Network intermediate device and deployment method thereof

Abstract

The invention discloses a network intermediate device and a deployment method thereof. The intermediate device comprises a main control program and a data packet processing program, and the data packet processing program comprises a classification program, a rewriting program and a forwarding program; the main control program realizes the following functions when being implemented by a processor: obtaining an instruction from a network controller, and translating the instruction to manage the intermediate device; obtaining a rule from the network controller; collecting a state of the intermediate device, and feeding back the state of the intermediate device to the network controller; and splicing the classification program, the rewriting program and the forwarding program according to different sequences according to the processing demands of the data packets to form different data packet processing links; the classification program classifies the received data packets according to the rule issued by the main control program; the rewriting program performs a rewriting operation on the data packets; and the forwarding program forwards the data packets according to the rule and performs a packet loss operation on suspected data packets. The intermediate device is flexible to manage, small in communication cost, and is able to shorten the data packet processing delay and increase the resource utilization rate.

Description

technical field [0001] The invention relates to the field of computer networks, in particular to a network middlebox (Middlebox) and a deployment method of the middlebox in a network. Background technique [0002] With the rapid development of the Internet, the scale and complexity of the Internet continue to expand, and network management and control are facing greater challenges. Middlebox is an intermediate device between the source address and the destination address in the network. In addition to forwarding and routing functions in the network, it also has the functions of improving network security (firewall), improving network load distribution (loadbalancer) and reducing bandwidth consumption (WAN optimizers) and other important functions. Although the traditional Middlebox has high processing efficiency, the equipment is expensive, and the deployment and management are not flexible. [0003] With the idea of ​​network function virtualization (Network Function Virt...

AI Technical Summary

Problems solved by technology

[0004] 1) The interdependent deployment between Middleboxes leads to the stretching of the packet processing link, which is likely to cause configuration conflicts and network errors;

[0005] 2) Different Middleboxes may have the same packet processing stage and repeated functional modules (such as packet classification operations), resulting in waste of resources;

[0006] 3) The existence of the service chain makes it difficult to reduce the complexity of Middlebox management and deployment

[0011] However, in these deployment schemes, data packets with long service chain processing requirements will be processed across multiple servers or virtual machines. Therefore, it is still difficult to reduce the communication overhead between servers or virtual machines, which increases the Processing delay of packets with long service chains

Images