WO2023168872A1

WO2023168872A1 - Anomaly feedback method, fault location method, network node, and storage medium

Info

Publication number: WO2023168872A1
Application number: PCT/CN2022/104130
Authority: WO
Inventors: 黄灿灿; 陆立; 唐宏; 叶何亮; 邹洁
Original assignee: 中国电信股份有限公司
Priority date: 2022-03-10
Filing date: 2022-07-06
Publication date: 2023-09-14
Also published as: CN116781497A

Abstract

The present disclosure relates to the technical field of network security, and provides an anomaly feedback method, a fault location method, a network node, and a storage medium. The anomaly feedback method of the present disclosure comprises: when a packet forwarding node determines that forwarding of a packet times out, determining an alternate address of the packet forwarding node; using the alternate address as a source address to generate timeout information; and feeding back the timeout information to a source node of the packet. By means of the method, network security is improved.

Description

Abnormal feedback and fault location methods, network nodes and storage media

Cross-references to related applications

This application is based on the application with CN application number 202210238228.9 and the filing date is March 10, 2022, and claims its priority. The disclosure content of the CN application is hereby incorporated into this application as a whole.

Technical field

The present disclosure relates to the field of network security technology, in particular to an abnormality feedback and fault location method, network node and storage medium.

Background technique

When a network failure occurs, the Tracert protocol is used in related technologies to troubleshoot the network. Each router on the packet forwarding path will feedback its own IP (Internet Protocol) address to the sender of the packet. The network management node will determine the fault-related node based on the packet carrying the IP address, and then perform fault location. operate.

Contents of the invention

One purpose of the present disclosure is to improve network security.

According to an aspect of some embodiments of the present disclosure, an exception feedback method is proposed, including: when the message forwarding node determines that the message forwarding has timed out, determine the replacement address of the message forwarding node; generate the replacement address as the source address Timeout information; feedback the timeout information to the source node of the message.

In some embodiments, the source node of the message includes a network management node, and the network management node determines the original address of the message forwarding node corresponding to the replacement address based on the timeout information.

In some embodiments, determining the replacement address of the message forwarding node includes: the message forwarding node determines the replacement address based on a pre-stored correspondence between the original address of the message forwarding node and the replacement address.

In some embodiments, at least one of the message forwarding node and the network management node pre-stores a corresponding relationship between the replacement address and the original address of the message forwarding node.

In some embodiments, the exception feedback method further includes: the message forwarding node receives the corresponding relationship from the network management node, wherein the network management node synchronizes the corresponding relationship to each message forwarding node.

In some embodiments, after the message forwarding node receives the message and performs the operation of decrementing the TTL (Time To Live, time to live value) by 1, if it determines that the TTL is 0, it determines that the message forwarding has timed out.

In some embodiments, the Ping (Packet Internet Groper, Internet packet explorer) function of the packet forwarding node can be configured to be turned on.

According to an aspect of some embodiments of the present disclosure, a fault location method is proposed, including: a network management node obtains timeout information from a message forwarding node; and determines the source address carried by the timeout information, wherein the message forwarding node determines the message When forwarding times out, timeout information is generated, and the source address is the replacement address of the source node of the timeout information; the original address of the message forwarding node is determined based on the source address.

In some embodiments, the network management node pre-stores the corresponding relationship between the replacement address and the original address of the message forwarding node; determining the original address of the message forwarding node based on the source address includes: matching the source address with the pre-stored replacement address, determining the The source address matches the packet forwarding address corresponding to the replacement address.

In some embodiments, the fault location method further includes: the network management node performs network fault location based on the original address of the message forwarding node.

According to an aspect of some embodiments of the present disclosure, a message forwarding node is proposed, including: a replacement address determination unit configured to determine the replacement address of the message forwarding node when the message forwarding times out; timeout information generation The unit is configured to use the replacement address as the source address to generate timeout information; the feedback unit is configured to feed back the timeout information to the source node of the message.

In some embodiments, message forwarding further includes: a forwarding timeout determination unit configured to determine that the message forwarding has timed out if the TTL is determined to be 0 after receiving the message and performing an operation of decrementing the TTL by 1.

In some embodiments, message forwarding also includes: a Ping functional unit configured to allow the Ping function to be set to an enabled state, and receive and feedback Ping messages in the enabled state.

According to an aspect of some embodiments of the present disclosure, a network management node is proposed, including: a timeout information receiving unit configured to obtain timeout information from a message forwarding node; a replacement address obtaining unit configured to determine the timeout information carried The source address, wherein the message forwarding node generates timeout information when the message forwarding timeout is determined, and the source address is the replacement address of the source node of the timeout information; and the original address determination unit is configured to determine the message based on the source address The original address of the forwarding node.

In some embodiments, the network management node further includes: a relationship storage unit configured to store the corresponding relationship between the replacement address and the original address of the message forwarding node; the address determination unit is configured to match the source address with the pre-stored replacement address, Determine the original address corresponding to the replacement address that matches the source address.

In some embodiments, the network management node further includes: a fault location unit configured to perform network fault location based on the original address of the message forwarding node.

According to an aspect of some embodiments of the present disclosure, a network node is proposed, including: a memory; and a processor coupled to the memory, the processor being configured to perform any of the above methods based on instructions stored in the memory.

According to an aspect of some embodiments of the present disclosure, a non-transitory computer-readable storage medium is provided, on which are stored computer program instructions, which when executed by a processor, implement the steps of any of the above methods.

According to an aspect of some embodiments of the present disclosure, a network system is proposed, including: multiple message forwarding nodes configured to perform any of the above exception feedback methods; and a network management node configured to perform any of the above methods. A fault location method.

According to an aspect of some embodiments of the present disclosure, a computer program is provided for causing a processor to perform any of the methods mentioned above.

Description of the drawings

The drawings described here are used to provide a further understanding of the present disclosure and constitute a part of the present disclosure. The illustrative embodiments of the present disclosure and their descriptions are used to explain the present disclosure and do not constitute an improper limitation of the present disclosure. In the attached picture:

Figure 1 is a flow chart of some embodiments of the exception feedback method of the present disclosure.

Figure 2 is a flow chart of some embodiments of the fault location method of the present disclosure.

FIG. 3A is a schematic diagram of some embodiments of the abnormality feedback and fault location method of the present disclosure.

FIG. 3B is a schematic diagram of other embodiments of the abnormality feedback and fault location method of the present disclosure.

Figure 4 is a schematic diagram of some embodiments of a message forwarding node of the present disclosure.

Figure 5 is a schematic diagram of some embodiments of the network management node of the present disclosure.

Figure 6 is a schematic diagram of some embodiments of network nodes of the present disclosure.

Figure 7 is a schematic diagram of other embodiments of network nodes of the present disclosure.

Figure 8 is a schematic diagram of some embodiments of the network system of the present disclosure.

Detailed ways

The technical solution of the present disclosure will be described in further detail below through the accompanying drawings and examples.

The inventor found that after the traceroute is initiated, the ICMP (Internet Control Message Protocol) response message will cause two risks:

1) The ICMP response message is maliciously intercepted and the IP address of the operator's equipment is obtained, which in turn consumes the operator's equipment resources by intensively forging ping messages;

2) Users can construct the topology of the operator's network based on the real IP address in the ICMP response message, which involves greater security and business risks.

In order to solve the above problems, the present disclosure proposes an exception feedback method and a corresponding fault location method to avoid address leakage caused by ICMP response messages.

On the message forwarding node side, the flow chart of some embodiments of the exception feedback method of the present disclosure is as shown in Figure 1.

In step 112, when the message forwarding node determines that the message forwarding times out, the message forwarding node determines the replacement address of the message forwarding node. In some embodiments, the message forwarding node may be a router. In some embodiments, the message forwarding node may be an operator network router. In some embodiments, the above replacement address is a pseudo address of the message forwarding node, which is different from the real address of the message forwarding node.

In some embodiments, the message forwarding node may store its own replacement address, and determine its own replacement address by querying the storage. In some embodiments, the message forwarding node may pre-store the corresponding relationship between its own real address and the replacement address, and determine the replacement address based on the pre-stored correspondence between the original address (real address) of the message forwarding node and the replacement address. In some embodiments, the original address of the message forwarding node refers to the address of the message forwarding node, which is a real network communication address and is used to find the message forwarding node during the communication process. In some embodiments, the replacement address of the message forwarding node does not affect the real address of the message forwarding node.

In step 114, the message forwarding node uses the replacement address as the source address and generates timeout information. In some embodiments, the message forwarding node uses the source node address of the forwarded timed message as the destination address.

In step 116, the timeout information is fed back to the source node of the message, so that the network management node determines the original address of the message forwarding node corresponding to the replacement address. In some embodiments, the network management node can obtain the timeout information through monitoring. In some embodiments, the network management node can monitor the network's downlink egress to the user and obtain timeout information.

In some embodiments, the network management node may be the source node of forwarded timeout packets, so that the timeout information is directly fed back to the network management node, which can avoid consuming network management resources compared with obtaining timeout information through monitoring.

Based on the method in the above embodiment, the timeout information does not carry the real address information of the packet forwarding node. If the timeout information is leaked, the leaked is a fake IP address. Hackers cannot attack the packet forwarding node through the fake IP address. This prevents hackers' DDOS (Distributed denial of service attack, distributed denial of service attack) attacks from the root cause and improves network security.

In some embodiments, the network management node can pre-store the corresponding relationship between the original address and the replacement address of each message forwarding node, and synchronize it to each message forwarding node, so that the message forwarding node can determine that the message forwarding timeout occurs. , can determine its own replacement address based on the synchronized correspondence. Through this method, it is possible to ensure the consistency of the corresponding relationship stored in the network management node and the message forwarding node, ensure that the replacement address can be correctly restored to the real address, and improve the accuracy of network management fault location.

In some embodiments, the Ping function of the packet forwarding node can be set to a continuously enabled state to improve the flexibility of the setting. In related technologies, in order to prevent hackers from forging dense Ping or tracert messages to consume device resources, the operator's network equipment will set up a Ping ban function, or will greatly reduce the number of ICMP responses generated by the network by limiting the number of Ping messages processed per second. number of messages, thereby limiting the consumption of device computing resources. However, when hackers forge dense ping packets, there is a high probability that normal ping packets will be overwhelmed by forged packets and cannot receive a response. Since in this disclosure, hackers cannot obtain the original address of the message forwarding node through timeout information, and hackers cannot attack the message forwarding node by replacing the address, therefore turning on the Ping function will not lead to attacks by hackers forging dense Ping messages. , thereby improving the convenience and efficiency of network fault location while ensuring network security. In some embodiments, the Ping function of the message forwarding node is set to the on state to facilitate the network management node's monitoring of the message forwarding node and fault location and troubleshooting operations.

On the network management node side, the flow chart of some embodiments of the fault location method of the present disclosure is shown in Figure 2.

In step 222, the network management node obtains the timeout information from the message forwarding node. In some embodiments, when the message forwarding node determines that the message forwarding has timed out, it will generate timeout information. In some embodiments, the message forwarding node may generate and send timeout information based on the method in the embodiment shown in Figure 1. In some embodiments, the network management node can extract the timeout information forwarded in the network, for example, obtain the timeout information through monitoring. In some embodiments, the network management node can monitor the network's downlink egress to the user and obtain timeout information. In some embodiments, the above-mentioned forwarding timeout message may be a message sent by a network management node, and the destination address of the timeout information is the network management node. There is no need to perform a monitoring operation and avoid consuming the resources of the network management node.

In step 224, the network management node determines the source address carried in the timeout information, and the source address is the replacement address of the message forwarding node.

In step 226, the original address of the message forwarding node is determined based on the source address. In some embodiments, the network management node may pre-store the corresponding relationship between each replacement address and the original address of the message forwarding node, and use the source address determined in step 224 as the matching object and each replacement address in the corresponding relationship as the address. The matching operation determines the original address of the message forwarding node corresponding to the successfully matched replacement address, that is, the real address of the source node of the timeout information. In some embodiments, the replacement address in the network management node and the original address of the message forwarding node may be stored in the form of a mapping table.

Based on the method in the above embodiment, the timeout information does not need to carry the real address of the message forwarding node. The network management node can perform address restoration based on the replacement address carried in the timeout information and its own stored correspondence to determine the address of the message forwarding node. Real address, thereby realizing the traceability of timeout information while preventing hackers from DDOS attacks from the root cause and improving network security. In some embodiments, the network management node is the operator's network management equipment, thereby improving the security of the operator's network, avoiding leakage of the operator's network topology and being attacked and causing a large waste of resources, and improving the reliability of the operator's services.

In some embodiments, as shown in Figure 2, the fault location method further includes step 228. In step 228, the network management node performs network fault location based on the original address of the message forwarding node. Based on the method in this embodiment, the network management node can use the original address of the packet forwarding node obtained by matching to perform troubleshooting, thereby improving the efficiency of network troubleshooting. In some embodiments, the Ping function of the packet forwarding node is continuously enabled, and the network management node can use the Ping function to troubleshoot according to the forwarding path, which further improves the efficiency and convenience of troubleshooting while ensuring network security.

A schematic diagram of some embodiments of the abnormality feedback and fault location method of the present disclosure is shown in Figure 3A.

User 301 sends a message to user 302, and user 301 sends a traceroute message to user 302, such as an echo request message, TTL=3, ICMP type=8. Router 311 receives the message and finds that the destination address is not itself, sets TTL-1=2, and forwards the message to next-hop router 312. Router 312 receives the message and finds that the destination address is not itself, sets TTL-1=1 and forwards the message to next-hop router 313. Router 313 determines that TTL=1, executes TTL-1=0, discards the message, and uses the source address (the address of user 301) in the message as the destination address. Different from the related art that carries the real address of the router 313 itself, in this disclosure the router 313 queries the stored mapping relationship between its own real address and the replacement address, and uses its own pseudo IP address as the source address to send a TTL timeout report of ICMP Type=11. Text, sent to user 301. Based on the method in this embodiment, after user 301 obtains the ICMP timeout message, it reads the source address of the timeout message from the IP message header. This address is the replacement address of router 313, so that user 301 cannot obtain the source address of router 313. real address, thereby preventing users from constructing the topology structure of the operator's network and improving the protection of the operator's network.

A schematic diagram of other embodiments of the abnormality feedback and fault location method of the present disclosure is shown in Figure 3B. The network management node 32 sends a message to a certain router 31n in the operator's network. Taking n greater than 3 as an example, when the TTL of the message received by the router 311 is 3, the process is similar to the process in the embodiment shown in Figure 3A. Router 313 determines that TTL=1, executes TTL-1=0, discards the message, uses the source address in the message (the address of network management node 32) as the destination address, and sends the pseudo IP address of router 313 as the source address. The TTL timeout message of ICMP Type=11 is sent to the network management node 32. The network management node can restore the pseudo IP address to the real address by virtue of its own stored correspondence, thereby determining the real address of the router 313 and using the real address as information for locating network faults.

In addition, for the embodiments shown in Figures 3A and 3B, if the timeout message is obtained by a hacker, the attack initiated by the hacker will be directed to the wrong address. In some embodiments, if the replacement address is 127.0.0.1, the hacker will launch an attack on himself. In some embodiments, the replacement address of one of the packet forwarding nodes can be set to 127.0.0.1, thereby interfering with the hacker's device and further improving network security. In addition, when the network management node obtains the ICMP timeout message, it reads the source address of the timeout message from the IP message header, and uses this address as the replacement address to query the mapping table between the replacement address and the real address of the router to obtain the address of router 313. , to promote normal fault location work.

A schematic diagram of some embodiments of the message forwarding node 41 of the present disclosure is shown in Figure 4.

The replacement address determination unit 411 can determine the replacement address of the message forwarding node when the message forwarding times out.

The timeout information generation unit 412 can generate timeout information using the replacement address as the source address. In some embodiments, the timeout information generation unit 412 uses the source node address of the forwarded timeout message as the destination address, and carries the first 64 bits of the forwarded timeout message. In some embodiments, the first 64 bits of the message Includes the source and destination addresses of the forwarded timeout packet, thus facilitating packet source tracing.

The feedback unit 413 can feed back the timeout information to the source node of the message. In some embodiments, after receiving the timeout information, the network management node may determine the original address of the packet forwarding node corresponding to the replacement address.

The timeout information generated by such a packet forwarding node does not carry the real address information of the packet forwarding node. If the timeout information is leaked, the leaked IP address will be a fake IP address. Hackers cannot attack the packet forwarding node through the fake IP address, thus from It fundamentally prevents DDOS attacks by hackers and improves network security.

In some embodiments, as shown in Figure 4, the message forwarding node 41 may also include a forwarding timeout determination unit 414, which can perform operations on TTL-1. If TTL=0 is obtained after performing the operation of TTL=TTL-1, Then it is determined that the message forwarding has timed out. In some embodiments, the type identifier carried in the timeout information generated by the timeout information generation unit 412 is 11.

Such message forwarding nodes can improve ICMP timeout (TTL exceeded) messages in related technologies, avoid timeout messages from leaking the real address of network devices and cause security risks, and improve network security.

In some embodiments, as shown in Figure 4, the message forwarding node 41 may also include a Ping function unit 415, which is continuously enabled and capable of receiving Ping messages and providing feedback. In this disclosure, hackers cannot obtain the original address of the message forwarding node through timeout information, and hackers cannot attack the message forwarding node through fake IP addresses. Therefore, turning on the Ping function will not lead to attacks by hackers forging dense Ping messages. situation, such a message forwarding node not only ensures network security, but also improves the convenience and efficiency of network troubleshooting.

A schematic diagram of some embodiments of the network management node 52 of the present disclosure is shown in Figure 5.

The timeout information receiving unit 521 can obtain timeout information from the message forwarding node. In some embodiments, the message forwarding node will generate timeout information when it determines that the message forwarding has timed out. In some embodiments, the timeout information receiving unit 521 can extract the timeout information forwarded in the network, for example, obtain the timeout information through monitoring. In some embodiments, the timeout information receiving unit 521 can monitor the network's downlink egress to the user and obtain the timeout information.

The replacement address acquisition unit 522 can determine the source address carried in the timeout information, and the source address is the replacement address of the message forwarding node.

The address determination unit 523 can determine the original address of the message forwarding node according to the source address. In some embodiments, the address determination unit 523 may initiate a query to the relevant database to determine the original address of the message forwarding node associated with the source address.

With such a network management node, the timeout information does not need to carry the real address of the message forwarding node. The network management node can perform address restoration based on the replacement address carried in the timeout information and determine the real address of the message forwarding node, thereby achieving traceability of the timeout information. At the same time, it prevents hackers' DDOS attacks from the root cause and improves network security.

In some embodiments, as shown in Figure 5, the network management node 52 may also include a relationship storage unit 524, which can store the corresponding relationship between the replacement address and the original address of the message forwarding node. In some embodiments, the replacement address and the original address of the message forwarding node may be stored in the form of a mapping table. The address determination unit 523 may use the source address determined by the replacement address acquisition unit 522 as a matching object based on the corresponding relationship between each replacement address and the original address of the message forwarding node, and perform an address matching operation with each replacement address in the corresponding relationship. Determine the original address of the message forwarding node corresponding to the successfully matched replacement address, that is, the real address of the source node of the timeout information.

Such a network management node can easily perform address restoration operations, improving the reliability and efficiency of determining the real address of the message forwarding node.

In some embodiments, as shown in Figure 5, the message forwarding node may also include a fault locating unit 525, which can perform network fault locating according to the original address of the message forwarding node. Such a network management node can use the matched original address of the packet forwarding node to perform troubleshooting, thereby improving the efficiency of network troubleshooting.

In some embodiments, the network management node may include a message sending unit capable of sending messages to the message forwarding node. If the message forwarding times out, the timeout information receiving unit 521 of the network management node will receive a message from the message forwarding node. Timeout information. Such a network management node does not need to obtain timeout information in the network through monitoring, avoids consumption of network management node resources by monitoring operations, and saves network management node resources.

In some embodiments, the network management node may also include a synchronization unit that can synchronize the correspondence between the original address and the replacement address of the message forwarding node to each message forwarding node, thereby ensuring that the network management node and the message forwarding node store the corresponding relationship. The consistency of the corresponding relationship ensures that the replacement address can be correctly restored to the real address, improving the reliability of the system.

A schematic structural diagram of an embodiment of the disclosed network node is shown in Figure 6. The network node may be the message forwarding node mentioned above, or may be a network management node, including a memory 601 and a processor 602. Among them: the memory 601 can be a disk, flash memory or any other non-volatile storage medium. The memory is used to store instructions in corresponding embodiments of the above exception feedback method or network fault locating method. Processor 602 is coupled to memory 601 and may be implemented as one or more integrated circuits, such as a microprocessor or microcontroller. The processor 602 is used to execute instructions stored in the memory, which can improve the security of the network.

In one embodiment, as shown in FIG. 7 , the network node 700 includes a memory 701 and a processor 702 . Processor 702 is coupled to memory 701 via BUS bus 703 . The network node 700 can also be connected to an external storage device 705 through a storage interface 704 to call external data, and can also be connected to a network or another computer system (not shown) through a network interface 706 . No further details will be given here.

In this embodiment, the security of the network can be improved by storing data instructions in the memory and then processing the instructions by the processor.

In another embodiment, a computer-readable storage medium has computer program instructions stored thereon. When the instructions are executed by a processor, the steps of the abnormal feedback method or the network fault locating method in the corresponding embodiment are implemented. It should be understood by those skilled in the art that embodiments of the present disclosure may be provided as methods, apparatuses, or computer program products. Accordingly, the present disclosure may take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment that combines software and hardware aspects. Furthermore, the present disclosure may take the form of a computer program product embodied on one or more computer-usable non-transitory storage media (including, but not limited to, disk memory, CD-ROM, optical storage, etc.) having computer-usable program code embodied therein. .

A schematic diagram of some embodiments of the network system of the present disclosure is shown in Figure 8.

There are multiple message forwarding nodes 811 to 81n, n is a positive integer greater than 1. Each message forwarding node can be any one mentioned above and execute any one of the above exception feedback methods.

The network management node 82 can be any of the above network management nodes, and can perform any of the above fault location methods.

In such a network system, the timeout information generated by the message forwarding node does not carry the real address information of the message forwarding node. The network management node can perform address restoration based on the replacement address carried in the timeout information to determine the real address of the message forwarding node. In this way, while realizing the traceability of timeout information, it prevents hackers' DDOS attacks from the root cause and improves network security.

In some embodiments, the replacement address of one of the packet forwarding nodes 811 to 81n is 127.0.0.1, so that the hacker who attacks the node launches an attack on himself, and the hacker's device is interfered with, further improving the network performance. safety.

The disclosure is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems) and computer program products according to embodiments of the disclosure. It will be understood that each process and/or block in the flowchart illustrations and/or block diagrams, and combinations of processes and/or blocks in the flowchart illustrations and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing device to produce a machine, such that the instructions executed by the processor of the computer or other programmable data processing device produce a use A device for realizing the functions specified in one process or multiple processes of the flowchart and/or one block or multiple blocks of the block diagram.

These computer program instructions may also be stored in a computer-readable memory that causes a computer or other programmable data processing apparatus to operate in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including the instruction means, the instructions The device implements the functions specified in a process or processes of the flowchart and/or a block or blocks of the block diagram.

These computer program instructions may also be loaded onto a computer or other programmable data processing device, causing a series of operating steps to be performed on the computer or other programmable device to produce computer-implemented processing, thereby executing on the computer or other programmable device. Instructions provide steps for implementing the functions specified in a process or processes of a flowchart diagram and/or a block or blocks of a block diagram.

Up to this point, the present disclosure has been described in detail. To avoid obscuring the concepts of the present disclosure, some details that are well known in the art have not been described. Based on the above description, those skilled in the art can completely understand how to implement the technical solution disclosed here.

The methods and apparatus of the present disclosure may be implemented in many ways. For example, the methods and devices of the present disclosure can be implemented through software, hardware, firmware, or any combination of software, hardware, and firmware. The above order for the steps of the methods is for illustration only, and the steps of the methods of the present disclosure are not limited to the order specifically described above unless otherwise specifically stated. Furthermore, in some embodiments, the present disclosure may also be implemented as programs recorded in recording media, and these programs include machine-readable instructions for implementing methods according to the present disclosure. Thus, the present disclosure also covers recording media storing programs for executing methods according to the present disclosure.

Finally, it should be noted that the above embodiments are only used to illustrate the technical solution of the present disclosure and not to limit it; although the present disclosure has been described in detail with reference to the preferred embodiments, those of ordinary skill in the art should understand that the present disclosure can still be modified Modifications to the specific embodiments disclosed or equivalent replacement of some technical features without departing from the spirit of the technical solution disclosed shall be included in the scope of the technical solution claimed by the present disclosure.

Claims

An exception feedback method, including:

When the message forwarding node determines that the message forwarding has timed out, determine the replacement address of the message forwarding node;

Use the replacement address as the source address to generate timeout information; and

The timeout information is fed back to the source node of the message.
The abnormality feedback method according to claim 1, wherein the source node of the message includes a network management node, and the network management node determines the original address of the message forwarding node corresponding to the replacement address based on the timeout information.
The abnormality feedback method according to claim 1, wherein the determining the replacement address of the message forwarding node includes: the message forwarding node based on the pre-stored original address and replacement address of the message forwarding node. corresponding relationship to determine the replacement address.
The abnormality feedback method according to claim 1, wherein at least one of the message forwarding node and the network management node pre-stores the corresponding relationship between the original address and the replacement address of the message forwarding node.
The abnormality feedback method according to claim 4, further comprising: the message forwarding node receiving the corresponding relationship from the network management node, wherein the network management node synchronizes the corresponding relationship to each message forwarding node .
The abnormality feedback method according to claim 1, wherein,

After the message forwarding node receives the message and performs the operation of decrementing the time-to-live value TTL by 1, if it determines that the TTL is 0, it determines that the message forwarding has timed out.
The abnormality feedback method according to claim 1, wherein the Internet packet explorer Ping function of the message forwarding node can be configured to be in an on state.
A fault location method, including:

The network management node obtains the timeout information from the message forwarding node;

Determine the source address carried by the timeout information, wherein the message forwarding node generates the timeout information when the message forwarding timeout is determined, and the source address is the replacement address of the source node of the timeout information; and determining the original address of the message forwarding node according to the source address.
The fault location method according to claim 8, wherein the network management node pre-stores the corresponding relationship between the replacement address and the original address of the message forwarding node;

Determining the original address of the message forwarding node according to the source address includes: matching the source address with a pre-stored replacement address, and determining the original address corresponding to the replacement address that matches the source address.
The fault location method according to claim 8, further comprising:

The network management node performs network fault location according to the original address of the message forwarding node.
A message forwarding node, including:

A replacement address determination unit configured to determine the replacement address of the message forwarding node when the message forwarding times out;

a timeout information generation unit configured to generate timeout information using the replacement address as a source address; and

A feedback unit is configured to feed back the timeout information to the source node of the message.
The message forwarding node according to claim 11, further comprising:

The forwarding timeout determining unit is configured to determine that the message forwarding has timed out if the TTL is determined to be 0 after receiving the message and performing an operation of decrementing the TTL by 1.
The message forwarding node according to claim 11, further comprising:

The Internet packet explorer Ping functional unit is configured to allow it to be set to an on state, and receive and feedback Ping messages in the on state.
A network management node includes:

A timeout information receiving unit configured to obtain timeout information from the message forwarding node;

A replacement address acquisition unit configured to determine the source address carried by the timeout information, wherein the message forwarding node generates the timeout information when determining that the message forwarding has timed out, and the source address is the timeout information. the replacement address of the source node of the message; and

The original address determination unit is configured to determine the original address of the message forwarding node according to the source address.
The network management node according to claim 14, further comprising: a relationship storage unit configured to store the corresponding relationship between the replacement address and the original address of the message forwarding node;

The original address determination unit is configured to match the source address with a pre-stored replacement address, and determine an original address corresponding to the replacement address that matches the source address.
The network management node according to claim 14, further comprising: a fault locating unit configured to perform network fault locating according to the original address of the message forwarding node.
A network node including:

memory; and

A processor coupled to the memory, the processor configured to perform the method of any one of claims 1 to 10 based on instructions stored in the memory.
A non-transitory computer-readable storage medium on which computer program instructions are stored, which when executed by a processor implements the steps of the method described in any one of claims 1 to 10.
A network system including:

A plurality of message forwarding nodes configured to perform the method described in any one of claims 1 to 7; and

The network management node is configured to execute the method described in any one of claims 8 to 10.
A computer program used to cause a processor to execute the method described in any one of claims 1 to 10.