CN119363690A

CN119363690A - Multi-layer VLAN message processing method, device and equipment based on switch

Info

Publication number: CN119363690A
Application number: CN202411942741.1A
Authority: CN
Inventors: 胡守强; 梁凯; 陈清华
Original assignee: Yunhe Zhiwang Shanghai Technology Co ltd
Current assignee: Yunhe Zhiwang Shanghai Technology Co ltd
Priority date: 2024-12-27
Filing date: 2024-12-27
Publication date: 2025-01-24
Anticipated expiration: 2044-12-27
Also published as: CN119363690B

Abstract

A method for processing multi-layer VLAN message based on exchanger includes analyzing VLAN layer number and TPID of each layer in message when message with multi-layer VLAN is received, inserting filling field after VLAN field for message with different layer VLAN in line card to make VLAN layer number of message be preset layer, identifying filling field and skipping filling field content according to configured rule in backboard card to analyze message segment after filling field to obtain input port value and IP five-element information, matching input port value and IP five-element information according to configured ACL rule to ensure message transmitting path, transmitting message to target board card according to transmitting path, deleting filling field according to filling byte number marked in filling field in final processing stage of message and restoring message to original VLAN format. The invention enables the exchanger to identify and process the multi-layer VLAN messages with different TPIDs.

Description

Multi-layer VLAN message processing method, device and equipment based on switch

Technical Field

The present invention relates to the field of network devices, and in particular, to a method, an apparatus, and a device for processing a multi-layer VLAN packet based on a switch.

Background

In current networking environments, rack-mounted data splitters (e.g., rack-mounted switches) are widely used for traffic management in data centers or enterprise networks. In practical applications, messages with VLANs of different layers often occur, and these VLANs not only have multiple layers, but also may use different TPID (Tag Protocol Identifier). Conventional switches typically support only a few TPID types and only two-layer VLAN identification and processing capabilities, which place limitations on data traffic management in complex network environments.

When the existing switch matches the message with the multi-layer VLAN by using an Access Control List (ACL) rule, the switch cannot accurately analyze the subsequent message fields of the VLAN because the multi-layer VLAN structure and the messages with different TPIDs cannot be identified, and then the normal forwarding and processing of the message are affected. Therefore, expanding the processing capability of the switch to multi-layer VLAN and various TPIDs becomes a problem to be solved urgently for the data splitter.

Disclosure of Invention

In view of the above problems, an objective of an embodiment of the present invention is to provide a method, an apparatus, and a device for processing a multi-layer VLAN packet based on a switch, so as to improve the above problems.

The embodiment of the invention provides a multi-layer VLAN message processing method based on a switch, which comprises the following steps:

S101, when a message with a plurality of layers of VLAN is received, analyzing the VLAN layers and the TPID of each layer in the message;

S102, inserting a filling field into a line card aiming at messages of VLAN with different layers after VLAN fields of the messages so that the VLAN layers of the messages are preset layers, wherein the filling field comprises a tracing VLAN field T-tag of the outermost layer and is used for carrying an input port value of the messages, and the filling field uses different filling values to mark the number of inserted filling bytes;

S103, in the back board card, the filling field is identified according to the configured rule and the filling field content is skipped, so that the subsequent message field of the filling field is analyzed to obtain an input port value and IP five-tuple information, and the input port value and the IP five-tuple information are matched according to the configured ACL rule, so that the forwarding path of the message is ensured;

S104, the message is sent to a target board card according to the forwarding path, and in the final processing stage of the message of the target board, the filling field is deleted according to the number of filling bytes marked in the filling field, and the message is restored to the original VLAN format.

Preferably, the VLAN format of the message includes a destination MAC address, a source MAC address, a VLAN tag, a message type, a payload, and a frame check sequence.

Preferably, the length of the padding field is determined according to the number of bytes that are complemented as needed.

Preferably, the IP five-tuple information includes a source IP address, a destination IP address, a source port, a destination port, and a protocol.

Preferably, the method further comprises:

and adding a layer of vlan tag at the back of the message filling field, wherein the vid field of the layer of vlan tag carries the port id of the port.

Preferably, in step S103, further comprising:

when the ACL rules cannot be matched correctly or the message format has a problem, the message is discarded.

The embodiment of the invention also provides a multi-layer VLAN message processing device based on the switch, which comprises:

The analysis unit is used for analyzing the VLAN layers and the TPIDs of all layers in the message when receiving the message with the multilayer VLAN;

the filling unit is used for inserting a filling field into a line card aiming at messages of different layer numbers of VLAN (virtual local area network) after VLAN fields of the filling unit so that the VLAN layers of the messages are preset layers, wherein the filling field comprises a tracing VLAN field T-tag of the outermost layer and is used for carrying an input port value of the messages, and the filling field uses different filling values to mark the number of inserted filling bytes;

The matching unit is used for identifying the filling field according to the configured rule and skipping the content of the filling field in the back board card so as to analyze the subsequent message field of the filling field to obtain an input port value and IP five-tuple information, and matching the input port value and the IP five-tuple information according to the configured ACL rule to ensure the forwarding path of the message;

and the deleting unit is used for sending the message to the target board card according to the forwarding path, deleting the filling field according to the number of filling bytes marked in the filling field in the final message processing stage of the target board block, and restoring the message into the original VLAN format.

The embodiment of the invention also provides a multi-layer VLAN message processing device based on the switch, which comprises a memory and a processor, wherein the memory stores a computer program which can be executed by the processor to realize the multi-layer VLAN message processing method based on the switch.

In summary, compared with the prior art, this embodiment has at least the following improvements:

1. And expanding VLAN identification capability, namely, by identifying the message structure of the multi-layer VLAN and inserting a filling field behind the VLAN field, the VLAN layer number is complemented to a fixed layer number, so that the VLAN message with different TPID types can be compatible, and flexible VLAN layer number expansion is realized.

2. And the analysis accuracy of the message is improved, namely the design of the filling field comprises a mark for inserting the byte number, so that the field can be conveniently identified and skipped during the analysis of the subsequent message, and the analysis accuracy of the message is ensured. The parser and ACL rules of the switch are configured to skip the filling fields so as to accurately parse the subsequent actual message fields and match the message quintuple information.

3. And maintaining the message consistency, namely deleting the filled filling field according to the number of filling bytes marked in the filling field when the online card outputs the message, and recovering the format of the original message, thereby ensuring the consistency of the message in network transmission. The restoration processing ensures the integrity of the message, does not change the content structure of the message, and does not damage the original format of the message.

4. The method is suitable for complex network environments, can expand VLAN analysis capability without changing switch hardware, supports messages of different TPIDs and multiple layers of VLANs, and is suitable for flow management and distribution requirements in complex environments such as data centers, enterprise networks and the like.

Drawings

In order to more clearly illustrate the technical solutions of the present invention, the drawings that are needed in the embodiments will be briefly described below, and it is obvious that the drawings in the following description are only some embodiments of the present invention, and that other drawings can be obtained according to these drawings without inventive effort for a person skilled in the art.

Fig. 1 is a flow chart of a method for processing a switch-based multi-layer VLAN packet according to a first embodiment of the present invention.

Fig. 2 is a schematic diagram of adding a complement field.

Fig. 3 is a schematic diagram of an AVL matching and redirection process.

Fig. 4 is a schematic diagram of a message reduction process.

Fig. 5 is a schematic structural diagram of a switch-based multi-layer VLAN packet processing device according to a second embodiment of the present invention.

Detailed Description

The following description of the embodiments of the present invention will be made clearly and completely with reference to the accompanying drawings, in which it is apparent that the embodiments described are only some embodiments of the present invention, but not all embodiments. All other embodiments, which can be made by those skilled in the art based on the embodiments of the invention without making any inventive effort, are intended to be within the scope of the invention.

Referring to fig. 1, a first embodiment of the present invention provides a switch-based multi-layer VLAN packet processing method, which may be executed by a switch-based multi-layer VLAN packet processing device (hereinafter referred to as processing device), and in particular, by one or more processors in the processing device, so as to implement the following steps:

S101, when a message with a plurality of layers of VLAN is received, analyzing the VLAN layers and the TPID of each layer in the message.

In this embodiment, the switch may receive messages of VLANs with different layers. The VLAN format of the message contains the destination MAC address (dmac), source MAC address (smac), VLAN tag (tag), message type (type), payload (payload), and Frame Check Sequence (FCS).

Where the message may contain multiple VLAN tags (including different TPIDs) and some tags may have unknown TPID types. In fig. 2, tag label represents a known TPID carried by a message, and MPLSx represents a tunnel message with a multi-layer MPLS label.

S102, inserting a filling field into a line card aiming at messages of VLANs with different layers so that the VLAN layers of the messages are preset layers, wherein the filling field comprises a tracing VLAN field T-tag of the outermost layer and is used for carrying an input port value of the messages, and the filling field marks the number of inserted filling bytes by using different filling values.

In this embodiment, a packet first enters a Line Card, such as Line Card #1, and a Switch in the Line Card uses a user-defined ACL rule to traverse vlan information carried in an identification packet to perform preliminary processing. VLAN tags of different TPIDs and multi-layer VLAN structures are identified and parsed.

In this embodiment, the length of the padding field determines, according to the number of bytes that need to be completed, that the padding field is directly added to the packet that does not carry VLAN information, and the packet carrying the multi-layer VLAN tag fills the padding field at the back, so as to ensure that the number of VLAN layers in the packet reaches a preset fixed number of layers (e.g., 4 layers).

In this embodiment, the padding field further includes a flag of the number of padding bytes, as shown in pad-0 to pad-2 in fig. 2, so as to identify the padding portions during subsequent processing.

In addition, in order to support the matching mode of the port+ip 5 tuple, the line card may further add an outermost layer tag, such as vlan field T-tag in fig. 2, for carrying input port information of the packet.

S103, in the back board card, the filling field is identified according to the configured rule and the filling field content is skipped, so that the subsequent message field of the filling field is analyzed to obtain the input port value and the IP quintuple information, and the input port value and the IP quintuple information are matched according to the configured ACL rule, so that the forwarding path of the message is ensured.

In this embodiment, as shown in fig. 3, after the processing of Line Card #1, the message is forwarded to a back plane Card (Fabric Card), where the matching of the final target of the client is achieved using ACL (access control list) rules. The ACL rule uses port+ip 5 tuple information as KEY, and is responsible for matching the input port of the message with five tuple information (such as source IP, destination IP, source port, destination port and protocol), and determining the forwarding path of the message.

In order to make the egress line card determine the actual egress port of the message, the backplane card further adds a vlan tag layer behind the message filling field, as shown in the E-tag field in fig. 2, where the vid field of the vlan tag layer carries the port id of the egress port.

In order to avoid mismatching, a parser of the exchange chip is configured to skip filling fields in the message, directly parse actual message content, and ensure accuracy of the message in an ACL matching process.

After the ACL rule matching of the Fabric Card to the message is completed, the message is transmitted to the target Line Card (e.g. Line card#2 or Line card#n).

In these target line cards, the message is further processed again by the switching chip. For example, the switch chip on Line Card #2 will detect the padding fields and skip them according to the value of the padding byte number flag, thereby directly parsing the actual content of the message.

As shown in fig. 4, the T-tag, the pad field, and the E-tag are deleted at the final processing stage of the message, and the message is restored to the original format, such as to the standard ethernet frame format (VLAN tag of 4 layers or less, including the original TPID and VLAN structure). This ensures that the message is transmitted consistently in the network without causing incompatibility in the message format due to the presence of the completion field.

In addition, an exception handling mechanism is provided on the Fabric Card, such as shown in the "transmitted drop" area of FIG. 3. In some cases, if ACL rules cannot be matched correctly or there is a problem with the message format, the message will be discarded to ensure data security and stability of network traffic.

Referring to fig. 5, the second embodiment of the present invention further provides a switch-based multi-layer VLAN packet processing device, which includes:

an analysis unit 210, configured to, when receiving a packet with multiple layers of VLANs, analyze the number of layers of VLANs and TPIDs of each layer in the packet;

A filling unit 220, configured to insert a filling field after a VLAN field of a packet in a line card for a packet of a VLAN of different layer numbers, so that the VLAN layer number of the packet is a preset layer number, where the filling field includes a tracing VLAN field T-tag of an outermost layer, is used to carry an input port value of the packet, and uses different filling values to mark the number of inserted filling bytes in the filling field;

The matching unit 230 is configured to identify a filling field according to a configured rule and skip the content of the filling field in the back board card, so as to analyze a subsequent message field of the filling field to obtain an input port value and IP quintuple information, and match the input port value and the IP quintuple information according to the configured ACL rule, so as to ensure a forwarding path of the message;

And the deleting unit 240 is configured to send the message to the target board according to the forwarding path, delete the filling field according to the number of filling bytes marked in the filling field in the final processing stage of the message of the target board, and restore the message to the original VLAN format.

The third embodiment of the present invention further provides a switch-based multi-layer VLAN packet processing device, which includes a memory and a processor, where the memory stores a computer program, and the computer program is capable of being executed by the processor, so as to implement the switch-based multi-layer VLAN packet processing method as described above.

The fourth embodiment of the present invention further provides a computer readable storage medium, where a computer program is stored, where the computer program can be executed by a processor of a device where the computer readable storage medium is located, so as to implement the switch-based multi-layer VLAN packet processing method.

In the embodiments provided in the present invention, it should be understood that the disclosed apparatus and method may be implemented in other manners. The apparatus and method embodiments described above are merely illustrative, for example, flow diagrams and block diagrams in the figures illustrate the architecture, functionality, and operation of possible implementations of apparatus, methods and computer program products according to various embodiments of the present invention. In this regard, each block in the flowchart or block diagrams may represent a module, segment, or portion of code, which comprises one or more executable instructions for implementing the specified logical function(s). It should also be noted that in some alternative implementations, the functions noted in the block may occur out of the order noted in the figures. For example, two blocks shown in succession may, in fact, be executed substantially concurrently, or the blocks may sometimes be executed in the reverse order, depending upon the functionality involved. It will also be noted that each block of the block diagrams and/or flowchart illustration, and combinations of blocks in the block diagrams and/or flowchart illustration, can be implemented by special purpose hardware-based systems which perform the specified functions or acts, or combinations of special purpose hardware and computer instructions.

In addition, functional modules in the embodiments of the present invention may be integrated together to form a single part, or each module may exist alone, or two or more modules may be integrated to form a single part.

The functions, if implemented in the form of software functional modules and sold or used as a stand-alone product, may be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention may be embodied essentially or in a part contributing to the prior art or in a part of the technical solution, in the form of a software product stored in a storage medium, comprising several instructions for causing a computer device (which may be a personal computer, an electronic device, or a network device, etc.) to perform all or part of the steps of the method according to the embodiments of the present invention. The storage medium includes a U disk, a removable hard disk, a Read-Only Memory (ROM), a random access Memory (RAM, random Access Memory), a magnetic disk, an optical disk, or other various media capable of storing program codes. It should be noted that, in this document, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising one does not exclude the presence of other like elements in a process, method, article, or apparatus that comprises an element.

The terminology used in the embodiments of the invention is for the purpose of describing particular embodiments only and is not intended to be limiting of the invention. As used in this application and the appended claims, the singular forms "a," "an," and "the" are intended to include the plural forms as well, unless the context clearly indicates otherwise.

It should be understood that the term "and/or" as used herein is merely an association relationship describing the associated object, and means that there may be three relationships, e.g., a and/or B, and that there may be three cases where a exists alone, while a and B exist together, and B exists alone. In addition, the character "/" herein generally indicates that the front and rear associated objects are an "or" relationship.

The term "if" as used herein may be interpreted as "at" or "when" depending on the context "or" in response to a determination "or" in response to a detection. Similarly, the phrase "if determined" or "if detected (stated condition or event)" may be interpreted as "when determined" or "in response to determination" or "when detected (stated condition or event)" or "in response to detection (stated condition or event), depending on the context.

References to "first\second" in the embodiments are merely to distinguish similar objects and do not represent a particular ordering for the objects, it being understood that "first\second" may interchange a particular order or precedence where allowed. It is to be understood that the "first\second" distinguishing aspects may be interchanged where appropriate, such that the embodiments described herein may be implemented in sequences other than those illustrated or described herein.

The above description is only of the preferred embodiments of the present invention and is not intended to limit the present invention, but various modifications and variations can be made to the present invention by those skilled in the art. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

Claims

1. A multi-layer VLAN message processing method based on a switch is characterized by comprising the following steps:

2. The switch-based multi-layer VLAN message processing method of claim 1, wherein the VLAN format of the message comprises a destination MAC address, a source MAC address, a VLAN tag, a message type, a payload, and a frame check sequence.

3. The method for processing a switch-based multi-layer VLAN packet according to claim 1, wherein the length of the padding field is determined according to the number of bytes that are complemented as needed.

4. The method for processing a switch-based multi-layer VLAN packet according to claim 3, wherein the IP five-tuple information includes a source IP address, a destination IP address, a source port, a destination port, and a protocol.

5. The switch-based multi-layer VLAN message processing method of claim 1, further comprising, in step S103:

6. The switch-based multi-layer VLAN message processing method of claim 1, further comprising, in step S103:

7. A switch-based multi-layer VLAN message processing apparatus, comprising:

8. A switch-based multi-layer VLAN message processing device, comprising a memory and a processor, wherein the memory has stored therein a computer program executable by the processor to implement the switch-based multi-layer VLAN message processing method of any of claims 1 to 6.