[go: up one dir, main page]

WO2016180044A1 - 报文发送方法及装置 - Google Patents

报文发送方法及装置 Download PDF

Info

Publication number
WO2016180044A1
WO2016180044A1 PCT/CN2016/070069 CN2016070069W WO2016180044A1 WO 2016180044 A1 WO2016180044 A1 WO 2016180044A1 CN 2016070069 W CN2016070069 W CN 2016070069W WO 2016180044 A1 WO2016180044 A1 WO 2016180044A1
Authority
WO
WIPO (PCT)
Prior art keywords
sfp
parent
message
child
packet
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/CN2016/070069
Other languages
English (en)
French (fr)
Inventor
孟伟
王翠
刘仓明
郑坤
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
ZTE Corp
Original Assignee
ZTE Corp
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by ZTE Corp filed Critical ZTE Corp
Publication of WO2016180044A1 publication Critical patent/WO2016180044A1/zh
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/46—Interconnection of networks

Definitions

  • the present invention relates to the field of communications, and in particular to a message sending method and apparatus.
  • Service Function Chaining is a network technology currently being researched and standardized. Since the development of the data center network to the Overlay network, the network edge has become the demarcation point between the virtual network and the physical network, where the network edge is Server or ToR, and possibly the gateway.
  • Overlay technology does not solve all the problems. There are many middlewares in the data center, such as firewall/load balancer. These devices are processed based on user services. If you tunnel through these devices, it is obviously No way.
  • This deployment model of the data center requires that the virtual firewall/load balancer can be deployed arbitrarily in the network, that is, independent of the network topology. This will create new problems. How can traffic be handled flexibly through a virtual firewall/load balancer? New middleware such as virtual firewalls/load balancers are created. These virtual firewalls/load balancers are deployed at the edge of the network and can be implemented by standard servers.
  • FIG. 1 shows the business function chain (SFC) example diagram, as shown in Figure 1, representing two Service Chains.
  • the framework of SFC can be basically divided into the following components and modules:
  • Service Overlay which is an Overlay technology that each network edge node needs to communicate with
  • the Generic Service Control Plane is the controller that forms the Service Function Chaining.
  • Metadata (Control Plane Metadata), which is a feature. Metadata (metadata) allows each edge service processing node to exchange information with each other to achieve certain business processing purposes;
  • SFP Service Function Path
  • SFP is the specific path information of a service chain. For example, a flow carries out the processing of the service chain, and it needs to pass through specific services.
  • the finest granularity of path information of an SFP can be specific to an instance of a service.
  • Each SFP has a corresponding ID (identification number) corresponding to the corresponding service path.
  • one SFP ID only corresponds to one service function path.
  • Example 1 when the SFP ID is equal to 1, the corresponding SFP is "NAT (Network Address Translation) -> DPI (Deep Packet Detection)", then after the first traffic packet of the user enters the NAT, the NAT generates a forwarding table and Sending the table to the switch, for the second traffic of the same session of the user, the address translation can be performed directly on the switch, and the service chain only needs to perform DPI. Therefore, the service flow path processed by the first traffic packet of the user and the second traffic packet of the same session is different.
  • NAT Network Address Translation
  • DPI Deep Packet Detection
  • Example 2 When the SFP ID is equal to 2, the corresponding SFP is “FW (Firewall)->DPI (Deep Message Detection)-HTTP FILTER (HTTP Filtering)”, where the DPI effective time is set from 8:00 to 18:00. Therefore, between 8:00 and 18:00, execute "FW (Firewall) -> DPI (Deep Message Detection) -> HTTP FILTER (HTTP Filter)"; and between 18:00-8:00, execute "FW (Firewall) -> HTTP FILTER (HTTP Filter)”. Therefore, the path of business processing is different at different time periods.
  • the SFC cannot change the service chain path according to the policy, and an effective solution has not been proposed.
  • the invention provides a packet sending method and device, so as to solve at least the problem that the SFC cannot change the service chain path according to the policy in some scenarios in the related art.
  • a packet sending method including: acquiring a parent service function path identifier SFP ID and one or more child SFP IDs corresponding to the parent SFP ID; receiving a message from the user equipment Obtaining a specified parent SFP ID and a specified child SFP ID corresponding to the type of the message; sending the message to the parent SFP corresponding to the specified parent SFP ID, or the child SFP corresponding to the specified child SFP ID .
  • the sending the foregoing message to the parent SFP corresponding to the specified parent SFP ID, or the sub-SFP corresponding to the specified sub-SFP ID includes: including the first designated parent SFP ID and the specified child SFP ID
  • the first specified packet of 0 is encapsulated into the SFP, and the encapsulated SFP and the packet are sent to the parent SFP corresponding to the first designated parent SFP ID; or the second designated parent SFP ID and the first designation are included.
  • the second specified packet whose sub-SFP ID is non-zero is encapsulated into the SFP, and the encapsulated SFP and the foregoing packet are sent to the sub-SFP corresponding to the first designated sub-SFP ID.
  • the first specified packet is encapsulated into an SFP header or the second specified packet is encapsulated into an SFP header.
  • the foregoing SFP ID and the one or more sub-SFP IDs are configured by a controller or configured by a network element.
  • the first specified packet that includes the first designated parent SFP ID and the specified sub-SFP ID is 0 is encapsulated into the SFP, and the encapsulated SFP and the packet are sent to the first designated parent SFP ID.
  • the parent SFP includes: determining that the message does not exist locally; or determining that the message is at the sampling point; or determining that the message is the first packet; or determining that the sub-SFP is not configured.
  • the second specified packet that includes the second specified parent SFP ID and the first designated sub-SFP ID is non-zero is encapsulated into the SFP, and the encapsulated SFP and the foregoing packet are sent to the first designated sub-SFP ID.
  • the corresponding sub-SFP includes: determining that the forwarding table of the foregoing message exists; or determining that the foregoing packet is not at the sampling point.
  • the obtaining the parent service function path identifier SFP ID and the one or more child SFP IDs corresponding to the parent SFP ID includes: for a parent SFP unique to one session identifier, respectively identifying different children for multiple traffic in the session SFP.
  • a packet sending method including: configuring a parent service function path identifier SFP ID and one or more child SFP IDs corresponding to the parent SFP ID; and the parent SFP ID And the foregoing sub-SFP ID is sent to the network element, where the parent SFP corresponding to the parent SFP ID and the child SFP corresponding to the child SFP ID are used for sending the packet.
  • a packet sending method including: configuring a parent service function path identifier SFP ID and one or more child SFP IDs corresponding to the parent SFP ID, wherein the parent SFP The parent SFP corresponding to the ID and the child SFP corresponding to the child SFP ID are used for sending the message.
  • a message sending apparatus where the apparatus is applied to a classifier, and the apparatus includes: a first acquiring module, configured to acquire a parent service function path identifier SFP ID and the parent SFP ID Corresponding one or more sub-SFP IDs; a receiving module, configured to receive a message from the user equipment; and a second obtaining module, configured to obtain a specified parent SFP ID and a specified sub-SFP ID corresponding to the type of the packet; And configured to send the message to the parent SFP corresponding to the specified parent SFP ID or to the child SFP corresponding to the specified child SFP ID.
  • the sending module further includes: a first sending unit, configured to encapsulate the first specified packet that includes the first designated parent SFP ID and the specified sub-SFP ID to 0, and encapsulates the encapsulated SFP and the foregoing
  • the packet is sent to the parent SFP corresponding to the first designated parent SFP ID; or the second sending unit is configured to include the second specified packet with the second designated parent SFP ID and the first designated child SFP ID being non-zero.
  • the SFP is encapsulated into the SFP, and the encapsulated SFP and the foregoing packet are sent to the sub-SFP corresponding to the first designated sub-SFP ID.
  • the first sending unit is further configured to encapsulate the first specified packet into an SFP header
  • the second sending unit is further configured to encapsulate the second specified packet into an SFP header.
  • the foregoing SFP ID and the one or more sub-SFP IDs are configured by a controller or configured by a network element.
  • the foregoing apparatus further includes: the first determining module is configured to encapsulate the first specified packet that includes the first designated parent SFP ID and the specified sub-SFP ID to 0, and encapsulates the encapsulated SFP and the foregoing packet Before the sending to the parent SFP corresponding to the first designated parent SFP ID, determining that the packet does not exist locally; or determining that the packet is at the sampling point; or determining that the packet is the first packet; or determining that the packet is not configured Sub-SFP.
  • the first determining module is configured to encapsulate the first specified packet that includes the first designated parent SFP ID and the specified sub-SFP ID to 0, and encapsulates the encapsulated SFP and the foregoing packet Before the sending to the parent SFP corresponding to the first designated parent SFP ID, determining that the packet does not exist locally; or determining that the packet is at the sampling point; or determining that the packet is the first packet; or determining that the packet is not configured Sub-SFP.
  • the apparatus further includes: the second determining module is configured to encapsulate the second specified packet that includes the second designated parent SFP ID and the first designated sub-SFP ID to be non-zero, and the encapsulated SFP and the foregoing Before the packet is sent to the sub-SFP corresponding to the first designated sub-SFP ID, it is determined that the forwarding table of the packet exists; or it is determined that the packet is not at the sampling point.
  • the second determining module is configured to encapsulate the second specified packet that includes the second designated parent SFP ID and the first designated sub-SFP ID to be non-zero, and the encapsulated SFP and the foregoing Before the packet is sent to the sub-SFP corresponding to the first designated sub-SFP ID, it is determined that the forwarding table of the packet exists; or it is determined that the packet is not at the sampling point.
  • the first acquiring module is further configured to identify a parent SFP that is unique to one session, and identify different sub-SFPs for the multiple traffic in the session.
  • a message transmitting apparatus wherein the apparatus is applied to a controller,
  • the device includes: a configuration module configured to configure a parent service function path identifier SFP ID and one or more child SFP IDs corresponding to the parent SFP ID; and a sending module configured to send the parent SFP ID and the foregoing child SFP ID to the network
  • the element wherein the parent SFP corresponding to the parent SFP ID and the child SFP corresponding to the child SFP ID are used for sending the message.
  • a message sending apparatus where the apparatus is applied to a network element, and the apparatus includes: a configuration module configured to configure a parent service function path identifier SFP ID and corresponding to the parent SFP ID One or more child SFP IDs, where the parent SFP corresponding to the parent SFP ID and the child SFP corresponding to the child SFP ID are used for sending the message.
  • the parent service function path identifier SFP ID and one or more child SFP IDs corresponding to the parent SFP ID are obtained; the packet from the user equipment is received; and the specified parent SFP corresponding to the type of the packet is obtained. ID and the specified sub-SFP ID; the message is sent to the parent SFP corresponding to the specified parent SFP ID, or to the child SFP corresponding to the specified child SFP ID.
  • FIG 1 is a diagram of a business function chain (SFC);
  • FIG. 2 is a flowchart of a method for transmitting a message according to an embodiment of the present invention
  • FIG. 3 is a structural block diagram of a message transmitting apparatus according to an embodiment of the present invention.
  • FIG. 4 is a structural block diagram (1) of a message transmitting apparatus according to an embodiment of the present invention.
  • FIG. 5 is a structural block diagram (2) of a message sending apparatus according to an embodiment of the present invention.
  • FIG. 6 is a structural block diagram (3) of a message transmitting apparatus according to an embodiment of the present invention.
  • FIG. 7 is a flowchart (1) of a message sending method according to an embodiment of the present invention.
  • FIG. 8 is a structural block diagram (4) of a message transmitting apparatus according to an embodiment of the present invention.
  • FIG. 9 is a flowchart (2) of a message sending method according to an embodiment of the present invention.
  • FIG. 10 is a structural block diagram (5) of a message transmitting apparatus according to an embodiment of the present invention.
  • FIG. 11 is a schematic diagram of an application scenario of a service function chain according to an embodiment of the present invention.
  • FIG. 12 is a flow chart of message forwarding according to an embodiment of the present invention.
  • FIG. 13 is a schematic diagram of packet encapsulation according to an embodiment of the present invention.
  • FIG. 14 is a schematic diagram of a service function chain application scenario according to Embodiment 1 of the present invention.
  • FIG. 15 is a schematic diagram of a service function chain application scenario according to Embodiment 2 of the present invention.
  • FIG. 16 is a schematic diagram of a service function chain application scenario according to Embodiment 3 of the present invention.
  • FIG. 2 is a flowchart of a packet sending method according to an embodiment of the present invention. As shown in FIG. 2, the process includes the following steps:
  • Step S202 acquiring a parent service function path identifier SFP ID and one or more child SFP IDs corresponding to the parent SFP ID;
  • Step S204 receiving a message from the user equipment
  • Step S206 obtaining a specified parent SFP ID and a specified sub-SFP ID corresponding to the type of the packet
  • Step S208 the message is sent to the parent SFP corresponding to the specified parent SFP ID, or to the child SFP corresponding to the specified child SFP ID.
  • the above-mentioned steps are used to configure the packet forwarding policy and the parent SFP and the sub-SFP, and send the packet to the parent SFP corresponding to the specified parent SFP ID or the child SFP corresponding to the specified child SFP ID according to the type of the packet.
  • an SFP ID corresponds to only one service function path. The above steps solve the problem that the SFC cannot change the service chain path according to the policy in some scenarios.
  • the foregoing step S208 involves sending the message to the parent SFP corresponding to the specified parent SFP ID, or to the child SFP corresponding to the specified child SFP ID.
  • the first designated parent SFP ID and The first specified packet with the sub-SFP ID of 0 is encapsulated into the SFP, and the encapsulated SFP and the packet are sent to the parent SFP corresponding to the first designated parent SFP ID.
  • the second specified packet that includes the second designated parent SFP ID and the first designated sub-SFP ID is non-zero is encapsulated into the SFP, and the encapsulated SFP and the packet are sent to the first Specify the child SFP corresponding to the child SFP ID.
  • the first specified packet is encapsulated into the SFP header or the second designated packet is encapsulated into the SFP header. unit.
  • the SFP ID and the one or more sub-SFP IDs are configured by a controller or configured by a network element.
  • the first specified packet that includes the first specified parent SFP ID and the specified sub-SFP ID is 0 is encapsulated into the SFP, and the encapsulated SFP and the packet are sent to the parent SFP corresponding to the first designated parent SFP ID.
  • determining that the message does not exist locally; or determining that the message is at a sampling point; or determining that the message is a first packet; or determining that the sub-SFP is not configured.
  • step S202 involves obtaining a parent service function path identifier SFP ID and one or more child SFP IDs corresponding to the parent SFP ID.
  • a parent SFP unique to a session identifier is used in the session. Multiple flows identify different sub-SFPs.
  • a message sending apparatus is further provided, which is used to implement the foregoing embodiments and preferred embodiments, and has not been described again.
  • the term "module” may implement a combination of software and/or hardware of a predetermined function.
  • the apparatus described in the following embodiments is preferably implemented in software, hardware, or a combination of software and hardware, is also possible and contemplated.
  • FIG. 3 is a structural block diagram of a message sending apparatus according to an embodiment of the present invention.
  • the apparatus is applied to a classifier.
  • the apparatus includes: a first acquiring module 32, configured to acquire a parent service function path identifier SFP ID. And one or more sub-SFP IDs corresponding to the parent SFP ID; the receiving module 34 is configured to receive the packet from the user equipment; and the second obtaining module 36 is configured to obtain the specified parent SFP ID corresponding to the type of the packet. And the designated sub-SFP ID; the sending module 38 is configured to send the message to the parent SFP corresponding to the specified parent SFP ID, or to the child SFP corresponding to the specified sub-SFP ID.
  • FIG. 4 is a structural block diagram (1) of a message sending apparatus according to an embodiment of the present invention.
  • the sending module 38 further includes: a first sending unit 382, configured to include a first designated parent SFP ID and a specified The first specified packet with the sub-SFP ID of 0 is encapsulated into the SFP, and the encapsulated SFP and the packet are sent to the parent SFP corresponding to the first designated parent SFP ID.
  • the second sending unit 384 is configured to include The second designated parent SFP ID and the second designated packet whose first designated sub-SFP ID is non-zero are encapsulated into the SFP, and the encapsulated SFP and the packet are sent to the sub-SFP corresponding to the first designated sub-SFP ID.
  • the first sending unit 382 is further configured to encapsulate the first specified message into the SFP header
  • the second sending unit 384 is further configured to encapsulate the second specified message into the SFP header.
  • the foregoing SFP ID and the one or more sub-SFP IDs are configured by a controller or configured by a network element.
  • FIG. 5 is a structural block diagram (2) of a message sending apparatus according to an embodiment of the present invention.
  • the apparatus further includes a first determining module 52 configured to include a first designated parent SFP ID and a designated child SFP.
  • the first specified packet with the ID of 0 is encapsulated into the SFP, and the encapsulated SFP and the packet are sent to the parent SFP corresponding to the first specified parent SFP ID, and the session is determined to have no session locally; or,
  • the message is at the sampling point; or, the message is determined to be the first packet; or, it is determined that the sub-SFP is not configured.
  • FIG. 6 is a structural block diagram (3) of a message sending apparatus according to an embodiment of the present invention.
  • the apparatus further includes a second determining module 62 configured to include a second designated parent SFP ID and a first designation.
  • the second specified packet with the sub-SFP ID being non-zero is encapsulated into the SFP, and the forwarded table of the packet is determined before the encapsulated SFP and the packet are sent to the sub-SFP corresponding to the first designated sub-SFP ID; or , to determine that the message is not at the sampling point.
  • the first obtaining module 32 is further configured to identify a parent SFP unique to one session, and identify different sub-SFPs for the multiple flows in the session.
  • FIG. 7 is a flowchart (1) of a method for sending a message according to an embodiment of the present invention. As shown in FIG. 7, the process includes the following steps:
  • Step S702 configuring a parent service function path identifier SFP ID and one or more child SFP IDs corresponding to the parent SFP ID;
  • Step S704 the parent SFP ID and the child SFP ID are sent to the network element, where the parent SFP corresponding to the parent SFP ID and the child SFP corresponding to the child SFP ID are used for sending the message.
  • the above-mentioned steps are used to configure the packet forwarding policy and the parent SFP and the sub-SFP, and send the packet to the parent SFP corresponding to the specified parent SFP ID or the child SFP corresponding to the specified child SFP ID according to the type of the packet.
  • an SFP ID corresponds to only one service function path. The above steps solve the problem that the SFC cannot change the service chain path according to the policy in some scenarios.
  • FIG. 8 is a structural block diagram (4) of a message sending apparatus according to an embodiment of the present invention.
  • the apparatus is applied to a controller.
  • the apparatus includes: a configuration module 82 configured to configure a parent service function path identifier SFP. An ID and one or more child SFP IDs corresponding to the parent SFP ID; the sending module 84 is configured to send the parent SFP ID and the child SFP ID to the network element, where the parent SFP ID corresponds to the parent SFP and the child The sub-SFP corresponding to the SFP ID is used for packet transmission.
  • FIG. 9 is a flowchart (2) of a method for sending a message according to an embodiment of the present invention. As shown in FIG. 9, the process includes the following steps:
  • Step S902 configuring a parent service function path identifier SFP ID and one or more child SFP IDs corresponding to the parent SFP ID, where the parent SFP corresponding to the parent SFP ID and the child SFP corresponding to the child SFP ID are used for the packet send.
  • FIG. 10 is a structural block diagram (5) of a message sending apparatus according to an embodiment of the present invention.
  • the apparatus is applied to a network element.
  • the apparatus includes: a configuration module 102 configured to configure a parent service function path identifier SFP.
  • the forwarding policy and the parent SFP, the sub-SFP, or the forwarding policy of the packets sent by the SFC controller and the parent SFP and the sub-SFP to the network elements in the SFC domain are defined by the SFC controller and the parent SFP and the sub-SFP to the network elements in the SFC domain.
  • FIG. 11 is a schematic diagram of a service function chain application scenario according to an embodiment of the present invention.
  • the foregoing parent SFP, sub-SFP, and forwarding policy include, for a session, identifying a unique "parent SFP"; a session generates a number of traffic (first, second, third, ... traffic), for the first traffic, the identity "Sub-SFP 1"; for the second traffic, the identification "sub-SFP 2"... and so on.
  • a parent SFP may include one or more child SFPs, or may not include any child SFPs.
  • the first traffic corresponding to the session is processed by the service path indicated by the “sub-SFP 1”, and the second traffic is processed by the service path indicated by the “sub-SFP 2”.
  • FIG. 12 is a flow chart of packet forwarding according to an embodiment of the present invention. As shown in FIG. 12, the process includes the following steps:
  • Step S1202 configuring a classification policy
  • Step S1204 the classifier matches the message
  • Step S1206 Find the traffic type to which the packet belongs.
  • Step S1208 encapsulating a parent SFP ID and a sub-SFP ID
  • Step S1210 Forwarding to the corresponding parent SFP or child SFP ID according to the traffic type.
  • the classifier performs packet classification according to the configured policy or the policy delivered by the controller, and distinguishes the first traffic and the second traffic in the same session.
  • the first traffic packet enters the classifier, and the classifier encapsulates the corresponding SFP ID in the SFC packet header, and encapsulates the ID of the sub-SFP 1, as shown in FIG.
  • the classifier sends the encapsulated first traffic packet to the service function path corresponding to the sub-SFP 1 for processing;
  • the second traffic packet enters the classifier, and the classifier encapsulates the corresponding SFP ID in the SFC header and encapsulates the ID of the sub-SFP 2.
  • the classifier sends the encapsulated first traffic packet to the service function path corresponding to the sub-SFP 2 for processing;
  • FIG. 14 is a schematic diagram of a service function chain application scenario according to Embodiment 1 of the present invention. As shown in FIG. 14, the method includes the following steps:
  • step S1401 the controller configures the user data to perform the operation of the SFP as a service function chain of the NAT->DPI->firewall; and the NAT service generation forwarding table is sent to the switch, and the firewall service forwarding table is not sent to the switch;
  • step S1402 the controller configures a service chain with a parent SFP ID of 100, "NAT->DPI->Firewall”; a sub-SFP ID of 1, and a service chain of "DPI->firewall" to each network element in the SFC domain;
  • Step S1403 The user on the internal network sends the first packet accessing the Internet, and after filtering through the switch lookup table and the classifier, it is found that the packet has no session locally, and is the first packet of the session, so the parent SFP ID is 100. , the process of the business chain of "NAT->DPI->Firewall";
  • Step S1404 The classifier encapsulates the packet with the parent SFP ID of 100 and the child SFP ID of 0 into the SFC encapsulation header, and sends the packet to the service chain together with the packet;
  • Step S1405 After receiving the user packet, the NAT service creates a new session and sends the forwarding table of the session to the switch.
  • Step S1406 The user on the intranet sends a second message accessing the Internet, and the message and the first message belong to the same session. After the switch lookup table and the classifier filter, it is found that the forwarding table of the session already exists, so the process of the service chain with the sub-SFP ID of 1, "DPI->Firewall" is executed;
  • step S1407 the classifier encapsulates the packet with the parent SFP ID of 100 and the sub-SFP ID of 1 into the SFC encapsulation header, and sends the packet to the "DPI->Firewall" service chain together with the packet, and maintains the DPI and the firewall through the parent SFP.
  • the instance is unchanged;
  • FIG. 15 is a schematic diagram of a service function chain application scenario according to Embodiment 2 of the present invention. As shown in FIG. 15, the following steps are included.
  • Step S1501 The controller configures the user data to perform an operation of the SFP as a service function chain of a DPI->Http Filter->Firewall; wherein the DPI is detected by sampling;
  • step S1502 the controller configures a service chain with a parent SFP ID of 101, "DPI->Http Filter->Firewall”; a sub-SFP ID of 1, "Http Filter->Firewall” Service chain to each network element in the SFC domain;
  • Step S1503 After the user sends the first packet on the intranet, after filtering and sampling by the classifier, the packet is found at the DPI sampling point, so the parent SFP ID is 101, "DPI->Http filter (Http Filter) ->Firewall" business chain process;
  • Step S1504 The classifier encapsulates the packet with the parent SFP ID of 101 and the sub-SFP ID of 0 into the SFC encapsulation header, and sends the packet to the "DPI->Http Filter->Firewall" service chain together with the packet. ;
  • step S1505 the user on the intranet sends a second message accessing the Internet, and the message and the first message belong to the same user.
  • the classifier filters and filters it is found that the message is not at the DPI sampling point, so the process of the service chain with the sub-SFP ID of 1, "Http Filter -> Firewall" is executed;
  • Step S1506 The classifier encapsulates the packet with the parent SFP ID of 101 and the sub-SFP ID of 1 into the SFC encapsulation header, and sends the packet to the service chain of the “Http Filter->Firewall” together with the packet, and Keep the Http Filter and firewall instances unchanged through the parent SFP.
  • FIG. 16 is a schematic diagram of a service function chain application scenario according to Embodiment 3 of the present invention. As shown in FIG. 16, the following steps are included.
  • Step S1601 The controller configures the user data to perform an operation of the SFP as a vBRAS->Http filter (Http Filter)->Firewall->DPI service function chain;
  • step S1602 the controller configures a service chain with a parent SFP ID of 102, "vBRAS->Http filter-> firewall->DPI"; the first child SFP ID is 1, "Http filter (Http Filter) -> firewall->DPI"; the second sub-SFP ID is 2, "firewall->DPI”; the controller configures the above service chain to each network element in the SFC domain;
  • Step S1603 The controller configures the vBRAS to send the forwarding table to the switch; the controller is configured to execute the Http Filter at 6:00-18:00 Beijing time; at 6:00 Beijing time, the user of the internal network sends the first packet, After the switch table and classifier filter, the message is found to be the first packet of the user. Therefore, the process of the service chain with the parent SFP ID of 102 and "vBRAS->Http filter-> firewall->DPI" is executed. ;
  • step S1604 the classifier encapsulates the packet with the parent SFP ID of 103 and the child SFP ID of 0 into the SFC encapsulation header, and sends the message together with the packet to the "vBRAS->Http filter (Http Filter)->Firewall->DPI "business chain;
  • step S1605 at 6:01 Beijing time, the user on the intranet sends a second message accessing the Internet, and the message and the first message belong to the same user. After the switch lookup table and the classifier filter, it is found that the user has a user forwarding table locally. Therefore, the process of the service chain with the SFP ID of 1, "Http Filter -> Firewall -> DPI" is executed. ;
  • step S1606 the classifier encapsulates the packet with the parent SFP ID of 103 and the sub-SFP ID of 1 into the SFC encapsulation header, and sends the packet to the "Http Filter->Firewall->DPI" service together with the packet. Chain, and keep the Http Filter and firewall and DPI instances unchanged through the parent SFP;
  • step S1607 at 18:01 Beijing time, the user on the intranet sends the Nth message accessing the Internet, and the message and the first and second ... messages belong to the same user.
  • the switch lookup table and the classifier filter it is found that the user has a local forwarding table in the packet, and the aging time of the Http filter is no longer valid. Therefore, the service with the SFP ID of 2 and the firewall->DPI is executed.
  • Step S1608 The classifier encapsulates the packet with the parent SFP ID of 103 and the child SFP ID of 2 into the SFC encapsulation header, and sends the packet to the service chain of the "firewall->DPI" together with the packet, and maintains the firewall through the parent SFP.
  • the DPI instance is unchanged.
  • a method for generating a service function chain according to an embodiment of the present invention, in particular, a method for dividing a service chain into a parent chain and a sub-chain, solves the defect that the service chain path cannot be changed according to the policy in the related art.
  • a storage medium is further provided, wherein the software includes the above-mentioned software, including but not limited to: an optical disk, a floppy disk, a hard disk, an erasable memory, and the like.
  • modules or steps of the present invention described above can be implemented by a general-purpose computing device that can be centralized on a single computing device or distributed across a network of multiple computing devices. Alternatively, they may be implemented by program code executable by the computing device such that they may be stored in the storage device by the computing device and, in some cases, may be different from the order herein.
  • the steps shown or described are performed, or they are separately fabricated into individual integrated circuit modules, or a plurality of modules or steps thereof are fabricated as a single integrated circuit module.
  • the invention is not limited to any specific combination of hardware and software.
  • the parent service function path identifier SFP ID and one or more child SFP IDs corresponding to the parent SFP ID are obtained; the packet from the user equipment is received; and the specified parent SFP corresponding to the type of the packet is obtained. ID and the specified sub-SFP ID; the message is sent to the parent SFP corresponding to the specified parent SFP ID, or to the child SFP corresponding to the specified child SFP ID.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

本发明提供了一种报文发送方法及装置，其中，该方法包括：获取父业务功能路径标识SFP ID以及与该父SFP ID对应的一个或多个子SFP ID；接收来自用户设备的报文；获取与该报文的类型对应的指定父SFP ID和指定子SFP ID；将该报文发送至与指定父SFP ID对应的父SFP上，或者与指定子SFP ID对应的子SFP上。通过本发明解决了相关技术中某些场景下SFC无法根据策略改变业务链路径的问题。

Description

报文发送方法及装置 技术领域
本发明涉及通信领域，具体而言，涉及一种报文发送方法及装置。
背景技术
业务功能链(Service Function Chaining，简称为SFC)是目前正在研究和标准化的一种网络技术。自从数据中心网络向Overlay网络发展以后，网络边缘成为了虚拟网络与物理网络的分界点，其中网络边缘为Server或者ToR，以及可能为网关(Gateway)。然而Overlay技术并没有解决所有问题，数据中心中还有很多中间件(Middleware)，如防火墙/负载均衡器等，这些设备都是基于用户业务来处理的，如果通过隧道而穿越这些设备，显然是不行的。
数据中心的这种部署模型，要求虚拟防火墙/负载均衡器可以在网络中任意部署，也就是与网络拓扑无关。这样就会出现新的问题，如何将流量能够灵活的通过虚拟防火墙/负载均衡器进行处理？于是产生了虚拟防火墙/负载均衡器等新型中间件，这些虚拟防火墙/负载均衡器，部署在网络的边缘，可以由标准服务器来实现。
一般把虚拟防火墙/负载均衡器/网关等业务处理功能，称为Service Function，而流量经过一系列的Service Function的处理，形成SFC。图1业务功能链(SFC)示例图，如图1所示，代表两条Service Chain。
SFC的框架，目前相关技术中基本可以分为如下组件和模块：
1. Service Overlay(业务叠加)，即各个网络边缘节点需要通信的Overlay(叠加)技术；
2.通用业务控制平面(Generic Service Control Plane，简称为GSCP)，就是形成Service Function Chaining的控制器；
3. Service Classification(业务分类)，即需要进行流识别，然后特定的流，进行特定的Service Function Chaining处理；
4. Dataplane Metadata(控制平面元数据)，这是一大特点，Metadata(元数据)允许各个边缘业务处理节点，能够互相交换信息，达到某种业务处理目的；
5. SFP(业务功能路径)，SFP是组成一条业务链的具体路径信息，例如一条流进行业务链的处理，它需要经过哪些具体的业务。SFP的路径信息最细粒度可以具体到业务的实例。每个SFP都有一个对应的ID(识别号)，对应相应的业务路径。
综上而述，它是一种将网络设备业务功能和转发分离开来，从而实现了业务功能的独立运算和处理，提升网络设备的转发性能。
但是，对于相关SFC技术来说，一个SFP ID只对应一条业务功能路径。
例1，SFP ID等于1的时候，对应SFP是“NAT(网络地址转换)->DPI(深度报文检测)”，那么对于用户的第一个流量报文进入NAT之后，NAT产生转发表并发送该表到交换机上，对于该用户相同会话的第二个流量的报文，可以直接在交换机上进行地址转换，而业务链仅仅需要进行DPI就可以。因此用户的第一个流量报文和相同会话的第二个流量报文处理的业务链路径是不一样的。
例2，SFP ID等于2的时候，对应SFP是“FW(防火墙)->DPI(深度报文检测)-HTTP FILTER(HTTP过滤)”，其中设置DPI生效时间是8:00-18:00，因此在8:00-18:00之间，执行“FW(防火墙)->DPI(深度报文检测)->HTTP FILTER(HTTP过滤)”；而在18:00-8:00之间，执行“FW(防火墙)->HTTP FILTER(HTTP过滤)”。因此在不同的时间段，业务处理的路径是不同的。
针对相关技术中，某些场景下SFC无法根据策略改变业务链路径的问题，还未提出有效的解决方案。
发明内容
本发明提供了一种报文发送方法及装置，以至少解决相关技术中某些场景下SFC无法根据策略改变业务链路径的问题。
根据本发明实施例的一个方面，提供了一种报文发送方法，包括：获取父业务功能路径标识SFP ID以及与该父SFP ID对应的一个或多个子SFP ID；接收来自用户设备的报文；获取与上述报文的类型对应的指定父SFP ID和指定子SFP ID；将上述报文发送至与上述指定父SFP ID对应的父SFP上，或者与上述指定子SFP ID对应的子SFP上。
可选地，将上述报文发送至与上述指定父SFP ID对应的父SFP上，或者与上述指定子SFP ID对应的子SFP上包括：将包含第一指定父SFP ID和上述指定子SFP ID为0的第一指定报文封装至SFP，将封装后的SFP和上述报文发送至上述第一指定父SFP ID对应的父SFP上；或者，将包含第二指定父SFP ID和第一指定子SFP ID为非0的第二指定报文封装至SFP，将封装后的SFP和上述报文发送至上述第一指定子SFP ID对应的子SFP上。
可选地，将上述第一指定报文封装至SFP头部或者将上述第二指定报文封装至SFP头部。
可选地，上述SFP ID和上述一个或者多个子SFP ID由控制器配置或者由网元配置。
可选地，将包含第一指定父SFP ID和上述指定子SFP ID为0的第一指定报文封装至SFP，将封装后的SFP和上述报文发送至上述第一指定父SFP ID对应的父SFP上之前包括：确定上述报文在本地不存在会话；或者，确定上述报文在采样点；或者，确定上述报文为首包；或者，确定没有配置子SFP。
可选地，将包含第二指定父SFP ID和第一指定子SFP ID为非0的第二指定报文封装至SFP，将封装后的SFP和上述报文发送至上述第一指定子SFP ID对应的子SFP上之前包括：确定存在上述报文的转发表；或者，确定上述报文不在采样点。
可选地，获取父业务功能路径标识SFP ID以及与该父SFP ID对应的一个或多个子SFP ID包括：对于一个会话标识唯一的父SFP，对于上述会话中的多个流量分别标识不同的子SFP。
根据本发明实施例的另一个方面，还提供了一种报文发送方法，包括：配置父业务功能路径标识SFP ID以及与该父SFP ID对应的一个或多个子SFP ID；将上述父SFP ID和上述子SFP ID发送至网元，其中，上述父SFP ID对应的父SFP和上述子SFP ID对应的子SFP用于报文的发送。
根据本发明实施例的再一个方面，还提供了一种报文发送方法，包括：配置父业务功能路径标识SFP ID以及与该父SFP ID对应的一个或多个子SFP ID，其中，上述父SFP ID对应的父SFP和上述子SFP ID对应的子SFP用于报文的发送。
根据本发明实施例的一个方面，提供了一种报文发送装置，上述装置应用于分类器，上述装置包括：第一获取模块，设置为获取父业务功能路径标识SFP ID以及与该父SFP ID对应的一个或多个子SFP ID；接收模块，设置为接收来自用户设备的报文；第二获取模块，设置为获取与上述报文的类型对应的指定父SFP ID和指定子SFP ID；发送模块，设置为将上述报文发送至与上述指定父SFP ID对应的父SFP上，或者与上述指定子SFP ID对应的子SFP上。
可选地，上述发送模块还包括：第一发送单元，设置为将包含第一指定父SFP ID和上述指定子SFP ID为0的第一指定报文封装至SFP，将封装后的SFP和上述报文发送至上述第一指定父SFP ID对应的父SFP上；或者，第二发送单元，设置为将包含第二指定父SFP ID和第一指定子SFP ID为非0的第二指定报文封装至SFP，将封装后的SFP和上述报文发送至上述第一指定子SFP ID对应的子SFP上。
可选地，上述第一发送单元还设置为将上述第一指定报文封装至SFP头部；上述第二发送单元，还设置为将上述第二指定报文封装至SFP头部。
可选地，上述SFP ID和上述一个或者多个子SFP ID由控制器配置或者由网元配置。
可选地，上述装置还包括第一确定模块设置为，将包含第一指定父SFP ID和上述指定子SFP ID为0的第一指定报文封装至SFP，将封装后的SFP和上述报文发送至上述第一指定父SFP ID对应的父SFP上之前，确定上述报文在本地不存在会话；或者，确定上述报文在采样点；或者，确定上述报文为首包；或者，确定没有配置子SFP。
可选地，上述装置还包括第二确定模块设置为，将包含第二指定父SFP ID和第一指定子SFP ID为非0的第二指定报文封装至SFP，将封装后的SFP和上述报文发送至上述第一指定子SFP ID对应的子SFP上之前，确定存在上述报文的转发表；或者，确定上述报文不在采样点。
可选地，上述第一获取模块还设置为对于一个会话标识唯一的父SFP，对于上述会话中的多个流量分别标识不同的子SFP。
根据本发明实施例的另一个方面，提供了一种报文发送装置，上述装置应用于控制器， 上述装置包括：配置模块，设置为配置父业务功能路径标识SFP ID以及与该父SFP ID对应的一个或多个子SFP ID；发送模块，设置为将上述父SFP ID和上述子SFP ID发送至网元，其中，上述父SFP ID对应的父SFP和上述子SFP ID对应的子SFP用于报文的发送。
根据本发明实施例的再一个方面，提供了一种报文发送装置，上述装置应用于网元，上述装置包括：配置模块，设置为配置父业务功能路径标识SFP ID以及与该父SFP ID对应的一个或多个子SFP ID，其中，上述父SFP ID对应的父SFP和上述子SFP ID对应的子SFP用于报文的发送。
通过本发明实施例，采用获取父业务功能路径标识SFP ID以及与该父SFP ID对应的一个或多个子SFP ID；接收来自用户设备的报文；获取与该报文的类型对应的指定父SFP ID和指定子SFP ID；将该报文发送至与指定父SFP ID对应的父SFP上，或者与指定子SFP ID对应的子SFP上。解决了相关技术中某些场景下SFC无法根据策略改变业务链路径的问题。
附图说明
此处所说明的附图用来提供对本发明的进一步理解，构成本申请的一部分，本发明的示意性实施例及其说明用于解释本发明，并不构成对本发明的不当限定。在附图中：
图1业务功能链(SFC)示例图；
图2是根据本发明实施例的报文发送方法的流程图；
图3是根据本发明实施例的报文发送装置的结构框图；
图4是根据本发明实施例的报文发送装置的结构框图(一)；
图5是根据本发明实施例的报文发送装置的结构框图(二)；
图6是根据本发明实施例的报文发送装置的结构框图(三)；
图7是根据本发明实施例的报文发送方法的流程图(一)；
图8是根据本发明实施例的报文发送装置的结构框图(四)；
图9是根据本发明实施例的报文发送方法的流程图(二)；
图10是根据本发明实施例的报文发送装置的结构框图(五)；
图11是根据本发明实施例的业务功能链应用场景示意图；
图12是根据本发明实施例的报文转发流程图；
图13是根据本发明实施例的报文封装示意图；
图14是根据本发明实施例1的业务功能链应用场景示意图；
图15是根据本发明实施例2的业务功能链应用场景示意图；
图16是根据本发明实施例3的业务功能链应用场景示意图。
具体实施方式
下文中将参考附图并结合实施例来详细说明本发明。需要说明的是，在不冲突的情况下，本申请中的实施例及实施例中的特征可以相互组合。
在本实施例中提供了一种报文发送方法，图2是根据本发明实施例的报文发送方法的流程图，如图2所示，该流程包括如下步骤：
步骤S202，获取父业务功能路径标识SFP ID以及与该父SFP ID对应的一个或多个子SFP ID；
步骤S204，接收来自用户设备的报文；
步骤S206，获取与该报文的类型对应的指定父SFP ID和指定子SFP ID；
步骤S208，将该报文发送至与指定父SFP ID对应的父SFP上，或者与指定子SFP ID对应的子SFP上。
通过上述步骤，配置报文的转发策略和父SFP、子SFP，根据报文的类型将报文发送至与指定父SFP ID对应的父SFP上，或者与指定子SFP ID对应的子SFP上，对于相关SFP技术来讲，一个SFP ID只对应一条业务功能路径，上述步骤解决了相关技术中某些场景下SFC无法根据策略改变业务链路径的问题。
上述步骤S208涉及到将报文发送至与指定父SFP ID对应的父SFP上，或者与指定子SFP ID对应的子SFP上，在一个可选实施例中，将包含第一指定父SFP ID和指定子SFP ID为0的第一指定报文封装至SFP，将封装后的SFP和该报文发送至第一指定父SFP ID对应的父SFP上。在另一个可选实施例中，将包含第二指定父SFP ID和第一指定子SFP ID为非0的第二指定报文封装至SFP，将封装后的SFP和该报文发送至第一指定子SFP ID对应的子SFP上。
在将第一指定报文或者第二指定报文封装至SFP的过程中，在一个可选实施例中，将第一指定报文封装至SFP头部或者将第二指定报文封装至SFP头部。
在一个可选实施例中，上述SFP ID和上述一个或者多个子SFP ID由控制器配置或者由网元配置。
将包含第一指定父SFP ID和该指定子SFP ID为0的第一指定报文封装至SFP，将封装后的SFP和该报文发送至第一指定父SFP ID对应的父SFP上之前，在一个可选实施例中，确定上述报文在本地不存在会话；或者，确定上述报文在采样点；或者，确定上述报文为首包；或者，确定没有配置子SFP。
将包含第二指定父SFP ID和第一指定子SFP ID为非0的第二指定报文封装至SFP，将封装后的SFP和该报文发送至第一指定子SFP ID对应的子SFP上之前，在一个可选实施例中， 确定存在上述话报文的转发表；或者，确定上述报文不在采样点。
上述步骤S202中涉及到获取父业务功能路径标识SFP ID以及与该父SFP ID对应的一个或多个子SFP ID，在一个可选实施例中，对于一个会话标识唯一的父SFP，对于该会话中的多个流量分别标识不同的子SFP。
在本实施例中还提供了一种报文发送装置，该装置用于实现上述实施例及优选实施方式，已经进行过说明的不再赘述。如以下所使用的，术语“模块”可以实现预定功能的软件和/或硬件的组合。尽管以下实施例所描述的装置较佳地以软件来实现，但是硬件，或者软件和硬件的组合的实现也是可能并被构想的。
图3是根据本发明实施例的报文发送装置的结构框图，该装置应用于分类器，如图3所述，该装置包括：第一获取模块32，设置为获取父业务功能路径标识SFP ID以及与该父SFP ID对应的一个或多个子SFP ID；接收模块34，设置为接收来自用户设备的报文；第二获取模块36，设置为获取与该报文的类型对应的指定父SFP ID和指定子SFP ID；发送模块38，设置为将该报文发送至与指定父SFP ID对应的父SFP上，或者与指定子SFP ID对应的子SFP上。
图4是根据本发明实施例的报文发送装置的结构框图(一)，如图4所示，发送模块38还包括：第一发送单元382，设置为将包含第一指定父SFP ID和指定子SFP ID为0的第一指定报文封装至SFP，将封装后的SFP和该报文发送至第一指定父SFP ID对应的父SFP上；或者，第二发送单元384，设置为将包含第二指定父SFP ID和第一指定子SFP ID为非0的第二指定报文封装至SFP，将封装后的SFP和该报文发送至第一指定子SFP ID对应的子SFP上。
可选地，第一发送单元382还设置为将该第一指定报文封装至SFP头部；第二发送单元384，还设置为将第二指定报文封装至SFP头部。
可选地，上述SFP ID和上述一个或者多个子SFP ID由控制器配置或者由网元配置。
图5是根据本发明实施例的报文发送装置的结构框图(二)，如图5所示，该装置还包括第一确定模块52设置为，将包含第一指定父SFP ID和指定子SFP ID为0的第一指定报文封装至SFP，将封装后的SFP和该报文发送至第一指定父SFP ID对应的父SFP上之前，确定该报文在本地不存在会话；或者，确定该报文在采样点；或者，确定该报文为首包；或者，确定没有配置子SFP。
图6是根据本发明实施例的报文发送装置的结构框图(三)，如图6所示，该装置还包括第二确定模块62设置为，将包含第二指定父SFP ID和第一指定子SFP ID为非0的第二指定报文封装至SFP，将封装后的SFP和该报文发送至第一指定子SFP ID对应的子SFP上之前，确定存在该报文的转发表；或者，确定该报文不在采样点。
可选地，第一获取模块32还设置为对于一个会话标识唯一的父SFP，对于该会话中的多个流量分别标识不同的子SFP。
在另一个实施例中提供了另一种报文发送方法，图7是根据本发明实施例的报文发送方法的流程图(一)，如图7所示，该流程包括如下步骤：
步骤S702，配置父业务功能路径标识SFP ID以及与该父SFP ID对应的一个或多个子SFP ID；
步骤S704，将父SFP ID和子SFP ID发送至网元，其中，父SFP ID对应的父SFP和子SFP ID对应的子SFP用于报文的发送。
通过上述步骤，配置报文的转发策略和父SFP、子SFP，根据报文的类型将报文发送至与指定父SFP ID对应的父SFP上，或者与指定子SFP ID对应的子SFP上，对于相关SFP技术来讲，一个SFP ID只对应一条业务功能路径，上述步骤解决了相关技术中某些场景下SFC无法根据策略改变业务链路径的问题。
图8是根据本发明实施例的报文发送装置的结构框图(四)，该装置应用于控制器，如图8所示，该装置包括：配置模块82，设置为配置父业务功能路径标识SFP ID以及与该父SFP ID对应的一个或多个子SFP ID；发送模块84，设置为将该父SFP ID和该子SFP ID发送至网元，其中，该父SFP ID对应的父SFP和该子SFP ID对应的子SFP用于报文的发送。
在另一个实施例中提供了另一种报文发送方法，图9是根据本发明实施例的报文发送方法的流程图(二)，如图9所示，该流程包括如下步骤：
步骤S902，配置父业务功能路径标识SFP ID以及与该父SFP ID对应的一个或多个子SFP ID，其中，该父SFP ID对应的父SFP和该子SFP ID对应的子SFP用于报文的发送。
图10是根据本发明实施例的报文发送装置的结构框图(五)，该装置应用于网元，如图10所示，该装置包括：配置模块102，设置为配置父业务功能路径标识SFP ID以及与该父SFP ID对应的一个或多个子SFP ID，其中，该父SFP ID对应的父SFP和该子SFP ID对应的子SFP用于报文的发送。
针对相关技术中存在的上述问题，下面结合具体的可选实施例进行说明，在下述的可选实施例中结合了上述可选实施例及其可选实施方式。
SFC域内各个网元配置报文的转发策略和父SFP、子SFP，或者由SFC控制器下发报文的转发策略和父SFP、子SFP到SFC域内的网元。
图11是根据本发明实施例的业务功能链应用场景示意图。上述的父SFP、子SFP和转发策略包括，对于一个会话，标识唯一的“父SFP”；一个会话会产生若干流量(第一、第二、第三……流量)，对于第一流量，标识“子SFP 1”；对于第二流量，标识“子SFP 2”……以此类推。
一个父SFP可以包括一个或多个子SFP，也可以不包括任何子SFP。
如果父SFP不包含任何子SFP的情况下，上述会话的所有流量，都进行父SFP所示的业务路径进行处理；
如果父SFP包含一个或多个子SFP，那么上述会话对应的第一流量进行“子SFP 1”所示的业务路径进行处理，第二流量进行“子SFP 2”所示的业务路径进行处理。
图12是根据本发明实施例的报文转发流程图，如图12所示：该流程包括如下步骤：
步骤S1202，配置分类策略；
步骤S1204，分类器匹配报文；
步骤S1206，查找报文所属流量类型；
步骤S1208，封装父SFP ID和子SFP ID；
步骤S1210，根据流量类型转发到相应的父SFP或者子SFP ID。
具体地，分类器根据配置的策略或控制器下发的策略进行报文分类，区分同一个会话中的第一流量、第二流量……
(1)第一流量报文进入分类器，分类器在SFC报文头封装相应的SFP ID，并且同时封装子SFP 1的ID，如图13所示。
分类器将封装好的上述第一流量报文发送到“子SFP 1”对应的业务功能路径进行处理；
(2)第二流量报文进入分类器，分类器在SFC报文头封装相应的SFP ID，并且同时封装子SFP 2的ID。
分类器将封装好的上述第一流量报文发送到“子SFP 2”对应的业务功能路径进行处理；
(3)以此类推。
具体实施例1：
图14是根据本发明实施例1的业务功能链应用场景示意图，如图14所示，包括以下步骤：
步骤S1401，控制器配置该用户数据执行SFP为NAT->DPI->防火墙的业务功能链的操作；并且配置NAT业务生成转发表下发到交换机，防火墙业务转发表不下发到交换机；
步骤S1402，控制器配置父SFP ID为100，“NAT->DPI->防火墙”的业务链；子SFP ID为1，“DPI->防火墙”的业务链到SFC域内的各个网元；
步骤S1403，内网上述用户发出第一个访问Internet的报文，通过交换机查表和分类器筛选之后，发现该报文在本地没有会话存在，是会话的首包，因此执行父SFP ID为100，“NAT->DPI->防火墙”的业务链的流程；
步骤S1404，分类器封装父SFP ID为100，子SFP ID为0的报文到SFC封装头部，并和报文一起发送到业务链；
步骤S1405，NAT业务收到该用户报文之后，新建会话，并将该会话的转发表下发到交换机；
步骤S1406，内网上述用户发出第二个访问Internet的报文，且该报文和上述第一个报文同属一个会话。经过交换机查表和分类器筛选之后，发现该会话的转发表已经存在，因此执行子SFP ID为1，“DPI->防火墙”的业务链的流程；
步骤S1407，分类器封装父SFP ID为100，子SFP ID为1的报文到SFC封装头部，并和报文一起发送到“DPI->防火墙”业务链，并通过父SFP保持DPI和防火墙实例不变；
图15是根据本发明实施例2的业务功能链应用场景示意图，如图15所示，包括以下步骤
步骤S1501，控制器配置该用户数据执行SFP为DPI->Http过滤器(Http Filter)->防火墙的业务功能链的操作；其中，DPI采用抽样的方式进行检测；
步骤S1502，控制器配置父SFP ID为101，“DPI->Http过滤器(Http Filter)->防火墙”的业务链；子SFP ID为1，“Http过滤器(Http Filter)->防火墙”的业务链到SFC域内的各个网元；
步骤S1503，内网上述用户发出第一个报文，通过分类器筛选和采样之后，发现该报文在DPI采样点，因此执行父SFP ID为101，“DPI->Http过滤器(Http Filter)->防火墙”的业务链的流程；
步骤S1504，分类器封装父SFP ID为101，子SFP ID为0的报文到SFC封装头部，并和报文一起发送到“DPI->Http过滤器(Http Filter)->防火墙”业务链；
步骤S1505，内网上述用户发出第二个访问Internet的报文，该报文和上述第一个报文同属一个用户。经过分类器筛选和筛选之后，发现该报文不在DPI采样点，因此执行子SFP ID为1，“Http过滤器(Http Filter)->防火墙”的业务链的流程；
步骤S1506，分类器封装父SFP ID为101，子SFP ID为1的报文到SFC封装头部，并和报文一起发送到“Http过滤器(Http Filter)->防火墙”的业务链，并通过父SFP保持Http Filter和防火墙实例不变。
图16是根据本发明实施例3的业务功能链应用场景示意图，如图16所示，包括以下步骤
步骤S1601，控制器配置该用户数据执行SFP为vBRAS->Http过滤器(Http Filter)->防火墙->DPI的业务功能链的操作；
步骤S1602，控制器配置父SFP ID为102，“vBRAS->Http过滤器(Http Filter)->防火墙->DPI”的业务链；第一子SFP ID为1，“Http过滤器(Http Filter)->防火墙->DPI”；第二子SFP ID为2，“防火墙->DPI”；控制器配置上述业务链到SFC域内的各个网元；
步骤S1603，控制器配置vBRAS下发转发表到交换机；控制器配置在北京时间6：00-18：00执行Http Filter；北京时间6：00整，内网上述用户发出第一个报文，通过交换机查表和分类器筛选之后，发现该报文是该用户首包，因此执行父SFP ID为102，“vBRAS->Http过滤器(Http Filter)->防火墙->DPI”的业务链的流程；
步骤S1604，分类器封装父SFP ID为103，子SFP ID为0的报文到SFC封装头部，并和报文一起发送到“vBRAS->Http过滤器(Http Filter)->防火墙->DPI”业务链；
步骤S1605，北京时间6：01，内网上述用户发出第二个访问Internet的报文，该报文和上述第一个报文同属一个用户。经过交换机查表和分类器筛选之后，发现该报文已经在本地存在用户转发表，因此执行子SFP ID为1，“Http过滤器(Http Filter)->防火墙->DPI”的业务链的流程；
步骤S1606，分类器封装父SFP ID为103，子SFP ID为1的报文到SFC封装头部，并和报文一起发送到“Http过滤器(Http Filter)->防火墙->DPI”的业务链，并通过父SFP保持Http Filter和防火墙、DPI实例不变；
步骤S1607，北京时间18：01，内网上述用户发出第N个访问Internet的报文，该报文和上述第一个、第二个……报文同属一个用户。经过交换机查表和分类器筛选之后，发现该报文已经在本地存在用户转发表，并且已经不再Http filter过滤的时效范围内，因此执行子SFP ID为2，“防火墙->DPI”的业务链的流程；
步骤S1608，分类器封装父SFP ID为103，子SFP ID为2的报文到SFC封装头部，并和报文一起发送到“防火墙->DPI”的业务链，并通过父SFP保持防火墙、DPI实例不变。
综上所述，通过本发明实施例提供的一种针对业务功能链生成的方法，尤其是将业务链划分为父链和子链的方法，解决相关技术中无法根据策略改变业务链路径的缺陷。
在另外一个实施例中，还提供了一种软件，该软件用于执行上述实施例及优选实施方式中描述的技术方案。
在另外一个实施例中，还提供了一种存储介质，该存储介质中存储有上述软件，该存储介质包括但不限于：光盘、软盘、硬盘、可擦写存储器等。
显然，本领域的技术人员应该明白，上述的本发明的各模块或各步骤可以用通用的计算装置来实现，它们可以集中在单个的计算装置上，或者分布在多个计算装置所组成的网络上，可选地，它们可以用计算装置可执行的程序代码来实现，从而，可以将它们存储在存储装置中由计算装置来执行，并且在某些情况下，可以以不同于此处的顺序执行所示出或描述的步骤，或者将它们分别制作成各个集成电路模块，或者将它们中的多个模块或步骤制作成单个集成电路模块来实现。这样，本发明不限制于任何特定的硬件和软件结合。
以上所述仅为本发明的优选实施例而已，并不用于限制本发明，对于本领域的技术人员来说，本发明可以有各种更改和变化。凡在本发明的精神和原则之内，所作的任何修改、等 同替换、改进等，均应包含在本发明的保护范围之内。
工业实用性
通过本发明实施例，采用获取父业务功能路径标识SFP ID以及与该父SFP ID对应的一个或多个子SFP ID；接收来自用户设备的报文；获取与该报文的类型对应的指定父SFP ID和指定子SFP ID；将该报文发送至与指定父SFP ID对应的父SFP上，或者与指定子SFP ID对应的子SFP上。解决了相关技术中某些场景下SFC无法根据策略改变业务链路径的问题。

Claims (18)

  1. 一种报文发送方法，包括：
    获取父业务功能路径标识SFP ID以及与该父SFP ID对应的一个或多个子SFP ID；
    接收来自用户设备的报文；
    获取与所述报文的类型对应的指定父SFP ID和指定子SFP ID；
    将所述报文发送至与所述指定父SFP ID对应的父SFP上，或者与所述指定子SFP ID对应的子SFP上。
  2. 根据权利要求1所述的方法，其中，将所述报文发送至与所述指定父SFP ID对应的父SFP上，或者与所述指定子SFP ID对应的子SFP上包括：
    将包含第一指定父SFP ID和所述指定子SFP ID为0的第一指定报文封装至SFP，将封装后的SFP和所述报文发送至所述第一指定父SFP ID对应的父SFP上；或者，
    将包含第二指定父SFP ID和第一指定子SFP ID为非0的第二指定报文封装至SFP，将封装后的SFP和所述报文发送至所述第一指定子SFP ID对应的子SFP上。
  3. 根据权利要求2所述的方法，其中，将所述第一指定报文封装至SFP头部或者将所述第二指定报文封装至SFP头部。
  4. 根据权利要求1所述的方法，其中，所述SFP ID和所述一个或者多个子SFP ID由控制器配置或者由网元配置。
  5. 根据权利要求2所述的方法，其中，将包含第一指定父SFP ID和所述指定子SFP ID为0的第一指定报文封装至SFP，将封装后的SFP和所述报文发送至所述第一指定父SFP ID对应的父SFP上之前包括：
    确定所述报文在本地不存在会话；或者，
    确定所述报文在采样点；或者，
    确定所述报文为首包；或者，
    确定没有配置子SFP。
  6. 根据权利要求2所述的方法，其中，将包含第二指定父SFP ID和第一指定子SFP ID为非0的第二指定报文封装至SFP，将封装后的SFP和所述报文发送至所述第一指定子SFP ID对应的子SFP上之前包括：
    确定存在所述报文的转发表；或者，
    确定所述报文不在采样点。
  7. 根据权利要求1-6中任一项所述的方法，其中，获取父业务功能路径标识SFP ID以及与 该父SFP ID对应的一个或多个子SFP ID包括：
    对于一个会话标识唯一的父SFP，对于所述会话中的多个流量分别标识不同的子SFP。
  8. 一种报文发送方法，包括：
    配置父业务功能路径标识SFP ID以及与该父SFP ID对应的一个或多个子SFP ID；
    将所述父SFP ID和所述子SFP ID发送至网元，其中，所述父SFP ID对应的父SFP和所述子SFP ID对应的子SFP用于报文的发送。
  9. 一种报文发送方法，包括：
    配置父业务功能路径标识SFP ID以及与该父SFP ID对应的一个或多个子SFP ID，其中，所述父SFP ID对应的父SFP和所述子SFP ID对应的子SFP用于报文的发送。
  10. 一种报文发送装置，所述装置应用于分类器，所述装置包括：
    第一获取模块，设置为获取父业务功能路径标识SFP ID以及与该父SFP ID对应的一个或多个子SFP ID；
    接收模块，设置为接收来自用户设备的报文；
    第二获取模块，设置为获取与所述报文的类型对应的指定父SFP ID和指定子SFP ID；
    发送模块，设置为将所述报文发送至与所述指定父SFP ID对应的父SFP上，或者与所述指定子SFP ID对应的子SFP上。
  11. 根据权利要求10所述的装置，其中，所述发送模块还包括：
    第一发送单元，设置为将包含第一指定父SFP ID和所述指定子SFP ID为0的第一指定报文封装至SFP，将封装后的SFP和所述报文发送至所述第一指定父SFP ID对应的父SFP上；或者，
    第二发送单元，设置为将包含第二指定父SFP ID和第一指定子SFP ID为非0的第二指定报文封装至SFP，将封装后的SFP和所述报文发送至所述第一指定子SFP ID对应的子SFP上。
  12. 根据权利要求11所述的装置，其中，所述第一发送单元还设置为将所述第一指定报文封装至SFP头部；所述第二发送单元，还设置为将所述第二指定报文封装至SFP头部。
  13. 根据权利要求10所述的装置，其中，所述SFP ID和所述一个或者多个子SFP ID由控制器配置或者由网元配置。
  14. 根据权利要求11所述的装置，其中，所述装置还包括第一确定模块设置为，将包含第一指定父SFP ID和所述指定子SFP ID为0的第一指定报文封装至SFP，将封装后的SFP 和所述报文发送至所述第一指定父SFP ID对应的父SFP上之前，
    确定所述报文在本地不存在会话；或者，
    确定所述报文在采样点；或者，
    确定所述报文为首包；或者，
    确定没有配置子SFP。
  15. 根据权利要求11所述的装置，其中，所述装置还包括第二确定模块设置为，将包含第二指定父SFP ID和第一指定子SFP ID为非0的第二指定报文封装至SFP，将封装后的SFP和所述报文发送至所述第一指定子SFP ID对应的子SFP上之前，
    确定存在所述报文的转发表；或者，
    确定所述报文不在采样点。
  16. 根据权利要求10-15中任一项所述的装置，其中，所述第一获取模块还设置为对于一个会话标识唯一的父SFP，对于所述会话中的多个流量分别标识不同的子SFP。
  17. 一种报文发送装置，所述装置应用于控制器，所述装置包括：
    配置模块，设置为配置父业务功能路径标识SFP ID以及与该父SFP ID对应的一个或多个子SFP ID；
    发送模块，设置为将所述父SFP ID和所述子SFP ID发送至网元，其中，所述父SFPID对应的父SFP和所述子SFP ID对应的子SFP用于报文的发送。
  18. 一种报文发送装置，所述装置应用于网元，所述装置包括：
    配置模块，设置为配置父业务功能路径标识SFP ID以及与该父SFP ID对应的一个或多个子SFP ID，其中，所述父SFP ID对应的父SFP和所述子SFP ID对应的子SFP用于报文的发送。
PCT/CN2016/070069 2015-05-11 2016-01-04 报文发送方法及装置 Ceased WO2016180044A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201510238092.1A CN106302157B (zh) 2015-05-11 2015-05-11 报文发送方法及装置
CN201510238092.1 2015-05-11

Publications (1)

Publication Number Publication Date
WO2016180044A1 true WO2016180044A1 (zh) 2016-11-17

Family

ID=57247664

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2016/070069 Ceased WO2016180044A1 (zh) 2015-05-11 2016-01-04 报文发送方法及装置

Country Status (2)

Country Link
CN (1) CN106302157B (zh)
WO (1) WO2016180044A1 (zh)

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN204089874U (zh) * 2014-09-12 2015-01-07 国家电网公司 一种支持报文存储的交换机
US20150092564A1 (en) * 2013-09-27 2015-04-02 Futurewei Technologies, Inc. Validation of Chained Network Services
CN104506464A (zh) * 2014-12-12 2015-04-08 北京中科江南软件有限公司 基于节点描述符的电子报文解析组件

Family Cites Families (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2007011854A (ja) * 2005-07-01 2007-01-18 Hitachi High-Tech Control Systems Corp プラント制御装置
CN101119321B (zh) * 2007-09-29 2010-11-03 杭州华三通信技术有限公司 网络流量分类处理方法及网络流量分类处理装置
CN102255973B (zh) * 2011-08-23 2013-06-12 江苏省邮电规划设计院有限责任公司 车辆无线通信网络中的路由方法及车辆无线通信网络
IL214830A0 (en) * 2011-08-25 2012-02-29 Elta Systems Ltd Network environment separation
CN104009918B (zh) * 2013-02-22 2018-03-27 华为技术有限公司 一种业务报文处理方法、装置及系统
CN104468344B (zh) * 2014-12-19 2016-03-23 中国人民解放军国防科学技术大学 线速软多元组报文分类方法

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20150092564A1 (en) * 2013-09-27 2015-04-02 Futurewei Technologies, Inc. Validation of Chained Network Services
CN204089874U (zh) * 2014-09-12 2015-01-07 国家电网公司 一种支持报文存储的交换机
CN104506464A (zh) * 2014-12-12 2015-04-08 北京中科江南软件有限公司 基于节点描述符的电子报文解析组件

Also Published As

Publication number Publication date
CN106302157B (zh) 2020-09-29
CN106302157A (zh) 2017-01-04

Similar Documents

Publication Publication Date Title
CN107409089B (zh) 一种在网络引擎中实施的方法及虚拟网络功能控制器
EP3195535B1 (en) Chaining of network service functions in a communication network
US9385950B2 (en) Configurable service proxy local identifier mapping
US20160301603A1 (en) Integrated routing method based on software-defined network and system thereof
CN106105165B (zh) 具有网络地址转换检测的动态服务链
US9654395B2 (en) SDN-based service chaining system
CN103379010A (zh) 一种虚拟网络实现方法及系统
US9800551B2 (en) AVC Bi-directional correlation using an overlay fabric header
US20170104671A1 (en) Data packet processing method, service node, and delivery node
CN105591971A (zh) 一种QoS的实现方法和装置
WO2018188662A1 (zh) 信息通告方法及装置
WO2015184771A1 (zh) 一种业务功能链操作、管理和维护方法及节点设备
CN108353022A (zh) 一种数据报文的处理方法、装置及系统
US10165092B2 (en) Using a network service header to manage a network-as-a-system
US20230261963A1 (en) Underlay path discovery for a wide area network
CN105207909B (zh) 一种发送信息的方法和网络装置
WO2015184740A1 (zh) 检测层次信息的处理方法及装置
CN110650092A (zh) 一种数据处理的方法和装置
US9356876B1 (en) System and method for classifying and managing applications over compressed or encrypted traffic
US12457524B2 (en) Apparatus and method for providing N6-LAN using service function chaining in wireless communication system
CN115913617B (zh) 云组网系统、安全访问方法、设备及存储介质
CN105591967A (zh) 一种数据传输方法和装置
CN117061435A (zh) 一种数据传输方法及其相关设备
Jeuk et al. Tenant-id: Tagging tenant assets in cloud environments
WO2016180044A1 (zh) 报文发送方法及装置

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 16791894

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 16791894

Country of ref document: EP

Kind code of ref document: A1