WO2021068641A1 - 基于IPv6网络的虚拟专用网络组播方法及电子设备 - Google Patents

基于IPv6网络的虚拟专用网络组播方法及电子设备 Download PDF

Info

Publication number
WO2021068641A1
WO2021068641A1 PCT/CN2020/108489 CN2020108489W WO2021068641A1 WO 2021068641 A1 WO2021068641 A1 WO 2021068641A1 CN 2020108489 W CN2020108489 W CN 2020108489W WO 2021068641 A1 WO2021068641 A1 WO 2021068641A1
Authority
WO
WIPO (PCT)
Prior art keywords
private network
routing
network multicast
end device
forwarding table
Prior art date
Application number
PCT/CN2020/108489
Other languages
English (en)
French (fr)
Inventor
韦忠忠
Original Assignee
中兴通讯股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 中兴通讯股份有限公司 filed Critical 中兴通讯股份有限公司
Publication of WO2021068641A1 publication Critical patent/WO2021068641A1/zh

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/02—Details
    • H04L12/16—Arrangements for providing special services to substations
    • H04L12/18—Arrangements for providing special services to substations for broadcast or conference, e.g. multicast
    • H04L12/185—Arrangements for providing special services to substations for broadcast or conference, e.g. multicast with management of multicast group membership
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/02—Details
    • H04L12/16—Arrangements for providing special services to substations
    • H04L12/18—Arrangements for providing special services to substations for broadcast or conference, e.g. multicast
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/46—Interconnection of networks
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/46—Interconnection of networks
    • H04L12/4633—Interconnection of networks using encapsulation techniques, e.g. tunneling
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/46—Interconnection of networks
    • H04L12/4641—Virtual LANs, VLANs, e.g. virtual private networks [VPN]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00—Network arrangements, protocols or services for addressing or naming
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2101/00—Indexing scheme associated with group H04L61/00
    • H04L2101/60—Types of network addresses
    • H04L2101/618—Details of network addresses
    • H04L2101/659—Internet protocol version 6 [IPv6] addresses

Definitions

  • the present disclosure relates to the field of communication technology, and in particular to a virtual private network multicast method based on an IPv6 network, an electronic device, and a computer-readable storage medium.
  • VPN Virtual Private Network
  • MVPN Movable Virtual Private Network
  • NG MVPN Next Generation MVPN
  • BGP Border Gateway Protocol
  • PIM SM Protocol Independent Multicast-Sparse Mode
  • PIM SSM Protocol Independent Multicast-Source Specific Multicast
  • P2MP TE Point To Multipoint Traffic Engineer, point-to-multipoint traffic engineering
  • mLDP The multipoint extensions for Label Distribution Protocol, multicast label distribution protocol
  • MPLS Multiprotocol Label Switching, multi-protocol label switching
  • the multicast tunnel needs to be established and maintained separately to carry the multicast service, and the corresponding tunnel information needs to be maintained at the same time, which will consume too much equipment resources; and the above-mentioned NG MVPN multicast method needs to rely on LDP (Label Distribution Protocol, label distribution protocol) or RSVP (Resource Reservation Protocol, resource reservation protocol) for protocol calculation, cannot be adapted to future flexible and programmable SDN (Software Defined Network, Software Defined Network).
  • LDP Label Distribution Protocol, label distribution protocol
  • RSVP Resource Reservation Protocol, resource reservation protocol
  • the present disclosure provides a virtual private network multicast method, electronic equipment, and computer-readable storage medium based on an IPv6 (Internet Protocol Version 6, Internet Protocol Version 6) network to solve the current virtual private network multicast solution,
  • IPv6 Internet Protocol Version 6, Internet Protocol Version 6
  • the need to separately establish and maintain the multicast tunnel leads to the consumption of more equipment resources and the inability to adapt to the multicast service in the programmable network environment.
  • An embodiment of the present disclosure provides a virtual private network multicast method based on an IPv6 network, which is applied to a sender device, and includes: after receiving a first private network multicast message sent by a user equipment, sending the first private network multicast message The network multicast message is forwarded to the corresponding receiving end device through the SRv6 tunnel of the public network; wherein, the first private network multicast message carries the field information of the first routing forwarding table identifier extended by the receiving end device based on SRv6 .
  • the embodiment of the present disclosure provides another virtual private network multicast method based on an IPv6 network, which is applied to a receiving end device, and includes:
  • the SRv6 tunnel of the public network is forwarded to the receiving end device.
  • sending the first routing forwarding table identifier to the sending end device is specifically:
  • An electronic device provided by an embodiment of the present disclosure includes a memory and a processor.
  • the memory stores a computer program.
  • the processor runs the computer program stored in the memory, the processor executes the Virtual private network multicast method based on IPv6 network.
  • Another electronic device includes a memory and a processor.
  • the memory stores a computer program.
  • the processor runs the computer program stored in the memory, the processor executes the Virtual private network multicast method based on IPv6 network.
  • An embodiment of the present disclosure provides a computer-readable storage medium on which a computer program is stored.
  • the processor executes the IPv6 network-based virtual private network multicast method.
  • An embodiment of the present disclosure provides a computer-readable storage medium on which a computer program is stored.
  • the processor executes the IPv6 network-based virtual private network multicast method.
  • FIG. 1 is a schematic flowchart of a virtual private network multicast method based on an IPv6 network provided by the first embodiment of the present disclosure
  • Fig. 2a is a schematic diagram of an application scenario of a virtual private network multicast method based on an IPv6 network provided by the present disclosure
  • Fig. 2b is a schematic diagram of the private network multicast message forwarding process of the virtual private network multicast method based on the IPv6 network provided by the present disclosure
  • FIG. 3 is a schematic flowchart of a virtual private network multicast method based on an IPv6 network provided by the second embodiment of the present disclosure
  • FIG. 4 is a schematic flowchart of a virtual private network multicast method based on an IPv6 network provided by the third embodiment of the present disclosure
  • FIG. 5 is a schematic diagram of another flow chart of a virtual private network multicast method based on an IPv6 network provided by the third embodiment of the present disclosure
  • FIG. 6A is a schematic structural diagram of a virtual private network multicast device based on an IPv6 network provided by a fourth embodiment of the present disclosure
  • FIG. 6B is a schematic structural diagram of a virtual private network multicast device based on an IPv6 network provided by a fifth embodiment of the present disclosure
  • FIG. 7 is a schematic structural diagram of an electronic device provided by a sixth embodiment of the disclosure.
  • IPv6 is the abbreviation of "Internet Protocol Version 6" (Internet Protocol Version 6).
  • IPv4 Internet Protocol Version 4
  • tunneling tunneling technology
  • the main point of the tunneling technology is that when the IPv6 datagram enters the IPv4 network, the IPv6 data The packet is encapsulated into an IPv4 datagram, and then transmitted in the tunnel of the IPv4 network.
  • the data part that is, the original IPv6 datagram
  • the host's IPv6 protocol stack is opened and delivered to the host's IPv6 protocol stack.
  • the embodiments of the present disclosure are based on the evolution of the IPv4 network to the IPv6 network to get rid of MPLS (Multiprotocol Label Switching, multi-protocol label switching) to achieve a more flexible VPN (Virtual Private Network, virtual private network) multicast forwarding method.
  • MPLS Multiprotocol Label Switching, multi-protocol label switching
  • VPN Virtual Private Network, virtual private network
  • Some tunneling technology realizes the forwarding of multicast packets in a virtual private network without the need to separately establish and maintain a multicast tunnel, which improves the utilization of equipment resources.
  • SRv6 IPv6 Segment routing, IPv6 segment routing
  • SRv6 adds SRH (Segment Routing Header) to IPv6 packets. Extension to replace the traditional label forwarding function under MPLS (Multiprotocol Label Switching), and use a 128-bit IPv6 address as the network cable node identifier (SID).
  • SID network cable node identifier
  • SRv6 SID is a network instruction (Instruction), which consists of two parts: Locator and Function. Locator is mainly responsible for routing functions, so it must be unique in the SR (Segment Routing) domain.
  • Function can indicate any function of the device, such as A certain forwarding behavior, or a certain business, etc.
  • the structure of the SRv6 SID is more conducive to programming the network, and the embodiments of the present disclosure utilize the SRv6 feature to achieve network flexibility and programmability.
  • FIG. 1 is a flowchart of a virtual private network multicast method based on an IPv6 network provided by the first embodiment of the present disclosure, which is applied to a receiving end device.
  • the receiving end device in this embodiment is a VPN network PE (Provider Edge), hereinafter referred to as PE1, the method includes step S10. After receiving the first private network multicast message sent by the user equipment, PE1 groups the first private network The broadcast message is forwarded to the corresponding receiving end device through the SRv6 tunnel of the public network.
  • PE VPN network PE
  • the first private network multicast message carries field information of the first routing forwarding table identifier extended by the receiving end device based on SRv6.
  • the virtual private network multicast method based on the IPv6 network realizes the forwarding of VPN multicast messages by carrying private network multicast messages on the SRv6 tunnel of the public network, and utilizes the existing IPv6 network, Reduce equipment resources occupied by multicast tunnels, improve equipment resource utilization, and use SRv6 features to achieve network flexibility and programmability.
  • VPN multicast requires separate establishment and maintenance of multicast tunnels to implement private network multicast message forwarding.
  • it is compatible with existing IPv6 networks and uses IPv6 tunnel technology to implement private network multicast message forwarding.
  • IPv6 tunnel technology to implement private network multicast message forwarding.
  • PE1 receives the first private network multicast packet transmitted by the user equipment (ie, CE1), it bears the first private network multicast packet on the existing On the SRv6 tunnel, it is no longer necessary to re-establish the multicast tunnel.
  • the confidentiality of the transmission of the first private network multicast message on the public network is realized.
  • the encapsulation of the first private network multicast message is implemented based on the field information of the first routing and forwarding table identifier of the receiving end device (which may be PE2, PE3). Specifically, by adding a function type that expands SRv6, PE2 generates the first routing and forwarding table identifier based on SRv6. When PE1 forwards the first private network multicast message, it carries it in the first private network multicast message.
  • the field information identified by the first routing forwarding table of PE2 can implement SRv6 tunnel encapsulation, replacing the label encapsulation mode in related technologies to form a public network message, and then realize private network multicast message forwarding through the SRv6 tunnel.
  • the private network multicast message can be associated with SRv6 to realize the encapsulation of the private network multicast message in the SRv6 tunnel of the public network.
  • Each PE device is configured with the first initial identification, namely End SID, and relies on the internal gateway protocol IGP to flood the public network to spread its End SID to other network elements.
  • the End SID configured for PE1, PE2, and PE3 is : Aaa::1/64, bbbb::1/64 and cccc::1/64.
  • each PE device automatically generates the MVPN-VRF-SID of the MVPN instance (MVPN routing and forwarding table identifier, that is, the first routing and forwarding table identifier) within the End SID range.
  • MVPN-VRF-SID MVPN routing and forwarding table identifier
  • END.Mul.SID the MVPN-VRF-SID information of the receiving end PE device
  • CE Customer Edge
  • SP Service Provider
  • CE can be a router or switch, or a host
  • PE Provider Edge
  • P Provider
  • PE1 can be used as the data sender
  • the SP network is generally referred to as the public network
  • the sites of each VPN-instance form the generally referred to as user private network.
  • the P device supports IPv6 forwarding.
  • each PE device enables SRv6, and enable is responsible for the input and output of control signals. Some commands in the network device may be disabled. Status, so you need to modify the enable (ie turn on) to make it work normally.
  • the SRv6 of the PE1 device may be in a closed state. When SRv6 needs to be turned on, SRv6 is enabled.
  • FIG. 2a is a schematic diagram of an application scenario of a virtual private network multicast method based on an IPv6 network provided by the present disclosure.
  • the service provider edge device as the data sender, such as PE1
  • it also includes Several service provider edge devices as data receivers, such as PE2 and PE3, enable SRv6 on each service provider edge device to automatically establish an SRv6 tunnel on the public network between the data sender and the data receiver.
  • the VPN instances on PE2 and PE3 receive the multicast packets forwarded by the VPN instance on PE1 through the SRv6 tunnel of the public network, and a neighbor relationship is established between the interface bound to the VPN instance on PE1 and the interface on CE1 at the opposite end of the link.
  • PE2-CE2 and PE3-CE3 respectively establish a neighbor relationship, and based on the neighbor relationship, the routing and forwarding table of the VPN instance can be created, and the multicast forwarding tree of the private network can be established.
  • the PE device can support a public network instance and multiple VPN instances at the same time.
  • This embodiment takes the same VPN instance as an example, that is, PE1, PE2, and PE3 are the same VPN instance.
  • the VPN instance can be an MVPN instance .
  • this embodiment provides a specific encapsulation scheme in which the first private network multicast packet is carried on the SRv6 public network tunnel, that is, the realization
  • PE1 configures a first initial identifier based on SRv6, and floods the first initial identifier on the public network based on the interior gateway protocol IGP;
  • PE1 obtains the second initial identifier of the receiving end device flooding on the public network, where the second initial identifier is the second initial identifier configured by the receiving end device based on SRv6 after enabling SRv6 .
  • the End SIDs configured for PE1, PE2, and PE3 are: aaa::1/64, bbbb::1/64, and cccc::1/64 to realize the identification between the PE devices and the public network
  • the encapsulation mode of the RSv6 tunnel is: aaa::1/64, bbbb::1/64, and cccc::1/64 to realize the identification between the PE devices and the public network The encapsulation mode of the RSv6 tunnel.
  • End SID stands for Endpoint SID, used to identify a destination address prefix (Prefix) in the network, similar to Prefix Segment in SR MPLS. End SID spreads to other network elements through the IGP protocol, which is globally visible and effective. For detailed information, please refer to the document: draft-filsfils-spring-srv6-network-programming 00 01.
  • the multicast method further includes step S33 and step S34.
  • PE1 obtains the first routing and forwarding table identifier of the receiving end device; specifically, PE1 obtains the first routing and forwarding table identifier generated by the receiving end device based on the second initial identifier.
  • each PE device automatically generates the MVPN-VRF-SID of the MVPN instance (MVPN routing forwarding table identifier, that is, the first routing forwarding table) within the End SID range. ID), this embodiment defines it as END.Mul.SID.
  • the MVPN-VRF-SIDs generated by PE1, PE2, and PE3 are: aaaa::123/64, bbbb::123/64, and cccc:: 123/64.
  • step 34 the field information of the first routing and forwarding table identifier is added to the first private network multicast message.
  • the message encapsulation of the first private network multicast message on the public network is realized, so that the first private network multicast message can be encapsulated on the public network.
  • the network multicast message is forwarded to the corresponding receiving end device through the public network.
  • PE1 as the sending end device obtains the first routing forwarding table identifiers of PE2 and PE3 as the receiving end device.
  • PE1 generates a local SID table after generating a local first routing and forwarding table identifier based on PE2 and PE3 obtained above.
  • the acquiring the first routing forwarding table identifier of the receiving end device includes:
  • PE1 obtains the first routing forwarding table identifier of the receiving end device based on the Border Gateway Protocol BGP.
  • the PE device transmits private network multicast routing information through the MVPN NLRI field of the MP-BGP protocol (MultiProtocol BGP, multi-protocol extension), including: RP-BSR information, multicast source information, group join information, etc., in this embodiment NLRI, which carries MVPN routing information through the extended BGP protocol, transmits multicast routes, and an extended attribute of BGP added in this embodiment---SRv6 tunnel encapsulation, which includes MVPN-VRF-SID information to facilitate private network groups
  • the broadcast routing is associated with the MVPN-VRF-SID.
  • the PE device advertises the MVPN-VRF-SID information to neighboring devices through the BGP protocol.
  • the figure shows that PE1 obtains the extension information of PE2 and PE3 as an example.
  • PE2 and PE3 carry END.Mul.SID as bbbb:123/64 respectively, the next hop Bbbb::1/64 and END.Mul.SID is cccc::123/64, the next hop is cccc::1/64 extended information, and the above information is published to PE1, and the corresponding PE1 obtains PE2 and PE3 Extended information.
  • the outgoing interface of the corresponding private network multicast routing table can be expressed as an SRv6 virtual port, and the multicast private network route entry Related to END.Mul.SID: bbbb::123 and the corresponding next hop information (take PE2 as an example).
  • MVPN NLRI routing information is transmitted by the NLRI (Network Layer Reachable Information) field carried in the BGP Update message.
  • the NLRI that carries MVPN routing information is also called MVPN NLRI.
  • NLRI Network Layer Reachable Information
  • PE1 forwards the first private network multicast message to the corresponding receiving end device through the SRv6 tunnel of the public network (that is, step S10), which specifically includes step S35 and step S37:
  • step S35 query the private network multicast route of the first private network multicast message, and associate the private network multicast route with the first route forwarding table identifier;
  • step S36 PE1 encapsulates the header of the first private network multicast packet based on the associated private network multicast route and the first routing forwarding table identifier;
  • step S37 the first private network multicast message is forwarded to the corresponding receiving end device based on the header of the first private network multicast message on the SRv6 tunnel of the public network.
  • the PE1 device when the PE1 device receives the multicast message from CE1, it queries the private network multicast route and associates it with the corresponding MVPN-VRF-SID, and then directly uses the corresponding END.Mul.SID (with The receiving end device is PE2 as an example, END.Mul.SID is bbbb::123) as the destination address to encapsulate the SRH header of the first private network multicast packet, so that the first private network multicast packet is Compared with related technologies, the encrypted transmission over the SRv6 tunnel of the public network can realize the security of message transmission and is more convenient in this embodiment.
  • PE1 forwards the encapsulated first private network multicast message to PE2 and PE3 through the SRv6 tunnel of the public network. Specifically, PE1 searches the outbound interface linked list of the public network forwarding entry to pass the encapsulated The public network message is copied to the corresponding public network multicast outgoing interface. It is understandable that the message in this embodiment only needs to be forwarded on the public network according to the destination IP in the IPv6 message header to check the public network forwarding entry.
  • the message in the public network only needs to match the route entry bbbb::1/64 in the public network according to the longest matching principle, and then forward it to the P device.
  • the P device continues to find the public network route and forwards it to the PE2 or PE3 device. can.
  • PE1 forwards private network multicast packets to PE2 equipment as an example, combined with Figure 2b,
  • Figure 2b is a schematic diagram of the process of PE1 forwarding private network multicast packets to PE2 equipment, where SA represents the multicast packet Source address, DA represents the destination address of the multicast packet, PE1 and PE2 transmit multicast packets through the public network SRv6 tunnel, and encapsulate the source and destination addresses of the multicast source packet (private network multicast packet) Realize the message forwarding on the public network tunnel. After exiting the PE2 node, the encapsulated private network multicast message is decapsulated and forwarded to the corresponding user equipment CE2.
  • the PE2 device After exiting the PE2 device, it searches the local private network forwarding table, matches the forwarding action corresponding to END.Mul.SID, strips off the IPv6 packet header, realizes the decapsulation of the packet, and restores it to a normal multicast packet.
  • the MVPN instance matching the END.Mul.SID is searched for the private network multicast routing and forwarding table corresponding to the MVPN instance for forwarding.
  • the PE1 device as the sender is not limited to only be the sender to forward private network multicast packets, and can also be used as the receiver device to receive private network multicast packets.
  • the PE1 device generates based on SRv6
  • the second routing and forwarding table identifier, and publishing the second routing identifier to the corresponding receiving end device the implementation principle is the same as the above-mentioned PE2 and PE3 devices when they are used as the receiving end device to generate and issue the routing and forwarding table identifier, and will not be repeated here. .
  • FIG. 4 provides another IPv6 network-based virtual private network multicast method corresponding to the third embodiment of the present disclosure, which is applied to the receiving end device (hereinafter referred to as PE2), as shown in FIG. 4, the method Step S41 and Step S42.
  • PE2 receiving end device
  • step S41 PE2 expands the first routing forwarding table identifier based on SRv6.
  • the first routing forwarding table identifier is expanded based on SRv6.
  • PE2 publishes the first routing and forwarding table identifier to the sending end device based on the border gateway protocol.
  • the method further includes the following steps:
  • PE2 obtains the first initial identifier of the sender device flooding on the public network, where the sender device configures the first initial identifier based on SRv6;
  • PE2 configures a second initial identifier based on SRv6, and floods the second initial identifier on the public network based on the interior gateway protocol;
  • the PE2 expands the first routing forwarding table identifier based on SRv6, which specifically includes:
  • PE2 generates a first routing and forwarding table identifier based on the second initial identifier.
  • PE2 publishes the first routing and forwarding table identifier to the sending end device, so that after the sending end device receives the first private network multicast packet sent by the user equipment, the first private network multicast packet Add the field information of the first routing and forwarding table identifier to a private network multicast message, and forward the first private network multicast message carrying the field information of the first routing and forwarding table identifier through the SRv6 tunnel of the public network To the receiving end device.
  • the PE2 device publishes the first forwarding table identifier to the corresponding sender device PE1, when PE1 receives the first private network multicast packet of CE1, it queries the private network multicast packet of the first private network.
  • Network multicast routing and associate the private network multicast routing of the first private network multicast message with the first routing forwarding table identifier END.Mul.SID: aaaa::123 of PE2, so as to realize that PE1 can communicate with the first private network.
  • Network multicast packets are encapsulated and forwarded to PE2 through SRv6 on the public network. Specifically, after receiving the BGP route, PE1 imports the local MVPN instance according to the RT attribute, and writes it into the private network multicast packet routing table.
  • the outgoing interface of the network multicast routing table can be the virtual interface of SRv6.
  • PE1 associates the multicast private network routing entry with the identifier END.Mul.SID: aaaa::123 and the corresponding next hop information.
  • PE1 receives the transmission of CE1.
  • incoming multicast packets query the private network multicast routing, and find the associated END.Mul.SID of PE2, and realize the encapsulation and forwarding of the packets.
  • the multicast method further includes step S53 to step S55.
  • step S53 when PE2 receives the first private network multicast message forwarded by the sending end device, it strips off the field information of the first routing forwarding table identifier carried in the first private network multicast message;
  • step S54 PE2 queries the private network multicast routing table of the first private network multicast message.
  • step S55 PE2 forwards the first private network multicast message through the private network based on the private network multicast routing table.
  • PE2 After the PE2 device receives the first private network multicast packet forwarded by PE1, after exiting the PE2 device, PE2 looks up the local SID table, matches the forwarding action corresponding to END.Mul.SID, and then according to END.Mul. The MVPN instance matched by the SID is forwarded according to the private network multicast routing table. At the same time, according to the forwarding behavior matched by END.Mul.SID, the IPv6 packet header is stripped to realize the unblocking of the packet, and then it is restored to a normal group. The broadcast message is forwarded.
  • the PE2 device in addition to being a receiving end device, can also be used as a receiving end device in some example scenarios to forward private network multicast packets to the corresponding receiving end device, and its forwarding distance can be the same as that of the PE1 device.
  • a virtual private network multicast device based on an IPv6 network is provided correspondingly, which is applied to PE1 equipment, including:
  • the forwarding module 61 is configured to, after receiving the first private network multicast message sent by the user equipment, forward the first private network multicast message to the corresponding receiving end device through the SRv6 tunnel of the public network;
  • the first private network multicast message carries field information of the first routing forwarding table identifier extended by the receiving end device based on SRv6.
  • the device further includes:
  • the first configuration module which is set to configure the first initial identifier based on SRv6;
  • the first flooding module is configured to flood the first initial identifier on the public network based on the internal gateway protocol;
  • the first acquiring module is configured to acquire the second initial identifier of the receiving end device flooding on the public network, wherein the receiving end device configures the second initial identifier based on SRv6.
  • the device further includes:
  • a second acquisition module configured to acquire the first routing and forwarding table identifier of the receiving end device, wherein the receiving end device generates the first routing and forwarding table identifier based on the second initial identifier;
  • a field adding module which is configured to add the field information of the first routing forwarding table identifier to the first private network multicast message
  • the forwarding module 61 includes:
  • a query unit configured to query the private network multicast route of the first private network multicast message, and associate the private network multicast route with the first routing forwarding table identifier
  • An encapsulation unit configured to encapsulate the header of the first private network multicast message based on the associated private network multicast route and the first routing forwarding table identifier;
  • the forwarding unit is configured to forward the first private network multicast message to the corresponding receiving end device based on the header of the first private network multicast message on the SRv6 tunnel of the public network.
  • the second obtaining module is specifically configured to obtain the first routing and forwarding table identifier of the receiving end device based on a border gateway protocol.
  • a virtual private network multicast device based on an IPv6 network is provided correspondingly, which is applied to PE2 equipment, including:
  • the expansion module 62 is configured to expand the first routing forwarding table identifier based on SRv6.
  • the identification issuing module 63 is configured to publish the first routing and forwarding table identification to the sending end device, so that after the sending end device receives the first private network multicast message sent by the user equipment, Adding the field information of the first routing and forwarding table identifier to the first private network multicast message, and passing the first private network multicast message carrying the field information of the first routing and forwarding table identifier through the SRv6 of the public network The tunnel is forwarded to the receiving end device.
  • the identifier issuing module 63 is specifically configured to issue the identifier of the first routing and forwarding table to the sending end device based on a border gateway protocol.
  • the device further includes:
  • the third acquiring module is configured to acquire the first initial identification of the sending end device flooding on the public network, wherein the sending end device configures the first initial identification based on SRv6;
  • the second configuration module which is set to configure the second initial identifier based on SRv6;
  • the second flooding module is set to flood the second initial identifier on the public network based on the internal gateway protocol
  • the expansion module 62 includes:
  • a generating unit which is configured to generate a first routing and forwarding table identifier based on the second initial identifier.
  • the device further includes:
  • a stripping module configured to strip the field information of the first routing forwarding table identifier carried in the first private network multicast packet after receiving the first private network multicast packet forwarded by the sending end device;
  • a query module configured to query the private network multicast routing table of the first private network multicast message
  • the second forwarding module is configured to forward the first private network multicast message through the private network based on the private network multicast routing table.
  • the sixth embodiment of the present disclosure correspondingly provides a terminal device, including a memory 71 and a processor 72.
  • the memory 71 stores a computer program.
  • the processor 72 runs When the computer program is stored in the memory 71, the processor 72 executes the virtual private network multicast method based on the IPv6 network.
  • the seventh embodiment of the present disclosure correspondingly also provides a computer-readable storage medium on which a computer program is stored. When the computer program is executed by a processor, the processor executes the IPv6-based network The virtual private network multicast method.
  • this embodiment carries the private network multicast message on the SRv6 of the public network On the tunnel, the forwarding of VPN multicast packets is realized, the existing IPv6 network is used to reduce the equipment resources occupied by the multicast tunnel, and the utilization rate of equipment resources is improved.
  • the SRv6 feature is used to realize the flexibility and programmability of the network; further , By expanding the function type of SRv6, generating the routing and forwarding table identifier of the VPN instance, and using the extended attributes of BGP to associate the private network multicast routing with the routing and forwarding table identifier of the receiving end device, so that the multicast packet bearer is compatible with SRv6 In the tunnel, the message in the public network only needs to check the public network routing and forwarding entries based on the destination address of the IPv6 message header, so as to improve the security and flexibility of private network multicast messages.
  • Such software may be distributed on a computer-readable medium
  • the computer-readable medium may include a computer storage medium (or non-transitory medium) and a communication medium (or transitory medium).
  • the term computer storage medium includes volatile and non-volatile data implemented in any method or technology for storing information (such as computer-readable instructions, data structures, program modules, or other data).
  • Information such as computer-readable instructions, data structures, program modules, or other data.
  • Computer storage media include but are not limited to RAM, ROM, EEPROM, flash memory or other memory technologies, CD-ROM, digital versatile disk (DVD) or other optical disk storage, magnetic cassettes, magnetic tapes, magnetic disk storage or other magnetic storage devices, or Any other medium used to store desired information and that can be accessed by a computer.
  • communication media usually contain computer-readable instructions, data structures, program modules, or other data in a modulated data signal such as carrier waves or other transmission mechanisms, and may include any information delivery media. .

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

本公开提供一种基于IPv6网络的虚拟专用网络组播方法、电子设备及计算机可读存储介质，其中，所述方法包括：在接收到用户设备发出的第一私网组播报文后，将所述第一私网组播报文通过公网的SRv6隧道转发至相应的接收端设备；其中，所述第一私网组播报文中携带有所述接收端设备基于SRv6拓展的第一路由转发表标识的字段信息。

Description

基于IPv6网络的虚拟专用网络组播方法及电子设备 技术领域
本公开涉及通信技术领域，尤其涉及一种基于IPv6网络的虚拟专用网络组播方法、一种电子设备以及一种计算机可读存储介质。
背景技术
随着交互式网络电视、视频会议、远程教育等业务的不断发展，用户对于网络的可靠性、安全性、高效性提出了更高的要求，因此服务提供商也产生了越来越多在VPN(Virtual Private Network，虚拟专用网络)网络上运行组播业务的需求。
为进一步提高VPN组播的灵活性、安全性等，相继产生了MVPN(Movable Virtual Private Network，可移动虚拟专用网络)，以及NG MVPN(Next Generation MVPN，下一代MVPN)，其中NG MVPN基于BGP(边界网关协议)的信令传递模式和PIM SM(Protocol Independent Multicast-Sparse Mode，稀疏模式独立组播协议)、PIM SSM(Protocol Independent Multicast-Source Specific Multicast，指定信源组播协议)、P2MP TE(Point To Multipoint Traffic Engineer，点到多点的流量工程)、mLDP(The multipoint extensions for Label Distribution Protocol，多播标签分发协议)等多种数据承载模式，实现IP组播数据流量穿越BGP/MPLS——采用BGP扩展实现的MPLS(Multiprotocol Label Switching，多协议标签交换)的VPN网络。
在上述方案中，承载组播业务需要单独建立和维护组播隧道，同时需要维护相应的隧道信息，将导致消耗过多的设备资源；并且，上述的NG MVPN的组播方式需依赖LDP(Label Distribution Protocol，标签分发协议)或者RSVP(Resource Reservation Protocol，资源预留协议)进行协议算路，不能适应于未来灵活可编程的SDN(Software Defined Network，软件定 义网络)。
因此，提出一种可以减少组播隧道占用的设备资源，提高设备资源利用率，同时可以实现网络的灵活性以及可编程性的VPN组播方案是目前亟待解决的问题。
发明内容
本公开提供了一种基于IPv6(Internet Protocol Version 6，互联网协议第6版)网络的虚拟专用网络组播方法、电子设备及计算机可读存储介质，以解决目前的虚拟专用网络组播方案中，需要单独建立和维护组播隧道导致消耗较多设备资源，以及不能适应于可编程网络环境下的组播业务等问题。
本公开实施例提供的一种基于IPv6网络的虚拟专用网络组播方法，应用于发送端设备，包括：在接收到用户设备发出的第一私网组播报文后，将所述第一私网组播报文通过公网的SRv6隧道转发至相应的接收端设备；其中，所述第一私网组播报文中携带有所述接收端设备基于SRv6拓展的第一路由转发表标识的字段信息。
本公开实施例提供的另一种基于IPv6网络的虚拟专用网络组播方法，应用于接收端设备，其中，包括：
基于SRv6拓展第一路由转发表标识；以及，将所述第一路由转发表标识发布至所述发送端设备，以使所述发送端设备接收到用户设备发出的第一私网组播报文后，在所述第一私网组播报文中添加所述第一路由转发表标识的字段信息，并将携带有所述第一路由转发表标识的字段信息的第一私网组播报文通过公网的SRv6隧道转发至所述接收端设备。
可选地，将所述第一路由转发表标识发送至所述发送端设备，具体为：
基于边界网关协议将所述第一路由转发表标识发布至所述发送端设备。
本公开实施例提供的一种电子设备，包括存储器和处理器，所述存储 器中存储有计算机程序，当所述处理器运行所述存储器存储的计算机程序时，所述处理器执行根据所述的基于IPv6网络的虚拟专用网络组播方法。
本公开实施例提供的另一种电子设备，包括存储器和处理器，所述存储器中存储有计算机程序，当所述处理器运行所述存储器存储的计算机程序时，所述处理器执行根据所述的基于IPv6网络的虚拟专用网络组播方法。
本公开实施例提供的一种计算机可读存储介质，其上存储有计算机程序，其中，所述计算机程序被处理器执行时，所述处理器执行所述的基于IPv6网络的虚拟专用网络组播方法。
本公开实施例提供的一种计算机可读存储介质，其上存储有计算机程序，其中，所述计算机程序被处理器执行时，所述处理器执行所述的基于IPv6网络的虚拟专用网络组播方法。
本公开的其它特征和优点将在随后的说明书中阐述，并且，部分地从说明书中变得显而易见，或者通过实施本公开而了解。本公开的目的和其他优点可通过在说明书、权利要求书以及附图中所特别指出的结构来实现和获得。
附图说明
附图用来提供对本公开技术方案的进一步理解，并且构成说明书的一部分，与本公开的实施例一起用于解释本公开的技术方案，并不构成对本公开技术方案的限制。
图1为本公开第一实施例提供的基于IPv6网络的虚拟专用网络组播方法的流程示意图；
图2a为本公开提供的基于IPv6网络的虚拟专用网络组播方法的应用场景示意图；
图2b为本公开提供的基于IPv6网络的虚拟专用网络组播方法的私网 组播报文转发的流程示意图；
图3为本公开第二实施例提供的基于IPv6网络的虚拟专用网络组播方法的流程示意图；
图4为本公开第三实施例提供的基于IPv6网络的虚拟专用网络组播方法的一种流程示意图；
图5为本公开第三实施例提供的基于IPv6网络的虚拟专用网络组播方法的另一种流程示意图；
图6A为本公开第四实施例提供的基于IPv6网络的虚拟专用网络组播装置的结构示意图；
图6B为本公开第五实施例提供的基于IPv6网络的虚拟专用网络组播装置的结构示意图；
图7为本公开第六实施例提供的电子设备的结构示意图。
具体实施方式
为使本公开实施例的目的、技术方案和优点更加清楚，以下结合附图对本公开的具体实施方式进行详细说明。应当理解的是，此处所描述的具体实施方式仅用于说明和解释本公开，并不用于限制本公开。
需要说明的是，本公开的说明书和权利要求书及上述附图中的术语“第一”、“第二”等是用于区别类似的对象，而不必用于描述特定的顺序或先后次序；并且，在不冲突的情况下，本公开中的实施例及实施例中的特征可以相互任意组合。
其中，在本公开实施例中使用的术语是仅仅出于描述特定实施例的目的，而非旨在限制本公开。在本公开实施例和所附权利要求书中所使用的单数形式的“一种”、“所述”和“该”也旨在包括多数形式，除非上下文清楚地表示其他含义。
IPv6是“Internet Protocol Version 6”(互联网协议第6版)的缩写。在 IPv4(Internet Protocol Version 4，互联网协议第四版)网络向IPv6网络演进中，提出了一种隧道技术(tunneling)，该隧道技术的要点是，在IPv6数据报进入IPv4网络时，将IPv6数据报封装成IPv4数据报，然后在IPv4网络的隧道中传输，当IPv4数据报离开IPv4网络中的隧道时再打开数据部分(即原来的IPv6数据报)交给主机的IPv6协议栈。本公开实施例基于IPv4网络向IPv6网络演进中摆脱MPLS(Multiprotocol Label Switching，多协议标签交换)实现更加灵活的VPN(Virtual Private Network，虚拟专用网络)组播的转发方法，具体地，利用IPv6现有的隧道技术，实现虚拟专用网络的组播报文的转发，无需单独建立以及维护组播隧道，提高设备资源的利用率。
SRv6(IPv6 Segment routing，IPv6段路由)协议是基于源路由理念而设计的在网络上转发IPv6数据包的一种协议，SRv6在IPv6报文中新增了SRH(Segment Routing Header，段路由头)扩展，来替代传统的MPLS(Multiprotocol Label Switching，多协议标签交换)下的标签转发功能，并使用128位的IPv6地址作为网线节点标识(SID)。SRv6 SID是一种网络指令(Instruction)，它由Locator和Function两部分组成，Locator主要承担路由功能，所以要在SR(Segment Routing，分段路由)域内唯一，Function可以标示设备的任何功能，比如某个转发行为，或者某种业务等。SRv6 SID的结构更有利于对网络进行编程，本公开实施例利用SRv6特性可实现网络的灵活性和可编程性。
请参照图1，图1为本公开第一实施例提供的一种基于IPv6网络的虚拟专用网络组播方法流程图，应用于接收端设备，本实施例中的接收端设备为VPN网络中的PE(Provider Edge，服务提供商边缘设备)，以下称为PE1，所述方法包括步骤S10，PE1在接收到用户设备发出的第一私网组播报文后，将所述第一私网组播报文通过公网的SRv6隧道转发至相应的接收端设备。
其中，所述第一私网组播报文中携带有所述接收端设备基于SRv6拓展的第一路由转发表标识的字段信息。
本公开实施例提供的基于IPv6网络的虚拟专用网络组播方法，通过将私网组播报文承载在公网的SRv6隧道上，实现VPN组播报文的转发，利用现有的IPv6网络，减少组播隧道占用的设备资源，提高设备资源利用率，同时利用SRv6特性实现网络的灵活性和可编程性。
相关技术中，VPN组播需要单独建立和维护组播隧道实现私网组播报文的转发，本实施例中，兼容现有IPv6网络，利用IPv6隧道技术，实现私网组播报文的转发，以减少组播隧道占用的设备资源，具体地，PE1接收到用户设备(即，CE1)传输的第一私网组播报文时，将第一私网组播报文承载在已有的SRv6隧道上，不再需要重新建立组播隧道。
本实施例中，通过在第一私网组播报文中携带所述接收端设备基于SRv6拓展的第一路由转发表标识的字段信息，实现第一私网组播报文在公网上传输的保密，基于接收端设备(可以为PE2、PE3)的第一路由转发表标识的字段信息实现第一私网组播报文的封装。具体地，通过增加一种拓展SRv6的function功能类型，使PE2基于SRv6生成第一路由转发表标识，PE1在进行第一私网组播报文转发时，通过在第一私网组播报文中携带PE2的第一路由转发表标识的字段信息可实现SRv6的隧道封装，替代相关技术中的标签封装模式，以形成公网报文，再通过SRv6的隧道实现私网组播报文的转发。
本实施例中，可以通过将私网组播报文和SRv6进行关联，以实现私网组播报文在公网的SRv6隧道的封装，具体的，在各PE设备上使能SRv6后，为每个PE设备配置第一初始标识，即End SID，并依赖内部网关协议IGP在公网上泛洪，将各自的End SID扩散到其它网元，例如，PE1、PE2和PE3分别配置的End SID为：aaa::1/64、bbbb::1/64和cccc::1/64。通过拓展一种新的SRv6的function功能类型，使得各PE设备在End SID范围内自动生成MVPN实例的MVPN-VRF-SID(MVPN的路由转发表标识，即第一路由转发表标识)，本实施例将其定义为END.Mul.SID，进一步的，基于接收端PE设备的MVPN-VRF-SID信息实现公网SRv6隧道封装的私网报文的封装。
可以理解的是，在VPN组网中，包含PE、P和CE三种角色的设备。其中，CE(Customer Edge)指的是用户边缘设备，有接口直接与服务提供商(SP，Service Provider)网络相连，CE可以是路由器或交换机，也可以是主机；PE(Provider Edge)指的是服务提供商边缘设备，与CE相连，对VPN报文的所有处理都发生在PE设备上；P(Provider)指的是服务提供商网络中的骨干设备，不与CE直接相连，P设备需要具备基本的数据转发能力。在本实施例中，PE1可以作为数据发送端，SP网络即通常所说的公网，各个VPN实例(VPN-instance)的站点(Site)即组成了通常所说的用户私网。
本实施例中，P设备支持IPv6的转发，其中，在一种实施方式中，各PE设备使能SRv6，使能(enable)负责控制信号的输入和输出，在网络设备中有些命令可能处于关闭状态，这样就需要通过修改使能(即开启)使其正常使用。本实施例中，PE1设备的SRv6可能处于关闭状态，当需要开启SRv6时，则使能SRv6。
图2a为本公开提供的基于IPv6网络的虚拟专用网络组播方法的应用场景示意图，如图2a所示，在本实施例中，除了作为数据发送端的服务提供商边缘设备，例如PE1，还包括若干作为数据接收端的服务提供商边缘设备，例如PE2和PE3，通过在各服务提供商边缘设备上使能SRv6，以自动建立数据发送端与数据接收端之间的公网的SRv6隧道，其中，PE2、PE3上的VPN实例通过公网的SRv6隧道接收到PE1上的VPN实例转发的组播报文，PE1上绑定VPN实例的接口与链路对端CE1上的接口之间建立邻居关系，相应的，PE2-CE2、PE3-CE3分别建立邻居关系，基于该邻居关系可以创建VPN实例的路由转发表，以及建立私网的组播转发树等。
需要说明的是，PE设备可同时支持公网实例和多个VPN实例，本实施例以同一VPN实例作为示例，即PE1、PE2以及PE3上为同一VPN实例，进一步的，VPN实例可以为MVPN实例。
在本公开的第二实施例中，如图3所示，本实施例相较于上一实施例，提供第一私网组播报文承载于SRv6公网隧道上的具体封装方案，即实现SRv6和私网组播路由的关联，具体地，接收到第一私网组播报文之前(即，步骤S10之前)，还包括步骤S31-步骤S34，并且将步骤S10进一步限定为步骤S35和步骤S37：
在步骤S31中，PE1基于SRv6配置第一初始标识，并基于内部网关协议IGP将所述第一初始标识在公网上泛洪；
在步骤S32中，PE1获取所述接收端设备在公网上泛洪的第二初始标识，其中所述第二初始标识为所述接收端设备在使能SRv6后，基于SRv6配置的第二初始标识。
具体地，在各PE设备上使能SRv6后，为每个PE设备配置第一初始标识，即End SID，并依赖内部网关协议IGP在公网上泛洪，将各自的End SID扩散到其它网元，例如，PE1、PE2和PE3分别配置的End SID为：aaa::1/64、bbbb::1/64和cccc::1/64，以实现各PE设备之间的识别，以及公网的RSv6隧道的封装模式。
其中，End SID：表示Endpoint SID，用于标识网络中的某个目的地址前缀(Prefix)，类似SR MPLS中的Prefix Segment(前缀段)。End SID通过IGP协议扩散到其他网元，全局可见，全局有效。详细信息可参考文献：draft-filsfils-spring-srv6-network-programming 00 01。
在本实施例中，所述组播方法还包括步骤S33和步骤S34。
在步骤S33中，PE1获取所述接收端设备的第一路由转发表标识；具体的，PE1获取所述接收端设备基于所述第二初始标识生成的第一路由转发表标识。
本实施例中，通过拓展一种新的SRv6的function功能类型，使得各PE设备在End SID范围内自动生成MVPN实例的MVPN-VRF-SID(MVPN的路由转发表标识，即第一路由转发表标识)，本实施例将其定义为END.Mul.SID，例如，PE1、PE2和PE3生成的MVPN-VRF-SID分别为： aaaa::123/64、bbbb::123/64和cccc::123/64。
在步骤34中，在所述第一私网组播报文中添加第一路由转发表标识的字段信息。
本实施例中，通过在第一私网组播报文中添加接收端设备的第一路由转发表的字段信息，以实现第一私网组播报文在公网上的报文封装，使第一私网组播报文通过公网转发至相应的接收端设备。
具体地，作为发送端设备的PE1获取作为接收端设备的PE2、PE3的第一路由转发表标识。
本实施例中，PE1基于上述获取的PE2、PE3生成本地的第一路由转发表标识后，生成本地的SID表。
本实施例中，所述获取所述接收端设备的第一路由转发表标识，包括：
PE1基于边界网关协议BGP获取所述接收端设备的第一路由转发表标识。
具体地，PE设备通过MP-BGP协议(MultiProtocol BGP，多协议扩展)的MVPN NLRI字段传递私网组播路由信息，包括：RP-BSR信息，组播源信息，组加入信息等，本实施例中，通过拓展的BGP协议携带MVPN路由信息的NLRI传输组播路由，以及本实施例增加的一种BGP的拓展属性---SRv6隧道封装，包含MVPN-VRF-SID信息，以便于私网组播路由和MVPN-VRF-SID进行关联。
PE设备通过BGP协议将MVPN-VRF-SID信息发布给邻居设备，图示以PE1获取PE2和PE3拓展信息为例，PE2、PE3分别携带END.Mul.SID为bbbb:123/64，下一跳为bbbb::1/64和END.Mul.SID为cccc::123/64，下一跳为cccc::1/64的拓展信息，并将上述信息发布至PE1，相应的PE1获取PE2和PE3的拓展信息。PE1在接收到BGP路由后根据RT属性导入本地MVPN实例，写入私网组播路由表中，对应的私网组播路由表的出接口可以表示为SRv6虚拟口，将组播私网路由条目关联到END.Mul.SID：bbbb::123以及对应的下一跳信息(以PE2为例)。
可以理解的是，MVPN NLRI：路由信息是携带在BGP Update更新消息中的NLRI(Network Layer Reachable Information，网络层可达信息)字段进行传递的，携带MVPN路由信息的NLRI也称为MVPN NLRI。详细信息可参考文献：Global Table Multicast with BGP-MVPN Procedures draft-ietf-bess-mvpn-global-table-mcast-03。
其中，PE1将所述第一私网组播报文通过公网的SRv6隧道转发至相应的接收端设备(即，步骤S10)，具体包括步骤S35和步骤S37：
在步骤S35中，查询所述第一私网组播报文的私网组播路由，并将所述私网组播路由与所述第一路由转发表标识进行关联；
在步骤S36中，PE1基于所述关联后的私网组播路由与第一路由转发表标识封装所述第一私网组播报文的报文头；
在步骤S37中，在公网的SRv6隧道上基于所述第一私网组播报文的报文头将所述第一私网组播报文转发至相应的接收端设备。
本实施例中，当PE1设备接收到CE1传来的组播报文时，查询私网组播路由，并关联到对应的MVPN-VRF-SID，然后直接用相应的END.Mul.SID(以接收端设备为PE2为例，END.Mul.SID为bbbb::123)作为目的地址封装所述第一私网组播报文的SRH报文头，以使第一私网组播报文在公网的SRv6隧道上加密传输，相较于相关技术而言，本实施例可以实现报文传输的安全性的同时，更加便捷。
本实施例中，PE1将经过封装的第一私网组播报文通过公网的SRv6隧道转发至PE2、PE3，具体地，PE1通过查找公网转发表项的出接口链表将经过封装后的公网报文复制到对应的公网组播出接口。可以理解的是，本实施例报文在公网中仅需要依据IPv6报文头中的目的IP查公网转发表项进行转发即可。
具体地，报文在公网中只需要按照路由转发最长匹配原则，匹配到路由条目bbbb::1/64，转发到P设备，P设备继续查找公网路由进行转发到PE2或PE3设备即可。
本实施例以PE1向PE2设备转发私网组播报文为例，结合图2b，图2b为PE1设备向PE2设备转发私网组播报文的流程示意图，其中，SA表示组播报文的源地址，DA表示组播报文的目的地址，PE1和PE2之间通过公网的SRv6隧道传输组播报文，通过封装组播源包(私网组播报文)的源地址和目的地址实现在公网隧道上的报文转发，出PE2结点后，对封装的私网组播报文进行解封并转发给相应的用户设备CE2。
具体地，出PE2设备后查找本地私网转发表，匹配END.Mul.SID对应的转发动作，将IPv6报文头剥离，实现报文的解封，恢复成普通的组播报文，然后根据END.Mul.SID匹配的MVPN实例，查找MVPN实例对应的私网组播路由转发表进行转发。
需要说明的是，作为发送端的PE1设备，不限于仅作为发送端转发私网组播报文，同时可以作为接收端设备接收私网组播报文，在一些实施例中，PE1设备基于SRv6生成第二路由转发表标识，并将第二路由标识发布至对应的接收端设备，其实现原理与上述的PE2、PE3设备作为接收端设备时生成以及发布路由转发表标识一致，此处不再赘述。
请参照图4，图4为本公开第三实施例相应提供另一种基于IPv6网络的虚拟专用网络组播方法，应用于接收端设备(以下简称PE2)，如图4所示，所述方法步骤S41和步骤S42。
在步骤S41中，PE2基于SRv6拓展第一路由转发表标识。
具体地，在PE2接收发送端转发的私网组播报文之前，基于SRv6拓展第一路由转发表标识。本实施例中，PE2基于边界网关协议将所述第一路由转发表标识发布至所述发送端设备。
本实施例中，所述方法还包括以下步骤：
PE2获取所述发送端设备在公网上泛洪的第一初始标识，其中所述发送端设备基于SRv6配置所述第一初始标识；以及，
PE2基于SRv6配置第二初始标识，并基于内部网关协议将所述第二初始标识在公网上泛洪；
PE2所述基于SRv6拓展第一路由转发表标识，具体包括：
PE2基于所述第二初始标识生成第一路由转发表标识。
需要说明的是，PE2设备生成第一路由转发表标识在上述实施例已具体描述，此处不再赘述。
在步骤S42中，PE2将所述第一路由转发表标识发布至所述发送端设备，以使所述发送端设备接收到用户设备发出的第一私网组播报文后，在所述第一私网组播报文中添加所述第一路由转发表标识的字段信息，并将携带有所述第一路由转发表标识的字段信息的第一私网组播报文通过公网的SRv6隧道转发至所述接收端设备。
本实施例中，PE2设备将第一转发表标识发布至对应的发送端设备PE1后，PE1在接收到CE1的第一私网组播报文时，查询第一私网组播报文的私网组播路由，并将第一私网组播报文的私网组播路由和PE2的第一路由转发表标识END.Mul.SID：aaaa::123进行关联，以实现PE1对第一私网组播报文进行封装，并通过公网的SRv6转发至PE2，具体地，PE1接收到BGP路由后根据RT属性导入本地MVPN实例，写入私网组播报文路由表中，对应的私网组播路由表的出接口可以为SRv6的虚拟口，PE1将组播私网路由条目关联到标识END.Mul.SID：aaaa::123以及对应的下一跳信息，PE1在接收到CE1传来的组播报文时，查询私网组播路由，并查找到PE2的关联的END.Mul.SID，并实现对报文的封装以及转发。
本实施例中，如图5所示，所述组播方法还包括步骤S53-步骤S55。
在步骤S53中，PE2在接收到所述发送端设备转发的第一私网组播报文时，剥离所述第一私网组播报文中携带的第一路由转发表标识的字段信息；
在步骤S54中，PE2查询所述第一私网组播报文的私网组播路由表；以及，
在步骤S55中，PE2基于所述私网组播路由表通过私网转发所述第一私网组播报文。
本实施例中，PE2设备在接收到PE1转发的第一私网组播报文，出PE2设备后，PE2查找本地SID表，匹配END.Mul.SID对应的转发动作，然后根据END.Mul.SID匹配的MVPN实例，按照私网组播路由表进行转发，同时根据END.Mul.SID匹配到的转发行为，将IPv6报文头剥离，实现报文的解封，此时恢复成普通的组播报文转发出去。
需要说明的是，PE2设备除了作为接收端设备，在一些示例场景中也可以作为接收端设备，向相应的接收端设备转发私网组播报文，其转发远离与PE1设备可以相同。
基于相同的技术构思，请参照图6A，根据本公开第四实施例相应提供一种基于IPv6网络的虚拟专用网络组播装置，应用于PE1设备，包括：
转发模块61，其设置为在接收到用户设备发出的第一私网组播报文后，将所述第一私网组播报文通过公网的SRv6隧道转发至相应的接收端设备；
其中，所述第一私网组播报文中携带有所述接收端设备基于SRv6拓展的第一路由转发表标识的字段信息。
可选地，所述装置还包括：
第一配置模块，其设置为基于SRv6配置第一初始标识；
第一泛洪模块，其设置为基于内部网关协议将所述第一初始标识在公网上泛洪；以及，
第一获取模块，其设置为获取所述接收端设备在公网上泛洪的第二初始标识，其中所述接收端设备基于SRv6配置所述第二初始标识。
可选地，所述装置还包括：
第二获取模块，其设置为获取所述接收端设备的第一路由转发表标识，其中所述接收端设备基于所述第二初始标识生成所述第一路由转发表标识；以及，
字段添加模块，其设置为在所述第一私网组播报文中添加第一路由转发表标识的字段信息；
其中，所述转发模块61包括：
查询单元，其设置为查询所述第一私网组播报文的私网组播路由，并将所述私网组播路由与所述第一路由转发表标识进行关联；
封装单元，其设置为基于所述关联后的私网组播路由与第一路由转发表标识封装所述第一私网组播报文的报文头；以及，
转发单元，其设置为在公网的SRv6隧道上基于所述第一私网组播报文的报文头将所述第一私网组播报文转发至相应的接收端设备。
可选地，所述第二获取模块具体设置为，基于边界网关协议获取所述接收端设备的第一路由转发表标识。
基于相同的技术构思，请参照图6B，根据本公开第五实施例相应提供一种基于IPv6网络的虚拟专用网络组播装置，应用于PE2设备，包括：
拓展模块62，其设置为基于SRv6拓展第一路由转发表标识。
标识发布模块63，其设置为将所述第一路由转发表标识发布至所述发送端设备，以使所述发送端设备接收到用户设备发出的第一私网组播报文后，在所述第一私网组播报文中添加所述第一路由转发表标识的字段信息，并将所述携带有第一路由转发表标识的字段信息的第一私网组播报文通过公网的SRv6隧道转发至所述接收端设备。
可选地，所述标识发布模块63具体设置为，基于边界网关协议将所述第一路由转发表标识发布至所述发送端设备。
可选地，所述装置还包括：
第三获取模块，其设置为获取所述发送端设备在公网上泛洪的第一初始标识，其中所述发送端设备基于SRv6配置所述第一初始标识；以及，
第二配置模块，其设置为基于SRv6配置第二初始标识；
第二泛洪模块，其设置为基于内部网关协议将所述第二初始标识在公网上泛洪；
所述拓展模块62，包括：
生成单元，其设置为基于所述第二初始标识生成第一路由转发表标识。
可选地，所述装置还包括：
剥离模块，其设置为在接收到所述发送端设备转发的第一私网组播报文后，剥离所述第一私网组播报文中携带的第一路由转发表标识的字段信息；
查询模块，其设置为查询所述第一私网组播报文的私网组播路由表；以及，
第二转发模块，其设置为基于所述私网组播路由表通过私网转发所述第一私网组播报文。
基于相同的技术构思，请参照图7，本公开第六实施例相应还提供一种终端设备，包括存储器71和处理器72，所述存储器71中存储有计算机程序，当所述处理器72运行所述存储器71存储的计算机程序时，所述处理器72执行所述基于IPv6网络的虚拟专用网络组播方法。基于相同的技术构思，本公开第七实施例相应还提供一种计算机可读存储介质，其上存储有计算机程序，所述计算机程序被处理器执行时，所述处理器执行所述基于IPv6网络的虚拟专用网络组播方法。
综上所述，本公开实施例提供的基于IPv6网络的虚拟专用网络组播方法、装置、电子设备及计算机可读存储介质，本实施例通过将私网组播报文承载在公网的SRv6隧道上，实现VPN组播报文的转发，利用现有的IPv6网络，减少组播隧道占用的设备资源，提高设备资源利用率，同时利用SRv6特性实现网络的灵活性和可编程性；进一步的，通过拓展SRv6的功能类型，生成VPN实例的路由转发表标识，并通过BGP的拓展属性，将私网组播路由和接收端设备的路由转发表标识进行关联，使组播报文承载与SRv6隧道上，报文在公网中只需要依据IPv6报文头的目的地址查公网路由转发表项转发即可，以提高私网组播报文的安全性及灵活性。
本领域普通技术人员可以理解，上文中所公开方法中的全部或某些步骤、系统、装置中的功能模块/单元可以被实施为软件、固件、硬件及其适 当的组合。在硬件实施方式中，在以上描述中提及的功能模块/单元之间的划分不一定对应于物理组件的划分；例如，一个物理组件可以具有多个功能，或者一个功能或步骤可以由若干物理组件合作执行。某些物理组件或所有物理组件可以被实施为由处理器，如中央处理器、数字信号处理器或微处理器执行的软件，或者被实施为硬件，或者被实施为集成电路，如专用集成电路。这样的软件可以分布在计算机可读介质上，计算机可读介质可以包括计算机存储介质(或非暂时性介质)和通信介质(或暂时性介质)。如本领域普通技术人员公知的，术语计算机存储介质包括在用于存储信息(诸如计算机可读指令、数据结构、程序模块或其他数据)的任何方法或技术中实施的易失性和非易失性、可移除和不可移除介质。计算机存储介质包括但不限于RAM、ROM、EEPROM、闪存或其他存储器技术、CD-ROM、数字多功能盘(DVD)或其他光盘存储、磁盒、磁带、磁盘存储或其他磁存储装置、或者可以用于存储期望的信息并且可以被计算机访问的任何其他的介质。此外，本领域普通技术人员公知的是，通信介质通常包含计算机可读指令、数据结构、程序模块或者诸如载波或其他传输机制之类的调制数据信号中的其他数据，并且可包括任何信息递送介质。
最后应说明的是：以上各实施例仅用以说明本公开的技术方案，而非对其限制；尽管参照前述各实施例对本公开进行了详细的说明，本领域的普通技术人员应当理解：其依然可以对前述各实施例所记载的技术方案进行修改，或者对其中部分或者全部技术特征进行等同替换；而这些修改或者替换，并不使相应技术方案的本质脱离本公开各实施例技术方案的范围。

Claims (10)

  1. 一种基于IPv6网络的虚拟专用网络组播方法，应用于发送端设备，包括：
    在接收到用户设备发出的第一私网组播报文后，将所述第一私网组播报文通过公网的SRv6隧道转发至相应的接收端设备；
    其中，所述第一私网组播报文中携带有所述接收端设备基于SRv6拓展的第一路由转发表标识的字段信息。
  2. 根据权利要求1所述的方法，其中，在接收到第一私网组播报文之前，还包括：
    基于SRv6配置第一初始标识，并基于内部网关协议将所述第一初始标识在公网上泛洪；以及，
    获取所述接收端设备在公网上泛洪的第二初始标识，其中所述接收端设备基于SRv6配置所述第二初始标识。
  3. 根据权利要求2所述的方法，其中，在获取所述接收端设备在公网上泛洪的第二初始标识之后，还包括：
    获取所述接收端设备的第一路由转发表标识，其中所述接收端设备基于所述第二初始标识生成所述第一路由转发表标识；以及，
    在所述第一私网组播报文中添加第一路由转发表标识的字段信息；
    其中，将所述第一私网组播报文通过公网的SRv6隧道转发至相应的接收端设备，包括：
    查询所述第一私网组播报文的私网组播路由，并将所述私网组播路由与所述第一路由转发表标识进行关联；
    基于所述关联后的私网组播路由与第一路由转发表标识封装所述第 一私网组播报文的报文头；以及，
    在公网的SRv6隧道上基于所述第一私网组播报文的报文头将所述第一私网组播报文转发至相应的接收端设备。
  4. 根据权利要求3所述的方法，其中，所述获取所述接收端设备的第一路由转发表标识，包括：
    基于边界网关协议获取所述接收端设备的第一路由转发表标识。
  5. 一种基于IPv6网络的虚拟专用网络组播方法，应用于接收端设备，包括：
    基于SRv6拓展第一路由转发表标识；以及，
    将所述第一路由转发表标识发布至所述发送端设备，以使所述发送端设备接收到用户设备发出的第一私网组播报文后，在所述第一私网组播报文中添加所述第一路由转发表标识的字段信息，并将携带有所述第一路由转发表标识的字段信息的第一私网组播报文通过公网的SRv6隧道转发至所述接收端设备。
  6. 根据权利要求5所述的方法，其中，将所述第一路由转发表标识发送至所述发送端设备，具体为：
    基于边界网关协议将所述第一路由转发表标识发布至所述发送端设备。
  7. 根据权利要求5所述的方法，其中，还包括：
    获取所述发送端设备在公网上泛洪的第一初始标识，其中所述发送端设备基于SRv6配置所述第一初始标识；以及，
    基于SRv6配置第二初始标识，并基于内部网关协议将所述第二初始 标识在公网上泛洪；
    其中，所述基于SRv6拓展第一路由转发表标识，包括：
    基于所述第二初始标识生成第一路由转发表标识。
  8. 根据权利要求5所述的方法，其中，还包括：
    在接收到所述发送端设备转发的第一私网组播报文后，剥离所述第一私网组播报文中携带的第一路由转发表标识的字段信息；
    查询所述第一私网组播报文的私网组播路由表；以及，
    基于所述私网组播路由表通过私网转发所述第一私网组播报文。
  9. 一种电子设备，包括存储器和处理器，所述存储器中存储有计算机程序，当所述处理器运行所述存储器存储的计算机程序时，所述处理器执行根据权利要求1至4中任一项中所述的基于IPv6网络的虚拟专用网络组播方法，或权利要求5至8中任一项中所述的基于IPv6网络的虚拟专用网络组播方法。
  10. 一种计算机可读存储介质，其上存储有计算机程序，所述计算机程序被处理器执行时，所述处理器执行根据权利要求1至4中任一项所述的基于IPv6网络的虚拟专用网络组播方法，或权利要求5至8中任一项所述的基于IPv6网络的虚拟专用网络组播方法。
PCT/CN2020/108489 2019-10-08 2020-08-11 基于IPv6网络的虚拟专用网络组播方法及电子设备 WO2021068641A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201910950047.7 2019-10-08
CN201910950047.7A CN112636935B (zh) 2019-10-08 2019-10-08 基于IPv6网络的虚拟专用网络组播方法及电子设备

Publications (1)

Publication Number Publication Date
WO2021068641A1 true WO2021068641A1 (zh) 2021-04-15

Family

ID=75283067

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2020/108489 WO2021068641A1 (zh) 2019-10-08 2020-08-11 基于IPv6网络的虚拟专用网络组播方法及电子设备

Country Status (2)

Country Link
CN (1) CN112636935B (zh)
WO (1) WO2021068641A1 (zh)

Cited By (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113542126A (zh) * 2021-05-24 2021-10-22 新华三信息安全技术有限公司 广义SRv6全路径压缩方法及装置
CN113992567A (zh) * 2021-10-26 2022-01-28 新华三信息安全技术有限公司 一种报文转发方法及装置
CN114124788A (zh) * 2021-10-18 2022-03-01 新华三大数据技术有限公司 一种报文处理方法及装置
CN116723144A (zh) * 2023-08-10 2023-09-08 北京邮电大学 组播业务数据传输方法及装置
WO2024088200A1 (zh) * 2022-10-25 2024-05-02 中国移动通信有限公司研究院 一种数据校验方法、第一网元设备及存储介质

Families Citing this family (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113660151B (zh) * 2021-08-09 2023-03-14 中国电信股份有限公司 L2vpn跨业务通信方法、装置、电子设备和可读介质
CN114205293B (zh) * 2021-12-20 2024-04-09 网络通信与安全紫金山实验室 路径确定方法、装置、电子设备及存储介质
CN115102806B (zh) * 2022-06-20 2023-10-17 咪咕视讯科技有限公司 组播数据传输方法、装置、系统及存储介质
CN117424940A (zh) * 2022-07-11 2024-01-19 中国移动通信有限公司研究院 报文处理方法、装置、网络节点及存储介质

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103716244A (zh) * 2013-12-27 2014-04-09 杭州华三通信技术有限公司 一种实现组播跨vpn转发的方法及装置
US20170289032A1 (en) * 2016-03-29 2017-10-05 Cisco Technology, Inc. Extending nsh services into the vpn l2/l3 domain
CN107276903A (zh) * 2016-03-30 2017-10-20 丛林网络公司 支持组播的热根备用
WO2019005935A1 (en) * 2017-06-27 2019-01-03 Cisco Technology, Inc. VIRTUAL PRIVATE NETWORK ETHERNET USING SEGMENT ROUTING
CN109873760A (zh) * 2017-12-01 2019-06-11 华为技术有限公司 处理路由的方法和装置、以及数据传输的方法和装置
CN109995634A (zh) * 2017-12-29 2019-07-09 中兴通讯股份有限公司 一种组播虚拟专用网络的承载方法和设备

Family Cites Families (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102075439B (zh) * 2011-02-22 2013-09-11 杭州华三通信技术有限公司 一种组播报文转发方法和路由设备
CN104092554B (zh) * 2014-07-31 2017-11-10 新华三技术有限公司 组播分发树建立方法及装置
CN104780090B (zh) * 2015-04-27 2018-10-26 新华三技术有限公司 Vpn组播传输的方法、装置、pe设备
CN105743797B (zh) * 2016-04-05 2019-03-29 深圳市风云实业有限公司 基于接口绑定的组播vpn隧道建立方法
WO2019011114A1 (en) * 2017-07-14 2019-01-17 Huawei Technologies Co., Ltd. METHOD FOR ESTABLISHING SEGMENT ROUTING FOR IPV6 TUNNEL

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103716244A (zh) * 2013-12-27 2014-04-09 杭州华三通信技术有限公司 一种实现组播跨vpn转发的方法及装置
US20170289032A1 (en) * 2016-03-29 2017-10-05 Cisco Technology, Inc. Extending nsh services into the vpn l2/l3 domain
CN107276903A (zh) * 2016-03-30 2017-10-20 丛林网络公司 支持组播的热根备用
WO2019005935A1 (en) * 2017-06-27 2019-01-03 Cisco Technology, Inc. VIRTUAL PRIVATE NETWORK ETHERNET USING SEGMENT ROUTING
CN109873760A (zh) * 2017-12-01 2019-06-11 华为技术有限公司 处理路由的方法和装置、以及数据传输的方法和装置
CN109995634A (zh) * 2017-12-29 2019-07-09 中兴通讯股份有限公司 一种组播虚拟专用网络的承载方法和设备

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
R. PAREKH C. FILSFILS A. VENKATESWARAN CISCO SYSTEMS, INC. H. BIDGOLI NOKIA D. VOYER C. HASSEN BELL CANADA: "Multicast VPN with Segment Routing Point-to-Multipoint Segment; draft-parekh-bess-mvpn-sr-p2mp-00.txt", MULTICAST VPN WITH SEGMENT ROUTING POINT-TO-MULTIPOINT SEGMENT; DRAFT-PAREKH-BESS-MVPN-SR-P2MP-00.TXT; INTERNET-DRAFT: NETWORK WORKING GROUP, INTERNET ENGINEERING TASK FORCE, IETF; STANDARDWORKINGDRAFT, INTERNET SOCIETY (ISOC) 4, RUE DES FALAISES CH-, no. 00, 11 March 2019 (2019-03-11), Internet Society (ISOC) 4, rue des Falaises CH- 1205 Geneva, Switzerland, pages 1 - 13, XP015131928 *

Cited By (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113542126A (zh) * 2021-05-24 2021-10-22 新华三信息安全技术有限公司 广义SRv6全路径压缩方法及装置
CN113542126B (zh) * 2021-05-24 2022-11-18 新华三信息安全技术有限公司 广义SRv6全路径压缩方法及装置
CN114124788A (zh) * 2021-10-18 2022-03-01 新华三大数据技术有限公司 一种报文处理方法及装置
CN113992567A (zh) * 2021-10-26 2022-01-28 新华三信息安全技术有限公司 一种报文转发方法及装置
WO2024088200A1 (zh) * 2022-10-25 2024-05-02 中国移动通信有限公司研究院 一种数据校验方法、第一网元设备及存储介质
CN116723144A (zh) * 2023-08-10 2023-09-08 北京邮电大学 组播业务数据传输方法及装置
CN116723144B (zh) * 2023-08-10 2024-01-05 北京邮电大学 组播业务数据传输方法及装置

Also Published As

Publication number Publication date
CN112636935A (zh) 2021-04-09
CN112636935B (zh) 2023-06-30

Similar Documents

Publication Publication Date Title
WO2021068641A1 (zh) 基于IPv6网络的虚拟专用网络组播方法及电子设备
CN113595913B (zh) 报文转发的方法、发送报文的装置和接收报文的装置
US7519010B1 (en) Inter-autonomous system (AS) multicast virtual private networks
US10484203B2 (en) Method for implementing communication between NVO3 network and MPLS network, and apparatus
WO2018228490A1 (zh) 组播跨域方法、装置、系统及计算机可读存储介质
WO2019214589A1 (zh) 组播数据传输方法、相关装置及系统
EP4131872A1 (en) Multicast traffic transmission method and apparatus, communication node, and storage medium
CN106603407B (zh) 组播地址的传输方法和装置
WO2018072704A1 (zh) 报文传输方法、装置、节点和计算机存储介质
US20150146727A1 (en) Forwarding Packets and PE Devices in VPLS
CN107124347A (zh) 一种基于bgp evpn的vxlan控制平面的优化方法及装置
CN108063716B (zh) 用于以太虚拟专用网的方法和设备
CN102571375B (zh) 组播转发方法、装置及网络设备
CN113726653B (zh) 报文处理方法及装置
US20230081052A1 (en) Method and apparatus for sending multicast packet
CN115102806B (zh) 组播数据传输方法、装置、系统及存储介质
WO2018010568A1 (zh) 信息的通告方法、转发条目的生成方法及装置
CN113114553B (zh) Evpn下不同组网对接的实现方法及装置
WO2024001221A1 (zh) 一种组播信息转发方法、装置、组播信息汇聚节点及介质
Yang et al. Enhanced SRv6 EVPN System
Singh BGP MPLS based EVPN And its implementation and use cases
Riaz Multicast in MPLS Based Networks and VPNs
Zhou et al. A Solution for IP Multicast VPNs based on Virtual Routers

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 20873531

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 20873531

Country of ref document: EP

Kind code of ref document: A1

122 Ep: pct application non-entry in european phase

Ref document number: 20873531

Country of ref document: EP

Kind code of ref document: A1

32PN Ep: public notification in the ep bulletin as address of the adressee cannot be established

Free format text: NOTING OF LOSS OF RIGHTS (EPO FORM 1205A DATED 28.09.2022)

122 Ep: pct application non-entry in european phase

Ref document number: 20873531

Country of ref document: EP

Kind code of ref document: A1