Network system and message transmission method and related device therein

Abstract

The present application provides a network system and a message transmission method and related devices therein, which relate to the field of communication technology. The network system includes a first forwarding device, a second forwarding device and a transparent value-added service device. Among them, the first forwarding device and the second forwarding device belong to the same three-layer virtual private network. The first forwarding device is connected to the transparent value-added service device through a first interface, and the second forwarding device is connected to the transparent value-added service device through a second interface. The first forwarding device stores a first address resolution protocol table entry, the protocol address in the first address resolution protocol table entry is an idle address of the network segment where the first interface is located, and the physical address in the first address resolution protocol table entry is the physical address of the second interface. In this way, the transparent value-added service device can process the data packets exchanged between the user terminal and the server to provide corresponding value-added services to the user terminal.

Description

Technical Field

[0001] The present application relates to the field of communication technology, and in particular to a network system and a message transmission method and related devices therein. Background Art

[0002] A three-layer network allows devices in different network segments to communicate. A three-layer network includes at least one three-layer forwarding device. When providing value-added services (VAS) to the user end, such as virus filtering, page adaptation, video optimization and other services, the three-layer network also includes VAS devices. VAS devices process data packets exchanged between the user end and the server to provide corresponding value-added services to the user end.

[0003] At present, some VAS devices work in transparent mode (i.e., they are invisible to other devices). VAS devices working in transparent mode are divided into: first-layer transparent VAS devices and second-layer transparent VAS devices according to the way of forwarding data packets. Both first-layer transparent VAS devices and second-layer transparent VAS devices do not have interface Internet Protocol (IP) addresses and device service IP addresses. In addition, first-layer transparent VAS devices do not learn media access control (MAC) addresses, nor do they forward data packets based on MAC addresses. Second-layer transparent VAS devices learn MAC addresses and perform second-layer forwarding on data packets based on MAC addresses. That is, first-layer transparent VAS devices and second-layer transparent VAS devices either do not learn MAC addresses or can only perform second-layer forwarding. Therefore, how to apply transparent VAS devices to perform third-layer forwarding in a third-layer network has become a problem that needs to be solved urgently. Summary of the invention

[0004] The present application provides a network system and a message transmission method and related devices therein, which can apply a transparent VAS device in a three-layer network to perform three-layer forwarding.

[0005] In a first aspect, the present application provides a network system, which includes: a first forwarding device, a second forwarding device and a transparent VAS device, the first forwarding device and the second forwarding device belong to the same three-layer virtual private network; the first forwarding device is communicatively connected to the transparent VAS device through a first interface; the second forwarding device is communicatively connected to the transparent VAS device through a second interface; a first address resolution protocol (ARP) table entry is stored on the first forwarding device, the protocol address in the first ARP table entry is an idle address of the network segment where the first interface is located, and the physical address in the first ARP table entry is the physical address of the second interface.

[0006] In the network system provided by the first aspect above, when a data packet that needs to pass through the transparent VAS device reaches the first forwarding device, the first forwarding device can send the data packet to the transparent VAS device through the first interface according to the first ARP table entry, so that the transparent VAS device processes the data packet exchanged between the user terminal and the server, and provides corresponding value-added services for the user terminal. It can be seen that the present application does not require the transparent VAS device to be configured with an IP address or a MAC address to send data to the transparent VAS device, and the diversion method is flexible.

[0007] Optionally, the first forwarding device also stores a first policy-based routing (PBR), and the next hop of the first policy-based routing is the protocol address in the first ARP table entry. Based on the above network system, when the data packet is forwarded in the network system through the integrated routing and bridging (IRB) symmetric mode, the first policy-based routing can also be configured on the first forwarding device, and the next hop of the first policy-based routing is the protocol address in the first ARP table entry. In this way, when the data that needs to pass through the transparent VAS device reaches the first forwarding device, the first forwarding device can obtain the first ARP table entry according to the first policy-based routing, and send the data to the transparent VAS device through the first interface according to the first ARP table entry, so that the transparent VAS device processes the data packets interacting between the user terminal and the server, and provides corresponding value-added services for the user terminal.

[0008] Optionally, a second ARP entry is stored on the second forwarding device, the protocol address in the second ARP entry is an idle address of the network segment where the second interface is located, and the physical address in the second ARP entry is the physical address of the first interface. Based on the above network system, when the server has data to send to the user end, the second forwarding device can send the data to the transparent VAS device through the second interface according to the second ARP entry, so that the transparent VAS device processes the data packets exchanged between the user end and the server.

[0009] Optionally, the second forwarding device also stores a second policy route, and the next hop of the second policy route is the protocol address in the second ARP table entry. Based on the above network system, when the server has data to send to the user end, and the data is forwarded through the IRB symmetric mode in the network system, the second policy route can also be configured on the second forwarding device, and the next hop of the second policy route is the protocol address in the second ARP table entry. In this way, when the data that needs to pass through the transparent VAS device reaches the second forwarding device, the second forwarding device can obtain the second ARP table entry according to the second policy route, and send the data to the transparent VAS device through the second interface according to the second ARP table entry, so that the transparent VAS device processes the data packets interacting between the user end and the server.

[0010] Optionally, the network system further includes a controller, the controller being configured to generate the first ARP table entry, and send the first ARP table entry to the first forwarding device. This embodiment can realize automatic service orchestration.

[0011] In a second aspect, the present application provides a message transmission method, the method comprising: a first forwarding device obtains a first data message including first data; the first forwarding device is communicatively connected to an interface of a transparent value-added service VAS device through a first interface, and another interface of the transparent VAS device is communicatively connected to a second interface of a second forwarding device; the first forwarding device and the second forwarding device belong to the same three-layer virtual private network; the first forwarding device obtains a first ARP table entry corresponding to the first data message; the protocol address in the first ARP table entry is an idle address of the network segment where the first interface is located, and the physical address in the first ARP table entry is the physical address of the second interface; the first forwarding device sends the first data to the transparent VAS device through the first interface; the physical address of the second interface corresponds to the first interface.

[0012] In the method provided in the second aspect above, the first forwarding device can obtain the first data packet, obtain the first ARP table item corresponding to the first data packet according to the first data packet, and send the first data to the transparent VAS device through the first interface. In this way, by configuring the first ARP table item including the protocol address and the physical address on the first forwarding device, the transparent VAS device processes the data packets exchanged between the user terminal and the server, and provides corresponding value-added services for the user terminal. Among them, for devices configured with policy routing and the first ARP table item, messages can be transmitted according to the method provided in the present application. For data packets that do not need to pass through the transparent VAS device, they are still forwarded according to the method of looking up the routing table or looking up the MAC address table. In addition, the message transmission method provided in the present application does not consume additional virtual routing forwarding (virtual routing forwarding, VRF) and forwarding information base (forwarding information base, FIB) resources, and the arrangement is simple.

[0013] Optionally, the first data message includes a first source protocol address, and the first forwarding device obtains a first address resolution protocol ARP table entry corresponding to the first data message, including: the first forwarding device obtains a first policy route corresponding to the first source protocol address, and the next hop of the first policy route is the protocol address in the first ARP table entry; the first forwarding device obtains the first ARP table entry according to the first policy route. Based on the above method, when the first data is forwarded in the network through the IRB symmetric mode, the first forwarding device can obtain the first policy route according to the first source protocol address in the first data message, and obtain the first ARP table entry according to the first policy route, so that the transparent VAS device can process the data messages exchanged between the user terminal and the server, and provide corresponding value-added services for the user terminal.

[0014] Optionally, the first data message includes a first destination physical address, and the first forwarding device obtains a first address resolution protocol ARP table entry corresponding to the first data message, including: the first forwarding device searches the ARP table according to the first destination physical address to obtain the first ARP table entry. Based on the above method, when the first data is forwarded in the network through the IRB asymmetric mode, the first forwarding device can search the ARP table according to the first destination physical address in the first data message to obtain the first ARP table entry, so that the transparent VAS device can process the data messages exchanged between the user terminal and the server, and provide corresponding value-added services for the user terminal.

[0015] Optionally, before the first forwarding device sends the first data to the transparent VAS device through the first interface, the method further includes: the first forwarding device searches the physical mapping table according to the physical address of the second interface in the first ARP table entry to determine that the first data needs to be sent through the first interface; or, the first forwarding device determines that the first data needs to be sent through the first interface according to the outgoing interface in the first ARP table entry. Based on the above method, the first forwarding device can determine that the interface to send the first data is the first interface by searching the physical mapping table, or the first forwarding device can determine that the interface to send the first data is the first interface according to the outgoing interface in the first ARP table entry.

[0016] Optionally, the first forwarding device is the same as or different from the second forwarding device, and the first interface is different from the second interface. Based on the above method, the transparent VAS device can be connected to different interfaces of the same VRF of the same forwarding device, or can be connected to two different forwarding devices belonging to the same three-layer virtual private network, and the connection method is flexible.

[0017] In a third aspect, the present application provides a communication device that can implement the method in the second aspect or any possible implementation of the second aspect. The device includes corresponding units or components for executing the above method. The units included in the device can be implemented by software and / or hardware. The device can be, for example, a network device (such as a switch, a router, etc.), or a chip, a chip system, or a processor that can support the network device to implement the above method.

[0018] In a fourth aspect, the present application provides a communication device, comprising: a processor, the processor is coupled to a memory, the memory is used to store programs or instructions, when the program or instructions are executed by the processor, the device implements the method described in the above-mentioned second aspect, or any possible implementation of the second aspect.

[0019] In a fifth aspect, the present application provides a computer-readable medium having a computer program or instructions stored thereon, which, when executed, causes a computer to execute the method described in the second aspect or any possible implementation of the second aspect.

[0020] In a sixth aspect, the present application provides a computer program product, which includes a computer program code. When the computer program code is run on a computer, it enables the computer to execute the method described in the above-mentioned second aspect or any possible implementation of the second aspect.

[0021] In a seventh aspect, the present application provides a chip capable of implementing the method described in the above-mentioned second aspect or any possible implementation manner of the second aspect.

[0022] Any of the communication devices, chips, computer-readable media, computer program products or communication systems provided above are used to execute the corresponding methods provided above. Therefore, the beneficial effects that can be achieved can refer to the beneficial effects in the corresponding methods and will not be repeated here. BRIEF DESCRIPTION OF THE DRAWINGS

[0023] Figure 1 A schematic diagram of the network system architecture provided in an embodiment of the present application;

[0024] Figure 2 A schematic diagram of the hardware structure of a communication device provided in an embodiment of the present application;

[0025] Figure 3 Schematic diagram of the message transmission method provided in the embodiment of the present application Figure 1 ;

[0026] Figure 4 Schematic diagram of the message transmission method provided in the embodiment of the present application Figure 2 ;

[0027] Figure 5a A schematic diagram of the process of forwarding data packets using the IRB symmetric mode in an embodiment of the present application;

[0028] Figure 5b A schematic diagram of the process of forwarding data packets using the IRB asymmetric mode in an embodiment of the present application;

[0029] Figure 6 Schematic diagram of the message transmission method provided in the embodiment of the present application Figure 3 ;

[0030] Figure 7 A schematic diagram of the structure of a communication device provided in an embodiment of the present application;

[0031] Figure 8 A schematic diagram of the structure of the chip provided in the embodiment of the present application. DETAILED DESCRIPTION

[0032] The implementation of the embodiments of the present application will be described in detail below with reference to the accompanying drawings.

[0033] The message transmission method provided in the embodiment of the present application can be used in any three-layer network. For example, a traditional three-layer virtual private network (VPN) or an Ethernet virtual private network (EVPN). Among them, the message processing method in EVPN is different from that in the traditional three-layer VPN. In EVPN, when the message reaches the tunnel end point (VXLAN tunnel end point, VTEP) of the virtual extensible local area network (VXLAN), it will be encapsulated with a VXLAN header to obtain a new message. VTEP is a device in the network that can encapsulate and decapsulate VXLAN messages. Compared with the message before encapsulation, the new message has more VTEP information. The VTEP information will indicate the target VTEP to which the new message is to be sent. Subsequently, the new message will be sent to the target VTEP. After receiving the new message, the target VTEP will decapsulate the VXLAN header and obtain the message before encapsulation.

[0034] The following is only Figure 1 The embodiment of the present application is described by taking the network system 10 as an example.

[0035] like Figure 1 , which is a schematic diagram of the architecture of a network system 10 provided in an embodiment of the present application. Figure 1 In the figure, the network system 10 includes forwarding devices 101-106, a transparent VAS device 107, a user terminal 108 and a server 109. Among them, forwarding devices 105 and 106 can be called spine forwarding devices. Forwarding devices 101-104 can be leaf forwarding devices. Forwarding device 105 is communicatively connected with forwarding devices 101-104, and forwarding device 106 is communicatively connected with forwarding devices 101-104. Forwarding device 101 is communicatively connected with user terminal 108, and forwarding device 104 is communicatively connected with server 109. Transparent VAS device 107 is communicatively connected with forwarding device 102 and forwarding device 103 respectively.

[0036] The above forwarding devices 101 to 106 can connect multiple devices to a computer network. Figure 1 Any forwarding device in the network is a switch or a router. Figure 1 Different forwarding devices in the network are located in different network segments. Figure 1 Any forwarding device in a network can have multiple physical ports. A physical port can correspond to one or more logical interfaces; or a physical port can have no logical interface.

[0037] Furthermore, if a physical port corresponds to one or more logical interfaces, each logical interface corresponds to a protocol address. The protocol addresses corresponding to different logical interfaces of the same physical port may be the same or different. If a physical port has no logical interface, the physical port corresponds to a protocol address. If a physical port corresponds to one or more logical interfaces, each logical interface corresponds to a physical address. The physical addresses corresponding to different logical interfaces of the same physical port may be the same or different. If a physical port has no logical interface, the physical port corresponds to a physical address.

[0038] The protocol address in the embodiment of the present application may be an IP address or other forms of protocol address, without limitation. The physical address in the embodiment of the present application may be a MAC address or other forms of physical address, without limitation.

[0039] The transparent VAS device 107 works in a transparent mode, that is, it is invisible to the forwarding device in the network system 10. The transparent VAS device 107 can provide corresponding value-added services for the user terminal 108. The transparent VAS device 107 can be a layer 1 transparent VAS device or a layer 2 transparent VAS device.

[0040] The user terminal 108 may be a computer or a device with wireless transceiver function. The user terminal 108 may also be referred to as a terminal device, a terminal, a user equipment, a mobile station or a mobile station. The user terminal 108 may be a personal computer, a server, a mobile phone, a tablet computer (pad), a vehicle-mounted device, a wearable device, etc.

[0041] The server 109 may be a device that can provide computing or application services to the client 108 .

[0042] Optional, Figure 1 The network system shown also includes a software defined network (SDN) controller ( Figure 1 The SDN controller can communicate with Figure 1 For example, the SDN controller is respectively connected to the forwarding devices 101 to 106. The SDN controller can be Figure 1 The SDN controller may configure a data packet forwarding policy for any forwarding device in the SDN controller, or a configuration for forwarding data packets, etc. For example, the SDN controller may configure policy routing for the forwarding device 101 and configure an ARP table entry for the forwarding device 102.

[0043] The transparent VAS device 107 has no IP address and device service IP address, and the transparent VAS device 107 either does not learn the MAC address or can only perform Layer 2 forwarding. Therefore, after the transparent VAS device 107 is connected to the Layer 3 network, if the user terminal 108 needs value-added services, how to make the data message sent by the user terminal 108 pass through the transparent VAS device 107 to reach the server 109 has become an urgent problem to be solved.

[0044] In order to solve the above technical problems, ARP table entries can be configured on the interface connecting the forwarding device 102 and the transparent VAS device 107, and policy routing can be configured on the forwarding device 101. The ARP table entry includes a protocol address and a physical address corresponding to the protocol address. The protocol address is an idle address of the network segment where the interface connecting the forwarding device 102 and the transparent VAS device 107 is located, and the physical address is the physical address of the interface connecting the forwarding device 103 and the transparent VAS device 107. The next hop of the policy routing is the protocol address in the ARP table entry. In this way, after the forwarding device 101 receives data from the user terminal 108, it can send the data to the forwarding device 102 according to the policy routing. After the forwarding device 102 receives the data, it can send the data to the transparent VAS device 107 through the interface connected to the transparent VAS device 107 according to the ARP table entry. Specifically, please refer to the following Figure 3 or Figure 4 As described in the method shown.

[0045] Figure 3 or Figure 4 The method shown is only an example of the message transmission method provided in the embodiment of the present application. The idea used in the message transmission method provided in the embodiment of the present application (by configuring policy routing and ARP table entries on the forwarding device, and configuring the next hop of the policy routing as the protocol address in the ARP table entry to redirect the data message) can also be applied to other scenarios where data streams need to be distributed according to demand without limitation.

[0046] The message transmission method provided in the embodiment of the present application is also applicable to the service chain orchestration of the transparent VAS device in the multi-protocol label switching (MPLS) EVPN or the segment routing (SR) 6 SDN. Specifically, reference may be made to the service orchestration of the transparent VAS device in the network system provided in the embodiment of the present application.

[0047] The physical address of an interface of the forwarding device involved in the embodiment of the present application can also be replaced by the physical address of the gateway (gateway, GW) of the forwarding device. The protocol address of an interface of the forwarding device involved in the embodiment of the present application can also be replaced by the protocol address of the gateway of the forwarding device.

[0048] It should be noted that Figure 1 The network system 10 shown is only used as an example and is not used to limit the technical solution of the present application. Those skilled in the art should understand that in the specific implementation process, the network system 10 may also include other devices, and the number of forwarding devices, user terminals, transparent VAS devices and servers may also be determined according to specific needs. Figure 1 The network elements in the network can also be connected through other interfaces.

[0049] Optionally, the present application embodiment Figure 1 Each network element in the network, for example, forwarding devices 101 to 106, can be a functional module in a device. It is understandable that the above functions can be network elements in hardware devices, such as a forwarding chip in a switch, or software functions running on dedicated hardware, or virtualized functions instantiated on a platform (e.g., a cloud platform).

[0050] For example, Figure 1 Each network element in the Figure 2 The communication device 200 is used to implement the communication device 200. Figure 2 The hardware structure diagram of the communication device applicable to the embodiment of the present application is shown in FIG.

[0051] The processor 201 may be a general-purpose central processing unit (CPU), a microprocessor, an application-specific integrated circuit (ASIC), or one or more integrated circuits for controlling the execution of the program of the present application.

[0052] The communication link 202 may include a path to transmit information between the above-mentioned components, such as a bus.

[0053] The communication interface 204 uses any transceiver-like device for communicating with other devices or communication networks, such as an Ethernet interface, a radio access network interface (RAN), a wireless local area network interface (WLAN), etc.

[0054] The forwarding chip 205 can be controlled by the processor 201 to perform initialization, service table entry delivery, protocol message transmission and reception, or various interrupt processing. For example, the forwarding chip 205 can be an Ethernet switch (LAN switch, LSW) chip or a network processor (network processor, NP) chip. Optionally, the forwarding chip 205 has an external memory ( Figure 2 ), the memory can be used to store messages.

[0055] The memory 203 can be a read-only memory (ROM) or other types of static storage devices that can store static information and instructions, a random access memory (RAM) or other types of dynamic storage devices that can store information and instructions, or an electrically erasable programmable read-only memory (EEPROM), a compact disc read-only memory (CD-ROM) or other optical disc storage, optical disc storage (including compressed optical disc, laser disc, optical disc, digital versatile disc, Blu-ray disc, etc.), a disk storage medium or other magnetic storage device, or any other medium that can be used to carry or store the desired program code in the form of an instruction or data structure and can be accessed by a computer, but is not limited thereto. The memory can be independent and connected to the processor through a communication line 202. The memory can also be integrated with the processor. The memory provided in the embodiment of the present application can generally have non-volatility. Among them, the memory 203 is used to store the computer executable instructions involved in the execution of the scheme of the present application, and the execution is controlled by the processor 201. The processor 201 is used to execute the computer executable instructions stored in the memory 203, so as to implement the method provided in the embodiment of the present application.

[0056] Optionally, the computer executable instructions in the embodiments of the present application may also be referred to as application code, which is not specifically limited in the embodiments of the present application.

[0057] In one embodiment, the processor 201 may include one or more CPUs, such as Figure 2 CPU0 and CPU1 in.

[0058] In another embodiment, the communication device 200 may include multiple processors, such as Figure 2201 and processor 206 in the embodiment of the present invention. Each of these processors may be a single-CPU processor or a multi-CPU processor. The processor here may refer to one or more devices, circuits, and / or processing cores for processing data.

[0059] The communication device 200 can be a general device or a dedicated device. For example, the communication device 200 can be a switch, a router or a Figure 2 The embodiment of the present application does not limit the type of the communication device 200.

[0060] The following takes EVPN as an example to specifically describe the message transmission method provided in the embodiment of the present application. The specific process of the message transmission method in the traditional three-layer VPN can refer to the description of the message transmission method in EVPN below.

[0061] The message names between network elements or the names of parameters in the messages in the following embodiments of the present application are merely examples, and other names may be used in specific implementations, which are not specifically limited in the embodiments of the present application.

[0062] In the description of this application, words such as "first" or "second" are only used for the purpose of distinguishing descriptions, and cannot be understood as indicating or implying relative importance, nor can they be understood as indicating or implying order. The "first forwarding device" and other forwarding devices with different numbers in this application are only used for the convenience of context, and the different sequence numbers themselves do not have specific technical meanings. For example, the first forwarding device, the second forwarding device, etc. can be understood as one or any one of a series of forwarding devices. It is understandable that in specific implementations, forwarding devices with different numbers can also be the same or the same type of forwarding devices, and this application does not limit this.

[0063] The same step in the embodiments of the present application, or steps or messages with the same function in different embodiments can be referenced to each other.

[0064] In the embodiment of the present application, the first forwarding device and / or the second forwarding device may perform some or all of the steps in the embodiment of the present application, which are only examples, and the embodiment of the present application may also perform other steps or variations of various steps. In addition, the various steps may be performed in different orders presented in the embodiment of the present application, and it is possible that not all of the steps in the embodiment of the present application need to be performed.

[0065] like Figure 3 As shown, a message transmission method provided in an embodiment of the present application includes steps 301 to 303.

[0066] Step 301: A first forwarding device obtains a first data message.

[0067] The first forwarding device and the second forwarding device belong to the same layer-3 virtual private network. The embodiment of the present application takes EVPN as an example, so the first forwarding device and the second forwarding device belong to the same EVPN.

[0068] In a possible implementation, the first forwarding device is connected to an interface of the transparent VAS device through a first interface, and another interface of the transparent VAS device is connected to a second interface of the second forwarding device. Figure 1 The forwarding device 102 in the transparent VAS device is Figure 1 The transparent VAS device 107 in the second forwarding device is Figure 1 The forwarding device 102 is connected to an interface of the transparent VAS device 107 through one of its interfaces, and another interface of the transparent VAS device 107 is connected to an interface of the forwarding device 103 through another interface.

[0069] The first forwarding device and the second forwarding device are the same or different, that is, the first forwarding device and the second forwarding device can be the same device or different devices. The first interface is different from the second interface. For example, the transparent VAS device is connected to different interfaces of the same VRF of the same forwarding device, or is connected to two different forwarding devices.

[0070] Optionally, the first interface is any logical interface corresponding to any physical port of the first forwarding device. The second interface is any logical interface corresponding to any physical port of the second forwarding device.

[0071] For example, taking the first forwarding device having physical port 1 and physical port 2, physical port 1 corresponding to logical interface 1 and logical interface 2, physical port 2 corresponding to logical interface 3 and logical interface 4; the second forwarding device having physical port 3 and physical port 4, physical port 3 corresponding to logical interface 5, physical port 4 corresponding to logical interface 6 and logical interface 7 as an example, the first interface can be logical interface 1, logical interface 2, logical interface 3 or logical interface 4 of the first forwarding device, and the second interface can be logical interface 5, logical interface 6 or logical interface 7.

[0072] Optionally, the first data message includes a first source protocol address, a first destination protocol address, a first source physical address, a first destination physical address and first data. The first data is data that the user terminal wants to send to the server. The user terminal needs a value-added service.

[0073] In the three-layer virtual private network, the physical connection mode of the first forwarding device is different, and the mode in which the first forwarding device obtains the first data message is different. Exemplarily, in the three-layer virtual private network, the first forwarding device has the following two connection modes:

[0074] Mode 1: The first forwarding device is connected to the user end for communication.

[0075] For mode 1, the first forwarding device receives a first data message from a user terminal, wherein the first source protocol address is the protocol address of the user terminal, the first destination protocol address is the protocol address of the server, the first source physical address is the physical address of the user terminal, and the first destination physical address is the physical address of the GW of the first forwarding device.

[0076] If the user terminal requires value-added services, the first data sent by the user terminal needs to pass through the transparent VAS device, that is, the first data needs to be sent to the transparent VAS device through the first interface. The first forwarding device has at least one physical port, and any physical port can also correspond to at least one logical interface. Therefore, after the first forwarding device obtains the first data message, it does not necessarily forward the first data from the first interface. In addition, the two interfaces of the network to which the transparent VAS device is mounted must belong to the same network segment, otherwise the transparent VAS device cannot communicate normally. In order to enable the transparent VAS device to communicate normally and the first data sent by the user terminal passes through the transparent VAS device, the third policy routing can be configured on the first forwarding device, and the first ARP table entry can be configured on the first interface.

[0077] Among them, the third policy routing includes matching conditions and next hop information. The next hop information is used to indicate the next hop of the third policy routing. The next hop of the third policy routing is the protocol address in the first ARP table item. The matching conditions can be configured according to user needs. The matching conditions can be used to filter data packets. For example, the matching conditions can be used to filter data packets sent by the user end, that is, the matching conditions can filter out data packets whose source protocol address is the protocol address of the user end. In this case, the first forwarding device will forward the data in the data packet received from the user end to the next hop of the third policy routing. It should be understood that the above matching conditions are only exemplary, and the matching conditions in the third policy routing can also be in other forms without limitation.

[0078] The first ARP table entry includes a protocol address and a physical address. The protocol address is an idle address of the network segment where the first interface is located. For example, the protocol address is an idle IP address of the network segment where the first interface is located. The physical address is a physical address of the second interface. For example, the physical address is a MAC address of the second interface.

[0079] Mode 2: The first forwarding device is connected to the user terminal through at least one other forwarding device.

[0080] For mode 2, the first forwarding device receives the first data message from the third forwarding device, wherein the third forwarding device is a forwarding device in the at least one forwarding device that is directly connected to the first forwarding device for communication.

[0081] The forwarding device (e.g., the first forwarding device or the second forwarding device) in the Layer 3 virtual private network can forward data in IRB symmetric mode or IRB asymmetric mode. IRB symmetric mode means that both the ingress GW and the egress GW of the forwarding device perform Layer 3 forwarding. IRB asymmetric mode means that the ingress GW of the forwarding device performs both Layer 2 forwarding and Layer 3 forwarding, while the egress GW of the forwarding device performs Layer 2 forwarding.

[0082] In mode 2, if the forwarding device in the three-layer virtual private network forwards data through the IRB symmetric mode, the above-mentioned first source protocol address is the protocol address of the user end, the first destination protocol address is the protocol address of the server, the first source physical address is the physical address of the fourth forwarding device, and the first destination physical address is the physical address of the second forwarding device. If the forwarding device in the EVPN forwards data through the IRB asymmetric mode, the above-mentioned first source protocol address is the protocol address of the user end, the first destination protocol address is the protocol address of the server, the first source physical address is the physical address of the fourth forwarding device, and the first destination physical address is the physical address of the second interface. Among them, the fourth forwarding device is a forwarding device that is directly connected to the user end. Among them, the fourth forwarding device and the third forwarding device can be the same device or different devices.

[0083] If the user terminal needs value-added services, the first data sent by the user terminal needs to pass through the transparent VAS device, that is, the first data sent by the user terminal needs to reach the first forwarding device and be sent to the transparent VAS device through the first interface. There are multiple paths between the user terminal and the server, that is, the first data sent by the user terminal can reach the server through any path. Among the multiple paths, not every path has a transparent VAS device. In addition, the two interfaces of the network to which the transparent VAS device is mounted must belong to the same network segment, otherwise the transparent VAS device cannot communicate normally. In order to enable the transparent VAS device to communicate normally, and in order to enable the first data sent by the user terminal to reach the first forwarding device and be sent to the transparent VAS device through the first interface, a third policy routing can be configured on the fourth forwarding device, and a first ARP table entry can be configured on the first interface.

[0084] Among them, the introduction of the third policy routing and the first ARP table entry can refer to the above-mentioned method 1. In this way, after the fourth forwarding device receives the data packet from the user end, it can filter the data packet according to the matching condition and establish a tunnel for the data in the filtered data packet. The starting end of the tunnel is the fourth forwarding device, and the terminal of the tunnel is the first forwarding device. Subsequently, the fourth forwarding device can send the data in the filtered data packet to the first forwarding device through the tunnel. The starting end and the terminal of the tunnel are both VTEP.

[0085] Exemplarily, the matching condition can be used to filter data packets sent by the user end. In this case, when the fourth forwarding device receives the first data from the user end, it will establish a tunnel for the first data, the starting end of the tunnel is the fourth forwarding device, and the terminal of the tunnel is the first forwarding device. Subsequently, the fourth forwarding device can send the first data to the first forwarding device through the tunnel.

[0086] In mode 2, the first data message is a message encapsulated with a VXLAN header. Therefore, the first data message also includes VTEP information. For example, the first data message also includes a second source protocol address, a second destination protocol address, a second source physical address, and a second destination physical address. Among them, the second source protocol address is the protocol address of the starting end of the tunnel. The second destination protocol address is the protocol address of the terminal of the tunnel. The second source physical address is the physical address of the GW of the fourth forwarding device. The second destination physical address is the physical address of the GW of the third forwarding device.

[0087] In mode 2, after the first forwarding device obtains the first data message, it decapsulates the first data message to obtain the data message before encapsulation. The data message before encapsulation includes the first source protocol address, the first destination protocol address, the first source physical address, the first destination physical address and the first data.

[0088] Optionally, the third policy routing and the first ARP table entry are manually configured by a user; or, the third policy routing and the first ARP table entry are generated and issued by an SDN controller. For an introduction to the SDN controller, please refer to the above Figure 1 As described in.

[0089] In a possible implementation, the first ARP entry is introduced into the Border Gateway Protocol (BGP) EVPN's type-5 route and published to the network, so that the user end can obtain the route corresponding to the first ARP entry, thereby configuring the third policy route to point to the protocol address in the first ARP entry. Among them, EVPN's type-5 route, also known as IP prefix routing, is used for communication between data centers when the IP subnet in the Layer 2 domain is limited to a single data center and the Layer 2 connection does not cross data centers. Type-5 routing enables cross-data center connections by announcing the IP prefix allocated to the VXLAN limited to a single data center.

[0090] Step 302: The first forwarding device obtains a first ARP table entry corresponding to the first data message.

[0091] The forwarding mode of the forwarding device in the Layer 3 virtual private network forwarding the first data is different, and the process of the first forwarding device obtaining the first ARP table entry corresponding to the first data message is different. Specifically, the following two situations can be referred to:

[0092] Case 1: A forwarding device in a layer-3 virtual private network forwards first data through an IRB symmetric mode, and a first policy route is also configured on the first forwarding device. The first forwarding device obtains a first ARP table entry corresponding to the first data message, including: the first forwarding device obtains a first policy route corresponding to the first source protocol address; the first forwarding device obtains the first ARP table entry according to the first policy route.

[0093] For the above-mentioned method 1, the forwarding device that is directly connected to the user end in communication is the first forwarding device. The first policy route is the same as the third policy route. The first forwarding device can obtain the first policy route according to the matching condition in the first policy route. For example, if the data packet filtered out according to the matching condition is: a data packet whose source protocol address is the protocol address of the user end, then the data packet whose source protocol address is the protocol address of the user end corresponds to the first policy route. In this case, the first forwarding device obtains the first policy route. Among them, the next hop of the first policy route is the protocol address in the first ARP table entry, and subsequently, the first forwarding device can obtain the first ARP table entry according to the next hop of the first policy route.

[0094] For the above-mentioned method 2, the forwarding device directly connected to the user end is a fourth forwarding device, and the fourth forwarding device is different from the first forwarding device. The first policy routing is the same as or different from the third policy routing. The first policy routing includes a matching condition and next hop information. The next hop information is used to indicate the next hop of the first policy routing. The next hop of the first policy routing is the protocol address in the first ARP table item. The matching condition can be configured according to user needs. The matching condition can be used to filter data packets.

[0095] When the first policy route is different from the third policy route, the matching condition in the first policy route is different from the matching condition in the third policy route. For example, the matching condition can be used to filter data packets of a specific input interface (such as: the interface receiving the first data packet), that is, the matching condition can filter out data packets received from the specific input interface. In this case, the first forwarding device will forward the data in the data packet received from the specific input interface to the next hop of the first policy route. It should be understood that the above matching conditions are only exemplary, and the matching conditions in the first policy route can also be in other forms without limitation.

[0096] In mode 2, the first forwarding device can obtain the first policy route according to the matching condition in the first policy route. For example, if the data packet filtered out according to the matching condition is: a data packet whose source protocol address is the protocol address of the user end, then the data packet whose source protocol address is the protocol address of the user end corresponds to the first policy route. In this case, the first forwarding device obtains the first policy route. Among them, the next hop of the first policy route is the protocol address in the first ARP table item, and subsequently, the first forwarding device can obtain the first ARP table item according to the next hop of the first policy route. For another example, if the data packet filtered out according to the matching condition is: a data packet received from a specific inbound interface, then the data packet received from the specific inbound interface corresponds to the first policy route. In this case, the first forwarding device obtains the first policy route. Among them, the next hop of the first policy route is the protocol address in the first ARP table item, and subsequently, the first forwarding device can obtain the first ARP table item according to the next hop of the first policy route.

[0097] Case 2: The forwarding device in the layer-3 virtual private network forwards the first data in an IRB asymmetric mode.

[0098] For the above-mentioned method 1, the first forwarding device obtains the first ARP table entry corresponding to the first data message, including: the first forwarding device obtains the third policy route corresponding to the first source protocol address; the first forwarding device obtains the first ARP table entry according to the third policy route. For details, please refer to the corresponding description in the above-mentioned situation 1, which will not be described in detail.

[0099] For the above-mentioned method 2, the first forwarding device obtains the first ARP table entry corresponding to the first data message, including: the first forwarding device searches the ARP table according to the first destination physical address to obtain the first ARP table entry. The first destination physical address is the physical address of the second interface. In this way, the first forwarding device can obtain the first ARP table entry by searching the ARP table according to the first destination physical address.

[0100] Step 303: The first forwarding device sends first data to the transparent VAS device through the first interface.

[0101] Optionally, the physical address of the second interface corresponds to the first interface. The correspondence between the physical address of the second interface and the first interface is stored in a physical mapping table, or the correspondence between the physical address of the second interface and the first interface is stored in a first ARP table entry. When the correspondence between the physical address of the second interface and the first interface is stored in the first ARP table entry, the first ARP table entry also includes an outbound interface. The outbound interface is used to indicate the interface used when the first forwarding device sends a data packet to the physical address in the first ARP table entry.

[0102] Exemplarily, taking the correspondence between the physical address of the second interface and the first interface stored in the physical mapping table as an example, before step 303, the first forwarding device searches the physical mapping table according to the physical address of the second interface in the first ARP table entry to determine that the first data needs to be sent through the first interface.

[0103] Exemplarily, taking the correspondence between the physical address of the second interface and the first interface stored in the first ARP table entry as an example, before step 303, the first forwarding device determines that the first data needs to be sent through the first interface based on the outgoing interface in the first ARP table entry.

[0104] In a possible implementation, the first forwarding device sends the first data to the transparent VAS device through the first interface, including: the first forwarding device sends the second data message to the transparent VAS device through the first interface. The second data message includes a third source protocol address, a third destination protocol address, a third source physical address, a third destination physical address, and the first data. The third source protocol address is a protocol address of the user end. The third destination protocol address is a protocol address of the server.

[0105] For the above situation 1, the third source physical address is the physical address of the first interface. The third destination physical address is the physical address of the second interface. For the method 1 in the above situation 2, the third source physical address is the physical address of the first forwarding device. The third destination physical address is the physical address of the second interface. For the method 2 in the above situation 2, the third source physical address is the physical address of the fourth forwarding device. The third destination physical address is the physical address of the second interface.

[0106] After step 303, the transparent VAS device sends the first data to the second forwarding device through the second interface. After receiving the first data, the second forwarding device forwards the first data through the IRB symmetric mode or the IRB asymmetric mode.

[0107] In a possible implementation, after receiving the first data, the server returns the second data to the user. If the second data also needs to pass through the transparent VAS device, the same approach can be adopted. Figure 3 The method described above transmits data packets. There are two differences:

[0108] Difference 1: If the second forwarding device is connected to the server for communication, the fourth policy routing can be configured on the second forwarding device, and the second ARP table entry can be configured on the second interface.

[0109] Among them, the fourth policy route includes matching conditions and next hop information. The next hop information is used to indicate the next hop of the fourth policy route. The next hop of the fourth policy route is the protocol address in the second ARP table entry. The matching conditions can be configured according to user needs. The matching conditions can be used to filter data packets. For example, the matching conditions can be used to filter data packets sent by the server, that is, the matching conditions can filter out data packets whose source protocol address is the protocol address of the server. In this case, the second forwarding device will forward the data in the data packet received from the server to the next hop of the fourth policy route. It should be understood that the above matching conditions are only exemplary, and the matching conditions in the fourth policy route can also be in other forms without limitation.

[0110] The second ARP table entry includes a protocol address and a physical address. The protocol address is an idle address of the network segment where the second interface is located. For example, the protocol address is an idle IP address of the network segment where the second interface is located. The physical address is the physical address of the first interface. For example, the physical address is the MAC address of the first interface.

[0111] Difference 2: If the second forwarding device is connected to the server through at least one other forwarding device, the fourth policy routing can be configured on the fifth forwarding device and the second ARP table entry can be configured on the second interface.

[0112] The second policy route is the same as or different from the fourth policy route. The second policy route includes a matching condition and next hop information. The next hop information is used to indicate the next hop of the second policy route. The next hop of the second policy route is the protocol address in the second ARP table item. The matching condition can be configured according to user needs. The matching condition can be used to filter data packets.

[0113] When the second policy route is different from the fourth policy route, the matching condition in the second policy route is different from the matching condition in the fourth policy route. For example, the matching condition can be used to filter data packets of a specific input interface (such as: an interface for receiving the second data), that is, the matching condition can filter out data packets received from a specific input interface. In this case, the second forwarding device will forward the data in the data packet received from the specific input interface to the next hop of the second policy route. It should be understood that the above matching conditions are only exemplary, and the matching conditions in the second policy route can also be in other forms without limitation.

[0114] In difference 2, when the forwarding device in the layer-3 virtual private network forwards the second data through the IRB symmetric mode, the second forwarding device is also configured with a second policy routing.

[0115] For the introduction of the second ARP table entry, please refer to the above difference 1 and will not be described in detail here.

[0116] based on Figure 3 According to the method shown, the first forwarding device can obtain the first data packet, obtain the first ARP table entry corresponding to the first data packet according to the first data packet, and send the first data to the transparent VAS device through the first interface. In this way, by configuring the first ARP table entry including the protocol address and the physical address on the first forwarding device, the transparent VAS device processes the data packets exchanged between the user terminal and the server, and provides corresponding value-added services for the user terminal. Moreover, in the present application, for devices configured with policy routing and the first ARP table entry, the packets are transmitted according to the method provided in the embodiment of the present application. For data packets that do not need to pass through the transparent VAS device, they are still forwarded according to the method of checking the route or the MAC address, thereby realizing flexible diversion requirements. In addition, the packet transmission method provided in the embodiment of the present application does not consume additional VRF and FIB resources, and the arrangement is simple.

[0117] Below Figure 1 Taking the network system shown as an example, the detailed process of the message transmission method provided in the embodiment of the present application is introduced.

[0118] Please refer to Figure 4 , Figure 4 Another message transmission method provided in an embodiment of the present application. Figure 4 The method shown includes steps 401 to 408 .

[0119] Step 401 : The user end 108 sends a data packet 1 to the forwarding device 101 .

[0120] The content of data message 1 can be as follows: Figure 5aAs shown in 501 in the figure. The source protocol address (SrcIP) of the data message 1 is the IP address of the user terminal 108, the destination protocol address (DestIP) is the IP address of the server 109, the source physical address (SrcMAC) is the MAC address of the user terminal 108, and the destination physical address (DestMAC) is the MAC address of the GW of the forwarding device 101. The data message 1 also includes data 1.

[0121] Figure 1 When the forwarding device in the forwarding device forwards the data message, it can be forwarded in IRB symmetric mode or IRB asymmetric mode. When forwarding in IRB symmetric mode, the data message can include the following contents: Figure 5a When forwarding in IRB asymmetric mode, the data message can include the following contents: Figure 5b shown.

[0122] Figure 5a or Figure 5b The data message shown is only exemplary. In practical applications, the data message may also be in other forms, and the data message may also include Figure 5a or Figure 5b More or less than shown is not limiting.

[0123] Step 402 : The forwarding device 101 receives the data message 1 from the user terminal 108 , and sends the data message 2 to the forwarding device 105 according to the third policy routing.

[0124] The forwarding device 101 is a VTEP, and the forwarding device 101 will establish a tunnel for data 1, and the starting end of the tunnel is the forwarding device 101. The forwarding device 101 determines that the terminal of the tunnel is the forwarding device 102 according to the third policy routing.

[0125] Optionally, the forwarding device 101 modifies the source physical address and the destination physical address of the data message 1, and encapsulates the modified data message into the VXLAN frame header to obtain data message 2. Data message 2 includes an outer source protocol address, an outer destination protocol address, an outer source physical address, an outer destination physical address, a User Datagram Protocol (UDP) header, a VXLAN header, an inner source protocol address, an inner destination protocol address, an inner source physical address, an inner destination physical address, and data 1.

[0126] In a possible implementation, the data message is forwarded via the IRB symmetric mode. The content of the data message 2 may include: Figure 5a502 in FIG. The outer source protocol address is the VTEP IP address of the forwarding device 101 (i.e., the IP address of the loopback interface). The outer destination protocol address is the VTEP IP address of the forwarding device 102. The outer source physical address is the MAC address of the GW of the forwarding device 101. The outer destination physical address is the MAC address of the GW of the forwarding device 105. The inner source protocol address is the IP address of the user terminal 108. The inner destination protocol address is the protocol address of the server 109. The inner source physical address is the MAC address of the forwarding device 101. Figure 5a and Figure 5b The MAC address of the forwarding device is referred to as a virtual network edge (NVE) MAC address. The inner destination physical address is the MAC address of the forwarding device 103.

[0127] In a possible implementation, the data message is forwarded via the IRB asymmetric mode. The data message 2 may include the following content: Figure 5b As shown in 506. Among them, the outer source protocol address is the VTEP IP address of the forwarding device 101. The outer destination protocol address is the VTEP IP address of the forwarding device 102. The outer source physical address is the MAC address of the GW of the forwarding device 101. The outer destination physical address is the MAC address of the GW of the forwarding device 105. The inner source protocol address is the IP address of the user terminal 108. The inner destination protocol address is the protocol address of the server 109. The inner source physical address is the MAC address of the forwarding device 101. The inner destination physical address is the MAC address of the second interface. The second interface is the interface on the forwarding device 103 connected to the transparent VAS device 107, therefore, Figure 5b The inner destination physical address is presented as the MAC address of the forwarding device 103 .

[0128] Step 403 , forwarding device 105 receives data packet 2 from forwarding device 101 , queries FIB according to the outer source protocol address, outer destination protocol address, outer source physical address and outer destination physical address in data packet 2 , and sends data packet 2 to forwarding device 102 .

[0129] Step 404 : The forwarding device 102 receives the data packet 2 from the forwarding device 105 , and sends the data packet 3 to the transparent VAS device 107 .

[0130] In a possible implementation, the data message is forwarded in IRB symmetric mode. The forwarding device 102 sends the data message 3 to the transparent VAS device 107 according to the first policy routing.

[0131] In this case, forwarding device 102 is the terminal of the tunnel. After forwarding device 102 receives data packet 2, it removes the VXLAN encapsulation of data packet 2, modifies the source physical address and destination physical address of the data packet obtained after decapsulation, and obtains data packet 3.

[0132] The content of data message 3 can be as follows: Figure 5a As shown in 503 in . Data message 3 includes a source protocol address, a destination protocol address, a source physical address, a destination physical address and data 1. Among them, the source protocol address is the IP address of the user terminal 108. The destination protocol address is the IP address of the server 109. The source physical address is the MAC address of the first interface (since the first interface is on the forwarding device 102, it is presented as the MAC address of the GW of the forwarding device 102 in the figure). The destination physical address is the MAC address of the second interface (since the second interface is on the forwarding device 103, it is presented as the MAC address of the GW of the forwarding device 103 in the figure).

[0133] The next hop of the first policy routing is the protocol address in the first ARP table entry, and the physical address corresponding to the protocol address of the first ARP table entry is the physical address of the second interface. In this way, the forwarding device 102 obtains the first ARP table entry according to the first policy routing, and sends data packet 3 to the transparent VAS device 107 according to the first ARP table entry.

[0134] In another possible implementation, the data message is forwarded through the IRB asymmetric mode. The forwarding device 102 obtains the first ARP table entry and sends the data message 3 to the transparent VAS device 107 according to the first ARP table entry. That is, when the data message is forwarded through the IRB asymmetric mode, the forwarding device 102 performs Layer 2 forwarding.

[0135] In this case, forwarding device 102 is the terminal of the tunnel. After forwarding device 102 receives data packet 2, it removes the VXLAN encapsulation of data packet 2 to obtain data packet 3.

[0136] The content of data message 3 can be as follows: Figure 5b 507 in FIG. Data message 3 includes a source protocol address, a destination protocol address, a source physical address, a destination physical address and data 1. The source protocol address is the IP address of the user terminal 108. The destination protocol address is the IP address of the server 109. The source physical address is the MAC address of the forwarding device 101. The destination physical address is the MAC address of the second interface.

[0137] Figure 1 The forwarding device 105 and the forwarding device 106 in steps 402 to 404 are both in communication connection with the forwarding device 101 to the forwarding device 104 , so the forwarding device 105 in steps 402 to 404 can be replaced by the forwarding device 106 .

[0138] Step 405 : The transparent VAS device 107 receives the data packet 3 from the forwarding device 102 , performs value-added service processing on the data packet 3 , and then sends the data packet 3 to the forwarding device 103 .

[0139] Among them, the transparent VAS device may or may not modify part of the content of data packet 3 during the process of performing value-added service processing on data packet 3. Since this application does not focus on the processing of value-added service equipment, the data packet 3 passing through the transparent VAS device is still referred to as data packet 3.

[0140] Step 406 , the forwarding device 103 receives the data packet 3 from the transparent VAS device 107 , and sends the data packet 4 to the forwarding device 106 according to the FIB.

[0141] The forwarding device 103 is a VTEP, and the forwarding device 103 will establish a tunnel for data 1, and the starting end of the tunnel is the forwarding device 103. The forwarding device 103 determines that the terminal of the tunnel is the forwarding device 104 according to the FIB.

[0142] Optionally, the forwarding device 103 modifies the source physical address and the destination physical address of the data message 3, and encapsulates the modified data message into the VXLAN frame header to obtain the data message 4. The data message 4 includes the outer source protocol address, the outer destination protocol address, the outer source physical address, the outer destination physical address, the UDP header, the VXLAN header, the inner source protocol address, the inner destination protocol address, the inner source physical address, the inner destination physical address and the data 1.

[0143] In a possible implementation, the data message is forwarded via the IRB symmetric mode. In this case, the content of the data message 4 may be as follows: Figure 5a As shown in 504 in . Among them, the outer source protocol address is the VTEP IP address of the forwarding device 103. The outer destination protocol address is the VTEP IP address of the forwarding device 104. The outer source physical address is the MAC address of the GW of the forwarding device 103. The outer destination physical address is the MAC address of the GW of the forwarding device 106. The inner source protocol address is the IP address of the user terminal 108. The inner destination protocol address is the IP address of the server 109. The inner source physical address is the MAC address of the forwarding device 103. The inner destination physical address is the MAC address of the forwarding device 104.

[0144] In another possible implementation, the data message is forwarded via the IRB asymmetric mode. In this case, the inner destination physical address in the data message 4 is different from the inner destination physical address in the data message 4 when the data message is forwarded via the IRB symmetric mode, and is the MAC address of the server 109. Specifically, when the data message is forwarded via the IRB asymmetric mode, the content included in the data message 4 may be as follows: Figure 5b As shown in 508.

[0145] Step 407 , forwarding device 106 receives data packet 4 from forwarding device 103 , queries FIB according to the outer source protocol address, outer destination protocol address, outer source physical address and outer destination physical address in data packet 4 , and sends data packet 4 to forwarding device 104 .

[0146] Step 408 : The forwarding device 104 receives the data packet 4 from the forwarding device 106 , and sends the data packet 5 to the server 109 .

[0147] In one possible implementation, the data packet is forwarded via the IRB symmetric mode, and the forwarding device 104 is the terminal of the tunnel. After receiving the data packet 4, the forwarding device 104 removes the VXLAN encapsulation of the data packet 4, modifies the source physical address and the destination physical address of the data packet obtained after the decapsulation, and obtains the data packet 5.

[0148] The content of data message 5 can be as follows: Figure 5a As shown in 505 in FIG. 5 , data message 5 includes a source protocol address, a destination protocol address, a source physical address, a destination physical address and data 1. Among them, the source protocol address is the IP address of the user terminal 108. The destination protocol address is the IP address of the server 109. The source physical address is the MAC address of the GW of the forwarding device 104. The destination physical address is the MAC address of the server 109.

[0149] When the data message is forwarded in the IRB symmetric mode, the forwarding device 104 performs ordinary layer 3 forwarding. For example, the forwarding device 104 checks the routing table and sends the data message 5 to the server 109 according to the routing table.

[0150] In another possible implementation, the data packet is forwarded through the IRB asymmetric mode, and the forwarding device 104 is the terminal of the tunnel. After the forwarding device 104 receives the data packet 4, it removes the VXLAN encapsulation of the data packet 4 to obtain the data packet 5.

[0151] The content of data message 5 can be as follows: Figure 5b509 in FIG. 5. Data message 5 includes a source protocol address, a destination protocol address, a source physical address, a destination physical address and data 1. The source protocol address is the IP address of the user terminal 108. The destination protocol address is the IP address of the server 109. The source physical address is the MAC address of the forwarding device 103. The destination physical address is the MAC address of the server 109.

[0152] When the data message is forwarded in the IRB asymmetric mode, the forwarding device 104 performs layer 2 forwarding. For example, the forwarding device 104 checks the physical mapping table and sends the data message 5 to the server 109 according to the physical mapping table.

[0153] Figure 1 The forwarding device 105 and the forwarding device 106 in the steps 406 to 408 are both in communication connection with the forwarding devices 101 to 104 , so the forwarding device 106 in the steps 406 to 408 can be replaced by the forwarding device 105 .

[0154] Correspondingly, the server 109 receives the data packet 5 from the forwarding device 104 .

[0155] based on Figure 4 The method shown, by configuring the third policy routing on the forwarding device 101, configuring the first policy routing on the forwarding device 102, and configuring the first ARP table entry on the first interface, can make the data 1 sent by the user terminal 108 reach the server 109 after passing through the transparent VAS device 107, and provide corresponding value-added services for the user terminal 108. In addition, the message transmission method provided in the embodiment of the present application does not consume additional VRF and FIB resources, and the arrangement is simple.

[0156] Further, after receiving data 1, the server 109 may also return data 2 to the user terminal 108, and the data 2 may also pass through the transparent VAS device 107. Figure 6 The method shown, Figure 4 The method shown also includes steps 601 to 608.

[0157] Step 601 : The server 109 sends a data packet 6 to the forwarding device 104 .

[0158] The data message 6 includes a source protocol address, a destination protocol address, a source physical address, a destination physical address and data 2. The source protocol address is the IP address of the server 109. The destination protocol address is the IP address of the client 108. The source physical address is the MAC address of the server 109. The destination physical address is the MAC address of the GW of the forwarding device 104.

[0159] Step 602: The forwarding device 104 receives the data packet 6 from the server 109, and sends the data packet 7 to the forwarding device 106 according to the fourth policy routing.

[0160] The forwarding device 104 is a VTEP, and the forwarding device 104 will establish a tunnel for the data 2, and the starting end of the tunnel is the forwarding device 104. The forwarding device 104 determines that the terminal of the tunnel is the forwarding device 103 according to the fourth policy routing.

[0161] Optionally, the forwarding device 104 modifies the source physical address and the destination physical address of the data message 6, and encapsulates the modified data message into the VXLAN frame header to obtain the data message 7. The data message 7 includes the outer source protocol address, the outer destination protocol address, the outer source physical address, the outer destination physical address, the UDP header, the VXLAN header, the inner source protocol address, the inner destination protocol address, the inner source physical address, the inner destination physical address and data 2.

[0162] In a possible implementation, the data message is forwarded through the IRB symmetric mode. In this case, the outer source protocol address is the IP address of the forwarding device 104. The outer destination protocol address is the IP address of the forwarding device 103. The outer source physical address is the MAC address of the GW of the forwarding device 104. The outer destination physical address is the MAC address of the GW of the forwarding device 106. The inner source protocol address is the IP address of the server 109. The inner destination protocol address is the protocol address of the user terminal 108. The inner source physical address is the MAC address of the forwarding device 104. The inner destination physical address is the MAC address of the forwarding device 102.

[0163] In another possible implementation, the data message is forwarded through the IRB asymmetric mode. In this case, the outer source protocol address is the IP address of the forwarding device 104. The outer destination protocol address is the IP address of the forwarding device 103. The outer source physical address is the MAC address of the GW of the forwarding device 104. The outer destination physical address is the MAC address of the GW of the forwarding device 106. The inner source protocol address is the IP address of the server 109. The inner destination protocol address is the protocol address of the user terminal 108. The inner source physical address is the MAC address of the forwarding device 104. The inner destination physical address is the MAC address of the first interface.

[0164] Step 603 , forwarding device 106 receives data packet 7 from forwarding device 104 , queries FIB according to the outer source protocol address, outer destination protocol address, outer source physical address and outer destination physical address in data packet 7 , and sends data packet 7 to forwarding device 103 .

[0165] Step 604 : The forwarding device 103 receives the data packet 7 from the forwarding device 106 , and sends the data packet 8 to the transparent VAS device 107 .

[0166] In a possible implementation, the data message is forwarded in IRB symmetric mode. The forwarding device 103 sends the data message 8 to the transparent VAS device 107 according to the second policy routing.

[0167] In this case, forwarding device 103 is the terminal of the tunnel. After forwarding device 103 receives data packet 7, it removes the VXLAN encapsulation of data packet 7, modifies the source physical address and destination physical address of the data packet obtained after decapsulation, and obtains data packet 8.

[0168] The data message 8 includes a source protocol address, a destination protocol address, a source physical address, a destination physical address and data 2. The source protocol address is the IP address of the server 109. The destination protocol address is the IP address of the client 108. The source physical address is the MAC address of the second interface. The destination physical address is the MAC address of the first interface.

[0169] The next hop of the second policy routing is the protocol address in the second ARP table entry, and the physical address corresponding to the protocol address of the second ARP table entry is the physical address of the first interface. In this way, the forwarding device 103 obtains the second ARP table entry according to the second policy routing, and sends the data packet 8 to the transparent VAS device 107 according to the second ARP table entry.

[0170] In another possible implementation, the data message is forwarded through the IRB asymmetric mode. The forwarding device 103 obtains the second ARP table entry and sends the data message 8 to the transparent VAS device 107 according to the second ARP table entry. That is, when the data message is forwarded through the IRB asymmetric mode, the forwarding device 103 performs Layer 2 forwarding.

[0171] In this case, forwarding device 103 is the terminal of the tunnel. After forwarding device 103 receives data packet 7, it removes the VXLAN encapsulation of data packet 7 to obtain data packet 8.

[0172] The data message 8 includes a source protocol address, a destination protocol address, a source physical address, a destination physical address and data 1. The source protocol address is the IP address of the server 109. The destination protocol address is the IP address of the client 108. The source physical address is the MAC address of the forwarding device 104. The destination physical address is the MAC address of the first interface.

[0173] Figure 1The forwarding device 105 and the forwarding device 106 in steps 602 to 604 are both in communication connection with the forwarding devices 101 to 104 , so the forwarding device 106 in steps 602 to 604 can be replaced by the forwarding device 105 .

[0174] Step 605 : The transparent VAS device 107 receives the data packet 8 from the forwarding device 103 , and sends the data packet 8 to the forwarding device 102 .

[0175] Step 606 : The forwarding device 102 receives the data message 8 from the transparent VAS device 107 , and sends the data message 9 to the forwarding device 105 according to the FIB.

[0176] The forwarding device 102 is a VTEP, and the forwarding device 102 will establish a tunnel for the data 2, and the starting end of the tunnel is the forwarding device 102. The forwarding device 102 determines that the terminal of the tunnel is the forwarding device 101 according to the FIB.

[0177] Optionally, the forwarding device 102 modifies the source physical address and the destination physical address of the data message 8, and encapsulates the modified data message into the VXLAN frame header to obtain the data message 9. The data message 9 includes the outer source protocol address, the outer destination protocol address, the outer source physical address, the outer destination physical address, the UDP header, the VXLAN header, the inner source protocol address, the inner destination protocol address, the inner source physical address, the inner destination physical address and data 2.

[0178] In a possible implementation, the data message is forwarded through the IRB symmetric mode. In this case, the outer source protocol address is the IP address of the forwarding device 102. The outer destination protocol address is the IP address of the forwarding device 101. The outer source physical address is the MAC address of the GW of the forwarding device 102. The outer destination physical address is the MAC address of the GW of the forwarding device 105. The inner source protocol address is the IP address of the server 109. The inner destination protocol address is the protocol address of the user terminal 108. The inner source physical address is the MAC address of the forwarding device 102. The inner destination physical address is the MAC address of the forwarding device 101.

[0179] In another possible implementation, the data message is forwarded via the IRB asymmetric mode. In this case, the inner destination physical address in the data message 9 is different from the inner destination physical address in the data message 9 when the data message is forwarded via the IRB symmetric mode, and is the MAC address of the user end 108.

[0180] Step 607 , forwarding device 105 receives data packet 9 from forwarding device 102 , queries FIB according to the outer source protocol address, outer destination protocol address, outer source physical address and outer destination physical address in data packet 9 , and sends data packet 9 to forwarding device 101 .

[0181] Step 608 : The forwarding device 101 receives the data message 9 from the forwarding device 105 , and sends the data message 10 to the user end 108 .

[0182] In one possible implementation, the data packet is forwarded through the IRB symmetric mode, and the forwarding device 101 is the terminal of the tunnel. After the forwarding device 101 receives the data packet 9, it removes the VXLAN encapsulation of the data packet 9, modifies the source physical address and the destination physical address of the data packet obtained after the decapsulation, and obtains the data packet 10.

[0183] The data message 10 includes a source protocol address, a destination protocol address, a source physical address, a destination physical address and data 2. The source protocol address is the IP address of the server 109. The destination protocol address is the IP address of the user terminal 108. The source physical address is the MAC address of the GW of the forwarding device 101. The destination physical address is the MAC address of the user terminal 108.

[0184] When the data message is forwarded in the IRB symmetric mode, the forwarding device 101 performs ordinary layer 3 forwarding. For example, the forwarding device 101 checks the routing table and sends the data message 10 to the user end 108 according to the routing table.

[0185] In another possible implementation, the data packet is forwarded through the IRB asymmetric mode, and the forwarding device 101 is the terminal of the tunnel. After the forwarding device 101 receives the data packet 9, it removes the VXLAN encapsulation of the data packet 9 to obtain the data packet 10.

[0186] The data message 10 includes a source protocol address, a destination protocol address, a source physical address, a destination physical address and data 2. The source protocol address is the IP address of the server 109. The destination protocol address is the IP address of the client 108. The source physical address is the MAC address of the forwarding device 102. The destination physical address is the MAC address of the client 108.

[0187] When the data message is forwarded in the IRB asymmetric mode, the forwarding device 101 performs Layer 2 forwarding. For example, the forwarding device 101 checks the physical mapping table and sends the data message 10 to the user terminal 108 according to the physical mapping table.

[0188] Figure 1The forwarding device 105 and the forwarding device 106 in the steps 606 to 608 are both in communication connection with the forwarding devices 101 to 104 , so the forwarding device 105 in steps 606 to 608 can be replaced by the forwarding device 106 .

[0189] Correspondingly, the user end 108 receives the data message 10 from the forwarding device 101 .

[0190] based on Figure 6 In the method shown, if the server 109 returns data 2 to the user end 108 after receiving data 1, and the data 2 needs to pass through the transparent VAS device 107, the fourth policy routing can be configured on the forwarding device 104, the second policy routing can be configured on the forwarding device 102, and the second ARP table entry can be configured on the second interface, so that the data 2 sent by the server 109 passes through the transparent VAS device 107 and reaches the user end 108. In addition, the message transmission method provided in the embodiment of the present application does not consume additional VRF and FIB resources, and the arrangement is simple.

[0191] Above Figure 4 or Figure 6 The specific process of the method shown can refer to the above Figure 3 As described in the method shown.

[0192] The above mainly introduces the solution provided by the embodiment of the present application from the perspective of interaction between various devices. It is understandable that, in order to realize the above functions, the above-mentioned forwarding devices, etc., include hardware structures and / or software modules corresponding to the execution of each function. Those skilled in the art should easily realize that, in combination with the units and algorithm operations of each example described in the embodiments disclosed herein, the present application can be implemented in the form of hardware or a combination of hardware and computer software. Whether a function is executed in the form of hardware or computer software driving hardware depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to exceed the scope of the present application.

[0193] The embodiment of the present application can divide the functional modules of each forwarding device according to the above method example. For example, each functional module can be divided according to each function, or two or more functions can be integrated into one processing module. The above integrated module can be implemented in the form of hardware or in the form of software functional modules. The division of modules in the embodiment of the present application is schematic and is only a logical functional division. There may be other division methods in actual implementation.

[0194] For example, when the functional modules are divided in an integrated manner, Figure 7A schematic diagram of the structure of a communication device is shown. The communication device may be the first forwarding device or a chip or system on chip in the first forwarding device, or other combined devices, components, etc. that can implement the functions of the first forwarding device, and the communication device may be used to perform the functions of the first forwarding device involved in the above embodiments.

[0195] As a possible implementation, Figure 7 The communication device shown includes: an acquisition module 701 , a processing module 702 and a sending module 703 .

[0196] The acquisition module 701 is used to acquire a first data message; the communication device is communicatively connected to an interface of a transparent value-added service VAS device via a first interface, and another interface of the transparent VAS device is communicatively connected to a second interface of a second forwarding device; the first data message includes first data; the communication device and the second forwarding device belong to the same three-layer virtual private network.

[0197] Processing module 702 is used to obtain a first address resolution protocol ARP table entry corresponding to the first data message; the protocol address in the first ARP table entry is a free address of the network segment where the first interface is located, and the physical address in the first ARP table entry is the physical address of the second interface.

[0198] The sending module 703 is used to send the first data to the transparent VAS device through the first interface; the physical address of the second interface corresponds to the first interface.

[0199] Optionally, the first data packet includes a first source protocol address, and the processing module 702 is specifically used to obtain a first policy route corresponding to the first source protocol address, and the next hop of the first policy route is the protocol address in the first ARP table entry; the processing module 702 is also specifically used to obtain the first ARP table entry according to the first policy route.

[0200] Optionally, the first data message includes a first destination physical address, and the processing module 702 is specifically configured to search the ARP table according to the first destination physical address to obtain the first ARP table entry.

[0201] Optionally, the processing module 702 is also used to search the physical mapping table according to the physical address of the second interface in the first ARP table entry to determine that the first data needs to be sent through the first interface; or, the processing module 702 is also used to determine that the first data needs to be sent through the first interface according to the outgoing interface in the first ARP table entry.

[0202] Optionally, the communication device is the same as or different from the second forwarding device, and the first interface is different from the second interface.

[0203] Among them, all relevant contents of each operation involved in the above method embodiment can be referred to the functional description of the corresponding functional module, and will not be repeated here.

[0204] In this embodiment, the communication device is presented in the form of dividing various functional modules in an integrated manner. The "module" here may refer to a specific ASIC, circuit, processor and memory that executes one or more software or firmware programs, integrated logic circuit, and / or other devices that can provide the above functions. In a simple embodiment, those skilled in the art can imagine that the communication device can be used Figure 2 The form shown.

[0205] for example, Figure 2 The processor 201 in the communication device can call the computer executable instructions stored in the memory 203 to enable the communication device to execute the message transmission method in the above method embodiment.

[0206] For example, Figure 7 The functions / implementation processes of the acquisition module 701, the processing module 702 and the sending module 703 can be Figure 2 The processor 201 in the embodiment calls the computer executable instructions stored in the memory 203 to implement. Or, Figure 7 The functions / implementation processes of the acquisition module 701 and the processing module 702 can be Figure 2 The processor 201 in the embodiment calls the computer executable instructions stored in the memory 203 to implement, Figure 7 The function / implementation process of the sending module 703 can be achieved by Figure 2 The communication interface 204 in is implemented.

[0207] Since the communication device provided in this embodiment can execute the above-mentioned message transmission method, the technical effects that can be obtained can refer to the above-mentioned method embodiment.

[0208] Figure 8 A schematic diagram of the structure of a chip provided in an embodiment of the present application. The chip 80 includes one or more processors 801 and an interface circuit 802. Optionally, the chip 80 may also include a bus 803. Among them:

[0209] The processor 801 may be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the above method can be completed by an integrated logic circuit of hardware in the processor 801 or an instruction in the form of software. The above-mentioned processor 801 can be a general-purpose processor, a digital communicator (DSP), an application-specific integrated circuit (ASIC), a field programmable gate array (FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components. The disclosed methods and steps in the embodiments of the present application can be implemented or executed. The general-purpose processor can be a microprocessor or the processor can also be any conventional processor, etc.

[0210] The interface circuit 802 is used for sending or receiving data, instructions or information. The processor 801 can process the data, instructions or other information received by the interface circuit 802 and send the processing completion information out through the interface circuit 802.

[0211] Optionally, the chip 80 also includes a memory, which may include a read-only memory and a random access memory, and provides operation instructions and data to the processor. A portion of the memory may also include a non-volatile random access memory (NVRAM).

[0212] Optionally, the memory stores executable software modules or data structures, and the processor 801 can perform corresponding operations by calling operation instructions stored in the memory (the operation instructions can be stored in the operating system).

[0213] Optionally, the chip 80 may be used in a communication device according to an embodiment of the present application. Optionally, the interface circuit 802 may be used to output the execution result of the processor 801. The message transmission method provided by one or more embodiments of the present application may refer to the aforementioned embodiments, which will not be described in detail here.

[0214] It should be noted that the functions corresponding to the processor 801 and the interface circuit 802 can be implemented through hardware design, software design, or a combination of hardware and software, which is not limited here.

[0215] In the above embodiments, it can be implemented in whole or in part by software, hardware, firmware or any combination thereof. When implemented using a software program, it can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When loading and executing computer program instructions on a computer, the process or function according to the embodiment of the present application is generated in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable devices. Computer instructions can be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium. For example, computer instructions can be transmitted from a website site, computer, server or data center by wired (e.g., coaxial cable, optical fiber, digital subscriber line (digital subscriber line, DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) mode to another website site, computer, server or data center. The computer-readable storage medium can be any available medium that a computer can access or a data storage device such as a server, data center, etc. that contains one or more servers that can be integrated with a medium. The available medium may be a magnetic medium (eg, a floppy disk, a hard disk, a magnetic tape), an optical medium (eg, a DVD), or a semiconductor medium (eg, a solid state disk (SSD)).

[0216] Although the present application is described herein in conjunction with various embodiments, in the process of implementing the claimed application, those skilled in the art may understand and implement other variations of the disclosed embodiments by viewing the drawings, the disclosure, and the appended claims. In the claims, the word "comprising" does not exclude other components or operations, and "one" or "an" does not exclude multiple situations. A single processor or other unit may implement several functions listed in a claim. Certain measures are recorded in different dependent claims, but this does not mean that these measures cannot be combined to produce good results.

[0217] Although the present application has been described in conjunction with specific features and embodiments thereof, it is obvious that various modifications and combinations may be made thereto without departing from the scope of the present application. Accordingly, this specification and the drawings are merely exemplary illustrations of the present application as defined by the appended claims, and are deemed to have covered any and all modifications, variations, combinations or equivalents within the scope of the present application. Obviously, those skilled in the art may make various modifications and variations to the present application without departing from the spirit and scope of the present application. Thus, if these modifications and variations of the present application fall within the scope of the claims of the present application and their equivalents, the present application is also intended to include these modifications and variations.

Claims

1. A network system, characterized in that: The system includes a first forwarding device, a second forwarding device and a transparent value-added service VAS device, wherein the first forwarding device and the second forwarding device belong to the same layer-3 virtual private network; The first forwarding device is communicatively connected to the transparent VAS device via a first interface; The second forwarding device is communicatively connected to the transparent VAS device via a second interface; A first address resolution protocol ARP table entry is stored on the first forwarding device, the protocol address in the first ARP table entry is an idle address of the network segment where the first interface is located, and the physical address in the first ARP table entry is the physical address of the second interface.

2. The network system according to claim 1, characterized in that: The first forwarding device also stores a first policy route, and the next hop of the first policy route is the protocol address in the first ARP table entry.

3. The network system according to claim 1 or 2, characterized in that: A second ARP table entry is stored on the second forwarding device, the protocol address in the second ARP table entry is an idle address of the network segment where the second interface is located, and the physical address in the second ARP table entry is the physical address of the first interface.

4. The network system according to claim 3, characterized in that: The second forwarding device also stores a second policy route, and the next hop of the second policy route is the protocol address in the second ARP table entry.

5. The network system according to any one of claims 1, 2 or 4, characterized in that: The network system further includes a controller, which is configured to generate the first ARP table entry and send the first ARP table entry to the first forwarding device.

6. A message transmission method, characterized in that: The method comprises: The first forwarding device obtains a first data message; the first forwarding device is connected to an interface of a transparent value-added service VAS device through a first interface, and another interface of the transparent VAS device is connected to a second interface of a second forwarding device; the first data message includes first data; the first forwarding device and the second forwarding device belong to the same Layer 3 virtual private network; The first forwarding device obtains a first address resolution protocol ARP table entry corresponding to the first data message; the protocol address in the first ARP table entry is an idle address of the network segment where the first interface is located, and the physical address in the first ARP table entry is a physical address of the second interface; The first forwarding device sends the first data to the transparent VAS device through the first interface; the physical address of the second interface corresponds to the first interface.

7. The method according to claim 6, characterized in that The first data message includes a first source protocol address, and the first forwarding device obtains a first address resolution protocol ARP table entry corresponding to the first data message, including: The first forwarding device obtains a first policy route corresponding to the first source protocol address, where the next hop of the first policy route is the protocol address in the first ARP table entry; The first forwarding device obtains the first ARP table entry according to the first policy routing.

8. The method according to claim 6, characterized in that The first data message includes a first destination physical address, and the first forwarding device obtains a first address resolution protocol ARP table entry corresponding to the first data message, including: The first forwarding device searches the ARP table according to the first destination physical address to obtain the first ARP table entry.

9. The method according to any one of claims 6 to 8, characterized in that: Before the first forwarding device sends the first data to the transparent VAS device through the first interface, the method further includes: The first forwarding device searches a physical mapping table according to the physical address of the second interface in the first ARP table entry, and determines that the first data needs to be sent through the first interface; or The first forwarding device determines, according to the outgoing interface in the first ARP table entry, that the first data needs to be sent through the first interface.

10. The method according to any one of claims 6 to 8, characterized in that: The first forwarding device is the same as or different from the second forwarding device, and the first interface is different from the second interface.

11. A communication device, characterized in that: The communication device comprises: an acquisition module, a processing module and a sending module; The acquisition module is used to acquire a first data message; the communication device is connected to an interface of a transparent value-added service VAS device through a first interface, and another interface of the transparent VAS device is connected to a second interface of a second forwarding device; the first data message includes first data; the communication device and the second forwarding device belong to the same layer-3 virtual private network; The processing module is used to obtain a first address resolution protocol ARP table entry corresponding to the first data message; the protocol address in the first ARP table entry is an idle address of the network segment where the first interface is located, and the physical address in the first ARP table entry is the physical address of the second interface; The sending module is used to send the first data to the transparent VAS device through the first interface; the physical address of the second interface corresponds to the first interface.

12. The communication device according to claim 11, characterized in that: The first data message includes a first source protocol address, and the processing module is used to: Obtain a first policy route corresponding to the first source protocol address, where the next hop of the first policy route is the protocol address in the first ARP table entry; The first ARP table entry is obtained according to the first policy routing.

13. The communication device according to claim 11, characterized in that: The first data message includes a first destination physical address, The processing module is used to search the ARP table according to the first destination physical address to obtain the first ARP table entry.

14. The communication device according to any one of claims 11 to 13, characterized in that: The processing module is further used for: Searching a physical mapping table according to the physical address of the second interface in the first ARP table entry, and determining that the first data needs to be sent through the first interface; or Determine, according to the outgoing interface in the first ARP table entry, that the first data needs to be sent through the first interface.

15. The communication device according to any one of claims 11 to 13, characterized in that: The communication device is the same as or different from the second forwarding device, and the first interface is different from the second interface.

16. A communication device, characterized in that: include: A processor, wherein the processor is coupled to a memory, wherein the memory is used to store programs or instructions, and when the programs or instructions are executed by the processor, the device executes the method according to any one of claims 6 to 10.

Images