WO2018214359A1

WO2018214359A1 - Method for processing data packet, and access network device and non-transient readable storage medium

Info

Publication number: WO2018214359A1
Application number: PCT/CN2017/103768
Authority: WO
Inventors: 朱修利
Original assignee: 深圳市中兴微电子技术有限公司
Priority date: 2017-05-22
Filing date: 2017-09-27
Publication date: 2018-11-29
Also published as: CN108933756B; CN108933756A

Abstract

Disclosed is a method for processing a data packet. The method comprises: acquiring descriptor information about a data packet, and a pre-set enable flag bit and pre-set enable modification information corresponding to the descriptor information; according to the pre-set enable flag bit, searching for first data information, to be modified, in the data packet, and replacing the first data information with the pre-set enable information so as to obtain an enable data packet; and acquiring a pre-set modification instruction corresponding to the descriptor information, and modifying the enable data packet according to the pre-set modification instruction. Also disclosed in the present invention are an access network device and a non-transient readable storage medium.

Description

Data packet processing method, access network device and non-transitory readable storage medium

Cross-reference to related applications

The present application is based on a Chinese patent application filed on Jan. 22, 2017, the filing date of

Technical field

The present invention relates to communication technologies, and in particular, to a data packet processing method, an access network device, and a non-transitory readable storage medium.

Background technique

With the rapid development of Internet technology, users have more and more demand for access network traffic, such as Internet Protocol Television (IPTV), online live broadcast, high-definition video, wireless smart devices, etc., in order to meet users. For high-speed transmission requirements, devices with uplink and downlink transmission rates exceeding 1000 megabits per second (Mbps) are beginning to be developed and produced.

For the access network device, if the packet switching and routing function is to be completed, the data packet needs to be modified accordingly, such as: Media Access Control (MAC, Media Access Control) address translation, virtual local area network (VLAN, Virtual Local) Area Network) Add, delete or modify, Layer 3 Internet Protocol (IP) address and Network Address Port Translation (NAPT), Ethernet-based Point-to-Point Protocol over Ethernet (PPPOE) ) configuration information modification, Internet Protocol Version 4 (IPv4, Internet Protocol Version 4) to Internet Protocol Version 6 (IPv6, Internet Protocol Version 6), light double-stack (Ds-lite, Double stack-lite) configuration information modification, etc. .

At present, the commonly used packet processing method is instruction modification, and the processing method is: writing the instruction and the modified data into a random access memory (RAM, Random Access Memory), and performing stepwise modification by parsing the instruction until the last instruction is completed. Through the instruction modification method, since a large number of instructions are needed to implement data packet modification during the packet modification process, excessive instruction parsing may affect the performance of the device.

Summary of the invention

In view of this, the embodiments of the present invention are expected to provide a method for processing a data packet, an access network device, and a non-transitory readable storage medium, to implement rapid modification of the data packet.

To achieve the above objective, the technical solution of the embodiment of the present invention is implemented as follows:

An embodiment of the present invention provides a method for processing a data packet, where the method includes:

Obtaining descriptor information of the data packet, and preset enable flag bits and preset enable modification information corresponding to the descriptor information;

And the first data information to be modified in the data packet is searched according to the preset enable flag, and the first data information is replaced with the preset enable information to obtain an enable data packet.

Obtaining a preset modification instruction corresponding to the descriptor information, and modifying the enabled data packet according to the preset modification instruction.

In the foregoing solution, the preset enable modification information includes at least one of the following: a source media access control address (SMAC), a destination media access control address (DMAC, a destination media access control), and a differential service code point. (DSCP, Differentiated Services Code Point), Source Internet Protocol (SIP), Destination Internet Protocol (DIP, Destination Internet Protocol), Source Port Number (SPORT, Source PORT), Destination Port Number (DPORT, Destination) PORT), the lifetime of the packet (TTL, Time To Live), checksum (CHECKSUM).

In the above solution, the obtaining a preset modification instruction corresponding to the descriptor information, and modifying the enabled data packet according to the preset modification instruction, includes:

Acquiring a preset modification instruction corresponding to the descriptor information from a preset instruction set according to a preset priority;

Parsing the obtained preset modification instruction, obtaining the modification information carried by the preset modification instruction and the modification indicator corresponding to the modification information;

And modifying the enabled data packet according to the modification manner corresponding to the modification indicator and the modification information.

In the above solution, the modification indicator includes at least one of the following types: a replacement indicator, an addition indicator, and a deletion indicator.

In the foregoing solution, before the modifying the enabled data packet according to the preset modification instruction, the method further includes:

And acquiring second data information to be replaced or to be deleted in the enabled data packet according to the descriptor information.

In the foregoing solution, the modifying the enabled data packet according to the modification manner corresponding to the modification indicator and the modification information includes:

When the modification indicator is a replacement indicator, replacing the third data information in the enabled data packet with the modification information corresponding to the replacement indicator;

When the modification indicator is an add indicator, adding a header composed of modification information corresponding to the added indicator to the enabled data packet;

When the modification indicator is a deletion indicator, the information corresponding to the third data information in the enabled data packet is deleted according to the modification information corresponding to the deletion indicator.

In the above solution, the modification information includes at least one of the following: VLAN information, PPPoE header information, IPv6 header information, and IPv4 header information.

In the above solution, after the obtaining the descriptor information of the data packet, the method further includes:

Obtaining type information of a network connected to the access network device;

The replacing the first data information with the preset enabling information to obtain an enabling data packet, include:

When the type information meets the first preset rule, the first data information is replaced with the preset enable information to obtain an enabled data packet.

And modifying the enabled data packet according to the preset modification instruction, including:

When the type information meets the second preset rule, the enabled data packet is modified according to the preset modification instruction.

In the above solution, the descriptor information is used to describe a structure of the data packet;

And the acquiring the preset enable modification information corresponding to the descriptor information, including:

Obtaining corresponding preset enable modification information according to the structure of the data packet.

An embodiment of the present invention further provides an access network device, where the device includes:

a packet descriptor module, configured to acquire descriptor information of the data packet, and preset enable flag bits and preset enable modification information corresponding to the descriptor information;

The modification module is configured to search for the first data information to be modified in the data packet according to the preset enable flag, and replace the first data information with the preset enable information to obtain the enable data pack;

The instruction modification module is configured to acquire the preset modification instruction corresponding to the descriptor information, and modify the enabled data packet according to the preset modification instruction;

a data packet storage module configured to store a data packet sent by the network side;

The preset information storage module is configured to store the preset enable modification information and the preset modification instruction.

In the above solution, the preset enable modification information includes at least one of the following: SMAC, DMAC, DSCP, SIP, DIP, SPORT, DPORT, TTL of the data packet, and CHECKSUM.

In the above solution, the instruction modification module is specifically configured as:

Obtaining a preset corresponding to the descriptor information from a preset instruction set according to a preset priority Modify the instruction;

In the above solution, the instruction modification module is further configured to: before the modification of the enabled data packet according to the preset modification instruction, acquire, according to the descriptor information, the to-be-replaced or to be replaced in the enabled data packet. Deleted second data information.

In the foregoing solution, the data packet descriptor module is further configured to: after acquiring descriptor information of the data packet, acquire type information of a network to which the access network device is connected;

The modification module is enabled, and the specific configuration is:

The instruction modification module is specifically configured as:

In the above solution, the descriptor information is configured to describe a structure of the data packet;

The instruction modification module is specifically configured as:

An embodiment of the present invention further provides an access network device, the device comprising: a processor and a memory configured to store an executable program executable on the processor; wherein the processor is configured to run the When the program is executed, the processing method of the data packet described in the embodiment of the present invention is executed.

The embodiment of the present invention further provides a non-transitory readable storage medium, where the non-transitory readable storage medium stores an executable program, and the executable program is configured to execute the data packet according to the embodiment of the present invention. Processing method.

The embodiment of the present invention provides a data packet processing method, an access network device, and a non-transitory readable storage medium. According to the embodiment of the present invention, descriptor information in an Ethernet data packet can be read and read based on The descriptor information respectively obtains the preset enable modification information and the modification instruction, and then enables the modification of the Ethernet data packet according to the obtained enable modification information; in addition, it is enabled according to the obtained modification instruction pair. The modified Ethernet packet is modified by the instruction. The embodiment of the present invention combines the enabling modification method and the enabling modification method, and has the advantages of quick modification speed, simple control, and the like, and avoids excessive instruction and modification caused by simple instruction modification. Complexity and other shortcomings, improve network output performance, etc.; compared with the method of enabling only modification, it has more flexible features, which can meet the new modification requirements in the future.

DRAWINGS

1 is a schematic flowchart of an implementation process of a data packet processing method according to an embodiment of the present invention;

2 is a schematic structural diagram of a structure of an access network device according to an embodiment of the present invention;

FIG. 3 is a schematic flowchart of enabling modification according to an embodiment of the present disclosure;

4 is a schematic flowchart of instruction modification according to an embodiment of the present invention;

FIG. 5 is a schematic flowchart of an implementation process of a data packet processing method according to an embodiment of the present disclosure;

FIG. 6 is a schematic structural diagram of a structure of an access network device according to an embodiment of the present invention.

detailed description

The technical solutions in the embodiments of the present invention will be clearly and completely described in the following with reference to the accompanying drawings.

FIG. 1 is a schematic flowchart of a method for processing a data packet according to an embodiment of the present invention. As shown in FIG. 1 , the method may include the following steps:

Step 101: Acquire descriptor information of the data packet, and preset enable flag bits and preset enable modification information corresponding to the descriptor information.

In the embodiment of the present invention, a method for processing a data packet is applied to an access network device, where the access network device may be a router or a Layer 3 switch, or other device having a routing function. Here, the data packet may be an Ethernet data packet. It is worth noting that the data packet may be an IPv4 type or IPv6 type Ethernet data packet; it may also be an Ethernet data packet transmitted by an IPv4 type data packet in an IPv6 network, or may also be an IPv6 type data packet in an IPv4 network. Ethernet packets transmitted in. Here, the Ethernet packet transmitted by the IPv4 type packet in the IPv6 network refers to: adding an IPv6 header based on the IPv4 type packet, so that the IPv4 type data is transmitted in the IPv6 network; similarly, The IPv6 type data packet transports the Ethernet data packet in the IPv4 network by adding an IPv4 header to the IPv6 type data packet, so that the IPv6 type data is transmitted in the IPv4 network.

Here, the preset enable flag is used to search for data information to be modified in the data packet, as shown in Table 1, where Table 1 is an enable bit name, data to be replaced, and a corresponding storage address description. . The preset enable modification information is used to replace data parameters to be modified in the data packet. The descriptor information is used to describe the structure and type of the data packet, including but not limited to: 1) a preamble for indicating synchronization, a frame start character indicating that the next byte is a destination MAC field, and an acceptance of the specified frame. DMAC address, SMAC address of the sender indicating the frame, data field of the identification frame Length and information indicating the protocol type of the data in the frame; 2) data type (such as IPv4 or IPv6) indicating the version of the IP protocol, indicating the length of the IP datagram header, indicating the total length of the IP datagram, identifying whether the IP datagram is There is also a flag of the slice, a slice offset indicating the relative position of the packet in the original packet after fragmentation, indicating the packet generation time, indicating what protocol the data carried by the datagram is, and calculating the datagram. The first CHECKSUM, the source IP address of the sender, the destination IP address of the receiver, and the DSCP information of the priority of the service; 3) the SPORT for identifying and distinguishing the application process of the source device, and the destination device The DPORT of the application process and the information about the correctness of the header part and the data part of the Transmission Control Protocol (TCP).

Table 1

In the embodiment of the present invention, after obtaining the descriptor information, the corresponding preset enable modification information is obtained according to the descriptor information; the enable modification information includes but is not limited to: a preset SMAC, a DMAC, DSCP, SIP, DIP, SPORT, DPORT, and the TTL of the packet.

For example, a corresponding pre-set DMAC is acquired according to information for indicating the DMAC address of the recipient of the frame; a corresponding pre-set SMAC or the like is acquired according to information for indicating the DMAC address of the recipient of the frame.

Step 102: Search for the first data information to be modified in the data packet according to the preset enable flag, and replace the first data information with the preset enable information to obtain an enabled data packet.

Here, step 102 completes the enabling modification process. The first data information includes: SMAC, DMAC, DSCP, SIP, DIP, SPORT, DPORT, TTL, and CHECKSUM to be modified in the data packet. The above data information is only an example, not exhaustive, including but not Only for the above data information.

In the embodiment of the present invention, after obtaining the descriptor information and the preset enabling information, searching for the data information that needs to be modified in the data packet according to the preset enabling flag, and then searching for the required modified data. After the information is replaced with the preset enable information, the modified data packet is obtained, even if the data packet can be obtained. It is noted that before enabling the modification of the data packet, the information of CHECKSUM needs to be calculated, and the original CHECKSUM is replaced with the calculated CHECKSUM to obtain the enabled data packet. The recalculation of CHECKSUM may also be involved in subsequent instruction modification.

For example, searching for a DMAC address to be modified in the data packet according to information indicating a DMAC address of a recipient of the frame, and replacing the MAC address to be modified with a preset DMAC; according to the frame for specifying The information of the SMAC address of the sender looks up the SMAC address to be modified in the data packet, and replaces it with a preset SMAC according to the MAC address to be modified. In addition, when the data to be modified is modified, the CHECKSUM calculation is performed on the data packet, and the CHECKSUM calculation shown includes: IP_CHECKSUM, TCP_CHECKSUM, UDP_CHECKSUM.

Or, after obtaining the descriptor information and the preset enable information, acquiring, according to the descriptor information, an enable bit name to be modified in the data packet, and/or a data to be modified in the data packet. Pointer, through the enable bit and / or pointer to find the data information in the data packet that needs to be modified, and then the found modified data information is replaced with the preset enable information, thereby obtaining the modified data Package, even if it can be a packet.

For example, as shown in Table 1, the DMAC address to be modified in the data packet is searched according to the enable bit of the DMAC address, and the MAC address to be modified is replaced with a preset DMAC; enabled according to the SMAC address. The bit searches for the SMAC address to be modified in the data packet, and replaces it with a preset SMAC or the like according to the MAC address to be modified. In addition, when the data to be modified is modified, the CHECKSUM calculation is performed on the data packet, and the CHECKSUM calculation shown includes: IP_CHECKSUM, TCP_CHECKSUM, UDP_CHECKSUM.

In the embodiment of the present invention, after the acquiring the descriptor information of the data packet, the method further includes: acquiring type information of a network to which the access network device is connected; and replacing the first data information with the Determining the enable information, obtaining the enable data packet, including: when the type information When the first preset rule is met, the first data information is replaced with the preset enabling information, and an enabled data packet is obtained, as shown in FIG. 3 .

Here, the type information of the current network includes: an input type of the access network device and a network type of the output end. The network types include: public network and private network, or IPv4 network and IPv6 network. The first preset rule is: the network connected to the input end and the output end of the access network device is the same type of network. If the input end is a private network IP address, and the output end is a public network IP address, the input end is The output is not the same type of network; if the input and output are both public IP addresses, the input and output are the same type of network. The private network IP address includes the following three types: 10.0.0.0 to 10.255.255.255, or 172.16.0.0 to 172.31.255.255, or 192.168.0.0 to 192.168.255.255. Judging the network address of the input and output can be used to pave the way for modifying the information in the data packet. It should be noted that the input end and the output end are relative to the user terminal, the port connecting the user terminal is an input end, and the port connected to the Internet side is an output end. The above modifications are merely examples and are not exhaustive, including but not limited to the above modifications.

For example, if a private network user wants to go to the public network, the access network device needs to translate the IP address and MAC address and port number in the data packet sent or received by the private network user terminal. For example, if the private network user receives the data packet sent by the public network side, the access network device needs to replace the IP address and the MAC address and the port number in the data packet with the corresponding information of the private network user terminal; If the user sends a data packet to the public network side, the access network device needs to replace the IP address and the MAC address and the port number in the data packet with the corresponding information of the access network device, so that the private network user can normally access the public network. . Specifically, first, the type information of the network connected to the access network device is obtained, and it is determined that the input end and the output end of the access network device are in different network segments, for example, the input end address is 200.176.23.4, and the output end address is 192.168.1.1. The user terminal is a private network client. In this case, if the user terminal receives the data packet, the destination IP address translation, the port translation of the destination IP address, and the DMAC address conversion are performed on the data packet. After the conversion is completed, Forwarding the data packet to the user terminal; if the user terminal sends the data packet, the source IP address translation, the port translation of the source IP address, and the SMAC address conversion are performed on the data packet, and after the conversion is completed, the data packet is forwarded. Go to the other side of the network. It is determined that the input end and the output end of the access network device are in the same network segment. For example, if the input end address is 200.176.23.4 and the output end address is 200.176.23.10, the user terminal is a public network user end, and the access network device is at this time. No need for SMAC, DMAC, SIP, DIP, SPORT and DPORT are modified.

Step 103: Acquire a preset modification instruction corresponding to the descriptor information, and modify the enabled data packet according to the preset modification instruction.

Here, step (3) completes the instruction modification process. The instruction structure of the preset modification instruction is as shown in Table 2.

Table 2

In the embodiment of the present invention, the modifying the data packet according to the preset modification instruction includes: when the type information meets a second preset rule, according to the preset modification instruction, Enable the packet to be modified.

Here, the second preset rule is that the network type connected to the access network device is inconsistent with the data type of the data packet, that is, the network connected to the access network device is IPv4, and the data packet is IPv6 type data. The packet or the network to which the access network device is connected is IPv6, and the data packet is an IPv4 type data packet.

For example, since the current network has an IPv4 network and an IPv6 network, the types of data packets are IPv4 type and IPv6 type. If the access network device is in the IPv4 network, and the received data packet is an IPv6 Ethernet data packet, the IPv4 header information needs to be added to the data packet according to a preset modification command, thereby ensuring IPv6. Type of packet can be in IPv4 If the access network device is in the IPv6 network and the received data packet is an IPv4 Ethernet data packet, the data packet needs to be added according to a preset modification command. The IPv6 header information ensures that IPv4 type packets can be transmitted over the IPv6 network.

Or, when the corresponding feature parameter in the data packet satisfies the preset rule, the enabled data packet is modified according to the preset modification instruction. For example, the access network device in the embodiment of the present invention is a device for connecting a private network and a public network in a home, or a school, or an enterprise. The data sent or received by the user is processed and forwarded by the access network device. . Then, suppose that user A needs to receive an Ethernet data packet a. First, when the access network device receives the Ethernet data packet a, it checks the corresponding feature parameter in the packet, and then learns that the packet is the Ethernet data packet of user A. Then, the parameters such as the destination MAC, the destination IP, and the NAPT in the packet are modified.

In the embodiment of the present invention, the acquiring a preset modification instruction corresponding to the descriptor information, and modifying the enabled data packet according to the preset modification instruction, includes: presetting according to a preset priority Acquiring a preset modification instruction corresponding to the descriptor information in the instruction set; parsing the obtained preset modification instruction, obtaining the modification information carried by the preset modification instruction, and the modification indicator corresponding to the modification information; The modification manner corresponding to the modification indicator and the modification information modify the enable data packet. Here, the modification indicator includes at least one of a replacement indicator, an addition indicator, and a deletion indicator.

In the embodiment of the present invention, before the modifying the data packet according to the preset modification instruction, the method further includes: acquiring, according to the descriptor information, the to-be-replaced or waiting for the enabled data packet. Deleted second data information.

Modifying the enabled data packet according to the modification manner corresponding to the modification indicator and the modification information, including:

The following is a list of data processing procedures for several typical instructions:

Replace: replace the original two-byte data with two bytes of data in the command;

Add: directly add the two bytes of data in the command to the data packet in the form of a header;

Skip: Determine the number of bytes to skip based on the data in the command. For example, Skip 3 skips 6 bytes without any modification.

Delete: Decrease the number of bytes to be deleted based on the data in the command and discard the data.

There are also some compound instructions: such as PPPoE, Ds-lite, etc., so that the instruction completes a series of adding operations in sequence, and directly reads the modified data in order.

For example, as shown in FIG. 4, the method steps of the instruction modification are as follows:

Step 401: Read an instruction.

Before the instruction is read, the modified Ethernet packet is obtained, the header of the Ethernet packet is extracted, and stored in eight 258-bit registers, and then an instruction is read according to the instruction address.

Step 402: Parsing the instruction and reading the data required for the instruction modification.

The instruction is parsed, and the data to be modified for the Ethernet packet header required for the instruction modification is read.

Step 403: Modify the Ethernet header according to the instruction.

For example, delete the packet header, add/delete/replace the VLAN number, add or delete the PPPoE header, add or delete Ds-lite configuration information (such as: add or delete IPv6 header modification information), add or delete, etc. Modify for IPv4 basics. The IPv6 of the facility quickly deploys 6rd modification information (such as adding or deleting modification information of the IPv4 header).

Step 404: Determine the instruction end mark, if it is the last instruction, end the modification; otherwise, continue the operation of step 401.

Here, the modification information includes at least one of the following: modification information of a VLAN, modification information of a PPPoE header, modification information of an IPv6 header, and modification information of an IPv4 header.

To implement the foregoing method, the first embodiment of the present invention further provides an access network device. As shown in FIG. 2, the device includes: a data packet descriptor module 201, an enable modification module 202, and an instruction repair. The module 203, the data packet storage module 204, and the preset information storage module 205; wherein

The packet descriptor module 201 is configured to acquire descriptor information of the data packet, and preset enable flag bits and preset enable modification information corresponding to the descriptor information;

The modification module 202 is configured to search for the first data information to be modified in the data packet according to the preset enable flag, and replace the first data information with the preset enable information, so as to obtain Data packet

The instruction modification module 203 is configured to acquire the preset modification instruction corresponding to the descriptor information, and modify the enabled data packet according to the preset modification instruction;

The data packet storage module 204 is configured to store a data packet sent by the network side;

The preset information storage module 205 is configured to store the preset enable modification information and the preset modification instruction.

Optionally, the instruction modification module 203 is specifically configured to:

Optionally, the instruction modification module 203 is further configured to: after the modification of the enabled data packet according to the preset modification instruction, acquire, in the enable data packet, a to-be-replaced or The second data information to be deleted.

The instruction modification module 203 is specifically configured as:

When the modification indicator is a deletion indicator, according to the repair corresponding to the deletion indicator The information deletion enable information corresponding to the third data information in the enabled data packet.

The data packet descriptor module 201 is further configured to: after acquiring descriptor information of the data packet, acquire type information of a network to which the access network device is connected;

The enabling modification module 202 is specifically configured as follows:

The instruction modification module 203 is specifically configured as:

The data packet descriptor module 201 acquires corresponding preset enable modification information according to the structure of the data packet.

The access network device consisting of the above structure can perform the following methods and steps:

(1) The packet descriptor module 201 acquires descriptor information of the data packet, and preset enable flag bits and preset enable modification information corresponding to the descriptor information.

Specifically, the packet descriptor module 201 acquires descriptor information stored in the data packet storage module 204, and a preset enable flag corresponding to the descriptor information and stored in the enable register, and stored in the preset. The preset of the information storage module 205 enables the modification information.

Here, the preset enable flag is used to search for data information to be modified in the data packet, As shown in Table 1. The preset enable modification information is used to replace data parameters to be modified in the data packet. The descriptor information is used to describe the structure and type of the data packet, including but not limited to: 1) a preamble for indicating synchronization, a frame start character indicating that the next byte is a destination MAC field, and an acceptance of the specified frame. The DMAC address, the SMAC address of the sender indicating the frame, the data field length of the identification frame, and the protocol type indicating the data in the frame; 2) the data type (such as IPv4 or IPv6) used to indicate the version of the IP protocol, Indicates the length of the IP datagram header, indicates the total length of the IP datagram, identifies the IP datagram whether there is a fragmentation flag, and identifies the slice offset of the relative position of the packet in the original packet after fragmentation, indicating the packet The generation time, the protocol indicating the data carried by the datagram, the first CHECKSUM for calculating the datagram, the source IP address indicating the sender, the destination IP address indicating the recipient, and the DSCP information of the priority of the service; 3) A SPORT for identifying and distinguishing an application process of the source device, a DPORT for identifying an application process of the destination device, and information for verifying the correctness of the TCP header portion and the data portion.

In the embodiment of the present invention, after obtaining the descriptor information, the data packet descriptor module 201 acquires corresponding preset enable modification information according to the descriptor information; the enable modification information includes but is not limited to: preset The SMAC, DMAC, DSCP, SIP, DIP, SPORT, DPORT, and the TTL of the packet.

For example, the packet descriptor module 201 acquires a corresponding pre-set DMAC based on information indicating the DMAC address of the recipient of the frame; the packet descriptor module 201 acquires information based on the DMAC address of the recipient indicating the frame Corresponding pre-set SMAC and so on.

(2) The enable modification module 202 searches for the first data information to be modified in the data packet according to the preset enable flag, and replaces the first data information with the preset enable information to obtain Can data packets.

Here, step (2) is done to enable the modification process. The first data information includes: SMAC, DMAC, DSCP, SIP, DIP, SPORT, DPORT, TTL, and CHECKSUM to be modified in the data packet. The above data information is merely an example and is not exhaustive, including but not limited to the above data information.

In the embodiment of the present invention, after the descriptor information and the preset enable information are obtained, the enable modification module 202 searches for the data information that needs to be modified in the data packet according to the preset enable identifier bit, and then finds the found data. After the data information to be modified is replaced with the preset enable information, thereby Get the modified packet, even if it can. It is noted that before enabling the modification of the data packet, the information of CHECKSUM needs to be calculated, and the original CHECKSUM is replaced with the calculated CHECKSUM to obtain the enabled data packet. The recalculation of CHECKSUM may also be involved in subsequent instruction modification.

In the embodiment of the present invention, after the acquiring the descriptor information of the data packet, the method further includes: acquiring type information of a network to which the access network device is connected; and replacing the first data information with the The preset enable information is obtained, and the enable data packet is obtained, including: when the type information meets the first preset rule, the enable modification module 202 replaces the first data information with the preset enable information, Obtain the enable packet, as shown in Figure 3.

For example, if a private network user wants to go to the public network, the access network device needs to translate the IP address and MAC address and port number in the data packet sent or received by the private network user terminal. For example, if the private network user receives the data packet sent by the public network side, the access network device needs to replace the IP address and the MAC address and the port number in the data packet with the corresponding information of the private network user terminal; If the user sends a data packet to the public network side, the access network device needs to replace the IP address and the MAC address and the port number in the data packet with the corresponding information of the access network device, so that the private network user can normally access the public network. . Specifically, first, the type information of the network connected to the access network device is obtained, and it is determined that the input end and the output end of the access network device are in different network segments, for example, the input end address is 200.176.23.4, and the output end address is 192.168.1.1. The user terminal is a private network client. In this case, if the user terminal receives the data packet, the destination IP address translation, the port translation of the destination IP address, and the DMAC address conversion are performed on the data packet. After the conversion is completed, Forwarding the data packet to the user terminal; if the user terminal sends the data packet, the source IP address translation, the port translation of the source IP address, and the SMAC address conversion are performed on the data packet, and after the conversion is completed, the data packet is forwarded. Go to the other side of the network. It is determined that the input end and the output end of the access network device are in the same network segment. For example, if the input end address is 200.176.23.4 and the output end address is 200.176.23.10, the user terminal is a public network user end, and the access network device is at this time. There is no need to modify SMAC, DMAC, SIP, DIP, SPORT and DPORT.

(3) The instruction modification module 203 acquires a preset modification instruction corresponding to the descriptor information, and modifies the enabled data packet according to the preset modification instruction.

In the embodiment of the present invention, the modifying the data packet according to the preset modification instruction includes: when the type information meets the second preset rule, the command modification module 203 is modified according to the preset The instruction modifies the enabled data packet.

For example, since the current network has an IPv4 network and an IPv6 network, the types of data packets are IPv4 type and IPv6 type. If the access network device is in the IPv4 network, and the received data packet is an IPv6 Ethernet data packet, the command modification module 203 needs to add an IPv4 header information to the data packet according to the preset modification command. Therefore, it is ensured that the IPv6 type data packet can be transmitted in the IPv4 network; or, if the access network device is in the IPv6 network and the received data packet is an IPv4 Ethernet data packet, A modification instruction is set to add an IPv6 header information to the data packet, thereby ensuring that the IPv4 type data packet can be transmitted in the IPv6 network.

Alternatively, when the corresponding feature parameter in the data packet satisfies the preset rule, the command modification module 203 modifies the enabled data packet according to the preset modification instruction. For example, the access network device in the embodiment of the present invention is a device for connecting a private network and a public network in a home, or a school, or an enterprise. The data sent or received by the user is processed and forwarded by the access network device. . Then, suppose that user A needs to receive an Ethernet data packet a. First, when the access network device receives the Ethernet data packet a, it checks the corresponding feature parameter in the packet, and then learns that the packet is the Ethernet data packet of user A. Then, the parameters such as the destination MAC, the destination IP, and the NAPT in the packet are modified.

In the embodiment of the present invention, the acquiring a preset modification instruction corresponding to the descriptor information, and modifying the enabled data packet according to the preset modification instruction, includes: the instruction modification module 203 is configured according to a preset priority. The level obtains a preset modification instruction corresponding to the descriptor information from the preset instruction set; the instruction modification module 203 parses the obtained preset modification instruction to obtain the preset The modification information carried by the modification instruction and the modification indicator corresponding to the modification information are set; the instruction modification module 203 modifies the enable data packet according to the modification manner corresponding to the modification indicator and the modification information. Here, the modification indicator includes at least one of a replacement indicator, an addition indicator, and a deletion indicator.

In the embodiment of the present invention, before the modifying the data packet according to the preset modification instruction, the method further includes: the instruction modification module 203 acquiring the enabled data packet according to the descriptor information. The second data information to be replaced or to be deleted.

Delete: Determines the number of bytes to be deleted based on the data in the command and discards the data.

Step 401: Read the instruction.

Step 403: Modify the Ethernet header according to the instruction.

In the embodiment of the present invention, the acquiring a preset modification instruction corresponding to the descriptor information, and modifying the enabled data packet according to the preset modification instruction, includes: the instruction modification module 203 is configured according to a preset priority. And obtaining a preset modification instruction corresponding to the descriptor information from the preset instruction set; parsing the obtained preset modification instruction, obtaining the modification information carried by the preset modification instruction, and the modification instruction corresponding to the modification information And modifying the enabled data packet according to the modification manner corresponding to the modification indicator and the modification information. Here, the modification indicator includes at least one of a replacement indicator, an addition indicator, and a deletion indicator.

Step 401: Acquire and complete the modified Ethernet packet header, and store it in eight 258-bit registers, and read an instruction according to the instruction address.

Step 402: Parsing the instruction, and reading the data required for the instruction modification.

Step 403: Modify the Ethernet header according to the instruction.

In the embodiment of the present invention, before the modifying the data packet according to the preset modification instruction, the method further includes: acquiring, according to the descriptor information, the to-be-replaced or waiting for the enabled data packet. Deleted second data information;

When the modification indicator is a replacement indicator, the instruction modification module 203 replaces the second data information with the modification information corresponding to the replacement indicator;

When the modification indicator is an add indicator, the instruction modification module 203 adds a header composed of the modification information corresponding to the added indicator to the enabled data packet;

When the modification indicator is a deletion indicator, the instruction modification module 203 deletes data in the second data information according to the modification information corresponding to the deletion indicator.

Here, the modification information includes at least one of: modification information for modifying a VLAN, modification information for adding a PPPoE header, modification information for adding or deleting an IPv6 header, and modification information for adding or deleting an IPv4 header. .

It should be noted that, when the access network device provided by the foregoing embodiment performs the modification of the data packet, only the division of each of the foregoing program modules is used as an example. In an actual application, the foregoing processing may be allocated to different programs according to requirements. The module is completed, dividing the internal structure of the device into different program modules to complete all or part of the processing described above. In addition, the access network device and the data packet processing method embodiment provided by the foregoing embodiments are in the same concept, and the specific implementation process is described in the method embodiment, and details are not described herein again.

The solution of the embodiment of the present invention combines the enabling modification method and the enabling modification method, by which the descriptor information in the Ethernet data packet can be read, and the preset enabling modification is respectively obtained based on the read descriptor information. And modifying the instruction, and then modifying the Ethernet packet according to the obtained enable modification information; in addition, modifying the modified Ethernet data packet according to the obtained modification instruction. The solution of the embodiment of the present invention combines the enabling modification method and the enabling modification method, and has the modification speed and control compared with the method of only modifying the instruction. Simple and other advantages, avoiding the shortcomings of excessive instruction modification and complicated modification caused by simple instruction modification, improving network output performance, etc. Compared with the method of enabling only modification, it has more flexible features and can meet the compatibility of the new future. Modification requirements.

An embodiment of the present invention provides another method for processing a data packet. As shown in FIG. 5, the method may include the following steps:

Step 501: Receive an Ethernet data packet sent by the network side.

Step 502: Read an Ethernet packet.

The detailed step of enabling the modification module to read the Ethernet packet is to read one packet at a time from the FIFO array of the packet storage module (denoted as DATA_FIFO), and then send the read packet to enable. Modify the module; when reading the packet cutoff identifier (denoted as packet_eop), it stops reading data from the DATA_FIFO. The packet description module also reads the Ethernet packet from the packet storage module in order to obtain the descriptor information of the Ethernet packet.

Step 503: Obtain descriptor information of the Ethernet data packet.

After the data packet descriptor module obtains the Ethernet data packet, the corresponding data packet descriptor is read according to the Ethernet data packet, and the data packet descriptor is stored in the first-in first-out array of the descriptor module (referred to as DESC_FIFO). When the DATA_FIFO is not empty, the corresponding descriptor has been written to the DESC_FIFO.

Step 504: data flow information, MAC information, VLAN information, QoS information, and the like.

Step 505: Acquire modification information corresponding to the descriptor information.

The information includes at least one of the following: flow information, MAC information, VLAN information, and QoS information.

Step 506: Modify the Ethernet data packet according to the descriptor information and the obtained modification information.

Sending information such as the two-layer offset (l2_offset), the three-layer offset (l3_offset), the packet length (pkt_length, packet length), the packet identifier (untag_flag), and the TCP/UDP in the descriptor to the enable modification module. The modification module determines the structure of the package. At the same time, the data stream identifier flow_id is used as the address to index and modify the enable RAM, modify the VLAN RAM, command RAM, etc. Send to the enable modification module for the module to determine the modification operation.

Step 507: Obtain the modified Ethernet data packet.

The fixed modification module (denoted as pm_modify_fix) completes the MAC modification of the 256-byte header data registered for the module, DSCP/TC, according to the value in the enable register and the descriptors IPv4_flag, IPv6_flag, TCP_flag, UDP_flag, l2_offset, l3_offset information. Modification, SIP/DIP modification, SPORT/DPORT modification, IP_CHECKUM, TCP_CHECKSUM verification information update and TTL modification, and the modified data is sent to the instruction modification module.

Step 508: The modified Ethernet data packet is transmitted to the instruction modification module to perform instruction modification.

Step 509: Store the instruction, including: modifying the command (denoted as cmd) and modifying the data required by the packet (denoted as cmd_dat).

The packet descriptor module module (denoted as pm_desc_ctrl) transmits the read instruction and the modified data to the instruction and modification data read from the instruction storage unit and the data storage unit in the preset information storage module according to the descriptor information. The instruction modification module, the instruction modification module performs VLAN modification on the Ethernet packet, PPPOE addition and deletion, Ds-lite addition and deletion, etc., and sends the final modified data while modifying, until the read instruction includes an end tag, the end instruction is modified, and the remaining Data is directly transmitted. The instruction format and corresponding description are shown in Table 2.

Step 510: An instruction corresponding to the descriptor information.

Step 511: Modify the modified Ethernet data packet according to the instruction.

Read an instruction according to the instruction address (denoted as cmd_addr), parse the instruction, and read the data required by the instruction modification. Perform corresponding packet header jump, delete, VLAN increase/delete/replace, PPPOE add delete, Ds-lite add delete, v6rd add or delete, etc., as shown in Figure 4.

Here, the PPPOE addition deletion refers to: adding an IPv6 header to an IPv4 packet so that IPv4 data can be transmitted on the IPv6 network; or, when the transmission is completed, deleting the IPv6 header of the IPv4 packet. The v6rd addition or deletion refers to: adding an IPv4 header to an IPv6 packet so that IPv6 data can be transmitted over the IPv4 network; or, when the transmission is completed, deleting the IPv4 header of the IPv6 packet.

Another embodiment of the present invention further provides an access network device. As shown in FIG. 6, the access network device 600 includes a processor 601 and a memory 602 configured to store an executable program executable on the processor.

The access network device 600 can be a router, a Layer 3 switch, or other device with routing capabilities. The access network device 600 shown in FIG. 6 includes at least one processor 601 and a memory 602. The various components in the access network device 600 are coupled together by a bus system 603. It will be appreciated that the bus system 603 is configured to enable connection communication between these components. The bus system 603 includes a power bus, a control bus, and a status signal bus in addition to the data bus. However, for clarity of description, various buses are labeled as bus system 603 in FIG.

It will be appreciated that memory 602 can be either volatile memory or non-volatile memory, and can include both volatile and nonvolatile memory. The non-volatile memory may be a Read Only Memory (ROM), a Programmable Read-Only Memory (PROM), or an Erasable Programmable Read (EPROM). Only Memory), Electrically Erasable Programmable Read-Only Memory (EEPROM), Ferromagnetic Random Access Memory (FRAM), Flash Memory, Magnetic Surface Memory , CD-ROM, or Compact Disc Read-Only Memory (CD-ROM); the magnetic surface memory can be a disk storage or a tape storage. The volatile memory can be a random access memory (RAM) that acts as an external cache. By way of example and not limitation, many forms of RAM are available, such as Static Random Access Memory (SRAM), Synchronous Static Random Access Memory (SSRAM), Dynamic Random Access (SSRAM). DRAM (Dynamic Random Access Memory), Synchronous Dynamic Random Access Memory (SDRAM), Double Data Rate Synchronous Dynamic Random Access Memory (DDRSDRAM), enhancement Enhanced Synchronous Dynamic Random Access Memory (ESDRAM), Synchronous Dynamic Random Access Memory (SLDRAM), Direct Memory Bus Random Access Memory (DRRAM) ). The memory 602 described in the embodiment of the present invention is intended to be packaged. These are not limited to these and any other suitable types of memory.

Memory 602 in an embodiment of the invention is configured to store various types of data to support operation of access network device 600. Examples of such data include any executable program configured to operate on the access network device 600, such as a store data packet, preset enable modification information, and a preset modification command. A program implementing the method of the embodiment of the present invention is stored in the memory 602.

The method disclosed in the foregoing embodiments of the present invention may be applied to the processor 601 or implemented by the processor 601. Processor 601 may be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the foregoing method may be completed by an integrated logic circuit of hardware in the processor 601 or an instruction in a form of software. The processor 601 described above may be a general purpose processor, a digital signal processor (DSP), or other programmable logic device, discrete gate or transistor logic device, discrete hardware component, or the like. The processor 601 can implement or perform the various methods, steps, and logic blocks disclosed in the embodiments of the present invention. A general purpose processor can be a microprocessor or any conventional processor or the like. The steps of the method disclosed in the embodiment of the present invention may be directly implemented as a hardware decoding processor, or may be performed by a combination of hardware and software modules in the decoding processor. The software module can be located in a storage medium, which is located in the memory 602. The processor 601 reads the information in the memory 602 and completes the steps of the following methods in combination with its hardware:

Optionally, the processor 601 obtains, according to the preset priority, a preset modification instruction corresponding to the descriptor information from the preset instruction set;

Modifying the number of enable according to the modification manner corresponding to the modification indicator and the modification information According to the package.

Optionally, the processor 601 acquires, according to the descriptor information, second data information to be replaced or to be deleted in the enabled data packet.

Optionally, when the modification indicator is a replacement indicator, the processor 601 replaces the third data information in the enabled data packet with the modification information corresponding to the replacement indicator;

Optionally, the processor 601 acquires type information of a network to which the access network device is connected.

Optionally, when the type information meets the second preset rule, the processor 601 modifies the enabled data packet according to the preset modification instruction.

Optionally, the processor 601 obtains corresponding preset enable modification information according to the structure of the data packet.

The embodiment of the present invention further provides a non-transitory readable storage medium, such as a memory 602 including an executable program executable by the processor 601 of the access network device 600 to perform the steps described in the foregoing method. The executable readable storage medium may be a ferroelectric memory (FRAM), a read only memory (ROM), a programmable read only memory (PROM), a programmable erasable read only memory (EPROM). , Erasable Programmable Read Only Memory), EEPROM (Electrically Erasable Programmable Read-Only Memory), Flash Memory, Magnetic Surface Memory, or optical disk; or One or any combination of devices, such as mobile phones, computers, tablets Equipment, personal digital assistants, etc.

The embodiment of the invention further provides a non-transitory readable storage medium, on which an executable program is stored, and when the executable program is executed by the processor, the execution is performed:

When the executable program is executed by the processor, the method further includes: acquiring, according to a preset priority, a preset modification instruction corresponding to the descriptor information from a preset instruction set;

When the executable program is executed by the processor, the method further includes: before the modifying the modified data packet according to the preset modification instruction, acquiring, according to the descriptor information, the to-be-replaced or waiting for the enabled data packet. Deleted second data information.

When the executable program is executed by the processor, the method further includes: when the modification indicator is a replacement indicator, replacing the third data information in the enabled data packet with the modification information corresponding to the replacement indicator ;

When the executable program is executed by the processor, the method further includes: acquiring type information of a network to which the access network device is connected;

The replacing the first data information with the preset enabling information to obtain an enabled data packet includes:

When the executable program is executed by the processor, it is further executed to: obtain corresponding preset enable modification information according to the structure of the data packet.

The above is only the preferred embodiment of the present invention and is not intended to limit the scope of the present invention. Any modifications, equivalent substitutions and improvements made within the spirit and scope of the present invention are included in the scope of the present invention.

Industrial applicability

The embodiment of the invention discloses a method for processing a data packet, the method comprising: acquiring descriptor information of a data packet, and a preset enable flag bit and a preset enable modification information corresponding to the descriptor information; The preset enable flag bit searches for the first data information to be modified in the data packet, replaces the first data information with the preset enable information, obtains an enable data packet, and obtains the description a preset modification instruction corresponding to the information, and modifying the enabled data packet according to the preset modification instruction. The invention also discloses an access network device and a non-transitory readable storage medium. Through the embodiments of the present invention, rapid modification of data packets can be achieved.

Claims

A method of processing a data packet, the method comprising:

Obtaining descriptor information of the data packet, and preset enable flag bits and preset enable modification information corresponding to the descriptor information;

And the first data information to be modified in the data packet is searched according to the preset enable flag, and the first data information is replaced with the preset enable information to obtain an enable data packet.

Obtaining a preset modification instruction corresponding to the descriptor information, and modifying the enabled data packet according to the preset modification instruction.
The method according to claim 1, wherein the preset enable modification information comprises at least one of: a source media access control address SMAC, a destination media access control address DMAC, a differential service code point DSCP, a source internet protocol address SIP The destination internet protocol address DIP, the source port number SPORT, the destination port number DPORT, the lifetime TTL of the data packet, and the checksum CHECKSUM.
The method of claim 1, wherein the obtaining a preset modification instruction corresponding to the descriptor information, and modifying the enabled data packet according to the preset modification instruction comprises:

Obtaining, according to a preset priority, a preset modification instruction corresponding to the descriptor information from a preset instruction set;

Parsing the obtained preset modification instruction, obtaining the modification information carried by the preset modification instruction and the modification indicator corresponding to the modification information;

And modifying the enabled data packet according to the modification manner corresponding to the modification indicator and the modification information.
The method of claim 3, wherein the modification indicator comprises at least one of the following types: a replacement indicator, an addition indicator, and a deletion indicator.
The method according to claim 4, wherein said pair according to said preset modification instruction Before the enabling the data packet to be modified, the method further includes:

And acquiring second data information to be replaced or to be deleted in the enabled data packet according to the descriptor information.
The method according to claim 4, wherein the modifying the enabled data packet according to the modification manner corresponding to the modification indicator and the modification information comprises:

When the modification indicator is a replacement indicator, replacing the third data information in the enabled data packet with the modification information corresponding to the replacement indicator;

When the modification indicator is an add indicator, adding a header composed of modification information corresponding to the added indicator to the enabled data packet;

When the modification indicator is a deletion indicator, the information corresponding to the third data information in the enabled data packet is deleted according to the modification information corresponding to the deletion indicator.
The method according to claim 3, wherein the modification information comprises at least one of: virtual local area network VLAN information, Ethernet peer-to-peer communication protocol PPPoE header information, Internet Protocol version 6 IPv6 header information, and Internet Protocol version 4 IPv4 header information.
The method according to any one of claims 1 to 7, wherein after the obtaining the descriptor information of the data packet, the method further comprises:

Obtaining type information of a network connected to the access network device;

The replacing the first data information with the preset enabling information to obtain an enabled data packet includes:

When the type information meets the first preset rule, the first data information is replaced with the preset enable information to obtain an enabled data packet.
And modifying the enabled data packet according to the preset modification instruction, including:

When the type information meets the second preset rule, the enabled data packet is modified according to the preset modification instruction.
The method of claim 1 wherein said descriptor information is used to describe a location The structure of the data packet;

And the acquiring the preset enable modification information corresponding to the descriptor information, including:

Obtaining corresponding preset enable modification information according to the structure of the data packet.
An access network device, the device comprising:

a packet descriptor module, configured to acquire descriptor information of the data packet, and preset enable flag bits and preset enable modification information corresponding to the descriptor information;

The modification module is configured to search for the first data information to be modified in the data packet according to the preset enable flag, and replace the first data information with the preset enable information to obtain the enable data pack;

The instruction modification module is configured to acquire the preset modification instruction corresponding to the descriptor information, and modify the enabled data packet according to the preset modification instruction;

a data packet storage module configured to store a data packet sent by the network side;

The preset information storage module is configured to store the preset enable modification information and the preset modification instruction.
The apparatus of claim 11, wherein the preset enable modification information comprises at least one of: SMAC, DMAC, DSCP, SIP, DIP, SPORT, DPORT, TTL of the data packet, and CHECKSUM.
The device according to claim 11, wherein the instruction modification module is specifically configured to:

Acquiring a preset modification instruction corresponding to the descriptor information from a preset instruction set according to a preset priority;

Parsing the obtained preset modification instruction, obtaining the modification information carried by the preset modification instruction and the modification indicator corresponding to the modification information;

And modifying the enabled data packet according to the modification manner corresponding to the modification indicator and the modification information.
The device of claim 12, wherein the modification indicator comprises at least one of the following types: a replacement indicator, an addition indicator, and a deletion indicator.
The apparatus according to claim 13, wherein

The instruction modification module is further configured to: before the modification of the enabled data packet according to the preset modification instruction, acquire, according to the descriptor information, a second to be replaced or to be deleted in the enabled data packet. Data information.
The device according to claim 13, wherein the instruction modification module is specifically configured to:

When the modification indicator is a replacement indicator, replacing the third data information in the enabled data packet with the modification information corresponding to the replacement indicator;

When the modification indicator is an add indicator, adding a header composed of modification information corresponding to the added indicator to the enabled data packet;

When the modification indicator is a deletion indicator, the information corresponding to the third data information in the enabled data packet is deleted according to the modification information corresponding to the deletion indicator.
The apparatus according to claim 12, wherein the modification information comprises at least one of the following: VLAN information, PPPoE header information, IPv6 header information, and IPv4 header information.
The apparatus according to any one of claims 11 to 16, wherein

The data packet descriptor module is further configured to: after acquiring descriptor information of the data packet, acquire type information of a network to which the access network device is connected;

The modification module is enabled, and the specific configuration is:

When the type information meets the first preset rule, the first data information is replaced with the preset enable information to obtain an enabled data packet;

The instruction modification module is specifically configured as:

When the type information meets the second preset rule, the enabled data packet is modified according to the preset modification instruction.
The apparatus according to claim 11, wherein said descriptor information is used to describe a structure of said data packet;

The instruction modification module is specifically configured as:

Obtaining corresponding preset enable modification information according to the structure of the data packet.
An access network device comprising: a processor and a memory configured to store a non-transitory program capable of running on a processor; wherein the processor is configured to execute claim 1 when the non-transitory program is executed A method of processing a data packet as described in any one of ten.
A non-transitory readable storage medium having stored thereon an executable program, the executable program being executed by a processor to implement the data packet processing method according to any one of claims 1 to 10.