Time-sensitive traffic processing method and device, storage medium, chip and equipment

Abstract

The invention discloses a time-sensitive traffic processing method and device, a storage medium, a chip and equipment, and relates to the technical field of networks. The method comprises the following steps: performing security judgment on messages in time-sensitive traffic to obtain secure messages and non-secure messages, and respectively determining first label information of the secure messages and the non-secure messages, including at least two of a classification identifier, a discarding priority, a scheduling priority and a label priority; time analysis is carried out on the security message, first label information of the security message is updated according to a time analysis result, and second label information of the security message is obtained and comprises at least two of a discarding priority, residence time, a classification identifier, a label priority and a scheduling priority; and determining a target processing mode of the message in the time-sensitive traffic according to the first label information and the second label information. According to the method, the flexibility and accuracy of message processing can be improved, and wrong discarding of the message can be reduced or avoided.

Description

Technical Field

[0001] The present application relates to the field of network technology, and in particular to a method, apparatus, storage medium, chip and device for processing time-sensitive traffic. Background Art

[0002] As network service applications continue to grow, the amount of data transmitted on the network has increased dramatically, placing higher demands on network bandwidth, performance, service quality, and security. By classifying, identifying, and analyzing network data traffic, we can effectively monitor device operation information and network information, which can then be used to plan network and application resources to meet customer needs. At the same time, we can effectively prevent DOS (Denial of Service) attacks and improve network security. Therefore, in application areas such as network optimization, QoS (Quality of Service) assurance, network management, and network security, there is an increasing demand for identifying and monitoring business traffic.

[0003] Especially in TSN (Time-Sensitive Networking) networks where multiple types of traffic are transmitted in a mixed manner, data streams are divided into three groups according to different situations in TSN application scenarios: BE (Best Effort) streams, SR (Stream Reservation) streams, and TS (Time-sensitive) streams. Among them, TS streams have very strict requirements on latency and packet loss rate, but the required bandwidth is relatively small. Important control signals and data will be classified into this category, and the transmission of TS streams has periodic characteristics. The transmission of BE streams and SR streams does not have periodic characteristics. SR streams require certain bandwidth and latency guarantees in application scenarios, such as data streams of audio and video services; BE streams do not have high requirements for latency, allowing the network to discard them when congestion occurs, but when the network bandwidth is free, they will be required to transmit them as much as possible. In TSN networks, it is necessary to reduce the maximum end-to-end latency of BE messages as much as possible while meeting the latency requirements of TS streams and SR streams. Therefore, how to identify these flows is the premise and basis for the correct processing of TSN services.

[0004] In the related technology, there are generally two types of traffic processing technologies: one is based on the ports used by different services, and the other is based on the characteristic fields in the message. However, the technology that relies on the port has low accuracy, and the technology based on the characteristic fields in the message has poor scalability. In addition, because some content is encrypted and private, no specific identification can be found, resulting in inability to identify and process. Summary of the invention

[0005] The present invention aims to solve one of the technical problems in the related art to at least some extent. To this end, the purpose of the present invention is to propose a method, device, storage medium, chip and equipment for processing time-sensitive traffic to improve the flexibility and accuracy of message processing and reduce or avoid erroneous discarding of messages.

[0006] In the first aspect, the present application proposes a method for processing time-sensitive traffic, including: performing security judgment on messages in the time-sensitive traffic to obtain secure messages and non-secure messages, and respectively determining first label information of the secure messages and the non-secure messages, wherein the first label information includes at least two of a classification identifier, a discard priority, a scheduling priority, and a label priority; performing time resolution on the secure messages, and updating the first label information of the secure messages according to the time resolution results to obtain second label information of the secure messages, wherein the second label information includes at least two of a discard priority, a residence time, a classification identifier, a label priority, and a scheduling priority; determining a target processing method for the messages in the time-sensitive traffic according to the first label information and the second label information.

[0007] According to one embodiment of the present application, the method also includes: filtering the messages in the time-sensitive traffic using the target filtering conditions, and assigning third label information to the messages that meet the target filtering conditions and the messages that do not meet the target filtering conditions, respectively, wherein the third label information includes at least two of the classification identifier, discard priority, scheduling priority, and label priority; wherein, performing a security judgment on the messages in the time-sensitive traffic, and determining the first label information of the secure messages and the non-secure messages, respectively, includes: performing a security judgment on the messages that meet the target filtering conditions, updating the third label information of the secure messages and the non-secure messages, and obtaining the first label information of the secure messages and the non-secure messages; determining the target processing method of the messages in the time-sensitive traffic based on the second label information and the first label information, includes: determining the target processing method of the messages in the time-sensitive traffic based on the second label information, the first label information, and the third label information.

[0008] According to one embodiment of the present application, time parsing of messages in time-sensitive traffic and determining the second label information of the messages based on the time parsing results include: determining the actual arrival time difference between a current message and a previous message in the time-sensitive traffic; and determining the second label information of the current message based on the actual arrival time difference.

[0009] According to one embodiment of the present application, the second label information of the current message is determined based on the actual arrival time difference, including: if the actual arrival time difference is greater than or equal to 0, and less than the sum of the theoretical arrival time difference and the preset margin value, then the residence time of the current message in the time-sensitive network device is used as the residence time of the current message; and / or, if the actual arrival time difference is greater than or equal to the sum of the theoretical arrival time difference and the preset margin value, then the discarding priority of the current message is determined to be the highest priority.

[0010] According to an embodiment of the present application, the method further includes: if the actual arrival time difference is less than 0, determining that the clock is abnormal, and issuing an alarm message.

[0011] According to one embodiment of the present application, the security judgment of the messages in the time-sensitive traffic to obtain secure messages and insecure messages includes: for each type of message in the time-sensitive traffic, counting the number of the messages within a preset period; if the statistical number of the message is less than or equal to the number threshold corresponding to the message, determining that the message is the secure message, otherwise determining that the message is the insecure message.

[0012] According to one embodiment of the present application, the classification identifier of the secure message is different from the classification identifier of the non-secure message, the scheduling priority of the secure message is higher than the scheduling priority of the non-secure message, the discarding priority of the secure message is lower than the discarding priority of the non-secure message, and the discarding priority of the non-secure message is the highest priority.

[0013] According to one embodiment of the present application, the target filtering condition is determined based on at least one of the source IP address, destination IP address, destination MAC address, COS field, and message length of the message in the time-sensitive traffic; the category identifier of the message that meets the target filtering condition is different from the category identifier of the message that does not meet the target filtering condition, the scheduling priority of the message that meets the target filtering condition is higher than the scheduling priority of the message that does not meet the target filtering condition, the discarding priority of the message that meets the target filtering condition is lower than the discarding priority of the message that does not meet the target filtering condition, and the discarding priority of the message that does not meet the target filtering condition is the highest priority; for the message having at least two of the second label information, the first label information and the third label information, the label priority in the second label information of the message is higher than the label priority in the first label information, and the label priority in the first label information is higher than the label priority in the third label information.

[0014] According to one embodiment of the present application, determining the target processing method of the message in the time-sensitive traffic based on the second label information, the first label information and the third label information includes: for a message having one of the second label information, the first label information and the third label information, using the processing method corresponding to the label information of the message as the target processing method of the message; for a message having at least two of the second label information, the first label information and the third label information, determining whether there is a conflict between at least two label information of the message; if so, determining whether there is label information with the highest discard priority among the at least two label information of the message; if so, using the processing method corresponding to the label information with the highest discard priority as the target processing method of the message, otherwise using the processing method corresponding to the label information with the higher label priority as the target processing method of the message.

[0015] In the second aspect, the present application proposes a processing device for time-sensitive traffic, including: a security control module, used to perform security judgment on the messages in the time-sensitive traffic, obtain secure messages and non-secure messages, and respectively determine the first label information of the secure messages and the non-secure messages, wherein the first label information includes at least two of the classification identifier, discard priority, scheduling priority, and label priority; a time resolution module, used to perform time resolution on the secure messages, and update the first label information of the secure messages according to the time resolution results to obtain the second label information of the secure messages, wherein the second label information includes at least two of the discard priority, residence time, classification identifier, label priority, and scheduling priority; a comprehensive judgment module, used to determine the target processing method of the messages in the time-sensitive traffic according to the first label information and the second label information.

[0016] According to one embodiment of the present application, the device also includes: a preprocessing module, which is used to filter the messages in the time-sensitive traffic using the target filtering conditions, and assign third label information to the messages that meet the target filtering conditions and the messages that do not meet the target filtering conditions, respectively, wherein the third label information includes at least two of the classification identifier, discard priority, scheduling priority, and label priority; wherein the security control module is specifically used to: perform security judgment on the messages that meet the target filtering conditions, update the third label information of the secure messages and the non-secure messages, and obtain the first label information of the secure messages and the non-secure messages; the comprehensive judgment module is specifically used to: determine the target processing method of the messages in the time-sensitive traffic based on the second label information, the first label information and the third label information.

[0017] According to an embodiment of the present application, the time analysis module is specifically used to: determine the actual arrival time difference between the current message and the previous message in the time-sensitive traffic; and determine the second label information of the current message based on the actual arrival time difference.

[0018] According to one embodiment of the present application, when the time resolution module determines the second label information of the current message based on the actual arrival time difference, it is specifically used to: when the actual arrival time difference is greater than or equal to 0 and less than the sum of the theoretical arrival time difference and the preset margin value, use the residence time of the current message in the time-sensitive network device as the residence time of the current message; and / or, when the actual arrival time difference is greater than or equal to the sum of the theoretical arrival time difference and the preset margin value, determine that the discarding priority of the current message is the highest priority.

[0019] In a third aspect, the present application proposes a computer-readable storage medium having a computer program stored thereon, and when the computer program is executed by a processor, the method for processing time-sensitive traffic described in the first aspect above is implemented.

[0020] In a fourth aspect, the present application proposes a chip comprising a memory, a processor and a computer program stored in the memory, wherein when the computer program is executed by the processor, the method for processing time-sensitive traffic described in the first aspect above is implemented.

[0021] In a fifth aspect, the present application proposes a time-sensitive network device, comprising: a processing device for time-sensitive traffic as described in the second aspect above, or a chip as described in the fourth aspect above.

[0022] The time-sensitive traffic processing method, apparatus, storage medium, chip and equipment of the embodiments of the present application perform security judgment on the messages in the time-sensitive traffic to obtain secure messages and insecure messages, and respectively determine the first label information of the secure messages and the insecure messages, and then perform time analysis on the secure messages, and update the first label information of the secure messages according to the time analysis results to obtain the second label information of the secure messages; and determine the target processing method of the messages in the time-sensitive traffic according to the first label information and the second label information, which can improve the flexibility and accuracy of message processing and reduce or avoid erroneous discard of messages. BRIEF DESCRIPTION OF THE DRAWINGS

[0023] Figure 1 is a flowchart of a method for processing time-sensitive traffic according to Embodiment 1 of the present application;

[0024] Figure 2 is a flowchart of step S11 of an embodiment of the present application;

[0025] Figure 3is a flowchart of a method for processing time-sensitive traffic in Embodiment 2 of the present application;

[0026] Figure 4 is a flowchart of step S31 of an embodiment of the present application;

[0027] Figure 5 is a flowchart of a method for processing time-sensitive traffic in Embodiment 3 of the present application;

[0028] Figure 6 is a flowchart of step S51 of an embodiment of the present application;

[0029] Figure 7 is a structural block diagram of a device for processing time-sensitive traffic according to an embodiment of the present application;

[0030] Figure 8 is a structural block diagram of a device for processing time-sensitive traffic according to another embodiment of the present application;

[0031] Fig. 9 is a structural block diagram of a device for processing time-sensitive traffic according to another embodiment of the present application;

[0032] Fig.10 is a structural block diagram of a chip according to an embodiment of the present application;

[0033] Fig.11 is a structural block diagram of a time-sensitive network device according to an embodiment of the present application;

[0034] Fig.12 It is a structural block diagram of a time-sensitive network device according to another embodiment of the present application. DETAILED DESCRIPTION

[0035] Embodiments of the present invention are described in detail below, examples of which are shown in the accompanying drawings, wherein the same or similar reference numerals throughout represent the same or similar elements or elements having the same or similar functions. The embodiments described below with reference to the accompanying drawings are exemplary and are intended to be used to explain the present invention, and should not be construed as limiting the present invention.

[0036] In view of the deficiencies of traditional traffic processing methods in encryption, port dynamics, protocol privacy, privacy protection, etc., this application combines the uniqueness of TSN networks in time-sensitive information, and proposes a method for processing time-sensitive traffic when facing various time-sensitive business flows. This method filters, controls security, and performs at least one of time resolution processing on time-sensitive traffic, and generates label information of messages in time-sensitive traffic each time it is processed, including classification identification, discard priority, label priority, scheduling priority, etc., and then comprehensively judges the processing results to obtain the target processing method for each message. Compared with traditional methods, the method for processing time-sensitive traffic in this application is more in line with actual business applications, can reduce the use of ACL (Access Control Lists) resources, and can provide different QoS guarantees for different traffic and services. Based on the method for processing time-sensitive traffic, this application also proposes a time-sensitive traffic processing device, a computer-readable storage medium, a chip, and a time-sensitive network device.

[0037] The following describes a method, apparatus, storage medium, chip, and device for processing time-sensitive traffic according to an embodiment of the present invention with reference to the accompanying drawings.

[0038] Embodiment 1:

[0039] Figure 1 It is a flowchart of a method for processing time-sensitive traffic in Example 1 of the present application. The method can be executed by a time-sensitive network device (TSN device), which refers to a device used in a TSN network that can receive and send time-sensitive traffic (including multiple messages, such as business messages).

[0040] like Figure 1 As shown in the figure, the processing methods for time-sensitive traffic include:

[0041] S11, performing time analysis on the message in the time-sensitive traffic, and determining the second label information of the message according to the time analysis result.

[0042] The second label information includes at least one of a discard priority and a residence time.

[0043] In some implementations, time analysis is performed on messages in time-sensitive traffic, and second label information of the messages is determined based on the time analysis results, including: determining an actual arrival time of each message in the time-sensitive traffic; and determining the second label information of each message based on the actual arrival time.

[0044] Specifically, a message has a specific message structure, which may include a time field, a type field, and an information field, etc. The message content of the message includes a plurality of bytes for representing these fields. Time parsing of a message refers to determining the bytes representing the time field according to the message structure and parsing them to obtain the actual arrival time of the message, such as the time with year, month, day, and time.

[0045] After obtaining the actual arrival time of the message, the messages of the same type (which can be obtained according to the type field) can be sorted according to the order of the actual arrival time, and the sorting result can be compared with the theoretical sorting result to determine the second label information of each message. For example, the messages A1, A2, A3, and A4 of the same type are theoretically sorted as A1-A2-A3-A4. If the sorting obtained according to the actual arrival time is A1-A3-A2-A4, then A3 can be considered abnormal, and its discarding priority is set higher than A1, A2, and A4, and the discarding priorities of A1, A2, and A4 can be equal; if the sorting obtained according to the actual arrival time is A4-A3-A1-A2, then A3 and A4 can be considered abnormal, and the discarding priority of A4 is set to the highest priority, higher than A3, and the discarding priority of A3 is higher than A1 and A2, and the discarding priorities of A1 and A2 can be equal.

[0046] The residence time can be determined based on the residence time of the message in the TSN device, which reflects the processing time of the message in the TSN device and is the most intuitive reflection of the processing speed of the TSN device. The significance of setting the discard priority is to prevent the early stage from erroneously discarding the message, which will lead to the irreparable later. In order to reduce the processing volume of the message, the message with the highest discard priority can be discarded directly without setting its residence time.

[0047] In other embodiments, time analysis is performed on messages in time-sensitive traffic, and second label information of the messages is determined based on the time analysis results, including: determining an actual arrival time difference between a current message and a previous message in the time-sensitive traffic; and determining the second label information of the current message based on the actual arrival time difference.

[0048] Among them, by performing time analysis on the messages in the time-sensitive traffic, the actual arrival time of each message can be obtained, and the actual arrival time difference between two adjacent messages can be obtained according to the actual arrival time of each message. For example, the actual arrival time difference between the current message and the previous message is the difference between the actual arrival time of the current message and the actual arrival time of the previous message. Afterwards, the second label information of the current message can be determined according to the actual arrival time difference.

[0049] In some examples, the second label information of the current message is determined based on the actual arrival time difference, including: comparing the actual arrival time difference with the theoretical arrival time difference; if the actual arrival time difference is less than or equal to the theoretical arrival time difference, it means that the current message is normal and its discard priority can be set to a preset level; if the actual arrival time difference is greater than the theoretical arrival time difference, it means that the current message is abnormal and its discard priority can be set to the highest priority.

[0050] The theoretical arrival time difference can be obtained based on the expected service bandwidth and message length. For example, the theoretical arrival time difference = expected service bandwidth / expected message length. For the same type of service messages, the expected service bandwidth and message length are the same, and the theoretical arrival time differences of different types of service messages may be different.

[0051] In other examples, determining the second label information of the current message according to the actual arrival time difference includes: comparing the actual arrival time difference with 0, the theoretical arrival time difference with the sum of the preset margin value; if the actual arrival time difference is greater than or equal to 0, and less than the sum of the theoretical arrival time difference and the preset margin value, then using the residence time of the current message in the time-sensitive network device as the residence time of the current message, wherein the preset margin value can be determined according to the actual situation in the time-sensitive network link; and / or, if the actual arrival time difference is greater than or equal to the sum of the theoretical arrival time difference and the preset margin value, then determining that the discard priority of the current message is the highest priority. Wherein, if the actual arrival time difference is less than 0, it is determined that the clock is abnormal, and an alarm message is issued.

[0052] Specifically, Figure 2 As shown in FIG. 1 , the process of time parsing messages in time-sensitive traffic includes:

[0053] S21, calculate the theoretical arrival time difference Tlen.

[0054] Wherein, Tlen=expected service bandwidth / expected message length.

[0055] S22, recording the actual arrival time of the current message, and calculating the actual arrival time difference Tdelta between the current message and the previous message.

[0056] Wherein, Tdelta = actual arrival time of the current message - actual arrival time of the previous message.

[0057] S23, determining whether Tdelta is less than 0.

[0058] If yes, execute step S24, otherwise execute step S25.

[0059] S24, determining that the clock is abnormal and issuing an alarm message.

[0060] S25, determining whether Tdelta is less than or equal to Tlen+Ttolerance.

[0061] Wherein, Ttolerance represents the above-mentioned preset margin value.

[0062] If yes, execute step S26, otherwise execute step S27.

[0063] S26, obtaining the residence time of the current message in the TSN device, and using the residence time as the residence time in the second label information of the current message.

[0064] Among them, the residence time of the current message in the TSN device can be obtained by parsing the information field of the message structure. After the residence time is obtained, the gating list can be configured according to the residence time during the subsequent TAS (Time Aware Shaper) gating scheduling, thereby ensuring the accuracy of the message arrival time.

[0065] It should be noted that, when performing the above-mentioned time analysis, the messages used to compare the arrival time-related information are messages of the same type. The "same type" can be determined based on the source MAC address, destination MAC address, COS (Class of Service) (such as IEEE802.1p priority), source IP address, destination IP address, three-layer protocol type, DSCP (Differentiated Services Code Point) value, input interface, output interface, and different application layer contents obtained from the type field or the information field. Taking the source MAC address, destination MAC address, COS, source IP address, and destination IP address as an example, when the source MAC address, destination MAC address, COS, source IP address, and destination IP address are all the same, they can be considered to be of the same type.

[0066] S27, setting the discarding priority in the second label information of the current message to the highest priority.

[0067] It can be understood that the setting method of the classification identifier, scheduling priority, and label priority in the second label information in this implementation manner can refer to the description in the implementation manner of sorting according to the actual arrival time.

[0068] Compared with the above implementation method of directly sorting according to the actual arrival time, the implementation method of setting the label information according to the actual arrival time difference can improve the accuracy of TAS gating scheduling. Moreover, through the comparison setting of Tlen+Ttorence, it can not only improve the accuracy of periodic message arrival, but also be more suitable for actual use scenarios.

[0069] S12: Determine a target processing method for the message in the time-sensitive traffic according to the second label information.

[0070] Specifically, the processing method corresponding to the second tag information of the message can be used as the target processing method of the message. For example, when the discard priority in the second tag information of the message is the highest priority, the target processing method includes discarding the message; when the second tag information of the message contains the residence time, the target processing method includes gating the message according to the residence time. By determining the target processing method, the TSN device can flexibly process the message and avoid erroneous discarding.

[0071] Embodiment 2:

[0072] Figure 3 It is a flowchart of a method for processing time-sensitive traffic in Embodiment 2 of the present application.

[0073] like Figure 3 As shown in the figure, the processing methods for time-sensitive traffic include:

[0074] S31, performing security judgment on the messages in the time-sensitive traffic to obtain secure messages and insecure messages, and determining first label information of the secure messages and the insecure messages respectively.

[0075] The first label information includes at least two of a classification identifier (which may be recorded as ClassID), a discard priority, a scheduling priority, and a label priority.

[0076] In some embodiments, a security judgment is performed on the messages in the time-sensitive traffic to obtain secure messages and unsecure messages, including: comparing the type field of the message in the time-sensitive traffic with a preset security type library; if the type field is in the preset security type library, the message is determined to be a secure message, otherwise it is an unsecure message.

[0077] In other implementations, a security judgment is performed on the messages in the time-sensitive traffic to obtain secure messages and insecure messages, including: performing a security check on the messages in the time-sensitive traffic, if the check passes, determining that the message is a secure message, otherwise it is an insecure message.

[0078] In some other embodiments, a security judgment is made on the messages in the time-sensitive traffic to obtain secure messages and insecure messages, including: for each type of message in the time-sensitive traffic, counting the number of the messages within a preset period; if the statistical number of the message is less than or equal to the number threshold corresponding to the message, the message is determined to be a secure message, otherwise the message is determined to be an insecure message.

[0079] After determining the secure message and the non-secure message, the first label information of the secure message and the non-secure message may be further determined. The determination rules may include: the classification identifier of the secure message is different from the classification identifier of the non-secure message, the scheduling priority of the secure message is higher than the scheduling priority of the non-secure message, the discarding priority of the secure message is lower than the discarding priority of the non-secure message, and the discarding priority of the non-secure message is the highest priority.

[0080] The following takes the example of judging the security of messages by counting the number of messages to explain the specific process of obtaining the first label information. Figure 4 As shown, the specific process includes:

[0081] S41, setting sampling rules.

[0082] S42, sampling the messages that meet the target filtering conditions according to the sampling rules, and recording the sampling results in the service flow information table.

[0083] Sampling rules can be set according to user needs, such as sampling service flow features for packets with specific source IP addresses, so that the traffic of a certain service can be flexibly monitored. Specifically, service flow features of packets can be extracted, such as source MAC address, destination MAC address, COS, source IP address, destination IP address, three-layer protocol type, DSCP value, input interface, output interface, and different application layer contents. According to user needs, one or more service flow features can be selected to set sampling rules, and then sampling is performed according to the sampling rules, and the sampling results are recorded in the service flow information table.

[0084] S43, comparing the statistical number of sampling results in the service flow information table with a preset number threshold.

[0085] The entry information in the service flow information table may include the above-mentioned sampling rules, the statistical number of messages in the time-sensitive flow, the statistical number of flow bytes, the statistical start time and end time, and the flow duration, etc. When the sampling results are counted, the extracted service flow characteristics can be used as the distinguishing mark of the message category to search in the service flow information table. If the message is found in the statistical record history, the record value of the item is updated; otherwise, a count record reflecting the message is generated in the service flow information table. When the time for continuously receiving a certain specific message exceeds the maximum sampling time set by the user (that is, the above-mentioned preset period), such messages are no longer extracted and identified, and the number of the specific message received in the preset period is recorded in the service flow information table, and then the number is compared with the corresponding number threshold. Correspondingly, when the time for continuously not receiving a certain specific message exceeds the effective sampling time (such as n times the preset period, n is an integer greater than 1), the relevant table entry of the message in the service flow information table is deleted. By rationally organizing and storing data in the service flow information table, it is possible to flexibly monitor a certain type of traffic, greatly reduce the number of messages processed, and save a lot of resources.

[0086] S44, determining first label information of the corresponding message according to the comparison result.

[0087] If the statistical number of a message is greater than the corresponding number threshold, it is considered that the message may be an attack message. The discard priority and scheduling priority can be set according to the difference between the statistical number and the number threshold. Specifically, the larger the difference, the higher the discard priority and the lower the scheduling priority. That is, the difference is positively correlated with the discard priority and negatively correlated with the scheduling priority, so as to avoid the scheduling of a large number of such attack messages affecting the processing of normal services. Among them, the scheduling priority is the basis for TSN equipment to schedule, which can be determined according to user needs to ensure that important services are processed first.

[0088] The ClassId in the first label information can be determined based on the business flow characteristics and the security message identifier (which can be customized), such as the identification code + security message identifier of a business flow characteristic of the corresponding message (which can be a business flow characteristic used to set sampling rules); for the same type of messages (which can be determined based on ClassId), the label priority in the first label information can be the same.

[0089] S32, performing time analysis on the security message, and updating the first label information of the security message according to the time analysis result to obtain the second label information of the security message.

[0090] Compared with the first embodiment, the second tag information also includes at least one of a classification identifier, a scheduling priority, and a tag priority. The time parsing in step S32, and the implementation method for determining the discard priority and the residence time in the second tag information, can refer to the time parsing in the above step S11, and the implementation method for determining the discard priority and the residence time in the second tag information. The classification identifier in the second tag information can use the classification identifier in the first tag information; the scheduling priority in the second tag information can use the scheduling priority in the first tag information, or it can be obtained by adjusting the scheduling priority in the first tag information as needed; because the time parsing is for security messages, the tag priority in the second tag information can be set higher than the tag priority in the first tag information. For example, the tag priority in the first tag information is 0.5, and the tag priority in the second tag information is 1.

[0091] S33: Determine a target processing method for the message in the time-sensitive traffic according to the second label information and the first label information.

[0092] For a message having one of the second label information and the first label information, the processing method corresponding to the label information of the message is used as the target processing method of the message. For details, please refer to the description of step S12. For a message having both the second label information and the first label information, it is determined whether the two label information of the message conflict; if so, it is determined whether there is a label information with the highest discard priority in the two label information of the message; if so, the processing method corresponding to the label information with the highest discard priority is used as the target processing method of the message, such as discarding the message; otherwise, the processing method corresponding to the label information with the higher label priority is used as the target processing method of the message, such as processing the message according to the scheduling priority and residence time in the second label information.

[0093] Compared with the first embodiment, the second embodiment makes a security judgment on the message, performs time analysis based on the security judgment result, and then makes a comprehensive judgment on the first label information obtained according to the security judgment result and the second label information obtained according to the time analysis result, which can more effectively and accurately identify the characteristics of time-sensitive traffic, that is, prioritize the services that users care about, and the services that users do not care about or have no demand can be considered to have the lowest priority, and can be filtered out or have their processing priority reduced, thereby helping to improve the accuracy of service processing. In addition, it can be achieved in the two stages of the TSN device to obtain processing information of different services and perform flexible processing, and the conflict problem of the same service processing can be resolved by setting the label priority.

[0094] Embodiment three:

[0095] Figure 5It is a flowchart of a method for processing time-sensitive traffic in Embodiment 2 of the present application.

[0096] like Figure 5 As shown in the figure, the processing methods for time-sensitive traffic include:

[0097] S51, filtering the messages in the time-sensitive traffic by using the target filtering condition, and respectively assigning third label information to the messages satisfying the target filtering condition and the messages not satisfying the target filtering condition.

[0098] The third label information includes at least two of the classification identifier, the discard priority, the scheduling priority, and the label priority.

[0099] In some implementations, the target filtering condition is determined based on at least one of a source IP address, a destination IP address, a destination MAC address, a COS field, and a message length of a message in the time-sensitive traffic.

[0100] The category identifier of the message that meets the target filtering conditions is different from the category identifier of the message that does not meet the target filtering conditions. The scheduling priority of the message that meets the target filtering conditions is higher than the scheduling priority of the message that does not meet the target filtering conditions. The discarding priority of the message that meets the target filtering conditions is lower than the discarding priority of the message that does not meet the target filtering conditions, and the discarding priority of the message that does not meet the target filtering conditions is the highest priority; for the message having at least two of the second label information, the first label information and the third label information, the label priority in the second label information of the message is higher than the label priority in the first label information, and the label priority in the first label information is higher than the label priority in the second label information.

[0101] Specifically, the packets in the time-sensitive traffic can be pre-screened according to the target filtering conditions, and the packets that do not meet the target filtering conditions can be filtered. The specific process can be as follows: Figure 6 As shown:

[0102] S61, extracting service flow features of messages in time-sensitive traffic.

[0103] Time-sensitive traffic can be captured through network capture tools to extract key fields of messages in the time-sensitive traffic, such as source IP address, destination IP address, destination MAC (Media Access Control) address, COS field, message length, etc.

[0104] S62, setting target filtering conditions according to business flow characteristics.

[0105] One or more business flow characteristics can be selected as filtering conditions according to user needs.

[0106] S63: assign third label information to the message according to the target filtering condition.

[0107] The ClassId of each message can be determined according to the business flow characteristics, and the scheduling priority of the message that meets the target filtering conditions is set to be higher than the scheduling priority of the message that does not meet the target filtering conditions, and the discarding priority of the message that meets the target filtering conditions is set to be lower than the discarding priority of the message that does not meet the target filtering conditions, and the discarding priority of the message that does not meet the target filtering conditions is the highest priority; the label priority of each message is set to an initial value, such as 0. Afterwards, the third label information can be used as an input for security judgment to facilitate further processing and comprehensive judgment, among which the message with the highest discarding priority does not need to be subject to security judgment. It should be noted that in order to reduce unnecessary scheduling, the scheduling priority of the message that does not meet the target filtering conditions can be set to the lowest priority.

[0108] In this implementation, when the message just enters the TSN device at the initial stage, relatively simple business flow features in the time-sensitive traffic are filtered and captured, thereby saving ACL (Access Control Lists) resources.

[0109] S52, performing security judgment on the messages that meet the target filtering condition to obtain secure messages and non-secure messages, and respectively determining first label information of the secure messages and the non-secure messages.

[0110] The first label information includes at least two of a classification identifier, a discard priority, a scheduling priority, and a label priority.

[0111] The implementation of step S52 can refer to the implementation of step S31 above. The difference between the two is that step S52 is to make a security judgment on the message that meets the target filtering condition. When determining the first label information, the third label information of the corresponding message can also be included. For example, the discard priority and scheduling priority in the third label information can be reset according to the difference between the statistical number and the number threshold value. For example, the discard priority in the third label information is 0.5 (0 means no discard, 1 means discard), and the scheduling priority is 0.5 (0 means last scheduling, 1 means first scheduling). The larger the difference, the higher the discard priority (and greater than 0.5), and the lower the scheduling priority (and less than 0.5), that is, the difference is positively correlated with the discard priority and negatively correlated with the scheduling priority, so as to avoid the scheduling of a large number of such attack messages affecting the processing of normal services. The ClassId in the first tag information can directly use the ClassId in the third tag information, or it can be reset based on the ClassId in the third tag information and the business flow characteristics used for sampling; for the same message (which can be determined based on the ClassId), the label priority in the first tag information is higher than the label priority in the third tag information. For example, the label priority in the third tag information is 0, and the label priority in the first tag information is 0.5.

[0112] S53, performing time analysis on the security message, and updating the first label information of the security message according to the time analysis result to obtain the second label information of the security message.

[0113] The second label information includes at least one of a classification identifier, a discard priority, a scheduling priority, a label priority, and a residence time.

[0114] The time parsing in step S53, and the implementation method for determining the discarding priority and the residence time in the second tag information, can refer to the time parsing in the above step S11, and the implementation method for determining the discarding priority and the residence time in the second tag information. In addition, as in the implementation method of the above step S32, the classification identifier in the second tag information can continue to use the classification identifier in the first tag information; the scheduling priority in the second tag information can continue to use the scheduling priority in the first tag information, and can also be obtained by adjusting the scheduling priority in the first tag information as needed; because the time parsing is for security messages, the tag priority in the second tag information can be set higher than the tag priority in the first tag information, for example, the tag priority in the first tag information is 0.5, and the tag priority in the second tag information is 1.

[0115] S54: Determine a target processing method for the message in the time-sensitive traffic according to the second label information, the first label information, and the third label information.

[0116] For the determination of the target processing method for the message having one of the second label information, the first label information and the third label information, please refer to the description of step S12. For the message having at least two of the second label information, the first label information and the third label information, it is determined whether there is a conflict between the at least two label information of the message; if there is, it is determined whether there is a label information with the highest discard priority among the at least two label information of the message; if so, the processing method corresponding to the label information with the highest discard priority is used as the target processing method of the message, such as discarding the message, otherwise the processing method corresponding to the label information with the highest label priority is used as the target processing method of the message, such as processing the message according to the scheduling priority, residence time, etc. in the second label information.

[0117] Compared with the second embodiment, the third embodiment filters the message, makes a security judgment based on the filtering result, and performs time analysis based on the security judgment result, and then makes a comprehensive judgment on the third label information obtained according to the filtering result, the first label information obtained according to the security judgment result, and the second label information obtained according to the time analysis result. It can more effectively and accurately identify the characteristics of time-sensitive traffic, that is, give priority to identifying the services that users care about, and the services that users do not care about or have no demand can be considered to have the lowest priority and can be filtered out or have their processing priority lowered, which can achieve more flexible processing of different services, and thus help to improve the accuracy of service processing.

[0118] Figure 7 It is a structural block diagram of a device for processing time-sensitive traffic according to an embodiment of the present application.

[0119] like Figure 7 As shown, the device 700 for processing time-sensitive traffic includes: a time analysis module 710 and a comprehensive determination module 720 .

[0120] Among them, the time analysis module 710 is used to perform time analysis on the messages in the time-sensitive traffic, and determine the second label information of the message based on the time analysis result, wherein the second label information includes at least one of the discard priority and the residence time; the comprehensive judgment module 720 is used to determine the target processing method of the message in the time-sensitive traffic based on the second label information.

[0121] In some embodiments of the present application, the second tag information further includes at least one of a classification identifier, a tag priority, and a scheduling priority. Figure 8As shown, the time-sensitive traffic processing device 700 also includes: a security control module 730. The security control module 730 is used to perform security judgment on the messages in the time-sensitive traffic, obtain secure messages and non-secure messages, and determine the first label information of the secure messages and the non-secure messages respectively, wherein the first label information includes at least two of the classification identifier, the discard priority, the scheduling priority, and the label priority;

[0122] In this embodiment, the time analysis module 710 is specifically used to: perform time analysis on the security message, and update the first label information of the security message according to the time analysis result to obtain the second label information of the security message; the comprehensive judgment module 720 is specifically used to: determine the target processing method of the message in the time-sensitive traffic according to the second label information and the first label information.

[0123] In some embodiments of the present application, Fig. 9 As shown, the time-sensitive traffic processing device 700 also includes: a pre-processing module 740. The pre-processing module 740 is used to filter the messages in the time-sensitive traffic using the target filtering condition, and assign third label information to the messages that meet the target filtering condition and the messages that do not meet the target filtering condition, respectively, wherein the third label information includes at least two of the classification identifier, the discard priority, the scheduling priority, and the label priority.

[0124] In this embodiment, the target filtering condition can be determined according to at least one of the source IP address, destination IP address, destination MAC address, COS field, and message length of the message in the time-sensitive traffic. The security control module 730 is specifically used to: perform security judgment on the message that meets the target filtering condition, update the third label information of the secure message and the non-secure message, and obtain the first label information of the secure message and the non-secure message; the comprehensive determination module 720 is specifically used to: determine the target processing method of the message in the time-sensitive traffic according to the second label information, the first label information, and the third label information.

[0125] The category identifier of the message that meets the target filtering conditions is different from the category identifier of the message that does not meet the target filtering conditions. The scheduling priority of the message that meets the target filtering conditions is higher than the scheduling priority of the message that does not meet the target filtering conditions. The discarding priority of the message that meets the target filtering conditions is lower than the discarding priority of the message that does not meet the target filtering conditions, and the discarding priority of the message that does not meet the target filtering conditions is the highest priority; for the message having at least two of the second label information, the first label information and the third label information, the label priority in the second label information of the message is higher than the label priority in the first label information, and the label priority in the first label information is higher than the label priority in the third label information.

[0126] In some embodiments of the present application, the second label information of the current message is determined based on the actual arrival time difference, including: if the actual arrival time difference is greater than or equal to 0, and less than the sum of the theoretical arrival time difference and a preset margin value, then the residence time of the current message in the time-sensitive network device is used as the residence time of the current message; and / or, if the actual arrival time difference is greater than or equal to the sum of the theoretical arrival time difference and the preset margin value, then the discarding priority of the current message is determined to be the highest priority.

[0127] If the actual arrival time difference is less than 0, it can be determined that the clock is abnormal and an alarm message is issued.

[0128] In some embodiments of the present application, a security judgment is performed on messages in time-sensitive traffic to obtain secure messages and insecure messages, including: for each type of message in the time-sensitive traffic, the number of messages is counted within a preset period; if the statistical number of the message is less than or equal to the number threshold corresponding to the message, the message is determined to be a secure message, otherwise the message is determined to be an insecure message.

[0129] In some embodiments of the present application, the classification identifier of the secure message is different from the classification identifier of the non-secure message, the scheduling priority of the secure message is higher than the scheduling priority of the non-secure message, the discarding priority of the secure message is lower than the discarding priority of the non-secure message, and the discarding priority of the non-secure message is the highest priority.

[0130] In some embodiments of the present application, a target processing method for a message in time-sensitive traffic is determined based on the second label information, the first label information, and the third label information, including: for a message having one of the second label information, the first label information, and the third label information, using the processing method corresponding to the label information of the message as the target processing method of the message; for a message having at least two of the second label information, the first label information, and the third label information, determining whether there is a conflict between at least two label information of the message; if so, determining whether there is label information with the highest discard priority among the at least two label information of the message; if so, using the processing method corresponding to the label information with the highest discard priority as the target processing method of the message, otherwise using the processing method corresponding to the label information with the higher label priority as the target processing method of the message.

[0131] It should be noted that, for other specific implementations of the device for processing time-sensitive traffic in the embodiments of the present application, reference may be made to the specific implementations of the method for processing time-sensitive traffic in the above-mentioned embodiments.

[0132] Based on the method for processing time-sensitive traffic in the above embodiment, the present application proposes a computer-readable storage medium.

[0133] In this embodiment, a computer program is stored on a computer-readable storage medium. When the computer program is executed by a processor, the method for processing time-sensitive traffic in the above embodiment is implemented.

[0134] Based on the method for processing time-sensitive traffic in the above embodiment, the present application also proposes a chip.

[0135] Fig.10 It is a structural block diagram of a chip according to an embodiment of the present invention.

[0136] like Fig.10 As shown, the chip 800 includes: a processor 801 and a memory 803. The processor 801 and the memory 803 are connected, such as through a bus 802. Optionally, the chip 800 may also include a transceiver 804. It should be noted that in actual applications, the transceiver 804 is not limited to one, and the structure of the chip 800 does not constitute a limitation on the embodiments of the present invention.

[0137] The processor 801 may be a CPU (Central Processing Unit), a general-purpose processor, a DSP (Digital Signal Processor), an ASIC (Application Specific Integrated Circuit), an FPGA (Field Programmable Gate Array) or other programmable logic devices, transistor logic devices, hardware components or any combination thereof. It may implement or execute various exemplary logic blocks, modules and circuits described in conjunction with the disclosure of the present invention. The processor 801 may also be a combination that implements computing functions, such as a combination of one or more microprocessors, a combination of a DSP and a microprocessor, etc.

[0138] The bus 802 may include a path to transmit information between the above components. The bus 802 may be a PCI (Peripheral Component Interconnect) bus or an EISA (Extended Industry Standard Architecture) bus. The bus 802 may be divided into an address bus, a data bus, a control bus, etc. For ease of representation, Fig.10 Only one thick line is used in the diagram, but this does not mean that there is only one bus or only one type of bus.

[0139] The memory 803 is used to store a computer program corresponding to the method for processing time-sensitive traffic in the above embodiment of the present invention, and the computer program is controlled and executed by the processor 801. The processor 801 is used to execute the computer program stored in the memory 803 to implement the content shown in the above method embodiment.

[0140] Fig.10 The chip 800 shown is only an example and should not bring any limitation to the functions and scope of use of the embodiments of the present invention.

[0141] Fig.11 This is a structural block diagram of a time-sensitive network device according to an embodiment of the present application.

[0142] like Fig.11 As shown, the time-sensitive network device 900 includes: the time-sensitive traffic processing device 700 of the above embodiment.

[0143] Fig.12 It is a structural block diagram of a time-sensitive network device according to another embodiment of the present application.

[0144] like Fig.12 As shown, the time-sensitive network device 900 includes: the chip 800 of the above embodiment.

[0145] It should be noted that the logic and / or steps represented in the flowchart or otherwise described herein, for example, can be considered as a sequenced list of executable instructions for implementing logical functions, and can be specifically implemented in any computer-readable medium for use by an instruction execution system, device or apparatus (such as a computer-based system, a system including a processor, or other system that can fetch instructions from an instruction execution system, device or apparatus and execute instructions), or in combination with these instruction execution systems, devices or apparatuses. For the purposes of this specification, "computer-readable medium" can be any device that can contain, store, communicate, propagate or transmit a program for use by an instruction execution system, device or apparatus, or in combination with these instruction execution systems, devices or apparatuses. More specific examples of computer-readable media (a non-exhaustive list) include the following: an electrical connection portion with one or more wirings (electronic device), a portable computer disk box (magnetic device), a random access memory (RAM), a read-only memory (ROM), an erasable and programmable read-only memory (EPROM or flash memory), an optical fiber device, and a portable compact disk read-only memory (CDROM). In addition, the computer-readable medium may even be paper or other suitable medium on which the program is printed, since the program may be obtained electronically, for example, by optically scanning the paper or other medium and then editing, interpreting or processing in other suitable ways if necessary, and then stored in a computer memory.

[0146] It should be understood that the various parts of the present invention can be implemented by hardware, software, firmware or a combination thereof. In the above-mentioned embodiments, a plurality of steps or methods can be implemented by software or firmware stored in a memory and executed by a suitable instruction execution system. For example, if implemented by hardware, as in another embodiment, it can be implemented by any one of the following technologies known in the art or their combination: a discrete logic circuit having a logic gate circuit for implementing a logic function for a data signal, a dedicated integrated circuit having a suitable combination of logic gate circuits, a programmable gate array (PGA), a field programmable gate array (FPGA), etc.

[0147] In the description of this specification, the description with reference to the terms "one embodiment", "some embodiments", "examples", "specific examples", or "some examples" means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present invention. In this specification, the schematic representation of the above terms does not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described may be combined in any one or more embodiments or examples in a suitable manner.

[0148] In the description of the present invention, it is to be understood that the terms “center”, “longitudinal”, “lateral”, “length”, “width”, “thickness”, “up”, “down”, “front”, “back”, “left”, “right”, “vertical”, “horizontal”, “top”, “bottom”, “inside”, “outside”, “clockwise”, “counterclockwise”, “axial”, “radial”, “circumferential”, etc., indicating orientations or positional relationships based on the orientations or positional relationships shown in the accompanying drawings, are only for the convenience of describing the present invention and simplifying the description, and do not indicate or imply that the referred device or element must have a specific orientation, be constructed and operated in a specific orientation, and therefore should not be understood as limiting the present invention.

[0149] In addition, the terms "first" and "second" are used for descriptive purposes only and should not be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features. Therefore, the features defined as "first" and "second" may explicitly or implicitly include at least one of the features. In the description of the present invention, the meaning of "plurality" is at least two, such as two, three, etc., unless otherwise clearly and specifically defined.

[0150] In the present invention, unless otherwise clearly specified and limited, the terms "installed", "connected", "connected", "fixed" and the like should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection or an indirect connection through an intermediate medium, it can be the internal connection of two elements or the interaction relationship between two elements, unless otherwise clearly defined. For ordinary technicians in this field, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0151] In the present invention, unless otherwise clearly specified and limited, a first feature being "above" or "below" a second feature may mean that the first and second features are in direct contact, or the first and second features are in indirect contact through an intermediate medium. Moreover, a first feature being "above", "above" or "above" a second feature may mean that the first feature is directly above or obliquely above the second feature, or simply means that the first feature is higher in level than the second feature. A first feature being "below", "below" or "below" a second feature may mean that the first feature is directly below or obliquely below the second feature, or simply means that the first feature is lower in level than the second feature.

[0152] Although the embodiments of the present invention have been shown and described above, it is to be understood that the above embodiments are exemplary and are not to be construed as limitations of the present invention. A person skilled in the art may change, modify, replace and vary the above embodiments within the scope of the present invention.

Claims

1. A method for processing time-sensitive traffic, characterized in that: include: Perform security judgment on the messages in the time-sensitive traffic to obtain secure messages and insecure messages, and respectively determine first label information of the secure messages and the insecure messages, wherein the first label information includes at least two of a classification identifier, a discard priority, a scheduling priority, and a label priority; Performing time parsing on the security message, and updating the first label information of the security message according to the time parsing result to obtain the second label information of the security message, wherein the second label information includes at least two of the discard priority, the residence time, the classification identifier, the label priority, and the scheduling priority; A target processing method for the message in the time-sensitive traffic is determined according to the first label information and the second label information.

2. The method for processing time-sensitive traffic according to claim 1, characterized in that: The method further comprises: Filter the messages in the time-sensitive traffic using the target filtering condition, and assign third label information to the messages that meet the target filtering condition and the messages that do not meet the target filtering condition, respectively, wherein the third label information includes at least two of a classification identifier, a discard priority, a scheduling priority, and a label priority; Among them, performing security judgment on the messages in the time-sensitive traffic and determining the first label information of the secure messages and the non-secure messages respectively include: performing security judgment on the messages that meet the target filtering conditions, updating the third label information of the secure messages and the non-secure messages, and obtaining the first label information of the secure messages and the non-secure messages; Determining the target processing method of the message in the time-sensitive traffic according to the second label information and the first label information includes: determining the target processing method of the message in the time-sensitive traffic according to the second label information, the first label information and the third label information.

3. The method for processing time-sensitive traffic according to claim 1 or 2, characterized in that: The performing time parsing on the message in the time-sensitive traffic and determining the second label information of the message according to the time parsing result includes: Determining an actual arrival time difference between a current message and a previous message in the time-sensitive traffic; The second label information of the current message is determined according to the actual arrival time difference.

4. The method for processing time-sensitive traffic according to claim 3, characterized in that: The determining the second label information of the current message according to the actual arrival time difference includes: If the actual arrival time difference is greater than or equal to 0 and less than the sum of the theoretical arrival time difference and the preset margin value, the residence time of the current message in the time-sensitive network device is used as the residence time of the current message; and / or, If the actual arrival time difference is greater than or equal to the sum of the theoretical arrival time difference and the preset margin value, the discarding priority of the current message is determined to be the highest priority.

5. The method for processing time-sensitive traffic according to claim 4, characterized in that: The method further comprises: If the actual arrival time difference is less than 0, it is determined that the clock is abnormal and an alarm message is issued.

6. The method for processing time-sensitive traffic according to claim 1 or 2, characterized in that: The performing security judgment on the messages in the time-sensitive traffic to obtain secure messages and non-secure messages includes: For each type of message in the time-sensitive traffic, counting the number of the message within a preset period; If the statistical number of the message is less than or equal to the number threshold corresponding to the message, the message is determined to be the safe message, otherwise the message is determined to be the unsafe message.

7. The method for processing time-sensitive traffic according to claim 1 or 2, characterized in that: The classification identifier of the secure message is different from the classification identifier of the non-secure message, the scheduling priority of the secure message is higher than the scheduling priority of the non-secure message, the discarding priority of the secure message is lower than the discarding priority of the non-secure message, and the discarding priority of the non-secure message is the highest priority.

8. The method for processing time-sensitive traffic according to claim 2, characterized in that: The target filtering condition is determined according to at least one of the source IP address, the destination IP address, the destination MAC address, the COS field, and the message length of the message in the time-sensitive traffic; The category identifier of the message that meets the target filtering condition is different from the category identifier of the message that does not meet the target filtering condition, the scheduling priority of the message that meets the target filtering condition is higher than the scheduling priority of the message that does not meet the target filtering condition, the discarding priority of the message that meets the target filtering condition is lower than the discarding priority of the message that does not meet the target filtering condition, and the discarding priority of the message that does not meet the target filtering condition is the highest priority; for the message having at least two of the second label information, the first label information and the third label information, the label priority in the second label information of the message is higher than the label priority in the first label information, and the label priority in the first label information is higher than the label priority in the third label information.

9. The method for processing time-sensitive traffic according to claim 2, characterized in that: The determining, according to the second label information, the first label information, and the third label information, a target processing method for the message in the time-sensitive traffic includes: For a message having the second label information, the first label information, or the third label information, taking a processing method corresponding to the label information of the message as a target processing method of the message; For a message having at least two of the second label information, the first label information, and the third label information, determining whether at least two label information of the message conflict; If so, determining whether there is label information with the highest discard priority among at least two label information of the message; If so, the processing method corresponding to the label information with the highest discard priority is used as the target processing method of the message; otherwise, the processing method corresponding to the label information with a high label priority is used as the target processing method of the message.

10. A device for processing time-sensitive traffic, characterized in that: include: A security control module, used to perform security judgment on the messages in the time-sensitive traffic, obtain secure messages and non-secure messages, and respectively determine first label information of the secure messages and the non-secure messages, wherein the first label information includes at least two of a classification identifier, a discard priority, a scheduling priority, and a label priority; A time parsing module, used to perform time parsing on the security message, and update the first label information of the security message according to the time parsing result to obtain the second label information of the security message, wherein the second label information includes at least two of the discard priority, the residence time, the classification identifier, the label priority, and the scheduling priority; A comprehensive determination module is used to determine a target processing method for the message in the time-sensitive traffic according to the first label information and the second label information.

11. The device for processing time-sensitive traffic according to claim 10, characterized in that: The device also includes: A preprocessing module, used to filter the messages in the time-sensitive traffic using the target filtering condition, and assign third label information to the messages that meet the target filtering condition and the messages that do not meet the target filtering condition, respectively, wherein the third label information includes at least two of the classification identifier, the discard priority, the scheduling priority, and the label priority; The security control module is specifically used to: perform security judgment on the message that meets the target filtering condition, update the third label information of the security message and the non-security message, and obtain the first label information of the security message and the non-security message; The comprehensive determination module is specifically used to determine a target processing method for the message in the time-sensitive traffic according to the second label information, the first label information and the third label information.

12. The time-sensitive traffic processing device according to claim 10 or 11, characterized in that: The time resolution module is specifically used for: Determining an actual arrival time difference between a current message and a previous message in the time-sensitive traffic; The second label information of the current message is determined according to the actual arrival time difference.

13. The device for processing time-sensitive traffic according to claim 12, characterized in that: When the time parsing module determines the second label information of the current message according to the actual arrival time difference, it is specifically used to: When the actual arrival time difference is greater than or equal to 0 and less than the sum of the theoretical arrival time difference and the preset margin value, the residence time of the current message in the time-sensitive network device is used as the residence time of the current message; and / or, When the actual arrival time difference is greater than or equal to the sum of the theoretical arrival time difference and the preset margin value, the discarding priority of the current message is determined to be the highest priority.

14. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the method for processing time-sensitive traffic according to any one of claims 1-9 is implemented.

15. A chip comprising a memory, a processor and a computer program stored in the memory, characterized in that: When the computer program is executed by the processor, the method for processing time-sensitive traffic according to any one of claims 1-9 is implemented.

16. A time-sensitive network device, characterized in that: include: A device for processing time-sensitive traffic according to any one of claims 10-13, or a chip according to claim 15.

Images