Message forwarding method and device, network equipment and computer readable storage medium

Abstract

The invention provides a message forwarding method and a device thereof, network equipment and a computer readable storage medium. The method comprises the following steps: a message with a label is received; whether a current label carried by the message is a target label distributed to upstream network equipment in advance by the equipment or not is judged, a judgment result is obtained, the target label comprises a first code segment corresponding to a target interface set in the equipment and a second code segment corresponding to a specified forwarding equivalence class, and the first code segment corresponds to the target interface set in the equipment; one upstream network device only corresponds to one interface set; and a processing operation corresponding to the judgment result is executed on the message. In the scheme, whether the current label of the message is the target label or not is judged, so that whether the message is safe or not can be quickly judged, and the message forwarding safety is improved. Besides, if the current label is the target label, the upstream network equipment can be identified from the first code segment of the current label, so that the monitorability of message forwarding is improved.

Description

technical field [0001] The present application relates to the field of data communication, in particular, to a message forwarding method, device, network equipment, and computer-readable storage medium. Background technique [0002] As users pay more and more attention to network security and network monitoring, higher requirements are placed on the security and monitorability of MPLS (Multi-Protocol Label Switching, Multi-Protocol Label Switching) networks. At present, there are still potential security risks in some aspects of the MPLS network. For example, there is no corresponding upstream information and inbound interface information in the ILM (Incoming Label Map). It will also be processed and forwarded, and the legitimacy of MPLS packets cannot be checked, which will bring security problems to the MPLS network. If a large number of malicious attacks of forged MPLS packets are received from non-upstream network devices, the Busy processing of such malicious messages ...

AI Technical Summary

Problems solved by technology

At present, there are still potential security risks in some aspects of the MPLS network. For example, there is no corresponding upstream information and inbound interface information in the ILM (Incoming Label Map). It will also be processed and forwarded, and the legitimacy of MPLS packets cannot be checked, which will bring security problems to the MPLS network. If a large number of malicious attacks of forged MPLS packets are received from non-upstream network devices, the Busy processing such malicious messages affects the processing of normal messages

Images