CN105450520B - Packet processing method and device, and method and device for establishing aggregation tunnel - Google Patents
- ️Tue Feb 19 2019
Info
-
Publication number
- CN105450520B CN105450520B CN201511031370.2A CN201511031370A CN105450520B CN 105450520 B CN105450520 B CN 105450520B CN 201511031370 A CN201511031370 A CN 201511031370A CN 105450520 B CN105450520 B CN 105450520B Authority
- CN
- China Prior art keywords
- vpn
- label
- tunnel
- target
- forwarding node Prior art date
- 2015-12-31 Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 238000000034 method Methods 0.000 title claims abstract description 44
- 238000003672 processing method Methods 0.000 title claims abstract description 10
- 230000002776 aggregation Effects 0.000 title claims abstract 10
- 238000004220 aggregation Methods 0.000 title claims abstract 10
- 238000013507 mapping Methods 0.000 claims abstract description 29
- 238000005538 encapsulation Methods 0.000 claims description 9
- 238000012545 processing Methods 0.000 claims description 7
- 230000004044 response Effects 0.000 claims description 5
- 230000004931 aggregating effect Effects 0.000 description 129
- 239000003550 marker Substances 0.000 description 53
- 238000006243 chemical reaction Methods 0.000 description 35
- 230000008569 process Effects 0.000 description 13
- 238000010586 diagram Methods 0.000 description 9
- 238000007667 floating Methods 0.000 description 9
- WOTPFVNWMLFMFW-UHFFFAOYSA-N chembl1967257 Chemical compound OC1=CC=C2C=CC=CC2=C1N=NC1=CC=C([N+]([O-])=O)C=C1 WOTPFVNWMLFMFW-UHFFFAOYSA-N 0.000 description 6
- 238000004806 packaging method and process Methods 0.000 description 5
- 238000006116 polymerization reaction Methods 0.000 description 4
- 238000012986 modification Methods 0.000 description 2
- 230000004048 modification Effects 0.000 description 2
- 239000002699 waste material Substances 0.000 description 2
- 230000009471 action Effects 0.000 description 1
- 230000008901 benefit Effects 0.000 description 1
- 238000004891 communication Methods 0.000 description 1
- 238000005516 engineering process Methods 0.000 description 1
- 230000007246 mechanism Effects 0.000 description 1
- 238000000926 separation method Methods 0.000 description 1
- 230000011664 signaling Effects 0.000 description 1
- 239000000126 substance Substances 0.000 description 1
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L45/00—Routing or path finding of packets in data switching networks
- H04L45/24—Multipath
- H04L45/245—Link aggregation, e.g. trunking
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L45/00—Routing or path finding of packets in data switching networks
- H04L45/38—Flow based routing
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L45/00—Routing or path finding of packets in data switching networks
- H04L45/50—Routing or path finding of packets in data switching networks using label swapping, e.g. multi-protocol label switch [MPLS]
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
本发明实施例公开了一种报文处理方法和装置以及一种建立聚合隧道的方法和装置。其中，聚合隧道的转发节点根据隧道标签和VPN标签共同对VPN的报文进行转发处理。隧道标签携带有语义标记。对于聚合隧道对应的目标VPN，在聚合隧道的转发节点上配置有用于记录目标VPN与目标VPN在该转发节点之后的下一个节点之间映射关系的子树信息。该转发节点在接收到目标VPN的报文时通过读取隧道标签，在该语义标记的指示下读取报文中的VPN标签并根据读取到的VPN标签和已配置的子树信息向所述下一个节点转发目标VPN的报文。因此，聚合隧道中的链路能够避免被用于转发无用的报文，从而节约了网络中的流量资源。
Embodiments of the present invention disclose a packet processing method and device, and a method and device for establishing an aggregation tunnel. The forwarding node of the aggregated tunnel jointly forwards the VPN packets according to the tunnel label and the VPN label. Tunnel labels carry semantic tags. For the target VPN corresponding to the aggregation tunnel, the forwarding node of the aggregation tunnel is configured with subtree information for recording the mapping relationship between the target VPN and the next node of the target VPN after the forwarding node. When receiving the message of the target VPN, the forwarding node reads the tunnel label, reads the VPN label in the message under the instruction of the semantic label, and sends the message to the destination according to the read VPN label and the configured subtree information. The next node forwards the packets of the target VPN. Therefore, the links in the aggregated tunnel can avoid being used for forwarding useless packets, thereby saving traffic resources in the network.
Description
Technical field
The present invention relates to fields of communication technology, gather more particularly to a kind of message processing method and device and a kind of establish The method and apparatus for closing tunnel.
Background technique
In the network for supporting multicast polymerization retransmission technique, multiple Virtual Private Network (English: Virtual Private Network, abbreviation VPN) it the same aggregating tunnel (English: Aggregate Tunnel) can be used E-Packets.Multiple In the case that VPN is E-Packeted using the same aggregating tunnel, the aggregating tunnel corresponds to the multiple VPN, the multiple VPN Message forward passed through link to collectively constitute the aggregating tunnel in a network, the message of the multiple VPN is in network The passed through forward node of middle forwarding can be considered as the forward node of the aggregating tunnel.In the establishment process of the aggregating tunnel In, each forward node of the aggregating tunnel is configured with corresponding tunnel label under the aggregating tunnel.For institute It states for a forward node of aggregating tunnel, the forward node is according to identical tunnel label to the message of the multiple VPN It is forwarded processing.Wherein, the corresponding tunnel label of the forward node can be mapped to the forwarding section under the aggregating tunnel The corresponding all conversion links of the multiple VPN on point.Therefore, for any one message of the multiple VPN received, The message will be all forwarded on the corresponding all conversion links of the multiple VPN on the forward node.As it can be seen that for entirely polymerizeing tunnel For road, in the multiple VPN to be E-Packeted using same aggregating tunnel, it is right that the message of VPN is not only forwarded to the VPN itself The destination node answered, and it is also forwarded to the corresponding destination node of other VPN (English: Egress Node).As it can be seen that polymerization Many links in tunnel be used to forward a large amount of useless messages, so as to cause the waste of floating resources in network.
Summary of the invention
The embodiment of the present invention is the technical problem to be solved is that, provide a kind of message processing method and device and one kind is built The method and apparatus of vertical aggregating tunnel are forwarded to by aggregating tunnel the destination node of other VPN to avoid the message of VPN, To avoid the link in aggregating tunnel from being used to forward useless message, the floating resources in network are saved.
In a first aspect, the embodiment of the invention provides a kind of message processing methods.This method comprises:
First forward node receives object message, and first forward node belongs to the forward node of aggregating tunnel；
First forward node identifies destination virtual the dedicated network VPN, the target VPN of the object message ownership Belong to the VPN to E-Packet using the aggregating tunnel；
First forward node searches subtree information of the target VPN on first forward node, the son Tree information record has the mapping relations between the target VPN and the second forward node, and second forward node is described Next node on the corresponding conversion link of target VPN after first forward node；
First forward node encapsulates the first tunnel label according to the subtree information found in the object message With the VPN label of the target VPN, and to second forward node forwarding be packaged with the tunnel label and the VPN mark The object message of label；
First tunnel label is the corresponding tunnel label of the second forward node described under the aggregating tunnel；Described One tunnel label is that second forward node distributes to first forward node；First tunnel label carries language Justice label；The semantic marker is used to indicate second forward node and reads first tunnel in the object message The VPN label of the object message is read when road label；The VPN label is used to indicate second forward node and knows Not Chu object message ownership the target VPN.
Optionally, first forward node is the corresponding source node of the target VPN；
First forward node identifies the destination virtual dedicated network VPN of the object message ownership, specifically: it is described First forward node determines the target of the object message ownership according to the incoming interface or packaging information in the object message VPN。
Optionally, first forward node is the corresponding intermediate node of the target VPN；
First forward node identifies the destination virtual dedicated network VPN of the object message ownership, comprising:
First forward node reads the second tunnel label encapsulated in the object message, second tunnel label For the corresponding tunnel label of the first forward node described under the aggregating tunnel, second tunnel label carries institute's predicate Justice label；
The semantic marker that first forward node is carried in response to recognizing second tunnel label, reads institute Next layer of label for stating the second tunnel label described in object message, obtains the VPN label；
First forward node according to the mapping relations between the VPN label and the target VPN, determine described in The target VPN of VPN label ownership.
Optionally, the method also includes:
First forward node pops up second tunnel label from the object message.
Optionally, the method also includes:
First forward node receives second tunnel label that the network equipment the issues, semantic marker, described VPN label and the subtree information.
Optionally, the network equipment is control node, and first tunnel label passes through the channel open flows OpenFlow It issues, the semantic marker is issued by the channel OpenFlow, and the VPN label is assisted by the channel OpenFlow or borde gateway The view channel BGP issues, and the subtree information is issued by the channel OpenFlow.
Optionally, the aggregating tunnel is located at virtual access system, all forward node in the virtual access system It is access node.
Second aspect, the embodiment of the invention provides a kind of methods for establishing aggregating tunnel.This method comprises:
The network equipment distributes the forward node under the aggregating tunnel for the forward node of the aggregating tunnel and corresponds to Tunnel label, and issue the tunnel label to the forward node；
The network equipment issues the semantic marker of the tunnel label to the forward node, to indicate the forwarding section Point carries the semantic marker in the tunnel label；
The network equipment is that target VPN distributes VPN label, and issues the VPN label to the forward node；
The network equipment determination is next after the forward node on the corresponding conversion link of the target VPN Node generates subtree information of the target VPN on the forward node, and issues the subtree letter to the forward node Breath, wherein the subtree information record has the mapping relations between the target VPN and the next node；
The semantic marker of the tunnel label is used to indicate the forward node and reads in the object message received The VPN label of the object message is read when the tunnel label, the object message is the message of the target VPN； The VPN label is used to indicate the target VPN that the forward node identifies the object message ownership；The subtree Information is used to indicate the forward node to the next node and forwards the object message.
Optionally, the network equipment is control node；
It is described to issue the tunnel label to the forward node, specifically: by the channel open flows OpenFlow to institute It states forward node and issues the tunnel label；
The semantic marker that the tunnel label is issued to the forward node, specifically: pass through the channel OpenFlow The semantic marker is issued to the forward node；
It is described to issue the VPN label to the forward node, specifically: it is assisted by the channel OpenFlow or borde gateway It discusses the channel BGP and issues the VPN label to the forward node；
It is described to issue the subtree information to the forward node, specifically: by the channel OpenFlow to the forwarding Node issues the subtree information.
Optionally, the aggregating tunnel is located at virtual access system, all forward node in the virtual access system It is access node.
The third aspect, the embodiment of the invention provides a kind of message process devices.The device is configured at the first forward node. The device includes:
First receiving unit, for receiving object message, first forward node belongs to the forward node of aggregating tunnel；
Recognition unit, the destination virtual dedicated network VPN that the object message belongs to for identification, the target VPN category In the VPN to be E-Packeted using the aggregating tunnel；
Searching unit, for searching subtree information of the target VPN on first forward node, the subtree letter Breath record has the mapping relations between the target VPN and the second forward node, and second forward node is in the target Next node on the corresponding conversion link of VPN after first forward node；
Encapsulation unit, for according to the subtree information that finds, encapsulated in the object message the first tunnel label and The VPN label of the target VPN；
Retransmission unit, for being packaged with the tunnel label and the VPN label to second forward node forwarding Object message；
First tunnel label is the corresponding tunnel label of the second forward node described under the aggregating tunnel；Described One tunnel label is that second forward node is sent to first forward node；First tunnel label carries language Justice label；The semantic marker is used to indicate second forward node and reads first tunnel in the object message The VPN label of the object message is read when road label；The VPN label is used to indicate second forward node and knows Not Chu object message ownership the target VPN.
Optionally, first forward node is the corresponding source node of the target VPN；
The recognition unit, specifically for determining the mesh according to the incoming interface or packaging information in the object message Mark the target VPN of message ownership.
Optionally, first forward node is the corresponding intermediate node of the target VPN；
The recognition unit, is specifically used for:
The second tunnel label encapsulated in the object message is read, second tunnel label is in the aggregating tunnel Under the corresponding tunnel label of first forward node, second tunnel label carries the semantic marker；
The semantic marker carried in response to recognizing second tunnel label, reads described in the object message Next layer of label of the second tunnel label, obtains the VPN label；
First forward node according to the mapping relations between the VPN label and the target VPN, determine described in The target VPN of VPN label ownership.
Optionally, described device further include:
Unit is popped up, for popping up second tunnel label from the object message.
Optionally, described device further include:
Second receiving unit, for receiving second tunnel label, the semantic marker that the network equipment issues, described VPN label and the subtree information.
Optionally, the network equipment is control node, and first tunnel label passes through the channel open flows OpenFlow It issues, the semantic marker is issued by the channel OpenFlow, and the VPN label is assisted by the channel OpenFlow or borde gateway The view channel BGP issues, and the subtree information is issued by the channel OpenFlow.
Optionally, the aggregating tunnel is located at virtual access system, all forward node in the virtual access system It is access node.
Fourth aspect, the embodiment of the invention provides a kind of devices for establishing aggregating tunnel.The device is configured at network and sets It is standby.The device includes:
First allocation unit, for distributing the forwarding under the aggregating tunnel for the forward node of the aggregating tunnel The corresponding tunnel label of node；
First issuance unit, for issuing the tunnel label to the forward node；
Second issuance unit, for issuing the semantic marker of the tunnel label to the forward node, described in instruction Forward node carries the semantic marker in the tunnel label；
Second allocation unit, for distributing VPN label for target VPN；
Third issuance unit, for issuing the VPN label to the forward node；
Generation unit, it is next after the forward node on the corresponding conversion link of the target VPN for determining A node generates subtree information of the target VPN on the forward node；
4th issuance unit, for issuing the subtree information to the forward node, wherein the subtree information record There are the mapping relations between the target VPN and the next node；The semantic marker of the tunnel label is used to indicate institute State the VPN mark that the object message is read when forward node reads the tunnel label in the object message received Label, the object message is the message of the target VPN；The VPN label, be used to indicate the forward node identify it is described The target VPN of object message ownership；The subtree information is used to indicate the forward node and turns to the next node Send out object message described.
Optionally, the network equipment is control node；
First issuance unit, it is described specifically for being issued by the channel open flows OpenFlow to the forward node Tunnel label；
Second issuance unit, specifically for issuing the semantic mark to the forward node by the channel OpenFlow Note；
The third issuance unit is specifically used for through the channel OpenFlow or Border Gateway Protocol (BGP) channel to described Forward node issues the VPN label；
4th issuance unit is believed specifically for issuing the subtree to the forward node by the channel OpenFlow Breath.
Optionally, the aggregating tunnel is located at virtual access system, all forward node in the virtual access system It is access node.
Compared with prior art, the embodiment of the present invention has the advantage that
Using the technical solution of the embodiment of the present invention, in order to use aggregating tunnel to turn the object message of target VPN It sends out, forwards section under the aggregating tunnel in addition to configuring on the forward node that object message described in the aggregating tunnel needs to pass through Except the corresponding tunnel label of point, the VPN label that can also configure the target VPN, the target VPN are in the forward node On subtree information and carry semantic marker in the tunnel label, wherein subtree information record has the target VPN The mapping relations between next node on conversion link corresponding with the target VPN after the forward node.Work as institute When stating forward node and receiving the object message, it is packaged with the tunnel label and the VPN label in the object message, The VPN label is next layer of label of the tunnel label.The forward node reads the tunnel in the object message Road label, and according to the instruction of the semantic marker carried in the tunnel label, the tunnel is read in the object message Next layer of label of label and obtain the VPN label, the mesh of target VPN ownership is determined according to the VPN label VPN is marked, and determines the forwarding chain of the target VPN according to the subtree information of the target VPN on the forward node The next node of the forward node on the road, so as to which object message is transmitted to the next node.It can be seen that On the forward node of aggregating tunnel, the message of target VPN can be only forwarded by the corresponding conversion link of target VPN, And the corresponding conversion link of other corresponding VPN of aggregating tunnel no longer forwards the message of target VPN.As it can be seen that for entirely polymerizeing For tunnel, the message of VPN can only be forwarded to the corresponding destination node of the VPN itself, without being forwarded to other VPN Corresponding destination node.Therefore, the link in aggregating tunnel, which can be avoided, be used to forward useless message, to save net Floating resources in network.
Detailed description of the invention
In order to illustrate the technical solutions in the embodiments of the present application or in the prior art more clearly, to embodiment or will show below There is attached drawing needed in technical description to be briefly described, it should be apparent that, the accompanying drawings in the following description is only this The some embodiments recorded in application, for those of ordinary skill in the art, without creative efforts, It is also possible to obtain other drawings based on these drawings.
Fig. 1 is a kind of flow diagram of message processing method in the embodiment of the present invention；
Fig. 2 is a kind of flow diagram for the method for establishing aggregating tunnel in the embodiment of the present invention；
Fig. 3 is a kind of exemplary configuration diagram of aggregating tunnel in the embodiment of the present invention；
Fig. 4 is a kind of structural schematic diagram of message process device in the embodiment of the present invention；
Fig. 5 is a kind of structural schematic diagram for the device for establishing aggregating tunnel in the embodiment of the present invention.
Specific embodiment
In order to make those skilled in the art more fully understand application scheme, below in conjunction in the embodiment of the present application Attached drawing, the technical scheme in the embodiment of the application is clearly and completely described, it is clear that described embodiment is only this Apply for a part of the embodiment, instead of all the embodiments.Based on the embodiment in the application, those of ordinary skill in the art exist Every other embodiment obtained under the premise of creative work is not made, shall fall in the protection scope of this application.
Inventor has found that when multiple VPN are E-Packeted using the same aggregating tunnel, the forwarding of aggregating tunnel Node is actually that all VPN provide identical tunnel label, and therefore, the forward node of aggregating tunnel is to receiving The message of different VPN is to carry out identical forward process according to identical tunnel label.Message in order to guarantee different VPN is final It can be forwarded to the corresponding destination node of its VPN, the forward node of aggregating tunnel needs to pass through the message of different VPN all The corresponding conversion link of VPN forwards.But for a VPN, in order to realize the message forwarding of the VPN, the VPN Message only need by the forward node of aggregating tunnel the corresponding conversion link of the VPN be forwarded, without by The corresponding conversion link of other VPN is forwarded on the forward node of aggregating tunnel.As it can be seen that the forward node of aggregating tunnel will not Message with VPN is forwarded by the corresponding conversion link of all VPN, can result in many links in aggregating tunnel by with In a large amount of useless messages of forwarding, to cause the waste of floating resources in network.
To solve the above-mentioned problems, in embodiments of the present invention, the forward node of aggregating tunnel can be according to tunnel label Processing is forwarded to the message of VPN jointly with VPN label.Wherein, tunnel label carries semantic marker.With aggregating tunnel pair Any one VPN answered is as target VPN, configured with for recording target VPN and target on the forward node of aggregating tunnel The subtree information of the corresponding conversion link of VPN mapping relations between the next node after the forward node.The forwarding section Point, by reading tunnel label, can go down to read message when receiving the message of target VPN in the instruction of the semantic marker In VPN label and target VPN is forwarded to the next node according to the VPN label that reads and configured subtree information Message.Therefore, on the forward node of aggregating tunnel, the message of target VPN can only pass through the corresponding forwarding chain of target VPN Road is forwarded, and the corresponding conversion link of other corresponding VPN of aggregating tunnel no longer forwards the message of target VPN.Therefore, gather It closes the link in tunnel and can be avoided and be used to forward useless message, to save the floating resources in network.
With reference to the accompanying drawing, by embodiment, come the present invention will be described in detail, middle message processing method and device and foundation are poly- Close the specific implementation of the method and apparatus in tunnel.
Referring to Fig. 1, a kind of flow diagram of message processing method in the embodiment of the present invention is shown.In the present embodiment In, the method for example can specifically include following steps:
S101, the first forward node receive object message, and first forward node belongs to the forward node of aggregating tunnel.
Wherein, the first forward node can be any one forward node on aggregating tunnel.For example, the first forward node It can be the corresponding source node of object message.For another example, the first forward node can be the corresponding intermediate node of object message.
It is understood that object message can be the multicast message forwarded using aggregating tunnel.The aggregating tunnel can be with It is the message for forwarding multiple VPN, which belongs to one of VPN, which is target VPN.Wherein, The aggregating tunnel specifically can be P2MP aggregating tunnel.
S102, first forward node identify the destination virtual dedicated network VPN of the object message ownership, the mesh Mark VPN belongs to the VPN to E-Packet using the aggregating tunnel.
In the present embodiment, different types of first forward node can identify that in different ways object message is returned The target VPN of category.
In some embodiments of the present embodiment, the first forward node can be the corresponding source node of target VPN.Due to There are no packaging V PN label when object message reaches the first forward node, S102 can be with specifically: the first forward node root According to the incoming interface or packaging information in the object message, the target VPN of the object message ownership is determined.
In other embodiments of the present embodiment, the first forward node can be the corresponding intermediate node of target VPN. Since the corresponding source node of target VPN encapsulates VPN label in object message, object message is when reaching the first forward node VPN label is encapsulated, therefore, the VPN label in object message can be read directly to identify target in the first forward node The target VPN of message ownership.It is understood that object message is when reaching the first forward node as intermediate node, mesh The outer layer label for marking message is corresponding second tunnel label of the first forward node under aggregating tunnel, the vpn label of object message For VPN label.In the repeating process of object message, the outer layer label that intermediate node usually only reads message to carry out message Forward process is forwarded processing to message without can read the vpn label of message.In order to enable intermediate node can be read To VPN label, a semantic marker can be carried in the tunnel label of aggregating tunnel, which can be used for triggering centre Node goes to read VPN label.Specifically, S102 for example may include: that first forward node is read in the object message Second tunnel label of encapsulation, second tunnel label are the corresponding tunnel of the first forward node described under the aggregating tunnel Road label, second tunnel label carry the semantic marker；First forward node is in response to recognizing described The semantic marker that two tunnel labels carry, reads next layer of label of the second tunnel label described in the object message, Obtain the VPN label；First forward node is according to the mapping relations between the VPN label and the target VPN, really The target VPN of the fixed VPN label ownership.In the object message, the VPN label is second tunnel label Next layer of label.Wherein, the example of the mapping relations between a VPN label and the target VPN can be (Label=LABEL_RED, vpn=VPN_RED), wherein VPN_RED is the mark of target VPN, and LABEL_RED is target The VPN label of VPN.
S103, first forward node search subtree information of the target VPN on first forward node, institute Stating subtree information record has a mapping relations between the target VPN and the second forward node, second forward node be Next node on the corresponding conversion link of the target VPN after first forward node.
It should be noted that having according to the message forwarding mechanism of aggregating tunnel, on the first forward node based on polymerization tunnel The elite stand information in road.In the elite stand information, the tunnel label that each VPN is used all be it is identical, which has mapped Aggregating tunnel corresponding all conversion links on the first forward node.Therefore, the object message of target VPN is according only to the forwarding List item will be forwarded by the corresponding all conversion links of aggregating tunnel on the first forward node.For example, elite stand information Example can be (parent_treeid=P2MP_ID, role=branch, inlabel=Context-Label- Assigned-By-AP1, tree=<oif=AP2/AP3>)." P2MP_ID " is the mark of aggregating tunnel."Context- Label-Assigned-By-AP1 " is the corresponding tunnel label of forward node AP1 namely forward node AP1 under aggregating tunnel Distribute to the tunnel label of other forward node."<oif=AP2/AP3>" indicates that aggregating tunnel is corresponding on the first forward node Conversion link.As it can be seen that after object message reaches forward node AP1, forwarding AP1 will be to according to tunnel label and elite stand information Forward node AP2 and AP3 forward object message, and in other words, forward node AP2 and forward node AP3 will receive target report Text.
In order to avoid such case, the first forward node also has for recording between target VPN and the second forward node The subtree information of mapping relations, wherein after the second forward node is the first forward node on the corresponding conversion link of target VPN Next node.Therefore, the first forward node, can be only by target VPN in the first forward node according to the subtree information The message of upper corresponding conversion link forwarding target VPN, and no longer pass through other VPN corresponding forwarding on the first forward node The message of link forwarding target VPN.Wherein, which can specifically include the mark and the second forward node of target VPN Mark.For example, the example of a subtree information can be (vpn=VPN_RED, subtree=<oif=AP2>), wherein " VPN_RED " is the mark of target VPN, and "<oif=AP2>" indicates target VPN corresponding forwarding chain on the first forward node Road.As it can be seen that forward node, will according to tunnel label, VPN label and subtree information after object message reaches forward node AP1 Object message only is forwarded to forward node AP2, and no longer forwards object message to forward node AP3.
S104, first forward node encapsulate the first tunnel according to the subtree information found in the object message The VPN label of road label and the target VPN, and the tunnel label and described is packaged with to second forward node forwarding The object message of VPN label.
First tunnel label is the corresponding tunnel label of the second forward node described under the aggregating tunnel；Described One tunnel label is that second forward node distributes to first forward node；First tunnel label carries language Justice label；The semantic marker is used to indicate second forward node and reads first tunnel in the object message The VPN label of the object message is read when road label；The VPN label is used to indicate second forward node and knows Not Chu object message ownership the target VPN.
It is understood that the first forward node forwards the object message to the second forward node, the specifically can be One forward node replicates object message to the corresponding oif list of the second forward node.First tunnel label and VPN label It can be and be encapsulated into object message during duplication.For example, in a kind of example of encapsulation, the first forward node is to It, can be by " vpn_label=LABEL_RED " and " parent_label=when two forward node forward object message Context-Label-Assigned-By-AP2 " is encapsulated into object message.Wherein, " LABEL_RED " indicates VPN label, " Context-Label-Assigned-By-AP2 " indicates that the second forward node is assigned to the tunnel label of the first forward node, That is, the tunnel label is the first tunnel label.Wherein, " Context-Label " is the semantic marker.
If the first forward node is the corresponding source node of target VPN, the first forward node can by the first tunnel label and VPN label is encapsulated into the object message received, then the object message after encapsulation is transmitted to the second forward node.
If the first forward node is the corresponding intermediate node of target VPN, the first forward node can be first by second tunnel Road label and the VPN label are popped up from the object message received as a whole, then by the first tunnel mark Label and VPN label are encapsulated into object message as a whole, then the object message after encapsulation is transmitted to the second forwarding section Point.Alternatively, the first forward node can be first by second tunnel if the first forward node is the corresponding intermediate node of target VPN Road label is popped up from the object message received, and then first tunnel label is encapsulated into object message, then Object message after encapsulation is transmitted to the second retransmission unit.
If the second forward node is the corresponding intermediate node of target VPN, the second forward node can be according to the first tunnel Label and VPN label are forwarded processing to the object message, and for details, reference can be made to aforementioned first forward node according to the second tunnel Road label and VPN label are forwarded the embodiment of processing to the object message, and details are not described herein for the present embodiment.
If the second forward node is the corresponding destination node of target VPN, the second forward node can be incited somebody to action according to VPN label The object message is forwarded to the local device of the target VPN.
It should be noted that aforementioned second tunnel label, semantic marker, VPN label and subtree information can be by network Equipment is that the first forward node is distributed and issued.Similarly, it is second that aforementioned first tunnel label, which can be by the network equipment, Forward node is distributed and is issued.Wherein, the network equipment can be any one equipment in network.For example, the net Network equipment can be control node, such as SDN controller.For another example, the network equipment can be any one turn of aggregating tunnel Send out node.
If the network equipment is control node, first tunnel label can be logical by open flows OpenFlow Road issues, and the semantic marker can be to be issued by the channel OpenFlow, and the VPN label can be logical by OpenFlow Road or Border Gateway Protocol (English: Border Gateway Protocol, abbreviation BGP) channel issue, and the subtree information is logical The channel OpenFlow is crossed to issue.
It is understood that the present embodiment can be applied to virtual access system.Specifically, the aggregating tunnel can position In virtual access system, the virtual access system all forward node be access node (English Access Point, Abbreviation AP).Access node needs to handle VPN label originally, and forwarding section all in virtual access system Point is access node, it is seen then that the VPN label and target VPN of target VPN are configured on the forward node in virtual access system Subtree information, not will increase system be tag processes expend resource.
The forward node of technical solution through this embodiment, aggregating tunnel can be total according to tunnel label and VPN label It carries out turning reason with the message to VPN.Wherein, tunnel label carries semantic marker.With any one corresponding VPN of aggregating tunnel As target VPN, configured with for recording target VPN forwarding chain corresponding with target VPN on the forward node of aggregating tunnel The subtree information of road mapping relations between the next node after the forward node.The forward node is receiving target By reading tunnel label when the message of VPN, it can go down to read VPN label in message simultaneously root in the instruction of the semantic marker The message of target VPN is forwarded to the next node according to the VPN label and configured subtree information read.Therefore, exist On the forward node of aggregating tunnel, the message of target VPN can be only forwarded by the corresponding conversion link of target VPN, and The corresponding conversion link of other corresponding VPN of aggregating tunnel no longer forwards the message of target VPN.Therefore, the chain in aggregating tunnel Road, which can be avoided, be used to forward useless message, to save the floating resources in network.
Referring to fig. 2, a kind of flow diagram for the method for establishing aggregating tunnel in the embodiment of the present invention is shown.In this reality It applies in example, the method for example may include:
S201, the forward node that the network equipment is the aggregating tunnel distribute the forward node under the aggregating tunnel Corresponding tunnel label, and the tunnel label is issued to the forward node.
Specifically, the network equipment can calculate the link information of aggregating tunnel according to the topology being collected into.Link letter Breath has recorded all conversion links of the aggregating tunnel.For example, in aggregating tunnel example shown in Fig. 3, the aggregating tunnel Link information indicate, the conversion link of the aggregating tunnel includes link, forward node of the forward node M1 to forward node AP1 The link of M1 to forward node AP4, the link of forward node AP1 to forward node AP2 and forward node AP1 are to forward node The link of AP3.Then, the network equipment can be each forward node point of aggregating tunnel according to the link information of aggregating tunnel It fits over the corresponding tunnel label of the forward node under aggregating tunnel and is handed down to each forward node.Wherein, the network equipment can lead to It crosses RSVP-TE signaling and issues tunnel label to each forward node, alternatively, if the network equipment is control node (Master), network Equipment can also issue tunnel label to each forward node by the channel OpenFlow.
S202, the network equipment issue the semantic marker of the tunnel label to the forward node, described in instruction Forward node carries the semantic marker in the tunnel label.
Wherein, which specifically can be a BOOL phenotypic marker.Forward node when receiving the semantic marker, The semantic marker can will be stamped in the corresponding tunnel label of the forward node under aggregating tunnel.For example, a kind of semantic marker Example can be " Context-Label ".It is marked when entering label in the message that forwarding receives comprising " Context-Label " When, the label substance in message in the space of " Context-Label " label is popped up to and is checked next layer of mark of tunnel label Next layer of label is placed in the space of " Context-Label " label and searches tag processes table by label.
It is understood that if the network equipment is control node, the network equipment can be by the channel OpenFlow to institute It states forward node and issues the semantic marker.
S203, the network equipment are that target VPN distributes VPN label, and issues the VPN mark to the forward node Label.
It can be target VPN distribution one when system needs to configure a target VPN to E-Packet using aggregating tunnel A VPN label and the forward node for being handed down to aggregating tunnel.Wherein, in order to issue VPN label, the network equipment is actually handed down to Forward node can be the mapping relations between the mark and VPN label of target VPN.For example, a kind of mark of target VPN with Mapping relations example between VPN label can be (Label=LABEL_RED, vpn=VPN_RED), wherein VPN_RED is The mark of target VPN, LABEL_RED are the VPN label of target VPN.
It is understood that the network equipment can pass through the channel OpenFlow or side if the network equipment is control node The boundary channel gateway protocol BGP issues the VPN label to the forward node.
S204, the network equipment determine on the corresponding conversion link of the target VPN after the forward node Next node, generates subtree information of the target VPN on the forward node, and issues to the forward node described Subtree information, wherein the subtree information record has the mapping relations between the target VPN and the next node.
The semantic marker of the tunnel label is used to indicate the forward node and reads in the object message received The VPN label of the object message is read when the tunnel label, the object message is the message of the target VPN； The VPN label is used to indicate the target VPN that the forward node identifies the object message ownership；The subtree Information is used to indicate the forward node to the next node and forwards the object message.
Specifically, the network equipment can determine the next node after the forward node, base according to the link of target VPN Subtree information of the target VPN on the forward node is generated in this and issues the subtree information.For example, polymerization shown in Fig. 3 In tunnel example, if target VPN's is identified as VPN_RED, the forward node of target VPN includes AP1 and AP2, the target The link of VPN includes the link of the link of forward node M1 to forward node AP1, forward node AP1 to forward node AP2.It is right For forward node AP1, subtree information of the target VPN on forward node AP1 can be (vpn=VPN_RED, subtree =<oif=AP2>), wherein VPN_RED is the mark of target VPN, and<oif=AP2>indicates to turn on the conversion link of target VPN The next node for sending out node AP1 is forward node AP2.
It is understood that the network equipment can pass through the channel OpenFlow or side if the network equipment is control node The boundary channel gateway protocol BGP issues the VPN label to the forward node.
In addition, the network equipment can also for aggregating tunnel forward node generate the elite stand information based on tunnel label and under Issue forward node.It wherein, may include mark, the class of forward node of aggregating tunnel in the elite stand information of forward node Type mark, the corresponding tunnel label of forward node, next node of the aggregating tunnel after forward node.For example, in Fig. 3 institute In the aggregating tunnel example shown, the elite stand information of forward node AP1 can be (parent_treeid=P2MP_ID, role= Branch, inlabel=Context-Label-Assigned-By-AP1, tree=<oif=AP2/AP3>), wherein The value of parent_treeid is the mark of aggregating tunnel, and the value of role is the type identification (type that root is indicated of forward node For root node, the type that leaf is indicated is leaf node, and the type that branch is indicated is crossover node), the value of inlabel be The tunnel label of forward node under aggregating tunnel, the value of tree indicate next node of the aggregating tunnel after forward node.
It should be noted that network equipment issues tunnel label, semantic marker, VPN label and subtree letter to forward node After breath, forward node may refer to aforementioned embodiment shown in FIG. 1 to be forwarded processing to message, and the present embodiment is herein not It repeats again.
It is understood that the present embodiment can be applied to virtual access system.Specifically, the aggregating tunnel can position In virtual access system, the virtual access system all forward node be access node (English Access Point, Abbreviation AP).Access node needs to handle VPN label originally, and forwarding section all in virtual access system Point is access node, it is seen then that the VPN label and target VPN of target VPN are configured on the forward node in virtual access system Subtree information, not will increase system be tag processes expend resource.
The forward node of technical solution through this embodiment, aggregating tunnel can be total according to tunnel label and VPN label It carries out turning reason with the message to VPN.Wherein, tunnel label carries semantic marker.With any one corresponding VPN of aggregating tunnel As target VPN, configured with for recording target VPN forwarding chain corresponding with target VPN on the forward node of aggregating tunnel The subtree information of road mapping relations between the next node after the forward node.The forward node is receiving target By reading tunnel label when the message of VPN, it can go down to read VPN label in message simultaneously root in the instruction of the semantic marker The message of target VPN is forwarded to the next node according to the VPN label and configured subtree information read.Therefore, exist On the forward node of aggregating tunnel, the message of target VPN can be only forwarded by the corresponding conversion link of target VPN, and The corresponding conversion link of other corresponding VPN of aggregating tunnel no longer forwards the message of target VPN.Therefore, the chain in aggregating tunnel Road, which can be avoided, be used to forward useless message, to save the floating resources in network.
Referring to fig. 4, a kind of structural schematic diagram of message process device in the embodiment of the present invention is shown.In the present embodiment In, described device can be configured at the first forward node, and described device for example can specifically include:
First receiving unit 401, for receiving object message, first forward node belongs to the forwarding section of aggregating tunnel Point；
Recognition unit 402, destination virtual the dedicated network VPN, the target VPN that the object message belongs to for identification Belong to the VPN to E-Packet using the aggregating tunnel；
Searching unit 403, for searching subtree information of the target VPN on first forward node, the son Tree information record has the mapping relations between the target VPN and the second forward node, and second forward node is described Next node on the corresponding conversion link of target VPN after first forward node；
Encapsulation unit 404, for encapsulating the first tunnel label in the object message according to the subtree information found With the VPN label of the target VPN；
Retransmission unit 405, for being packaged with the tunnel label and the VPN label to second forward node forwarding Object message；
First tunnel label is the corresponding tunnel label of the second forward node described under the aggregating tunnel；Described One tunnel label is that second forward node is sent to first forward node；First tunnel label carries language Justice label；The semantic marker is used to indicate second forward node and reads first tunnel in the object message The VPN label of the object message is read when road label；The VPN label is used to indicate second forward node and knows Not Chu object message ownership the target VPN.
Optionally, first forward node is the corresponding source node of the target VPN；
The recognition unit, specifically for determining the mesh according to the incoming interface or packaging information in the object message Mark the target VPN of message ownership.
Optionally, first forward node is the corresponding intermediate node of the target VPN；
The recognition unit, is specifically used for:
The second tunnel label encapsulated in the object message is read, second tunnel label is in the aggregating tunnel Under the corresponding tunnel label of first forward node, second tunnel label carries the semantic marker；
The semantic marker carried in response to recognizing second tunnel label, reads described in the object message Next layer of label of the second tunnel label, obtains the VPN label；
First forward node according to the mapping relations between the VPN label and the target VPN, determine described in The target VPN of VPN label ownership.
Optionally, described device further include:
Unit is popped up, for popping up second tunnel label from the object message.
Optionally, described device further include:
Second receiving unit, for receiving second tunnel label, the semantic marker that the network equipment issues, described VPN label and the subtree information.
Optionally, the network equipment is control node, and first tunnel label passes through the channel open flows OpenFlow It issues, the semantic marker is issued by the channel OpenFlow, and the VPN label is assisted by the channel OpenFlow or borde gateway The view channel BGP issues, and the subtree information is issued by the channel OpenFlow.
Optionally, the aggregating tunnel is located at virtual access system, all forward node in the virtual access system It is access node.
The forward node of technical solution through this embodiment, aggregating tunnel can be total according to tunnel label and VPN label It carries out turning reason with the message to VPN.Wherein, tunnel label carries semantic marker.With any one corresponding VPN of aggregating tunnel As target VPN, configured with for recording target VPN forwarding chain corresponding with target VPN on the forward node of aggregating tunnel The subtree information of road mapping relations between the next node after the forward node.The forward node is receiving target By reading tunnel label when the message of VPN, it can go down to read VPN label in message simultaneously root in the instruction of the semantic marker The message of target VPN is forwarded to the next node according to the VPN label and configured subtree information read.Therefore, exist On the forward node of aggregating tunnel, the message of target VPN can be only forwarded by the corresponding conversion link of target VPN, and The corresponding conversion link of other corresponding VPN of aggregating tunnel no longer forwards the message of target VPN.Therefore, the chain in aggregating tunnel Road, which can be avoided, be used to forward useless message, to save the floating resources in network.
Referring to Fig. 5, a kind of structural schematic diagram for the device for establishing aggregating tunnel in the embodiment of the present invention is shown.In this reality It applies in example, described device can be configured at the network equipment, and described device for example can specifically include:
First allocation unit 501 is distributed described under the aggregating tunnel for the forward node for the aggregating tunnel The corresponding tunnel label of forward node；
First issuance unit 502, for issuing the tunnel label to the forward node；
Second issuance unit 503, for issuing the semantic marker of the tunnel label to the forward node, to indicate It states forward node and carries the semantic marker in the tunnel label；
Second allocation unit 504, for distributing VPN label for target VPN；
Third issuance unit 505, for issuing the VPN label to the forward node；
Generation unit 506, for determine on the corresponding conversion link of the target VPN after the forward node under One node generates subtree information of the target VPN on the forward node；
4th issuance unit 507, for issuing the subtree information to the forward node, wherein the subtree information Record has the mapping relations between the target VPN and the next node；The semantic marker of the tunnel label, for referring to Show and is read described in the object message when forward node reads the tunnel label in the object message received VPN label, the object message are the messages of the target VPN；The VPN label is used to indicate the forward node identification The target VPN of the object message ownership out；The subtree information is used to indicate the forward node to described next Node forwards the object message.
Optionally, the network equipment is control node；
First issuance unit, it is described specifically for being issued by the channel open flows OpenFlow to the forward node Tunnel label；
Second issuance unit, specifically for issuing the semantic mark to the forward node by the channel OpenFlow Note；
The third issuance unit is specifically used for through the channel OpenFlow or Border Gateway Protocol (BGP) channel to described Forward node issues the VPN label；
4th issuance unit is believed specifically for issuing the subtree to the forward node by the channel OpenFlow Breath.
Optionally, the aggregating tunnel is located at virtual access system, all forward node in the virtual access system It is access node.
The forward node of technical solution through this embodiment, aggregating tunnel can be total according to tunnel label and VPN label It carries out turning reason with the message to VPN.Wherein, tunnel label carries semantic marker.With any one corresponding VPN of aggregating tunnel As target VPN, configured with for recording target VPN forwarding chain corresponding with target VPN on the forward node of aggregating tunnel The subtree information of road mapping relations between the next node after the forward node.The forward node is receiving target By reading tunnel label when the message of VPN, it can go down to read VPN label in message simultaneously root in the instruction of the semantic marker The message of target VPN is forwarded to the next node according to the VPN label and configured subtree information read.Therefore, exist On the forward node of aggregating tunnel, the message of target VPN can be only forwarded by the corresponding conversion link of target VPN, and The corresponding conversion link of other corresponding VPN of aggregating tunnel no longer forwards the message of target VPN.Therefore, the chain in aggregating tunnel Road, which can be avoided, be used to forward useless message, to save the floating resources in network.
It should be noted that, in this document, relational terms such as first and second and the like are used merely to a reality Body or operation are distinguished with another entity or operation, are deposited without necessarily requiring or implying between these entities or operation In any actual relationship or order or sequence.The terms "include", "comprise" or its any other variant are intended to non-row His property includes, so that the process, method, article or equipment for including a series of elements not only includes those elements, and And further include other elements that are not explicitly listed, or further include for this process, method, article or equipment institute it is intrinsic Element.In the absence of more restrictions, the element limited by sentence "including a ...", it is not excluded that including institute State in the process, method, article or equipment of element that there is also other identical elements.
For system embodiments, since it corresponds essentially to embodiment of the method, so related place is referring to method reality Apply the part explanation of example.System embodiment described above is only schematical, wherein described be used as separation unit The unit of explanation may or may not be physically separated, and component shown as a unit can be or can also be with It is not physical unit, it can it is in one place, or may be distributed over multiple network units.It can be according to actual It needs that some or all of the modules therein is selected to achieve the purpose of the solution of this embodiment.Those of ordinary skill in the art are not In the case where making the creative labor, it can understand and implement.
The above is only the specific embodiment of the application, it is noted that for the ordinary skill people of the art For member, under the premise of not departing from the application principle, several improvements and modifications can also be made, these improvements and modifications are also answered It is considered as the protection scope of the application.
Claims (12)
1.一种报文处理方法，其特征在于，包括：1. a message processing method, is characterized in that, comprises: 第一转发节点接收目标报文，所述第一转发节点属于聚合隧道的转发节点；The first forwarding node receives the target message, and the first forwarding node belongs to the forwarding node of the aggregation tunnel; 所述第一转发节点识别所述目标报文归属的目标虚拟专用网络VPN，所述目标VPN属于使用所述聚合隧道转发报文的VPN；The first forwarding node identifies the target virtual private network VPN to which the target packet belongs, and the target VPN belongs to the VPN that uses the aggregation tunnel to forward packets; 所述第一转发节点查找所述目标VPN在所述第一转发节点上的子树信息，所述子树信息记录有所述目标VPN与第二转发节点之间的映射关系，所述第二转发节点为在所述目标VPN对应的转发链路上所述第一转发节点之后的下一个节点；The first forwarding node searches for the subtree information of the target VPN on the first forwarding node, where the subtree information records the mapping relationship between the target VPN and the second forwarding node, and the second forwarding node records the mapping relationship between the target VPN and the second forwarding node. The forwarding node is the next node after the first forwarding node on the forwarding link corresponding to the target VPN; 所述第一转发节点根据查找到的子树信息，在所述目标报文中封装第一隧道标签和所述目标VPN的VPN标签，并向所述第二转发节点转发封装有所述隧道标签和所述VPN标签的目标报文；The first forwarding node encapsulates the first tunnel label and the VPN label of the target VPN in the target message according to the found subtree information, and forwards the encapsulated tunnel label to the second forwarding node. and the target packet of the VPN label; 所述第一隧道标签为所述聚合隧道下所述第二转发节点对应的隧道标签；所述第一隧道标签是所述第二转发节点分配给所述第一转发节点的；所述第一隧道标签携带有语义标记；所述语义标记，用于指示所述第二转发节点在所述目标报文中读取到所述第一隧道标签时读取所述目标报文的所述VPN标签；所述VPN标签，用于指示所述第二转发节点识别出所述目标报文归属的所述目标VPN。The first tunnel label is a tunnel label corresponding to the second forwarding node under the aggregated tunnel; the first tunnel label is allocated by the second forwarding node to the first forwarding node; the first forwarding node The tunnel label carries a semantic mark; the semantic mark is used to instruct the second forwarding node to read the VPN label of the target packet when the first tunnel label is read in the target packet ; the VPN label is used to instruct the second forwarding node to identify the target VPN to which the target packet belongs. 2.根据权利要求1所述的方法，其特征在于，所述第一转发节点为所述目标VPN对应的源节点；2. The method according to claim 1, wherein the first forwarding node is a source node corresponding to the target VPN; 所述第一转发节点识别所述目标报文归属的目标虚拟专用网络VPN，具体为：所述第一转发节点根据所述目标报文中的入接口或封装信息，确定所述目标报文归属的目标VPN。Identifying, by the first forwarding node, the target virtual private network VPN to which the target packet belongs, specifically: the first forwarding node determines the attribution of the target packet according to the ingress interface or encapsulation information in the target packet target VPN. 3.根据权利要求1所述的方法，其特征在于，所述第一转发节点为所述目标VPN对应的中间节点；3. The method according to claim 1, wherein the first forwarding node is an intermediate node corresponding to the target VPN; 所述第一转发节点识别所述目标报文归属的目标虚拟专用网络VPN，包括：The first forwarding node identifies the target virtual private network VPN to which the target packet belongs, including: 所述第一转发节点读取所述目标报文中封装的第二隧道标签，所述第二隧道标签为在所述聚合隧道下所述第一转发节点对应的隧道标签，所述第二隧道标签携带有所述语义标记；The first forwarding node reads the second tunnel label encapsulated in the target packet, where the second tunnel label is the tunnel label corresponding to the first forwarding node under the aggregated tunnel, and the second tunnel label is The tag carries the semantic mark; 所述第一转发节点响应于识别到所述第二隧道标签携带的所述语义标记，读取所述目标报文中所述第二隧道标签的下一层标签，得到所述VPN标签；The first forwarding node, in response to recognizing the semantic label carried by the second tunnel label, reads the label of the next layer of the second tunnel label in the target packet to obtain the VPN label; 所述第一转发节点根据所述VPN标签与所述目标VPN之间的映射关系，确定所述VPN标签归属的所述目标VPN。The first forwarding node determines the target VPN to which the VPN label belongs according to the mapping relationship between the VPN label and the target VPN. 4.根据权利要求3所述的方法，其特征在于，还包括：4. The method of claim 3, further comprising: 第一转发节点从所述目标报文中弹出所述第二隧道标签。The first forwarding node pops the second tunnel label from the target packet. 5.根据权利要求3所述的方法，其特征在于，还包括：5. The method of claim 3, further comprising: 所述第一转发节点接收网络设备下发的所述第二隧道标签、所述语义标记、所述VPN标签和所述子树信息。The first forwarding node receives the second tunnel label, the semantic label, the VPN label and the subtree information delivered by the network device. 6.根据权利要求5所述的方法，其特征在于，所述网络设备为控制节点，所述第一隧道标签通过开放流OpenFlow通道下发，所述语义标记通过OpenFlow通道下发，所述VPN标签通过OpenFlow通道或边界网关协议BGP通道下发，所述子树信息通过OpenFlow通道下发。6. The method according to claim 5, wherein the network device is a control node, the first tunnel label is delivered through an OpenFlow channel, the semantic label is delivered through an OpenFlow channel, and the VPN is delivered through an OpenFlow channel. The label is delivered through the OpenFlow channel or the Border Gateway Protocol BGP channel, and the subtree information is delivered through the OpenFlow channel. 7.根据权利要求1所述的方法，其特征在于，所述聚合隧道位于虚拟接入系统，所述虚拟接入系统中所有的转发节点均为接入节点。7 . The method according to claim 1 , wherein the aggregation tunnel is located in a virtual access system, and all forwarding nodes in the virtual access system are access nodes. 8 . 8.一种建立聚合隧道的方法，其特征在于，包括：8. A method for establishing an aggregated tunnel, comprising: 网络设备为所述聚合隧道的转发节点分配在所述聚合隧道下所述转发节点对应的隧道标签，并向所述转发节点下发所述隧道标签；The network device allocates a tunnel label corresponding to the forwarding node under the aggregated tunnel to the forwarding node of the aggregated tunnel, and delivers the tunnel label to the forwarding node; 所述网络设备向所述转发节点下发所述隧道标签的语义标记，以指示所述转发节点在所述隧道标签中携带所述语义标记；delivering, by the network device, the semantic mark of the tunnel label to the forwarding node, to instruct the forwarding node to carry the semantic mark in the tunnel label; 所述网络设备为目标VPN分配VPN标签，并向所述转发节点下发所述VPN标签；The network device allocates a VPN label to the target VPN, and issues the VPN label to the forwarding node; 所述网络设备确定在所述目标VPN对应的转发链路上所述转发节点之后的下一个节点，生成所述目标VPN在所述转发节点上的子树信息，并向所述转发节点下发所述子树信息，其中，所述子树信息记录有所述目标VPN与所述下一个节点之间的映射关系；The network device determines the next node after the forwarding node on the forwarding link corresponding to the target VPN, generates subtree information of the target VPN on the forwarding node, and delivers it to the forwarding node The subtree information, wherein the subtree information records the mapping relationship between the target VPN and the next node; 所述隧道标签的语义标记，用于指示所述转发节点在接收到的目标报文中读取到所述隧道标签时读取所述目标报文的所述VPN标签，所述目标报文是所述目标VPN的报文；所述VPN标签，用于指示所述转发节点识别出所述目标报文归属的所述目标VPN；所述子树信息，用于指示所述转发节点向所述下一个节点转发所述目标报文。The semantic mark of the tunnel label is used to instruct the forwarding node to read the VPN label of the target packet when the tunnel label is read in the received target packet, and the target packet is the message of the target VPN; the VPN label is used to instruct the forwarding node to identify the target VPN to which the target message belongs; the subtree information is used to instruct the forwarding node to send the message to the The next node forwards the target message. 9.根据权利要求8所述的方法，其特征在于，所述网络设备为控制节点；9. The method according to claim 8, wherein the network device is a control node; 所述向所述转发节点下发所述隧道标签，具体为：通过开放流OpenFlow通道向所述转发节点下发所述隧道标签；The delivering the tunnel label to the forwarding node is specifically: delivering the tunnel label to the forwarding node through an OpenFlow OpenFlow channel; 所述向所述转发节点下发所述隧道标签的语义标记，具体为：通过OpenFlow通道向所述转发节点下发所述语义标记；The delivering the semantic label of the tunnel label to the forwarding node is specifically: delivering the semantic label to the forwarding node through an OpenFlow channel; 所述向所述转发节点下发所述VPN标签，具体为：通过OpenFlow通道或边界网关协议BGP通道向所述转发节点下发所述VPN标签；The delivering the VPN label to the forwarding node is specifically: delivering the VPN label to the forwarding node through an OpenFlow channel or a Border Gateway Protocol BGP channel; 所述向所述转发节点下发所述子树信息，具体为：通过OpenFlow通道向所述转发节点下发所述子树信息。The delivering the subtree information to the forwarding node is specifically: delivering the subtree information to the forwarding node through an OpenFlow channel. 10.根据权利要求8所述的方法，其特征在于，所述聚合隧道位于虚拟接入系统，所述虚拟接入系统中所有的转发节点均为接入节点。10 . The method according to claim 8 , wherein the aggregated tunnel is located in a virtual access system, and all forwarding nodes in the virtual access system are access nodes. 11 . 11.一种报文处理装置，其特征在于，配置于第一转发节点，包括：11. A message processing device, characterized in that, configured on a first forwarding node, comprising: 接收单元，用于接收目标报文，所述第一转发节点属于聚合隧道的转发节点；a receiving unit, configured to receive the target message, the first forwarding node belongs to the forwarding node of the aggregation tunnel; 识别单元，用于识别所述目标报文归属的目标虚拟专用网络VPN，所述目标VPN属于使用所述聚合隧道转发报文的VPN；an identification unit, configured to identify a target virtual private network VPN to which the target message belongs, where the target VPN belongs to a VPN that uses the aggregation tunnel to forward messages; 查找单元，用于查找所述目标VPN在所述第一转发节点上的子树信息，所述子树信息记录有所述目标VPN与第二转发节点之间的映射关系，所述第二转发节点为在所述目标VPN对应的转发链路上所述第一转发节点之后的下一个节点；a search unit, configured to search the subtree information of the target VPN on the first forwarding node, where the subtree information records the mapping relationship between the target VPN and the second forwarding node, the second forwarding The node is the next node after the first forwarding node on the forwarding link corresponding to the target VPN; 封装单元，用于根据查找到的子树信息，在所述目标报文中封装第一隧道标签和所述目标VPN的VPN标签；an encapsulation unit, configured to encapsulate the first tunnel label and the VPN label of the target VPN in the target message according to the found subtree information; 转发单元，用于向所述第二转发节点转发封装有所述隧道标签和所述VPN标签的目标报文；a forwarding unit, configured to forward the target message encapsulated with the tunnel label and the VPN label to the second forwarding node; 所述第一隧道标签为所述聚合隧道下所述第二转发节点对应的隧道标签；所述第一隧道标签是所述第二转发节点发送给所述第一转发节点的；所述第一隧道标签携带有语义标记；所述语义标记，用于指示所述第二转发节点在所述目标报文中读取到所述第一隧道标签时读取所述目标报文的所述VPN标签；所述VPN标签，用于指示所述第二转发节点识别出所述目标报文归属的所述目标VPN。The first tunnel label is a tunnel label corresponding to the second forwarding node under the aggregated tunnel; the first tunnel label is sent by the second forwarding node to the first forwarding node; the first forwarding node The tunnel label carries a semantic label; the semantic label is used to instruct the second forwarding node to read the VPN label of the target packet when the first tunnel label is read in the target packet ; the VPN label is used to instruct the second forwarding node to identify the target VPN to which the target packet belongs. 12.一种建立聚合隧道的装置，其特征在于，配置于网络设备，包括：12. An apparatus for establishing an aggregation tunnel, characterized in that it is configured on a network device, comprising: 第一分配单元，用于为所述聚合隧道的转发节点分配在所述聚合隧道下所述转发节点对应的隧道标签；a first assigning unit, configured to assign a tunnel label corresponding to the forwarding node under the aggregated tunnel to the forwarding node of the aggregated tunnel; 第一下发单元，用于向所述转发节点下发所述隧道标签；a first issuing unit, configured to issue the tunnel label to the forwarding node; 第二下发单元，用于向所述转发节点下发所述隧道标签的语义标记，以指示所述转发节点在所述隧道标签中携带所述语义标记；a second issuing unit, configured to issue the semantic mark of the tunnel label to the forwarding node, so as to instruct the forwarding node to carry the semantic mark in the tunnel label; 第二分配单元，用于为目标VPN分配VPN标签；The second allocating unit is used for allocating a VPN label for the target VPN; 第三下发单元，用于向所述转发节点下发所述VPN标签；a third issuing unit, configured to issue the VPN label to the forwarding node; 生成单元，用于确定在所述目标VPN对应的转发链路上所述转发节点之后的下一个节点，生成所述目标VPN在所述转发节点上的子树信息；a generating unit, configured to determine the next node after the forwarding node on the forwarding link corresponding to the target VPN, and generate subtree information of the target VPN on the forwarding node; 第四下发单元，用于向所述转发节点下发所述子树信息，其中，所述子树信息记录有所述目标VPN与所述下一个节点之间的映射关系；所述隧道标签的语义标记，用于指示所述转发节点在接收到的目标报文中读取到所述隧道标签时读取所述目标报文的所述VPN标签，所述目标报文是所述目标VPN的报文；所述VPN标签，用于指示所述转发节点识别出所述目标报文归属的所述目标VPN；所述子树信息，用于指示所述转发节点向所述下一个节点转发所述目标报文。a fourth delivery unit, configured to deliver the subtree information to the forwarding node, wherein the subtree information records the mapping relationship between the target VPN and the next node; the tunnel label The semantic mark is used to instruct the forwarding node to read the VPN label of the target packet when the tunnel label is read in the received target packet, and the target packet is the target VPN The VPN label is used to instruct the forwarding node to identify the target VPN to which the target message belongs; the subtree information is used to instruct the forwarding node to forward to the next node the target message.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201511031370.2A CN105450520B (en) | 2015-12-31 | 2015-12-31 | Packet processing method and device, and method and device for establishing aggregation tunnel |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201511031370.2A CN105450520B (en) | 2015-12-31 | 2015-12-31 | Packet processing method and device, and method and device for establishing aggregation tunnel |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN105450520A CN105450520A (en) | 2016-03-30 |
| CN105450520B true CN105450520B (en) | 2019-02-19 |
Family
ID=55560322
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201511031370.2A Active CN105450520B (en) | 2015-12-31 | 2015-12-31 | Packet processing method and device, and method and device for establishing aggregation tunnel |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN105450520B (en) |
Families Citing this family (5)
* Cited by examiner, † Cited by third party| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106230730B (en) * | 2016-07-28 | 2020-02-18 | 新华三技术有限公司 | Multicast transmission method and device |
| GB2578415B (en) * | 2017-02-11 | 2022-06-08 | Pismo Labs Technology Ltd | Methods and systems for transmitting information packets through tunnel groups at a network node |
| CN109729006B (en) * | 2017-10-27 | 2021-08-31 | 中兴通讯股份有限公司 | Message processing method and device and computer readable storage medium |
| CN109862437B (en) * | 2019-03-20 | 2020-11-27 | 新华三技术有限公司 | Forwarding table item creating method and BRAS |
| CN113132235B (en) * | 2019-12-31 | 2023-03-31 | 中兴通讯股份有限公司 | Data message processing method based on virtual circuit and construction method of forwarding table item |
Citations (4)
* Cited by examiner, † Cited by third party| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1658569A (en) * | 2004-02-21 | 2005-08-24 | 华为技术有限公司 | Method for supressing oscillation of multi-protocol tag exchange tunnel in virtual private netwrok |
| CN101299723A (en) * | 2008-07-02 | 2008-11-05 | 杭州华三通信技术有限公司 | Method and apparatus for managing label switching route tunnel information |
| CN102195844A (en) * | 2010-03-02 | 2011-09-21 | 杭州华三通信技术有限公司 | Method and equipment for managing forwarding table entry |
| WO2012101689A1 (en) * | 2011-01-28 | 2012-08-02 | Nec Corporation | Communication system, forwarding node, control device, communication control method, and program |
-
2015
- 2015-12-31 CN CN201511031370.2A patent/CN105450520B/en active Active
Patent Citations (4)
* Cited by examiner, † Cited by third party| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1658569A (en) * | 2004-02-21 | 2005-08-24 | 华为技术有限公司 | Method for supressing oscillation of multi-protocol tag exchange tunnel in virtual private netwrok |
| CN101299723A (en) * | 2008-07-02 | 2008-11-05 | 杭州华三通信技术有限公司 | Method and apparatus for managing label switching route tunnel information |
| CN102195844A (en) * | 2010-03-02 | 2011-09-21 | 杭州华三通信技术有限公司 | Method and equipment for managing forwarding table entry |
| WO2012101689A1 (en) * | 2011-01-28 | 2012-08-02 | Nec Corporation | Communication system, forwarding node, control device, communication control method, and program |
Also Published As
| Publication number | Publication date |
|---|---|
| CN105450520A (en) | 2016-03-30 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN105450520B (en) | 2019-02-19 | Packet processing method and device, and method and device for establishing aggregation tunnel |
| CN105871721B (en) | 2020-05-05 | Segment routing processing method, processing device and sending device |
| CN105553849B (en) | 2019-05-17 | A kind of traditional IP and SPTN network intercommunication method and system |
| CN105553880B (en) | 2018-11-16 | Data processing method and device in a kind of software defined network |
| CN105706043A (en) | 2016-06-22 | Boosting linked list throughput |
| CN105591974B (en) | 2019-02-05 | Message processing method, apparatus and system |
| CN102724118A (en) | 2012-10-10 | Label distribution method and device |
| CN104486103B (en) | 2018-03-16 | A kind of method and apparatus of message transmissions |
| CN105051688A (en) | 2015-11-11 | Extended tag networking |
| JP6206508B2 (en) | 2017-10-04 | Packet transfer device, control device, communication system, communication method, and program |
| CN101505227A (en) | 2009-08-12 | Method, device and system for implementing point to multi-point pseudowire |
| CN109495391A (en) | 2019-03-19 | A kind of security service catenary system and data packet matched retransmission method based on SDN |
| CN105681198B (en) | 2018-11-20 | A kind of business chain processing method, equipment and system |
| WO2017031816A1 (en) | 2017-03-02 | Data transmission method, relevant device and system |
| CN106487537A (en) | 2017-03-08 | Business chain implementation method and policy control platform |
| TWI759571B (en) | 2022-04-01 | Data transfer method based on flow table |
| CN108964940A (en) | 2018-12-07 | Message method and device, storage medium |
| CN106789748A (en) | 2017-05-31 | A kind of distributed couple in multiplexer DAM stacking network system and its apparatus |
| CN103731349A (en) | 2014-04-16 | Method for conducting Ethernet virtualized message transmission between interconnection neighbors and edge device |
| CN102739502B (en) | 2016-08-31 | A kind of realize network identity conversion method, Apparatus and system |
| CN106941437A (en) | 2017-07-11 | A kind of information transferring method and device |
| CN109617995A (en) | 2019-04-12 | Management system, method and electronic device for container in tenant cluster VPC |
| CN108111413A (en) | 2018-06-01 | Method for routing, system and the equipment of stacking network |
| CN102984043B (en) | 2017-12-12 | The retransmission method and device of multicast traffic stream |
| CN106209636A (en) | 2016-12-07 | From the multicast data packet forwarding method and apparatus of VLAN to VXLAN |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| 2016-03-30 | C06 | Publication | |
| 2016-03-30 | PB01 | Publication | |
| 2016-04-27 | C10 | Entry into substantive examination | |
| 2016-04-27 | SE01 | Entry into force of request for substantive examination | |
| 2019-02-19 | GR01 | Patent grant | |
| 2019-02-19 | GR01 | Patent grant |