[0025] The embodiment of the present invention provides a VPN and multicast path control system and method for a hierarchical ordered address packet network, which is used to provide a dynamic path control method for a hierarchical ordered address packet network to realize VPN and multicast Dynamic centralized control of the path.
[0026] The following reference is attached figure 2 The specific implementation of the Hierarchical and Sequential Address Packet Network (HSAPN) path control system of the present invention will be described. This embodiment takes the control and calculation of VPN paths as an example for description.
[0027] As shown in the figure, the new public telecommunications packet data network is a specific hierarchical ordered address packet network. The embodiment of the present invention takes the new public telecommunications packet data network as an example, including: VPN path control unit 21, VPN path control Request unit 22, in which,
[0028] The VPN path control request unit 22 receives the VPN service application. The VPN service application may be submitted by the user to obtain the VPN tunnel parameters, including: VPN ID, HSAPN address of each ED in the VPN, resource constraint conditions (such as bandwidth, quality of service) Level, etc.); the VPN path control request unit 22 sends a VPN path control request message to the path control unit 21, which contains but is not limited to the VPN ID, the HSAPN address of each ED in the VPN, and resource constraints (such as bandwidth, Service quality level, etc.);
[0029] In addition, the VPN path control request unit 22 obtains the VPN path control unit 21 to return a corresponding VPN path control success response message, the message contains the VPN ID and node information on the VPN path (such as HSAPN address, port number, etc.); VPN The path control request unit 22 sends this information to the border entity, and usually the link establishment signaling processing unit in the border entity initiates/processes the VPN link establishment operation.
[0030] The VPN path control request unit 22 can be integrated in a network control management device (CMD) or a border entity, so that the method of the present invention for obtaining user service applications is flexible and diverse. figure 2 In the schematic diagram of the system shown, the path control request unit is placed in the position of the network control management device.
[0031] The VPN path control unit 21 receives the VPN path control request message from the VPN path control request unit 22, obtains the VPN tunnel parameters, and calculates the path according to the VPN tunnel parameters.
[0032] First, according to the HSAPN address of each ED in the VPN, and the unidirectional and bidirectional of the VPN tunnel establishment signaling (that is, the signaling establishes a unidirectional tunnel or a bidirectional tunnel), determine which VPN path should be used The composition of sub-paths between ED pairs;
[0033]Specifically, taking the unidirectional VPN tunnel establishment signaling as an example, the decision algorithm for the sub-path between each ED pair combination of the VPN path is specifically: if there are N ED nodes, arrange them in any order as (A , B, C, ... N), firstly use the first node A as the basis, and calculate the sub-paths from node A to other nodes except A, and then use the second node as the basis, Calculate the sub-paths from node B to other nodes except B, and so on, until the last node N, based on N, calculate the sub-paths from N to each node other than N.
[0034] Taking the two-way signaling of VPN tunnel establishment as an example, the decision algorithm of the sub-path between each ED pair combination of the VPN path is specifically: if there are N ED nodes, arrange them in any order as (node 1, node 2 , Node 3, ...... node N), first take the first node (node 1) as the basis, and calculate the children of node 1 to (node 2, ......, node N). Path, and then based on the second node (node 2), calculate the sub-paths from node 2 to (node 3, ..., node N), and so on, until the N-1th node ( Node N-1), based on node N-1, the child path from node N-1 to node N is calculated.
[0035] Secondly, according to the combination of ED pairs obtained above and resource constraints such as the bandwidth required by the VPN, run algorithms (such as the restricted shortest path first algorithm CSPF) to find the network topology of the entire network, and respectively calculate to meet the VPN resource constraints , The optimal sub-path between each ED pair combination. Wherein, the network topology map of the entire network records the routing topology information of the entire network, which is uniformly calculated and generated by the control and management device after collecting the link state information of the entire network.
[0036] Finally, after the calculation is completed, a corresponding VPN path control success response message is returned to the path control request unit. The message includes but is not limited to VPN ID and node information (such as HSAPN address, port number, etc.) of each VPN path. Furthermore, the VPN path control request unit 22 classifies the path information according to the path distribution strategy, and then sends it to the corresponding ED node.
[0037] If there is no path that satisfies the resource constraint, the VPN path control unit 21 returns a corresponding VPN path control failure response message to the VPN path control request unit 22, which contains but is not limited to the VPN ID, the unsatisfied resource constraint, etc. The VPN path control request unit 22 determines whether to adjust the tunnel parameters according to the response, and re-initiates a new VPN path control request message.
[0038] In some cases, the embodiment of the present invention allows the VPN path control unit 21 to return a VPN path control notification message to the path control request unit. An example of the situation: if the VPN path control unit 21 is busy, the VPN path control unit 21 receives the VPN path control request message sent by the VPN path control request unit 22 and then sends a VPN link notification message to notify the VPN path control request unit .
[0039] It can be seen from the above embodiment that the path control in the HSAPN path control system of this embodiment is concentrated in the path control unit 21, and the VPN path control request unit 22 is responsible for providing the path control unit 21 with tunnel parameters required for calculating the path. Therefore, the present invention realizes dynamic centralized calculation of paths. On the other hand, compared with the prior art human-planned VPN path, because the extraction of parameters required for path calculation and path calculation are completed automatically by the functional unit, the possibility of human error is reduced and the tunnel establishment is improved. The reliability and stability.
[0040] The foregoing embodiment of the present invention further discloses a path calculation method. In the method, which ED pairs are composed of the path is first determined, and then the optimal paths between the ED pairs that meet the resource constraint conditions are calculated according to the network topology. It can be seen that the embodiment of the method finally realizes the automatic completion of path calculation, and the combination of determining the ED pair and searching the network topology is especially suitable for the centralized calculation of the path; making the centralized control of the path more effective in the present invention.
[0041] Reference image 3 , The second embodiment of the HSAPN path control system of the present invention is explained. In this embodiment, the HSAPN may further include an address translation device (ADT) and a boundary entity (ED). As shown in the figure, taking a new public telecommunications packet data network as an example, it includes: a VPN path control request unit 32, a VPN path control unit 31, an address translation device (ADT) 33, and a border entity 34. among them:
[0042] The VPN path control request unit 32 determines the VPN ID corresponding to the VPN, the HSAPN address of each ED in the VPN, and resource constraints (such as bandwidth, service quality level, etc.) according to the VPN service application submitted by the user; the VPN path control The request unit 32 sends a VPN path control request message to the VPN path control unit 31. The message contains but is not limited to the VPN ID and the HSAPN address resource constraint conditions (such as bandwidth, service quality level, etc.) of each ED in the VPN.
[0043] The VPN path control request unit 32 may be integrated in a network control management device (CMD) or a border entity. image 3 In the schematic diagram of the system shown, the path control request unit is placed in the position of the network control management device.
[0044] The VPN path control unit 31 obtains VPN tunnel parameters, and is used to calculate the VPN path according to the VPN tunnel parameters; refer to the relevant part of the above embodiment for the path calculation method.
[0045] The address translation device (ADT) 33 is used to store the correspondence between the service network address and the HSAPN address.
[0046] The service network may be an IP network, an asynchronous transfer mode (ATM, Asynchronous Transfer Mode) network, a frame relay (FR, Frame Relay) network, etc.
[0047] Taking the business network as an IP network as an example, all devices in the HSAPN network and ED devices are respectively configured with an HSAPN address, and all devices and ED devices in the IP network are respectively configured with IP addresses, between the IP address and the HSAPN address The mapping relationship is stored in the address mapping table in ADT.
[0048] The boundary entity (ED) 34 supports the agreement between the service network and the HSAPN network, and the service network may be an IP network, an asynchronous transfer mode (ATM, Asynchronous Transfer Mode) network, a frame relay (FR, Frame Relay) network, etc.;
[0049] The border entity 34 obtains the service network protocol packet, obtains the HSAPN address of the destination border entity 34 corresponding to the destination service network address by querying the address translation device, and encapsulates the service network protocol packet into an HSAPN packet; and Send to the routing device, and realize the forwarding and transmission of data through the routing device;
[0050] The border entity 34 obtains the HSAPN packet from the routing device, decapsulates the HSAPN protocol packet header, obtains the destination service network address, and forwards the service network protocol packet.
[0051] In the present invention, the border entity also obtains the VPN path result calculated by the VPN path control unit 31, and initiates the establishment of a tunnel. Specifically, the border entity initiates the tunnel establishment operation through specific VPN tunnel establishment signaling (such as HSAPN control signaling, etc.), configures each node on the path, and reserves corresponding bandwidth and other resources. For the tunnel establishment operation process, those skilled in the art can select methods known in the prior art.
[0052] In the existing HSAPN network, it often includes control and management equipment for management and maintenance of the equipment in the HSAPN network. In the present invention, as far as the path control unit is concerned, it can be integrated in the control management device, or can be implemented as a separate functional device. figure 2 with Figure 4 In the illustrated embodiment, the path control unit is integrated in the control management device; image 3 In the illustrated embodiment, the path control unit is implemented as a separate functional device. When the path control unit is integrated in the network management device, the path control unit can utilize the system information of the network management device, which improves the efficiency of path control, calculation, and management.
[0053] In the above embodiment, the path control request unit is placed in the network control management device, however, the path control request unit may also be placed in the location of the boundary entity.
[0054] Figure 4 Shows the path control system in which the path control request unit is placed at the location of the boundary entity. With reference to this figure, it can be seen that in another HSAPN path control system embodiment of the present invention, the path control unit 41 sends a path control success response message to the path through the routing device. The control request unit 42 includes the VPN ID and the information of each node of the path (such as HSAPN address, port number, etc.); the path control request unit sends this information to the link establishment signaling processing unit in the source boundary entity , And usually initiated/processed by the unit to establish a VPN link.
[0055] The new public telecommunications packet data network is a specific hierarchical and sequential address packet network. The above takes the new public telecommunications packet data network as an example to illustrate the hierarchical and Sequential Address Packet Network (HSAPN) of the present invention. ) For the specific implementation of the path control system, those of ordinary skill in the art can directly and without any doubt know that the embodiments of the present invention are applicable to all types of hierarchical ordered address packet networks.
[0056] It can be seen from the above embodiment that the path control in the HSAPN of this embodiment is concentrated in the path control unit, and the VPN path control request unit is responsible for providing the path control unit with the parameters needed to calculate the path. Therefore, the present invention realizes the dynamics of the path. Centralized computing improves the efficiency of VPN path control. Due to the centralized path control, centralized control and management of operations such as initiating tunnel establishment are realized. On the other hand, compared with the prior art human-planned VPN path, because the extraction of parameters required for path calculation and path calculation are completed automatically by the functional unit, the possibility of human error is reduced and the tunnel establishment is improved. The reliability and stability. Path control path control.
[0057] In addition, in addition to VPN paths, the network structure of the present invention is still suitable for controlling and calculating multicast paths. Taking multicast as an example, in the foregoing network embodiment, the path control request unit is used to determine the multicast parameters; the path control unit is used to calculate the multicast path according to the parameters.
[0058] The embodiment of the present invention also provides a dynamic path control method, including: obtaining tunnel parameters, calculating a path according to the tunnel parameters; and controlling the boundary entity to initiate the tunnel establishment operation according to the calculated path; the routing device according to the VPN tunnel path Perform data routing.
[0059] The boundary entity initiates the tunnel establishment operation through specific VPN tunnel establishment signaling (such as HSAPN control signaling), configures each node on the path, and reserves corresponding bandwidth and other resources. The tunnel established by the signaling can be a two-way tunnel , It can also be a one-way tunnel. For the tunnel establishment operation process, those skilled in the art can select methods known in the prior art.
[0060] Reference Figure 5 , Figure 6 Take the dynamic VPN path control embodiment as an example to specifically illustrate the implementation of the method of the present invention:
[0061] Such as Figure 6 As shown, there are three user sites Site1, Site2, and Site3 that need to form a VPN, and the VPN identifier (VPN ID) is VPN-A. CE (Custom Edge) is an edge device directly connected to a service provider in a user site (Site), usually a router. Site1, Site2, and Site3 are respectively connected to the boundary entities ED1, ED2, and ED3 of the service provider network through CE1, CE2, and CE3, and access the service provider network. The service provider needs to establish a VPN tunnel between ED1, ED2, and ED3 in the network to access and transmit data between the three user sites, Site1, Site2, and Site3, to achieve connectivity between the three sites. The dynamic VPN path control method is as follows:
[0062] 51) The path control request unit determines the VPN tunnel parameters according to the VPN service application submitted by the user, including: VPN ID, HSAPN address of each ED in the VPN, resource constraint conditions (such as bandwidth, service quality level, etc.);
[0063] Refer to Figure 6 In the system shown, the VPN tunnel parameters include: VPN-A, HSAPN addresses of ED1, ED2, and ED3, and resource constraint conditions.
[0064] The path control request unit can be integrated in a control management device (CMD) or a border entity.
[0065] 52) The path control request unit sends the above VPN parameters to the path control unit through the protocol.
[0066] The path control request unit sends a VPN path control request message to the path control unit. The message includes, but is not limited to, the VPN ID, the HSAPN address of each ED in the VPN, and resource constraints (such as bandwidth, service quality level, etc.).
[0067] 53) The path control unit calculates the VPN path.
[0068] First, according to the HSAPN address of each ED in the VPN, and the unidirectional and bidirectional of the VPN tunnel establishment signaling (that is, the signaling establishes a unidirectional tunnel or a bidirectional tunnel), determine which VPN path should be used The composition of sub-paths between ED pairs;
[0069] Specifically, taking the unidirectional VPN tunnel establishment signaling as an example, the decision algorithm of the sub-path between each ED pair combination of the VPN path is specifically: if there are N ED nodes, arrange them in any order as (A , B, C,...N), firstly use the first node A as the basis, and calculate the sub-paths from node A to other nodes except A, and then use the second node as the basis. Calculate the sub-paths from node B to each node other than B, and so on, until the last node N, based on N, respectively, calculate the sub-paths from N to each node other than N. Specific to Figure 6 In the system shown, each ED pair combination is based on ED1, ED1->ED2, ED1->ED3, based on ED2, ED2->ED1, ED2->ED3, based on ED3, is ED3 ->ED1, ED3->ED2, a total of six pairs of combinations, representing six one-way sub-paths;
[0070] Taking the two-way signaling of VPN tunnel establishment as an example, the decision algorithm of the sub-path between each ED pair combination of the VPN path is specifically: if there are N ED nodes, arrange them in any order as (node 1, node 2 , Node 3, ... node N), firstly use the first node (node 1) as the basis, and calculate the children of node 1 to (node 2, ..., node N). Path, and then based on the second node (node 2), calculate the sub-paths from node 2 to (node 3, ..., node N), and so on, until the N-1th node ( Node N-1), based on node N-1, the sub-path from node N-1 to node N is calculated. Specific to Figure 6 In the system shown, each ED pair combination is: based on ED1, ED1<->ED2, ED1<->ED3, based on ED2, ED2<->ED3, a total of three pairs of combinations, representing three bidirectional sub path.
[0071] Secondly, according to the combination of ED pairs obtained above and resource constraints such as the bandwidth required by the VPN, run the algorithm (such as the restricted shortest path first algorithm CSPF) to find the network topology of the entire network, and respectively calculate to meet the VPN resource constraints , The optimal sub-path between each ED pair combination. Wherein, the network topology map of the entire network records the routing topology information of the entire network, which is uniformly calculated and generated by the control and management device after collecting the link state information of the entire network.
[0072] Refer to Figure 7 , A simple network topology diagram specifically illustrates the process of calculating the optimal sub-path between ED pair combinations. Such as Figure 7 As shown, there are 4 possible paths between ED1 and ED2, namely ED1—>A—>ED2, ED1—>A—>B—>ED2, ED1—>B—>ED2, ED1—>B—>A —> ED2; suppose that in this embodiment, a path from ED1 to ED2 that meets the bandwidth requirement of 60 Mbit/s needs to be selected. According to the traditional shortest path first algorithm SPF, the path with the least cost value is selected as the optimal path, namely ED1—>A—>B—>ED2, and the sum of the cost value is 12. If resource constraints such as bandwidth are taken into account, and according to the CSPF constraint shortest path algorithm, ED1—>B—>ED2 will be selected as the optimal path.
[0073] Specific to Figure 6 In the system shown, if the VPN tunnel establishment signaling is unidirectional, the CSPF algorithm is used to calculate the ED1->ED2, ED1->ED3, ED2->ED1 that meet the resource constraints according to the network topology of the entire network. , ED2->ED3, ED3->ED1, ED3->ED2 six one-way sub-paths; if the VPN tunnel establishment signaling is bidirectional, the CSPF algorithm is used to calculate the resource constraints according to the network topology of the entire network ED1<->ED2, ED1<->ED3, ED2<->ED3 three bidirectional sub-paths.
[0074] Finally, after the calculation is completed, a corresponding VPN path control success response message is returned to the path control request unit. The message includes but is not limited to VPN ID and node information (such as HSAPN address, port number, etc.) of each VPN path.
[0075] 54) The path control request unit sends the path information to the corresponding boundary entity.
[0076] The path control request unit classifies the path information according to the path distribution strategy and sends it to the corresponding ED node. For example, in this example, if the VPN tunnel establishment signaling is unidirectional, it sends ED1->ED2, ED1 to ED1 -> ED3 unidirectional path information, send ED2->ED1, ED2->ED3 unidirectional path information to ED2, send ED3->ED1, ED3->ED2 unidirectional path information to ED3; if the VPN tunnel is established If the command is bidirectional, send the bidirectional path information of ED1<->ED2 to ED1, send the bidirectional path information of ED2<->ED3 to ED2, and send the bidirectional path information of ED3<->ED1 to ED3;
[0077] If there is no such optimal path that satisfies the resource constraint, the path control unit returns a corresponding VPN path control failure response message to the path control request unit. The message contains but is not limited to the VPN ID and the path that cannot meet the resource constraint. Information (including the HSAPN addresses of the two end nodes ED of the path), and resource constraint information that cannot be satisfied, etc. The path control request unit decides whether to adjust the constraint parameter according to the response, and re-initiates a new VPN path control request message;
[0078] In some cases, in the embodiment of the present invention, the path control unit is allowed to return a VPN path control notification message to the path control request unit. Examples of the situation include: after the path control unit receives the VPN path control request message sent by the path control request unit, and finds that the path control unit is busy, it sends a VPN path notification message.
[0079] 54) Establish a VPN tunnel. According to the calculated path, each node ED device initiates a VPN tunnel establishment operation through specific signaling (such as HSAPN control signaling), configures each node on the path, and reserves corresponding bandwidth and other resources;
[0080] The above messages are encapsulated in HSAPN control messages for transmission. The HSAPN control message includes but is not limited to the following fields: message type, message length, source ED address and destination ED address of the tunnel, etc. For the path control function, the message type should include: VPN path control request message, VPN path Control request success response message, VPN path control failure response message, VPN path control notification message, etc.
[0081] The path control unit described in the above method can be integrated in the CMD, or can be implemented in a separate functional device.
[0082] The path control request unit described in the above method may be integrated in the network control management device (CMD) or integrated in the boundary entity (ED). If the path control request unit is on the ED, the routing device obtains the path control unit calculation success response message, and forwards the information in the message to the signaling processing unit in the ED in the form of internal data interaction in the ED, and then initiates /Process the link establishment operation; if the calculation request unit is on the network management, the information reaches the link establishment signaling processing unit through the routing device and the ED network interface, and initiates/processes the link establishment operation.
[0083] A person of ordinary skill in the art can understand that all or part of the steps in the method of the foregoing embodiments can be implemented by a program instructing relevant hardware. The program can be stored in a computer-readable storage medium. The storage medium can be a read-only memory, a magnetic disk or an optical disk, etc.
[0084] The embodiments of the technical solutions provided by the present invention are described in detail above. For those of ordinary skill in the art, according to the ideas of the embodiments of the present invention, there will be changes in the specific implementation and the scope of application. In summary The content of this specification should not be construed as a limitation of the present invention.
