WO2017190579A1 - Method for realizing protection switching in sdn architecture and forwarding device - Google Patents

Method for realizing protection switching in sdn architecture and forwarding device Download PDF

Info

Publication number
WO2017190579A1
WO2017190579A1 PCT/CN2017/080147 CN2017080147W WO2017190579A1 WO 2017190579 A1 WO2017190579 A1 WO 2017190579A1 CN 2017080147 W CN2017080147 W CN 2017080147W WO 2017190579 A1 WO2017190579 A1 WO 2017190579A1
Authority
WO
WIPO (PCT)
Prior art keywords
service
path
fpga
protection
forwarding
Prior art date
Application number
PCT/CN2017/080147
Other languages
French (fr)
Chinese (zh)
Inventor
魏建杰
Original Assignee
中兴通讯股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 中兴通讯股份有限公司 filed Critical 中兴通讯股份有限公司
Publication of WO2017190579A1 publication Critical patent/WO2017190579A1/en

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00Routing or path finding of packets in data switching networks
    • H04L45/24Multipath
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/06Management of faults, events, alarms or notifications
    • H04L41/0654Management of faults, events, alarms or notifications using network fault recovery
    • H04L41/0663Performing the actions predefined by failover planning, e.g. switching to standby network elements

Definitions

  • the present invention relates to a fast protection switching technology, and more particularly to a method and a forwarding device for implementing protection switching in a Software Defined Network (SDN) architecture.
  • SDN Software Defined Network
  • SDN decouples the control plane from the data forwarding plane to build an open, programmable network.
  • the system which provides an efficient, flexible, convenient, and programmable network environment, is considered one of the most important directions for the transformation of next-generation network architectures.
  • the functions on the forwarding device can be divided into three categories according to the relationship with the service: basic service, business phase Off, business-independent features.
  • the OpenFlow protocol supports the Layer 2 services and the Layer 2 virtual private network (VPN) services.
  • the services that are not related to services, such as quality of service (QOS), and alarms.
  • QOS quality of service
  • the clock, etc. can be implemented in the traditional way of each manufacturer; however, the OAM (Operation Administration and Maintenance) and protection functions are more complicated, because the service configuration has been replaced by the flow table group table.
  • the basic changes have caused the basic service to be "non-existent". If you want to implement it completely in the original way, you must extract the abstraction into a traditional service and send it to the forwarding device in order to configure the service. The function.
  • SDN The core idea of SDN is to separate the control plane from the forwarding plane.
  • the southbound interface and the northbound interface must use the operator or the Open Network Foundation (ONF) standard interface. Otherwise, the forwarding devices provided by each manufacturer will be Unable to achieve interconnection and centralized management by any controller, it loses the original intention of SDN, so it is impossible for the controller to issue any private configuration information to assist in the configuration of business-related functions.
  • ONF Open Network Foundation
  • a segment layer For the configuration of a traditional service, such as a packet transport network (PTN) device, a segment layer, a tunnel, a pseudowire, and a service are required, and their ID numbers are unique.
  • PDN packet transport network
  • the service implementation is implemented by converting the flow table entries and the group tables to an ASIC (Application Specific Integrated Circuit) (Exchange Chip), such as Broadcom's OF-DPA.
  • ASIC Application Specific Integrated Circuit
  • Broadcom OF-DPA Application Specific Integrated Circuit
  • the standard southbound interface will also have a forwarding device implementation for OAM and protection processing, not a controller.
  • the OAM and protection functions are implemented in the forwarding device, it is the internal matter of the device.
  • the slow speed the packet sending period is large, such as greater than 100ms
  • the OAM packet is sent or received, or the protection switching caused by the excessive packet loss rate is handled by the ASIC chip.
  • Traditional devices are usually implemented as such, but for CC (Continuity Check)/Connectivity Verification (CV), the transmission interval is generally 3.3 ms, which is not optimally handled by the ASIC chip.
  • the device provider's PTN device does not implement the fast OAM message and the corresponding protection switching through the ASIC chip.
  • the common processing methods are the Field-Programmable Gate Array (FPGA) and the ASIC.
  • the chips are implemented together.
  • the side-mounted FPGA is responsible for sending and receiving fast OAM messages.
  • the ASIC chip is only responsible for forwarding packets.
  • the FPGA directly modifies the ASIC forwarding path table to implement fast protection switching. This is realized by the processing method of the FPGA.
  • Fast protection switching has obvious advantages in similar devices. The fast protection switching capability is very important for carrier-class services. Generally, 50ms is used as the red line.
  • the technical problem solved by the solution provided by the embodiment of the present invention is that when the fast OAM packet sending and receiving service path is interrupted, the side-mounted FPGA cannot be saved to implement fast protection switching.
  • the driving module in the SDN forwarding device receives the service flow table and the service group table from the controller, extracts the information from the service flow table and the service group table, and forms a complete entry and exit service tree, and then sends the data to the side-mounted FPGA;
  • the side-mounted FPGA creates a complete inflow point, outflow point, and Out of the business tree
  • the side-mounted FPGA When detecting that the service path is interrupted, the side-mounted FPGA directly modifies the service forwarding entry of the switch chip in the SDN forwarding device by using the inflow point, the outflow point, and the outbound service tree, and the saved protection path and the protection parameter. Switch the service forwarding path to implement fast protection switching of the service forwarding path.
  • the driver module in the SDN forwarding device receives the base OAM and fast OAM from the controller and configures it into the side-mounted FPGA.
  • a driver module in the SDN forwarding device receives the protection path and protection parameters from the controller and configures it into the side-mounted FPGA.
  • the detecting that the service path is interrupted includes:
  • the side-mounted FPGA detects that the fast OAM packet is not received within a configuration period of more than 3.5 consecutive detections, the transmission and reception service path of the fast OAM packet is interrupted.
  • the side-mounted FPGA reports the service path switching information to the controller via the OpenFlow proxy module in the SDN forwarding device.
  • a driving module configured to receive a service flow table and a service group table from the controller, extract information from the service flow table and the service group table, and form an entry and exit service tree, and then send the information to the side-mounted FPGA;
  • the side-mounted FPGA is configured to create an inflow point, an outflow point, and an outgoing service tree according to the inbound and outbound service trees;
  • the side-mounted FPGA is configured to modify the service forwarding entry of the switch chip by using the inflow point, the outflow point, and the outbound service tree, and the saved protection path and protection parameters when the service path is interrupted.
  • the service forwarding path is switched to perform protection switching of the service forwarding path.
  • the driving module is further configured to receive a base OAM and a fast OAM from the controller, and configure the same into the side-mounted FPGA.
  • the driving module is further configured to receive a protection path and a protection parameter from the controller, and are configured in the side-mounted FPGA.
  • the side-mounted FPGA is further configured to: when it is detected that the fast OAM packet is not received in the configuration period of more than 3.5 consecutive detections, determine that the transmission and reception service path of the fast OAM packet is interrupted;
  • the side-mounted FPGA is further configured to modify the service forwarding entry of the switch chip to switch the service forwarding path by using the inflow point, the outbound point, and the outbound service tree, and the saved protection path and the protection parameter.
  • the OpenFlow proxy module is configured to report the service path switching information to the controller via the OpenFlow proxy module after the protection switching of the service forwarding path is implemented.
  • the service forwarding entry of the switch chip can be directly modified to correctly switch the service forwarding path, thereby implementing fast protection switching of the service forwarding path.
  • FIG. 1 is a flowchart of a method for implementing fast protection switching in an SDN architecture according to an embodiment of the present invention
  • FIG. 2 is a schematic structural diagram of a forwarding device that implements fast protection switching in an SDN architecture according to an embodiment of the present disclosure
  • FIG. 3 is a schematic diagram of each functional module in a forwarding device according to an embodiment of the present invention.
  • ACL access control list
  • FIG. 5 is a schematic diagram of a flow table and a group table configuration according to an embodiment of the present invention.
  • FIG. 6 is a schematic diagram of an OAM configuration according to an embodiment of the present invention.
  • FIG. 7 is a schematic diagram of a protection path and a protection parameter configuration according to an embodiment of the present invention.
  • FIG. 8 is a schematic diagram of CC/CV packet forwarding processing according to an embodiment of the present invention.
  • FIG. 9 is a schematic diagram of a CC/CV packet discarding process according to an embodiment of the present invention.
  • FIG. 10 is a schematic diagram of a protection path and a working path switching process according to an embodiment of the present invention.
  • FIG. 1 is a flowchart of a method for implementing protection switching in an SDN architecture according to an embodiment of the present invention. As shown in FIG. 1 , the method includes:
  • Step S101 The driving module in the SDN forwarding device receives the service flow table and the service group table from the controller, extracts information from the service flow table and the service group table, and forms a complete inbound and outbound service tree, and then sends the data to the side-mounted FPGA. ;
  • Step S102 The side-mounted FPGA creates a complete inflow point, outflow point, and out service tree according to the inbound and outbound service tree.
  • Step S103 When detecting that the service path is interrupted, the side-mounted FPGA directly modifies the service switch of the switch chip in the SDN forwarding device by using the inflow point, the outflow point, and the outbound service tree, and the saved protection path and the protection parameter. Issue a key to switch the service forwarding path to implement fast protection switching of the service forwarding path.
  • the embodiment of the invention further includes: the driving module in the SDN forwarding device receives the basic OAM and the fast OAM from the controller, and configures the same into the side-mounted FPGA, and the SDN switch
  • the driver module in the transmitting device receives the protection path and protection parameters from the controller and configures it into the side-mounted FPGA.
  • the detecting that the service path is interrupted includes: when the side-mounted FPGA detects that the fast OAM message is not received within a configuration period of more than 3.5 consecutive detections, the fast OAM message is The transceiver service path was interrupted.
  • the embodiment of the present invention further includes: after implementing the fast protection switching of the service forwarding path, the side-mounted FPGA reports the service path switching information to the controller via the OpenFlow proxy module in the SDN forwarding device.
  • FIG. 2 is a schematic structural diagram of a forwarding device that implements fast protection switching in an SDN architecture according to an embodiment of the present invention. As shown in FIG. 2, the method includes:
  • the drive module the controller, the side-mounted FPGA, and the switch chip; in one embodiment, an OpenFlow agent (OF-Agent) module may also be included.
  • OF-Agent OpenFlow agent
  • the driving module is configured to receive the service flow table and the service group table from the controller, extract the information from the service flow table and the service group table, and form a complete inbound and outbound service tree, and then deliver the information to the side-mounted FPGA, and the side
  • the hanging FPGA creates a complete inflow point, outflow point, and outgoing service tree according to the inbound and outbound service trees;
  • the side-mounted FPGA is configured to directly modify the service switching of the switch chip in the SDN forwarding device by using the inflow point, the outflow point, and the outbound service tree, and the saved protection path and protection parameters when the service path is interrupted. Issue a key to switch the service forwarding path to implement fast protection switching of the service forwarding path.
  • the driver module is further configured to receive the base OAM and the fast OAM from the controller and configure it into the side-mounted FPGA, and configure the protection path and the protection parameter unit.
  • a driving module configured to receive the protection path and the protection parameter from the controller, and configure the protection path and the protection parameter into the side-mounted FPGA.
  • the side-mounted FPGA is further configured to: when the side-mounted FPGA detects that the fast OAM message is not received within a configuration period of more than 3.5 continuity detections, the fast OAM The packet transmission and reception service path is interrupted.
  • the side-mounted FPGA is further configured to switch the service forwarding entry of the switch chip in the SDN forwarding device by using the inflow point, the outflow point, and the outbound service tree, and the saved protection path and protection parameters. Service forwarding path.
  • the side-mounted FPGA is further configured to report the service path by using the OpenFlow proxy module in the SDN forwarding device after the fast protection switching of the service forwarding path is implemented. Switching information to the controller.
  • the driver module in the SDN forwarding device of the embodiment of the present invention extracts information from the service flow table and the service group table and forms a complete entry and exit service tree.
  • the side-mounted FPGA After being sent to the side-mounted FPGA, the side-mounted FPGA creates a complete inflow point, outflow point, and out service tree according to the parameters of the inbound and outbound service trees, so that the service model is completely consistent with the switch chip;
  • the basic OAM and fast OAM configuration will also be forwarded to the side-mounted FPGA, so that the side-mounted FPGA can send and receive fast OAM messages to monitor the service path; the protection path and protection parameters under the controller are also forwarded.
  • the service forwarding entry of the switch chip can be directly modified to correctly switch the service forwarding path, thereby implementing fast protection switching of the service forwarding path.
  • FIG. 3 is a schematic diagram of each functional module in a forwarding device according to an embodiment of the present invention, as shown in FIG. 3, including:
  • the OF-Agent module is responsible for establishing a link with the controller, interacting with the controller, and reporting the message.
  • the OpenFlow protocol, network configuration (NET-CONF, Network Configuration) protocol, and simple network management protocol (SNMP, Simple Network Management Protocol) can be used.
  • the protocol and the like are described in the embodiment of the present invention by using the OpenFlow and NET-CONF protocols as an example.
  • API-Switch API conversion conforming to the TTP model, such as Broadcom's OF-DPA.
  • SDK Software development kit, compatible with ASIC chips.
  • ASIC chip a chip that is used for data exchange.
  • Driver module includes the hardware driver of the FPGA. In addition, it is responsible for buffering the flow table group table, analyzing the extracted stream points and the service tree.
  • FPGA A general-purpose FPGA.
  • FIG. 4 is a schematic diagram of a self-configuring ACL of a forwarding device according to an embodiment of the present invention.
  • the OF-Agent module is responsible for saving an ACL rule in a database, and the forwarding device is prioritized according to a conventional manner (without going through the API).
  • -Switch module Configure the forwarding rules of CC/CV packets. Therefore, the ASIC chip can correctly process CC/CV packets, and if it is forwarded to the next device or discarded, it needs to be forwarded to the FPGA module for processing by the forwarding device itself.
  • FIG. 5 is a schematic diagram of a configuration of a flow table and a group table according to an embodiment of the present invention.
  • the controller sends a service flow table and a service group table to an OF-Agent module through an OpenFlow protocol, and then distributes the same to the API- Switch module and Driver module.
  • the Driver module you only need to deliver the service flow table and service group table related to the service tree. For example, if you use the OF-DPA of Broadcom, you only need to deliver the service flow table and service group required to configure the service tree to the FPGA. table.
  • the API-Switch module calls the SDK to convert the flow table into logic and entries processed by the traditional chip architecture.
  • the Driver module saves the flow table group table and extracts the complete incoming and outgoing service tree and sends it to the side-mounted FPGA to create it in the FPGA. A complete inflow point, outflow point, and out of the business tree.
  • the flow point and the service tree are configured in the side-mounted FPGA based on the standard southbound interface.
  • the flow point and the service tree are configured in the side-mounted FPGA based on the standard southbound interface.
  • the service forwarding path described in the flow table entry and the group table is very different from the traditionally described service configuration. Therefore, it cannot be sent to the FPGA through the traditional method. It is necessary to cache and extract the corresponding entry and group table to construct a traditional The flow point and the service tree are finally sent by the FPGA interface.
  • the creation of the outflow point is exemplified by the group table in the OF-DPA of Broadcom.
  • the source MAC address of the interface group (Interface Group) in the Multi-Protocol Label Switch (MPLS) is obtained by the source access control (MAC).
  • the destination MAC address is the destination MAC address in the MPLS Interface Group of the group table.
  • the port is the output port of the L2 Interface Group pointed to by the MPLS Interface Group;
  • the virtual local area network (VLAN) ID is taken as the VLAN set in the MPLS Interface Group.
  • the label is the tunnel label set in the MPLS tunnel label 1 Group of the group table.
  • the tag takes the pseudowire label set in the MPLS L2 VPN Label Group.
  • the creation of the inflow point is exemplified by the flow table in the OF-DPA of Broadcom.
  • the ingress port of the entry in the ingress Port Flow Table of the port.
  • the VLAN ID is the VLAN ID of the entry in the VLAN Flow Table.
  • the label is taken from the label in the MPLS Flow 1 Table of the flow table, where the bottom of the stack (Bos, Bottom of Stack) is 0;
  • the label is taken from the label in the MPLS Flow 2 Table of the flow table, where Bos is 1.
  • the creation of the service tree is based on the group table in Broadcom's OF-DPA:
  • the path of the Vc flow point and the Vp flow point is taken as the MPLS Tunnel Label 1 Group pointed to by the MPLS L2 VPN Label Group;
  • the path of the Vp flow point and the Vc flow point is taken as the MPLS Interface Group pointed to by the MPLS Tunnel Label 1 Group;
  • each MPLS Flow Table does not determine its pipeline relationship through the entry, but only pops the label in sequence, and there is no relationship between the labels. Therefore, it is impossible to determine the inflow points Vc, Vp, and Vs by relying on each MPLS Flow Table.
  • the path is not created in the service tree.
  • the incomplete alarm of the incoming service tree of the FPGA is modified.
  • the segment layer, the tunnel, and the pseudowire are respectively protected and switched, and the alarm is not propagated to the client layer.
  • FIG. 6 is a schematic diagram of an OAM configuration according to an embodiment of the present invention.
  • the OAM function supported by the forwarding device is many and the configuration is also different.
  • the OAM function is classified into three types according to the embodiment of the present invention, as shown in Table 1, respectively.
  • For basic OAM configuration on-demand or slow OAM, fast OAM.
  • the fast OAM and the basic OAM configuration must be delivered to the side-mounted FPGA.
  • Table 1 OAM function classification table
  • RDI is implemented by relying on the extended RDI flag in the CC/CV frame. Therefore, the period in the traditional forwarding device is also consistent with the CC/CV packet transmission period, so it is also divided into fast OAM, which is implemented by the FPGA.
  • the ACL is directly configured in the original mode to control the forwarding of CC/CV packets.
  • FIG. 7 is a schematic diagram of a protection path and a protection parameter configuration according to an embodiment of the present invention.
  • the protection path needs to be sent to an ASIC chip and an FPGA to ensure that the working protection path of the FPGA is completely consistent with the ASIC, thereby allowing The FPGA directly modifies the entries in the ASIC chip to directly switch the service path to achieve fast protection.
  • the driver module can set the protection mode to 1+1 according to the traditional method.
  • the processing of the forwarding device in the embodiment of the present invention includes: for the fast CC/CV packet to be forwarded, the switching chip forwards the packet to the next forwarding device; and the CC/CV packet that needs to be directly discarded is directly discarded by the switching chip; The fast CC/CV message that needs to be processed is forwarded by the switch chip to the FPGA for processing.
  • the FPGA processes the fast CC/CV packet, and if the corresponding packet is not received within 3.5 configured periods, the switching chip service path forwarding entry is directly modified, thereby switching the service to the protection path.
  • the embodiment of the present invention constructs a fast protection switching function through the processing of the forwarding device and the configuration of the OAM and the FPGA.
  • the fast forwarding of the service forwarding path is implemented by the FPGA to switch the service forwarding path of the fast OAM packet and modify the switching path of the switching chip.
  • the FPGA modifies the service forwarding entry in the switch chip, and after the service path is switched, the path switching information is reported to the controller through the NET-CONF protocol, so that the OF-Agent and the controller control the service forwarding path on the forwarding device at all times. That is to say, the path switching is implemented by the FPGA actively modifying the ASIC chip entries, so the ASIC chip does not actively report the switching information to the controller, and the controller is responsible for managing all the forwarding devices, and needs real-time control over the real transmission path. Therefore, the FPGA needs to send a message to the OF-Agent immediately after switching the path, and then report it to the controller according to the standard interface.
  • FIG. 8 is a schematic diagram of a CC/CV packet forwarding process according to an embodiment of the present invention.
  • the packet in the figure is only a CC/CV packet.
  • the forwarding device 1 is a MEP
  • the forwarding device 2 is a MIP of the same level
  • the forwarding device 3 is a remote MEP
  • the MEP can be bound to a port, a tunnel, or a pseudowire.
  • the CC/CV packet in the forwarding device 1 is sent by the FPGA group packet to the switch chip, and then the switch chip forwards the packet to the downstream device.
  • the forwarding device 2 determines the packet from the ACL rule and the MIP configuration.
  • the specified port is forwarded to forwarding device 3.
  • the forwarding device 3 receives the packet, and because it is the remote MEP, the packet is forwarded to the FPGA according to the ACL rule.
  • the ASIC chip discards the packet directly, as shown in Figure 9, that is, it does not forward to the downstream device or forward to the FPGA.
  • the Down MEP is used as an example in Figure 8. It is also applicable to Up MEP. It is applicable to EFM (Ethernet in the First Mile), Connection Fault Management (CFM), and Forwarding Plane (TP). , Transport Profile) - MPLS OAM and Bi-directional Forwarding Detection (BFD).
  • EFM Ethernet in the First Mile
  • CFM Connection Fault Management
  • TP Forwarding Plane
  • Transport Profile MPLS OAM
  • BFD Bi-directional Forwarding Detection
  • FIG. 10 is a schematic diagram of a protection path and a working path switching process according to an embodiment of the present invention.
  • the path is interrupted (tunnel, pseudowire). Or the physical link), directly modify the service forwarding entry in the ASIC chip to switch the service from the working path to the protection path, as shown in Figure 9.
  • the service path is interrupted during the 1:1 protection, and the service transmission is switched. Go to the hold path.
  • the above implementation is applicable to EFM, CFM, TP-MPLS OAM, and BFD.
  • the protection mode is also applicable to 1:1 protection, 1+1, and ring protection. Since the principles of the ACL rules and the FPGA configuration processing are the same, they are not illustrated in the accompanying drawings.
  • the standard southbound interface configured by the non-flow table is not necessarily delivered by the NET-CONF protocol.
  • Other protocols, such as SNMP, are also included in this implementation.
  • This embodiment is not limited to Broadcom's K2 chip, and various chips from other manufacturers can also be used.
  • the principles of the embodiments of the present invention are exactly the same.
  • the slow OAM function is not described in detail in the embodiment of the present invention.
  • the slow OAM can also be implemented by using an FPGA.
  • the content of the embodiment of the present invention is also involved.
  • the NET-CONF protocol configuration used in the embodiment of the present invention is only for convenience of explaining the delivery of the non-flow table configuration, and is not limited to using a specific protocol, and may also be through a Simple Network Management Protocol (SNMP).
  • SNMP Simple Network Management Protocol
  • the protocol is issued; the naming of each module is only for better description of the processing flow, and is not limited to the name of the module. It is also possible to divide the same module function into multiple modules or to split and split multiple modules into different module implementations. Such as OF-Agent module, Driver module.
  • the fast forwarding of the OAM message by the FPGA and the switching of the service forwarding path by modifying the switch chip entry enable fast switching of the service forwarding path, and the advantage of the fast protection switching of the side-mounted FPGA is retained. This continues the competitiveness of the product.
  • the invention discloses a method and a forwarding device for implementing protection switching in an SDN architecture, comprising: a driving module in an SDN forwarding device receiving a service flow table and a service group table from the controller, from the service flow table and the service group table The information is extracted and formed into a complete inbound and outbound service tree, and then sent to the side-mounted FPGA; the side-mounted FPGA creates a complete inflow point, outflow point, and outgoing service tree according to the inbound and outbound service tree; when the detected service path occurs When the data is interrupted, the side-mounted FPGA uses the inflow point, the outflow point, and the outbound service tree, and the saved protection path and the protection parameter to directly modify the service forwarding entry of the switch chip in the SDN forwarding device to switch the service forwarding path. Fast protection switching of the service forwarding path.
  • the invention processes and processes fast OAM messages through FPGA transceiver and repairs Switching the switch table entry to switch the service forwarding path, so as to implement fast switching of the service forward

Abstract

Disclosed is a method for realizing protection switching in an SDN architecture and a forwarding device. The method comprises: a driver module in an SDN forwarding device receiving a service flow table and a service group table from a controller, extracting information from the service flow table and the service group table, forming same into a complete ingress/egress service tree and then delivering same to a side-hung FPGA; the side-hung FPGA creating, according to the ingress/egress service tree, a complete inflow point, outflow point and egress service tree; and when it is detected that a service path is interrupted, the side-hung FPGA directly modifying a service forwarding table entry of a switching chip in the SDN forwarding device using the inflow point, the outflow point and egress service and a protection path and a protection parameter saved thereby, so as to switch a service forwarding path, thereby realizing fast protection switching of the service forwarding path.

Description

一种SDN架构中实现保护倒换的方法及转发设备Method for implementing protection switching and forwarding device in SDN architecture
相关申请的交叉引用Cross-reference to related applications
本发明基于申请号为201610293768.1、申请日为2016年5月5日的中国专利申请提出,并要求该中国专利申请的优先权,该中国专利申请的内容在此引入本发明作为参考。The present invention is based on a Chinese patent application filed on Apr. 5, 2016, the entire disclosure of which is hereby incorporated by reference.
技术领域Technical field
本发明涉及快速保护倒换技术,更具体地,涉及一种软件定义网络(SDN,Software Defined Network)架构中实现保护倒换的方法及转发设备。The present invention relates to a fast protection switching technology, and more particularly to a method and a forwarding device for implementing protection switching in a Software Defined Network (SDN) architecture.
背景技术Background technique
面对数据流量的激增,基于传统的网络架构只会无限制的增加网络复杂度,无法满足业务发展的需要,而SDN通过把控制面与数据转发面解耦,构建开放的、可编程的网络体系,进而提供一个高效、灵活、便捷、可编程的网络环境,故被认为是下一代网络架构变革的最主要方向之一。In the face of the surge in data traffic, traditional network architectures will only increase the complexity of the network without restriction, and cannot meet the needs of business development. SDN decouples the control plane from the data forwarding plane to build an open, programmable network. The system, which provides an efficient, flexible, convenient, and programmable network environment, is considered one of the most important directions for the transformation of next-generation network architectures.
如今,SDN已经成为全球网络领域最热门研究方向,不仅仅主流运营商们正在积极推动北向、南向接口标准的制定,主流芯片厂商博通也提出了基于表类型模式(TTP,Table Type Patterns)模型,开放流数据面抽象(OF-DPA,Open Flow Data Plan Abstraction),以让传统芯片支持流表配置,中兴、华为、思科、爱立信、国际商业机器公司(IBM,International Business Machines Corporation)、惠普(HP,Hewlett-Packard)等互联网技术(IT,Internet Technology)厂商也正在加班加点研制自己的控制器和转发设备,以掌握标准制定的主动权,赢得市场先机。Nowadays, SDN has become the hottest research direction in the global network field. Not only mainstream operators are actively promoting the development of northbound and southbound interface standards, but mainstream chip maker Broadcom has also proposed a table type pattern based model (TTP). Open Channel Data Plan Abstraction (OF-DPA) to enable traditional chip support flow table configuration, ZTE, Huawei, Cisco, Ericsson, International Business Machines Corporation, IBM Internet technology (IT, Internet Technology) manufacturers such as HP, Hewlett-Packard) are also working overtime to develop their own controllers and forwarding devices to grasp the initiative of standard setting and win market opportunities.
转发设备上的功能可以按与业务的关系分为三类:基本业务、业务相 关、业务无关的功能。目前的开放流(OpenFlow)协议对于二层业务,二层虚拟专用网络(VPN,Virtual Private Network)业务的支持已经比较成熟;与业务无关的功能,如服务质量(QOS,Quality of Service)、告警、时钟等,完全可以按各厂家原有的传统方式实现;但是与业务相关的操作管理维护(OAM,Operation Administration and Maintenance)、保护功能就比较复杂了,因业务配置已经被流表组表替代,相比传统方式发生了本质变化,导致基本业务已经“不存在”了,若想完全按原来方式实现就必须要控制器额外提取抽象成传统业务并下发给转发设备,以便配置与业务相关的功能。The functions on the forwarding device can be divided into three categories according to the relationship with the service: basic service, business phase Off, business-independent features. Currently, the OpenFlow protocol supports the Layer 2 services and the Layer 2 virtual private network (VPN) services. The services that are not related to services, such as quality of service (QOS), and alarms. The clock, etc. can be implemented in the traditional way of each manufacturer; however, the OAM (Operation Administration and Maintenance) and protection functions are more complicated, because the service configuration has been replaced by the flow table group table. Compared with the traditional way, the basic changes have caused the basic service to be "non-existent". If you want to implement it completely in the original way, you must extract the abstraction into a traditional service and send it to the forwarding device in order to configure the service. The function.
SDN的核心思想是把设备控制面与转发面分离出来,其南向接口、北向接口必须使用运营商或者开放式网络基金会(ONF,Open Network Foundation)标准接口,否则各厂家提供的转发设备就无法实现互连互通及由任一控制器集中管理,也就失去了SDN的初衷,所以不可能由控制器下发任何私有配置信息以辅助配置与业务相关的功能。The core idea of SDN is to separate the control plane from the forwarding plane. The southbound interface and the northbound interface must use the operator or the Open Network Foundation (ONF) standard interface. Otherwise, the forwarding devices provided by each manufacturer will be Unable to achieve interconnection and centralized management by any controller, it loses the original intention of SDN, so it is impossible for the controller to issue any private configuration information to assist in the configuration of business-related functions.
对于传统业务的配置,如分组传送网(PTN,Packet Transport Network)设备,需要配置段层、隧道、伪线、业务,它们的身份标识号码(ID,Identity)也是唯一的。目前的TTP模型中其业务实现是以流表表项及组表经过转换后下发到集成电路(ASIC,Application Specific Integrated Circuit)(交换芯片)中,比如博通的OF-DPA。如果想要把OAM、保护功能完全通过交换芯片实现,可以使用芯片厂家的解决方案即可,这里不会出现问题,博通OF-DPA中对于OAM和保护的处理也正是完全由ASIC芯片实现,但是这并非最好的解决方案。For the configuration of a traditional service, such as a packet transport network (PTN) device, a segment layer, a tunnel, a pseudowire, and a service are required, and their ID numbers are unique. In the current TTP model, the service implementation is implemented by converting the flow table entries and the group tables to an ASIC (Application Specific Integrated Circuit) (Exchange Chip), such as Broadcom's OF-DPA. If you want to implement OAM and protection functions completely through the switch chip, you can use the chip manufacturer's solution. There is no problem here. The processing of OAM and protection in Broadcom OF-DPA is completely realized by ASIC chip. But this is not the best solution.
将来标准的南向接口对于OAM和保护的处理也必定会有转发设备实现,而不是控制器。但是转发设备中如果实现OAM、保护功能就是设备内部自己的事了。对于慢速(报文发送周期较大,如大于100ms)OAM报文的收发或者由于丢包率过高等引起的保护倒换由ASIC芯片处理非常恰当, 传统设备也通常这么实现,但是对于连续性检测(CC,Continuity Check)/连通性检测(CV,Connectivity Verification)报文,其发送间隔一般为3.3ms,由ASIC芯片处理并非最优选择,事实上,设备提供商的PTN设备对于快速OAM的报文及相应的保护倒换确实并不全是通过ASIC芯片实现,常见的处理方式为侧挂现场可编程门阵列(FPGA,Field-Programmable Gate Array)与ASIC芯片共同实现,侧挂FPGA负责快速OAM报文收发,ASIC芯片仅负责转发报文,当业务中断,是由FPGA直接修改ASIC转发路径表项实现快速保护倒换,这种利用FPGA的处理方式实现的快速保护倒换在同类设备中存在明显优势,快速保护倒换能力对于电信级业务至关重要,一般都以50ms作为红线。In the future, the standard southbound interface will also have a forwarding device implementation for OAM and protection processing, not a controller. However, if the OAM and protection functions are implemented in the forwarding device, it is the internal matter of the device. For the slow speed (the packet sending period is large, such as greater than 100ms), the OAM packet is sent or received, or the protection switching caused by the excessive packet loss rate is handled by the ASIC chip. Traditional devices are usually implemented as such, but for CC (Continuity Check)/Connectivity Verification (CV), the transmission interval is generally 3.3 ms, which is not optimally handled by the ASIC chip. The device provider's PTN device does not implement the fast OAM message and the corresponding protection switching through the ASIC chip. The common processing methods are the Field-Programmable Gate Array (FPGA) and the ASIC. The chips are implemented together. The side-mounted FPGA is responsible for sending and receiving fast OAM messages. The ASIC chip is only responsible for forwarding packets. When the service is interrupted, the FPGA directly modifies the ASIC forwarding path table to implement fast protection switching. This is realized by the processing method of the FPGA. Fast protection switching has obvious advantages in similar devices. The fast protection switching capability is very important for carrier-class services. Generally, 50ms is used as the red line.
但是使用传统的FPGA实现OAM保护收发及表项生成都需要配置传统业务,从而生成流点及业务树。而SDN架构下使用OpenFlow配置业务转发规则,是通过配置流表表项、组表实现,故标准的南向接口绝对不可能为了部分厂商设备去考虑额外从流表中抽象出传统业务并进行私有下发,以帮助转发设备实现OAM、保护功能,这也有违SDN的设计初衷。那么如何保留侧挂FPGA实现快速保护倒换的优势,进而延续产品竞争力,相关技术尚无有效解决方案。However, using traditional FPGAs to implement OAM protection, transceiver, and entry generation requires configuring traditional services to generate flow points and service trees. The SDN architecture uses OpenFlow to configure service forwarding rules. It is implemented by configuring flow table entries and group tables. Therefore, the standard southbound interface is absolutely impossible to consider the traditional services and abstract the traffic from the flow table for some vendors. It is issued to help the forwarding device implement OAM and protection functions. This is also contrary to the original intention of SDN design. So how to retain the advantages of the side-mounted FPGA to achieve fast protection switching, and thus continue the product competitiveness, there is no effective solution for related technologies.
发明内容Summary of the invention
根据本发明实施例提供的方案解决的技术问题是在检测到快速OAM报文收发业务路径发生中断时,无法保留侧挂FPGA实现快速保护倒换。The technical problem solved by the solution provided by the embodiment of the present invention is that when the fast OAM packet sending and receiving service path is interrupted, the side-mounted FPGA cannot be saved to implement fast protection switching.
根据本发明实施例提供的一种SDN架构中实现保护倒换的方法,包括:A method for implementing protection switching in an SDN architecture according to an embodiment of the present invention includes:
SDN转发设备中的驱动模块接收来自控制器的业务流表和业务组表,从所述业务流表和业务组表中提取信息并组成完整的入出业务树后下发到侧挂FPGA;The driving module in the SDN forwarding device receives the service flow table and the service group table from the controller, extracts the information from the service flow table and the service group table, and forms a complete entry and exit service tree, and then sends the data to the side-mounted FPGA;
所述侧挂FPGA根据所述入出业务树,创建完整的入流点、出流点和 出业务树;The side-mounted FPGA creates a complete inflow point, outflow point, and Out of the business tree;
在检测到业务路径发生中断时,所述侧挂FPGA利用所述入流点、出流点和出业务树以及其保存的保护路径和保护参数直接修改SDN转发设备中交换芯片的业务转发表项来切换业务转发路径,实现业务转发路径的快速保护倒换。When detecting that the service path is interrupted, the side-mounted FPGA directly modifies the service forwarding entry of the switch chip in the SDN forwarding device by using the inflow point, the outflow point, and the outbound service tree, and the saved protection path and the protection parameter. Switch the service forwarding path to implement fast protection switching of the service forwarding path.
上述方案中,还包括:Among the above solutions, it also includes:
SDN转发设备中的驱动模块接收来自控制器的基础OAM和快速OAM,并将其配置到所述侧挂FPGA中。The driver module in the SDN forwarding device receives the base OAM and fast OAM from the controller and configures it into the side-mounted FPGA.
上述方案中,还包括:Among the above solutions, it also includes:
SDN转发设备中的驱动模块接收来自控制器的保护路径和保护参数,并将其配置到所述侧挂FPGA中。A driver module in the SDN forwarding device receives the protection path and protection parameters from the controller and configures it into the side-mounted FPGA.
上述方案中,所述检测到业务路径发生中断包括:In the foregoing solution, the detecting that the service path is interrupted includes:
当所述侧挂FPGA检测到在大于3.5个连续性检测的配置周期内未接收到所述快速OAM报文时,则所述快速OAM报文的收发业务路径发生中断。When the side-mounted FPGA detects that the fast OAM packet is not received within a configuration period of more than 3.5 consecutive detections, the transmission and reception service path of the fast OAM packet is interrupted.
上述方案中,还包括:Among the above solutions, it also includes:
在实现业务转发路径的快速保护倒换后,所述侧挂FPGA经由SDN转发设备中OpenFlow代理模块上报业务路径切换信息给所述控制器。After the fast protection switching of the service forwarding path is implemented, the side-mounted FPGA reports the service path switching information to the controller via the OpenFlow proxy module in the SDN forwarding device.
根据本发明实施例提供的一种SDN架构中实现保护倒换的转发设备,包括:A forwarding device for implementing protection switching in an SDN architecture according to an embodiment of the present invention includes:
驱动模块、控制器、侧挂FPGA和交换芯片;其中,Driver module, controller, side-mounted FPGA, and switch chip;
驱动模块,配置为接收来自所述控制器的业务流表和业务组表,从所述业务流表和业务组表中提取信息,组成入出业务树后下发到所述侧挂FPGA;a driving module, configured to receive a service flow table and a service group table from the controller, extract information from the service flow table and the service group table, and form an entry and exit service tree, and then send the information to the side-mounted FPGA;
所述侧挂FPGA,配置为根据所述入出业务树,创建入流点、出流点和出业务树; The side-mounted FPGA is configured to create an inflow point, an outflow point, and an outgoing service tree according to the inbound and outbound service trees;
所述侧挂FPGA,配置为在检测到业务路径发生中断时,利用所述入流点、出流点和出业务树以及保存的保护路径和保护参数,修改所述交换芯片的业务转发表项来切换业务转发路径来进行业务转发路径的保护倒换。The side-mounted FPGA is configured to modify the service forwarding entry of the switch chip by using the inflow point, the outflow point, and the outbound service tree, and the saved protection path and protection parameters when the service path is interrupted. The service forwarding path is switched to perform protection switching of the service forwarding path.
上述方案中,所述驱动模块,还配置为接收来自所述控制器的基础OAM和快速OAM,配置到所述侧挂FPGA中。In the above solution, the driving module is further configured to receive a base OAM and a fast OAM from the controller, and configure the same into the side-mounted FPGA.
上述方案中,所述驱动模块,还配置为接收来自所述控制器的保护路径和保护参数,并配置到所述侧挂FPGA中。In the above solution, the driving module is further configured to receive a protection path and a protection parameter from the controller, and are configured in the side-mounted FPGA.
上述方案中,所述侧挂FPGA,还配置为检测到在大于3.5个连续性检测的配置周期内未接收到快速OAM报文时,则判定所述快速OAM报文的收发业务路径发生中断;所述侧挂FPGA,还配置为利用所述入流点、出流点和出业务树以及保存的保护路径和保护参数,修改所述交换芯片的业务转发表项来切换业务转发路径。In the foregoing solution, the side-mounted FPGA is further configured to: when it is detected that the fast OAM packet is not received in the configuration period of more than 3.5 consecutive detections, determine that the transmission and reception service path of the fast OAM packet is interrupted; The side-mounted FPGA is further configured to modify the service forwarding entry of the switch chip to switch the service forwarding path by using the inflow point, the outbound point, and the outbound service tree, and the saved protection path and the protection parameter.
上述方案中,还包括:Among the above solutions, it also includes:
OpenFlow代理模块;所述侧挂FPGA,还配置为在实现业务转发路径的保护倒换后,经由所述OpenFlow代理模块上报业务路径切换信息给所述控制器。The OpenFlow proxy module is configured to report the service path switching information to the controller via the OpenFlow proxy module after the protection switching of the service forwarding path is implemented.
本发明实施例具有以下有益效果:Embodiments of the present invention have the following beneficial effects:
由于侧挂FPGA与交换芯片中可以采用完全一致的业务配置和保护路径,所以其可以直接修改交换芯片的业务转发表项来正确切换业务转发路径,从而实现业务转发路径的快速保护倒换。Because the side-mounted FPGA and the switch chip can adopt the same service configuration and protection path, the service forwarding entry of the switch chip can be directly modified to correctly switch the service forwarding path, thereby implementing fast protection switching of the service forwarding path.
附图说明DRAWINGS
图1是本发明实施例提供的一种SDN架构中实现快速保护倒换的方法流程图;1 is a flowchart of a method for implementing fast protection switching in an SDN architecture according to an embodiment of the present invention;
图2是本发明实施例提供的一种SDN架构中实现快速保护倒换的转发设备的结构示意图; 2 is a schematic structural diagram of a forwarding device that implements fast protection switching in an SDN architecture according to an embodiment of the present disclosure;
图3是本发明实施例提供的转发设备中各功能模块示意图;3 is a schematic diagram of each functional module in a forwarding device according to an embodiment of the present invention;
图4是本发明实施例提供的转发设备自配置访问控制列表(ACL,Access Control List)的示意图;4 is a schematic diagram of a self-configuring access control list (ACL) of a forwarding device according to an embodiment of the present disclosure;
图5是本发明实施例提供的流表、组表配置示意图;5 is a schematic diagram of a flow table and a group table configuration according to an embodiment of the present invention;
图6是本发明实施例提供的OAM配置示意图;FIG. 6 is a schematic diagram of an OAM configuration according to an embodiment of the present invention;
图7是本发明实施例提供的保护路径及保护参数配置示意图;7 is a schematic diagram of a protection path and a protection parameter configuration according to an embodiment of the present invention;
图8是本发明实施例提供的CC/CV报文转发处理示意图;FIG. 8 is a schematic diagram of CC/CV packet forwarding processing according to an embodiment of the present invention;
图9是本发明实施例提供的CC/CV报文丢弃处理示意图;FIG. 9 is a schematic diagram of a CC/CV packet discarding process according to an embodiment of the present invention;
图10是本发明实施例提供的保护路径与工作路径倒换处理示意图。FIG. 10 is a schematic diagram of a protection path and a working path switching process according to an embodiment of the present invention.
具体实施方式detailed description
以下结合附图对本发明的优选实施例进行详细说明,应当理解,以下所说明的优选实施例仅用于说明和解释本发明,并不用于限定本发明。The preferred embodiments of the present invention are described in detail below with reference to the accompanying drawings.
图1是本发明实施例提供的一种SDN架构中实现保护倒换的方法流程图,如图1所示,包括:FIG. 1 is a flowchart of a method for implementing protection switching in an SDN architecture according to an embodiment of the present invention. As shown in FIG. 1 , the method includes:
步骤S101:SDN转发设备中的驱动模块接收来自控制器的业务流表和业务组表,从所述业务流表和业务组表中提取信息并组成完整的入出业务树后下发到侧挂FPGA;Step S101: The driving module in the SDN forwarding device receives the service flow table and the service group table from the controller, extracts information from the service flow table and the service group table, and forms a complete inbound and outbound service tree, and then sends the data to the side-mounted FPGA. ;
步骤S102:所述侧挂FPGA根据所述入出业务树,创建完整的入流点、出流点和出业务树;Step S102: The side-mounted FPGA creates a complete inflow point, outflow point, and out service tree according to the inbound and outbound service tree.
步骤S103:在检测到业务路径发生中断时,所述侧挂FPGA利用所述入流点、出流点和出业务树以及其保存的保护路径和保护参数直接修改SDN转发设备中交换芯片的业务转发表项来切换业务转发路径,实现业务转发路径的快速保护倒换。Step S103: When detecting that the service path is interrupted, the side-mounted FPGA directly modifies the service switch of the switch chip in the SDN forwarding device by using the inflow point, the outflow point, and the outbound service tree, and the saved protection path and the protection parameter. Issue a key to switch the service forwarding path to implement fast protection switching of the service forwarding path.
本发明实施例还包括:SDN转发设备中的驱动模块接收来自控制器的基础OAM和快速OAM,并将其配置到所述侧挂FPGA中,以及SDN转 发设备中的驱动模块接收来自控制器的保护路径和保护参数,并将其配置到所述侧挂FPGA中。The embodiment of the invention further includes: the driving module in the SDN forwarding device receives the basic OAM and the fast OAM from the controller, and configures the same into the side-mounted FPGA, and the SDN switch The driver module in the transmitting device receives the protection path and protection parameters from the controller and configures it into the side-mounted FPGA.
其中,所述检测到业务路径发生中断包括:当所述侧挂FPGA检测到在大于3.5个连续性检测的配置周期内未接收到所述快速OAM报文时,则所述快速OAM报文的收发业务路径发生中断。The detecting that the service path is interrupted includes: when the side-mounted FPGA detects that the fast OAM message is not received within a configuration period of more than 3.5 consecutive detections, the fast OAM message is The transceiver service path was interrupted.
本发明实施例还包括:在实现业务转发路径的快速保护倒换后,所述侧挂FPGA经由SDN转发设备中OpenFlow代理模块上报业务路径切换信息给所述控制器。The embodiment of the present invention further includes: after implementing the fast protection switching of the service forwarding path, the side-mounted FPGA reports the service path switching information to the controller via the OpenFlow proxy module in the SDN forwarding device.
图2是本发明实施例提供的一种SDN架构中实现快速保护倒换的转发设备的结构示意图,如图2所示,包括:2 is a schematic structural diagram of a forwarding device that implements fast protection switching in an SDN architecture according to an embodiment of the present invention. As shown in FIG. 2, the method includes:
驱动模块、控制器、侧挂FPGA和交换芯片;在一个实施例中,还可以包括OpenFlow代理(OF-Agent)模块。The drive module, the controller, the side-mounted FPGA, and the switch chip; in one embodiment, an OpenFlow agent (OF-Agent) module may also be included.
驱动模块,配置为接收来自控制器的业务流表和业务组表,从所述业务流表和业务组表中提取信息并组成完整的入出业务树后下发到侧挂FPGA,以及所述侧挂FPGA根据所述入出业务树,创建完整的入流点、出流点和出业务树;The driving module is configured to receive the service flow table and the service group table from the controller, extract the information from the service flow table and the service group table, and form a complete inbound and outbound service tree, and then deliver the information to the side-mounted FPGA, and the side The hanging FPGA creates a complete inflow point, outflow point, and outgoing service tree according to the inbound and outbound service trees;
所述侧挂FPGA,配置为在检测到业务路径发生中断时,利用所述入流点、出流点和出业务树以及其保存的保护路径和保护参数直接修改SDN转发设备中交换芯片的业务转发表项来切换业务转发路径,实现业务转发路径的快速保护倒换。The side-mounted FPGA is configured to directly modify the service switching of the switch chip in the SDN forwarding device by using the inflow point, the outflow point, and the outbound service tree, and the saved protection path and protection parameters when the service path is interrupted. Issue a key to switch the service forwarding path to implement fast protection switching of the service forwarding path.
在一个实施例中,驱动模块,还配置为接收来自控制器的基础OAM和快速OAM,并将其配置到所述侧挂FPGA中,以及配置保护路径和保护参数单元。In one embodiment, the driver module is further configured to receive the base OAM and the fast OAM from the controller and configure it into the side-mounted FPGA, and configure the protection path and the protection parameter unit.
驱动模块,配置为接收来自控制器的保护路径和保护参数,并将保护路径和保护参数配置到所述侧挂FPGA中。 And a driving module configured to receive the protection path and the protection parameter from the controller, and configure the protection path and the protection parameter into the side-mounted FPGA.
在一个实施例中,所述侧挂FPGA,还配置为当所述侧挂FPGA检测到在大于3.5个连续性检测的配置周期内未接收到所述快速OAM报文时,则所述快速OAM报文的收发业务路径发生中断;In one embodiment, the side-mounted FPGA is further configured to: when the side-mounted FPGA detects that the fast OAM message is not received within a configuration period of more than 3.5 continuity detections, the fast OAM The packet transmission and reception service path is interrupted.
在一个实施例中,所述侧挂FPGA还配置为利用所述入流点、出流点和出业务树以及其保存的保护路径和保护参数修改SDN转发设备中交换芯片的业务转发表项来切换业务转发路径。In an embodiment, the side-mounted FPGA is further configured to switch the service forwarding entry of the switch chip in the SDN forwarding device by using the inflow point, the outflow point, and the outbound service tree, and the saved protection path and protection parameters. Service forwarding path.
在一个实施例中,转发设备包括OF-Agent模块时,所述侧挂FPGA还配置为在实现业务转发路径的快速保护倒换后,所述侧挂FPGA经由SDN转发设备中OpenFlow代理模块上报业务路径切换信息给所述控制器。In an embodiment, when the forwarding device includes the OF-Agent module, the side-mounted FPGA is further configured to report the service path by using the OpenFlow proxy module in the SDN forwarding device after the fast protection switching of the service forwarding path is implemented. Switching information to the controller.
综上所述,本发明实施例SDN转发设备中的驱动模块接收来自控制器的业务流表和业务组表后,从所述业务流表和业务组表中提取信息并组成完整的入出业务树后下发到侧挂FPGA;所述侧挂FPGA根据所述入出业务树参数,创建完整的入流点、出流点及出业务树,从而使用其业务模型与交换芯片完全一致;控制器下发的基础OAM及快速OAM配置,也会转发到侧挂FPGA,从而让侧挂FPGA能够收发和处理快速OAM报文,以实现对业务路径的监控;控制器下的发保护路径和保护参数也转发到侧挂FPGA,以实现FPGA与交换芯片中的保护路径一致;侧挂FPGA通过快速OAM报文检测到业务路径发生中断时,由于侧挂FPGA与交换芯片中完全一致的业务配置和保护路径,所以其可以直接修改交换芯片的业务转发表项来正确切换业务转发路径,从而实现业务转发路径的快速保护倒换。In summary, after receiving the service flow table and the service group table from the controller, the driver module in the SDN forwarding device of the embodiment of the present invention extracts information from the service flow table and the service group table and forms a complete entry and exit service tree. After being sent to the side-mounted FPGA, the side-mounted FPGA creates a complete inflow point, outflow point, and out service tree according to the parameters of the inbound and outbound service trees, so that the service model is completely consistent with the switch chip; The basic OAM and fast OAM configuration will also be forwarded to the side-mounted FPGA, so that the side-mounted FPGA can send and receive fast OAM messages to monitor the service path; the protection path and protection parameters under the controller are also forwarded. To the side-mounted FPGA, to achieve the same protection path in the FPGA and the switch chip; when the side-mounted FPGA detects the interruption of the service path through the fast OAM packet, the service configuration and protection path are completely consistent between the side-mounted FPGA and the switch chip. Therefore, the service forwarding entry of the switch chip can be directly modified to correctly switch the service forwarding path, thereby implementing fast protection switching of the service forwarding path.
图3是本发明实施例提供的转发设备中各功能模块示意图,如图3所示,包括:FIG. 3 is a schematic diagram of each functional module in a forwarding device according to an embodiment of the present invention, as shown in FIG. 3, including:
控制器、OF-Agent模块、应用程序接口转换(API-Switch)模块、驱动(Driver)模块、FPGA、软件开发工具包(SDK,Software Development Kit)、操作系统(可以是Linux,也可以是VxWork等)和ASIC。 Controller, OF-Agent module, API-Switch module, Driver module, FPGA, Software Development Kit (SDK), operating system (can be Linux or VxWork) Etc) and ASIC.
OF-Agent模块:负责与控制器建立链接、与控制器进行交互配置、上报消息,可以通过OpenFlow协议、网络配置(NET-CONF,Network Configuration)协议、简单网络管理协议(SNMP,Simple Network Management Protocol)协议等,本发明实施例以OpenFlow和NET-CONF协议为例进行说明。The OF-Agent module is responsible for establishing a link with the controller, interacting with the controller, and reporting the message. The OpenFlow protocol, network configuration (NET-CONF, Network Configuration) protocol, and simple network management protocol (SNMP, Simple Network Management Protocol) can be used. The protocol and the like are described in the embodiment of the present invention by using the OpenFlow and NET-CONF protocols as an example.
API-Switch:符合TTP模型的API转换,比如博通的OF-DPA。API-Switch: API conversion conforming to the TTP model, such as Broadcom's OF-DPA.
SDK:软件开发工具包,与ASIC芯片配套。SDK: Software development kit, compatible with ASIC chips.
ASIC芯片:即交换芯片,用于进行数据交换的芯片。ASIC chip: a chip that is used for data exchange.
Driver模块:包括FPGA的硬件驱动,此外还负责缓存流表组表、分析提取流点及业务树。Driver module: includes the hardware driver of the FPGA. In addition, it is responsible for buffering the flow table group table, analyzing the extracted stream points and the service tree.
FPGA:通用的FPGA。FPGA: A general-purpose FPGA.
图4是本发明实施例提供的转发设备自配置ACL的示意图,如图4所示,OF-Agent模块负责把ACL规则保存在数据库中,在转发设备启动后便优先按传统方式(不经过API-Switch模块)把CC/CV报文的转发规则配置下去。以便ASIC芯片能正确处理CC/CV报文,除转发到下一设备或者丢弃外,需要转发设备本身处理的则转发到FPGA模块处理。FIG. 4 is a schematic diagram of a self-configuring ACL of a forwarding device according to an embodiment of the present invention. As shown in FIG. 4, the OF-Agent module is responsible for saving an ACL rule in a database, and the forwarding device is prioritized according to a conventional manner (without going through the API). -Switch module) Configure the forwarding rules of CC/CV packets. Therefore, the ASIC chip can correctly process CC/CV packets, and if it is forwarded to the next device or discarded, it needs to be forwarded to the FPGA module for processing by the forwarding device itself.
图5是本发明实施例提供的流表、组表配置示意图,如图5所示,控制器通过OpenFlow协议下发业务流表和业务组表到OF-Agent模块,然后由其分发给API-Switch模块和Driver模块。对于Driver模块,只需要下发与构建业务树有关的业务流表和业务组表即可,如使用博通的OF-DPA,则只需要下发向FPGA配置业务树需要的业务流表和业务组表。API-Switch模块调用SDK把流表转换成传统芯片架构处理的逻辑和表项;Driver模块保存流表组表并提取组成完整的入出业务树后下发到侧挂FPGA中,从而在FPGA中创建出完整的入流点、出流点和出业务树。FIG. 5 is a schematic diagram of a configuration of a flow table and a group table according to an embodiment of the present invention. As shown in FIG. 5, the controller sends a service flow table and a service group table to an OF-Agent module through an OpenFlow protocol, and then distributes the same to the API- Switch module and Driver module. For the Driver module, you only need to deliver the service flow table and service group table related to the service tree. For example, if you use the OF-DPA of Broadcom, you only need to deliver the service flow table and service group required to configure the service tree to the FPGA. table. The API-Switch module calls the SDK to convert the flow table into logic and entries processed by the traditional chip architecture. The Driver module saves the flow table group table and extracts the complete incoming and outgoing service tree and sends it to the side-mounted FPGA to create it in the FPGA. A complete inflow point, outflow point, and out of the business tree.
具体地说,基于标准南向接口实现在侧挂FPGA中配置流点及业务树, 包括:Specifically, the flow point and the service tree are configured in the side-mounted FPGA based on the standard southbound interface. include:
1、缓存业务流表、组表1, cache business flow table, group table
流表表项及组表描述的业务转发路径与传统直观描述的业务配置差别很大,所以不能通过传统的方式下发到FPGA,需要先缓存再提取相应的表项、组表构建出传统的流点及业务树,最后调用FPGA接口下发。The service forwarding path described in the flow table entry and the group table is very different from the traditionally described service configuration. Therefore, it cannot be sent to the FPGA through the traditional method. It is necessary to cache and extract the corresponding entry and group table to construct a traditional The flow point and the service tree are finally sent by the FPGA interface.
2、创建流点2, create a flow point
出流点的创建,以博通的OF-DPA中的组表为例。The creation of the outflow point is exemplified by the group table in the OF-DPA of Broadcom.
Vs流点的主要参数:The main parameters of the Vs flow point:
源媒体访问控制(MAC,Media Access Control)地址取组表多协议标签交换(MPLS,Multi-Protocol Label Switch)接口组(Interface Group)中的源MAC地址;The source MAC address of the interface group (Interface Group) in the Multi-Protocol Label Switch (MPLS) is obtained by the source access control (MAC).
目的MAC地址取组表MPLS Interface Group中的目的MAC地址;The destination MAC address is the destination MAC address in the MPLS Interface Group of the group table.
端口取组表MPLS Interface Group指向的L2 Interface Group的输出端口;The port is the output port of the L2 Interface Group pointed to by the MPLS Interface Group;
虚拟局域网(VLAN,Virtual Local Area Network)ID取组表MPLS Interface Group中设置的VLAN。The virtual local area network (VLAN) ID is taken as the VLAN set in the MPLS Interface Group.
Vp流点的主要参数:The main parameters of the Vp flow point:
标签取组表MPLS隧道标签(Tunnel Label)1 Group中设置的隧道标签。The label is the tunnel label set in the MPLS tunnel label 1 Group of the group table.
Vc流点的主要参数:The main parameters of the Vc flow point:
标签取组表MPLS L2 VPN Label Group中设置的伪线标签。The tag takes the pseudowire label set in the MPLS L2 VPN Label Group.
入流点的创建,以博通的OF-DPA中的流表为例。The creation of the inflow point is exemplified by the flow table in the OF-DPA of Broadcom.
Vs流点主要参数:Main parameters of Vs flow point:
端口取流表入口端口流表(Ingress Port Flow Table)中表项的入端口;The ingress port of the entry in the ingress Port Flow Table of the port.
VLAN ID取VLAN Flow Table中表项的VLAN ID; The VLAN ID is the VLAN ID of the entry in the VLAN Flow Table.
Vp流点主要参数:Main parameters of Vp flow point:
标签取自流表MPLS Flow 1 Table中标签,其中栈底(Bos,Bottom of Stack)为0;The label is taken from the label in the MPLS Flow 1 Table of the flow table, where the bottom of the stack (Bos, Bottom of Stack) is 0;
Vc流点主要参数:Main parameters of Vc flow point:
标签取自流表MPLS Flow 2 Table中标签,其中Bos为1。The label is taken from the label in the MPLS Flow 2 Table of the flow table, where Bos is 1.
3、创建业务树3, create a business tree
出业务树的创建,以博通的OF-DPA中的组表为例:The creation of the service tree is based on the group table in Broadcom's OF-DPA:
Vc流点与Vp流点的路径取MPLS L2 VPN Label Group指向的MPLS Tunnel Label 1 Group;The path of the Vc flow point and the Vp flow point is taken as the MPLS Tunnel Label 1 Group pointed to by the MPLS L2 VPN Label Group;
Vp流点与Vc流点的路径取MPLS Tunnel Label 1 Group指向的MPLS Interface Group;The path of the Vp flow point and the Vc flow point is taken as the MPLS Interface Group pointed to by the MPLS Tunnel Label 1 Group;
入业务树的处理,以博通的OF-DPA中的流表为例:For the processing of the incoming service tree, take the flow table in Broadcom's OF-DPA as an example:
由于各个MPLS Flow Table之间并没有通过表项确定其流水线关系,而是仅仅依序弹出标签,并没有标签之间的关系,故仅依靠各个MPLS Flow Table无法确定入流点Vc、Vp、Vs之前的路径,故不创建入业务树,同时修改FPGA对入业务树不完整的告警,对于OAM保护的实现则进行段层、隧道、伪线分别进行保护倒换,不向其客户层进行告警繁殖。Because each MPLS Flow Table does not determine its pipeline relationship through the entry, but only pops the label in sequence, and there is no relationship between the labels. Therefore, it is impossible to determine the inflow points Vc, Vp, and Vs by relying on each MPLS Flow Table. The path is not created in the service tree. At the same time, the incomplete alarm of the incoming service tree of the FPGA is modified. For the implementation of the OAM protection, the segment layer, the tunnel, and the pseudowire are respectively protected and switched, and the alarm is not propagated to the client layer.
图6是本发明实施例提供的OAM配置示意图,如图6所示,转发设备需要支持的OAM功能很多,配置也很多,本发明实施例把OAM功能分成三类,如表1所示,分别为基础OAM配置、按需或者慢速OAM、快速OAM。其中,快速OAM与基础OAM配置需要必须下发到侧挂FPGA中。FIG. 6 is a schematic diagram of an OAM configuration according to an embodiment of the present invention. As shown in FIG. 6 , the OAM function supported by the forwarding device is many and the configuration is also different. The OAM function is classified into three types according to the embodiment of the present invention, as shown in Table 1, respectively. For basic OAM configuration, on-demand or slow OAM, fast OAM. The fast OAM and the basic OAM configuration must be delivered to the side-mounted FPGA.
表1:OAM功能分类表Table 1: OAM function classification table
Figure PCTCN2017080147-appb-000001
Figure PCTCN2017080147-appb-000001
Figure PCTCN2017080147-appb-000002
Figure PCTCN2017080147-appb-000002
RDI是依赖在CC/CV帧中扩展的RDI标志位实现,所以传统转发设备中其周期也与CC/CV报文发送周期一致,故也划分到快速OAM,由FPGA实现。RDI is implemented by relying on the extended RDI flag in the CC/CV frame. Therefore, the period in the traditional forwarding device is also consistent with the CC/CV packet transmission period, so it is also divided into fast OAM, which is implemented by the FPGA.
由于博通提供的Policy ACL Flow Table流表表项并不能区分CC/CV报文,故通过原来的方式直接调用SDK去配置ACL,从而通过ACL控制CC/CV报文的转发处理。 Because the Policy ACL Flow Table table entry provided by Broadcom does not distinguish between CC/CV packets, the ACL is directly configured in the original mode to control the forwarding of CC/CV packets.
图7是本发明实施例提供的保护路径及保护参数配置示意图,如图7所示,保护路径需要下发到了ASIC芯片和FPGA,以保证FPGA的工作保护路径与ASIC中完全一致,从而可以让FPGA直接修改ASIC芯片中的表项以直接切换业务路径,达到快速保护的目的。7 is a schematic diagram of a protection path and a protection parameter configuration according to an embodiment of the present invention. As shown in FIG. 7, the protection path needs to be sent to an ASIC chip and an FPGA to ensure that the working protection path of the FPGA is completely consistent with the ASIC, thereby allowing The FPGA directly modifies the entries in the ASIC chip to directly switch the service path to achieve fast protection.
对于保护配置的流表组表,如博通的OF-DPA中的MPLS 1+1头端保护组(Head End Protection Group),Driver模块收到入即可按传统方式设置保护方式为1+1。For the flow table group table of the protection configuration, such as the MPLS 1+1 Head End Protection Group in the OF-DPA of Broadcom, the driver module can set the protection mode to 1+1 according to the traditional method.
本发明实施例中转发设备的处理,包括:对于需要转发的快速CC/CV报文,由交换芯片转发给下一个转发设备;对于需要直接丢弃的CC/CV报文,由交换芯片直接丢弃;对于需要处理的快速CC/CV报文,由交换芯片转发给FPGA处理。The processing of the forwarding device in the embodiment of the present invention includes: for the fast CC/CV packet to be forwarded, the switching chip forwards the packet to the next forwarding device; and the CC/CV packet that needs to be directly discarded is directly discarded by the switching chip; The fast CC/CV message that needs to be processed is forwarded by the switch chip to the FPGA for processing.
所述FPGA处理快速CC/CV报文,如果在3.5个已配置周期内收不到相应的报文,则直接修改交换芯片业务路径转发表项,从而把业务切换到保护路径。The FPGA processes the fast CC/CV packet, and if the corresponding packet is not received within 3.5 configured periods, the switching chip service path forwarding entry is directly modified, thereby switching the service to the protection path.
综上所述,本发明实施例经过转发设备的处理及OAM、FPGA的配置共同构建了快速保护倒换功能的实现方法。通过FPGA对于快速OAM报文收发处理及通过修改交换芯片表项切换业务转发路径,从而实现业务转发路径的快速切换。In summary, the embodiment of the present invention constructs a fast protection switching function through the processing of the forwarding device and the configuration of the OAM and the FPGA. The fast forwarding of the service forwarding path is implemented by the FPGA to switch the service forwarding path of the fast OAM packet and modify the switching path of the switching chip.
所述FPGA修改交换芯片中的业务转发表项,切换业务路径后,需要通过NET-CONF协议上报路径切换信息给控制器,以便OF-Agent与控制器时刻掌控转发设备上的业务转发路径。也就是说,路径切换是通过FPGA主动修改ASIC芯片表项实现的,所以不会导致ASIC芯片主动上报切换信息到控制器,而控制器负责管理所有转发设备,需要对真实的传输路径实时掌控,所以需要FPGA切换路径后立即发送消息到OF-Agent,从而按标准接口上报给控制器。 The FPGA modifies the service forwarding entry in the switch chip, and after the service path is switched, the path switching information is reported to the controller through the NET-CONF protocol, so that the OF-Agent and the controller control the service forwarding path on the forwarding device at all times. That is to say, the path switching is implemented by the FPGA actively modifying the ASIC chip entries, so the ASIC chip does not actively report the switching information to the controller, and the controller is responsible for managing all the forwarding devices, and needs real-time control over the real transmission path. Therefore, the FPGA needs to send a message to the OF-Agent immediately after switching the path, and then report it to the controller according to the standard interface.
图8是本发明实施例提供的CC/CV报文转发处理示意图,如图8所示,由于只关心CC/CV报文,故图中报文只是CC/CV报文。图中转发设备1为MEP,转发设备2为同等级的MIP,转发设备3为远端MEP,MEP可以绑定到端口、隧道或伪线。FIG. 8 is a schematic diagram of a CC/CV packet forwarding process according to an embodiment of the present invention. As shown in FIG. 8, since the CC/CV packet is only concerned, the packet in the figure is only a CC/CV packet. In the figure, the forwarding device 1 is a MEP, the forwarding device 2 is a MIP of the same level, and the forwarding device 3 is a remote MEP, and the MEP can be bound to a port, a tunnel, or a pseudowire.
转发设备1中CC/CV报文由FPGA组包发送到交换芯片,再由交换芯片通过端口转发到下游设备,转发设备2收到该报文后,经ACL规则及MIP配置决定把报文从指定端口转发到转发设备3。转发设备3收到报文,由于自己是远端MEP,根据ACL规则把报文转发到FPGA处理。The CC/CV packet in the forwarding device 1 is sent by the FPGA group packet to the switch chip, and then the switch chip forwards the packet to the downstream device. After receiving the packet, the forwarding device 2 determines the packet from the ACL rule and the MIP configuration. The specified port is forwarded to forwarding device 3. The forwarding device 3 receives the packet, and because it is the remote MEP, the packet is forwarded to the FPGA according to the ACL rule.
当CC/CV报文中的等级小于转发设备配置的MEP等级时,ASIC芯片将直接丢弃该报文,如图9所示,即不向下游设备转发也不向FPGA转发.When the level of the CC/CV packet is smaller than the MEP level configured by the forwarding device, the ASIC chip discards the packet directly, as shown in Figure 9, that is, it does not forward to the downstream device or forward to the FPGA.
其中,图8中以Down MEP为例说明,对于Up MEP同样适用,适用于第一英里以太网(EFM,Ethernet in the First Mile)、连接故障管理(CFM,Connectivity Fault Management)、转发平面(TP,Transport Profile)-MPLS OAM及双向转发检测(BFD,Bi-directional Forwarding Detection)。The Down MEP is used as an example in Figure 8. It is also applicable to Up MEP. It is applicable to EFM (Ethernet in the First Mile), Connection Fault Management (CFM), and Forwarding Plane (TP). , Transport Profile) - MPLS OAM and Bi-directional Forwarding Detection (BFD).
图10是本发明实施例提供的保护路径与工作路径倒换处理示意图,当FPGA在大于3.5个连接性检测的配置周期收不到CC/CV报文时,则视该路径中断(隧道、伪线或者物理链路),则直接修改ASIC芯片中的业务转发表项,以把业务从工作路径切换到保护路径,如图9,图中为1:1保护时工作路径业务中断,把业务传输切换到保持路径上。10 is a schematic diagram of a protection path and a working path switching process according to an embodiment of the present invention. When an FPGA fails to receive CC/CV packets in a configuration period of more than 3.5 connectivity detections, the path is interrupted (tunnel, pseudowire). Or the physical link), directly modify the service forwarding entry in the ASIC chip to switch the service from the working path to the protection path, as shown in Figure 9. In the figure, the service path is interrupted during the 1:1 protection, and the service transmission is switched. Go to the hold path.
以上所述实施方式适用于EFM、CFM、TP-MPLS OAM和BFD,保护方式也适用于1:1保护、1+1和环形保护。由于对ACL规则及FPGA配置处理方式原理一致,故未分别附图说明。同样,非流表配置的标准南向接口也未必是采用NET-CONF协议下发,使用其它协议也可以,如SNMP,也属于此实施方式范畴。The above implementation is applicable to EFM, CFM, TP-MPLS OAM, and BFD. The protection mode is also applicable to 1:1 protection, 1+1, and ring protection. Since the principles of the ACL rules and the FPGA configuration processing are the same, they are not illustrated in the accompanying drawings. Similarly, the standard southbound interface configured by the non-flow table is not necessarily delivered by the NET-CONF protocol. Other protocols, such as SNMP, are also included in this implementation.
本实施方式并不限于博通的K2芯片,其它厂商的各种芯片也可以采用 本发明的实施方式,原理完全一样。This embodiment is not limited to Broadcom's K2 chip, and various chips from other manufacturers can also be used. The principles of the embodiments of the present invention are exactly the same.
本发明实施例内容中并未详细介绍慢速OAM功能,慢速OAM也可以通过FPGA实现,与快速OAM一样,也是本发明实施例所涉及的内容。The slow OAM function is not described in detail in the embodiment of the present invention. The slow OAM can also be implemented by using an FPGA. Like the fast OAM, the content of the embodiment of the present invention is also involved.
本发明实施例中的使用的NET-CONF协议配置只是为了方便说明非流表配置的下发,并不限于使用某个具体协议,也可以通过简单网络管理协议(SNMP,Simple Network Management Protocol)等协议下发;各个模块的命名,只是为了更好的描述处理流程,并不仅限于此模块名,也可以把同一个模块功能分成多个模块或者把多个模块整合分拆成不同的模块实现,如OF-Agent模块、Driver模块。The NET-CONF protocol configuration used in the embodiment of the present invention is only for convenience of explaining the delivery of the non-flow table configuration, and is not limited to using a specific protocol, and may also be through a Simple Network Management Protocol (SNMP). The protocol is issued; the naming of each module is only for better description of the processing flow, and is not limited to the name of the module. It is also possible to divide the same module function into multiple modules or to split and split multiple modules into different module implementations. Such as OF-Agent module, Driver module.
根据本发明实施例提供的方案,通过FPGA收发处理快速OAM报文及通过修改交换芯片表项切换业务转发路径,从而实现业务转发路径的快速切换,保留了侧挂FPGA实现快速保护倒换的优势,进而延续了产品的竞争力。According to the solution provided by the embodiment of the present invention, the fast forwarding of the OAM message by the FPGA and the switching of the service forwarding path by modifying the switch chip entry enable fast switching of the service forwarding path, and the advantage of the fast protection switching of the side-mounted FPGA is retained. This continues the competitiveness of the product.
尽管上文对本发明进行了详细说明,但是本发明不限于此,本技术领域技术人员可以根据本发明的原理进行各种修改。因此,凡按照本发明原理所作的修改,都应当理解为落入本发明的保护范围。Although the invention has been described in detail above, the invention is not limited thereto, and various modifications may be made by those skilled in the art in accordance with the principles of the invention. Therefore, modifications made in accordance with the principles of the invention are to be understood as falling within the scope of the invention.
工业实用性Industrial applicability
本发明公开了一种SDN架构中实现保护倒换的方法及转发设备,包括:SDN转发设备中的驱动模块接收来自控制器的业务流表和业务组表,从所述业务流表和业务组表中提取信息并组成完整的入出业务树后下发到侧挂FPGA;所述侧挂FPGA根据所述入出业务树,创建完整的入流点、出流点和出业务树;在检测到业务路径发生中断时,所述侧挂FPGA利用所述入流点、出流点和出业务树以及其保存的保护路径和保护参数直接修改SDN转发设备中交换芯片的业务转发表项来切换业务转发路径,实现业务转发路径的快速保护倒换。本发明通过FPGA收发处理快速OAM报文及通过修 改交换芯片表项切换业务转发路径,从而实现业务转发路径的快速切换。 The invention discloses a method and a forwarding device for implementing protection switching in an SDN architecture, comprising: a driving module in an SDN forwarding device receiving a service flow table and a service group table from the controller, from the service flow table and the service group table The information is extracted and formed into a complete inbound and outbound service tree, and then sent to the side-mounted FPGA; the side-mounted FPGA creates a complete inflow point, outflow point, and outgoing service tree according to the inbound and outbound service tree; when the detected service path occurs When the data is interrupted, the side-mounted FPGA uses the inflow point, the outflow point, and the outbound service tree, and the saved protection path and the protection parameter to directly modify the service forwarding entry of the switch chip in the SDN forwarding device to switch the service forwarding path. Fast protection switching of the service forwarding path. The invention processes and processes fast OAM messages through FPGA transceiver and repairs Switching the switch table entry to switch the service forwarding path, so as to implement fast switching of the service forwarding path.

Claims (10)

  1. 一种软件定义网络SDN架构中实现保护倒换的方法,包括:A method for implementing protection switching in a software-defined network SDN architecture includes:
    SDN转发设备中的驱动模块接收来自控制器的业务流表和业务组表,从所述业务流表和业务组表中提取信息,组成入出业务树后下发到侧挂现场可编程门阵列FPGA;The driving module in the SDN forwarding device receives the service flow table and the service group table from the controller, extracts information from the service flow table and the service group table, and forms an incoming and outgoing service tree, and then sends the data to the side-mounted field programmable gate array FPGA. ;
    所述侧挂FPGA根据所述入出业务树,创建入流点、出流点和出业务树;The side-mounted FPGA creates an inflow point, an outflow point, and an outgoing service tree according to the inbound and outbound service trees;
    检测到业务路径发生中断,所述侧挂FPGA利用所述入流点、出流点和出业务树、以及保存的保护路径和保护参数,修改所述SDN转发设备中交换芯片的业务转发表项来切换业务转发路径,通过切换业务转发路径来进行业务转发路径的保护倒换。Detecting that the service path is interrupted, the side-mounted FPGA uses the inflow point, the outflow point, and the outbound service tree, and the saved protection path and the protection parameter to modify the service forwarding entry of the switch chip in the SDN forwarding device. Switching the service forwarding path and switching the service forwarding path to perform protection switching of the service forwarding path.
  2. 根据权利要求1所述的方法,其中,还包括:The method of claim 1 further comprising:
    所述SDN转发设备中的驱动模块接收来自所述控制器的基础操作管理维护OAM和快速OAM配置,并下发到所述侧挂FPGA中。The driving module in the SDN forwarding device receives the basic operation management and maintenance OAM and the fast OAM configuration from the controller, and sends the configuration to the side-mounted FPGA.
  3. 根据权利要求1或2所述的方法,其中,还包括:The method of claim 1 or 2, further comprising:
    所述SDN转发设备中的驱动模块接收来自所述控制器的保护路径和保护参数,并配置到所述侧挂FPGA中。A drive module in the SDN forwarding device receives a protection path and a protection parameter from the controller and is configured into the side-mounted FPGA.
  4. 根据权利要求1所述的方法,其中,所述检测到业务路径发生中断包括:The method of claim 1, wherein the detecting that the service path is interrupted comprises:
    当所述侧挂FPGA检测到在大于3.5个连续性检测的配置周期内未接收到快速OAM报文时,则判定所述快速OAM报文的收发业务路径发生中断。When the side-mounted FPGA detects that the fast OAM packet is not received within the configuration period of the greater than 3.5 continuation detections, it determines that the transmission and reception service path of the fast OAM packet is interrupted.
  5. 根据权利要求1、2或4所述的方法,其中,还包括:The method of claim 1, 2 or 4, further comprising:
    在进行业务转发路径的保护倒换后,所述侧挂FPGA经由所述SDN转发设备中的开放流OpenFlow代理模块上报业务路径切换信息给所述控制器。 After performing the protection switching of the service forwarding path, the side-mounted FPGA reports the service path switching information to the controller via the OpenFlow OpenFlow proxy module in the SDN forwarding device.
  6. 一种软件定义网络SDN转发设备,包括:A software defined network SDN forwarding device, comprising:
    驱动模块、控制器、侧挂现场可编程门阵列FPGA和交换芯片;其中,a driving module, a controller, a side-mounted field programmable gate array FPGA, and a switching chip;
    所述驱动模块,配置为接收来自所述控制器的业务流表和业务组表,从所述业务流表和业务组表中提取信息,组成入出业务树后下发到所述侧挂FPGA;The driving module is configured to receive a service flow table and a service group table from the controller, extract information from the service flow table and the service group table, and form an entry and exit service tree, and then send the information to the side-mounted FPGA;
    所述侧挂FPGA,配置为根据所述入出业务树,创建入流点、出流点和出业务树;The side-mounted FPGA is configured to create an inflow point, an outflow point, and an outgoing service tree according to the inbound and outbound service trees;
    所述侧挂FPGA,配置为在检测到业务路径发生中断时,利用所述入流点、出流点和出业务树以及保存的保护路径和保护参数,修改所述交换芯片的业务转发表项来切换业务转发路径,通过切换业务转发路径来进行业务转发路径的保护倒换。The side-mounted FPGA is configured to modify the service forwarding entry of the switch chip by using the inflow point, the outflow point, and the outbound service tree, and the saved protection path and protection parameters when the service path is interrupted. Switching the service forwarding path and switching the service forwarding path to perform protection switching of the service forwarding path.
  7. 根据权利要求6所述的SDN转发设备,其中,The SDN forwarding device according to claim 6, wherein
    所述驱动模块,还配置为接收来自所述控制器的基础操作管理维护OAM和快速OAM,配置到所述侧挂FPGA中。The driving module is further configured to receive a basic operation management maintenance OAM and a fast OAM from the controller, and configure the same into the side-mounted FPGA.
  8. 根据权利要求6或7所述的SDN转发设备,其中,The SDN forwarding device according to claim 6 or 7, wherein
    所述驱动模块,还配置为接收来自所述控制器的保护路径和保护参数,并配置到所述侧挂FPGA中。The driving module is further configured to receive a protection path and a protection parameter from the controller and configure the same into the side-mounted FPGA.
  9. 根据权利要求6所述的SDN转发设备,The SDN forwarding device according to claim 6,
    所述侧挂FPGA,还配置为检测到在大于3.5个连续性检测的配置周期内未接收到快速OAM报文时,则判定所述快速OAM报文的收发业务路径发生中断;The side-mounted FPGA is further configured to: when it is detected that a fast OAM packet is not received in a configuration period of more than 3.5 consecutive detections, determine that the transmission and reception service path of the fast OAM packet is interrupted;
    所述侧挂FPGA,还配置为利用所述入流点、出流点和出业务树以及保存的保护路径和保护参数,修改所述交换芯片的业务转发表项来切换业务转发路径。The side-mounted FPGA is further configured to modify the service forwarding entry of the switch chip to switch the service forwarding path by using the inflow point, the outbound point, and the outbound service tree, and the saved protection path and the protection parameter.
  10. 根据权利要求6、7或9所述的SDN转发设备,还包括: The SDN forwarding device according to claim 6, 7 or 9, further comprising:
    开放流OpenFlow代理模块;Open flow OpenFlow agent module;
    所述侧挂FPGA,还配置为在实现业务转发路径的保护倒换后,经由所述OpenFlow代理模块上报业务路径切换信息给所述控制器。 The side-mounted FPGA is further configured to report the service path switching information to the controller by using the OpenFlow proxy module after the protection switching of the service forwarding path is implemented.
PCT/CN2017/080147 2016-05-05 2017-04-11 Method for realizing protection switching in sdn architecture and forwarding device WO2017190579A1 (en)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201610293768.1 2016-05-05
CN201610293768.1A CN107347033A (en) 2016-05-05 2016-05-05 The method and device of quick protective switch is realized in a kind of SDN frameworks

Publications (1)

Publication Number Publication Date
WO2017190579A1 true WO2017190579A1 (en) 2017-11-09

Family

ID=60202683

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2017/080147 WO2017190579A1 (en) 2016-05-05 2017-04-11 Method for realizing protection switching in sdn architecture and forwarding device

Country Status (2)

Country Link
CN (1) CN107347033A (en)
WO (1) WO2017190579A1 (en)

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114205172A (en) * 2021-12-28 2022-03-18 杭州迪普信息技术有限公司 Table item issuing method and message forwarding method
CN115499272A (en) * 2022-07-29 2022-12-20 天翼云科技有限公司 Inter-cloud high-speed link switching method and device and computer equipment
WO2023273941A1 (en) * 2021-06-29 2023-01-05 中兴通讯股份有限公司 Path switching method, controller, node and storage medium

Families Citing this family (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN111147399A (en) * 2018-11-06 2020-05-12 中国移动通信有限公司研究院 Switch configuration method, switch and controller
CN112218181B (en) * 2019-07-12 2022-08-30 烽火通信科技股份有限公司 Protection switching method and system
CN111698326B (en) * 2020-06-12 2023-01-31 北京百度网讯科技有限公司 Method and device for determining cost attribution of cloud service resources
CN112217721A (en) * 2020-09-29 2021-01-12 北京东土军悦科技有限公司 Communication path determining method in switching chip, computer device and storage medium
CN114500248B (en) * 2022-04-01 2022-08-05 北京锐融天下科技股份有限公司 Monitoring and alarming method and system for service in Internet software system
CN115834498B (en) * 2023-01-06 2023-05-02 北京中科网威信息技术有限公司 Service acceleration method, device, equipment and medium

Citations (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102185784A (en) * 2011-05-26 2011-09-14 杭州华三通信技术有限公司 Automatic protection switching method and device
CN103200122A (en) * 2013-03-05 2013-07-10 中兴通讯股份有限公司 Processing method and system for group table in software definition network, and controller
CN104205745A (en) * 2014-04-04 2014-12-10 华为技术有限公司 Method and device for processing message
WO2015032027A1 (en) * 2013-09-03 2015-03-12 华为技术有限公司 Method, controller, device and system for protecting service path
CN104734773A (en) * 2015-04-16 2015-06-24 上海斐讯数据通信技术有限公司 C-type optical link protection switching optimization method of GPON (Gigabit Passive Optical Network)
CN105207824A (en) * 2015-10-19 2015-12-30 广州西麦科技股份有限公司 SDN based automatic protection switching system and method
CN105553746A (en) * 2016-01-08 2016-05-04 广州西麦科技股份有限公司 Automatic configuration migration system and method based on SDN (Software Defined Network)

Patent Citations (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102185784A (en) * 2011-05-26 2011-09-14 杭州华三通信技术有限公司 Automatic protection switching method and device
CN103200122A (en) * 2013-03-05 2013-07-10 中兴通讯股份有限公司 Processing method and system for group table in software definition network, and controller
WO2015032027A1 (en) * 2013-09-03 2015-03-12 华为技术有限公司 Method, controller, device and system for protecting service path
CN104205745A (en) * 2014-04-04 2014-12-10 华为技术有限公司 Method and device for processing message
CN104734773A (en) * 2015-04-16 2015-06-24 上海斐讯数据通信技术有限公司 C-type optical link protection switching optimization method of GPON (Gigabit Passive Optical Network)
CN105207824A (en) * 2015-10-19 2015-12-30 广州西麦科技股份有限公司 SDN based automatic protection switching system and method
CN105553746A (en) * 2016-01-08 2016-05-04 广州西麦科技股份有限公司 Automatic configuration migration system and method based on SDN (Software Defined Network)

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2023273941A1 (en) * 2021-06-29 2023-01-05 中兴通讯股份有限公司 Path switching method, controller, node and storage medium
CN114205172A (en) * 2021-12-28 2022-03-18 杭州迪普信息技术有限公司 Table item issuing method and message forwarding method
CN115499272A (en) * 2022-07-29 2022-12-20 天翼云科技有限公司 Inter-cloud high-speed link switching method and device and computer equipment
CN115499272B (en) * 2022-07-29 2023-05-30 天翼云科技有限公司 Inter-cloud high-speed-based link switching method and device and computer equipment

Also Published As

Publication number Publication date
CN107347033A (en) 2017-11-14

Similar Documents

Publication Publication Date Title
WO2017190579A1 (en) Method for realizing protection switching in sdn architecture and forwarding device
US8842550B2 (en) Scalable connectivity fault management in a bridged/virtual private LAN service environment
EP2721777B1 (en) Methods and devices for monitoring a data path
EP2725742B1 (en) Method and device for processing location information about fault point
US8451837B1 (en) Discovery of MPLS VPN links
CN102340447B (en) Remote port mirroring realization system and method
WO2018210213A1 (en) Method and device for implementing ioam packaging and storage medium
WO2012106869A1 (en) Message processing method and related device thereof
CN103703722A (en) Bootstrapping fault detection sessions over a p2mp tunnel
WO2011144068A2 (en) Method and apparatus for reporting network packet-loss information
CN110324165A (en) The management method of the network equipment, apparatus and system
WO2015143802A1 (en) Service function chaining processing method and device
WO2020168854A1 (en) Evpn multicast method, apparatus and system
WO2013185567A1 (en) Apparatus and method for protecting and switching packet transport network
WO2014019348A1 (en) Method, device and system for operation, management and maintenance of oam configuration
JP2020510337A5 (en)
EP2728797B1 (en) Message processing method, device and system
TW201534081A (en) Network devices and loopback detection methods
WO2013166911A1 (en) Method for processing conflict of identifiers of device groups in network, and route bridge
US8724454B2 (en) System and method for summarizing alarm indications in a network environment
US20120269056A1 (en) Method, device, and system for protecting semi-ring network
WO2020147683A1 (en) Method for creating connectivity detection session, and network device and system
CN110380966A (en) A kind of method and its relevant device finding forward-path
EP1770905B1 (en) Detecting inactive links in a communication network
KR101629089B1 (en) Hybrid openFlow method for combining legacy switch protocol function and SDN function

Legal Events

Date Code Title Description
NENP Non-entry into the national phase

Ref country code: DE

121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 17792406

Country of ref document: EP

Kind code of ref document: A1

122 Ep: pct application non-entry in european phase

Ref document number: 17792406

Country of ref document: EP

Kind code of ref document: A1