WO2017211116A1 - 一种实现边界网关协议二维路由的方法和装置 - Google Patents

一种实现边界网关协议二维路由的方法和装置 Download PDF

Info

Publication number
WO2017211116A1
WO2017211116A1 PCT/CN2017/079740 CN2017079740W WO2017211116A1 WO 2017211116 A1 WO2017211116 A1 WO 2017211116A1 CN 2017079740 W CN2017079740 W CN 2017079740W WO 2017211116 A1 WO2017211116 A1 WO 2017211116A1
Authority
WO
WIPO (PCT)
Prior art keywords
dimensional
routing
capability
bgp
peer
Prior art date
Application number
PCT/CN2017/079740
Other languages
English (en)
French (fr)
Inventor
戴春宁
金飞蔡
李庆宁
张征
Original Assignee
中兴通讯股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 中兴通讯股份有限公司 filed Critical 中兴通讯股份有限公司
Publication of WO2017211116A1 publication Critical patent/WO2017211116A1/zh

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00—Routing or path finding of packets in data switching networks
    • H04L45/02—Topology update or discovery
    • H04L45/04—Interdomain routing, e.g. hierarchical routing
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00—Routing or path finding of packets in data switching networks
    • H04L45/54—Organization of routing tables
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00—Routing or path finding of packets in data switching networks
    • H04L45/74—Address processing for routing
    • H04L45/745—Address table lookup; Address filtering

Definitions

  • This document relates to, but is not limited to, the field of communication technologies, and in particular, to a method and apparatus for implementing two-dimensional routing of a border gateway protocol.
  • the traditional destination-based routing protocol (herein referred to as the one-dimensional routing protocol) can no longer meet the needs of users. For example, the multi-homing problem in the network cannot be solved.
  • the traditional routing protocol only looks at the destination address and treats all sources equally. However, in practical applications, different sources may require different services.
  • a device that supports a two-dimensional routing protocol can redistribute traffic from different sources during routing to achieve traffic balancing, routing security, and other purposes.
  • the activating sequence 2 (AS2) domain is simultaneously connected to two upstream Internet Service Providers (ISPs), namely ISP0 (referred to as P0) and ISP1 (referred to as P1). .
  • ISPs Internet Service Providers
  • P0 ISP0
  • P1 ISP1
  • the router E0 E0 is the number, and the following router E0 is abbreviated as E0.
  • the default route is advertised to other routers in the domain.
  • router E1 (E1 is numbered) according to the delivery policy of ISP1, will issue default routes to other routers in the domain ( ::/0, P1), indicating that the traffic from P1 to destination::/0 can reach the destination through router E1.
  • router E2 After receiving these route advertisements, router E2 will calculate two paths to go to :::0. The result of the calculation is that the traffic from the source prefix P0 is forwarded to E0, and the traffic from the source prefix P1 is forwarded to E1.
  • the implementation of the two-dimensional routing is limited to the intra-domain network, and there is no inter-domain routing protocol that supports the inter-domain two-dimensional routing.
  • the deployment of the two-dimensional routing network in the related art is mostly static configuration mode, configuration maintenance work. A lot.
  • Embodiments of the present invention provide a method and apparatus for implementing two-dimensional routing of a border gateway protocol, which can implement two-dimensional routing between domains, rapidly deploy a two-dimensional routing network, facilitate network management, and optimize network performance.
  • the embodiment of the invention provides a method for implementing two-dimensional routing of a border gateway protocol, the method comprising:
  • the BGP two-dimensional routing is sent to the peer routing device; and the BGP two-dimensional routing capability is successfully negotiated with the peer routing device.
  • border gateway protocol BGP two-dimensional routing sending capability and/or receiving capability negotiation is performed with the peer routing device, including:
  • the two-dimensional routing capability code is a new capability code, and includes any combination of the following parameters: a capability code code, a capability code value length, and a capability code value, where the capability code value includes any combination of the following parameters: an address family, The sub-address family and whether it has the ability to receive and send two-dimensional routes to the specified address family and sub-address family.
  • the BGP two-dimensional route is to extend the network layer reachability information NLRI format of the BGP protocol, and add source address information in a one-dimensional NLRI format to form a two-dimensional NLRI format including a quaternary group;
  • the four-tuple includes: a destination address length, a destination address prefix, a source address length, and a source address prefix.
  • the method further includes:
  • performing border gateway protocol BGP two-dimensional routing sending capability with the peer routing device and/or Or receiving capacity negotiation including:
  • the initial OPEN message of the BGP protocol is sent to the peer routing device, and the BGP two-dimensional routing capability and/or the receiving capability are negotiated by carrying the two-dimensional routing capability code in the OPEN message.
  • the sending the BGP two-dimensional route to the peer routing device includes: when sending the UPDATE packet to the peer routing device, encoding the route according to the BGP two-dimensional routing format;
  • the receiving the BGP two-dimensional route sent by the peer routing device includes: when receiving the updated UPDATE message sent by the peer routing device, decoding the route according to the BGP two-dimensional routing format.
  • An embodiment of the present invention provides an apparatus for implementing two-dimensional routing of a border gateway protocol, including:
  • the two-dimensional routing capability negotiation module is configured to negotiate with the peer routing device for the border gateway protocol BGP two-dimensional routing sending capability and/or receiving capability;
  • the two-way routing sending and receiving module is configured to send a BGP two-dimensional route to the peer routing device when the BGP two-dimensional routing capability is successfully negotiated with the peer routing device; and successfully negotiate with the peer routing device. In the case of the two-dimensional route receiving capability, the BGP two-dimensional route sent by the peer routing device is received.
  • the two-dimensional routing capability negotiation module is configured to: perform border gateway protocol BGP two-dimensional routing sending capability and/or receiving capability negotiation with the peer routing device, including:
  • the two-dimensional routing capability code is a new capability code, and includes any combination of the following parameters: a capability code code, a capability code value length, and a capability code value, where the capability code value includes any combination of the following parameters: an address family, The sub-address family and whether it has the ability to receive and send two-dimensional routes to the specified address family and sub-address family.
  • the BGP two-dimensional routing includes: extending a network layer reachability information NLRI format of the BGP protocol, adding source address information in a one-dimensional NLRI format, and forming a two-dimensional NLRI format including a quaternary group;
  • the quaternary includes the following parameters: destination address length, destination Address prefix, source address length, source address prefix.
  • the two-dimensional routing sending and receiving module is further configured to: after receiving the BGP two-dimensional route sent by the peer routing device, update the BGP two-dimensional routing to the two-dimensional routing table, where The two-dimensional routing table uses the destination address prefix and the source address prefix as key values.
  • the two-dimensional routing capability negotiation module is configured to: send an initial OPEN message of the BGP protocol to the peer routing device, and send the BGP two-dimensional routing capability by carrying the two-dimensional routing capability code in the OPEN message. / or receiving ability to negotiate.
  • the two-dimensional routing sending and receiving module is configured to: when the BGP two-dimensional routing capability is successfully negotiated with the peer routing device, when the UPDATE packet is sent to the peer routing device, the BGP two-dimensional routing format is used. The route is encoded. When the BGP two-dimensional route receiving capability is successfully negotiated with the peer routing device, the route is decoded according to the BGP two-dimensional routing format when receiving the updated UPDATE message sent by the peer routing device.
  • the technical solution provided by the embodiment of the present invention includes: performing a Border Gateway Protocol (BGP) two-dimensional routing sending capability and/or receiving capability with the peer routing device; and successfully negotiating with the peer routing device. If the BGP two-way routing capability is enabled, the BGP two-dimensional route is sent to the peer routing device. If the BGP two-dimensional routing capability is successfully negotiated with the peer routing device, the BGP two-dimensional route sent by the peer routing device is received. .
  • the embodiment of the invention implements two-dimensional routing between domains, improves the efficiency of deploying two-dimensional routing network and network management, and optimizes network performance.
  • the method and device for implementing the two-dimensional routing of the border gateway protocol enable the dynamic learning of the two-dimensional routing between the domains by extending the BGP and BGP routing table management on the basis of the device supporting the two-dimensional routing and forwarding. .
  • Two-dimensional routing is relative to one-dimensional routing, and source address information is added to the content.
  • the network layer reachability information (NLRI) that originally carries the destination address information is extended to a two-dimensional NLRI structure (TwoD-NLRI).
  • the BGP protocol adds two-dimensional route receiving and sending capabilities.
  • the device advertised routes that support this capability are coded according to the Two D-NLRI format, and the received routes are decoded according to the TwoD-NLRI format.
  • the received BGP route is no longer managed with the destination prefix as the key value. Instead, the destination prefix and the source prefix are simultaneously managed as key values to implement BGP two-dimensional routing table management.
  • FIG. 1 is a schematic diagram of intra-domain two-dimensional routing in a multi-homed environment in the related art.
  • FIG. 2 is a flowchart of a method for implementing two-dimensional routing of a border gateway protocol according to an embodiment of the present invention.
  • FIG. 3 is a schematic diagram of an apparatus for implementing two-dimensional routing of a border gateway protocol according to an embodiment of the present invention.
  • FIG. 4 is a schematic diagram of supporting inter-domain two-dimensional routing according to Embodiment 1 of the present invention.
  • FIG. 5 is a schematic diagram of supporting inter-domain two-dimensional routing according to Embodiment 2 of the present invention.
  • FIG. 6 is a schematic diagram of supporting inter-domain two-dimensional routing according to Embodiment 3 of the present invention.
  • Border Gateway Protocol As the current mainstream inter-domain routing protocol, has natural scalability.
  • the BGP protocol and BGP routing table management can be extended to implement dynamic learning of two-dimensional routes between domains. Two-dimensional routing is relative to one-dimensional routing, and source address information is added to the content.
  • the route learning process in order to carry the source address information, the NLRI structure originally carrying the destination address information is expanded into a two-dimensional NLRI structure (TwoD-NLRI).
  • TwoD-NLRI two-dimensional NLRI structure
  • the BGP protocol adds two-way route receiving and sending capabilities.
  • the device advertised routes that support this capability are coded according to the TwoD-NLRI format, and the received routes are decoded according to the TwoD-NLRI format.
  • the received BGP route is no longer managed with the destination prefix as the key value. Instead, the destination prefix and the source prefix are simultaneously managed as key values to implement BGP two-dimensional routing table management.
  • the NLRI is composed of a destination address binary group ⁇ dst-Length, dst-Prefix>.
  • the two-dimensional NLRI (TwoD-NLRI) needs to add source address information on the original basis to form four. Tuple ⁇ dst-Length, dst-Prefix, src-Length, src-Prefix> ( ⁇ destination address length, destination address prefix, source address length, source address prefix>).
  • a new capability code is added, that is, a new two-dimensional routing capability code is added, and the two-dimensional routing capability code is configured to indicate whether the device has the capability of receiving and transmitting two-dimensional routes.
  • the format of the newly added two-dimensional routing capability code may be ⁇ Capability Code, Capability Length, Capability Value> ( ⁇ capability code code, length of capability code value, capability code value>), and the new two-dimensional routing capability code
  • the format is as described in IETF RFC5492.
  • the format of the capability value field of the newly added two-dimensional routing capability code is as shown in Table 3, and includes the following fields:
  • AFI Address Family Identifier
  • the address family includes: Ipv4(1), Ipv6(2);
  • IPv4 stands for Internet Protocol Version 4
  • Ipv6 stands for the next version of Ipv4 (Internet Protocol Version 6);
  • SAFI Subsequent Address Family Identifier
  • the sub-address family includes: unicast forwarding(1);
  • the number in parentheses is the value of the sub-address family; unicast forwarding represents unicast forwarding;
  • the sending capability indicates that the two-dimensional routing of the corresponding address family is supported
  • the receiving capability indicates that the two-dimensional routing supporting the corresponding address family is supported
  • the sending and receiving capabilities are (Both), indicating support for sending and receiving two-dimensional routes of the corresponding address family.
  • the router After the router receives the OPEN packet from the peer device, if the OPEN packet carries the two-dimensional routing capability, and the corresponding address family and sub-address family of the device support the two-dimensional routing, the two-way routing capability negotiation is considered successful. If the two-way route receiving capability is carried in the OPEN packet, and the corresponding address family and sub-address family of the device support the transmission of the two-dimensional route, the two-way routing capability negotiation is considered successful.
  • the two-dimensional route obtained after decoding is decoded according to the TwoD-NLRI format.
  • the key value of the two-dimensional route in the RIB is changed from ⁇ Pd> ( ⁇ destination address>) to ⁇ Pd, Ps> ( ⁇ destination address, source address) >).
  • the UPDATE packet is sent to the neighboring device.
  • the routing prefix of the corresponding address family is encoded, the encoding is performed according to the TwoD-NLRI format.
  • src-length can be filled with all 0s.
  • the device sends an UPDATE packet to the neighbor device.
  • the corresponding address family routing prefix is encoded, it is encoded in the NLRI format.
  • the address information, for the processing of aggregated route attributes, is in accordance with the description of IETF RFC4271.
  • the routing table contains only reachability information, that is, the next hop information of the packet is sent to the destination address.
  • the data structure is generally a prefix tree consisting of a destination prefix.
  • the tree node contains the next hop information.
  • the router maintains the reachability information by searching and updating the prefix tree. .
  • the routing table includes not only the reachability information but also the source identity information, that is, the packet from a certain source address is sent to the next hop information of the target address.
  • the source prefix information is additionally included, that is, the source IP address field and the source IP address mask field.
  • the routing table in the two-dimensional route can also be organized into corresponding data structures, such as a two-dimensional tree.
  • the tree of the first dimension stores the destination prefix, and each node of the destination prefix tree points to a subtree, and each subtree is composed of The corresponding source prefix is composed, and the next hop information is included in each node in the subtree.
  • an embodiment of the present invention provides a method for implementing two-dimensional routing of a border gateway protocol, where the method includes:
  • S210 Perform Border Gateway Protocol (BGP) two-dimensional routing transmission capability and/or receiving capability negotiation with the peer routing device.
  • BGP Border Gateway Protocol
  • S220 Sending a BGP two-dimensional route to the peer routing device when the BGP two-way routing capability is successfully negotiated with the peer routing device, and receiving the BGP two-dimensional routing capability when the peer routing device negotiates the BGP two-dimensional routing capability successfully.
  • the method may further include:
  • border gateway protocol BGP two-dimensional routing sending capability and/or receiving capability negotiation is performed with the peer routing device, including:
  • the negotiation with the peer routing device for the BGP two-dimensional routing capability and/or the receiving capability of the border gateway protocol includes:
  • the device determines that the BGP two-dimensional routing capability is successfully negotiated with the peer routing device.
  • the device determines that the BGP two-dimensional routing capability is successfully negotiated with the peer routing device.
  • border gateway protocol BGP two-dimensional routing sending capability and/or receiving capability negotiation is performed with the peer routing device, including:
  • the two-dimensional routing capability code is a new capability code, and may include any combination of the following parameters: a capability code code, a capability code value length, and a capability code value.
  • the capability code value includes any combination of the following parameters: an address family and a sub-address family. And whether it has the ability to receive and send two-dimensional routes to a specified address family and sub-address family.
  • the address family parameter and the sub-address family parameter jointly define the semantics of the network layer reachability information NLRI;
  • the address family includes: Ipv4(1), Ipv6(2);
  • the sub-address family includes: unicast forwarding(1);
  • the (address family, sub-address family) value in the capability code value field of the two-dimensional routing capability code is (2, 1), it indicates that the device has the capability of receiving or transmitting a two-dimensional route to ipv6unicast;
  • the (address family, sub-address family) value in the capability code value field of the two-dimensional routing capability code is (1, 1), it indicates that the device has the capability of receiving or transmitting a two-dimensional route to ipv4unicast;
  • the border routing protocol BGP two-dimensional routing sending capability and/or receiving capability negotiation is performed with the peer routing device, including: sending an initial OPEN message of the BGP protocol to the peer routing device, and carrying the second in the OPEN message.
  • the dimension routing capability code negotiates the BGP two-dimensional routing capability and/or the receiving capability.
  • the BGP two-way route is sent to the peer routing device, and the route is encoded according to the BGP two-dimensional routing format when the UPDATE packet is sent to the peer routing device.
  • Receiving the BGP two-dimensional route sent by the peer routing device including: when receiving the updated UPDATE packet sent by the peer routing device, decoding the route according to the BGP two-dimensional routing format;
  • the BGP two-dimensional route extends the network layer reachability information (NLRI) format of the BGP protocol, and adds source address information in a one-dimensional NLRI format to form a two-dimensional NLRI format including four elements, and four elements.
  • the group includes the following parameters: destination address length, destination address prefix, source address length, and source address prefix.
  • the embodiment of the present invention further includes: updating the BGP two-dimensional route to the two-dimensional routing table, wherein the two-dimensional routing table uses the destination address prefix and The source address prefix is also a key value.
  • the method of the embodiment of the present invention further includes: when the BGP two-dimensional routing capability is negotiated with the peer routing device, the routing is performed according to the one-dimensional NLRI routing format;
  • the source address information of the two-dimensional route is omitted.
  • the embodiment of the invention further provides a computer storage medium, wherein the computer storage medium stores computer executable instructions, and the computer executable instructions are used to execute the foregoing method for implementing two-dimensional routing of the border gateway protocol.
  • An embodiment of the present invention further provides an apparatus for implementing two-dimensional routing of a border gateway protocol, including: a memory and a processor;
  • the processor is configured to execute program instructions in the memory
  • BGP peer routing device
  • an embodiment of the present invention provides an apparatus for implementing two-dimensional routing of a border gateway protocol, including:
  • the two-dimensional routing capability negotiation module 301 is configured to perform border gateway protocol BGP two-dimensional routing sending capability and/or receiving capability negotiation with the peer routing device.
  • the two-way routing sending and receiving module 302 is configured to send a BGP two-dimensional route to the peer routing device when the BGP two-dimensional routing capability is successfully negotiated with the peer routing device, and successfully negotiate with the peer routing device. In the case of the dimension routing receiving capability, the BGP two-dimensional route sent by the peer routing device is received.
  • the apparatus of the embodiment of the present invention may further include:
  • the two-dimensional routing capability negotiation module 301 is configured to perform the border gateway protocol BGP two-dimensional routing sending capability and/or the receiving capability negotiation with the peer routing device, including: sending a two-dimensional routing capability code pair boundary with the peer routing device
  • the gateway protocol BGP two-dimensional routing capability and/or receiving capability are negotiated; wherein the two-dimensional routing capability code is a new capability code, including any combination of the following parameters: capability code code, capability code value length, and capability code value, capability
  • the code value includes any combination of the following parameters: address family, sub-address family, and whether it has the ability to receive and transmit two-dimensional routes to a specified address family and sub-address family.
  • the BGP two-dimensional route extends the network layer reachability information NLRI format of the BGP protocol, and adds source address information in a one-dimensional NLRI format to form a two-dimensional NLRI format including a quaternary group, and the quaternary group includes Number: destination address length, destination address prefix, source address length, source address prefix.
  • the two-dimensional routing sending and receiving module 302 is further configured to: after receiving the BGP two-dimensional route sent by the peer routing device, update the BGP two-dimensional routing to the two-dimensional routing table, where the two-dimensional routing table The destination address prefix and the source address prefix are both key values.
  • the two-dimensional routing capability negotiation module 301 is configured to: send an initial OPEN message of the BGP protocol to the peer routing device, and send the BGP two-dimensional routing capability by carrying the two-dimensional routing capability code in the OPEN message and/or Or receiving capabilities for negotiation;
  • the two-way routing sending and receiving module 302 is configured to: send an update UPDATE to the peer routing device if the BGP two-dimensional routing capability is successfully negotiated with the peer routing device.
  • the route is encoded according to the BGP two-dimensional routing format.
  • the BGP two-dimensional route receiving capability is successfully negotiated with the peer routing device, when the updated UPDATE packet sent by the peer routing device is received, The BGP two-dimensional routing format decodes the route.
  • the border device of the AS1 domain assumes that R1 and R2 support two-dimensional routing forwarding, and R1 has obtained the trusted source of the access server (SERVER) 192:168:1::0/64, and R2 has been obtained. Accessing the trusted source of SERVER 192:168:2::0/64, sharing the streams from different sources through R1 and R2. If you want to perform traffic load balancing in the AS2 domain, you can upgrade the border devices R3, R4, and R5 of the AS2 domain to support two-dimensional routing and forwarding, and upgrade the BGP protocol according to the present invention to support dynamic learning of two-dimensional routes.
  • the external border gateway protocol (EBGP) neighbors are established between R1 and R3, and the receiving and advertising capabilities of the two-dimensional route are enabled.
  • EBGP external border gateway protocol
  • An EBGP neighbor relationship is established between R2 and R4, and the receiving and sending capabilities of the two-dimensional route are enabled.
  • IBGP internal border gateway protocol
  • An IBGP neighbor relationship is established between R4 and R5, and the receiving and sending capabilities of the two-dimensional route are enabled.
  • R1 configure the network (network) 10:1:1::0/64 192:168:1::0/64 to route the two-dimensional (10:1:1::0/64,192:168:1: :0/64) Introduces BGP and sends the two-dimensional route to R3.
  • R2 configure the network 10:1:1::0/64 192:168:2::0/64 to route the two-dimensional route (10:1:1::0/64,192:168:2::0/ 64) Introducing BGP and sending the two-dimensional route to R4.
  • R3 and R4 respectively pass the received two-dimensional route to R5.
  • R5 receives the traffic, forwards the source address and 192:168:1::0/64 matching traffic to R3; forwards the source address and 192:168:2::0/64 matching traffic to R4, and the pair is from Load sharing of different source address streams.
  • the border device R1 of the AS1 domain supports two-dimensional routing and forwarding, and has obtained the trusted source address 192:168:1::0/64 for accessing the SERVER, and the attack can be performed on the R1 device.
  • Flow filtering If you want to filter the attack flow in the AS2 domain, you can upgrade AS2.
  • the border devices R2 and R3 of the domain support two-dimensional routing and forwarding, and upgrade the BGP protocol to support dynamic learning of two-dimensional routes.
  • An EBGP neighbor is established between R1 and R2, and the receiving and sending capabilities of the two-dimensional route are enabled.
  • An IBGP neighbor is established between R2 and R3, and the receiving and sending capabilities of the two-dimensional route are enabled.
  • R1 configures network 10:1:1::0/64 192:168:1::0/64 to route two-dimensional (10:1:1::0/64, 192:168:1::0/64) Introduce BGP and send the two-dimensional route to R2.
  • R2 passes the route to R3.
  • R3 will deliver the route to the forwarding plane. R3 will only receive the traffic matching the source address and 192:168:1::0/64. Therefore, the traffic from the untrusted source 192:168:2::1 will be discarded by filtering.
  • the border device R1 of the AS1 domain supports two-dimensional routing and forwarding, and has obtained the trusted source address 192:168:1::0/64 for accessing the SERVER, and the attack can be performed on the R1 device.
  • Flow filtering If you want to filter the attack flow in the AS2 domain, but the AS2 device cannot perform two-dimensional route upgrade on all border devices, there will be a network with one-way route and two-way route hybrid. For example, in AS2, R2 can be upgraded, and R3 cannot be upgraded. Finally, the attack traffic can be filtered on the R2 device.
  • An EBGP neighbor is established between R1 and R2, and the receiving and sending capabilities of the two-dimensional route are enabled.
  • An IBGP neighbor relationship is established between R2 and R3.
  • the receiving capability of the two-dimensional route is not enabled, and the sending capability of the two-dimensional route is not enabled.
  • R1 configures network 10:1:1::0/64 192:168:1::0/64 to route two-dimensional (10:1:1::0/64, 192:168:1::0/64) Introduce BGP and send the two-dimensional route to R2.
  • R2 After R2 aggregates the two-dimensional route, it converts it into a one-dimensional route (10:1:1::0/64) and passes it to R3.
  • R3 delivers the route to the forwarding plane. R3 cannot filter traffic. Traffic from 192:168:1::1 and 192:168:2::1 is forwarded.
  • R2 only receives the source address and 192:168:1::0/64 matching traffic, so traffic from 192:168:2::1 is filtered and discarded.
  • a method and device for implementing two-dimensional routing of a border gateway protocol provided by the foregoing embodiments are provided
  • the BGP Border Gateway Protocol
  • BGP routing table management are implemented to implement dynamic learning of two-dimensional routing between domains.
  • Two-dimensional routing is relative to one-dimensional routing, and source address information is added to the content.
  • the NLRI Network Layer Reachability Information
  • TwoD-NLRI two-dimensional NLRI structure
  • the BGP protocol adds a two-dimensional route receiving and advertising capability.
  • the device advertisement route supporting the capability is coded according to the TwoD-NLRI format, and the received route is decoded according to the TwoD-NLRI format.
  • the received BGP route is no longer managed with the destination prefix as the key value. Instead, the destination prefix and the source prefix are simultaneously managed as key values to implement BGP two-dimensional routing table management.
  • each module/unit in the foregoing embodiment may be implemented in the form of hardware, for example, by implementing an integrated circuit to implement its corresponding function, or may be implemented in the form of a software function module, for example, being executed by a processor and stored in a memory. Programs/instructions to implement their respective functions.
  • the invention is not limited to any specific form of combination of hardware and software.
  • the above technical solution realizes two-dimensional routing between domains, improves the efficiency of deploying two-dimensional routing network and network management, and optimizes network performance.

Abstract

一种实现边界网关协议二维路由的方法，包括：与对端路由设备进行边界网关协议(BGP)二维路由发送能力和/或接收能力进行协商；在与对端路由设备协商成功BGP二维路由发送能力的情况下，向对端路由设备发送BGP二维路由；在与对端路由设备协商成功BGP二维路由接收能力的情况下，接收对端路由设备发送的BGP二维路由。本发明实施例实现了域间二维路由，提升了部署二维路由网络和网络管理的效率，优化了网络性能。

Description

一种实现边界网关协议二维路由的方法和装置 技术领域
本文涉及但不限于通信技术领域，尤其涉及一种实现边界网关协议二维路由的方法和装置。
背景技术
传统的基于目的地址的路由协议(这里称之为一维路由协议)已无法满足用户的需求，比如无法解决网络中的多宿主问题，传统的路由协议只查看目的地址，对所有的源一视同仁，但在实际应用中，不同的源可能需要不同的服务。
支持二维路由协议的设备，可以通过在路由决策的时候引入源地址，从而达到在路由的时候区分来自不同源的流量，实现流量均衡、路由安全等其它目的。
比如，在图1中，激活序列2(AS2，activating sequence2)域同时与两个上游互联网服务提供商(ISP，Internet Service Provider,)相连接，分别是ISP0(简称P0)和ISP1(简称P1)。在AS2域中，如果升级域内路由协议后支持了二维路由的动态学习，则路由器E0(E0为编号，以下路由器E0简写为E0)根据ISP0下发策略，会向域内其他路由器发布默认路由(::/0，P0)，表明从P0去往目的::/0的流量可以经过路由器E0到达目的；路由器E1(E1为编号)根据ISP1的下发策略，会向域内其他路由器发布默认路由(::/0，P1)，表明从P1去往目的::/0的流量可以经过路由器E1到达目的，在收到这些路由通告之后，路由器E2会计算出去往::/0的两条路径，计算结果是将来自源前缀P0的流量转发至E0，将来自源前缀P1的流量转发至E1。
在相关技术中，二维路由的实现仅限于域内网络，尚无支持域间二维路由的域间路由协议，并且，相关技术中对二维路由网络的部署多为静态配置方式，配置维护工作量很大。
发明概述
以下是对本文详细描述的主题的概述。本概述并非是为了限制权利要求 的保护范围。
本发明实施例提供一种实现边界网关协议二维路由的方法和装置，能够实现域间二维路由，快速的部署二维路由网络，方便网络管理，优化网络性能。
本发明实施例提供了一种实现边界网关协议二维路由的方法，该方法包括：
与对端路由设备进行边界网关协议BGP二维路由发送能力和/或接收能力协商；
在与对端路由设备协商成功BGP二维路由发送能力的情况下，向所述对端路由设备发送BGP二维路由；在与对端路由设备协商成功BGP二维路由接收能力的情况下，接收所述对端路由设备发送的BGP二维路由。
可选地，与对端路由设备进行边界网关协议BGP二维路由发送能力和/或接收能力协商，包括：
与对端路由设备之间通过发送二维路由能力码对边界网关协议BGP二维路由发送能力和/或接收能力进行协商；
其中，所述二维路由能力码为新增能力码，包括以下参数的任意组合：能力码代码、能力码数值长度和能力码数值，所述能力码数值包括以下参数的任意组合：地址族、子地址族、以及是否具备对指定地址族和子地址族的二维路由的接收和发送能力。
可选地，所述BGP二维路由是对BGP协议的网络层可达性信息NLRI格式进行扩展，在一维NLRI格式中增加源地址信息，形成包含四元组的二维NLRI格式；其中，所述四元组包括：目的地址长度、目的地址前缀、源地址长度、源地址前缀。
可选地，在接收到所述对端路由设备发送的BGP二维路由后，所述方法还包括：
将所述BGP二维路由更新到二维路由表中；其中，所述二维路由表同时以目的地址前缀和源地址前缀为键值。
可选地，与对端路由设备进行边界网关协议BGP二维路由发送能力和/ 或接收能力协商，包括：
与对端路由设备之间发送BGP协议的初始OPEN消息，在所述OPEN消息中通过携带二维路由能力码对BGP二维路由发送能力和/或接收能力进行协商。
可选的，所述向所述对端路由设备发送BGP二维路由，包括：向所述对端路由设备发送更新UPDATE报文时，按照BGP二维路由格式对路由进行编码；
所述接收所述对端路由设备发送的BGP二维路由，包括：接收到所述对端路由设备发送的更新UPDATE报文时，按照BGP二维路由格式对路由进行解码。
本发明实施例提供了一种实现边界网关协议二维路由的装置，包括：
二维路由能力协商模块，设置为与对端路由设备进行边界网关协议BGP二维路由发送能力和/或接收能力协商；
二维路由发送及接收模块，设置为在与对端路由设备协商成功BGP二维路由发送能力的情况下，向所述对端路由设备发送BGP二维路由；在与对端路由设备协商成功BGP二维路由接收能力的情况下，接收所述对端路由设备发送的BGP二维路由。
可选地，二维路由能力协商模块是设置为：与对端路由设备进行边界网关协议BGP二维路由发送能力和/或接收能力协商，包括：
与对端路由设备之间通过发送二维路由能力码对边界网关协议BGP二维路由发送能力和/或接收能力进行协商；
其中，所述二维路由能力码为新增能力码，包括以下参数的任意组合：能力码代码、能力码数值长度和能力码数值，所述能力码数值包括以下参数的任意组合：地址族、子地址族、以及是否具备对指定地址族和子地址族的二维路由的接收和发送能力。
可选地，所述BGP二维路由包括：对BGP协议的网络层可达性信息NLRI格式进行扩展，在一维NLRI格式中增加源地址信息，形成包含四元组的二维NLRI格式；其中，所述四元组包括以下参数：目的地址长度、目 的地址前缀、源地址长度、源地址前缀。
可选地，二维路由发送及接收模块还设置为：在接收到所述对端路由设备发送的BGP二维路由后，将所述BGP二维路由更新到二维路由表中，其中，所述二维路由表同时以目的地址前缀和源地址前缀为键值。
可选地，二维路由能力协商模块是设置为：与对端路由设备之间发送BGP协议的初始OPEN消息，在所述OPEN消息中通过携带二维路由能力码对BGP二维路由发送能力和/或接收能力进行协商。
二维路由发送及接收模块是设置为：在与对端路由设备协商成功BGP二维路由发送能力的情况下，向所述对端路由设备发送更新UPDATE报文时，按照BGP二维路由格式对路由进行编码；在与对端路由设备协商成功BGP二维路由接收能力的情况下，接收到所述对端路由设备发送的更新UPDATE报文时，按照BGP二维路由格式对路由进行解码。
与相关技术相比，本发明实施例提供的技术方案，包括：与对端路由设备进行边界网关协议(BGP)二维路由发送能力和/或接收能力进行协商；在与对端路由设备协商成功BGP二维路由发送能力的情况下，向对端路由设备发送BGP二维路由；在与对端路由设备协商成功BGP二维路由接收能力的情况下，接收对端路由设备发送的BGP二维路由。本发明实施例实现了域间二维路由，提升了部署二维路由网络和网络管理的效率，优化了网络性能。本发明实施例提供的一种实现边界网关协议二维路由的方法和装置，在设备支持二维路由转发的基础上，通过扩展BGP和BGP路由表管理，实现了域间二维路由的动态学习。二维路由相对一维路由，内容上增加了源地址信息。路由学习过程中，为了携带源地址信息，将原来携带目的地址信息的网络层可达性信息(NLRI，Network Layer Reachability Information)结构扩展为二维的NLRI结构(TwoD-NLRI)。同时BGP协议新增二维路由接收和发送能力，支持该能力的设备通告路由按照Two D-NLRI格式编码，接收路由按照TwoD-NLRI格式解码。接收到的BGP路由不再以目的前缀为键值进行管理，而是以目的前缀和源前缀同时为键值进行管理，实现BGP二维路由表管理。
在阅读并理解了附图和详细描述后，可以明白其他方面。
附图概述
图1为相关技术中多宿主环境下的域内二维路由示意图。
图2为本发明实施例的一种实现边界网关协议二维路由的方法流程图。
图3为本发明实施例的一种实现边界网关协议二维路由的装置示意图。
图4为本发明实施例1的一种支持域间二维路由的示意图。
图5为本发明实施例2的一种支持域间二维路由的示意图。
图6为本发明实施例3的一种支持域间二维路由的示意图。
详述
下文中将结合附图对本申请的实施例进行详细说明。需要说明的是，在不冲突的情况下，本申请中的实施例及实施例中的特征可以相互任意组合。
边界网关协议(BGP，Border Gateway Protocol)作为目前主流的域间路由协议，具有天然的可扩展性。在设备支持二维路由转发的基础上，通过扩展BGP协议和BGP路由表管理，可以实现域间二维路由的动态学习。二维路由相对一维路由，内容上增加了源地址信息。路由学习过程中，为了携带源地址信息，将原来携带目的地址信息的NLRI结构扩展为二维的NLRI结构(TwoD-NLRI)。同时BGP协议新增二维路由接收和发送能力，支持该能力的设备通告路由按照TwoD-NLRI格式编码，接收路由按照TwoD-NLRI格式解码。接收到的BGP路由不再以目的前缀为键值进行管理，而是以目的前缀和源前缀同时为键值进行管理，实现BGP二维路由表管理。
一、扩展NLRI格式
如表1所示，为了携带源地址信息，需要对相关协议中(IETF RFC4271和RFC4760，上述协议为已有协议)已经定义的NLRI编码格式做修改。相关技术中，NLRI由目的地址二元组<dst-Length,dst-Prefix>组成，本发明实施例中，二维的NLRI(TwoD-NLRI)需要在原来的基础上增加源地址信息，组成四元组<dst-Length,dst-Prefix，src-Length,src-Prefix>(<目的地址长度，目的地址前缀，源地址长度，源地址前缀>)。
Figure PCTCN2017079740-appb-000001
表1
二、二维路由收发能力
新增一种能力码，也即，新增二维路由能力码，二维路由能力码配置为表示设备是否具有二维路由的接收和发送能力。
新增的二维路由能力码的格式可以为<Capability Code，Capability Length，Capability Value>(<能力码代码，能力码数值的长度，能力码数值>)，所述新增的二维路由能力码的格式符合IETF RFC5492中的描述。所述新增的二维路由能力码的能力值字段的格式如表3所示，包括以下字段：
1)Address Family Identifier(AFI):地址族，符合IETF RFC4760中的描述。
地址族包括：Ipv4(1)，Ipv6(2)；
其中，括号中的数字是地址族的值；IPv4代表互联网协议第四版(Internet Protocol Version 4)，Ipv6代表Ipv4的下一版本(Internet Protocol Version 6)；
2)Subsequent Address Family Identifier(SAFI)：子地址族，符合IETF RFC4760中的描述。
子地址族包括：unicast forwarding(1)；
其中，括号中的数字是子地址族的值；unicast forwarding代表单播转发；
3)Send/Receive/both:发送能力/接收能力/发送和接收能力；
其中，发送能力(Send)表示支持发送对应地址族的二维路由；接收能力(Receive)，表示支持接收对应地址族的二维路由；发送和接收能力 (Both)，表示支持发送和接收对应地址族的二维路由。
Figure PCTCN2017079740-appb-000002
表2
三、协商二维路由能力
路由器从对端设备收到OPEN报文后，如果OPEN报文中携带了二维路由发送能力，并且本设备对应地址族和子地址族支持接收二维路由，那么认为二维路由接收能力协商成功；如果OPEN报文中携带了二维路由接收能力，并且本设备对应地址族和子地址族支持发送二维路由，那么认为二维路由发送能力协商成功。
四、接收二维路由
在二维路由接收能力协商成功时，从邻居设备接收到UPDATE(更新)报文后，在对相应地址族的路由前缀进行解码时，按照TwoD-NLRI格式解码，对解码后获得的二维路由，将二维路由在RIB(Routing Information Base，路由择域信息库，简称路由表)中的键值由<Pd>(<目的地址>)变成<Pd，Ps>(<目的地址，源地址>)。
五、发送二维路由。
在二维路由发送能力协商成功时，向邻居设备发送UPDATE报文，在对相应地址族路由前缀进行编码时，按照TwoD-NLRI格式编码。对于设备中的一维路由(无源地址信息)，按照TwoD-NLRI格式编码时，src-length可以全部填0。
在二维路由发送能力协商不成功时，向邻居设备发送UPDATE报文， 在对相应地址族路由前缀进行编码时，按照NLRI格式编码。对于设备中的二维路由，需要对源地址进行聚合，如有二维路由<dst1,src1>、<dst1,src2>，聚合成一维路由<dst1>，NLRI中只包含dst1信息，不包含源地址信息，对于聚合路由属性的处理符合IETF RFC4271的描述。
六、路由表结构
对于传统网络路由来说，路由表中只包含可达性信息，即将报文送至目标地址的下一跳信息。比如，在传统的路由表中，其数据结构一般为一棵目的前缀组成的前缀树，其中，树结点包含下一跳信息，路由器通过查找和更新这棵前缀树，从而维护可达性信息。
在本发明的二维路由中，路由表中不仅包含可达性信息，还包含源身份的信息，即将来自某个源地址的报文送至目标地址的下一跳信息。针对每个路由表项，除了传统路由表中所包含字段外，还需额外包含源前缀信息，即由源IP地址字段和源IP地址掩码字段构成。
二维路由中的路由表也可以组织成相应的数据结构，比如一棵二维树，其中第一个维度的树存储目的前缀，目的前缀树的每个节点指向一棵子树，每棵子树由相应的源前缀构成，在子树中的每个节点中包含下一跳信息。
如图2所示，本发明实施例提供了一种实现边界网关协议二维路由的方法，该方法包括：
S210，与对端路由设备进行边界网关协议(BGP)二维路由发送能力和/或接收能力协商；
S220，在与对端路由设备协商成功BGP二维路由发送能力的情况下，向对端路由设备发送BGP二维路由；在与对端路由设备协商成功BGP二维路由接收能力的情况下，接收对端路由设备发送的BGP二维路由。
所述方法还可以包括：
可选地，与对端路由设备进行边界网关协议BGP二维路由发送能力和/或接收能力协商，包括：
向对端路由设备通告本路由设备是否具备BGP二维路由发送能力和/或接收能力，以及接收对端路由设备用于表示对端路由设备是否具备BGP二 维路由发送能力和/或接收能力的通告；
其中，与对端路由设备之间对边界网关协议BGP二维路由发送能力和/或接收能力进行协商，包括：
如对端路由设备具备BGP二维路由发送能力且本设备具备BGP二维路由接收能力，则判定与对端路由设备协商成功BGP二维路由接收能力；
如对端路由设备具备BGP二维路由接收能力且本设备具备BGP二维路由发送能力，则判定与对端路由设备协商成功BGP二维路由发送能力；
可选地，与对端路由设备进行边界网关协议BGP二维路由发送能力和/或接收能力协商，包括：
与对端路由设备之间通过发送二维路由能力码对边界网关协议BGP二维路由发送能力和/或接收能力进行协商；
其中，二维路由能力码为新增能力码，可以包括以下参数的任意组合：能力码代码、能力码数值长度和能力码数值，能力码数值包括以下参数的任意组合：地址族、子地址族、以及是否具备对指定地址族和子地址族的二维路由的接收和发送能力。
其中，地址族参数和子地址族参数共同定义了网络层可达信息NLRI的语义；
比如，地址族包括：Ipv4(1)，Ipv6(2)；
子地址族包括：unicast forwarding(1)；
如果二维路由能力码的能力码数值域中的(地址族,子地址族)值为(2,1)，则表明设备具有对ipv6unicast的二维路由的接收或发送能力；
如果二维路由能力码的能力码数值域中的(地址族,子地址族)值为(1,1)，则表明设备具有对ipv4unicast的二维路由的接收或发送能力；
可选地，与对端路由设备进行边界网关协议BGP二维路由发送能力和/或接收能力协商，包括：与对端路由设备之间发送BGP协议的初始OPEN消息，在OPEN消息中通过携带二维路由能力码对BGP二维路由发送能力和/或接收能力进行协商；
向对端路由设备发送BGP二维路由，包括：向对端路由设备发送更新UPDATE报文时，按照BGP二维路由格式对路由进行编码；
接收所述对端路由设备发送的BGP二维路由，包括：接收到对端路由设备发送的更新UPDATE报文时，按照BGP二维路由格式对路由进行解码；
可选地，BGP二维路由是对BGP协议的网络层可达性信息(NLRI)格式进行扩展，在一维NLRI格式中增加源地址信息，形成包含四元组的二维NLRI格式，四元组包括以下参数：目的地址长度，目的地址前缀，源地址长度，源地址前缀。
可选地，在接收到对端路由设备发送的BGP二维路由后，本发明实施例还包括：将BGP二维路由更新到二维路由表中，其中，二维路由表以目的地址前缀和源地址前缀同时为键值。
其中，本发明实施例方法还包括：在与对端路由设备之间协商BGP二维路由发送能力不成功时，按照一维NLRI路由格式进行路由发送；
其中，在对二维路由进行一维NLRI格式的编码时，省略二维路由的源地址信息。
本发明实施例还提供一种计算机存储介质，计算机存储介质中存储有计算机可执行指令，计算机可执行指令用于执行上述实现边界网关协议二维路由的方法。
本发明实施例还提供一种实现边界网关协议二维路由的装置，包括：存储器和处理器；其中，
处理器被配置为执行存储器中的程序指令；
程序指令在处理器读取执行以下操作：
与对端路由设备进行边界网关协议(BGP)二维路由发送能力和/或接收能力协商；在与对端路由设备协商成功BGP二维路由发送能力的情况下，向对端路由设备发送BGP二维路由；在与对端路由设备协商成功BGP二维路由接收能力的情况下，接收对端路由设备发送的BGP二维路由。
如图3所示，本发明实施例提供了一种实现边界网关协议二维路由的装置，包括：
二维路由能力协商模块301，设置为与对端路由设备进行边界网关协议BGP二维路由发送能力和/或接收能力协商；
二维路由发送及接收模块302，设置为在与对端路由设备协商成功BGP二维路由发送能力的情况下，向对端路由设备发送BGP二维路由；在与对端路由设备协商成功BGP二维路由接收能力的情况下，接收对端路由设备发送的BGP二维路由。
可选地，本发明实施例装置还可以包括：
二维路由能力协商模块301，设置为与对端路由设备进行边界网关协议BGP二维路由发送能力和/或接收能力协商，包括：与对端路由设备之间通过发送二维路由能力码对边界网关协议BGP二维路由发送能力和/或接收能力进行协商；其中，二维路由能力码为新增能力码，包括以下参数的任意组合：能力码代码、能力码数值长度和能力码数值，能力码数值包括以下参数的任意组合：地址族、子地址族、以及是否具备对指定地址族和子地址族的二维路由的接收和发送能力。
可选地，BGP二维路由是对BGP协议的网络层可达性信息NLRI格式进行扩展，在一维NLRI格式中增加源地址信息，形成包含四元组的二维NLRI格式，四元组包括数：目的地址长度，目的地址前缀，源地址长度，源地址前缀。
可选地，二维路由发送及接收模块302，还设置为在接收到对端路由设备发送的BGP二维路由后，将BGP二维路由更新到二维路由表中，其中，二维路由表以目的地址前缀和源地址前缀同时为键值。
可选地，二维路由能力协商模块301是设置为：与对端路由设备之间发送BGP协议的初始OPEN消息，在OPEN消息中通过携带二维路由能力码对BGP二维路由发送能力和/或接收能力进行协商；
二维路由发送及接收模块302是设置为：在与对端路由设备协商成功BGP二维路由发送能力的情况下，向所述对端路由设备发送更新UPDATE 报文时，按照BGP二维路由格式对路由进行编码；在与对端路由设备协商成功BGP二维路由接收能力的情况下，接收到所述对端路由设备发送的更新UPDATE报文时，按照BGP二维路由格式对路由进行解码。
实施例1
如附图4所示，AS1域的边界设备假设为R1、R2支持二维路由转发，R1已经获取了访问服务器(SERVER)的可信源192:168:1::0/64，R2已经获取了访问SERVER的可信源192:168:2::0/64，通过R1和R2分担来自不同源的流。如果希望在AS2域中做到流量负荷分担，可通过升级AS2域的边界设备R3、R4、R5以支持二维路由转发，并且按照本发明升级BGP协议，支持二维路由动态学习。
R1和R3之间，建立外部边界网关协议(EBGP，External Border Gateway Protocol)邻居，均开启二维路由的接收和通告能力。
R2和R4之间，建立EBGP邻居，均开启二维路由的接收和发送能力。
R3和R5之间，建立内部边界网关协议(IBGP，Internal Border Gateway Protocol)邻居，均开启二维路由的接收和发送能力。
R4和R5之间，建立IBGP邻居，均开启二维路由的接收和发送能力。
R1上，通过配置网络(network)10:1:1::0/64 192:168:1::0/64，将二维路由(10:1:1::0/64,192:168:1::0/64)引入BGP，并向R3发送该二维路由。
R2上，通过配置network 10:1:1::0/64 192:168:2::0/64，将二维路由(10:1:1::0/64,192:168:2::0/64)引入BGP，并向R4发送该二维路由。
R3和R4分别将收到的二维路由传递给R5。
R5接收到流量，将源地址和192:168:1::0/64匹配的流量转发到R3；将源地址和192:168:2::0/64匹配的流量转发到R4，实现对来自不同源地址流的负荷分担。
实施例2
如附图5所示，AS1域的边界设备R1支持二维路由转发，并且已经获取了访问SERVER的可信源地址192:168:1::0/64，在R1设备上可以做到对攻击流的过滤。如果希望在AS2域中做到对攻击流的过滤，可通过升级AS2 域的边界设备R2、R3以支持二维路由转发，并且升级BGP协议，支持二维路由动态学习。
R1和R2之间，建立EBGP邻居，均开启二维路由的接收和发送能力。
R2和R3之间，建立IBGP邻居，均开启二维路由的接收和发送能力。
R1通过配置network 10:1:1::0/64 192:168:1::0/64，将二维路由(10:1:1::0/64,192:168:1::0/64)引入BGP，并向R2发送该二维路由。
R2将路由传递到R3。
R3将路由下发到转发面，R3将只接收源地址和192:168:1::0/64匹配的流量，因此来自不可信源192:168:2::1的流量将被过滤丢弃。
实施例3
如附图6所示，AS1域的边界设备R1支持二维路由转发，并且已经获取了访问SERVER的可信源地址192:168:1::0/64，在R1设备上可以做到对攻击流的过滤。如果希望在AS2域中做到对攻击流的过滤，但AS2设备无法做到对所有边界设备进行二维路由升级，即会存在一维路由和二维路由混合的网络。如AS2中，R2可以进行升级，R3不可以升级，最终可以在R2设备上实现对攻击流量的过滤。
R1和R2之间，建立EBGP邻居，均开启二维路由的接收和发送能力。
R2和R3之间，建立IBGP邻居，不开启二维路由的接收能力，也不开启二维路由的发送能力。
R1通过配置network 10:1:1::0/64 192:168:1::0/64，将二维路由(10:1:1::0/64,192:168:1::0/64)引入BGP，并向R2发送该二维路由。
R2将二维路由聚合后，转变为一维路由(10:1:1::0/64)传递到R3。
R3将路由下发到转发面，R3无法实现对流量的过滤，来自192:168:1::1和192:168:2::1的流量均被转发。
R2只接收源地址和192:168:1::0/64匹配的流量，因此来自192:168:2::1的流量被过滤丢弃。
上述实施例提供的一种实现边界网关协议二维路由的方法和装置，在设 备支持二维路由转发的基础上，通过扩展BGP(Border Gateway Protocol，边界网关协议)和BGP路由表管理，实现了域间二维路由的动态学习。二维路由相对一维路由，内容上增加了源地址信息。路由学习过程中，为了携带源地址信息，将原来携带目的地址信息的NLRI(Network Layer Reachability Information，网络层可达性信息)结构扩展为二维的NLRI结构(TwoD-NLRI)。同时BGP协议新增二维路由接收和通告能力，支持该能力的设备通告路由按照TwoD-NLRI格式编码，接收路由按照TwoD-NLRI格式解码。接收到的BGP路由不再以目的前缀为键值进行管理，而是以目的前缀和源前缀同时为键值进行管理，实现BGP二维路由表管理。
本领域普通技术人员可以理解上述方法中的全部或部分步骤可通过程序来指令相关硬件(例如处理器)完成，所述程序可以存储于计算机可读存储介质中，如只读存储器、磁盘或光盘等。可选地，上述实施例的全部或部分步骤也可以使用一个或多个集成电路来实现。相应地，上述实施例中的每个模块/单元可以采用硬件的形式实现，例如通过集成电路来实现其相应功能，也可以采用软件功能模块的形式实现，例如通过处理器执行存储于存储器中的程序/指令来实现其相应功能。本发明不限制于任何特定形式的硬件和软件的结合。
虽然本申请所揭露的实施方式如上，但所述的内容仅为便于理解本申请而采用的实施方式，并非用以限定本申请，如本发明实施方式中的具体的实现方法。任何本申请所属领域内的技术人员，在不脱离本申请所揭露的精神和范围的前提下，可以在实施的形式及细节上进行任何的修改与变化，但本申请的专利保护范围，仍须以所附的权利要求书所界定的范围为准。
工业实用性
上述技术方案实现了域间二维路由，提升了部署二维路由网络和网络管理的效率，优化了网络性能。

Claims (12)

  1. 一种实现边界网关协议二维路由的方法，该方法包括：
    与对端路由设备进行边界网关协议BGP二维路由发送能力和/或接收能力协商；
    在与对端路由设备协商成功BGP二维路由发送能力的情况下，向所述对端路由设备发送BGP二维路由；在与对端路由设备协商成功BGP二维路由接收能力的情况下，接收所述对端路由设备发送的BGP二维路由。
  2. 如权利要求1所述的方法，其中，与对端路由设备进行BGP二维路由发送能力和/或接收能力协商，包括：
    与对端路由设备之间通过发送二维路由能力码对边界网关协议BGP二维路由发送能力和/或接收能力进行协商；
    其中，所述二维路由能力码为新增能力码，包括以下参数的任意组合：能力码代码、能力码数值长度、能力码数值；
    所述能力码数值包括以下参数的任意组合：地址族、子地址族、是否具备对指定地址族、子地址族的二维路由的接收和发送能力。
  3. 如权利要求1或2所述的方法，其中，所述BGP二维路由包括：对BGP协议的网络层可达性信息NLRI格式进行扩展，在一维NLRI格式中增加源地址信息，形成包含四元组的二维NLRI格式；
    其中，所述四元组包括：目的地址长度、目的地址前缀、源地址长度、源地址前缀。
  4. 如权利要求3所述的方法，在接收到所述对端路由设备发送的BGP二维路由后，所述方法还包括：
    将所述BGP二维路由更新到二维路由表中；其中，所述二维路由表同时以目的地址前缀和源地址前缀为键值。
  5. 如权利要求3所述的方法，其中，与对端路由设备进行BGP二维路由发送能力和/或接收能力协商，包括：
    与对端路由设备之间发送BGP协议的初始OPEN消息，在所述OPEN 消息中通过携带二维路由能力码对BGP二维路由发送能力和/或接收能力进行协商。
  6. 根据权利要求5所述的方法，其中，
    所述向所述对端路由设备发送BGP二维路由，包括：向所述对端路由设备发送更新UPDATE报文时，按照BGP二维路由格式对路由进行编码；
    所述接收所述对端路由设备发送的BGP二维路由，包括：接收到所述对端路由设备发送的更新UPDATE报文时，按照BGP二维路由格式对路由进行解码。
  7. 一种实现边界网关协议二维路由的装置，包括：
    二维路由能力协商模块，设置为与对端路由设备进行边界网关协议BGP二维路由发送能力和/或接收能力协商；
    二维路由发送及接收模块，设置为在与对端路由设备协商成功BGP二维路由发送能力的情况下，向所述对端路由设备发送BGP二维路由；在与对端路由设备协商成功BGP二维路由接收能力的情况下，接收所述对端路由设备发送的BGP二维路由。
  8. 如权利要求7所述的装置，其中，
    二维路由能力协商模块是设置为：
    与对端路由设备之间通过发送二维路由能力码对BGP二维路由发送能力和/或接收能力进行协商；
    其中，所述二维路由能力码为新增能力码，包括以下参数的任意组合：能力码代码、能力码数值长度、能力码数值，所述能力码数值包括以下参数的任意组合：地址族、子地址族、以及是否具备对指定地址族和子地址族的二维路由的接收和发送能力。
  9. 如权利要求7或8所述的装置，其中，
    所述BGP二维路由包括：对BGP协议的网络层可达性信息NLRI格式进行扩展，在一维NLRI格式中增加源地址信息，形成包含四元组的二维NLRI格式；
    其中，所述四元组包括：目的地址长度、目的地址前缀、源地址长度、源地址前缀。
  10. 如权利要求9所述的装置，所述二维路由发送及接收模块还设置为：接收到所述对端路由设备发送的BGP二维路由后，将所述BGP二维路由更新到二维路由表中，其中，所述二维路由表同时以目的地址前缀和源地址前缀为键值。
  11. 如权利要求9所述的装置，其中，
    所述二维路由能力协商模块是设置为：
    与对端路由设备之间发送BGP协议的初始OPEN消息，在所述OPEN消息中通过携带二维路由能力码对BGP二维路由发送能力和/或接收能力进行协商。
  12. 如权利要求11所述的装置，其中，
    所述二维路由发送及接收模块是设置为：在与对端路由设备协商成功BGP二维路由发送能力的情况下，向所述对端路由设备发送更新UPDATE报文时，按照BGP二维路由格式对路由进行编码；在与对端路由设备协商成功BGP二维路由接收能力的情况下，接收到所述对端路由设备发送的更新UPDATE报文时，按照BGP二维路由格式对路由进行解码。
PCT/CN2017/079740 2016-06-06 2017-04-07 一种实现边界网关协议二维路由的方法和装置 WO2017211116A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201610394608.6 2016-06-06
CN201610394608.6A CN107465614A (zh) 2016-06-06 2016-06-06 一种实现边界网关协议二维路由的方法和装置

Publications (1)

Publication Number Publication Date
WO2017211116A1 true WO2017211116A1 (zh) 2017-12-14

Family

ID=60544666

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2017/079740 WO2017211116A1 (zh) 2016-06-06 2017-04-07 一种实现边界网关协议二维路由的方法和装置

Country Status (2)

Country Link
CN (1) CN107465614A (zh)
WO (1) WO2017211116A1 (zh)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110086720A (zh) * 2019-04-22 2019-08-02 清华大学 基于二维路由协议实现l3vpn的方法及系统
CN112804141A (zh) * 2018-09-06 2021-05-14 华为技术有限公司 发送报文的方法、网络设备及计算机存储介质

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN112671645A (zh) * 2019-10-16 2021-04-16 中国移动通信有限公司研究院 一种信息处理方法、装置、设备及计算机可读存储介质

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101478484A (zh) * 2009-01-23 2009-07-08 华为技术有限公司 路由选择的方法、设备及通信系统
EP2809037A1 (en) * 2013-05-27 2014-12-03 Alcatel Lucent A method and a router for inter-domain routing
CN105471747A (zh) * 2015-11-25 2016-04-06 武汉烽火网络有限责任公司 一种智能路由器选路方法和装置
CN105515990A (zh) * 2014-09-23 2016-04-20 中国电信股份有限公司 基于二维信息进行寻路的方法和接入网关

Family Cites Families (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8024437B2 (en) * 2003-10-30 2011-09-20 Paul Unbehagen Autodiscovery for virtual networks
CN101610208A (zh) * 2008-06-19 2009-12-23 华为技术有限公司 Bgp邻居间通告的方法、系统及路由器
CN101515891B (zh) * 2009-04-02 2012-03-28 杭州华三通信技术有限公司 一种边界网关协议路由处理方法和路由器
CN101867503B (zh) * 2010-06-09 2012-12-26 清华大学 一种跨域bgp路由策略部署的方法
CN102957610B (zh) * 2012-12-03 2016-03-02 杭州华三通信技术有限公司 路由处理方法及路由转发设备
CN103944822A (zh) * 2013-01-21 2014-07-23 杭州华三通信技术有限公司 Bgp路由通告方法和装置及bgp路由维护方法和装置

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101478484A (zh) * 2009-01-23 2009-07-08 华为技术有限公司 路由选择的方法、设备及通信系统
EP2809037A1 (en) * 2013-05-27 2014-12-03 Alcatel Lucent A method and a router for inter-domain routing
CN105515990A (zh) * 2014-09-23 2016-04-20 中国电信股份有限公司 基于二维信息进行寻路的方法和接入网关
CN105471747A (zh) * 2015-11-25 2016-04-06 武汉烽火网络有限责任公司 一种智能路由器选路方法和装置

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
XU, MINGWEI ET AL.: "Two Dimensional-IP Routing", JOURNAL OF COMMUNICATIONS, 30 April 2013 (2013-04-30), pages 835 - 839, XP055443192 *

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN112804141A (zh) * 2018-09-06 2021-05-14 华为技术有限公司 发送报文的方法、网络设备及计算机存储介质
CN112804141B (zh) * 2018-09-06 2023-09-26 华为技术有限公司 发送报文的方法、网络设备及计算机存储介质
CN110086720A (zh) * 2019-04-22 2019-08-02 清华大学 基于二维路由协议实现l3vpn的方法及系统
US11595301B2 (en) 2019-04-22 2023-02-28 Tsinghua University Method and system for implementing L3VPN based on two-dimensional routing protocol

Also Published As

Publication number Publication date
CN107465614A (zh) 2017-12-12

Similar Documents

Publication Publication Date Title
CN107018056B (zh) 具有mac(l2)级认证、安全和策略控制的增强的evpn mac路由通知
CN107251509B (zh) 通信网络系统之间的可信路由
US9762490B2 (en) Content filtering for information centric networks
Gredler et al. North-bound distribution of link-state and traffic engineering (te) information using bgp
CN106878253B (zh) Mac（l2）层认证、安全性和策略控制
US10397066B2 (en) Content filtering for information centric networks
US9654482B2 (en) Overcoming circular dependencies when bootstrapping an RPKI site
US10454818B2 (en) CCN name chaining
Chuat et al. The Complete Guide to SCION
JP2005130228A (ja) Ａｓ間の経路制御を行う通信装置およびその経路制御方法
WO2017211116A1 (zh) 一种实现边界网关协议二维路由的方法和装置
JP2021505066A (ja) Ｉｐネットワークへの遠隔的かつ動的ルート注入
US7702765B1 (en) Techniques for automatically creating an iBGP mesh
WO2017166918A1 (zh) 组播流量的控制方法及装置
WO2018010576A1 (zh) 路径建立方法、装置及网络节点
WO2022068330A1 (zh) 一种检测路由环路的方法、设备及系统
WO2021213185A1 (zh) 一种路由处理方法及设备
CN109309619A (zh) 一种域间二维路由协议的实现方法及装置
Marques et al. Internal BGP as the Provider/Customer Edge Protocol for BGP/MPLS IP Virtual Private Networks (VPNs)
Reuter Source Packet Routing in Networking (SPRING)
Medved et al. RFC 7752: North-Bound Distribution of Link-State and Traffic Engineering (TE) Information Using BGP
JP2023536559A (ja) ソフトウェア定義ワイドエリアネットワーク（ｓｄ－ｗａｎ）のための水平スケーリング
Marques et al. RFC 6368: Internal BGP as the Provider/Customer Edge Protocol for BGP/MPLS IP Virtual Private Networks (VPNs)
EP4342149A1 (en) Border gateway protocol (bgp) flowspec origination authorization using route origin authorization (roa)
Huawei Technologies Co., Ltd. yonghong. jiang@ huawei. com Routing Protocol Basics

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 17809556

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 17809556

Country of ref document: EP

Kind code of ref document: A1