A method and device for processing traffic in an openflow network

Abstract

The embodiment of the invention discloses a method and device for flow processing in an Openflow network. Among them, the switch used as the access device in the Openflow network, the method for the access device to process traffic includes: judging whether the traffic is signaling traffic, if not, using the traffic flow direction to determine the flow table to process the traffic; if the traffic If the entrance is the port connected to the virtual machine or physical host, use the coloring flow table to process the traffic; use the incoming ACL policy flow table to process the traffic; use the forwarding policy flow table to process the traffic that meets the incoming ACL policy Processing, if the traffic finds a processing policy, judge whether it meets the preset conditions; if so, use the outbound ACL policy flow table to process the traffic, and use the traffic whitewashing flow table to process the traffic; otherwise, use the QoS policy flow table to process the traffic. By applying the embodiment of the present invention, the number of flow table items can be reduced, and flow table resources can be saved.

Description

technical field [0001] The present invention relates to the communication field, in particular to a method and device for processing traffic in an Openflow network. Background technique [0002] With the continuous development of the Internet, the current network architecture centered on IP (Internet Protocol, the protocol for interconnection between networks) has gradually produced various problems, such as controllability, scalability, security, In terms of mobility, green energy saving, and Quality of Service (QOS), in this case, a new network architecture—SDN (Software Defined Network, Software Defined Network) application was born, which will control Separated from forwarding, it realizes flexible control of network traffic and injects new vitality into the development of the current network. [0003] Virtual Private Cloud (Virtual Private Cloud, VPC) is a key technology in the public cloud, which provides a completely isolated network environment for different tenants...

AI Technical Summary

Problems solved by technology

In the prior art, flow tables are stored in both the access device and the transmission device. A flow table includes many flow entries, and the matching field in one flow entry is combined with the matching field in another flow entry. Thereby forming a new flow entry, for example, the matching field of a flow entry is an IP (Internet Protocol, a protocol for interconnection between networks) address, and the matching field of a flow entry is MAC (MediaAccess Control, media access control) Address, these two matching domains will be combined to generate a new flow entry. The matching domains of this flow table are IP address and MAC address. When using this flow table to process traffic, the traffic needs to match the IP address and MAC address. At least one of the three flow entries will not match the traffic, wasting flow table resources

With the increase in the number of tenants in the VPC and the refinement of the control strategy, in order to meet the requirements of the VPC environment for fine-grained control of the network and the ability to customize services, more matching domains are required, and the large number of matching domains Combined with each other, the number of flow table entries will increase exponentially, wasting a lot of flow table resources

Images