WO2023246161A1

WO2023246161A1 - Policy routing implementation method and device, and storage medium

Info

Publication number: WO2023246161A1
Application number: PCT/CN2023/079008
Authority: WO
Inventors: 林宁
Original assignee: 中兴通讯股份有限公司
Priority date: 2022-06-22
Filing date: 2023-03-01
Publication date: 2023-12-28
Also published as: CN117319343A

Abstract

The present disclosure relates to the technical field of network communications, and provides a policy routing implementation method and device, and a storage medium. The method comprises: on the basis of a policy routing table and a preset matching rule, determining, in at least one subnet route, a target route hit by a packet to be forwarded; obtaining an initial rule in the target route and a pre-allocated access control list (ACL) aggregation group, and determining, on the basis of a target address in the packet to be forwarded, a target rule hit by the packet to be forwarded; and on the basis of a target path corresponding to the target rule, redirecting and forwarding the packet to be forwarded.

Description

Policy routing implementation method, equipment and storage medium

Cross-references to related applications

This disclosure claims priority to Chinese patent application CN202210713346.0 titled "Policy Routing Implementation Method, Device and Storage Medium" submitted on June 22, 2022, the entire content of which is incorporated into this disclosure by reference.

Technical field

The present disclosure relates to the field of network communication technology, and in particular, to a method, device and storage medium for implementing policy routing.

Background technique

The current operation of policy routing is to configure a series of access control lists (Access Control List, ACL), match routing rules and forwarding actions, and bind them to ports or VLANs (Virtual Local Area Network) so that this matching action is hit The forwarding path of packets can be modified according to the forwarding action of policy routing. However, this application method has the technical problem that the flexibility of the policy routing implementation method is low.

Contents of the invention

The present disclosure provides a policy routing implementation method, equipment and storage medium, aiming to solve the technical problem of low flexibility of current policy routing implementation methods.

In a first aspect, the present disclosure provides a method for implementing policy routing, which includes: determining a target route hit by a packet to be forwarded in at least one subnet route based on a policy routing table and preset matching rules; and obtaining initial rules in the target route and the pre-assigned access control list ACL aggregation group, and based on the target address in the packet to be forwarded, determine the target rule that the packet to be forwarded hits among the initial rules and the hit rules in the ACL aggregation group; there is a link on the main path In the event of a path failure, the packets to be forwarded are redirected and forwarded based on the destination path corresponding to the destination rule.

In a second aspect, the present disclosure also provides a policy routing implementation device. The policy routing implementation device includes a processor, a memory, a computer program stored on the memory and executable by the processor, and a connection between the processor and the memory. A data bus for communication, wherein when the computer program is executed by a processor, any one of the policy routing implementation methods provided by this disclosure is implemented.

In a third aspect, the present disclosure also provides a storage medium for computer-readable storage, the storage medium stores one or Or multiple programs, one or more programs can be executed by one or more processors to implement any policy routing implementation method provided in this disclosure.

Description of the drawings

In order to explain the technical solutions of the present disclosure more clearly, the drawings needed to be used in the description of the embodiments will be briefly introduced below. Obviously, the drawings in the following description are some embodiments of the present disclosure. For those of ordinary skill in the art, As far as workers are concerned, other drawings can also be obtained based on these drawings without exerting creative work.

Figure 1 is a schematic flow chart of a first embodiment of a policy routing implementation method provided by the present disclosure;

Figure 2 is a schematic flowchart of a second embodiment of the policy routing implementation method provided by the present disclosure;

Figure 3 is a schematic flowchart of a third embodiment of the policy routing implementation method provided by the present disclosure;

Figure 4 is a schematic flowchart of the fourth embodiment of the policy routing implementation method provided by the present disclosure;

Figure 5 is a schematic structural block diagram of a policy routing implementation device provided by the present disclosure.

Detailed ways

The technical solutions in this disclosure will be clearly and completely described below with reference to the accompanying drawings in this disclosure. Obviously, the described embodiments are part of the embodiments of this disclosure, rather than all embodiments. Based on the embodiments in this disclosure, all other embodiments obtained by those of ordinary skill in the art without making creative efforts fall within the scope of protection of this disclosure.

The flowcharts shown in the accompanying drawings are only examples and do not necessarily include all contents and operations/steps, nor are they necessarily performed in the order described. For example, some operations/steps can also be decomposed, combined or partially merged, so the actual order of execution may change according to actual conditions.

It should be understood that the terminology used in the description of the disclosure is for the purpose of describing particular embodiments only and is not intended to limit the disclosure. As used in this disclosure and the appended claims, the singular forms "a," "an," and "the" are intended to include the plural forms unless the context clearly dictates otherwise.

The current operation of policy routing is to configure a series of access control lists (Access Control List, ACL), match routing rules and forwarding actions, and bind them to ports or VLANs (Virtual Local Area Network) so that the matching action is hit The forwarding path of packets can be modified according to the forwarding action of policy routing. However, this application method makes policy routing only effective when bound to a port or VLAN, resulting in low flexibility in implementing policy routing.

The present disclosure provides a policy routing implementation method, device and storage medium. Among them, the policy routing implementation method can be applied to mobile terminals, which can be electronic devices such as mobile phones, tablet computers, notebook computers, desktop computers, personal digital assistants, and wearable devices.

Some embodiments of the present disclosure will be described in detail below with reference to the accompanying drawings. The following embodiments and features in the embodiments may be combined with each other without conflict.

Below, the policy routing implementation method provided by the embodiment of the present disclosure will be introduced in detail with reference to the scenario in Figure 1 . It should be noted that the scenario in Figure 1 is only used to explain the policy routing implementation method provided by the present disclosure, but does not constitute a limitation on the application scenarios of the policy routing implementation method provided by the present disclosure.

Please refer to FIG. 1 , which is a schematic flowchart of a first embodiment of a policy routing implementation method provided by the present disclosure.

As shown in Figure 1, the policy routing implementation method includes steps S101 to S103.

Step S101: Based on the policy routing table and preset matching rules, determine the target route that the packet to be forwarded hits in at least one subnet route.

In this embodiment, the policy routing table includes the mask information of all subnet routes, and the packet to be forwarded contains data units exchanged and transmitted in the network, that is, data blocks to be sent by the station at one time. The message contains the complete data information to be sent, as well as path information. When receiving a packet to be forwarded, the subnet route that is hit by the packet to be forwarded is determined by querying and matching the path address in the packet to be forwarded with the subnet mask in the policy routing table as the target route.

It can be understood that the preset matching rules can be based on the IP address of the packet to be forwarded, or can be field information of any packet, such as source and destination MAC addresses, protocol fields, and other ACL-matchable rules.

Step S102: Obtain the initial rules in the target route and the pre-assigned access control list ACL aggregation group, and based on the target address in the packet to be forwarded, determine the packet to be forwarded among the initial rules and the hit rules in the ACL aggregation group. Hit target rules.

In this embodiment, after receiving the message, the device will first match the ACL matching rules in the target route one by one. If there is no match, match the next one. Once a matching rule is found, the action defined in the rule is executed and no further matching is performed with subsequent rules. If no matching rule is found, the initial rule of the destination route is used as the destination rule and the packet is forwarded.

In an exemplary implementation, when allocating an ACL aggregation group to a subnet route, the ACL aggregation group and the initial rules of the subnet route can be used as parallel rules, where the ACL aggregation group has a higher priority than the initial rule. ; In an exemplary implementation, the initial rule can also be aggregated in the ACL aggregation group as one of the hit rules in the ACL aggregation group, and the initial rule can be arranged at the lowest priority of the ACL aggregation group.

Step S103: When there is a link failure on the main path, the packet to be forwarded is redirected and forwarded based on the target path corresponding to the target rule.

In this embodiment, when the packet to be forwarded hits multiple forwarding paths, the main path is used as the highest priority path, and the hit rule of policy routing is used as the backup path; when there is a link failure on the main path, the path to be forwarded is switched to If the packet hits the target path in the policy routing, the packet will be redirected and forwarded to improve the stability and reliability of packet forwarding.

This embodiment provides a method for implementing policy routing. Based on the policy routing table and preset matching rules, the method determines the target route that the packet to be forwarded hits in at least one subnet route; and obtains the initial rules and preset rules in the target route. The assigned access control list ACL aggregation group, and based on the target address in the packet to be forwarded, determine the target rule that the packet to be forwarded hits in the initial rule and the hit rule in the ACL aggregation group; there is a link failure on the main path In the case of , based on the target path corresponding to the target rule, the packet to be forwarded is redirected and forwarded. Through the above method, this embodiment pre-distributes the ACL aggregation group to each subnet route, and turns the hit rules in the ACL aggregation group into the rule attributes of the subnet route, so that the subnet route becomes a policy route; through the policy routing table and Preset matching rules. After determining the target route that the packet to be forwarded hits, you can query the matching target rule in the hit rules and initial rules contained in the target route; and execute the packet to be forwarded based on the target path corresponding to the target rule. The redirection and forwarding operation enables policy routing to take effect simultaneously with the execution of the target rules by the target route, thereby avoiding the problem that policy routing cannot be configured and effective simultaneously when the routing configuration changes. This solves the technical problem of low application flexibility of existing policy routing.

Please refer to Figure 2, which is a schematic flow chart of a second embodiment of the policy routing implementation method provided by the present disclosure;

In this embodiment, based on the above-mentioned embodiment shown in FIG. 1 , before step S101, it further includes: steps S001 to step S003.

Step S001: Obtain the hit rules of the policy routing, group the hit rules based on the mask of each hit rule, and obtain at least one ACL aggregation group. Step S002: Based on the subnet mask of each subnet route and the mask of each ACL aggregation group in the preset routing table, allocate the ACL aggregation group to the corresponding subnet route to obtain the policy rules of the subnet route. Step S003: Obtain a policy routing table based on the policy rules of each subnet routing.

In this embodiment, after the user configures all ACL policy routing hit rules and redirect entries, the device matches all ACL policy routing rules with the device's local default routing table, and all ACL policy routing according to the preset routing table. Set the subnet masks of each subnet route in the routing table to group them, and assign the corresponding ACL aggregation group index so that all ACL policy routing hit rules are divided into several subnet masks according to the preset routing table of the machine. Group.

In an exemplary implementation, using the attributes of the ACL aggregation group, when configuring policy routing as an ACL matching entry, all policy routing hit rules belonging to the same subnet routing mask are aggregated according to the ACL aggregation group; and Use the index of the ACL aggregation group as the next hop of the route and integrate it with the default routing table to obtain the policy routing table so that the route After looking up the table, the index of the ACL aggregation group can be hit. In this way, the packet can directly hit the related ACL aggregation group index after going through the routing table lookup, so that the packet can be redirected and forwarded by policy routing according to the ACL matching entry in this index.

In an exemplary implementation, step S002 specifically includes: based on the corresponding matching between the subnet mask of each subnet route in the preset routing table and the mask of each ACL aggregation group, allocate each ACL aggregation group to the corresponding In subnet routing; obtain the initial rules of the subnet routing, and obtain the policy rules of the subnet routing based on the initial rules and the hit rules in the ACL aggregation group.

In this embodiment, the hit rules of all ACL policy routes are matched with the subnet masks of each subnet route in the preset routing table, and the ACL aggregation group corresponding to the same subnet mask is assigned to the corresponding subnet route. middle. The ACL aggregation group can exist as a separate attribute of the route, and it exists as a routing attribute in parallel with the original next hop of the route. If the forwarding logic of the route is hit at this time, the ACL aggregation group will be matched first. If the ACL aggregation group cannot be matched, The entry then reroutes the normal next-hop forwarding logic.

In an exemplary implementation, the initial rule of the atomic network routing can also be used as a hit rule of this policy routing, and can be arranged at the last of each group of ACL policy routing rules, and finally all the rules that can match the device itself can be arranged. All ACL policy routes in the machine's routing table are generated to generate several groups of ACL aggregation groups that can correspond to the machine's subnet routing table. At this time, replace the index of the original subnet route with the index of the ACL aggregation group to complete the policy routing processing of the original subnet route.

In an exemplary implementation, based on the above embodiment shown in Figure 2, step S102 specifically includes: based on the target address of the message to be forwarded, query the ACL aggregation group in the target route, and determine whether there is an ACL aggregation group pointing to the target. The hit rule of the address; if there is a hit rule pointing to the target address in the ACL aggregation group, the hit rule pointing to the target address will be used as the target rule.

In an exemplary implementation, if there is no matching rule pointing to the target address in the ACL aggregation group, the initial rule is used as the target rule.

In this embodiment, since the ACL matching method is to match one by one from top to bottom, when the next hop of the subnet route becomes the ACL aggregation group index, the packets that can hit this subnet route will be processed according to the The aggregation groups formed by ACL policy routing are matched one by one in order.

In an exemplary implementation, it is assumed that switch A is configured with policy routing matching entries: 10.10.10.1 is redirected to 1.1.1.1; 10.10.10.2 is redirected to 2.2.2.2. There is a route 10.10.10.0/24 in the routing table of switch A. The next hop is 3.3.3.3. The policy routing entries are compared with the routing table in switch A. The 10.10.10.0/24 routing table can match two matching entries 10.10.10.1/10.10.10.2. Put these two matching entries in ACL aggregation group entry 1, and make ACL aggregation group index1 exist as a separate attribute of route 10.10.10.0/24. The original next hop of route 10.10.10.0/24 is 3.3.3.3. No changes are made at this time. However, route 10.10.10.0/24 is in the routing table and there is an ACL aggregation group. attributes and a common next hop. At this time, if switch A receives a message with the destination address 10.10.10.1 and hits the routing entry 10.0.0.0/24, it will first match the ACL aggregation group attribute, and the matched 10.10.10.1 will be redirected to the next hop address 1.1. The entry for 1.1 is forwarded to the next hop 1.1.1.1. Similarly, if a packet with the destination address 10.10.10.2 is received, the rule will be matched and redirected to 2.2.2.2. At this time, if switch A receives the message with the destination address 10.10.10.3, since it cannot match the ACL aggregation group attribute, it continues to match the forwarding rule of the original next hop of the route and forwards it to the next hop of the original route 10.10.10.0/24. One hop address 3.3.3.3.

In an exemplary implementation, when allocating the ACL aggregation group to the subnet route, the next hop of the atomic network route, that is, the initial rule, can also be used as a hit rule of this policy route and arranged in each The last one of a set of ACL policy routing rules will eventually combine all the ACL policy routes that can match the device's local routing table to generate several groups of ACL aggregation groups that can correspond to the local subnet routing table. At this time, replace the index of the original subnet route with the index of the ACL aggregation group to complete the policy routing processing of the original subnet route.

In an exemplary implementation, it is assumed that switch A is configured with policy routing matching entries: 10.10.10.1 is redirected to 1.1.1.1; 10.10.10.2 is redirected to 2.2.2.2. There is a route 10.10.10.0/24 in the routing table of switch A. The next hop is 3.3.3.3. The policy routing entries are compared with the routing table in switch A. The 10.10.10.0/24 routing table can match two matching entries 10.10.10.1/10.10.10.2. Place these two matching entries in ACL aggregation group entry 1, and set the next hop of the original route matching entry 10.10.10.0/24 to 3.3.3.3 as the third matching entry, also place it in ACL aggregation group entry 1 . Replace the original exit of route 10.10.10.0/24 with ACL aggregation group index1, pointing to ACL aggregation group entry 1. That is, the next hop exit of the original routing table 10.10.10.0/24 points to 3.3.3.3, but after being replaced by ACL aggregation group entry 1, the next hop exit of routing table 10.10.10.0/24 points to ACL aggregation group 1. At this time, if switch A receives the message with the destination address 10.10.10.1 and hits the routing entry 10.0.0.0/24, it will forward it to ACL aggregation group 1, and the matched 10.10.10.1 will be redirected to the next hop address 1.1. The entry for 1.1 is forwarded to the next hop 1.1.1.1. Similarly, if a packet with the destination address 10.10.10.2 is received, the rule will be matched and redirected to 2.2.2.2. At this time, if switch A receives the packet with the destination address 10.10.10.3, it will match the forwarding rule of the third original next hop and forward it to the next hop address 3.3.3.3 of the original route 10.10.10.0/24. The above completes the entire policy routing action of replacing the next hop of the original route. In addition, the definition of policy routing can be more refined. For example, in addition to matching the IP address of the message, it can also match the field information of any message, such as source and destination. MAC addresses, protocol fields and other behaviors that ACL can match. Therefore, such a matching method can make the forwarding of a route have a very rich and refined matching behavior.

In this embodiment, if a redirected packet that can be hit by ACL policy routing is matched, it will be redirected. In the end, all packets that cannot be hit will be redirected because the last ACL policy routing rule is the forwarding path of the original next hop. , therefore, all packets that cannot hit the policy route are forwarded according to their original forwarding path.

Please refer to Figure 3, which is a schematic flow chart of a third embodiment of the policy routing implementation method provided by the present disclosure;

As shown in Figure 3, based on the above embodiment shown in Figure 1, based on the target path corresponding to the target rule, before redirecting and forwarding the message to be forwarded, steps S201 to S202 are also included.

Step S201: Generate a main path based on fast rerouting FRR, and determine whether there is a link obstacle on the main path. Step S202: If there is no link failure on the main path, forward the packet to be forwarded through the main path.

Generally speaking, in general technology, policy routing ACL is at the forefront of forwarding logic. Therefore, as long as all packets come in from a certain port or a certain VLAN according to the ACL binding policy, they will directly match and hit the ACL policy of policy routing. Therefore, it is impossible to proceed to the subsequent routing process. As a result, although this function is called policy routing, its policy routing ACL does not have any connection with routing.

In this embodiment, because the policy route becomes the next hop attribute of the route and can take effect following the route, it can effectively respond to various behaviors of the route. When configuring routing FRR, the ACL aggregation group of policy routing can be directly used as its next hop to take effect, which can realize the function of routing FRR and policy routing superimposed to take effect, thus completing the expansion of FRR functions similar to routing.

Among them, FRR (Fast Reroute) aims to provide backup protection for the node or link when a link or node fails in the network, achieve fast rerouting, and reduce the impact on traffic when the link or node fails. Enable traffic to recover quickly.

In an exemplary implementation, after completing the configuration of policy routing, the policy routing next hop of route 10.10.10.0/24 is formed. Assume that switch A is configured with policy routing matching entries: 10.10.10.1 redirects to 1.1.1.1; 10.10.10.2 redirects to 2.2.2.2. There is a route 10.10.10.0/24 in the routing table of switch A. The next hop is 3.3.3.3. At this time, route 10.10.10.0/24 forms an FRR path, the main path is the next hop IP address 4.4.4.4, and the backup path is the next hop of the above policy routing. Before FRR triggers switchover, all packets hitting this route 10.10.10.0/24 are forwarded along the main path 4.4.4.4. If FRR triggers a switch, the packets that hit this route 10.10.10.0/24 are forwarded according to the next hop of policy routing, that is, the packets that hit the policy routing ACL aggregation group are forwarded in a refined manner. As a result, the formation of policy routing FRR is completed. Since policy routing becomes the next hop attribute of the route, the active and backup switching of FRR from ordinary routing to policy routing will be very simple and convenient, and two sets of policies can be formed. The effect of routing switching between each other.

Please refer to FIG. 4 , which is a schematic flowchart of a fourth embodiment of the policy routing implementation method provided by the present disclosure.

As shown in Figure 4, based on the above embodiment shown in Figure 1, redirecting and forwarding messages to be forwarded based on the target path corresponding to the target rule also includes: steps S301 to step S302.

Step S301: Generate equal-cost paths based on equal-cost multi-path routing ECMP. Step S302, based on the target path and so on price path, diverting and forwarding the packets to be forwarded.

In this embodiment, because the policy route becomes the next hop attribute of the route and can take effect following the route, it can effectively respond to various behaviors of the route. When configuring routing ECMP, you can directly use the ACL aggregation group of policy routing as its next hop to take effect, which can realize the function of superimposing routing ECMP and policy routing to take effect, thereby completing the expansion of ECMP functions similar to routing.

Among them, EMCP (Equal Cost Multi-path, equal cost routing) can use multiple links at the same time in this network environment, which not only increases the transmission bandwidth, but also can back up the data transmission of failed links without delay and packet loss.

In an exemplary implementation, step S302 specifically includes: based on the load balancing principle and the data size of the packet to be forwarded, determining the load flow of the target path and the equal-cost path corresponding to the target rule; based on the load flow, controlling the target path and Equal-cost paths forward packets to be forwarded.

In an exemplary implementation, after completing the configuration of policy routing, the policy routing next hop of route 10.10.10.0/24 is formed. Assume that switch A is configured with policy routing matching entries: 10.10.10.1 redirects to 1.1.1.1; 10.10.10.2 redirects to 2.2.2.2. There is a route 10.10.10.0/24 in the routing table of switch A. The next hop is 3.3.3.3. At this time, the route 10.10.10.0/24 forms an ECMP path and forms two equal-cost next hops. One of the paths has a next hop address of 4.4.4.4, and the other path is the next hop of the above-mentioned policy routing. All packets that hit this route 10.10.10.0/24 are forwarded load-balanced according to the two next hops, that is, part of the traffic goes through 4.4.4.4, and the other part of the traffic goes through the policy route next hop exit. Thus, the formation of policy routing ECMP is completed. Since policy routing becomes the next hop attribute of the route, the ECMP load sharing method will be more diverse.

Please refer to FIG. 5 , which is a schematic structural block diagram of a policy routing implementation device provided by the present disclosure.

As shown in Figure 5, the policy routing implementation device 300 includes a processor 301 and a memory 302. The processor 301 and the memory 302 are connected through a bus 303, which is, for example, an I2C (Inter-integrated Circuit) bus.

In an exemplary implementation, the processor 301 is used to provide computing and control capabilities to support the operation of the entire policy routing implementation device. The processor 301 can be a central processing unit (Central Processing Unit, CPU). The processor 301 can also be other general-purpose processors, digital signal processors (Digital Signal Processor, DSP), application specific integrated circuits (Application Specific Integrated Circuit, ASIC). ), Field-Programmable Gate Array (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general processor may be a microprocessor or the processor may be any conventional processor.

In an exemplary implementation, the memory 302 may be a Flash chip, a read-only memory (ROM, Read-Only Memory) disk, an optical disk, a USB disk, a mobile hard disk, or the like.

Those skilled in the art can understand that the structure shown in Figure 5 is only a block diagram of a partial structure related to the disclosed solution, and does not constitute a limitation on the policy routing implementation equipment to which the disclosed solution is applied. Specific policies A routing implementation device may include more or fewer components than shown in the figures, or combine certain components, or have a different arrangement of components.

The processor 301 is used to run a computer program stored in the memory 302, and implement any of the policy routing implementation methods provided by this disclosure when executing the computer program.

In one embodiment, the processor 301 is used to run a computer program stored in the memory, and implement the following steps when executing the computer program: In one embodiment, when implemented, the processor 301 is used to implement: policy-based routing table and preset matching rules, determine the target route that the packet to be forwarded hits in at least one subnet route; obtain the initial rules in the target route and the pre-assigned access control list ACL aggregation group, and based on the packet to be forwarded The target address determines the target rule that the packet to be forwarded hits among the initial rules and the hit rules in the ACL aggregation group; in the case of a link failure on the main path, based on the target path corresponding to the target rule, redirection forwarding is performed. message.

It should be noted that those skilled in the art can clearly understand that for the convenience and simplicity of description, the specific working process of the policy routing implementation device described above can be referred to the corresponding process in the foregoing policy routing implementation method embodiment. This will not be described again.

The present disclosure also provides a storage medium for computer-readable storage. The storage medium stores one or more programs. The one or more programs can be executed by one or more processors to implement any of the tasks provided by the present disclosure. A policy routing implementation method.

The storage medium may be an internal storage unit of the policy routing implementation device described in the previous embodiment, such as a hard disk or memory of the policy routing implementation device. The storage medium can also be an external storage device of the policy routing implementation device, such as a plug-in hard disk, smart memory card (Smart Media Card, SMC), secure digital (SD) card, flash memory card equipped on the policy routing implementation device (Flash Card) etc.

The present disclosure provides a method for implementing policy routing. This disclosure pre-distributes ACL aggregation groups to each subnet route, and converts the hit rules in the ACL aggregation group into rule attributes of the subnet routing, so that the subnet routing becomes a policy routing; After determining the target route that the packet to be forwarded hits through the policy routing table and preset matching rules, you can query the matching target rule in the hit rules and initial rules contained in the target route; and based on the target path corresponding to the target rule, Perform the redirection forwarding operation of the packets to be forwarded so that policy routing can follow the target route's execution of the target rules and take effect simultaneously, thus avoiding the problem that policy routing cannot be configured and take effect simultaneously when the routing configuration changes. This solves the technical problem of low application flexibility of existing policy routing. The technical solution of the present disclosure pre-distributes ACL aggregation groups to each subnet route, and turns the hit rules in the ACL aggregation group into rule attributes of the subnet route, so that policy routing can follow the target Target routing takes effect simultaneously with the execution of target rules, which solves the technical problem of low flexibility in the application of current policy routing.

Those of ordinary skill in the art can understand that all or some steps, systems, and functional modules/units in the devices disclosed above can be implemented as software, firmware, hardware, and appropriate combinations thereof. In hardware embodiments, the division between functional modules/units mentioned in the above description does not necessarily correspond to the division of physical components; for example, one physical component may have multiple functions, or one function or step may be composed of several physical components. Components execute cooperatively. Some or all of the physical components may be implemented as software executed by a processor, such as a central processing unit, a digital signal processor, or a microprocessor, or as hardware, or as an integrated circuit, such as an application specific integrated circuit . Such software may be distributed on computer-readable media, which may include computer storage media (or non-transitory media) and communication media (or transitory media). As is known to those of ordinary skill in the art, the term computer storage media includes volatile and nonvolatile media implemented in any method or technology for storage of information such as computer readable instructions, data structures, program modules or other data. removable, removable and non-removable media. Computer storage media includes, but is not limited to, RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, Digital Versatile Disk (DVD) or other optical disk storage, magnetic cassettes, tapes, disk storage or other magnetic storage devices, or may Any other medium used to store the desired information and that can be accessed by a computer. Additionally, it is known to those of ordinary skill in the art that communication media typically embodies computer readable instructions, data structures, program modules or other data in a modulated data signal such as a carrier wave or other transport mechanism, and may include any information delivery media .

It will be understood that the term "and/or" as used in this disclosure and the appended claims refers to and includes any and all possible combinations of one or more of the associated listed items. It should be noted that, as used herein, the terms "include", "comprising" or any other variation thereof are intended to cover a non-exclusive inclusion, such that a process, method, article or system that includes a list of elements not only includes those elements, but It also includes other elements not expressly listed or that are inherent to the process, method, article or system. Without further limitation, an element defined by the statement "comprises a..." does not exclude the presence of other identical elements in the process, method, article, or system that includes that element.

The above serial numbers of the present disclosure are only for description and do not represent the advantages and disadvantages of the embodiments. The above are only specific embodiments of the present disclosure, but the protection scope of the present disclosure is not limited thereto. Any person familiar with the technical field can easily think of various equivalent methods within the technical scope disclosed in the present disclosure. Modifications or substitutions, these modifications or substitutions should be covered by the protection scope of this disclosure. Therefore, the protection scope of the present disclosure should be subject to the protection scope of the claims.

Claims

A policy routing implementation method, including:

Based on the policy routing table and preset matching rules, determine the target route that the packet to be forwarded hits in at least one subnet route;

Obtain the initial rule in the target route and the pre-assigned access control list ACL aggregation group, and based on the target address in the message to be forwarded, among the initial rule and the hit rule in the ACL aggregation group, Determine the target rule hit by the message to be forwarded;

When there is a link failure on the main path, the packet to be forwarded is redirected and forwarded based on the target path corresponding to the target rule.
The policy routing implementation method according to claim 1, wherein the step of determining the target route hit by the packet to be forwarded in at least one subnet route based on the policy routing table and preset matching rules also includes:

Obtain the hit rules of the policy routing, group the hit rules based on the mask of each hit rule, and obtain at least one ACL aggregation group;

Based on the subnet mask of each subnet route in the preset routing table and the mask of each ACL aggregation group, the ACL aggregation group is assigned to the corresponding subnet route, and the subnet route is obtained. policy rules;

The policy routing table is obtained based on the policy rules of each subnet route.
The policy routing implementation method according to claim 2, wherein the ACL aggregation group is assigned to In the corresponding subnet route, obtain the policy rules of the subnet route, including:

Based on the corresponding matching between the subnet mask of each subnet route in the preset routing table and the mask of each ACL aggregation group, allocate each ACL aggregation group to the corresponding subnet route;

Obtain the initial rule of the subnet route, and obtain the policy rule of the subnet route based on the initial rule and the hit rule in the ACL aggregation group.
The policy routing implementation method according to claim 1, wherein based on the target address in the message to be forwarded, the initial rule and the hit rule in the ACL aggregation group determine that the message to be forwarded is The target rules that the packet hits include:

Based on the target address of the message to be forwarded, query the ACL aggregation group in the target route and determine whether there is a hit rule pointing to the target address in the ACL aggregation group;

If there is a hit rule pointing to the target address in the ACL aggregation group, the hit rule pointing to the target address is used as the target rule.
The policy routing implementation method according to claim 4, wherein based on the target address of the message to be forwarded, query the ACL aggregation group in the target route, and determine whether there is a link in the ACL aggregation group. After the step of matching the target address rule, it also includes:

If there is no matching rule pointing to the target address in the ACL aggregation group, the initial rule is used as the target rule.
The policy routing implementation method according to claim 1, wherein the step of redirecting and forwarding the message to be forwarded based on the target path corresponding to the target rule further includes:

Based on equal-cost multi-path routing ECMP, equal-cost paths are generated;

Based on the target path and the equal-cost path, the packet to be forwarded is forwarded in a split-stream manner.
The method for implementing policy routing according to claim 6, wherein the step of offloading and forwarding the message to be forwarded based on the target path and the equal-cost path further includes:

Based on the load balancing principle and the data size of the packet to be forwarded, determine the target path corresponding to the target rule and the load flow of the equal-cost path;

Based on the load flow, the target path and the equal-cost path are controlled to split and forward the packet to be forwarded.
The policy routing implementation method according to any one of claims 1 to 7, wherein before the step of redirecting and forwarding the message to be forwarded based on the target path corresponding to the target rule, the method further includes:

Based on fast rerouting FRR, generate a main path and determine whether there is a link obstacle on the main path;

If there is no link failure on the main path, the packet to be forwarded is forwarded through the main path.
A policy routing implementation device, including a processor, a memory, a computer program stored on the memory and executable by the processor, and a data bus used to implement connection communication between the processor and the memory , wherein when the computer program is executed by the processor, the steps of the policy routing implementation method according to any one of claims 1 to 8 are implemented.
A storage medium for computer-readable storage. The storage medium stores one or more programs. The one or more programs can be executed by one or more processors to implement any of claims 1 to 8. One step of the method for implementing policy routing.