Message processing method, device and computer readable storage medium

Abstract

The present invention discloses a message processing method, device and computer-readable storage medium, wherein the method comprises: a message sending network element obtains association rules; the message sending network element obtains the message to be sent and its source IP address; the message sending network element determines the destination processor corresponding to the address segment where the source IP address is located according to the association rules, and sends the message to be sent to the destination processor; multiple processors obtain association rules, and the destination processor obtains the message to be sent and its source IP address; the destination processor determines the address segment where the source IP address is located according to the association rules, and sends the message to be sent and the address segment where the source IP address is located to the router via the Border Gateway Protocol BGP. Based on the embodiments of the present invention, address aggregation is performed through the message sending network element and the processor, so that the downlink message can be returned to the same uplink device without NAT conversion. At the same time, since NAT conversion is avoided, network performance is improved.

Description

Technical Field

[0001] The present invention relates to the field of network technology, and in particular to a message processing method, device and computer-readable storage medium. Background Art

[0002] With the exhaustion of IPv4 addresses, IPv6 addresses have been put into use in the current public network, and supporting the forwarding of IPv6 messages has become a basic requirement for network devices. In related technologies, IPv6 messages are converted through IPv6 to IPv6 NAT (Network Address Translation) to perform address aggregation so that downstream messages can return to the same upstream device, but operators do not want to perform NAT conversion on IPv6 addresses because such conversion will lead to reduced performance, breaking the "interconnection" characteristics of the Internet itself, and making some IP addresses no longer bidirectionally reachable. However, without NAT conversion, the IPv6 message address sent upstream from a device will be discrete, so its downstream message cannot return to the same upstream device. Therefore, how to achieve the return of downstream messages to the same upstream device without NAT conversion has become an urgent problem to be solved. Summary of the invention

[0003] The following is a summary of the subject matter described in detail herein. This summary is not intended to limit the scope of the claims.

[0004] In the first aspect, the embodiments of the present invention provide a message processing method, device and computer-readable storage medium, which perform address aggregation through a message sending network element and a processor, so that the downlink message can be returned to the same uplink device without NAT conversion. At the same time, since NAT conversion is avoided, network performance is improved.

[0005] In a second aspect, an embodiment of the present invention provides a message processing method, which is applied to a message sending network element, and the method includes:

[0006] Acquire association rules, where the association rules are used to associate multiple address segments obtained by dividing the IPv6 address pool with multiple processors;

[0007] Get the message to be sent and its source IP address;

[0008] The destination processor corresponding to the address segment where the source IP address is located is determined according to the association rule, and the message to be sent is sent to the destination processor.

[0009] In a third aspect, an embodiment of the present invention provides a message processing method, which is applied to a processor, and the method includes:

[0010] Acquire an association rule, wherein the association rule is used to associate a plurality of address segments obtained by dividing the IPv6 address pool with a processor;

[0011] Get the message to be sent and its source IP address;

[0012] The address segment where the source IP address is located is determined according to the association rule, and the message to be sent and the address segment where the source IP address is located are sent to a router via the Border Gateway Protocol BGP.

[0013] In a fourth aspect, an embodiment of the present invention provides a message processing method, which is applied to a message processing device, wherein the message processing device includes a message sending network element and multiple processors, and the method includes:

[0014] The message sending network element obtains an association rule, where the association rule is used to associate a plurality of address segments obtained by dividing the IPv6 address pool with a plurality of the processors;

[0015] The message sending network element obtains the message to be sent and its source IP address;

[0016] The message sending network element determines the destination processor corresponding to the address segment where the source IP address is located according to the association rule, and sends the message to be sent to the destination processor.

[0017] The plurality of processors obtain association rules synchronized from the message sending network element;

[0018] The destination processor obtains the message to be sent and its source IP address from the message sending network element;

[0019] The destination processor determines the address segment where the source IP address is located according to the association rule, and sends the message to be sent and the address segment where the source IP address is located to the router through the Border Gateway Protocol BGP.

[0020] In a fifth aspect, an embodiment of the present invention provides a message processing device, including a message sending network element and a plurality of processors,

[0021] The message sending network element obtains an association rule, where the association rule is used to associate a plurality of address segments obtained by dividing the IPv6 address pool with a plurality of the processors;

[0022] The message sending network element obtains the message to be sent and its source IP address;

[0023] The message sending network element determines the destination processor corresponding to the address segment where the source IP address is located according to the association rule, and sends the message to be sent to the destination processor.

[0024] The plurality of processors obtain association rules synchronized from the message sending network element;

[0025] The destination processor obtains the message to be sent and its source IP address from the message sending network element;

[0026] The destination processor determines the address segment where the source IP address is located according to the association rule, and sends the message to be sent and the address segment where the source IP address is located to the router through the Border Gateway Protocol BGP.

[0027] In the sixth aspect, an embodiment of the present invention provides a message processing device, comprising: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the computer program, the message processing method as described in the second aspect above or the message processing method as described in the third aspect above is implemented.

[0028] In a seventh aspect, an embodiment of the present invention provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer-executable program, and the computer-executable program is used to enable a computer to execute the message processing method as described above.

[0029] The embodiment of the present invention includes: the message sending network element first obtains the association rule, and the association rule is used to associate multiple address segments obtained by dividing the IPv6 address pool with multiple processors; then, the message sending network element obtains the message to be sent and its source IP address, and determines the destination processor corresponding to the address segment where the source IP address is located according to the association rule, and sends the message to be sent to the destination processor. In addition, multiple processors also obtain the association rule, and the destination processor obtains the message to be sent and its source IP address, and the destination processor determines the address segment where the source IP address is located according to the association rule, and sends the message to be sent and the address segment where the source IP address is located to the router through the border gateway protocol BGP. Based on this, when receiving the downlink message, the router will return the downlink message to the same uplink processor according to the border gateway protocol BGP. Therefore, the solution provided by this embodiment performs address aggregation through the message sending network element and the processor, so that the downlink message can be returned to the same uplink device without NAT conversion. At the same time, since NAT conversion is avoided, network performance is improved.

[0030] Other features and advantages of the present invention will be described in the following description, and partly become apparent from the description, or understood by practicing the present invention. The purpose and other advantages of the present invention can be realized and obtained by the structures particularly pointed out in the description, claims and drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0031] The accompanying drawings are used to provide a further understanding of the technical solution of the present invention and constitute a part of the specification. Together with the embodiments of the present invention, they are used to explain the technical solution of the present invention and do not constitute a limitation on the technical solution of the present invention.

[0032] Figure 1 is a flow chart of a message processing method provided by an embodiment of the present invention;

[0033] Figure 2 is a flow chart of a message processing method provided by another embodiment of the present invention;

[0034] Figure 3 is a flow chart of a message processing method provided by another embodiment of the present invention;

[0035] Figure 4 It is a structural schematic diagram of a message processing device provided by an embodiment of the present invention;

[0036] Figure 5 It is a schematic diagram of the structure of a message processing device provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0037] In order to make the purpose, technical solution and advantages of the present invention more clearly understood, the present invention is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not used to limit the present invention.

[0038] It should be understood that in the description of the embodiments of the present invention, the meaning of multiple (or multiple) is more than two, greater than, less than, and exceeding are understood to exclude the number itself, and above, below, and within are understood to include the number itself. If there is a description of "first", "second", etc., it is only used for the purpose of distinguishing technical features, and cannot be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features or implicitly indicating the order of the indicated technical features.

[0039] With the exhaustion of IPv4 addresses, IPv6 addresses have been put into use in the current public network, and supporting the forwarding of IPv6 messages has become a basic requirement for network equipment. In related technologies, IPv6 messages are aggregated by converting addresses through IPv6 to IPv6 NAT, so that downlink messages can return to the same upstream device, but operators do not want to perform NAT conversion on IPv6 addresses because such conversion will lead to reduced performance, breaking the "interconnection" characteristics of the Internet itself, and making some IP addresses no longer bidirectionally reachable. However, without NAT conversion, the IPv6 message address sent upstream from a device will be discrete, so its downlink message cannot return to the same upstream device. Therefore, how to achieve the return of downlink messages to the same upstream device without NAT conversion has become an urgent problem to be solved.

[0040] The embodiment of the present invention provides a message processing method, device and computer-readable storage medium. The message sending network element first obtains association rules, and the association rules are used to associate multiple address segments obtained by dividing the IPv6 address pool with multiple processors; then, the message sending network element obtains the message to be sent and its source IP address, and determines the destination processor corresponding to the address segment where the source IP address is located according to the association rules, and sends the message to be sent to the destination processor. In addition, multiple processors also obtain association rules, and the destination processor obtains the message to be sent and its source IP address. The destination processor determines the address segment where the source IP address is located according to the association rules, and sends the message to be sent and the address segment where the source IP address is located to a router through the border gateway protocol BGP. Based on this, when receiving a downlink message, the router will return the downlink message to the same uplink processor according to the border gateway protocol BGP. Therefore, the solution provided by this embodiment performs address aggregation through the message sending network element and the processor, so that the downlink message can be returned to the same uplink device without NAT conversion. At the same time, since NAT conversion is avoided, network performance is improved.

[0041] like Figure 1 As shown, Figure 1 1 is a flow chart of a message processing method provided by an embodiment of the present invention. The message processing method is applied to a message sending network element, and includes but is not limited to the following steps:

[0042] Step 101, obtaining association rules, where the association rules are used to associate multiple address segments obtained by dividing an IPv6 address pool with multiple processors.

[0043] Step 102, obtaining the message to be sent and its source IP address.

[0044] Step 103, determine the destination processor corresponding to the address segment where the source IP address is located according to the association rule, and send the message to be sent to the destination processor.

[0045] In one embodiment, the message sending network element obtains an association rule, wherein the association rule is used to associate multiple address segments obtained by dividing the IPv6 address pool with multiple processors. Then, the message sending network element obtains the message to be sent and its source IP address, and then determines the destination processor corresponding to the address segment where the source IP address is located according to the association rule, and sends the message to be sent to the destination processor. Since the message sending network element obtains the association rule in advance, the message sending network element can determine the destination processor corresponding to the address segment where the source IP address is located according to the association rule, thereby sending the message to be sent to the destination processor. In this embodiment, the multiple address segments obtained by dividing the IPv6 address pool are associated with multiple processors using the association rule, so that the IPv6 message addresses in the same address segment can be aggregated to the same processor to avoid the IPv6 message addresses going uplink being discrete. Based on this, address aggregation is performed through the aggregation of the message sending network element, so that the downlink message can be returned to the same uplink device without NAT conversion. At the same time, since NAT conversion is avoided, network performance is improved.

[0046] In one embodiment, step 101 may include but is not limited to the following sub-steps:

[0047] Get the association rule, which is used to associate multiple address segments obtained by balancing the IPv6 address pool with multiple processors, where the number of IP addresses in each pool segment is 2 n *1024, N is a natural number.

[0048] In the association rule, the user terminal IPv6 address pool is evenly divided so that the number of addresses in each pool segment is 2. n *1024, where N is a natural number. That is, the number of IP addresses in each address segment can be, but is not limited to, 1024, 2048, 4096, and 8192. For example, Table A1 below shows how to divide the address pool 1:2:3:0 / 48 into an address segment with 8192 addresses.

[0049]

[0050]

[0051] In one embodiment, step 101 may include but is not limited to the following sub-steps:

[0052] Obtain association rules, which are used to associate multiple address segments obtained by dividing the IPv6 address pool with multiple processors one by one in a loop. In this embodiment, multiple address segments are evenly distributed to each processor and associated one by one, so that IPv6 message addresses in the same address segment can be aggregated to the same processor to avoid the IPv6 message addresses going uplink being discrete.

[0053] For example, as shown in Table B1 below, the next hop network element has three processors, namely processor 1, processor 2 and processor 3. Among them, NextHop number is the processor number, NextHopTunnel is the tunnel address of the processor, and NextHopIPv6 is the IPv6 interface address of the processor, which are used to send and receive IPv6 packets respectively.

[0054] NextHop Number NextHopTunnel NextHopIPv6 1 1.1.1.1 2001:0:1:1 2 1.1.2.2 2001:0:2:2 3 1.1.3.3 2001:0:3:3

[0055] The eight address segments divided in Table A1 are associated with the three processors in Table B1 in turn. For example, in the following table, processor 1 stores three address segments with segment numbers 1, 4, and 7, processor 2 stores three address segments with segment numbers 2, 5, and 8, and processor 3 stores two address segments with segment numbers 3 and 6. The advantage of this storage is that multiple address segments can be evenly distributed to each processor.

[0056] NextHop Number Address segment column 1 Address segment column 2 Address segment column 3 1 1 4 7 2 2 5 8 3 3 6

[0057] In one embodiment, step 103 may include but is not limited to the following sub-steps:

[0058] The association rules are synchronized to multiple processors, and the destination processor corresponding to the address segment where the source IP address is located is determined according to the association rules, and the message to be sent is sent to the destination processor.

[0059] In this embodiment, the processor itself may have a preset association rule. Therefore, in order for the processor to synchronously update the association rule, it is necessary to synchronize the association rules that correspond one by one between multiple address segments and multiple processor addresses to the processor of the next-hop network element. Then, the message sending network element determines the destination processor corresponding to the address segment where the source IP address is located according to the association rule, and sends the message to be sent to the destination processor. Based on this, the message sending network element sends the message to the next-hop network element according to the pool segment to achieve load sharing. It should be pointed out that after synchronizing the association rules to multiple processors, when the load sharing opening instruction is obtained, the processor updates the association rules to forward the message, otherwise the processor forwards the message according to the original association rules.

[0060] like Figure 2 As shown, Figure 2 1 is a flow chart of a message processing method provided by an embodiment of the present invention. The message processing method is applied to a processor, and includes but is not limited to the following steps:

[0061] Step 201, obtaining association rules, where the association rules are used to associate multiple address segments obtained by dividing the IPv6 address pool with the processor.

[0062] Step 202, obtaining the message to be sent and its source IP address.

[0063] Step 203: determine the address segment where the source IP address is located according to the association rule, and send the message to be sent and the address segment where the source IP address is located to the router through the Border Gateway Protocol BGP.

[0064] In one embodiment, the processor obtains the association rules synchronized from the message sending network element, wherein the association rules are used to associate multiple address segments obtained by dividing the IPv6 address pool with multiple processors, and then the processor obtains the message to be sent and its source IP address from the message sending network element, and then determines the address segment where the source IP address is located according to the association rules, and sends the message to be sent and the address segment where the source IP address is located to the router through the Border Gateway Protocol BGP. Therefore, when receiving a downlink message, the router will return the downlink message to the same uplink processor according to the Border Gateway Protocol BGP. In this embodiment, since the IPv6 message addresses in the same address segment can be aggregated to the same processor, the IPv6 message addresses going out upstream are avoided to be discrete. Based on this, address aggregation is performed through the aggregation of processors, so that the downlink message can be returned to the same uplink device without NAT conversion. At the same time, since NAT conversion is avoided, network performance is improved.

[0065] Among them, the Border Gateway Protocol (BGP) is a routing protocol for an autonomous system (AS) running on TCP, which can realize communication between autonomous systems and disseminate network reachability information. BGP is an external gateway protocol that allows one AS to communicate with another AS. BGP allows an AS to notify other ASs of the reachability information of its internal network, or the routing information of other networks reachable through the AS. At the same time, the AS can also learn this information from another AS. BGP provides the information of the next hop NextHop node for each destination network. When BGP announces the reachability information of the destination network, in addition to processing the next hop information of the specified destination network, the announcement also includes the path vector, that is, the list of ASs that need to be passed through when going to the destination network, so that the recipient can understand the path information to the destination network.

[0066] In one embodiment, the processor is located in a virtual firewall.

[0067] In this embodiment, taking the next-hop network element as a virtual firewall as an example, the virtual firewall has multiple processors. When forwarding a message, the message to be sent is sent to each processor of the firewall according to the association rule. A tunnel or policy routing method can be used. The virtual firewall can determine the address segment where the source IP address is located according to the association rule, and send the message to be sent and the address segment where the source IP address is located to the router through the Border Gateway Protocol BGP, so that the downlink message is returned to the virtual firewall according to the Border Gateway Protocol BGP, and the virtual firewall can perform security checks on the downlink message.

[0068] like Figure 3 As shown, Figure 3 The flowchart of a message processing method provided by an embodiment of the present invention is shown in FIG. The message processing method is applied to a message processing device, wherein the message processing device includes a message sending network element and multiple processors. The method includes but is not limited to the following steps:

[0069] Step 301: The message sending network element obtains an association rule, where the association rule is used to associate multiple address segments obtained by dividing an IPv6 address pool with multiple processors;

[0070] Step 302, the message sending network element obtains the message to be sent and its source IP address;

[0071] Step 303: The message sending network element determines the destination processor corresponding to the address segment where the source IP address is located according to the association rule, and sends the message to be sent to the destination processor.

[0072] Step 304, multiple processors obtain association rules synchronized from the message sending network element;

[0073] Step 305, the destination processor obtains the message to be sent and its source IP address from the message sending network element;

[0074] Step 306: The destination processor determines the address segment where the source IP address is located according to the association rule, and sends the message to be sent and the address segment where the source IP address is located to the router via the Border Gateway Protocol BGP.

[0075] In one embodiment, the message sending network element obtains an association rule, wherein the association rule is used to associate multiple address segments obtained by dividing the IPv6 address pool with multiple processors, and then the message sending network element obtains the message to be sent and its source IP address, and then determines the destination processor corresponding to the address segment where the source IP address is located according to the association rule, and sends the message to be sent to the destination processor. Multiple processors obtain the association rule synchronized by the message sending network element, and then the destination processor obtains the message to be sent and its source IP address from the message sending network element, and then determines the address segment where the source IP address is located according to the association rule, and sends the message to be sent and the address segment where the source IP address is located to the router through the border gateway protocol BGP. Therefore, when receiving a downlink message, the router will return the downlink message to the same uplink processor according to the border gateway protocol BGP. In this embodiment, the multiple address segments obtained by dividing the IPv6 address pool are associated with multiple processors using the association rule, so that the IPv6 message addresses in the same address segment can be aggregated to the same processor, so as to avoid the uplink IPv6 message addresses being discrete. Based on this, the address aggregation is performed through the message sending network element and the processor, so that the downlink message can be returned to the same uplink device without NAT conversion. At the same time, since NAT conversion is avoided, the network performance is improved.

[0076] like Figure 4 As shown, Figure 4 The schematic diagram of a message processing device provided by an embodiment of the present invention includes a message sending network element and multiple processors.

[0077] The message sending network element obtains an association rule, and the association rule is used to associate multiple address segments obtained by dividing the IPv6 address pool with multiple processors;

[0078] The message sending network element obtains the message to be sent and its source IP address;

[0079] The message sending network element determines the destination processor corresponding to the address segment where the source IP address is located according to the association rule, and sends the message to be sent to the destination processor.

[0080] Multiple processors obtain association rules synchronized from the message sending network element;

[0081] The destination processor obtains the message to be sent and its source IP address from the message sending network element;

[0082] The destination processor determines the address segment where the source IP address is located according to the association rule, and sends the message to be sent and the address segment where the source IP address is located to the router through the Border Gateway Protocol BGP.

[0083] In one embodiment, the message sending network element obtains an association rule, wherein the association rule is used to associate multiple address segments obtained by dividing the IPv6 address pool with multiple processors, and then the message sending network element obtains the message to be sent and its source IP address, and then determines the destination processor corresponding to the address segment where the source IP address is located according to the association rule, and sends the message to be sent to the destination processor. Multiple processors obtain the association rule synchronized by the message sending network element, and then the destination processor obtains the message to be sent and its source IP address from the message sending network element, and then determines the address segment where the source IP address is located according to the association rule, and sends the message to be sent and the address segment where the source IP address is located to the router through the border gateway protocol BGP. Therefore, when receiving a downlink message, the router will return the downlink message to the same uplink processor according to the border gateway protocol BGP. In this embodiment, the multiple address segments obtained by dividing the IPv6 address pool are associated with multiple processors using the association rule, so that the IPv6 message addresses in the same address segment can be aggregated to the same processor, so as to avoid the uplink IPv6 message addresses being discrete. Based on this, the address aggregation is performed through the message sending network element and the processor, so that the downlink message can be returned to the same uplink device without NAT conversion. At the same time, since NAT conversion is avoided, the network performance is improved.

[0084] In one embodiment, if Figure 4 As shown, for example, the message sending network element first obtains the association rule, and when sending the message, obtains three message addresses to be sent, which are 2001:0DB8::1428:57ab, 2001:0DB8::1428:57ac, and 2001:0DB8::1428:57ad, and then determines that the address segment where the above three message addresses are located is 2001:0DB8::1428:0 / 48 according to the association rule, which corresponds to the address segment. If the associated destination processor is processor 1 of the virtual firewall vFW, the three to-be-sent messages 2001:0DB8::1428:57ab, 2001:0DB8::1428:57ac, and 2001:0DB8::1428:57ad are sent to processor 1, which then sends the messages out and sends the address segment 2001:0DB8::1428:0 / 48 to the router via the Border Gateway Protocol (BGP). In this way, when receiving the downlink message, the router will return the downlink message to the same uplink processor via the Border Gateway Protocol (BGP).

[0085] like Figure 5 As shown, an embodiment of the present invention further provides a message processing device.

[0086] Specifically, the message processing device includes: one or more processors and a memory, Figure 5A processor and a memory are taken as an example. The processor and the memory can be connected via a bus or other means. Figure 5 The example of connecting through bus is taken in the following.

[0087] The memory, as a non-transitory computer-readable storage medium, can be used to store non-transitory software programs and non-transitory computer executable programs, such as the message processing method in the above-mentioned embodiment of the present invention. The processor implements the message processing method in the above-mentioned embodiment of the present invention by running the non-transitory software programs and programs stored in the memory.

[0088] The memory may include a program storage area and a data storage area, wherein the program storage area may store an operating system, an application required for at least one function; the data storage area may store data required to execute the message processing method in the above-mentioned embodiment of the present invention, etc. In addition, the memory may include a high-speed random access memory, and may also include a non-transient memory, such as at least one disk storage device, a flash memory device, or other non-transient solid-state storage device. In some embodiments, the memory may optionally include a memory remotely arranged relative to the processor, and these remote memories may be connected to the terminal via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0089] The non-transient software program and program required to implement the message processing method in the above embodiment of the present invention are stored in the memory, and when executed by one or more processors, the message processing method in the above embodiment of the present invention is executed, for example, the above described Figure 1 Steps 101 to 103 of the method, Figure 2 In the method steps 201 to 203, the message sending network element first obtains the association rule, which is used to associate multiple address segments obtained by dividing the IPv6 address pool with multiple processors; then, the message sending network element obtains the message to be sent and its source IP address, and determines the destination processor corresponding to the address segment where the source IP address is located according to the association rule, and sends the message to be sent to the destination processor. In addition, multiple processors obtain the association rule synchronized by the message sending network element, and then the processor obtains the message to be sent and its source IP address from the message sending network element, and then determines the address segment where the source IP address is located according to the association rule, and sends the message to be sent and the address segment where the source IP address is located to the router through the border gateway protocol BGP. Based on this, when receiving the downlink message, the router will return the downlink message to the same uplink processor according to the border gateway protocol BGP. Therefore, by performing address aggregation through the message sending network element and the processor, the downlink message can be returned to the same uplink device without NAT conversion. At the same time, since NAT conversion is avoided, network performance is improved.

[0090] In addition, an embodiment of the present invention further provides a computer-readable storage medium, the computer-readable storage medium storing a computer-executable program, the computer-executable program being executed by one or more control processors, for example, Figure 5 The execution of one of the processors in the embodiment of the present invention may cause the one or more processors to execute the message processing method in the embodiment of the present invention, for example, to execute the above-described Figure 1 Steps 101 to 103 of the method, Figure 2 In the method steps 201 to 203, the message sending network element first obtains the association rule, which is used to associate multiple address segments obtained by dividing the IPv6 address pool with multiple processors; then, the message sending network element obtains the message to be sent and its source IP address, and determines the destination processor corresponding to the address segment where the source IP address is located according to the association rule, and sends the message to be sent to the destination processor. In addition, multiple processors obtain the association rule synchronized by the message sending network element, and then the processor obtains the message to be sent and its source IP address from the message sending network element, and then determines the address segment where the source IP address is located according to the association rule, and sends the message to be sent and the address segment where the source IP address is located to the router through the border gateway protocol BGP. Based on this, when receiving the downlink message, the router will return the downlink message to the same uplink processor according to the border gateway protocol BGP. Therefore, by performing address aggregation through the message sending network element and the processor, the downlink message can be returned to the same uplink device without NAT conversion. At the same time, since NAT conversion is avoided, network performance is improved.

[0091] It will be appreciated by those skilled in the art that all or some of the steps and systems in the disclosed method above may be implemented as software, firmware, hardware and appropriate combinations thereof. Some physical components or all physical components may be implemented as software executed by a processor, such as a central processing unit, a digital signal processor or a microprocessor, or may be implemented as hardware, or may be implemented as an integrated circuit, such as an application specific integrated circuit. Such software may be distributed on a computer-readable medium, which may include a computer storage medium (or a non-transitory medium) and a communication medium (or a temporary medium). As known to those skilled in the art, the term computer storage medium includes volatile and non-volatile, removable and non-removable media implemented in any method or technology for storing information (such as a computer-readable program, a data structure, a program module or other data). Computer storage media include, but are not limited to, RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, digital versatile disk (DVD) or other optical disk storage, magnetic cassette, magnetic tape, disk storage or other magnetic storage device, or any other medium that may be used to store desired information and may be accessed by a computer. Furthermore, it is well known to those skilled in the art that communication media generally contain computer-readable programs, data structures, program modules, or other data in a modulated data signal such as a carrier wave or other transport mechanism, and may include any information delivery media.

[0092] The above is a specific description of the preferred implementation of the present invention, but the present invention is not limited to the above-mentioned implementation mode. Technical personnel familiar with the field can also make various equivalent deformations or substitutions under the shared conditions without violating the spirit of the present invention. These equivalent deformations or substitutions are all included in the scope defined by the claims of the present invention.

Claims

1. A message processing method, applied to a message sending network element, the method comprising: Acquire association rules, where the association rules are used to associate multiple address segments obtained by dividing the IPv6 address pool with multiple processors; Get the message to be sent and its source IP address; Determine the destination processor corresponding to the address segment where the source IP address is located according to the association rule, and send the message to be sent to the destination processor, so that the destination processor determines the address segment where the source IP address is located according to the association rule, and sends the message to be sent and the address segment where the source IP address is located to the router through the Border Gateway Protocol BGP.

2. The method according to claim 1, characterized in that The obtaining association rule, wherein the association rule is used to associate multiple address segments obtained by dividing the IPv6 address pool with multiple processors, includes: Obtain association rules, the association rules are used to associate multiple address segments obtained by balancing the IPv6 address pool with multiple processors, wherein the number of IP addresses in each address pool segment is 2 n *1024, N is a natural number.

3. The method according to claim 1, characterized in that The obtaining association rule, wherein the association rule is used to associate multiple address segments obtained by dividing the IPv6 address pool with multiple processors, includes: An association rule is obtained, where the association rule is used to cyclically associate multiple address segments obtained by dividing the IPv6 address pool with multiple processors one by one.

4. The method according to claim 1, characterized in that: The step of determining the destination processor corresponding to the address segment where the source IP address is located according to the association rule, and sending the message to be sent to the destination processor comprises: The association rules are synchronized to multiple processors, a destination processor corresponding to the address segment where the source IP address is located is determined according to the association rules, and the message to be sent is sent to the destination processor.

5. A message processing method, applied to a processor, the method comprising: Acquire an association rule from a message sending network element, wherein the association rule is used to associate a plurality of address segments obtained by dividing an IPv6 address pool with a processor; Obtaining the message to be sent and its source IP address from the message sending network element; The address segment where the source IP address is located is determined according to the association rule, and the message to be sent and the address segment where the source IP address is located are sent to the router via the Border Gateway Protocol BGP, wherein the message to be sent is a message corresponding to the address segment where the source IP address is located and the processor determined according to the association rule.

6. The method according to claim 5, characterized in that The processor is located in the virtual firewall.

7. A message processing method, applied to a message processing device, the message processing device comprising a message sending network element and a plurality of processors, the method comprising: The message sending network element obtains an association rule, where the association rule is used to associate a plurality of address segments obtained by dividing the IPv6 address pool with a plurality of the processors; The message sending network element obtains the message to be sent and its source IP address; The message sending network element determines the destination processor corresponding to the address segment where the source IP address is located according to the association rule, and sends the message to be sent to the destination processor; The plurality of processors obtain association rules synchronized from the message sending network element; The destination processor obtains the message to be sent and its source IP address from the message sending network element; The destination processor determines the address segment where the source IP address is located according to the association rule, and sends the message to be sent and the address segment where the source IP address is located to the router via the Border Gateway Protocol BGP.

8. A message processing device, characterized in that: Including message sending network elements and multiple processors, The message sending network element obtains an association rule, where the association rule is used to associate a plurality of address segments obtained by dividing the IPv6 address pool with a plurality of the processors; The message sending network element obtains the message to be sent and its source IP address; The message sending network element determines the destination processor corresponding to the address segment where the source IP address is located according to the association rule, and sends the message to be sent to the destination processor; The plurality of processors obtain association rules synchronized from the message sending network element; The destination processor obtains the message to be sent and its source IP address from the message sending network element; The destination processor determines the address segment where the source IP address is located according to the association rule, and sends the message to be sent and the address segment where the source IP address is located to the router via the Border Gateway Protocol BGP.

9. A message processing device, comprising: A memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the message processing method according to any one of claims 1 to 6 when executing the computer program.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer-executable program, and the computer-executable program is used to enable a computer to execute the message processing method according to any one of claims 1 to 6.

Images