WO2018165866A1 - 一种sdn及其报文转发的方法和装置 - Google Patents

一种sdn及其报文转发的方法和装置 Download PDF

Info

Publication number
WO2018165866A1
WO2018165866A1 PCT/CN2017/076650 CN2017076650W WO2018165866A1 WO 2018165866 A1 WO2018165866 A1 WO 2018165866A1 CN 2017076650 W CN2017076650 W CN 2017076650W WO 2018165866 A1 WO2018165866 A1 WO 2018165866A1
Authority
WO
WIPO (PCT)
Prior art keywords
packet
controller
sdn
proxy module
message
Prior art date
Application number
PCT/CN2017/076650
Other languages
English (en)
French (fr)
Inventor
吴文竞
Original Assignee
华为技术有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 华为技术有限公司 filed Critical 华为技术有限公司
Priority to CN201780085006.5A priority Critical patent/CN110235417B/zh
Priority to PCT/CN2017/076650 priority patent/WO2018165866A1/zh
Publication of WO2018165866A1 publication Critical patent/WO2018165866A1/zh
Priority to US16/571,115 priority patent/US10951520B2/en

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00—Routing or path finding of packets in data switching networks
    • H04L45/64—Routing or path finding of packets in data switching networks using an overlay routing layer
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/42—Loop networks
    • H04L12/423—Loop networks with centralised control, e.g. polling
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/46—Interconnection of networks
    • H04L12/4633—Interconnection of networks using encapsulation techniques, e.g. tunneling
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/04—Network management architectures or arrangements
    • H04L41/046—Network management architectures or arrangements comprising network management agents or mobile agents therefor
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/34—Signalling channels for network management communication
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/34—Signalling channels for network management communication
    • H04L41/342—Signalling channels for network management communication between virtual entities, e.g. orchestrators, SDN or NFV entities
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00—Routing or path finding of packets in data switching networks
    • H04L45/38—Flow based routing
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00—Routing or path finding of packets in data switching networks
    • H04L45/74—Address processing for routing
    • H04L45/745—Address table lookup; Address filtering
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00—Network arrangements, protocols or services for addressing or naming
    • H04L61/50—Address allocation
    • H04L61/5007—Internet protocol [IP] addresses
    • H04L61/5014—Internet protocol [IP] addresses using dynamic host configuration protocol [DHCP] or bootstrap protocol [BOOTP]

Definitions

  • the present invention relates to the field of Software Defined Network (SDN) technologies, and in particular, to a SDN and a packet forwarding method and apparatus.
  • SDN Software Defined Network
  • SDN Software Defined Network
  • the core of the SDN network architecture is to introduce an SDN controller (Controller, below control) in the network.
  • the device and the network controller all refer to the SDN controller), which implements the forwarding control separation and centralized control.
  • the SDN controller is like the brain of the network, and can control all forwarding devices.
  • the SDN switch is like a hand and foot, and listens to the controller. The data it relies on is completely derived from the SDN controller.
  • the current SDN core technology is implemented based on the OpenFlow Protocol.
  • the SDN network based on the OpenFlow protocol is an OpenFlow network, and the OpenFlow network includes an OpenFlow Controller (OFC) and an OpenFlow Switch (OFS).
  • the OFS includes a processor (CPU) and a data path (Data Path).
  • the processor has an OpenFlow Agent function.
  • the data path includes a plurality of flow tables (Flow Tables) and a group table (Group Table). Perform message lookup and forwarding.
  • the OpenFlow Channel (OpenFlow Channel) is an interface between the OpenFlow switch and the controller. Through this interface, the switch communicates with the controller through the OpenFlow protocol.
  • the flow table includes multiple flow entries. If the flow to be forwarded has a corresponding flow entry in the flow table, the packet is forwarded according to the flow table.
  • the OFS is The OFC is instructed to send an instruction to the OFC. After receiving the OFS request, the OFC sends the flow entry to the OFS. The OFS obtains the flow entry and adds it to the flow entry, so that the packet is forwarded according to the new flow table. .
  • the OFS and the OFC communicate through the OpenFlow Channel of the OFFA Agent (OpenFlow Agent).
  • the OFA is deployed on the CPU software to complete the OpenFlow channel with the SDN controller and to communicate.
  • the protocol packet sent by the SDN switch to the SDN controller is called a packet in packet
  • the protocol packet sent by the SDN controller to the SDN switch is called a packet out packet.
  • protocol packets need to be sent to the SDN controller, and the SDN controller performs protocol processing.
  • the CPU forwarding of the forwarder will bring additional delay, usually 10ms.
  • Performance-sensitive protocols such as IGMP, ERPS, etc.
  • the embodiment of the invention provides an SDN and a method and a device for forwarding the packet, which reduce the delay of forwarding the packet.
  • an embodiment of the present invention provides a software-defined network, where the software-defined network includes an SDN controller and an SDN switch, where the SDN switch includes a processor and a data path, and the SDN switch further includes:
  • the first transceiver is configured to receive the first packet and confirm that the first packet is sent to the controller, and forward the first packet to the channel proxy module;
  • the channel proxy module is configured to add address information of the SDN controller to the first packet and encapsulate the packet into a second packet, and then send the second packet to the controller;
  • the first transceiver is further configured to receive a third packet sent by the SDN controller and forward the packet to the channel proxy module.
  • the channel proxy module is further configured to delete and convert the control information and the address information in the third packet into a fourth packet, and according to the port number carried in the control information in the third packet And/or the flow table number sends the fourth packet to a corresponding port or flow table.
  • the second packet and the third packet are one of a dynamic host configuration protocol DHCP packet, a network group management protocol IGMP packet, and an Ethernet ring protection ERPS packet. .
  • the transceiver is further configured to: receive the control information and address information required by the channel proxy module sent by the controller to communicate with the controller, the control information and an address
  • the information includes but is not limited to: the IP address of the SDN switch, the IP address of the SDN controller, and the OpenFlow version number.
  • the transceiver is further configured to: receive an encryption/decryption algorithm mode sent by the SDN controller for data transmission between the controller and an SDN switch.
  • the software-defined network further includes: encrypting and decrypting the second message and the third message by using the encryption/decryption algorithm mode.
  • a method for software-defined network forwarding of a message includes:
  • the channel proxy module adds address information of the SDN controller to the first packet and encapsulates the packet into a second packet, and then sends the second packet to the controller;
  • the second packet and the third packet are one of a dynamic host configuration protocol DHCP packet, a network group management protocol IGMP packet, and an Ethernet ring protection ERPS packet.
  • the method further includes: receiving the control information and address information required by the channel proxy module sent by the controller to communicate with the controller, where the control information and the address information include but not Limited to: IP address of the SDN switch, IP address of the SDN controller, and OpenFlow version number.
  • the method further includes: receiving an encryption/decryption algorithm mode sent by the controller for data transmission between the SDN controller and the SDN switch.
  • the method further includes: encrypting and decrypting the second message and the third message by using the encryption algorithm mode.
  • a channel proxy module is located in an SDN switch of a software defined network, including:
  • a second transceiver configured to receive the first packet, send the second packet to the controller, receive a third packet sent by the controller, and receive, according to the control information in the third packet Transmitting the fourth packet to the corresponding port or flow table by using the port number and/or the flow table number carried in the port number;
  • a processor configured to add address information of the SDN controller to the first packet, and encapsulate the packet as a second packet, and send the message to the second transceiver; and control information and an address in the third packet The information is deleted and converted into a fourth message and sent to the second transceiver.
  • the channel proxy module is one of a network processor NP, or a field programmable gate array FPGA, or an application specific integrated circuit ASIC.
  • the embodiment of the present invention is set up by the CPU of the SDN switch by setting up a channel proxy module on the SDN switch.
  • the packet sent to the SDN controller is forwarded by the channel proxy module, which reduces the delay of forwarding the SDN packet.
  • 1 is a schematic diagram of an existing SDN architecture
  • FIG. 3 is a flowchart of a method for software-defined network forwarding packets according to an embodiment of the present invention
  • FIG. 4 is a schematic diagram of forwarding a message between an SDN controller and an SDN switch according to an embodiment of the present invention
  • FIG. 5 is a schematic structural diagram of a packet in message frame according to an embodiment of the present disclosure.
  • FIG. 6 is a schematic structural diagram of a packet out message frame according to an embodiment of the present disclosure.
  • FIG. 7 is a functional block diagram of an SDN switch according to an embodiment of the present invention.
  • FIG. 8 is a functional block diagram of another SDN switch according to an embodiment of the present invention.
  • FIG. 9 is a functional block diagram of a data communication apparatus according to an embodiment of the present invention.
  • the SDN network architecture includes one or more SDN switches and one or more SDN controllers, which can communicate using the OpenFlow protocol or other protocols.
  • the solution is specifically introduced based on the OpenFlow network composed of the OFS and the OFC.
  • the related solutions based on the OpenFlow network in the embodiments of the present invention are also applicable to other SDN networks implemented by similar protocols.
  • the switch adds or updates the entries of the flow table either by means of "switch request->controller response" or by means of "controller active control without switch request”. delete.
  • Each flow table consists of one entry; each entry consists of a message matching field, a counter, and a processing instruction.
  • the packet matching process starts from the flow table with the lowest number.
  • a flow table or multiple flow tables connected in series can be used to complete a message forwarding task.
  • the flow table entries are also arranged in order, and the highest priority entries are placed first.
  • the switch uses the report according to whether the table-miss entry is configured. The text is sent to the controller through the OpenFlow protocol, or the packet is discarded or handed over to the next-level flow table for processing.
  • a message can be forwarded to a port.
  • This port is usually the physical port of a switch, but this port can also be a logical port or a reserved port.
  • a logical port usually refers to a trunk port, tunnel, or loopback interface.
  • a reserved port actually represents a forwarding behavior, for example, sending a message to the controller, flooding the packet to all physical ports, or processing the message using a traditional switch method instead of the OpenFlow method.
  • the protocol packet sent by the SDN switch to the SDN controller is called a packet in packet
  • the protocol packet sent by the SDN controller to the SDN switch is called a packet out packet.
  • FIG. 3 is a flowchart of a method for software-defined network SDN forwarding messages according to an embodiment of the present invention.
  • FIG. 4 is a corresponding scene diagram, and the method includes the following process steps:
  • the ONFA OpenFlow Agent
  • the OFA of the CPU of the SDN switch and the OFA of the SDN controller are required to establish an auxiliary OpenFlow Channel.
  • the parameters that need to be communicated with the SDN controller are sent to the proxy channel module of the SDN switch, including but not limited to the IP address of the SDN switch, the IP address of the SDN controller, and the OpenFlow version number. .
  • the SDN switch and the SDN controller are encrypted transmissions, the mode of the encryption algorithm needs to be sent to the channel proxy module. Subsequently, the channel proxy module encrypts and decrypts the second packet and the third packet by using the encryption/decryption algorithm mode.
  • the method includes:
  • Step 301 The SDN switch receives the first packet, and searches for the flow table. If the first packet does not match any entry, and the first packet needs to be sent to the SDN controller, the first packet is sent. The message is forwarded to the channel proxy module.
  • Step 302 The channel proxy module adds the address information of the SDN controller to the first packet and encapsulates it into a second packet, that is, a packet in packet, and then passes the second packet through the auxiliary OpenFlow channel. Sent to the controller.
  • information such as the destination MAC address, the source MAC address, and the VLAN information may be added to the first packet and then encapsulated into the second packet.
  • the message ensures that the second message can be sent to the SDN controller smoothly.
  • the packet in message may also add, for example, an OPenFlow Header field, which includes Openflow version information, length, Buffer ID, Traction ID, flow table number, Table ID, and the like. If the second packet is implemented by the User Datagram Protocol (UDP) protocol, the second packet needs to carry parameter information such as the source UDP port and the destination UDP port.
  • UDP User Datagram Protocol
  • the specific frame format of the second packet may be a packet in packet format defined by the OPenFlow SDN standard, as shown in FIG. 5, because the embodiment of the present invention does not involve the modification of the packet format, and the meaning of the above field refers to the standard. Definitions are not repeated here.
  • the SDN adopts other protocols and can also refer to the above message format.
  • Step 303 The SDN switch receives the third packet sent by the SDN controller, that is, the packet out packet, and forwards the packet to the channel proxy module.
  • the third packet is sent to the SDN switch through the secondary OpenFlow channel.
  • Step 304 The channel proxy module deletes the control information and the address information in the third packet to obtain a fourth packet, and according to the port number and/or the flow table number carried in the control information in the third packet. Forwarding the fourth packet to a corresponding port or flow table.
  • the frame structure of the packet out packet is similar to that of the packet in packet. The difference is that, except that the address information in the packet out packet is the address information of the SDN switch, the packet out packet carries the SDN controller.
  • the control information for example, the control information carries a port number and/or a flow table number, and the fourth packet is forwarded to the corresponding port or flow table according to the port number and the flow table number.
  • the Packet out message in FIG. 6 includes an action field, and the action field can be used to carry control information.
  • the embodiment of the present invention does not refer to the modification of the packet format. The meaning of the above fields is not limited to the definition in the standard.
  • the second packet and the third packet may be specifically IGMP (Internet Group Management).
  • Protocol packets such as Protocol, Internet Group Management Protocol, DHCP (Dynamic Host Configuration Protocol), and ERPS (Ethernet Ring Protection Switching).
  • the packet in packet is forwarded to the SDN controller by the OpenFlow Channel Agent (OFCA) module of the SDN switch.
  • the SDN controller sends a packet out message to the OpenFlow Channel Agent (OFCA) module.
  • the OFCA deletes the control information and the address information in the packet out packet to obtain the fourth packet, and according to the packet out packet.
  • the port number and/or the flow table number carried in the control information forwards the fourth packet to the corresponding port or flow table.
  • the channel proxy module is set up on the SDN switch, and the packet forwarded by the CPU of the SDN switch is forwarded by the channel proxy module, which reduces the delay of forwarding the packet.
  • the embodiment of the present invention provides a software-defined network.
  • the architecture is as shown in FIG. 1.
  • the software-defined network in this embodiment includes an SDN controller and an SDN switch, where the SDN controller and the SDN switch interact through a communication channel.
  • the SDN switch includes a processor and a data path, and the processor includes an OpenFlow agent, as shown in FIG. 7, where the SDN switch further includes:
  • the first transceiver 601 is configured to receive the first packet and confirm that the first packet is sent to the SDN controller 603, and forward the first packet to the channel proxy module 602;
  • the channel proxy module 602 is configured to add address information of the SDN controller to the first packet and encapsulate the packet into a second packet, and then send the second packet to the SDN controller by using an auxiliary OpenFlow channel. 503.
  • the first transceiver 601 is further configured to receive the third packet sent by the SDN controller 603 and forward the packet to the channel proxy module 602, where the channel proxy module 602 is further configured to use the control information in the third packet.
  • the address information is deleted and converted into a fourth packet, and the fourth packet is sent to the corresponding port or flow table according to the port number and/or the flow table number carried in the control information in the third packet.
  • the channel proxy module is set up on the SDN switch, and the packet forwarded to the SDN controller by the CPU of the SDN switch is forwarded by the channel proxy module, and the original CPU no longer bears the forwarding work of the packet.
  • the original work is still performed, which is equivalent to the function of the dual-core in the SDN switching in the embodiment of the present invention, so as to reduce the delay of forwarding packets.
  • the implementation of the present invention further provides a channel proxy module, which is located inside an SDN switch of a software-defined network, and includes a second transceiver 701 and a processor 702.
  • the second transceiver 701 receives the first packet and sends it to the processor 702.
  • the processor 702 is configured to add the address information of the SDN controller to the first packet and encapsulate the packet into a second packet and send the packet to the first packet.
  • the second transceiver 701; the second transceiver 701 sends the second message to the SDN controller.
  • the second transceiver 701 then receives the third message sent by the controller and forwards it to the processor 702 for processing.
  • the processor 702 deletes and converts the control information and the address information in the third packet into a fourth packet and sends the information to the second transceiver 701.
  • the second transceiver 701 sends the fourth packet to the corresponding port or flow table according to the port number and/or the flow table number carried in the control information in the third packet.
  • the channel proxy module passes through a network processor (NP), or a field programmable gate array (FPGA), or an application specific integrated circuit (Application-specific Integrated). Circuits, ASIC) implementation.
  • NP network processor
  • FPGA field programmable gate array
  • ASIC application specific integrated circuit
  • an embodiment of the present invention further discloses a data communication apparatus, including a processor 810, a memory 820, and a bus system 830.
  • the processor 810 and the memory 820 are connected by the bus system 830.
  • the memory 820 is used by the memory 820.
  • the processor 810 is configured to execute instructions stored by the memory 820,
  • the processor 810 is configured to receive the first packet and confirm that the first packet is sent to the SDN controller, and forward the first packet to the channel proxy module; the channel proxy module The address information of the SDN controller is added to the first packet and encapsulated into a second packet, and then the second packet is sent to the controller; and the third packet sent by the SDN controller is received. Forwarding to the channel proxy module, the channel proxy module deletes and converts the control information and the address information in the third packet into a fourth packet, and carries the information according to the control information in the third packet. The port number and/or the flow table number sends the fourth message to the corresponding port or flow table.
  • embodiments of the present invention can be provided as a method, system, or computer program product.
  • embodiments of the invention may be in the form of an entirely hardware embodiment, an entirely software embodiment, or a combination of software and hardware.
  • embodiments of the invention may take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage and optical storage, etc.) in which computer usable program code is embodied.
  • the computer program instructions can also be stored in a computer readable memory that can direct a computer or other programmable data processing device to operate in a particular manner, such that the instructions stored in the computer readable memory produce an article of manufacture comprising the instruction device.
  • the apparatus implements the functions specified in one or more blocks of a flow or a flow and/or block diagram of the flowchart.
  • These computer program instructions can also be loaded onto a computer or other programmable data processing device such that a series of operational steps are performed on a computer or other programmable device to produce computer-implemented processing for execution on a computer or other programmable device.
  • the instructions provide steps for implementing the functions specified in one or more of the flow or in a block or blocks of a flow diagram.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

本发明实施例提供了一种SDN及其转发报文的方法和装置，SDN包括SDN控制器和SDN交换机，其中SDN交换机包括处理器和数据路径，SDN交换机还包括：第一收发器，用于接收第一报文并确认第一报文是发送给SDN控制器，则将第一报文转发给通道代理模块；通道代理模块用于将SDN控制器的地址信息添加到第一报文并封装为第二报文，然后将第二报文发送到控制器；第一收发器，还用于接收SDN控制器发送的第三报文并转发给通道代理模块，通道代理模块还用于将第三报文中的控制信息和地址信息删除并转化为第四报文，并根据第三报文中的控制信息中携带的端口号和/或流表号将第四报文发送至对应的端口或流表。基于本发明实施例，降低了SDN转发报文的时延。

Description

一种SDN及其报文转发的方法和装置 技术领域
本发明涉及软件定义网络(Software Defined Network，SDN)技术领域，尤其涉及一种SDN及其报文转发的方法和装置。
背景技术
如图1所示，软件定义网络(Software Defined Network,SDN)是一种新型网络创新架构，和传统网络架构相比，SDN网络架构的核心是在网络中引入一个SDN控制器(Controller,下文控制器、网络控制器都是指SDN控制器)，实现转发控制分离和集中控制。SDN控制器就如同网络的大脑，可以对所有转发设备进行控制；SDN交换机如同手脚，听命于控制器，其转发所依赖的数据完全来自于SDN控制器。现在的SDN核心技术是基于开放流协议(OpenFlow Protocol)来实现。基于OpenFlow协议的SDN网络为OpenFlow网络，OpenFlow网络包括开放流控制器(OpenFlow Controller，OFC)以及开放流交换机(OpenFlow Switch，OFS)。OFS包括处理器(CPU)和数据路径(Data Path)，处理器具备OpenFlow代理(OpenFlow Agent)功能，数据路径包括若干个流表(Flow Table)和一个组表(Group Table)，这些表用来执行报文查找和转发。OpenFlow通道(OpenFlow Channel)是OpenFlow交换机和控制器通信的接口，通过该接口，交换机通过OpenFlow协议和控制器通信。流表中包括多个流表项，如果要转发的报文在流表中有对应的流表项，则根据流表对报文进行转发，如果流表中没有对应的流表项，则OFS会向OFC请求指令，OFC收到OFS请求后会给OFS下发流表的流表项，OFS得到下发的流表项后添加到流表项，从而根据新的流表对报文进行转发。
如图2所示，OFS和OFC之间通过OFA代理(OpenFlow Agent)的OpenFlow通道(OpenFlow Channel)进行通信。OFA部署在CPU软件上，完成和SDN控制器建立OpenFlow通道，并进行通信的要求。由SDN交换机发送至SDN控制器的协议报文称为packet in报文，由SDN控制器发送至SDN交换机的协议报文称为Packet out报文。在SDN的控制与转发分离的架构下，协议报文需要上送到SDN控制器，由SDN控制器进行协议的处理，转发器的CPU转发会带来额外的时延，通常是10ms级，对于性能敏感的协议(如IGMP，ERPS等)，会导致时延性能不达标。
发明内容
本发明实施例提供一种SDN及其转发报文的方法和装置，降低了转发报文的时延。
第一方面，本发明实施例提供了一种软件定义网络，所述软件定义网络包括SDN控制器和SDN交换机，其中所述SDN交换机包括处理器和数据路径，所述SDN交换机还包括：
第一收发器，用于接收第一报文并确认所述第一报文是发送给所述控制器，则将所述第一报文转发给通道代理模块；
所述通道代理模块，用于将SDN控制器的地址信息添加到所述第一报文并封装为第二报文，然后将所述第二报文发送到所述控制器；
所述第一收发器，还用于接收所述SDN控制器发送的第三报文并转发给所述通道代理模 块，所述通道代理模块还用于将所述第三报文中的控制信息和地址信息删除并转化为第四报文，并根据所述第三报文中的控制信息中携带的端口号和/或流表号将所述第四报文发送至对应的端口或流表。
一种可能的设计中，所述第二报文和所述第三报文为动态主机配置协议DHCP报文、网路群组管理协议IGMP报文、以太网环保护ERPS报文中的一种。
一种可能的设计中，所述收发器还用于：接收所述控制器下发的所述通道代理模块与所述控制器通信需要的所述控制信息和地址信息，所述控制信息和地址信息包括但不限于：SDN交换机的IP地址、SDN控制器的IP地址和OpenFlow版本号。
一种可能的设计中，所述收发器还用于：接收所述SDN控制器下发的用于所述控制器和SDN交换机之间数据传输的加密/解密算法模式。
一种可能的设计中，所述的软件定义网络还包括：采用所述加密/解密算法模式对所述第二报文和第三报文进行加密和解密。
第二方面，一种软件定义网络转发报文的方法，包括：
接收第一报文并确认所述第一报文是发送给所述SDN控制器，则将所述第一报文转发给通道代理模块；
所述通道代理模块将SDN控制器的地址信息添加到所述第一报文并封装为第二报文，然后将所述第二报文发送到所述控制器；
接收所述SDN控制器发送的第三报文并转发给所述通道代理模块，所述通道代理模块将所述第三报文中的控制信息和地址信息删除并转化为第四报文，并根据所述第三报文中的控制信息中携带的端口号和/或流表号将所述第四报文发送至对应的端口或流表。
一种可能的设计中，所述第二报文和第三报文为动态主机配置协议DHCP报文、网路群组管理协议IGMP报文、以太网环保护ERPS报文中的一种。
一种可能的设计中，方法还包括：接收所述控制器下发的所述通道代理模块与所述控制器通信需要的所述控制信息和地址信息，所述控制信息和地址信息包括但不限于：SDN交换机的IP地址、SDN控制器的IP地址和OpenFlow版本号。
一种可能的设计中，方法还包括：接收所述控制器下发的用于所述SDN控制器和SDN交换机之间数据传输的加密/解密算法模式。
一种可能的设计中，方法还包括：采用所述加密算法模式对所述第二报文和第三报文进行加密和解密。
第三方面，一种通道代理模块，位于软件定义网络的SDN交换机，包括：
第二收发器，用于接收第一报文；将所述第二报文发送到所述控制器；接收所述控制器发送的第三报文；根据所述第三报文中的控制信息中携带的端口号和/或流表号将所述第四报文发送至对应的端口或流表；
处理器，用于将SDN控制器的地址信息添加到所述第一报文并封装为第二报文并发送给所述第二收发器；将所述第三报文中的控制信息和地址信息删除并转化为第四报文并发送给所述第二收发器。
一种可能的设计中，所述通道代理模块为网络处理器NP，或现场可编程门阵列FPGA、或专用集成电路ASIC中的一种。
本发明实施例通过在SDN交换机上设立通道代理模块，以前由SDN交换机的CPU来转 发给SDN控制器的报文改由通道代理模块来转发，降低了SDN转发报文的时延。
附图说明
图1为现有SDN架构示意图；
图2为现有SDN报文转发示意图；
图3为本发明实施例提供的一种软件定义网络转发报文的的方法流程图；
图4为本发明实施例提供的一种SDN控制器和SDN交换机之间转发报文的示意图；
图5为本发明实施例提供的一种packet in报文帧结构示意图；
图6为本发明实施例提供的一种packet out报文帧结构示意图；
图7为本发明实施例提供的一种SDN交换机的功能框图；
图8为本发明实施例提供的另一种SDN交换机的功能框图；
图9为本发明实施例提供的一种数据通信装置的功能框图。
具体实施方式
为使本发明的目的、技术方案及优点更加清楚明白，以下将通过具体实施例和相关附图，对本发明作进一步详细说明。
本实施例中，SDN网络架构包括一个或多个SDN交换机以及一个或多个SDN控制器，这些SDN交换机以及SDN控制器可以使用OpenFlow协议或者其他协议进行通信。以下各实施例中，主要基于由OFS以及OFC构成的OpenFlow网络对本方案进行具体介绍，当然，本发明各实施例中基于OpenFlow网络的相关方案也同样适用于其他类似协议实现的SDN网络。
首先需要对OpenFlow交换机内部原理进行介绍。如图2所示，利用OpenFlow协议，交换机要么通过“交换机请求－>控制器反应”的方式，要么通过“控制器主动控制而无需交换机请求”的方式，对流表的表项进行增加、更新和删除。每个流表由一个个表项组成；每个表项由报文匹配域，计数器及处理指令组成。报文匹配过程是从编号最小的流表开始，根据控制器的编排，可以用一个流表或相互串接的多个流表来完成一个报文转发任务。在同一个流表中，流表项的安排也是有次序的，优先级最高的表项放在最前面。当报文匹配到某个表项时，这个表项中的指令就会被执行；如果报文匹配不到任何表项，根据是否配置了“table-miss”表项，交换机要么采用将此报文通过OpenFlow协议上送到控制器，或者将此报文丢弃，或者交给下一级流表进行处理。
在流表项中，一个报文可以要求转发到一个端口。这个端口通常是一个交换机的物理端口，但这个端口也可能是一个逻辑端口或保留端口。逻辑端口通常指汇聚端口(Trunk)、隧道或环回接口。保留端口其实代表了一种转发行为，比如说，将报文送给控制器，将报文泛洪到所有物理端口，或者，用一种传统交换机方法而不是OpenFlow方法来处理报文。本实施例及以下各实施例中，为了兼顾本领域技术人员的对端口的用法以及方便说明，不并针对每个端口一一指出其所表达的为“物理端口”或者“逻辑端口”，本领域技术人员结合上下文可以很容易知道“端口”为哪种类型的端口。
以下各实施例中，由SDN交换机发送至SDN控制器的协议报文称为packet in报文，由SDN控制器发送至SDN交换机的协议报文称为Packet out报文。
实施例一
请参阅图3所示，图3为本发明实施例提供了一种软件定义网络SDN转发报文的方法流程图。图4为对应的场景图，该方法包括以下流程步骤：
如图4所示，SDN采用OpenFlow协议时，首先需要SDN交换机的CPU的OFA(OpenFlow Agent，OpenFlow代理)和SDN控制器的OFA建立主用的OpenFlow通道(OpenFlow Channel)。其次需要SDN交换机的CPU的OFA和SDN控制器的OFA建立辅助的OpenFlow Channel。当辅助的OpenFlow Channel建立之后，将需要和SDN控制器通信的参数下发给SDN交换机的代理通道模块，包括但不限于SDN交换机的IP地址，SDN控制器的IP地址，OpenFlow版本号等关键参数。如果SDN交换机和SDN控制器之间是加密传输，还需要把加密算法的模式下发给通道代理模块。后续，通道代理模块采用所述加密/解密算法模式对所述第二报文和第三报文进行加密和解密。
具体的，方法包括：
步骤301：SDN交换机接收第一报文，查找流表，如果第一报文匹配不到任何表项，确认所述第一报文是需要发送给所述SDN控制器，则将所述第一报文转发给通道代理模块。
步骤302：所述通道代理模块将SDN控制器的地址信息添加到所述第一报文并封装为第二报文也即packet in报文，然后将所述第二报文通过辅助的OpenFlow通道发送到所述控制器。
需要说明的是，除了SDN控制器的地址信息(比如IP地址)之外，还可以根据需要将比如目的MAC地址、源MAC地址、VLAN信息等信息添加到第一报文然后封装为第二报文，保证第二报文能够顺利地发给SDN控制器。
packet in报文还可以添加比如OPenFlow Header字段，OPenFlow Header字段包括Openflow版本信息、长度、Buffer ID、Traction ID、流表编号Table ID等等。如果第二报文通过用户数据报协议(User Datagram Protocol，UDP)协议实现，第二报文还需要携带源UDP端口，目的UDP端口等参数信息。
具体的，第二报文具体帧格式可以如图5所示OPenFlow SDN标准定义的packet in报文格式，因为本发明实施例并不涉及报文格式的改动，以上字段的含义并参照标准中的定义，在此不再赘述。SDN采用其他的协议也可以参照以上的报文格式。
步骤303：SDN交换机接收所述SDN控制器发送的第三报文也即packet out报文并转发给所述通道代理模块。第三报文通过辅助的OpenFlow通道发送给SDN交换机。
步骤304：通道代理模块将所述第三报文中的控制信息和地址信息删除得到第四报文，并根据所述第三报文中的控制信息中携带的端口号和/或流表号将所述第四报文转发至对应的端口或流表。
其中packet out报文与packet in报文的帧结构类似，不同之处在于除了packet out报文中的地址信息是SDN交换器的地址信息外，packet out报文中还携带有SDN控制器下发的控制信息，比如控制信息中携带端口号和/或流表号，第四报文根据所述端口号和流表号被转发至对应的端口或流表。如图6所示，图6中Packet out报文包含action字段，action字段可以用来携带控制信息。因为本发明实施例并不涉及报文格式的改动，以上字段的含义并参照标准中的定义，在此不再赘述。
上述步骤302-304中，第二报文和第三报文具体可以是IGMP(Internet Group Management  Protocol，因特网组管理协议)、DHCP(Dynamic Host Configuration Protocol，动态主机配置协议)、ERPS(Ethernet Ring Protection Switching，以太网环保护)等协议报文。
packet in报文由SDN交换机的OpenFlow通道代理(OpenFlow Channel Agent，OFCA)模块转发给SDN控制器。SDN控制器发送packet out报文给OpenFlow通道代理(OpenFlow Channel Agent，OFCA)模块，OFCA将packet out报文中的控制信息和地址信息删除得到第四报文，并根据所packet out报文中的控制信息中携带的端口号和/或流表号将所述第四报文转发至对应的端口或流表。
本发明实施例通过在SDN交换机上设立通道代理模块，以前由SDN交换机的CPU来转发的报文改由通道代理模块来转发，降低了转发报文的时延。
实施例二
本发明实施例提供了一种软件定义网络，架构如图1所示，该实施例中软件定义网络包括SDN控制器和SDN交换机，其中所述SDN控制器和所述SDN交换机通过通信通道交互。本实施例中SDN交换机包括处理器和数据路径，处理器包括OpenFlow代理，如图7所示，其中SDN交换机还包括：
第一收发器601，用于接收第一报文并确认所述第一报文是发送给所述SDN控制器603，则将所述第一报文转发给通道代理模块602；
通道代理模块602，用于将SDN控制器的地址信息添加到所述第一报文并封装为第二报文，然后将所述第二报文通过辅助的OpenFlow通道发送到所述SDN控制器503。
第一收发器601还用于接收所述SDN控制器603发送的第三报文并转发给所述通道代理模块602，通道代理模块602还用于将所述第三报文中的控制信息和地址信息删除并转化为第四报文，并根据所述第三报文中的控制信息中携带的端口号和/或流表号将该第四报文发送至对应的端口或流表。
本发明实施例通过在SDN交换机上设立通道代理模块，以前由SDN交换机的CPU来转发给SDN控制器的报文改由通道代理模块来转发，原有CPU除了不再承担报文的转发工作以外仍承担原来的工作，等于本发明实施例中SDN交换具有“双核”的功能，实现降低转发报文的时延。
实施例三
如图8所示，本发明实施还提供了一种通道代理模块，位于软件定义网络的SDN交换机内部，该通道代理模块包括第二收发器701和处理器702。
第二收发器701接收第一报文并发送给处理器702，处理器702用于将SDN控制器的地址信息添加到所述第一报文并封装为第二报文并发送给所述第二收发器701；第二收发器701将所述第二报文发送到SDN控制器。然后第二收发器701接收所述控制器发送的第三报文并转给处理器702处理。处理器702将第三报文中的控制信息和地址信息删除并转化为第四报文并发送给所述第二收发器701。第二收发器701再根据所述第三报文中的控制信息中携带的端口号和/或流表号将所述第四报文发送至对应的端口或流表。
本实施例中通道代理模块通过网络处理器(Network Processor，NP)，或现场可编程门阵列(Field Programmable Gate Array，FPGA)、或专用集成电路(Application-specific Integrated  Circuits，ASIC)实现。通过在SDN交换机上设立通道代理模块，以前由SDN交换机的CPU来转发给SDN控制器的报文改由通道代理模块来转发，原有CPU除了不再承担报文的转发工作以外仍承担原来的工作，等于本发明实施例中SDN交换具有“双核”的功能，实现降低转发报文的时延。
如图9所示，本发明实施例还公开了一种数据通信装置，包括处理器810、存储器820和总线系统830，该处理器810和该存储器820通过该总线系统830相连，该存储器820用于存储指令，该处理器810用于执行该存储器820存储的指令，
其中，该处理器810用于接收第一报文并确认所述第一报文是发送给所述SDN控制器，则将所述第一报文转发给通道代理模块；所述通道代理模块将SDN控制器的地址信息添加到所述第一报文并封装为第二报文，然后将所述第二报文发送到所述控制器；接收所述SDN控制器发送的第三报文并转发给所述通道代理模块，所述通道代理模块将所述第三报文中的控制信息和地址信息删除并转化为第四报文，并根据所述第三报文中的控制信息中携带的端口号和/或流表号将所述第四报文发送至对应的端口或流表。
具体处理器810的具体执行流程可以参见图3所示的流程图对应的描述，这里就不再赘述。
本领域内的技术人员应明白，本发明的实施例可提供为方法、系统、或计算机程序产品。因此，本发明实施例可采用完全硬件实施例、完全软件实施例、或结合软件和硬件方面的实施例的形式。而且，本发明实施例可采用在一个或多个其中包含有计算机可用程序代码的计算机可用存储介质(包括但不限于磁盘存储器和光学存储器等)上实施的计算机程序产品的形式。
本申请是参照根据本发明实施例的方法、设备(系统)、和计算机程序产品的流程图和/或方框图来描述的。应理解可由计算机程序指令实现流程图和/或方框图中的每一流程和/或方框、以及流程图和/或方框图中的流程和/或方框的结合。可提供这些计算机程序指令到通用计算机、专用计算机、嵌入式处理机或其他可编程数据处理设备的处理器以产生一个机器，使得通过计算机或其他可编程数据处理设备的处理器执行的指令产生用于实现在流程图一个流程或多个流程和/或方框图一个方框或多个方框中指定的功能的装置。
这些计算机程序指令也可存储在能引导计算机或其他可编程数据处理设备以特定方式工作的计算机可读存储器中，使得存储在该计算机可读存储器中的指令产生包括指令装置的制造品，该指令装置实现在流程图一个流程或多个流程和/或方框图一个方框或多个方框中指定的功能。
这些计算机程序指令也可装载到计算机或其他可编程数据处理设备上，使得在计算机或其他可编程设备上执行一系列操作步骤以产生计算机实现的处理，从而在计算机或其他可编程设备上执行的指令提供用于实现在流程图一个流程或多个流程和/或方框图一个方框或多个方框中指定的功能的步骤。
显然，本领域的技术人员可以对本申请进行各种改动和变型而不脱离本申请的精神和范围。这样，倘若本申请的这些修改和变型属于本申请权利要求及其等同技术的范围之内，则本申请也意图包含这些改动和变型在内。

Claims (12)

  1. 一种软件定义网络，所述软件定义网络包括SDN控制器和SDN交换机，其特征在于，其中所述SDN交换机包括处理器和数据路径，所述SDN交换机还包括：
    第一收发器，用于接收第一报文并确认所述第一报文是发送给所述控制器，则将所述第一报文转发给通道代理模块；
    所述通道代理模块，用于将SDN控制器的地址信息添加到所述第一报文并封装为第二报文，然后将所述第二报文发送到所述控制器；
    所述第一收发器，还用于接收所述SDN控制器发送的第三报文并转发给所述通道代理模块，所述通道代理模块还用于将所述第三报文中的控制信息和地址信息删除并转化为第四报文，并根据所述第三报文中的控制信息中携带的端口号和/或流表号将所述第四报文发送至对应的端口或流表。
  2. 根据权利要求1所述的软件定义网络，其特征在于，所述第二报文和所述第三报文为动态主机配置协议DHCP报文、网路群组管理协议IGMP报文、以太网环保护ERPS报文中的一种。
  3. 根据权利要求1所述的软件定义网络，其特征在于，所述收发器还用于：接收所述控制器下发的所述通道代理模块与所述控制器通信需要的所述控制信息和地址信息，所述控制信息和地址信息包括但不限于：SDN交换机的IP地址、SDN控制器的IP地址和OpenFlow版本号。
  4. 根据权利要求1至3任一项所述的软件定义网络，其特征在于，所述收发器还用于：接收所述SDN控制器下发的用于所述控制器和SDN交换机之间数据传输的加密/解密算法模式。
  5. 如权利要求4所述的软件定义网络，其特征在于，还包括：采用所述加密/解密算法模式对所述第二报文和第三报文进行加密和解密。
  6. 一种软件定义网络转发报文的方法，其特征在于，包括：
    接收第一报文并确认所述第一报文是发送给所述SDN控制器，则将所述第一报文转发给通道代理模块；
    所述通道代理模块将SDN控制器的地址信息添加到所述第一报文并封装为第二报文，然后将所述第二报文发送到所述控制器；
    接收所述SDN控制器发送的第三报文并转发给所述通道代理模块，所述通道代理模块将所述第三报文中的控制信息和地址信息删除并转化为第四报文，并根据所述第三报文中的控制信息中携带的端口号和/或流表号将所述第四报文发送至对应的端口或流表。
  7. 如权利要求6所述的方法，其特征在于，所述第二报文和第三报文为动态主机配置协议DHCP报文、网路群组管理协议IGMP报文、以太网环保护ERPS报文中的一种。
  8. 如权利要求6所述的方法，其特征在于，还包括：接收所述控制器下发的所述通道代理模块与所述控制器通信需要的所述控制信息和地址信息，所述控制信息和地址信息包括但不限于：SDN交换机的IP地址、SDN控制器的IP地址和OpenFlow版本号。
  9. 如权利要求6至8任一项所述的方法，其特征在于，还包括：接收所述控制器下发的用于所述SDN控制器和SDN交换机之间数据传输的加密/解密算法模式。
  10. 如权利要求9所述的方法，其特征在于，还包括：采用所述加密算法模式对所述第 二报文和第三报文进行加密和解密。
  11. 一种通道代理模块，位于软件定义网络的SDN交换机，其特征在于，包括：
    第二收发器，用于接收第一报文；将所述第二报文发送到所述控制器；接收所述控制器发送的第三报文；根据所述第三报文中的控制信息中携带的端口号和/或流表号将所述第四报文发送至对应的端口或流表；
    处理器，用于将SDN控制器的地址信息添加到所述第一报文并封装为第二报文并发送给所述第二收发器；将所述第三报文中的控制信息和地址信息删除并转化为第四报文并发送给所述第二收发器。
  12. 根据权利要求11所述的通道代理模块，其特征在于，所述通道代理模块为网络处理器NP，或现场可编程门阵列FPGA、或专用集成电路ASIC中的一种。
PCT/CN2017/076650 2017-03-14 2017-03-14 一种sdn及其报文转发的方法和装置 WO2018165866A1 (zh)

Priority Applications (3)

Application Number Priority Date Filing Date Title
CN201780085006.5A CN110235417B (zh) 2017-03-14 2017-03-14 一种sdn及其报文转发的方法和装置
PCT/CN2017/076650 WO2018165866A1 (zh) 2017-03-14 2017-03-14 一种sdn及其报文转发的方法和装置
US16/571,115 US10951520B2 (en) 2017-03-14 2019-09-14 SDN, method for forwarding packet by SDN, and apparatus

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
PCT/CN2017/076650 WO2018165866A1 (zh) 2017-03-14 2017-03-14 一种sdn及其报文转发的方法和装置

Related Child Applications (1)

Application Number Title Priority Date Filing Date
US16/571,115 Continuation US10951520B2 (en) 2017-03-14 2019-09-14 SDN, method for forwarding packet by SDN, and apparatus

Publications (1)

Publication Number Publication Date
WO2018165866A1 true WO2018165866A1 (zh) 2018-09-20

Family

ID=63523543

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2017/076650 WO2018165866A1 (zh) 2017-03-14 2017-03-14 一种sdn及其报文转发的方法和装置

Country Status (3)

Country Link
US (1) US10951520B2 (zh)
CN (1) CN110235417B (zh)
WO (1) WO2018165866A1 (zh)

Families Citing this family (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2020005051A (ja) * 2018-06-26 2020-01-09 富士通株式会社 制御プログラム、制御装置、及び制御方法
CN113225376B (zh) * 2021-03-29 2022-07-08 桂林电子科技大学 一种基于fpga的以太网帧与sdn数据帧的适配方法
CN116248618B (zh) * 2023-05-08 2023-09-08 河北豪沃尔智能科技有限责任公司 信息传输装置、信息传输线路故障检测方法及设备

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104735001A (zh) * 2013-12-24 2015-06-24 中兴通讯股份有限公司 软件定义网络中的链路发现方法、装置及系统
US20150180769A1 (en) * 2013-12-20 2015-06-25 Alcatel-Lucent Usa Inc. Scale-up of sdn control plane using virtual switch based overlay
CN105490960A (zh) * 2014-09-15 2016-04-13 中兴通讯股份有限公司 Sdn架构、基于sdn架构的报文转发方法
CN105634923A (zh) * 2015-12-29 2016-06-01 北京邮电大学 基于sdn控制器的以太网广播优化处理方法

Family Cites Families (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103973828B (zh) * 2013-02-01 2017-07-14 华为技术有限公司 一种dhcp客户端获取ip地址的方法及装置
CN104158749A (zh) * 2013-05-14 2014-11-19 华为技术有限公司 软件定义网络中报文转发方法、网络设备及软件定义网络
CN104253770B (zh) * 2013-06-27 2017-07-14 新华三技术有限公司 实现分布式虚拟交换机系统的方法及设备
WO2015077976A1 (zh) * 2013-11-29 2015-06-04 华为技术有限公司 一种流表项的下发方法及装置
CN105100142B (zh) * 2014-05-04 2018-10-09 新华三技术有限公司 软件定义网络协议报文的传输控制方法及装置
US10375043B2 (en) * 2014-10-28 2019-08-06 International Business Machines Corporation End-to-end encryption in a software defined network
US10341311B2 (en) * 2015-07-20 2019-07-02 Schweitzer Engineering Laboratories, Inc. Communication device for implementing selective encryption in a software defined network

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20150180769A1 (en) * 2013-12-20 2015-06-25 Alcatel-Lucent Usa Inc. Scale-up of sdn control plane using virtual switch based overlay
CN104735001A (zh) * 2013-12-24 2015-06-24 中兴通讯股份有限公司 软件定义网络中的链路发现方法、装置及系统
CN105490960A (zh) * 2014-09-15 2016-04-13 中兴通讯股份有限公司 Sdn架构、基于sdn架构的报文转发方法
CN105634923A (zh) * 2015-12-29 2016-06-01 北京邮电大学 基于sdn控制器的以太网广播优化处理方法

Also Published As

Publication number Publication date
CN110235417A (zh) 2019-09-13
US10951520B2 (en) 2021-03-16
US20200028777A1 (en) 2020-01-23
CN110235417B (zh) 2021-02-05

Similar Documents

Publication Publication Date Title
US11240065B2 (en) NSH encapsulation for traffic steering
US8982707B2 (en) Interoperability of data plane based overlays and control plane based overlays in a network environment
EP3018861B1 (en) Configuration information sending method, system and apparatus
WO2018040529A1 (zh) 一种报文处理方法、设备及系统
US20150150073A1 (en) Smart Virtual Private Network
JP2008104040A (ja) 共通鍵生成装置および共通鍵生成方法
WO2014198060A1 (zh) 一种数据报文的路由方法和设备
EP3091713A1 (en) Method, switch, and controller for implementing arp
CN110535748B (zh) 一种vpn隧道模式优化方法及系统
US10951520B2 (en) SDN, method for forwarding packet by SDN, and apparatus
US10498669B2 (en) Communication system, switch, controller, ancillary data management apparatus, data forwarding method, and program
WO2015143802A1 (zh) 业务功能链处理方法及装置
US10742476B2 (en) Data packet processing method and device
CN103067290A (zh) 基于虚拟网卡适应负载均衡网络的vpn隧道实现方法
US20160080340A1 (en) Communication control device
WO2017015839A1 (zh) 一种基于sdn的arp实现方法及装置
CN106790200B (zh) Capwap控制通道dtls加解密的芯片协处理方法
CN106161386B (zh) 一种实现IPsec分流的方法和装置
JP6629681B2 (ja) スイッチ装置および中継システム
WO2016017737A1 (ja) スイッチ、オーバーレイネットワークシステム、通信方法及びプログラム
US20180262473A1 (en) Encrypted data packet
CN115442121A (zh) 一种流量传输方法、系统、装置及存储介质
EP4054149A1 (en) Method and apparatus for configuring aging time of media access control address
EP3389231A1 (en) Cluster and forwarding method
CN109194558B (zh) 隧道报文认证转发方法及系统

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 17901004

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 17901004

Country of ref document: EP

Kind code of ref document: A1