WO2021013218A1 - 报文处理方法、交换机及计算机可读存储介质 - Google Patents

报文处理方法、交换机及计算机可读存储介质 Download PDF

Info

Publication number
WO2021013218A1
WO2021013218A1 PCT/CN2020/103789 CN2020103789W WO2021013218A1 WO 2021013218 A1 WO2021013218 A1 WO 2021013218A1 CN 2020103789 W CN2020103789 W CN 2020103789W WO 2021013218 A1 WO2021013218 A1 WO 2021013218A1
Authority
WO
WIPO (PCT)
Prior art keywords
message
sub
virtual logical
logical device
management port
Prior art date
Application number
PCT/CN2020/103789
Other languages
English (en)
French (fr)
Inventor
王鑫
Original Assignee
中兴通讯股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 中兴通讯股份有限公司 filed Critical 中兴通讯股份有限公司
Priority to EP20844624.5A priority Critical patent/EP3968587B1/en
Publication of WO2021013218A1 publication Critical patent/WO2021013218A1/zh

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L49/00—Packet switching elements
    • H04L49/30—Peripheral units, e.g. input or output ports
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L49/00—Packet switching elements
    • H04L49/70—Virtual switches
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L49/00—Packet switching elements
    • H04L49/15—Interconnection of switching modules
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L49/00—Packet switching elements
    • H04L49/25—Routing or path finding in a switch fabric
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L49/00—Packet switching elements
    • H04L49/30—Peripheral units, e.g. input or output ports
    • H04L49/3009—Header conversion, routing tables or routing tags
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L69/00—Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
    • H04L69/22—Parsing or analysis of headers

Definitions

  • the embodiment of the present invention relates to the technical field of switch message management, and more specifically, to a message processing method, a switch and a computer-readable storage medium.
  • VLD Virtual Logical Device
  • Data center rack switches implement "one virtual multiple" virtualization technology by logically dividing a physical rack device to virtualize multiple logical devices.
  • a logical switch refers to a physical switch that divides the resources in the switch into different subsets according to a certain resource division principle, so that a physical switch is simulated as multiple switches that perform separate switching tasks.
  • the virtual device is used as an independent device, and the network formed by the virtual device can realize the effective isolation of different users and services on the same device;
  • a data center switch can support 16 logical switches, called VLD0 ⁇ VLD15, respectively, each VLD Each corresponds to a target IP address.
  • the management port of the switch is located on the panel of the main control board.
  • a main control board has only one management port.
  • Multiple logical switches run on one physical switch at the same time. As shown in Figure 1, four logical switches VLD0, VLD1, VLD2 , VLD3 runs on the same physical switch at the same time, VLD0, VLD1, VLD2, VLD3 messages communicate through the same management port; also see Figure 2, after the management port receives the message, it will be sent to all VLDs (ie VLD0 , VLD1, VLD2, VLD3), it can be seen that there are certain hidden dangers in the security of the management port message communication in the prior art.
  • the message processing method, switch and computer-readable storage medium provided by the embodiments of the present invention mainly solve the technical problem that the security of the management port communication in the prior art has certain hidden dangers.
  • an embodiment of the present invention provides a message processing method, which is applied to a switch having a management port and at least two virtual logical devices, and the message processing method includes:
  • the management port When the management port receives a message, it parses each sub-message contained in the message to obtain the destination IP address, determines the virtual logical device according to the destination IP address, and sends the sub-message to the corresponding Virtual logical device;
  • the virtual logical device receives the sub-message from the management port.
  • the embodiment of the present invention also provides a switch, which includes a processor, a memory, and a communication bus;
  • the communication bus is configured to realize connection and communication between the processor and the memory
  • the processor is configured to execute one or more programs stored in the memory to implement the steps of the message processing method described above.
  • the embodiment of the present invention also provides a computer-readable storage medium, the computer-readable storage medium stores one or more programs, and the one or more programs can be executed by one or more processors to realize the above The steps of the message processing method.
  • the message processing method, switch and computer-readable storage medium provided by the embodiments of the present invention when a message is received through the management port, analyze each sub-message contained in the message to obtain the destination IP address, which is determined according to the destination IP address
  • the virtual logical device sends the sub-message to the corresponding virtual logical device, and then the virtual logical device receives the sub-message from the management port; this solves the problem of hidden dangers in the security of the management port communication in the prior art. That is, in the message processing method, switch and computer-readable storage medium provided by the embodiments of the present invention, the management port sends the sub-messages contained in the message to the corresponding virtual logical device, that is, the report of each virtual logical device is realized.
  • the message isolation avoids the occurrence of mixed messages and low security due to the unisolated messages of each virtual logical device, which greatly improves the security of the message communication of the entire switch management port.
  • Figure 1 is a schematic diagram of the structure of a switch with four virtual VLDs
  • FIG 2 is a schematic diagram of a switch management port message communication as shown in Figure 1;
  • FIG. 3 is a schematic diagram of the basic flow of a message processing method provided by an embodiment of the present invention.
  • Figure 4-1 is a schematic diagram 1 of the first unicast packet communication through a switch management port provided by an embodiment of the present invention
  • Figure 4-2 is the second schematic diagram of the first unicast packet communication of the switch management port provided by an embodiment of the present invention.
  • Figure 4-3 is the third schematic diagram of the first unicast packet communication of the switch management port provided by an embodiment of the present invention.
  • Figure 4-4 is a fourth schematic diagram of the first unicast packet communication of the switch management port provided by an embodiment of the present invention.
  • Figure 4-5 is the fifth schematic diagram of the first unicast packet communication of the switch management port provided by the embodiment of the present invention.
  • FIG. 5 is a schematic diagram of the first type of switch management port broadcast message communication provided by an embodiment of the present invention.
  • Figure 6-1 is a schematic diagram 1 of the second type of unicast packet communication through a switch management port provided by an embodiment of the present invention
  • Figure 6-2 is a second schematic diagram of the second type of unicast packet communication through the management port of a switch provided by an embodiment of the present invention.
  • Figure 6-3 is a third schematic diagram of the second type of unicast packet communication through the management port of a switch provided by an embodiment of the present invention.
  • Figure 6-4 is a fourth schematic diagram of the second type of unicast packet communication through the management port of a switch provided by an embodiment of the present invention.
  • 6-5 is a schematic diagram 5 of the second type of unicast packet communication through a switch management port provided by an embodiment of the present invention
  • FIG. 7 is a schematic diagram of a second type of switch management port broadcast message communication provided by an embodiment of the present invention.
  • Fig. 8 is a schematic structural diagram of a switch provided by an embodiment of the present invention.
  • a message processing method is provided.
  • the message contained in the message is processed.
  • the sub-message is parsed to obtain the destination IP address, the virtual logical device is determined according to the destination IP address, and the sub-message is sent to the corresponding virtual logical device, and then the virtual logical device receives the sub-message from the management port; see Figure 3 , Figure 3 is a schematic diagram of the basic flow of the message processing method provided in this embodiment.
  • the management port parses each sub-message contained in the message to obtain the destination IP address, determines the virtual logical device according to the destination IP address, and sends the sub-message to the corresponding virtual logical device.
  • the message includes at least one of a unicast message and a broadcast message.
  • the unicast feature is the communication between a single sender and a receiver through the network; among them, the server responds to the client's request in time, and the server sends different data for each client's different request. Achieve personalized service. Broadcasting is characterized by a "one-to-all" communication mode between hosts. The network unconditionally copies and forwards the signal sent by each host, and all hosts can receive all information (regardless of whether they need it); the network equipment is simple , Simple maintenance, low cost of network deployment, and because the server does not need to send data to each client individually, the server traffic load is extremely low.
  • the present invention is not limited to these two forms of messages.
  • it can also be a multicast message.
  • the characteristics of multicast are one sender and multiple messages.
  • the communication between recipients is between unicast and broadcast.
  • the management port when the management port receives a unicast message, it parses each sub-message contained in the unicast message to obtain a destination IP address, and sends the sub-message with the destination IP address to the corresponding destination IP address. In the virtual logical device, the sub-message that does not have a destination IP address is discarded.
  • each sub-message in the unicast message can be parsed to obtain a destination IP address, and then the sub-message with the IP address is sent to the virtual logic corresponding to the destination IP address
  • the sub-messages that do not have the destination IP address are directly discarded or processed; that is, only the sub-messages that need to be sent to the virtual logical device are sent to the past.
  • the message is discarded and other processing to avoid the cumbersome operation that the virtual logical device would still discard it when sent.
  • Figure 4-1 to Figure 4-5 are still based on Figure 1.
  • Figure 4-1 is a schematic diagram of VLD0 receiving packets
  • Figure 4-2 is a schematic diagram of VLD1 receiving packets
  • Figure 4-3 is a schematic diagram of VLD2 receiving packets
  • Figure 4-4 is a schematic diagram of VLD3 receiving packets
  • Figure 4-5 is a schematic diagram of packets received by VLD0, VLD1, VLD2, and VLD3.
  • the management port when the management port receives a broadcast message, it parses each sub-message contained in the broadcast message to obtain at least two destination IP addresses, and determines that each sub-message is to be waited for according to the at least two destination IP addresses.
  • the sent virtual logical device sends each sub-message to the corresponding virtual logical device.
  • each sub-message in the broadcast message can be parsed to obtain at least two destination IP addresses, and then the virtual logical device to which each sub-message is to be sent is determined according to each destination IP address , Send each sub-message to the corresponding virtual logical device; you can send it to the virtual logical device according to the destination IP address resolved by each sub-message in the broadcast message, avoiding the Each sub-message in the text is sent to each virtual logical device separately, which causes the message between each virtual logical device to be not isolated and low security.
  • Figure 5 is still based on Figure 1.
  • the four logical switches VLD0, VLD1, VLD2, and VLD3 run on the same physical switch.
  • the management port when the management port receives a multicast message, it parses each sub-message contained in the multicast message to obtain at least two destination IP addresses, and determines that each sub-message is to be waiting according to the at least two destination IP addresses.
  • the sent virtual logical device sends each sub-message to the corresponding virtual logical device; discards the sub-messages that do not have the destination IP address.
  • the virtual logical device before the virtual logical device receives the sub-message from the management port, it further includes: creating corresponding sub-message queue FIFOs for at least two virtual logical devices; that is, each virtual logical device corresponds to a sub-message. Queue FIFO, it should be understood that the sub-message queue FIFO is used to receive sub-messages from the management port, so that the virtual logical device can manage the messages, and it follows the rule that the first received sub-message is processed first.
  • S302 The virtual logical device receives the sub-message from the management port.
  • the sub-message queue FIFO of the virtual logical device receives the sub-message from the management port.
  • Figure 6-1 is based on Figure 4-1
  • the sub-message queue FIFO0 of the virtual logical device receives the messages from the management port
  • Figure 6-2 is based on Figure 4-2
  • the sub-message queue FIFO1 of the virtual logical device receives the sub-message from the management port
  • Figure 6-3 is based on Figure 4-3
  • the sub-message queue FIFO2 of the virtual logical device receives the sub-message from the management port.
  • Figure 6-4 shows that on the basis of Figure 4-4, the sub-message queue FIFO3 of the virtual logical device receives the sub-message from the management port.
  • Figure 6-5 is based on Figure 4-5, the sub-message queues FIFO0, FIFO1, FIFO2, FIFO3 of the virtual logical device receive sub-messages from the management port; see also Figure 7, It is based on Fig. 5 that the sub-message queue FIFO of the virtual logical device receives the sub-message from the management port.
  • the sub-message queue FIFO of the virtual logical device receives the sub-messages from the management port, it also includes: prioritizing the received sub-messages, the higher the importance of the sub-messages The corresponding priority is higher; the order of sub-messages in the sub-message queue FIFO is adjusted according to the priority sorting.
  • the virtual logical device may determine the priority of each sub-message according to the importance of each received sub-message, where the higher the importance of the sub-message, the higher the corresponding priority. For example, suppose that the sub-message queue FIFO includes sub-message 1, sub-message 2, sub-message 3, sub-message 4, and sub-message 5 received in sequence. Normally, each sub-message is processed in accordance with the sub-message Message 1, sub-message 2, sub-message 3, sub-message 4, and sub-message 5 are processed in the order, but the priority of each sub-message can be sorted according to the importance of each sub-message.
  • the priority order is sub-message 2, sub-message 3, sub-message 1, and sub-message 4.
  • the order of sub-message queue FIFO is sub-message 2, sub-message 3, sub-message 1, sub-message 1, and sub-message 1.
  • Message 4 is processed in the order of sub-message 2, sub-message 3, sub-message 1, and sub-message 4 to ensure that important sub-messages can be processed in time and improve the processing of sub-messages flexibility.
  • the virtual logical device after receiving the sub-message from the management port, the virtual logical device further includes: verifying the sub-message to obtain a verification result.
  • the virtual logical device checks the sub-message to see whether the received sub-message is a required sub-message, so as to further improve the accuracy of the received sub-message.
  • the sub-message is processed when the verification result is passed.
  • the virtual logical device performs verification on the sub-message, and the obtained verification result has two cases. One is that the verification result is passed. In this case, the sub-message can be directly processed. Optionally, The message is processed according to the message type and protocol; the second is that the check result is not passed, and the sub-message can be discarded or waited to be received again or an error is reported.
  • the message processing method provided by the embodiment of the present invention when a message is received through the management port, each sub-message contained in the message is parsed to obtain the destination IP address, the virtual logical device is determined according to the destination IP address, and the sub-message is It is sent to the corresponding virtual logic device, and then the virtual logic device receives the sub-message from the management port; this solves the problem that the security of the management port communication in the prior art has certain hidden dangers. That is, the message processing method provided by the embodiment of the present invention realizes the message isolation of each virtual logical device, and avoids the phenomenon that the messages of each virtual logical device are not isolated, which makes the messages mixed and has low security. It greatly improves the security of the message communication of the management port of the entire switch.
  • the switch includes a processor 801, a memory 802, and a communication BUS803.
  • the communication bus 803 in this embodiment is set to implement connection and communication between the processor 801 and the memory 802, and the processor 801 is set to execute one or more programs stored in the memory 802 to implement the following steps:
  • the management port When receiving a message, the management port parses each sub-message contained in the message to obtain the destination IP address, determines the virtual logical device according to the destination IP address, and sends the sub-message to the corresponding virtual logical device;
  • the virtual logical device receives the sub-message from the management port.
  • the switch in this embodiment has one management port and at least two virtual logical devices. It should be understood that in actual applications, the number of virtual logical devices can be flexibly adjusted according to specific application scenarios.
  • the message includes at least one of a unicast message and a broadcast message.
  • the unicast feature is the communication between a single sender and a receiver through the network; among them, the server responds to the client's request in time, and the server sends different data for each client's different request. Achieve personalized service. Broadcasting is characterized by a "one-to-all" communication mode between hosts. The network unconditionally copies and forwards the signal sent by each host, and all hosts can receive all information (regardless of whether it is needed); the network equipment is simple , Simple maintenance, low cost of network deployment, and because the server does not need to send data to each client individually, the server traffic load is extremely low.
  • the present invention is not limited to these two forms of messages.
  • it can also be a multicast message.
  • the characteristics of multicast are one sender and multiple messages.
  • the communication between recipients is between unicast and broadcast.
  • the processor 801 controls the management port to parse each sub-message contained in the unicast message to obtain a destination IP address, and send the sub-message with the destination IP address To the virtual logical device corresponding to the destination IP address, discard the sub-message that does not have the destination IP address.
  • the processor 801 controls the management port to parse each sub-message in the unicast message to obtain a destination IP address, and then sends the sub-message with the IP address to the destination IP
  • the sub-message that does not have the destination IP address is directly discarded or processed; that is, only the sub-messages that need to be sent to the virtual logical device are sent to the past.
  • the sub-messages of the virtual logical device are discarded, so as to avoid the cumbersome operation of discarding the virtual logical device in the past.
  • the processor 801 controls the management port to parse each sub-message contained in the broadcast message to obtain at least two destination IP addresses, and according to the at least two destination IP addresses Determine the virtual logical device to which each sub-message is to be sent, and send each sub-message to the corresponding virtual logical device.
  • the processor 801 controls the management port to parse each sub-message in the broadcast message to obtain at least two destination IP addresses, and then determines that each sub-message is to be waited for according to each destination IP address.
  • the sent virtual logical device sends each sub-message to the corresponding virtual logical device; that is, according to the destination IP address resolved by each sub-message in the broadcast message, it is sent to the virtual logical device respectively, It is avoided that each sub-message in the broadcast message is sent to each virtual logical device separately, which causes the message between each virtual logical device to be not isolated and the security is low.
  • the processor 801 controls the management port to parse each sub-message contained in the multicast message to obtain at least two destination IP addresses, according to the at least two destination IP addresses Determine the virtual logical device to which each sub-message is to be sent, and send each sub-message to the corresponding virtual logical device; discard the sub-messages that do not have a destination IP address.
  • the processor 801 controls the virtual logical device to create corresponding sub-message queue FIFOs for at least two virtual logical devices; that is, each virtual logical device corresponds to each A sub-message queue FIFO, it should be understood that the sub-message queue FIFO is used to receive sub-messages from the management port, so that the virtual logical device can manage the messages, and it follows that the first received sub-message is processed first the rule of.
  • the processor 801 controls the sub-message queue FIFO of the virtual logical device to receive the sub-message from the management port.
  • the processor 801 also controls the virtual logical device to prioritize the received sub-messages, and the sub-messages are important.
  • the virtual logical device may determine the priority of each sub-message according to the importance of each received sub-message, where the higher the importance of the sub-message, the higher the corresponding priority. For example, suppose that the sub-message queue FIFO includes sub-message 1, sub-message 2, sub-message 3, sub-message 4, and sub-message 5 received in sequence. Normally, each sub-message is processed in accordance with the sub-message Message 1, sub-message 2, sub-message 3, sub-message 4, and sub-message 5 are processed in the order, but the priority of each sub-message can be sorted according to the importance of each sub-message.
  • the priority order is sub-message 2, sub-message 3, sub-message 1, and sub-message 4.
  • the order of sub-message queue FIFO is sub-message 2, sub-message 3, sub-message 1, sub-message 1, and sub-message 1.
  • Message 4 is processed in the order of sub-message 2, sub-message 3, sub-message 1, and sub-message 4 to ensure that important sub-messages can be processed in time and improve the processing of sub-messages flexibility.
  • the processor 801 further controls the virtual logical device to verify the sub-message to obtain a verification result.
  • the virtual logical device checks the sub-message to see whether the received sub-message is a required sub-message, so as to further improve the accuracy of the received sub-message.
  • the sub-message is processed when the verification result is passed.
  • the virtual logical device performs verification on the sub-message, and the obtained verification result has two cases. One is that the verification result is passed. In this case, the sub-message can be directly processed. Optionally, The message is processed according to the message type and protocol; the second is that the check result is not passed, and the sub-message can be discarded or waited to be received again or an error is reported.
  • the switch provided by the embodiment of the present invention when receiving a message through the management port, parses each sub-message contained in the message to obtain the destination IP address, determines the virtual logical device according to the destination IP address, and sends the sub-message to the corresponding The virtual logical device, and then the virtual logical device receives the sub-message from the management port; this solves the problem of hidden dangers in the security of the management port communication in the prior art. That is, compared with the switches in the prior art, the switch provided by the embodiment of the present invention realizes the message isolation of each virtual logical device, and avoids that the messages of each virtual logical device are not isolated, resulting in mixed messages and security. The occurrence of the low phenomenon greatly improves the security of the message communication of the entire switch management port.
  • a computer-readable storage medium stores one or more programs, one or Multiple programs may be executed by one or more processors to implement the steps of the message processing method described in the first embodiment.
  • the storage medium includes volatile or non-volatile, removable or non-removable implemented in any method or technology for storing information (such as computer readable instructions, data structures, computer program modules, or other data) Medium.
  • Storage media includes but not limited to RAM (Random Access Memory), ROM (Read-Only Memory, read-only memory), EEPROM (Electrically Erasable Programmable read only memory), flash memory Or other memory technologies, CD-ROM (Compact Disc Read-Only Memory), digital versatile disk (DVD) or other optical disk storage, magnetic cassettes, magnetic tapes, disk storage or other magnetic storage devices, or can be used Any other medium that can store desired information and can be accessed by a computer.
  • the functional modules/units in the system, and the device can be implemented as software (which can be implemented by program code executable by a computing device) , Firmware, hardware and their appropriate combination.
  • the division between functional modules/units mentioned in the above description does not necessarily correspond to the division of physical components; for example, one physical component may have multiple functions, or one function or step may consist of several physical components. The components are executed cooperatively.
  • Some physical components or all physical components can be implemented as software executed by a processor, such as a central processing unit, a digital signal processor, or a microprocessor, or as hardware, or as an integrated circuit, such as an application specific integrated circuit .
  • the computer-readable medium may include computer storage Medium (or non-transitory medium) and communication medium (or temporary medium).
  • computer storage medium includes volatile and non-volatile memory implemented in any method or technology for storing information (such as computer-readable instructions, data structures, program modules, or other data).
  • flexible, removable and non-removable media are examples of flexible, removable and non-removable media.
  • communication media usually contain computer-readable instructions, data structures, program modules, or other data in a modulated data signal such as carrier waves or other transmission mechanisms, and may include any information delivery media . Therefore, the present invention is not limited to any specific combination of hardware and software.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

本发明实施例提供了一种报文处理方法、交换机及计算机可读存储介质，管理口在接收到报文时，对报文包含的各子报文进行解析得到目的IP地址，根据目的IP地址确定虚拟逻辑设备，将子报文发送至对应的虚拟逻辑设备，进而虚拟逻辑设备接收来自管理口的子报文；解决了现有技术中管理口通信的安全性存在一定隐患的问题；实现了各个虚拟逻辑设备的报文隔离，避免了由于各个虚拟逻辑设备的报文未隔离，使得报文混杂、安全性低的现象的发生，在极大程度上提高了整个交换机管理口报文通信的安全性。

Description

报文处理方法、交换机及计算机可读存储介质 技术领域
本发明实施例涉及交换机报文管理技术领域，更具体地说，涉及一种报文处理方法、交换机及计算机可读存储介质。
背景技术
虚拟逻辑设备(Virtual Logical Device，VLD)，是一种“一虚多”的虚拟化技术。数据中心机架交换机进行“一虚多”虚拟化技术是通过将一台物理机架设备进行逻辑的划分，虚拟出多个逻辑设备。逻辑交换机是指在一台物理交换机上根据一定的资源划分原则将交换机中的资源划分成不同的子集，使一台物理交换机模拟成多个执行单独交换任务的交换机。
其中，虚拟设备作为独立设备使用，虚拟设备组建的网络可以实现不同用户、业务在同一设备上有效进行隔离；一台数据中心交换机可以支持16个逻辑交换机，分别称为VLD0～VLD15，每个VLD分别对应一个目标IP地址。
目前，交换机的管理口位于主控板面板上，一块主控板只有一个管理口，多个逻辑交换机同时运行于一台物理交换机上，参见图1所示，四个逻辑交换机VLD0、VLD1、VLD2、VLD3同时运行于同一物理交换机，VLD0、VLD1、VLD2、VLD3报文通过同一个管理口进行通信；同时参见图2所示，管理口在接收报文之后，上送给所有的VLD(即VLD0、VLD1、VLD2、VLD3)进行处理，可见，现有技术中管理口报文通信的安全性存在一定隐患。
发明内容
本发明实施例提供的报文处理方法、交换机及计算机可读存储介质，主要解决的技术问题是现有技术中管理口通信的安全性存在一定隐患。
为解决上述技术问题，本发明实施例提供了一种报文处理方法，应用 于具有一个管理口和至少两个虚拟逻辑设备的交换机，所述报文处理方法包括：
所述管理口在接收到报文时，对所述报文包含的各子报文进行解析得到目的IP地址，根据所述目的IP地址确定虚拟逻辑设备，将所述子报文发送至对应的虚拟逻辑设备；
所述虚拟逻辑设备接收来自所述管理口的子报文。
本发明实施例还提供了一种交换机，所述交换机包括处理器、存储器及通信总线；
所述通信总线设置为实现所述处理器和所述存储器之间的连接通信；
所述处理器设置为执行所述存储器中存储的一个或者多个程序，以实现如上所述的报文处理方法的步骤。
本发明实施例还提供了一种计算机可读存储介质，所述计算机可读存储介质存储有一个或者多个程序，所述一个或者多个程序可被一个或者多个处理器执行，以实现如上所述的报文处理方法的步骤。
本发明实施例的有益效果是：
本发明实施例提供的报文处理方法、交换机及计算机可读存储介质，通过管理口在接收到报文时，对报文包含的各子报文进行解析得到目的IP地址，根据目的IP地址确定虚拟逻辑设备，将子报文发送至对应的虚拟逻辑设备，进而虚拟逻辑设备接收来自管理口的子报文；解决了现有技术中管理口通信的安全性存在一定隐患的问题。也即本发明实施例提供的报文处理方法、交换机及计算机可读存储介质，是由管理口发送报文包含的子报文至对应的虚拟逻辑设备中，即实现了各个虚拟逻辑设备的报文隔离，避免了由于各个虚拟逻辑设备的报文未隔离，使得报文混杂、安全性低的现象的发生，在极大程度上提高了整个交换机管理口报文通信的安全性。
本发明实施例其他特征和相应的有益效果在说明书的后面部分进行阐述说明，且应当理解，至少部分有益效果从本发明说明书中的记载变的显而易见。
附图说明
下面将结合附图及实施例对本发明作进一步说明，附图中：
图1为一种交换机虚拟4个VLD的结构示意图；
图2为如图1所示的一种交换机管理口报文通信的示意图；
图3为本发明实施例提供的一种报文处理方法的基本流程示意图；
图4-1为本发明实施例提供的第一种交换机管理口单播报文通信的示意图一；
图4-2为本发明实施例提供的第一种交换机管理口单播报文通信的示意图二；
图4-3为本发明实施例提供的第一种交换机管理口单播报文通信的示意图三；
图4-4为本发明实施例提供的第一种交换机管理口单播报文通信的示意图四；
图4-5为本发明实施例提供的第一种交换机管理口单播报文通信的示意图五；
图5为本发明实施例提供的第一种交换机管理口广播报文通信的示意图；
图6-1为本发明实施例提供的第二种交换机管理口单播报文通信的示意图一；
图6-2为本发明实施例提供的第二种交换机管理口单播报文通信的示意图二；
图6-3为本发明实施例提供的第二种交换机管理口单播报文通信的示意图三；
图6-4为本发明实施例提供的第二种交换机管理口单播报文通信的示意图四；
图6-5为本发明实施例提供的第二种交换机管理口单播报文通信的示意图五；
图7为本发明实施例提供的第二种交换机管理口广播报文通信的示意图；
图8为本发明实施例提供的交换机的结构示意图。
具体实施方式
为了使本发明的目的、技术方案及优点更加清楚明白，下面通过具体实施方式结合附图对本发明实施例作进一步详细说明。应当理解，此处所描述的具体实施例仅仅用以解释本发明，并不用于限定本发明。
为了解决现有技术中管理口通信的安全性存在一定隐患的问题，在本发明实施例中，提供了一种报文处理方法，通过管理口在接收到报文时，对报文包含的各子报文进行解析得到目的IP地址，根据目的IP地址确定虚拟逻辑设备，将子报文发送至对应的虚拟逻辑设备，进而虚拟逻辑设备接收来自管理口的子报文；请参见图3所示，如图3为本实施例提供的报文处理方法的基本流程示意图。
S301：管理口在接收到报文时，对报文包含的各子报文进行解析得到目的IP地址，根据目的IP地址确定虚拟逻辑设备，将子报文发送至对应的虚拟逻辑设备。
在本实施例中，报文包括单播报文、广播报文中的至少一种。
应当理解的是，单播特点是一个单个的发送者和一个接受者之间通过网络进行的通信；其中，服务器及时响应客户机的请求，服务器针对每个客户不同的请求发送不同的数据，容易实现个性化服务。广播特点是主机之间“一对所有”的通讯模式，网络对其中每一台主机发出的信号都进行无条件复制并转发，所有主机都可以接收到所有信息(不管是否需要)； 其中网络设备简单，维护简单，布网成本低廉，同时由于服务器不用向每个客户机单独发送数据，所以服务器流量负载极低。
值得注意的是，这里所列举的只是两种常见的报文，本发明并不局限于这两种形式的报文，例如还可以为多播报文，其中，多播特点是一个发送者和多个接受者之间的通信，其介于单播和广播之间。
在一些示例中，当管理口在接收到单播报文时，对单播报文包含的各子报文进行解析得到一个目的IP地址，将具有目的IP地址的子报文发送至目的IP地址对应的虚拟逻辑设备中，对不具有目的IP地址的子报文进行丢弃处理。
应当理解的是，对于单播报文而言，可对单播报文中的各子报文进行解析得到一个目的IP地址，进而将具有该IP地址的子报文发送至该目的IP地址对应的虚拟逻辑设备中，而对于不具有该目的IP地址的子报文直接进行丢弃处理或其他处理；即仅将需要发送至虚拟逻辑设备的子报文发送过去即可，对于无需发送至虚拟逻辑设备的子报文便进行丢弃等处理，避免发送过去虚拟逻辑设备还是会对其进行丢弃处理的繁琐操作。为了更好的理解，这里可参见图4-1至图4-5所示，其中图4-1至图4-5仍以图1为基础，四个逻辑交换机VLD0、VLD1、VLD2、VLD3运行于同一物理交换机，图4-1为VLD0接收报文的示意图，图4-2为VLD1接收报文的示意图，图4-3为VLD2接收报文的示意图，图4-4为VLD3接收报文的示意图，图4-5为VLD0、VLD1、VLD2、VLD3接收到报文的示意图。
在另一些示例中，当管理口在接收到广播报文时，对广播报文包含的各子报文进行解析得到至少两个目的IP地址，根据至少两个目的IP地址确定各子报文待发送的虚拟逻辑设备，将各子报文发送至对应的虚拟逻辑设备。
应当理解的是，对于广播报文而言，可对广播报文中的各子报文进行解析得到至少两个目的IP地址，进而根据各目的IP地址确定各子报文待发送的虚拟逻辑设备，将各子报文发送至对应的虚拟逻辑设备；即可根据 广播报文中的各子报文各自解析出的目的IP地址，将其分别对应发送至虚拟逻辑设备中，避免了将广播报文中的各子报文都分别发送至各个虚拟逻辑设备中，造成各个虚拟逻辑设备之间的报文未隔离，安全性低的现象发生。为了更好的理解，这里可参见图5所示，其中图5仍以图1为基础，四个逻辑交换机VLD0、VLD1、VLD2、VLD3运行于同一物理交换机。
在其他一些示例中，当管理口在接收到多播报文时，对多播报文包含的各子报文进行解析得到至少两个目的IP地址，根据至少两个目的IP地址确定各子报文待发送的虚拟逻辑设备，将各子报文发送至对应的虚拟逻辑设备；对不具有目的IP地址的子报文进行丢弃处理。
在本实施例中，虚拟逻辑设备接收来自管理口的子报文之前，还包括：为至少两个虚拟逻辑设备分别创建对应的子报文队列FIFO；即各个虚拟逻辑设备分别对应一个子报文队列FIFO，应当理解的是，子报文队列FIFO用于接收来自管理口的子报文，以便于虚拟逻辑设备对报文进行管理，其遵循先接收到的子报文先处理的规则。
S302：虚拟逻辑设备接收来自管理口的子报文。
在本实施例中，可选地，由虚拟逻辑设备的子报文队列FIFO接收来自管理口的子报文。为了更好的理解，可参见图6-1至图6-5所示，其中图6-1为在图4-1的基础上，由虚拟逻辑设备的子报文队列FIFO0接收来自管理口的子报文，图6-2为在图4-2的基础上，由虚拟逻辑设备的子报文队列FIFO1接收来自管理口的子报文，图6-3为在图4-3的基础上，由虚拟逻辑设备的子报文队列FIFO2接收来自管理口的子报文，图6-4为在图4-4的基础上，由虚拟逻辑设备的子报文队列FIFO3接收来自管理口的子报文，图6-5为在图4-5的基础上，由虚拟逻辑设备的子报文队列FIFO0、FIFO1、FIFO2、FIFO3接收来自管理口的子报文；还可参见图7所示，其为在图5的基础上，由虚拟逻辑设备的子报文队列FIFO接收来自管理口的子报文。
在本实施例中，由虚拟逻辑设备的子报文队列FIFO接收来自管理口 的子报文之后，还包括：对接收到的各子报文进行优先级排序，子报文重要度越高其对应的优先级越高；根据优先级排序调整子报文在子报文队列FIFO中的顺序。
应当理解的是，虚拟逻辑设备可根据接收到的各子报文的重要程度确定各子报文的优先级，其中子报文重要度越高其对应的优先级越高。例如设子报文队列FIFO包括依次接收到的子报文1、子报文2、子报文3、子报文4、子报文5，通常的，对各子报文的处理按照子报文1、子报文2、子报文3、子报文4、子报文5的顺序进行处理，但可根据各子报文的重要程度对其进行优先级的排序，设子报文的优先级排序为子报文2、子报文3、子报文1、子报文4，此时子报文队列FIFO的顺序为子报文2、子报文3、子报文1、子报文4，即处理时按照子报文2、子报文3、子报文1、子报文4的顺序进行处理，以保证重要的子报文能被及时处理，提升子报文处理的灵活性。
在本实施例中，可选地，虚拟逻辑设备接收到来自管理口的子报文之后，还包括：对子报文进行校验，得到校验结果。
应当理解的是，虚拟逻辑设备对子报文进行校验，看接收到的子报文是否为所需子报文，以进一步提升接收到的子报文的准确性。
在本实施例中，可选地，在校验结果为通过时，对子报文进行处理。
应当理解的是，虚拟逻辑设备对子报文进行校验，得到的校验结果存在两种情况，其一为校验结果为通过，此时可直接对子报文进行处理，可选地，根据报文类型、协议对报文进行处理；其二为校验结果为未通过，此时可对子报文进行丢弃处理或等待再次接收或报错等。
本发明实施例提供的报文处理方法，通过管理口在接收到报文时，对报文包含的各子报文进行解析得到目的IP地址，根据目的IP地址确定虚拟逻辑设备，将子报文发送至对应的虚拟逻辑设备，进而虚拟逻辑设备接收来自管理口的子报文；解决了现有技术中管理口通信的安全性存在一定隐患的问题。也即本发明实施例提供的报文处理方法，实现了各个虚拟逻 辑设备的报文隔离，避免了由于各个虚拟逻辑设备的报文未隔离，使得报文混杂、安全性低的现象的发生，在极大程度上提高了整个交换机管理口报文通信的安全性。
为了解决现有技术中管理口通信的安全性存在一定隐患的问题，在本发明实施例中，提供了一种交换机，请参见图8所示，该交换机包括处理器801、存储器802、及通信总线803。
其中，本实施例中的通信总线803设置为实现处理器801与存储器802之间的连接通信，处理器801则设置为执行存储器802中存储的一个或者多个程序，以实现以下步骤：
管理口在接收到报文时，对报文包含的各子报文进行解析得到目的IP地址，根据目的IP地址确定虚拟逻辑设备，将子报文发送至对应的虚拟逻辑设备；
虚拟逻辑设备接收来自管理口的子报文。
需要说明的是，本实施例的交换机具有一个管理口和至少两个虚拟逻辑设备，应当理解的是，在实际应用中，虚拟逻辑设备的个数可根据具体应用场景做灵活调整。
在本实施例中，报文包括单播报文、广播报文中的至少一种。
应当理解的是，单播特点是一个单个的发送者和一个接受者之间通过网络进行的通信；其中，服务器及时响应客户机的请求，服务器针对每个客户不同的请求发送不同的数据，容易实现个性化服务。广播特点是主机之间“一对所有”的通讯模式，网络对其中每一台主机发出的信号都进行无条件复制并转发，所有主机都可以接收到所有信息(不管是否需要)；其中网络设备简单，维护简单，布网成本低廉，同时由于服务器不用向每个客户机单独发送数据，所以服务器流量负载极低。
值得注意的是，这里所列举的只是两种常见的报文，本发明并不局限于这两种形式的报文，例如还可以为多播报文，其中，多播特点是一个发 送者和多个接受者之间的通信，其介于单播和广播之间。
在一些示例中，当管理口在接收到单播报文时，处理器801控制管理口对单播报文包含的各子报文进行解析得到一个目的IP地址，将具有目的IP地址的子报文发送至目的IP地址对应的虚拟逻辑设备中，对不具有目的IP地址的子报文进行丢弃处理。
应当理解的是，对于单播报文而言，处理器801控制管理口对单播报文中的各子报文进行解析得到一个目的IP地址，进而将具有该IP地址的子报文发送至该目的IP地址对应的虚拟逻辑设备中，而对于不具有该目的IP地址的子报文直接进行丢弃处理或其他处理；即仅将需要发送至虚拟逻辑设备的子报文发送过去即可，对于无需发送至虚拟逻辑设备的子报文便进行丢弃等处理，避免发送过去虚拟逻辑设备还是会对其进行丢弃处理的繁琐操作。
在另一些示例中，当管理口在接收到广播报文时，处理器801控制管理口对广播报文包含的各子报文进行解析得到至少两个目的IP地址，根据至少两个目的IP地址确定各子报文待发送的虚拟逻辑设备，将各子报文发送至对应的虚拟逻辑设备。
应当理解的是，对于广播报文而言，处理器801控制管理口对广播报文中的各子报文进行解析得到至少两个目的IP地址，进而根据各目的IP地址确定各子报文待发送的虚拟逻辑设备，将各子报文发送至对应的虚拟逻辑设备；即可根据广播报文中的各子报文各自解析出的目的IP地址，将其分别对应发送至虚拟逻辑设备中，避免了将广播报文中的各子报文都分别发送至各个虚拟逻辑设备中，造成各个虚拟逻辑设备之间的报文未隔离，安全性低的现象发生。
在其他一些示例中，当管理口在接收到多播报文时，处理器801控制管理口对多播报文包含的各子报文进行解析得到至少两个目的IP地址，根据至少两个目的IP地址确定各子报文待发送的虚拟逻辑设备，将各子报文发送至对应的虚拟逻辑设备；对不具有目的IP地址的子报文进行丢 弃处理。
在本实施例中，虚拟逻辑设备接收来自管理口的子报文之前，处理器801控制虚拟逻辑设备为至少两个虚拟逻辑设备分别创建对应的子报文队列FIFO；即各个虚拟逻辑设备分别对应一个子报文队列FIFO，应当理解的是，子报文队列FIFO用于接收来自管理口的子报文，以便于虚拟逻辑设备对报文进行管理，其遵循先接收到的子报文先处理的规则。
在本实施例中，可选地，处理器801控制虚拟逻辑设备的子报文队列FIFO接收来自管理口的子报文。
在本实施例中，虚拟逻辑设备的子报文队列FIFO接收来自管理口的子报文之后，处理器801还控制虚拟逻辑设备对接收到的各子报文进行优先级排序，子报文重要度越高其对应的优先级越高；根据优先级排序调整子报文在子报文队列FIFO中的顺序。
应当理解的是，虚拟逻辑设备可根据接收到的各子报文的重要程度确定各子报文的优先级，其中子报文重要度越高其对应的优先级越高。例如设子报文队列FIFO包括依次接收到的子报文1、子报文2、子报文3、子报文4、子报文5，通常的，对各子报文的处理按照子报文1、子报文2、子报文3、子报文4、子报文5的顺序进行处理，但可根据各子报文的重要程度对其进行优先级的排序，设子报文的优先级排序为子报文2、子报文3、子报文1、子报文4，此时子报文队列FIFO的顺序为子报文2、子报文3、子报文1、子报文4，即处理时按照子报文2、子报文3、子报文1、子报文4的顺序进行处理，以保证重要的子报文能被及时处理，提升子报文处理的灵活性。
在本实施例中，可选地，虚拟逻辑设备接收到来自管理口的子报文之后，处理器801还控制虚拟逻辑设备对子报文进行校验，得到校验结果。
应当理解的是，虚拟逻辑设备对子报文进行校验，看接收到的子报文是否为所需子报文，以进一步提升接收到的子报文的准确性。
在本实施例中，可选地，在校验结果为通过时，对子报文进行处理。
应当理解的是，虚拟逻辑设备对子报文进行校验，得到的校验结果存在两种情况，其一为校验结果为通过，此时可直接对子报文进行处理，可选地，根据报文类型、协议对报文进行处理；其二为校验结果为未通过，此时可对子报文进行丢弃处理或等待再次接收或报错等。
本发明实施例提供的交换机，通过管理口在接收到报文时，对报文包含的各子报文进行解析得到目的IP地址，根据目的IP地址确定虚拟逻辑设备，将子报文发送至对应的虚拟逻辑设备，进而虚拟逻辑设备接收来自管理口的子报文；解决了现有技术中管理口通信的安全性存在一定隐患的问题。也即本发明实施例提供的交换机和现有技术中的交换机相比，实现了各个虚拟逻辑设备的报文隔离，避免了由于各个虚拟逻辑设备的报文未隔离，使得报文混杂、安全性低的现象的发生，在极大程度上提高了整个交换机管理口报文通信的安全性。
为了解决现有技术中管理口通信的安全性存在一定隐患的问题，在本发明实施例中，提供了一种计算机可读存储介质，计算机可读存储介质存储有一个或者多个程序，一个或者多个程序可被一个或者多个处理器执行，以实现如实施例一所述的报文处理方法的步骤。
该存储介质包括在用于存储信息(诸如计算机可读指令、数据结构、计算机程序模块或其他数据)的任何方法或技术中实施的易失性或非易失性、可移除或不可移除的介质。存储介质包括但不限于RAM(Random Access Memory，随机存取存储器)，ROM(Read-Only Memory，只读存储器)，EEPROM(Electrically Erasable Programmable read only memory，带电可擦可编程只读存储器)、闪存或其他存储器技术、CD-ROM(Compact Disc Read-Only Memory，光盘只读存储器)，数字多功能盘(DVD)或其他光盘存储、磁盒、磁带、磁盘存储或其他磁存储装置、或者可以用于存储期望的信息并且可以被计算机访问的任何其他的介质。
显然，本领域的技术人员应该明白，上文中所公开方法中的全部或某 些步骤、系统、装置中的功能模块/单元可以被实施为软件(可以用计算装置可执行的程序代码来实现)、固件、硬件及其适当的组合。在硬件实施方式中，在以上描述中提及的功能模块/单元之间的划分不一定对应于物理组件的划分；例如，一个物理组件可以具有多个功能，或者一个功能或步骤可以由若干物理组件合作执行。某些物理组件或所有物理组件可以被实施为由处理器，如中央处理器、数字信号处理器或微处理器执行的软件，或者被实施为硬件，或者被实施为集成电路，如专用集成电路。这样的软件可以分布在计算机可读介质上，由计算装置来执行，并且在某些情况下，可以以不同于此处的顺序执行所示出或描述的步骤，计算机可读介质可以包括计算机存储介质(或非暂时性介质)和通信介质(或暂时性介质)。如本领域普通技术人员公知的，术语计算机存储介质包括在用于存储信息(诸如计算机可读指令、数据结构、程序模块或其他数据)的任何方法或技术中实施的易失性和非易失性、可移除和不可移除介质。
此外，本领域普通技术人员公知的是，通信介质通常包含计算机可读指令、数据结构、程序模块或者诸如载波或其他传输机制之类的调制数据信号中的其他数据，并且可包括任何信息递送介质。所以，本发明不限制于任何特定的硬件和软件结合。
以上内容是结合具体的实施方式对本发明实施例所作的进一步详细说明，不能认定本发明的具体实施只局限于这些说明。对于本发明所属技术领域的普通技术人员来说，在不脱离本发明构思的前提下，还可以做出若干简单推演或替换，都应当视为属于本发明的保护范围。

Claims (10)

  1. 一种报文处理方法，应用于具有一个管理口和至少两个虚拟逻辑设备的交换机，所述报文处理方法包括：
    所述管理口在接收到报文时，对所述报文包含的各子报文进行解析得到目的IP地址，根据所述目的IP地址确定虚拟逻辑设备，将所述子报文发送至对应的虚拟逻辑设备；
    所述虚拟逻辑设备接收来自所述管理口的子报文。
  2. 如权利要求1所述的报文处理方法，其中，所述报文包括单播报文、广播报文中的至少一种。
  3. 如权利要求2所述的报文处理方法，其中，当所述管理口在接收到单播报文时，对所述单播报文包含的各子报文进行解析得到一个目的IP地址，将具有目的IP地址的子报文发送至所述目的IP地址对应的虚拟逻辑设备中，对不具有目的IP地址的子报文进行丢弃处理。
  4. 如权利要求2所述的报文处理方法，其中，当所述管理口在接收到广播报文时，对所述广播报文包含的各子报文进行解析得到至少两个目的IP地址，根据所述至少两个目的IP地址确定各所述子报文待发送的虚拟逻辑设备，将各所述子报文发送至对应的虚拟逻辑设备。
  5. 如权利要求1-4任一项所述的报文处理方法，其中，所述虚拟逻辑设备接收来自所述管理口的子报文之前，还包括：
    为所述至少两个虚拟逻辑设备分别创建对应的子报文队列；
    所述虚拟逻辑设备接收来自所述管理口的子报文，包括：
    由所述虚拟逻辑设备的子报文队列接收来自所述管理口的子报文。
  6. 如权利要求5所述的报文处理方法，其中，所述由所述虚拟逻辑设备的子报文队列接收来自所述管理口的子报文之后，还包括：
    对接收到的各所述子报文进行优先级排序，子报文重要度越高其对应 的优先级越高；
    根据所述优先级排序调整所述子报文在所述子报文队列中的顺序。
  7. 如权利要求1-4任一项所述的报文处理方法，其中，所述虚拟逻辑设备接收来自所述管理口的子报文之后，还包括：
    对所述子报文进行校验，得到校验结果。
  8. 如权利要求7所述的报文处理方法，其中，在所述校验结果为通过时，对所述子报文进行处理。
  9. 一种交换机，所述交换机包括处理器、存储器及通信总线；
    所述通信总线设置为实现所述处理器和所述存储器之间的连接通信；
    所述处理器设置为执行所述存储器中存储的一个或者多个程序，以实现如权利要求1-8任一项所述的报文处理方法的步骤。
  10. 一种计算机可读存储介质，所述计算机可读存储介质存储有一个或者多个程序，所述一个或者多个程序可被一个或者多个处理器执行，以实现如权利要求1-8任一项所述的报文处理方法的步骤。
PCT/CN2020/103789 2019-07-24 2020-07-23 报文处理方法、交换机及计算机可读存储介质 WO2021013218A1 (zh)

Priority Applications (1)

Application Number Priority Date Filing Date Title
EP20844624.5A EP3968587B1 (en) 2019-07-24 2020-07-23 Message processing method, switch, and computer-readable storage medium

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201910673667.0A CN112291165A (zh) 2019-07-24 2019-07-24 报文处理方法、交换机及计算机可读存储介质
CN201910673667.0 2019-07-24

Publications (1)

Publication Number Publication Date
WO2021013218A1 true WO2021013218A1 (zh) 2021-01-28

Family

ID=74193315

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2020/103789 WO2021013218A1 (zh) 2019-07-24 2020-07-23 报文处理方法、交换机及计算机可读存储介质

Country Status (3)

Country Link
EP (1) EP3968587B1 (zh)
CN (1) CN112291165A (zh)
WO (1) WO2021013218A1 (zh)

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20130343385A1 (en) * 2012-06-20 2013-12-26 International Business Machines Corporation Hypervisor independent network virtualization
CN104767676A (zh) * 2014-01-03 2015-07-08 华为技术有限公司 Sdn网络中的数据报文转发方法和系统
CN106161115A (zh) * 2016-09-23 2016-11-23 杭州迪普科技有限公司 一种应用于vxlan的设备管理方法及装置
CN109347851A (zh) * 2018-11-06 2019-02-15 杭州迪普科技股份有限公司 一种请求响应方法及装置

Family Cites Families (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8989186B2 (en) * 2010-06-08 2015-03-24 Brocade Communication Systems, Inc. Virtual port grouping for virtual cluster switching
WO2012006190A1 (en) * 2010-06-29 2012-01-12 Huawei Technologies Co., Ltd. Delegate gateways and proxy for target hosts in large layer 2 and address resolution with duplicated internet protocol addresses
US8718061B2 (en) * 2010-11-19 2014-05-06 Industrial Technology Research Institute Data center network system and packet forwarding method thereof
WO2012170016A1 (en) * 2011-06-07 2012-12-13 Hewlett-Packard Development Company, L.P. A scalable multi-tenant network architecture for virtualized datacenters
CN103501282B (zh) * 2013-10-09 2016-06-15 中国联合网络通信集团有限公司 网络报文发送控制方法、虚拟交换机和物理机
US10135687B2 (en) * 2014-01-06 2018-11-20 Lenovo Enterprise Solutions (Singapore) Pte. Ltd. Virtual group policy based filtering within an overlay network
CN103825796A (zh) * 2014-02-28 2014-05-28 神州数码网络(北京)有限公司 报文交互方法、终端站和网桥
CN105991790A (zh) * 2015-04-21 2016-10-05 杭州迪普科技有限公司 虚拟设备策略配置方法及装置
CN106941460A (zh) * 2016-01-05 2017-07-11 中兴通讯股份有限公司 报文发送方法和装置
CN109150684B (zh) * 2018-07-20 2021-04-06 新华三技术有限公司 报文处理方法、装置、通信设备及计算机可读存储介质

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20130343385A1 (en) * 2012-06-20 2013-12-26 International Business Machines Corporation Hypervisor independent network virtualization
CN104767676A (zh) * 2014-01-03 2015-07-08 华为技术有限公司 Sdn网络中的数据报文转发方法和系统
CN106161115A (zh) * 2016-09-23 2016-11-23 杭州迪普科技有限公司 一种应用于vxlan的设备管理方法及装置
CN109347851A (zh) * 2018-11-06 2019-02-15 杭州迪普科技股份有限公司 一种请求响应方法及装置

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
See also references of EP3968587A4 *

Also Published As

Publication number Publication date
EP3968587A4 (en) 2022-07-06
EP3968587B1 (en) 2023-08-09
EP3968587A1 (en) 2022-03-16
CN112291165A (zh) 2021-01-29

Similar Documents

Publication Publication Date Title
US11765074B2 (en) System and method for facilitating hybrid message matching in a network interface controller (NIC)
US11422839B2 (en) Network policy implementation with multiple interfaces
US20210336997A1 (en) Method and system for virtual machine aware policy management
US9800502B2 (en) Quantized congestion notification for computing environments
US10567187B2 (en) Methods to optimize multicast routing in overlay networks
US9762497B2 (en) System, method and apparatus for network congestion management and network resource isolation
US9692696B2 (en) Managing data flows in overlay networks
US9686203B2 (en) Flow control credits for priority in lossless ethernet
US9112801B2 (en) Quantized congestion notification in a virtual networking system
US9270600B2 (en) Low-latency lossless switch fabric for use in a data center
US9602393B2 (en) Unregistered multicast packet forwarding to multicast router ports
US20150365330A1 (en) Packet i/o support for a logical switch router architecture
WO2021013218A1 (zh) 报文处理方法、交换机及计算机可读存储介质
US11895189B2 (en) Secure communications of storage tenants that share a storage cluster system
RU2777370C1 (ru) Способ обработки сообщений, коммутатор и машиночитаемый носитель данных
CN115801482A (zh) 云原生环境下基于eBPF的组播实现方法、系统及介质
KR20170089348A (ko) 네트워크 순간 폭주를 제어하는 방법, 장치 및 컴퓨터 프로그램

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 20844624

Country of ref document: EP

Kind code of ref document: A1

ENP Entry into the national phase

Ref document number: 2020844624

Country of ref document: EP

Effective date: 20211206

NENP Non-entry into the national phase

Ref country code: DE