CN116436729B - Message transmission method, networking system and access cloud gateway - Google Patents

Abstract

This application provides a message transmission method, networking system and access cloud gateway. The user edge device in the networking system determines the first target tunnel and the first target network edge device according to the tunnel selection condition, and sends an initial message to the first target network edge device. The first target network edge device is based on the first The preset protocol encapsulates the initial message, obtains and sends the first forwarding message to the access cloud gateway in the system through the first target tunnel. Finally, the access cloud gateway passes the second target tunnel and the third target tunnel determined according to the tunnel selection conditions. The second target network edge device sends the second forwarded message obtained by processing the first forwarded message based on the preset network conversion technology and the first preset protocol to the broadband access server in the system. This method achieves a multi-homing networking mode by setting up at least two network edge devices, thereby improving bandwidth utilization efficiency and reducing operation and maintenance complexity.

Description

Message transmission method, networking system and access cloud gateway

Technical field

This application relates to the field of network technology, and in particular to a message transmission method, a networking system and an access cloud gateway.

Background technique

With the exponential growth in the number and scale of data centers, multiple data centers in different physical domains need to be interconnected. In order to reduce operation and management costs, it is also necessary to make changes to the original Layer 2 Virtual Private Network (L2VPN) technology. However, the virtual private LAN service (VPLS) in the current networking system has low efficiency and limited bandwidth utilization, and the traditional network deployment method usually involves complex configuration of the network layer. When adding or replacing certain devices, This will cause the configuration of existing sites to be affected when adding or deleting interconnected sites, increasing the complexity of operation and maintenance.

Therefore, the current technology has technical problems such as low bandwidth utilization and high operation and maintenance complexity, which need to be improved.

Contents of the invention

This application provides a message transmission method, networking system and access cloud gateway to alleviate the technical problems of low bandwidth utilization and high operation and maintenance complexity existing in the current technology.

In order to solve the above technical problems, this application provides the following technical solutions:

This application provides a message transmission method, which is applied to a networking system. The networking system includes a user edge device, at least two network edge devices, an access cloud gateway, and a broadband access server; the method includes:

The user edge device determines the first target tunnel and the first target network edge device according to the tunnel selection condition, and sends an initial message to the first target network edge device; wherein the tunnel selection condition is based on the parameters of each network edge device. At least one of the real-time device load conditions, active and backup attributes, and real-time tunnel connection and disconnection conditions is determined;

The first target network edge device encapsulates the initial message based on a first preset protocol, obtains a first forwarding message, and sends the first forwarding message to the access cloud through the first target tunnel. gateway;

The access cloud gateway determines the second target tunnel and the second target network edge device according to the tunnel selection condition; wherein the second preset link selection condition is based on the real-time device load of each network edge device, the host At least one of the equipment attributes and real-time link on-and-off conditions is determined;

The access cloud gateway processes the first forwarded message based on the preset network conversion technology and the first preset protocol to obtain a second forwarded message;

The access cloud gateway sends the second forwarding message to the broadband access server through the second target tunnel and the second target network edge device.

Correspondingly, this application also provides a networking system, including a user edge device, at least two network edge devices, an access cloud gateway and a broadband access server; wherein:

The user edge device is configured to determine a first target tunnel and a first target network edge device according to tunnel selection conditions, and send an initial message to the first target network edge device; wherein the tunnel selection conditions are based on each network At least one of the real-time device load conditions, active and backup attributes, and real-time tunnel connection and disconnection conditions of the edge device is determined;

The first target network edge device is configured to encapsulate the initial message based on a first preset protocol, obtain a first forwarding message, and send the first forwarding message to the first forwarding message through the first target tunnel. Access cloud gateway;

The access cloud gateway is configured to determine a second target tunnel and a second target network edge device according to the tunnel selection condition; wherein the second preset link selection condition is based on the real-time device load of each network edge device. At least one of the conditions, active and backup attributes, and real-time link on-and-off conditions is determined;

The access cloud gateway is also configured to process the first forwarding message based on the preset network conversion technology and the first preset protocol to obtain a second forwarding message;

The access cloud gateway is further configured to send the second forwarding message to the broadband access server through the second target tunnel and the second target network edge device.

In addition, this application also provides an access cloud gateway, including:

A message receiving unit configured to receive a first forwarding message sent by the first target network edge device through the first target tunnel; wherein the first forwarding message is the first forwarding message sent by the first target network edge device based on the first preset The initial message is obtained by encapsulating the initial message with the protocol. The initial message is sent by the user edge device. The first target tunnel and the first target network edge device are determined by the user edge device according to tunnel selection conditions. The tunnel selection conditions are determined based on at least one of the real-time device load status, active and backup attributes, and real-time tunnel on/off status of each network edge device;

A first determination unit configured to determine the second target tunnel and the second target network edge device according to the tunnel selection condition; wherein the second preset link selection condition is based on the real-time device load condition of each network edge device, At least one of the active and standby attributes and real-time link connection and disconnection conditions is determined;

A message processing unit, configured to process the first forwarded message based on the preset network conversion technology and the first preset protocol to obtain a second forwarded message;

A message forwarding unit, configured to send the second forwarding message to the broadband access server through the second target tunnel and the second target network edge device.

Beneficial effects: This application provides a message transmission method, networking system and access cloud gateway. Specifically, the networking system includes a user edge device, at least two network edge devices, an access cloud gateway, and a broadband access server. The user edge device in the system determines the first target tunnel and the first target network edge according to the tunnel selection conditions. The device sends an initial message to the first target network edge device; wherein the tunnel selection condition is determined based on at least one of real-time device load conditions, active and backup attributes, and real-time tunnel on-off conditions of each network edge device; then, The first target network edge device encapsulates the received initial message based on the first preset protocol, obtains the first forwarded message, and sends the first forwarded message to the access cloud gateway in the system through the first target tunnel; then The access cloud gateway determines the second target tunnel and the second target network edge device according to the tunnel selection conditions; wherein the second preset link selection condition is based on the real-time device load status, active and backup attributes, and real-time link selection conditions of each network edge device. At least one of the path openness and disconnection conditions is determined; finally, the access cloud gateway processes the first forwarding message based on the preset network conversion technology and the first preset protocol, obtains the second forwarding message, and passes the second target tunnel and the second target network edge device, sending the second forwarded message to the broadband access server in the system. This method builds a communication tunnel centered on the network edge device by setting up at least two network edge devices in the networking system, so that the user edge device sends data to the access cloud gateway and the access cloud gateway sends data to the broadband access server. Messages can choose the appropriate tunnel from at least two tunnels for message transmission, realizing a multi-homing networking mode, thereby reducing physical device backup and link backup, improving the reliability of the transmission link, and reducing the traffic load. Balanced, avoids traffic congestion, achieves efficient and safe transmission of messages, improves broadband utilization efficiency, and reduces bandwidth consumption. At the same time, this multi-homing networking mode can realize the use of unilateral methods when adding, deleting, or modifying interconnected sites. The deployment method ensures that the configuration of existing sites is not affected and reduces the complexity of operation and maintenance.

Description of the drawings

The technical solutions and other beneficial effects of the present application will be apparent through a detailed description of the specific embodiments of the present application in conjunction with the accompanying drawings.

Figure 1 is a system architecture diagram of a networking system provided by an embodiment of the present application.

Figure 2 is a schematic flowchart of a message transmission method provided by an embodiment of the present application.

Figure 3 is a schematic diagram of the topology of the networking system provided by the embodiment of the present application.

Figure 4 is a schematic diagram of the data flow of message transmission provided by the embodiment of the present application.

Figure 5 is a schematic structural diagram of an access cloud gateway provided by an embodiment of the present application.

Detailed ways

The technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present application. Obviously, the described embodiments are only some of the embodiments of the present application, but not all of the embodiments. Based on the embodiments in this application, all other embodiments obtained by those skilled in the art without making creative efforts fall within the scope of protection of this application.

The terms "including" and "having" and any variations thereof in the description and claims of this application are intended to cover non-exclusive inclusion; the division of modules appearing in this application is only a logical division , there may be other division methods when implemented in actual applications, for example, multiple modules can be combined or integrated into another system, or some features can be ignored or not implemented.

This application provides a message transmission method, a networking system, and an access cloud gateway. The access cloud gateway can be a server or a terminal or other device.

Please refer to Figure 1. Figure 1 is a system architecture diagram of a networking system provided by an embodiment of the present application. As shown in Figure 1, the networking system can include terminals and devices, between terminals, between devices, and between terminals and devices. They are connected and communicated through the Internet composed of various gateways. The networking system includes at least a user edge device 101, at least two network edge devices 102, an access cloud gateway 103 and a broadband access server 104, where:

User edge equipment 101 refers to equipment used to interface with edge equipment of the PTN network, including terminal equipment used to connect optical fiber trunk lines, such as optical line terminals (OLT).

The network edge device 102 may be an edge router of the service provider's backbone network, which is equivalent to a Label Edge Router (LER). The PE router connects the CE router and the P router and is the most important network node. User traffic flows into the user network through the PE router, or flows through the PE router to the backbone network.

The access cloud gateway 103 is located at the edge access layer in the softswitch architecture and provides an analog subscriber line interface for directly connecting ordinary telephone users to the softswitch network.

Broadband access server (Bras) 104 is the bridge between the access network and the backbone network. It is a gateway that firmly controls the user's data entering and exiting the backbone network. The broadband access server 104 is responsible for both user management and data flow forwarding. It should be noted that the broadband access server 104 can also be virtualized (clouded), that is, vBRAS, which can flexibly expand and reduce capacity, simplify operation and maintenance, unify standard interfaces, and improve equipment performance.

Communication links are provided between the user edge device 101, at least two network edge devices 102, the access cloud gateway 103 and the broadband access server 104 to realize information interaction; the types of communication links may include wired and wireless communication links. Or fiber optic cables, etc. This application is not limited here, specifically:

The user edge device 101 is configured to determine the first target tunnel and the first target network edge device according to the tunnel selection condition, and then send an initial message to the first target network edge device determined in the foregoing process, wherein the first target network edge device For one of at least two network edge devices 102, the tunnel selection condition is determined based on at least one of the real-time device load status, active and backup attributes, and real-time tunnel on/off status of each network edge device 102. Then, the first The target network edge device is configured to encapsulate the received initial message based on the first preset protocol, obtain the first forwarded message, and send the first forwarded message to the access cloud gateway through the first target tunnel determined in the aforementioned process. 103. Next, the access cloud gateway 103 is used to determine the second target tunnel and the second target network edge device according to the tunnel selection condition, wherein the second preset link selection condition is also based on the real-time device of each network edge device 102 At least one of the load conditions, active and standby attributes, and real-time link on-and-off conditions is determined. In addition, the access cloud gateway 103 is also used to process the first forwarded message based on the preset network conversion technology and the first preset protocol. , to obtain the second forwarding message. Finally, the access cloud gateway 103 is also used to send the second forwarding message to the broadband access server 104 through the second target tunnel and the second target network edge device determined through the aforementioned process. .

In addition, the networking system may also include a secure service cloud gateway 105, which is a secure service cloud gateway used to carry security. At this time, after the uplink packets in the networking system arrive at the access cloud gateway, the access cloud gateway 101 implements the first preset protocol through the second preset protocol (such as VxLAN protocol) tunnel with the security service cloud gateway 105 (for example, SRv6) to the second preset protocol (for example, VxLAN), and introduce the uplink packets into the security service cloud gateway 105 through the second preset protocol (for example, VxLAN) for cleaning and filtering to obtain healthy packet data. The cleaned message data is then imported into the access cloud gateway 101 again through the second preset protocol (for example, VxLAN). The access cloud gateway encapsulates it according to the first preset protocol (for example, SRv6) and sends it to In the broadband access server 104, PPPoE dial-up is initiated to complete authentication and network access.

During the above message transmission process, the networking system sets up at least two network edge devices to build a communication tunnel with the network edge device as the center, so that the user edge device sends to the access cloud gateway and the access cloud gateway sends to Broadband access server packets can choose the appropriate tunnel from at least two tunnels for packet transmission, realizing a multi-homing networking mode, thereby reducing physical device backup and link backup, and improving the reliability of the transmission link. It ensures traffic load balancing, avoids traffic congestion, realizes efficient and safe transmission of messages, improves broadband utilization efficiency, and reduces bandwidth consumption. At the same time, this multi-homing networking mode can realize the addition, deletion and modification of interconnected sites. When deploying, a unilateral deployment method is adopted so that the configuration of existing sites is not affected and the complexity of operation and maintenance is reduced.

It should be noted that the system architecture diagram shown in Figure 1 is only an example. The terminals, devices and scenarios described in the embodiments of this application are for the purpose of more clearly illustrating the technical solutions of the embodiments of this application, and do not constitute a requirement for the implementation of this application. As the limitations of the technical solutions provided in the examples, those of ordinary skill in the art will know that with the evolution of the system and the emergence of new business scenarios, the technical solutions provided in the embodiments of this application are equally applicable to similar technical problems. Each is explained in detail below. It should be noted that the order of description of the following embodiments does not limit the preferred order of the embodiments.

In the embodiment of the present application, please refer to Figure 2. Figure 2 is a schematic flow chart of a message transmission method provided by an embodiment of the present application. The message transmission method is applied to a networking system. The networking system includes user edge devices. , at least two network edge devices, access cloud gateways and broadband access servers. The method includes at least the following steps:

S201: The user edge device determines the first target tunnel and the first target network edge device according to the tunnel selection conditions, and sends an initial message to the first target network edge device; wherein, the tunnel selection conditions are based on the real-time device load of each network edge device. , at least one of active and standby attributes, and real-time tunnel connection and disconnection conditions is determined.

In one embodiment, before step S201, it also includes: at least two network edge devices and the access cloud gateway establishing at least two first preset protocol tunnels on the LAN side; the access cloud gateway and the at least two network edge devices Establish at least two first default protocol tunnels on the WAN side. As shown in Figure 3, Figure 3 is a schematic diagram of the topology of the networking system provided by the embodiment of the present application. Figure 3 only shows two network edge devices. Network edge device A is hereinafter referred to as ALEAF, and network edge device B Hereinafter referred to as BLEAF.

Specifically, ALEAF and BLEAF establish the first preset protocol tunnel on the LAN side with the access cloud gateway respectively, while the access cloud gateway establishes the first preset protocol tunnel on the WAN side with the vBras in the metropolitan area network, as shown in Figure 3. Specifically, the access cloud gateway establishes the first preset protocol tunnel on the WAN side with ALEAF and BLEAF respectively. As shown in the topology diagram in Figure 3, this mode in which one user edge device (CE) is connected to at least two network edge devices (PE) is called multi-homing, while as shown in Figure 3, there are only two network edge devices. For dual-homing, it should be noted that the network edge devices with multiple homing have the same ESI, and the protocol layer will handle it.

In one embodiment, the first preset protocol tunnel includes an SRv6 tunnel, and the first preset protocol tunnel carries EVPN VPLS services. Among them, SRv6 is based on Telecom's internal construction plan of a new metropolitan area network. The metropolitan area level will simplify the network architecture and adopt a spine-leaf structure. On this basis, SRv6 technology will be used to support the development of various services, as shown in Figure 4. Figure 4 is a schematic diagram of the data flow of message transmission provided by the embodiment of this application. Figure 4 shows that the spine-leaf structure is adopted between the network edge device and the access cloud gateway; the networking system supports EVPNVPLS over SRv6. That is, the EVPNVPLS service is carried through the first preset protocol tunnel (SRv6 tunnel), user layer 2 data is transparently transmitted through the IPv6 network, and the user network establishes point-to-multipoint connections across the IPv6 network. This method separates the control plane and data plane. The control plane is responsible for route publishing, and the data plane is responsible for packet forwarding. The division of labor is clear and easy to manage. EVPN uses the route reflection attribute that comes with BGP, making network deployment simpler and clearer, and greatly reducing the complexity of the network; in addition, it also This improves the scalability of the system, allowing the number of interconnected sites, the number of extended VLANs, and the MAC address capacity to reach a certain scale to meet the needs of large-scale and ultra-large-scale data centers.

According to the previous description, at least two first preset protocol tunnels are established between the network edge device and the access cloud gateway. The user edge device in Figure 3 can be an optical line terminal (Optical Line Termination, OLT), and the user side two The layer traffic enters ALEAF or BLEAF through the OLT, and then is transferred from ALEAF or BLEAF to the first preset protocol tunnel to reach the access cloud gateway to complete the terminal's DHCP IP application and network access. Therefore, the user edge device needs to be separated according to the tunnel selection conditions. Determine the first target tunnel and the first target network edge device from each first preset protocol tunnel and each network edge device.

Specifically, the networking system provided by this application is subdivided into multi-homing, multi-active and multi-homing, single-active. The data from the OLT is load balanced from ALEAF or BLEAF to the access cloud gateway. This load balancing mode is multi-homing and multi-active; the data from the OLT is from ALEAF/BLEAF (select one as the main one) all the way to the access cloud gateway. This is The first active-standby mode is multi-homing and single-active. Therefore, the user edge device needs to determine from multiple first preset protocol tunnels on the LAN side and multiple network edge devices based on at least one of the device load conditions, active and backup attributes, and real-time tunnel on and off conditions of each network edge device. The first target tunnel and the first target network edge device, and sends the initial message to the first target network edge device. Among them, the device load refers to the real-time load of each network edge device and whether it can process data; the active and backup attributes refer to whether each network edge device is the primary device or the secondary device. If it is the primary device, the primary and secondary devices are directly used. mode to achieve multi-homing and single-active; the real-time tunnel connection and disconnection status refers to whether the first preset protocol tunnel is unblocked.

It should be noted that this multi-homing method reduces physical device backup and link backup, achieving efficient and safe transmission of network data; at the same time, it reduces the impact on existing site configurations when adding, deleting, or modifying interconnected sites.

S202: The first target network edge device encapsulates the initial message based on the first preset protocol, obtains the first forwarded message, and sends the first forwarded message to the access cloud gateway through the first target tunnel.

After determining the first target network edge device and the first target tunnel according to step S201, the first target network edge device encapsulates the initial message based on the first preset protocol (including the SRv6 protocol) to obtain the first forwarded message. The forwarded packet is an uplink packet. The first forwarded packet is source IPv6 encapsulated with SRv6 (Segment-Routing-Ipv6) of the first target network edge device. The target IP is the access cloud gateway corresponding to the LAN EVPN entry. SID (number that identifies the mobile service local network) DT2M or DT2U, and then the first target network edge device sends the first forwarding message to the access cloud gateway through the first target tunnel.

Specifically, as shown in Figure 3, the packet data flow direction from OLT to the access cloud gateway has the following possibilities: OLT sends the initial packet to ALEAF, and ALEAF sends the first forwarded packet to ALEAF through SID A1 of the lan vpls tunnel. Access cloud gateway; OLT sends the initial message to BLEAF, and BLEAF sends the first forwarded message to the access cloud gateway through SIDA2 of the lan vpls tunnel.

S203: The access cloud gateway determines the second target tunnel and the second target network edge device according to the tunnel selection conditions; wherein the second preset link selection condition is based on the real-time device load, active and backup attributes, real-time At least one of the link up and down conditions is determined.

According to the aforementioned steps, the first forwarded message has been sent to the access cloud gateway through the first target network edge device. Similarly, the access cloud gateway needs to be based on the device load, active and backup attributes, and real-time tunnel on/off of each network edge device. In at least one of the situations, the second target tunnel and the second target network edge device are selected from a plurality of first preset protocol tunnels and a plurality of network edge devices on the WAN side.

It should be noted that the first target tunnel and the second target tunnel may be communication links between the same network edge device and the access cloud gateway, or they may be communication links between different network edge devices and the access cloud gateway. ; The first target network edge device and the second target network edge device may be the same or different.

S204: The access cloud gateway processes the first forwarding message based on the preset network conversion technology and the first preset protocol to obtain the second forwarding message.

In one embodiment, step S204 includes: the access cloud gateway processes the first forwarded message based on the first preset protocol to obtain the message to be forwarded; the access cloud gateway processes the message to be forwarded based on the preset network conversion technology. Conversion processing is performed to obtain a network conversion message; the access cloud gateway encapsulates the network conversion message based on the network dial-up protocol and the first preset protocol to obtain a second forwarding message. The first preset protocol includes the SRv6 protocol; the preset network conversion technology may be the NAT technology from LAN to WAN; and the network dial-up protocol may be the PPPoE protocol.

Specifically, as shown in Figure 3, after receiving the first forwarded message, the vswitch connected to the cloud gateway performs a decapsulation operation on it, that is, decapsulating the SRv6 encapsulation of the first forwarded message to obtain the message to be forwarded. The forwarded message includes the LAN port network address. Then, the forwarded message is network converted based on the preset network conversion technology to obtain the network translation address. Then, the access cloud gateway encapsulates the network conversion message through the PPPoE protocol and forwards it to Connect to the vswitch (virtual switch) of the cloud gateway. Finally, the vswitch connected to the cloud gateway searches the evpn_instance table according to the outgoing vni+qinq->evpn_name (outgoing rule) to obtain the source IPv6, which is encapsulated by PPPoE through the SRv6 protocol. The network forwards the message and obtains the second forwarded message.

Optionally, the above process of performing network conversion on the forwarded packet based on the preset network conversion technology and obtaining the network conversion address may include: for example, according to dipv6->evpn instance (evpn_local_sid table), according to qinq+evpn_name->vcpe_vnfid+enter vni (Incoming rules) Go to the corresponding vcpe (virtual client). The vcpe (virtual client) finds the account based on lan_vni+qinq, replaces sip with wan_ip, and outgoing vni with wan_vni to obtain the network translation address. At this time, the network translation address It includes the WAN port network address, and the address to be converted includes the LAN port network address. The network conversion process of the uplink message completes the conversion of the LAN port network address into the router's WAN port network address.

In one embodiment, the networking system also includes a secure service cloud gateway. The initial message is an uplink message. The access cloud gateway processes the first forwarded message based on the first preset protocol. The steps of obtaining the message to be forwarded include: : The access cloud gateway decapsulates the first forwarding message based on the first preset protocol and obtains the decapsulated message; the access cloud gateway encapsulates and decapsulates the message based on the second preset protocol and obtains the first re-encapsulated message, and The first re-encapsulated message is introduced into the secure service cloud gateway; the secure service cloud gateway performs secure processing on the first re-encapsulated message, obtains the message to be forwarded, and sends the message to be forwarded to the access cloud gateway. Wherein, the second preset protocol includes VxLAN protocol.

Specifically, as shown in Figure 3, if a secure service cloud gateway carrying security is also configured in the networking system, the uplink message in the aforementioned initial message is sent by the first target network edge device to the access cloud gateway. After vswitch, the access cloud gateway will decapsulate the SRv6 header of the first forwarded message based on the SRv6 protocol to obtain the decapsulated message, and then based on the inner dip->tunnel group (MEC business process), if the search is successful, then based on the Two preset protocols (the VxLAN protocol is used as an example in the embodiment of this application) encapsulate the decapsulated message, that is, add a VxLAN header to the decapsulated message to obtain the first re-encapsulated message, and then add the first re-encapsulated message to the decapsulated message. The encapsulated message is forwarded to the vswitch of the security service cloud gateway. The security service cloud gateway performs security processing such as filtering and cleaning on the first re-encapsulated message based on the global security IP library provided by the operator, and obtains the message to be forwarded, and The packet to be forwarded is re-sent to the access cloud gateway, so that the access cloud gateway uses a secure packet to send a dialing request to the broadband access server.

In one embodiment, before the access cloud gateway encapsulates and decapsulates the message based on the second preset protocol, obtains the first re-encapsulated message, and introduces the first re-encapsulated message into the secure service cloud gateway, the step further includes: : Establish a bidirectional second preset protocol tunnel between the access cloud gateway and the security service cloud gateway. Wherein, the second preset protocol includes VxLAN protocol.

Specifically, the networking of the access cloud gateway and the security service cloud gateway is simple and can operate well without using complex protocols such as SRv6. Therefore, the access cloud gateway and the security service cloud gateway can use VxLAN tunnels for reporting. File transmission, since the conversion from SRv6 to VxLAN is implemented between the access cloud gateway and the security service cloud gateway, the flexibility is improved, and it is convenient and fast. It can well realize the switch from multi-access to multi-MEC and also solve the bandwidth problem. The upgrade will face the problem of MEC network paralysis. At the same time, the VxLAN tunnel is used between the access cloud gateway and the security service cloud gateway to introduce upstream packets into the security service cloud gateway. Security analysis is performed through the security service cloud gateway, and then risk packets are cut off and healthy packets are redirected. Introduced into the access cloud gateway, the security of the system is improved.

In one embodiment, the secure service cloud gateway performs security processing on the first re-encapsulated message, obtains the message to be forwarded, and sends the message to be forwarded to the access cloud gateway. The steps of the secure service cloud gateway include: The second preset protocol decapsulates the first re-encapsulated message, and obtains the first re-decapsulated message; the security service cloud gateway filters and cleans the first re-decapsulated message based on the preset security network library, and obtains the secure decapsulated message. The secure service cloud gateway encapsulates the secure decapsulation message based on the second preset protocol, obtains the message to be forwarded, and sends the message to be forwarded to the access cloud gateway. Among them, the second default protocol includes the VxLAN protocol; the default security network library is a global security IP library provided by the operator.

Specifically, the security service cloud gateway first decapsulates the VxLAN header of the first re-encapsulated message based on the VxLAN protocol to obtain the first re-decapsulated message, and then decrypts the first re-decapsulated message based on the global security IP library provided by the operator. The encapsulated packets are filtered and cleaned to obtain securely decapsulated packets, and then the securely decapsulated packets are encapsulated with a VxLAN header based on the VxLAN protocol to obtain the packets to be forwarded, and the packets to be forwarded are sent to the access cloud. Gateway, the packet to be forwarded also includes the LAN port network address. Then, the vswitch connected to the cloud gateway decapsulates the received packet to be forwarded according to the VxLAN protocol, and peels off the VxLAN header of the packet to be forwarded. , the packet to be forwarded includes the LAN port network address, and then performs network conversion processing based on vni+qing->evpn_name (outgoing rule) (LAN side) and evpn_name>evpn instance (destination IPv6), and obtains the network conversion address. The network The translation address includes the WAN port network address. The network translation process completes the conversion of the LAN port network address into the WAN port network address of the router. Then, the access cloud gateway encapsulates the network translation message through the PPPoE protocol and forwards it to the access cloud gateway. The vswitch (virtual switch) of the cloud gateway. Finally, the vswitch connected to the cloud gateway searches the evpn_instance table according to the outgoing vni+qinq->evpn_name (outgoing rule) to obtain the source IPv6, and encapsulates the network forwarding encapsulated by PPPoE through the SRv6 protocol. message and obtain the second forwarded message.

Optionally, when the secure service cloud gateway is enabled, protocol packets (such as DHCP and PPPoE) can be processed separately from service packets to avoid forwarding all packets to the secure service gateway. This way, dial-up can be performed when a fault occurs. time to further reduce failure delays.

S205: The access cloud gateway sends the second forwarding message to the broadband access server through the second target tunnel and the second target network edge device.

The access cloud gateway receives the second forwarded message and forwards the second forwarded message to the second target network edge device through the second target tunnel determined in the foregoing process, and then the second target network edge device forwards the message. Send it to the broadband access server to initiate PPPoE dial-up to complete authentication and network access. The second forwarded message is a message from the upstream access cloud gateway to the broadband access server. The source IP is the SIP configured in the WANEVPN entry of the access cloud gateway, and the destination IP is the WAN from the remote network edge device (ALEAF or BLEAF). SIDDT2M or DT2U learned from VPLS.

In another embodiment of the present application, the broadband access server downlinks downlink packets to the access cloud gateway. The downlink packets enter ALEAF or BLEAF through the broadband access server, and are then sent by ALEAF or BLEAF based on the first preset Protocol (including SRv6 protocol) encapsulates the downstream message to obtain the first downstream forwarded message. The tunnel source IP of the first downstream forwarded message is the source IPv6 encapsulated by Segment-Routing-Ipv6 of ALEAF or BLEAF, and the destination IP is the access IPv6. SIDDT2M or DT2U corresponding to the LANEVPN entry of the ingress cloud gateway; then the first preset protocol tunnel transfers the first downlink forwarding message to the access cloud gateway. After the vswitch accessing the cloud gateway receives the downlink first forwarding message, Decapsulation is performed based on the SRv6 protocol. Subsequently, the access cloud gateway performs network conversion on the decapsulated downlink first forwarded message based on WAN to LAN NAT technology. For example, according to the dipv6->evpn instance (evpn_local_sid table), according to qinq +evpn_name->vcpe_vnfid+ Enter vni (incoming rule) and go to the corresponding vcpe (virtual client). The vcpe (virtual client) finds the account based on wan_vni+qinq, replaces dip with ueip, and exits vni with lan_vni, thus obtaining the second downstream Forward the packet; finally, the access cloud gateway processes the second downlink forwarding packet, and according to the outgoing vni+qinq->evpn_name (outgoing rule), finds the evpn_instance table according to the evpn_name to obtain the source IPv6, encapsulates the SRv6 VPLS tunnel and forwards it out. The second downlink forwarded message is a message from the access cloud gateway to the OLT. The tunnel source IP is the SIP configured in the LAN EVPN entry of the access cloud gateway, and the destination IP is the SID DT2Mor learned from the remote ALEAF or BLEAF LAN VPLS. DT2U.

In one embodiment, the access cloud gateway has the ability to advertise routes by MAC address. Specifically, the access cloud gateway has the capability of EVPN routetype2 (MACadvertisement Route), that is, it publishes and learns type 2 routes through the BGP protocol and stores them. For unknown unicast BUM packets (broadcastunicast multicast), it sends double packets, that is, source Similarly, the destination IPv6 is the remote DT2M learned by dual-homing and dual-active. For known unicast packets, the DT2U learned from the remote encapsulates DIP.

Combining the topology diagram in Figure 3 and the content mentioned above, there are several possibilities for the packet data flow during the user edge device initiating DHCP IP application and network access process:

The first is OLT-->ALEAF -->Access Cloud Gateway-->ALEAF-->Broadband Access Server; OLT sends the initial message to ALEAF, and ALEAF forwards the first message through SIDA1 of the LAN VPLS tunnel. Sent to the access cloud gateway, the access cloud gateway processes the first forwarded message to obtain the second forwarded message, and then sends the second forwarded message to ALEAF through SIDB1 of the WAN VPLS tunnel. Finally, ALEAF transmits the second forwarded message. Forward the packet and send it to the broadband access server.

The second type is OLT-->BLEAF-->Access Cloud Gateway-->BLEAF-->Broadband Access Server; OLT sends the initial message to BLEAF, and BLEAF forwards the first message through SIDA2 of the LAN VPLS tunnel. Sent to the access cloud gateway, the access cloud gateway processes the first forwarded message to obtain the second forwarded message, and then sends the second forwarded message to BLEAF through SIDB2 of the WAN VPLS tunnel. Finally, BLEAF transmits the second forwarded message. Forward the packet and send it to the broadband access server.

Among them, the first and second types are the target tunnel and target network edge device determined based on the active and backup status of the device.

The third type, OLT-->ALEAF -->BLEAF-->Access cloud gateway-->ALEAF-->Broadband access server; OLT sends the initial message to ALEAF, but because SID A1 is unreachable, ALEAF directly The initial message is sent to BLEAF, and BLEAF sends the first forwarded message to the access cloud gateway through SID A2 of the LAN VPLS tunnel. The access cloud gateway processes the first forwarded message to obtain the second forwarded message, and then passes the WAN SIDB1 of the VPLS tunnel sends the second forwarding packet to ALEAF, and finally ALEAF sends the second forwarding packet to the broadband access server.

The fourth type, OLT-->ALEAF -->Access cloud gateway-->ALEAF -->BLEAF -->Broadband access server; OLT sends the initial message to ALEAF, and ALEAF sends it through SID A1 of the LAN VPLS tunnel. The first forwarded message is sent to the access cloud gateway. The access cloud gateway processes the first forwarded message to obtain the second forwarded message, and then sends the second forwarded message to ALEAF through SIDB1 of the WAN VPLS tunnel. However, due to SIDB1 is unavailable, ALEAF directly sends the second forwarding message to BLEAF, and finally BLEAF sends the second forwarding message to the broadband access server.

The fifth type, OLT-->BLEAF -->ALEAF -->Access cloud gateway-->ALEAF -->Broadband access server; OLT sends the initial message to BLEAF, but because SID A2 is unreachable, BLEAF directly The initial packet is sent to ALEAF, and ALEAF sends the first forwarded packet to the access cloud gateway through SID A1 of the LAN VPLS tunnel. The access cloud gateway processes the first forwarded packet to obtain the second forwarded packet, and then passes the WAN SIDB1 of the VPLS tunnel sends the second forwarding packet to ALEAF, and finally ALEAF sends the second forwarding packet to the broadband access server.

The sixth method is OLT-->BLEAF-->Access Cloud Gateway-->BLEAF-->ALEAF-->Broadband Access Server; OLT sends the initial message to BLEAF, and BLEAF passes it through SID A2 of the LAN VPLS tunnel. The first forwarded message is sent to the access cloud gateway. The access cloud gateway processes the first forwarded message to obtain the second forwarded message, and then sends the second forwarded message to BLEAF through SIDB1 of the WAN VPLS tunnel. However, due to SIDB2 is unreachable, BLEAF directly sends the second forwarding message to ALEAF, and finally ALEAF sends the second forwarding message to the broadband access server.

Among them, the third to sixth types are determined by the real-time tunnel connection and disconnection conditions in dual-homing and dual-active scenarios. At this time, the user traffic is balanced according to the QinQ load balance of the account, and all subsequent terminal device request data under the same account will be Select the same tunnel according to the QinQ load mode of the account. If a tunnel link failure occurs, another tunnel will be selected.

It can be seen from the above embodiments that the message transmission method of this application combines the multi-homing networking mode of SRv6 and the configuration of the security service cloud gateway to improve the security and reliability of transmission. And in large-scale operation and maintenance deployment, due to the adoption of SRv6 protocol, the network is simpler, the dual-homing attribute makes the network more reliable, and the access cloud gateway has the capability of EVPNroutetype2 (MAC advertisement Route), which improves bandwidth utilization. , and the security business cloud gateway has raised the threshold of network security. The entire solution has improved the network computing power by 1 to N, the network has not changed much, and the operation and maintenance workload is small.

Based on the contents of the above embodiments, embodiments of this application provide an access cloud gateway. Specifically, please refer to Figure 5. The access cloud gateway includes:

The message receiving unit 501 is configured to receive a first forwarding message sent by the first target network edge device through the first target tunnel; wherein the first forwarding message is the first forwarding message sent by the first target network edge device based on the first preset. Assume that the initial message is obtained by encapsulating the initial message by the protocol, the initial message is sent by the user edge device, the first target tunnel and the first target network edge device are determined by the user edge device according to tunnel selection conditions, so The tunnel selection conditions are determined based on at least one of real-time device load conditions, active and backup attributes, and real-time tunnel on-off conditions of each network edge device;

The first determining unit 502 is configured to determine the second target tunnel and the second target network edge device according to the tunnel selection condition; wherein the second preset link selection condition is based on the real-time device load condition of each network edge device. , at least one of the active and standby attributes and real-time link on-and-off conditions is determined;

The message processing unit 503 is configured to process the first forwarded message based on the preset network conversion technology and the first preset protocol to obtain a second forwarded message;

The message forwarding unit 504 is configured to send the second forwarding message to the broadband access server through the second target tunnel and the second target network edge device.

In one embodiment, the access cloud gateway also includes:

A first establishment module configured to establish at least two first preset protocol tunnels on the LAN side with the at least two network edge devices;

The second establishment module is configured to establish at least two first preset protocol tunnels on the WAN side with the at least two network edge devices.

Wherein, the first preset protocol tunnel includes an SRv6 tunnel, and the first preset protocol tunnel carries the EVPNVPLS service.

In one embodiment, the message processing unit 503 includes:

A first processing subunit, configured to process the first forwarded message based on the first preset protocol to obtain a message to be forwarded;

The second processing subunit is used to convert the message to be forwarded based on the preset network conversion technology to obtain a network conversion message;

The third processing subunit is configured to encapsulate the network conversion message based on the network dial-up protocol and the first preset protocol to obtain a second forwarding message.

In one embodiment, the first processing subunit further includes:

A decapsulation unit, configured to decapsulate the first forwarded message based on the first preset protocol to obtain a decapsulated message;

A message introduction unit is configured to encapsulate the decapsulated message based on a second preset protocol, obtain a first re-encapsulated message, and introduce the first re-encapsulated message into the secure service cloud gateway.

In one embodiment, the access cloud gateway also includes:

The third establishment unit is configured to establish a bidirectional second preset protocol tunnel with the security service cloud gateway, where the second preset protocol tunnel includes a VxLAN tunnel.

In one embodiment, the access cloud gateway has the ability to advertise routes by MAC address.

In addition, the access cloud gateway may also include a processor and memory, including:

The processor is the control center of the access cloud gateway. It uses various interfaces and lines to connect various parts of the entire access cloud gateway. It runs or executes software programs and/or modules stored in the memory, and calls the software programs and/or modules stored in the memory. According to the data, the various functions and data processing of the above units of the access cloud gateway are executed, so as to conduct overall monitoring of the access cloud gateway. In one embodiment, the processor may include one or more processing cores; preferably, the processor may integrate an application processor and a modem processor, where the application processor mainly processes the operating system, user interface and application programs etc., the modem processor mainly handles wireless communications. It can be understood that the above modem processor may not be integrated into the processor.

The memory can be used to store software programs and modules, and the processor executes various functional applications and data processing by running the computer programs and modules stored in the memory. The memory may mainly include a stored program area and a stored data area, wherein the stored program area may store an operating system, at least one application required for a function, etc.; the stored data area may store data created based on the use of the terminal, etc. In addition, the memory may include high-speed random access memory, and may also include non-volatile memory, such as at least one magnetic disk storage device, flash memory device, or other volatile solid-state storage device. Accordingly, the memory may also include a memory controller to provide the processor and the input unit with access to the memory.

The above is a detailed introduction to the message transmission method, networking system and access cloud gateway provided by the embodiments of this application. This article uses specific examples to illustrate the principles and implementation methods of this application. The description of the above embodiments is only It is used to help understand the methods and core ideas of this application; at the same time, for those skilled in the art, there will be changes in the specific implementation and application scope based on the ideas of this application. In summary, this specification The contents should not be construed as limitations on this application.

Claims (7)

1. The message transmission method is characterized by being applied to a networking system, wherein the networking system comprises user edge equipment, at least two network edge equipment, an access cloud gateway and a broadband access server; the method comprises the following steps:

the user edge device determines a first target tunnel and first target network edge device according to tunnel selection conditions, and sends an initial message to the first target network edge device; the tunnel selection condition is determined based on at least one of real-time equipment load conditions, main and standby attributes and real-time tunnel on-off conditions of each network edge equipment;

The first target network edge equipment encapsulates the initial message based on a first preset protocol to obtain a first forwarding message, and sends the first forwarding message to the access cloud gateway through the first target tunnel;

the access cloud gateway determines a second target tunnel and second target network edge equipment according to the tunnel selection condition;

the access cloud gateway processes the first forwarding message based on a preset network conversion technology and the first preset protocol to obtain a second forwarding message;

the access cloud gateway sends the second forwarding message to the broadband access server through the second target tunnel and the second target network edge equipment;

the step of processing the first forwarding message by the access cloud gateway based on a preset network conversion technology and the first preset protocol to obtain a second forwarding message includes:

the access cloud gateway processes the first forwarding message based on the first preset protocol to obtain a message to be forwarded;

the access cloud gateway performs conversion processing on the message to be forwarded based on a preset network conversion technology to obtain a network conversion message;

the access cloud gateway encapsulates the network conversion message based on a network dialing protocol and the first preset protocol to obtain a second forwarding message;

The networking system further comprises a security service cloud gateway, the initial message is an uplink message, the access cloud gateway processes the first forwarding message based on the first preset protocol to obtain a message to be forwarded, and the method comprises the following steps:

the access cloud gateway decapsulates the first forwarding message based on the first preset protocol to obtain a decapsulated message;

the access cloud gateway encapsulates the decapsulation message based on a second preset protocol to obtain a first repackaging message, and introduces the first repackaging message into the security service cloud gateway;

the security service cloud gateway performs security processing on the first repackaged message to obtain a message to be forwarded, and sends the message to be forwarded to the access cloud gateway;

wherein the second preset protocol comprises a VxLAN protocol;

the security service cloud gateway performs security processing on the first repackaged message to obtain a message to be forwarded, and sends the message to be forwarded to the access cloud gateway, including:

the security service cloud gateway decapsulates the first decapsulated message based on the second preset protocol to obtain a first decapsulated message;

The security service cloud gateway filters and cleans the first repackaging message based on a preset security network library to obtain a security repackaging message;

the security service cloud gateway encapsulates the security decapsulation message based on the second preset protocol to obtain a message to be forwarded, and sends the message to be forwarded to the access cloud gateway;

the initial message comprises a protocol message and a service message, and when the security service cloud gateway is started, the protocol message and the service message are distinguished and processed separately.

2. The method according to claim 1, wherein before the step of determining, by the user edge device, a first target tunnel and a first target network edge device according to a tunnel selection condition, and sending an initial message to the first target network edge device, the method further comprises:

the at least two network edge devices and the access cloud gateway establish at least two first preset protocol tunnels on the LAN side;

and the access cloud gateway and the at least two network edge devices establish at least two first preset protocol tunnels on the WAN side.

3. The method of claim 2, wherein the first preset protocol tunnel comprises a SRv tunnel, and the first preset protocol tunnel carries EVPN VPLS traffic.

4. The method for transmitting a message according to claim 1, wherein before the step of encapsulating the decapsulated message by the access cloud gateway based on the second preset protocol to obtain a first repackaged message and introducing the first repackaged message into the security service cloud gateway, the method further comprises:

and the access cloud gateway and the security service cloud gateway establish a bidirectional second preset protocol tunnel, wherein the second preset protocol tunnel comprises a VxLAN tunnel.

5. The method for transmitting a message according to claim 1, wherein the access cloud gateway has a capability of MAC address advertisement routing.

6. The networking system is characterized by comprising user edge equipment, at least two network edge equipment, an access cloud gateway and a broadband access server; wherein:

the user edge device is used for determining a first target tunnel and first target network edge device according to tunnel selection conditions and sending an initial message to the first target network edge device; the tunnel selection condition is determined based on at least one of real-time equipment load conditions, main and standby attributes and real-time tunnel on-off conditions of each network edge equipment;

The first target network edge device is configured to encapsulate the initial message based on a first preset protocol to obtain a first forwarding message, and send the first forwarding message to the access cloud gateway through the first target tunnel;

the access cloud gateway is used for determining a second target tunnel and second target network edge equipment according to the tunnel selection condition;

the access cloud gateway is further configured to process the first forwarding message based on a preset network conversion technology and the first preset protocol to obtain a second forwarding message;

the access cloud gateway is further configured to send the second forwarding message to the broadband access server through the second target tunnel and the second target network edge device;

the step of processing the first forwarding message by the access cloud gateway based on a preset network conversion technology and the first preset protocol to obtain a second forwarding message includes:

the access cloud gateway processes the first forwarding message based on the first preset protocol to obtain a message to be forwarded;

the access cloud gateway performs conversion processing on the message to be forwarded based on a preset network conversion technology to obtain a network conversion message;

The access cloud gateway encapsulates the network conversion message based on a network dialing protocol and the first preset protocol to obtain a second forwarding message;

the networking system further comprises a security service cloud gateway, the initial message is an uplink message, the access cloud gateway processes the first forwarding message based on the first preset protocol to obtain a message to be forwarded, and the method comprises the following steps:

the access cloud gateway decapsulates the first forwarding message based on the first preset protocol to obtain a decapsulated message;

the access cloud gateway encapsulates the decapsulation message based on a second preset protocol to obtain a first repackaging message, and introduces the first repackaging message into the security service cloud gateway;

the security service cloud gateway performs security processing on the first repackaged message to obtain a message to be forwarded, and sends the message to be forwarded to the access cloud gateway;

wherein the second preset protocol comprises a VxLAN protocol;

the security service cloud gateway performs security processing on the first repackaged message to obtain a message to be forwarded, and sends the message to be forwarded to the access cloud gateway, including:

The security service cloud gateway decapsulates the first decapsulated message based on the second preset protocol to obtain a first decapsulated message;

the security service cloud gateway filters and cleans the first repackaging message based on a preset security network library to obtain a security repackaging message;

the security service cloud gateway encapsulates the security decapsulation message based on the second preset protocol to obtain a message to be forwarded, and sends the message to be forwarded to the access cloud gateway;

the initial message comprises a protocol message and a service message, and when the security service cloud gateway is started, the protocol message and the service message are distinguished and processed separately.

7. The utility model provides an access cloud gateway, is characterized in that is applied to the networking system, networking system includes user's edge device, at least two network edge devices, access cloud gateway and broadband access server, includes:

the message receiving unit is used for receiving a first forwarding message sent by the first target network edge device through the first target tunnel; the first forwarding message is obtained by encapsulating an initial message by the first target network edge device based on a first preset protocol, the initial message is sent by a user edge device, the first target tunnel and the first target network edge device are determined by the user edge device according to a tunnel selection condition, and the tunnel selection condition is determined based on at least one of a real-time device load condition, a main and standby attribute and a real-time tunnel on-off condition of each network edge device;

A first determining unit, configured to determine a second target tunnel and a second target network edge device according to the tunnel selection condition;

the message processing unit is used for processing the first forwarding message based on a preset network conversion technology and the first preset protocol to obtain a second forwarding message;

a message forwarding unit, configured to send the second forwarding message to the broadband access server through the second target tunnel and the second target network edge device;

the step of processing the first forwarding message by the access cloud gateway based on a preset network conversion technology and the first preset protocol to obtain a second forwarding message includes:

the access cloud gateway processes the first forwarding message based on the first preset protocol to obtain a message to be forwarded;

the access cloud gateway performs conversion processing on the message to be forwarded based on a preset network conversion technology to obtain a network conversion message;

the access cloud gateway encapsulates the network conversion message based on a network dialing protocol and the first preset protocol to obtain a second forwarding message;

the networking system further comprises a security service cloud gateway, the initial message is an uplink message, the access cloud gateway processes the first forwarding message based on the first preset protocol to obtain a message to be forwarded, and the method comprises the following steps:

The access cloud gateway decapsulates the first forwarding message based on the first preset protocol to obtain a decapsulated message;

the access cloud gateway encapsulates the decapsulation message based on a second preset protocol to obtain a first repackaging message, and introduces the first repackaging message into the security service cloud gateway;

the security service cloud gateway performs security processing on the first repackaged message to obtain a message to be forwarded, and sends the message to be forwarded to the access cloud gateway;

wherein the second preset protocol comprises a VxLAN protocol;

the security service cloud gateway performs security processing on the first repackaged message to obtain a message to be forwarded, and sends the message to be forwarded to the access cloud gateway, including:

the security service cloud gateway decapsulates the first decapsulated message based on the second preset protocol to obtain a first decapsulated message;

the security service cloud gateway filters and cleans the first repackaging message based on a preset security network library to obtain a security repackaging message;

the security service cloud gateway encapsulates the security decapsulation message based on the second preset protocol to obtain a message to be forwarded, and sends the message to be forwarded to the access cloud gateway;

The initial message comprises a protocol message and a service message, and when the security service cloud gateway is started, the protocol message and the service message are distinguished and processed separately.