Method for realizing service chain transparent transmission based on quintuple information

Abstract

The invention discloses a method for realizing service chain transparent transmission based on quintuple information. The method for realizing service line transparent transmission based on quintuple information comprises steps of performing identification on an uplink message which comes into a service chain VM from a Switch port and performing extraction and caching on the corresponding quintuple information, performing identification on a downlink message which enters the Switch port from the service chain VM, extracting a source IP, a target IP, a target MAC and Protocol information in the message, searching a stored source MAC corresponding to the message from the cached quintuple information according to the extracted information, and performing replacement processing on the MAC according to a real source MAC which is searched. The method for realizing service line transparent transmission based on quintuple information simplifies logics of the VM for processing a service, the message reduces the source MAC according to the quintuple information of the message which is matched with an entering moment when the message leaves the VM and enters the Switch, and thus data exchange chaos which is caused by a fact that one IP corresponds to different MAC is eliminated.

Description

technical field [0001] The invention relates to the field of Internet application technology, in particular to a method for realizing transparent transmission of service chains based on quintuples. Background technique [0002] In the traditional mode, when data packets are transmitted in the network, they need to pass through various physical network devices (such as FW (Firewall, firewall), IPS (Intrusion Prevention System, intrusion prevention) / IDS (Intrusion Detection System, intrusion detection system) System), LB (Load Balance, load balancing)) and service nodes (such as service Cache, service node), these network devices and service nodes ensure that the services are sequentially serialized through pre-planned Network equipment and business nodes, so as to provide customers with safe, fast, stable and reliable services. [0003] When the network traffic passes through these physical network devices and service nodes according to the established sequence required by t...

AI Technical Summary

Problems solved by technology

For each message entering a VM, the source MAC will be marked as the MAC corresponding to the VM after being processed by the VM, which will cause the five-tuple information to be opaque during transmission

When the five-tuple information is opaque during the transmission of business messages, one IP will correspond to multiple MACs, resulting in disordered forwarding of data messages, and even a wrong judgment that there is ARP spoofing in the system.

Images