数据包进行关联。
- 根据权利要求1所述的方法,所述方法还包括:在所述分片IP数据包属于依赖内容信息的业务类型的情况下,所述网络设备判断与原IP数据包对应的所有分片IP数据包是否均被接收;在尚有所述原IP数据包对应的分片IP数据包未被接收的情况下,所述网络设备缓存所述分片IP数据包,继续接收所述原IP数据包对应的其它分片IP数据包;在与原IP数据包对应的所有分片IP数据包均被接收的情况下,所述网络设备对所述原IP数据包对应的所有分片IP数据包进行重组,并对重组后 的IP数据包进行业务处理。
- 根据权利要求1所述的方法,所述方法还包括:在所述分片IP数据包属于不用进行业务处理的业务类型的情况下,所述网络设备利用所述分片IP数据包的IP头信息转发所述分片IP数据包。
- 根据权利要求1所述的方法,其中,所述IP头信息包括以下任意一种或者多种:标识符、源IP地址、目的IP地址、协议标识;所述端口信息包括以下任意一种或者多种:目的端口标识、源端口标识。
- 一种互联网协议(IP)数据包的转发装置,包括处理器以及存储有机器可读指令的非暂时性存储介质,通过执行所述机器可读指令,所述处理器被使得:接收分片IP数据包,并确定所述分片IP数据包的业务类型;当所述分片IP数据包属于依赖端口信息的业务类型时,判断所述分片IP数据包是否为首数据包;在所述分片IP数据包是首数据包的情况下,建立分片转发表项,所述分片转发表项中记录了所述分片IP数据包的IP头信息和端口信息,并且利用所述端口信息对所述分片IP数据包进行业务处理;在所述分片IP数据包是首数据包以外的后续数据包的情况下,将所述分片IP数据包的IP头信息对应的分片转发表项中记录的端口信息,与所述分片IP数据包进行关联,并且利用所述端口信息对所述分片IP数据包进行业务处理。
- 根据权利要求6所述的装置,其中,在将所述分片IP数据包的IP头信息对应的分片转发表项中记录的端口信息,与所述分片IP数据包进行关联时,所述机器可执行指令还使得所述处理器:查询是否存在对应所述分片IP数据包的IP头信息的分片转发表项;在存在所述分片IP数据包的IP头信息对应的分片转发表项的情况下,将所述分片转发表项中的端口信息与所述分片IP数据包进行关联;在不存在所述分片IP数据包的IP头信息对应的分片转发表项的情况下,缓存所述分片IP数据包,并等待所述首数据包的接收,在所述首数据包被接收时,将所述首数据包中的端口信息与缓存的所述分片IP数据包进行关联。
- 根据权利要求6所述的装置,其中,所述机器可执行指令还使得所述处理器:在所述分片IP数据包属于依赖内容信息的业务类型的情况下,判断与原IP数据包对应的所有分片IP数据包是否均被接收;在尚有原IP数据包对应的分片IP数据包未被接收的情况下,缓存所述分片IP数据包,继续接收原IP数据包对应的其它分片IP数据包;在与原IP数据包对应的所有分片IP数据包均被接收的情况下,对与原IP数据包对应的所有分片IP数据包进行重组,并对重组后的IP数据包进行业务处理。
- 根据权利要求6所述的装置,其中,所述机器可执行指令还使得所述处理器:在所述分片IP数据包属于不用进行业务处理的业务类型的情况下,利用所述分片IP数据包的IP头信息转发所述分片IP数据包。
- 根据权利要求6所述的装置,其中,所述IP头信息包括以下任意一种或者多种:标识符、源IP地址、目的IP地址、协议标识;所述端口信息包括以下任意一种或者多种:目的端口标识、源端口标识。
Applications Claiming Priority (2)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201511005543.3 | 2015-12-28 | ||
| CN201511005543.3A CN106921589A (zh) | 2015-12-28 | 2015-12-28 | 一种ip数据包的处理方法和装置 |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| WO2017114378A1 true WO2017114378A1 (zh) | 2017-07-06 |
Family
ID=59225911
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| PCT/CN2016/112270 Ceased WO2017114378A1 (zh) | 2015-12-28 | 2016-12-27 | Ip数据包的转发 |
Country Status (2)
| Country | Link |
|---|---|
| CN (1) | CN106921589A (zh) |
| WO (1) | WO2017114378A1 (zh) |
Cited By (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN115460164A (zh) * | 2022-08-20 | 2022-12-09 | 西安翔腾微电子科技有限公司 | 一种基于arinc664协议的组包方法 |
| CN117097678A (zh) * | 2023-10-20 | 2023-11-21 | 深圳华云信息系统科技股份有限公司 | 分片报文的流式转发方法、装置、设备和存储介质 |
| CN119232668A (zh) * | 2024-11-28 | 2024-12-31 | 阿里云计算有限公司 | 分片报文元组恢复方法、网卡、网关、存储介质和程序 |
Families Citing this family (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107395504A (zh) * | 2017-07-28 | 2017-11-24 | 江西山水光电科技股份有限公司 | 一种超长帧业务报文转发的方法及装置 |
| CN107948072B (zh) * | 2017-10-31 | 2021-04-27 | 新华三技术有限公司 | 报文转发方法和装置 |
| CN114465979B (zh) * | 2021-12-21 | 2024-01-02 | 天翼云科技有限公司 | 一种ip库生成方法、系统及电子设备 |
| CN119232672B (zh) * | 2024-09-11 | 2025-11-21 | 南京理工大学 | 一种自组网场景下的广播风暴抑制及QoS端口识别方法 |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1863158A (zh) * | 2005-10-31 | 2006-11-15 | 华为技术有限公司 | 一种ip报文分片缓存及转发方法 |
| CN1960316A (zh) * | 2005-11-04 | 2007-05-09 | 华为技术有限公司 | 分片报文的网络地址转换方法 |
| US7624195B1 (en) * | 2003-05-08 | 2009-11-24 | Cisco Technology, Inc. | Method and apparatus for distributed network address translation processing |
| CN101783786A (zh) * | 2009-01-19 | 2010-07-21 | 中兴通讯股份有限公司 | 数据包过滤方法和装置 |
| US20110211577A1 (en) * | 2010-02-26 | 2011-09-01 | Connection Technology Systems Inc. | Data packet forwarding method and network device using such method in network address translation mode |
-
2015
- 2015-12-28 CN CN201511005543.3A patent/CN106921589A/zh active Pending
-
2016
- 2016-12-27 WO PCT/CN2016/112270 patent/WO2017114378A1/zh not_active Ceased
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US7624195B1 (en) * | 2003-05-08 | 2009-11-24 | Cisco Technology, Inc. | Method and apparatus for distributed network address translation processing |
| CN1863158A (zh) * | 2005-10-31 | 2006-11-15 | 华为技术有限公司 | 一种ip报文分片缓存及转发方法 |
| CN1960316A (zh) * | 2005-11-04 | 2007-05-09 | 华为技术有限公司 | 分片报文的网络地址转换方法 |
| CN101783786A (zh) * | 2009-01-19 | 2010-07-21 | 中兴通讯股份有限公司 | 数据包过滤方法和装置 |
| US20110211577A1 (en) * | 2010-02-26 | 2011-09-01 | Connection Technology Systems Inc. | Data packet forwarding method and network device using such method in network address translation mode |
Cited By (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN115460164A (zh) * | 2022-08-20 | 2022-12-09 | 西安翔腾微电子科技有限公司 | 一种基于arinc664协议的组包方法 |
| CN115460164B (zh) * | 2022-08-20 | 2023-11-10 | 西安翔腾微电子科技有限公司 | 一种基于arinc664协议的组包方法 |
| CN117097678A (zh) * | 2023-10-20 | 2023-11-21 | 深圳华云信息系统科技股份有限公司 | 分片报文的流式转发方法、装置、设备和存储介质 |
| CN117097678B (zh) * | 2023-10-20 | 2024-01-26 | 深圳华云信息系统科技股份有限公司 | 分片报文的流式转发方法、装置、设备和存储介质 |
| CN119232668A (zh) * | 2024-11-28 | 2024-12-31 | 阿里云计算有限公司 | 分片报文元组恢复方法、网卡、网关、存储介质和程序 |
Also Published As
| Publication number | Publication date |
|---|---|
| CN106921589A (zh) | 2017-07-04 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| WO2017114378A1 (zh) | Ip数据包的转发 | |
| US10445380B2 (en) | System and method for direct storage access in a content-centric network | |
| CN102624611B (zh) | 报文分流方法、装置、处理器和网络设备 | |
| CN107113240B (zh) | 可扩展虚拟局域网报文发送方法、计算机设备和可读介质 | |
| WO2019029318A1 (zh) | 网络拥塞的通告方法、代理节点及计算机设备 | |
| WO2017000878A1 (zh) | 报文处理 | |
| WO2017067391A1 (zh) | 虚拟机的数据共享方法及装置 | |
| CN112333169B (zh) | 一种报文处理方法、装置、电子设备及计算机可读介质 | |
| EP2940949A1 (en) | Method and device for packet handling | |
| CN103747083B (zh) | 一种基于ccn的内容推送方法 | |
| CN102571613A (zh) | 一种转发报文的方法及网络设备 | |
| CN101018206A (zh) | 分片报文处理方法与装置 | |
| WO2016082371A1 (zh) | 一种基于ssh协议的会话解析方法及系统 | |
| US10587515B2 (en) | Stateless information centric forwarding using dynamic filters | |
| CN111404817B (zh) | 一种提升网络通信设备分片数据包转发性能的方法及系统 | |
| CN107888710A (zh) | 一种报文转发方法及装置 | |
| WO2016197689A1 (zh) | 处理报文的方法、装置和系统 | |
| CN104541481A (zh) | 一种处理用户报文的方法及转发面设备 | |
| WO2009124477A1 (zh) | 一种报文传输的方法、系统和装置 | |
| WO2012083654A1 (zh) | Ip报文分片的处理方法和分布式系统 | |
| WO2009082896A1 (en) | A method and a converter for data message transmission | |
| CN104869062B (zh) | 一种数据包转发方法及设备 | |
| WO2012122832A1 (zh) | 网络地址转换表项的热备份方法及装置 | |
| CN1863158B (zh) | 一种ip报文分片缓存及转发方法 | |
| CN116962297A (zh) | 报文处理方法及装置 |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| 121 | Ep: the epo has been informed by wipo that ep was designated in this application |
Ref document number: 16881167 Country of ref document: EP Kind code of ref document: A1 |
|
| NENP | Non-entry into the national phase |
Ref country code: DE |
|
| 122 | Ep: pct application non-entry in european phase |
Ref document number: 16881167 Country of ref document: EP Kind code of ref document: A1 |