A data transmission method, network device and system

Abstract

The present invention provides a data transmission method, a network device and a system. The method on the first network device side includes: determining the tenant ID of the user data packet; querying the network connection resource identifier of the target network device to which the user data packet is to be sent according to the tenant ID; encapsulating the tenant ID and the network connection resource identifier in the user data packet, and sending the user data packet. The solution of the present invention can guarantee the end-to-end QoS of the user cloud dedicated line, reduce the network maintenance cost and complexity, and improve the cost performance of user data forwarding.

Description

Technical Field

[0001] The present invention relates to the field of communication technology, and in particular to a data transmission method, network equipment and system. Background Art

[0002] In the era of cloud computing, operators are facing network and business transformation. Cloud-network collaboration is not only the evolution goal and development trend of the next generation of telecommunications networks, but also one of the core capabilities of differentiated competition in mobile Internet information services. As the name suggests, cloud-network collaboration requires the construction of cloud computing and cloud network infrastructure at the same time, and the two complement each other. "Cloud" refers to cloud computing data centers and cloud services; "Network" refers to cloud network infrastructure, which includes not only cloud data center local area networks, but also networks between enterprises or enterprise data centers and cloud data centers, as well as networks between cloud data centers. The latter two are called "cloud connections". Providing a secure, reliable, and good experience access and interconnection network for cloud computing has become an important development direction for Internet service providers with "cloud first" as the orientation of technology and products. Based on SDN technology, traffic planning, segment routing (SR) and other technologies, low-cost, high-performance, and flexible scheduling of east-west traffic between cloud data centers is realized. Enterprise cloud backbone networks, wide area network (WAN) gateway technologies, products and services are deployed and provided to achieve seamless connection between enterprise customer networks and clouds, providing users with highly secure, reliable, and high-performance cloud connection pipelines.

[0003] The existing Overlay SD-WAN technology solution divides the network into two layers: the bottom layer is the operator network and the upper layer is the user data network. The upper layer network is superimposed on the bottom layer network and the bottom layer network cannot perceive the upper layer user network data. The bottom layer network cannot provide QoS guarantee for the upper layer user data. For cloud users, the SD-WAN technology solution that cannot guarantee QoS cannot meet user needs.

[0004] The existing Underlay SD-WAN technology based on IP technology carries user data on the operator's IP network. The underlying IP network can perceive users, but the access network and transmission network that actually carry user data cannot perceive different user data, and cannot provide end-to-end service QoS guarantee for user cloud dedicated lines. Summary of the invention

[0005] The technical problem to be solved by the present invention is how to provide a data transmission method, network equipment and system, which is based on the underlay SD-WAN construction of the "pure two-layer" network of the access network and the transmission network, which can ensure the end-to-end QoS of the user cloud dedicated line, reduce the network maintenance cost and complexity, and improve the cost performance of user data forwarding.

[0006] In order to solve the above technical problems, the technical solution of the present invention is as follows:

[0007] A data transmission method, applied to a first network device, comprising:

[0008] Determine the tenant ID of the user data packet;

[0009] Query the network connection resource identifier of the target network device to which the user data packet is to be sent according to the tenant ID;

[0010] The tenant ID and the network connection resource identifier are encapsulated in a user data packet, and the user data packet is sent.

[0011] Optionally, the user data packet is received from a first user network and is encapsulated with the network identifier.

[0012] Optionally, determine the tenant ID of the user data packet, including:

[0013] The tenant ID of the user data packet is determined according to the first port information and the network identifier of the user data packet.

[0014] Optionally, querying the network connection resource identifier of the target network device to which the user data packet is to be sent according to the tenant ID includes:

[0015] According to the tenant ID, obtain the tenant forwarding table;

[0016] According to the destination address of the user data packet, the network connection resource identifier of the target network device is queried in the tenant forwarding table.

[0017] Optionally, a user data packet is sent, including:

[0018] Send user data packets to the target network device through the transmission network.

[0019] Optionally, sending the user data packet to the target network device through the transmission network includes:

[0020] The user data packet is sent to the second network device through the transmission network, and the second network device sends the user data packet to the second user network.

[0021] Optionally, the second network device sends the user data packet to the second user network, including:

[0022] The second network device obtains the tenant forwarding table according to the tenant ID of the user data packet and queries the second port information and network identifier connected to the destination network in the tenant forwarding table according to the destination address of the user data packet;

[0023] The user data packet is sent to the second user network via the second port.

[0024] Optionally, sending the user data packet to the target network device through the transmission network includes:

[0025] The user data packet is sent to the third network device through the transmission network, and the third network device sends the user data packet to the cloud data center network, and the cloud data center network forwards the user data packet to the corresponding cloud network VPC.

[0026] Optionally, the third network device sends the user data packet to a cloud data center network, and the cloud data center network forwards the user data packet to a corresponding cloud network VPC, including:

[0027] The third network device extracts the tenant ID in the user data packet and locates the corresponding tenant forwarding table;

[0028] According to the destination address of the user data packet, the third port information and the network identifier of the virtual private cloud VPC access are searched in the tenant forwarding table,

[0029] Query the VPC network ID based on the third port information and network identifier of the VPC access;

[0030] When the VPC network ID is the VNI of the VPC network, the third network device replaces the network identifier in the user data packet with the VNI, encapsulates the user data packet into a VxLAN data packet, and forwards the user data packet to the corresponding cloud network VPC through the cloud data center network;

[0031] When the VPC network ID is a VLAN ID, the third network device replaces the network identifier in the user data packet with the VLAN ID; and forwards the user data packet to the corresponding cloud network VPC through the cloud data center network.

[0032] A data transmission method, applied to a third network device, comprising:

[0033] The third network device receives the data packet from the cloud data center network device;

[0034] The third network device determines the tenant ID of the target user network according to the virtual private cloud VPC network ID in the data packet;

[0035] The tenant ID of the target user network is encapsulated in a data packet and sent to the target network device through the transmission network.

[0036] A first network device, comprising:

[0037] A first determining unit, determining a tenant ID of a user data packet;

[0038] A query unit, querying the network connection resource identifier of the target network device to which the user data packet is to be sent according to the tenant ID;

[0039] The first encapsulation unit encapsulates the tenant ID and the network connection resource identifier in a user data packet and sends the user data packet.

[0040] A second network device, comprising:

[0041] A receiving unit, receiving data packets from a network device in a cloud data center;

[0042] A second determining unit determines a tenant ID of a target user network according to a virtual private cloud VPC network ID in the data packet;

[0043] The second encapsulation unit encapsulates the tenant ID of the target user network in a data packet and sends it to the target network device through the transmission network.

[0044] A network system includes a first user network, a first access network communicatively connected to the first user network, a first network device communicatively connected to the first access network, and a transmission network communicatively connected to the first network device, wherein the first network device receives a user data packet from the first user network via the first access network and determines a tenant ID of the user data packet; queries a network connection resource identifier of a target network device to which the user data packet is to be sent based on the tenant ID; encapsulates the tenant ID and the network connection resource identifier in a user data packet, and sends the user data packet via the transmission network.

[0045] Optionally, the network system further includes:

[0046] A second network device communicatively connected to the transmission network;

[0047] a second access network communicatively connected to the second network device;

[0048] The second network device receives the user data packet sent by the transmission network, and sends the user data packet to a second user network through a second access network.

[0049] Optionally, the network system further includes:

[0050] A third network device communicatively connected to the transmission network;

[0051] a cloud data center network communicatively connected to the third network device;

[0052] The third network device receives the user data packet sent by the transmission network, and sends the user data packet to the cloud data center network, and the cloud data center network forwards the user data packet to the corresponding cloud network VPC.

[0053] Optionally, the network system further includes:

[0054] The third network device is also used to receive a data packet from a cloud data center network device; determine the tenant ID of the target user network based on the virtual private cloud VPC network ID in the data packet; encapsulate the tenant ID of the target user network in the data packet, and send it to the second network device or the first network device via the transmission network.

[0055] A communication device comprises: a processor and a memory storing a computer program, wherein when the computer program is executed by the processor, the method described above is executed.

[0056] A computer-readable storage medium stores instructions, which, when executed on a computer, enable the computer to execute the method described above.

[0057] The above solution of the present invention includes at least the following beneficial effects:

[0058] The present invention provides an underlay SD-WAN construction method and system based on a "pure two-layer" network of an access network and a transmission network. Starting from the network exit, user data can be perceived by the access network, and at the same time, the user data can also be perceived by the underlying transmission network, and different users in the same tenant can be identified and provided with different QoS guarantees. It is only necessary to configure and maintain the user global ID on the TVPN gateway device, without configuring a large amount of port + VLAN ID data on a wider number of access devices and transmission network access ring devices, and it is not related to the device hardware port; it reduces the network maintenance cost and complexity, and improves the user data forwarding cost performance. The user network and cloud data center of the present invention are based on VxLAN, VLAN, and L3VPN technology implementations. For users, there is no need to know any details of the cloud data center network. It is completely like a device accessing a local Ethernet network. There is no need to propose technical requirements for the user network to be transformed, which greatly reduces the cost and complexity of users using cloud dedicated lines. BRIEF DESCRIPTION OF THE DRAWINGS

[0059] Figure 1 is a flow chart of a data transmission method according to an embodiment of the present invention;

[0060] Figure 2 is another flowchart of the data transmission method according to an embodiment of the present invention;

[0061] Figure 3 is a schematic diagram of a module of a first network device according to an embodiment of the present invention;

[0062] Figure 4 is a schematic diagram of a module of a second network device according to an embodiment of the present invention;

[0063] Figure 5 is a framework diagram of a network system according to an embodiment of the present invention;

[0064] Figure 6 is a flow chart of a user data packet sent from a source user network branch to a transmission network OTN according to an embodiment of the present invention;

[0065] Figure 7-Figure 11 is a schematic structural diagram of a user data packet according to an embodiment of the present invention;

[0066] Fig.12 is a flow chart of a transmission network according to an embodiment of the present invention sending a user data packet to a network branch of a destination enterprise;

[0067] Fig.13 is a flow chart of a cloud data network receiving a user data packet from a transmission network and transmitting the data packet to an enterprise VPC according to an embodiment of the present invention;

[0068] Fig.14 is a user network branch ID and cloud data center VPC ID matching information table of an embodiment of the present invention;

[0069] Fig.15 It is a flow chart of a data packet transmitted downstream from an enterprise cloud VPC to an enterprise branch network in an embodiment of the present invention. DETAILED DESCRIPTION

[0070] The exemplary embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. Although the exemplary embodiments of the present disclosure are shown in the accompanying drawings, it should be understood that the present disclosure can be implemented in various forms and should not be limited by the embodiments set forth herein. On the contrary, these embodiments are provided to enable a more thorough understanding of the present disclosure and to fully convey the scope of the present disclosure to those skilled in the art.

[0071] like Figure 1 As shown, a data transmission method is applied to a first network device, comprising:

[0072] Step 110, determining the tenant ID of the user data packet;

[0073] Step 120, querying the network connection resource identifier of the target network device to which the user data packet is to be sent according to the tenant ID;

[0074] Step 130: encapsulate the tenant ID and the network connection resource identifier in a user data packet, and send the user data packet.

[0075] In this embodiment, user data from the first user network is sent to the second access network or cloud data center network via the first access network and the transmission network, and is received by the second user network or the user cloud network. The first network device is a first gateway device between the first access network and the transmission network. The first gateway device determines the tenant ID of the user data packet received from the first access network, and searches for the network connection resource identifier of the target gateway device to which the user data packet is to be sent according to the tenant ID, and encapsulates the tenant ID and the network connection resource identifier of the target gateway device in the user data packet, and sends the user data packet to the transmission network.

[0076] In an optional embodiment of the present invention, the user data packet is received from a first user network and is encapsulated with the network identifier.

[0077] In an optional embodiment of the present invention, determining the tenant ID of the user data packet includes:

[0078] The tenant ID of the user data packet is determined according to the first port information and the network identifier of the user data packet.

[0079] In an optional embodiment of the present invention, querying the network connection resource identifier of the target network device to which the user data packet is to be sent according to the tenant ID includes:

[0080] According to the tenant ID, obtain the tenant forwarding table;

[0081] According to the destination address of the user data packet, the network connection resource identifier of the target network device is queried in the tenant forwarding table.

[0082] In an optional embodiment of the present invention, sending a user data packet includes:

[0083] Send user data packets to the target network device through the transmission network.

[0084] In this embodiment, the first gateway device determines the tenant ID to which the enterprise branch belongs based on the user data packet input port and the network identifier of the data packet, locates the tenant forwarding table based on the tenant ID, queries the network connection resource identifier of the destination gateway device to which the user data packet is to go in the forwarding table based on the destination address of the user data packet, encapsulates the unified tenant ID and the network connection resource identifier in the user data packet from the inside to the outside in sequence, and the first gateway device sends the data packet to the transmission network, which carries the user data on the corresponding network connection based on the network connection resource identifier.

[0085] In an optional embodiment of the present invention, sending a user data packet to a target network device through a transmission network includes:

[0086] The user data packet is sent to the second network device through the transmission network, and the second network device sends the user data packet to the second user network.

[0087] In an optional embodiment of the present invention, the second network device sends the user data packet to the second user network, including:

[0088] The second network device obtains the tenant forwarding table according to the tenant ID of the user data packet and queries the second port information and network identifier connected to the destination network in the tenant forwarding table according to the destination address of the user data packet;

[0089] The user data packet is sent to the second user network via the second port.

[0090] In this embodiment, when the transmission network sends a user data packet to the second user network, after the second gateway device receives the user data packet: locates the corresponding forwarding table according to the tenant ID in the user data packet, queries the port and network identifier connected to the target branch network in the forwarding table according to the destination address of the user data packet, replaces the VLAN value in the user data packet with the network identifier, and then sends the user data packet to the second access network via the port queried in the above steps. The second access network processes the network identifier of the user data packet and sends it to the second user network.

[0091] In an optional embodiment of the present invention, sending a user data packet to a target network device through a transmission network includes:

[0092] The user data packet is sent to the third network device through the transmission network, and the third network device sends the user data packet to the cloud data center network, and the cloud data center network forwards the user data packet to the corresponding cloud network VPC.

[0093] In an optional embodiment of the present invention, the third network device sends the user data packet to the cloud data center network, and the cloud data center network forwards the user data packet to the corresponding cloud network VPC, including:

[0094] The third network device extracts the tenant ID in the user data packet and locates the corresponding tenant forwarding table,

[0095] According to the destination address of the user data packet, the third port information and the network identifier of the virtual private cloud VPC access are searched in the tenant forwarding table,

[0096] Query the VPC network ID based on the third port information and network identifier of the VPC access;

[0097] When the VPC network ID is the VNI of the VPC network, the third network device replaces the network identifier in the user data packet with the VNI, encapsulates the user data packet into a VxLAN data packet, and forwards the user data packet to the corresponding cloud network VPC through the cloud data center network;

[0098] When the VPC network ID is a VLAN ID, the third network device replaces the network identifier in the user data packet with the VLAN ID; and forwards the user data packet to the corresponding cloud network VPC through the cloud data center network.

[0099] In this embodiment, when the transmission network sends a user data packet to the cloud data center network, after receiving the user data packet, the third gateway device on the cloud data center side extracts the tenant ID in the user data packet and locates the corresponding forwarding table; inquires the port and network identifier to which the enterprise cloud VPC is connected in the forwarding table according to the destination address of the user data packet, and inquires the VPC network ID based on the port and network identifier to which the cloud VPC is connected. When the VPC network ID is VNI or VLAN, the corresponding network identification processing is performed.

[0100] The present invention provides an underlay SD-WAN construction method and system based on a "pure two-layer" network of an access network and a transmission network. Starting from the network exit, user data can be perceived by the access network, and at the same time, the user data can also be perceived by the underlying transmission network, and different users in the same tenant can be identified and provided with different QoS guarantees. It is only necessary to configure and maintain the user global ID on the TVPN gateway device, without configuring a large amount of port + VLAN ID data on a wider number of access devices and transmission network access ring devices, and it is not related to the device hardware port; it reduces the network maintenance cost and complexity, and improves the user data forwarding cost performance. The user network and cloud data center of the present invention are based on VxLAN, VLAN, and L3VPN technology implementations. For users, there is no need to know any details of the cloud data center network. It is completely like a device accessing a local Ethernet network. There is no need to propose technical requirements for the user network to be transformed, which greatly reduces the cost and complexity of users using cloud dedicated lines.

[0101] like Figure 2 As shown, a data transmission method is applied to a third network device, comprising:

[0102] Step 210, the third network device receives a data packet from the cloud data center network device;

[0103] Step 220, the third network device determines the tenant ID of the target user network according to the virtual private cloud VPC network ID in the data packet;

[0104] Step 230, encapsulate the tenant ID of the target user network in a data packet and send it to the target network device through the transmission network.

[0105] In this embodiment, a data packet from a cloud data center network is sent to a first access network or a second access network via the cloud data center network and the transmission network, and the data packet is received by the first user network or the first user network. The third network device is a cloud gateway device between the cloud data center network and the transmission network. The cloud gateway device receives a data packet from the cloud data center network, and then extracts a VNI or VLAN ID, i.e., a cloud VPC ID, from the data packet; according to the VNI or VLAN ID, a matching item is queried from a user network branch ID and a cloud data center VPC ID matching information table, and the user data packet is repackaged, and the VLAN is replaced with the corresponding network identifier.

[0106] In an optional embodiment of the present invention, after encapsulating the network identifier of the target user network in the data packet, the method further includes:

[0107] Determine the tenant ID of the data packet;

[0108] Query the network connection resource identifier of the target network device according to the tenant ID;

[0109] Encapsulate the tenant ID and network connection resource identifier in the user data packet.

[0110] In an optional embodiment of the present invention, determining the tenant ID of the data packet includes:

[0111] The tenant ID of the data packet is determined according to the first port information and the network identifier of the data packet.

[0112] In an optional embodiment of the present invention, querying the network connection resource identifier of the target network device according to the tenant ID includes:

[0113] According to the tenant ID, obtain the tenant forwarding table;

[0114] According to the destination address of the data packet, the network connection resource identifier of the target network device is queried in the tenant forwarding table.

[0115] In an optional embodiment of the present invention, sending to a target network device via a transmission network includes:

[0116] The data packet is sent to the target network device through the transmission network, and the target network device sends the user data packet to the target user network.

[0117] In an optional embodiment of the present invention, the target network device sends the data packet to the target user network, including:

[0118] The target network device obtains the tenant forwarding table according to the tenant ID of the user data packet and searches the tenant forwarding table for the second port information and network identifier connected to the destination network according to the destination address of the data packet;

[0119] The user data packet is sent to the target user network via the second port.

[0120] In this embodiment, when the transmission network sends a user data packet to the first user network or the second user network, after the first gateway device or the second gateway device receives the user data packet: locate the corresponding forwarding table according to the tenant ID in the user data packet, query the port and network identifier connected to the target branch network in the forwarding table according to the destination address of the user data packet, replace the VLAN value in the user data packet with the network identifier, and then send the data packet to the first access network or the second access network via the port queried in the above steps. The first access network or the second access network processes the network identifier of the user data packet and sends it to the first user network or the second user network.

[0121] The present invention provides an underlay SD-WAN construction method and system based on a "pure two-layer" network of an access network and a transmission network. Starting from the network exit, user data can be perceived by the access network, and at the same time, the user data can also be perceived by the underlying transmission network, and different users in the same tenant can be identified and provided with different QoS guarantees. It is only necessary to configure and maintain the user global ID on the TVPN gateway device, without configuring a large amount of port + VLAN ID data on a wider number of access devices and transmission network access ring devices, and it is not related to the device hardware port; it reduces the network maintenance cost and complexity, and improves the user data forwarding cost performance. The user network and cloud data center of the present invention are based on VxLAN, VLAN, and L3VPN technology implementations. For users, there is no need to know any details of the cloud data center network. It is completely like a device accessing a local Ethernet network. There is no need to propose technical requirements for the user network to be transformed, which greatly reduces the cost and complexity of users using cloud dedicated lines.

[0122] like Figure 3 As shown, a first network device 30 includes:

[0123] A first determining unit 310 determines a tenant ID of a user data packet;

[0124] A query unit 320 queries a network connection resource identifier of a target network device to which a user data packet is to be sent according to the tenant ID;

[0125] The first encapsulation unit 330 encapsulates the tenant ID and the network connection resource identifier in a user data packet, and sends the user data packet.

[0126] In an optional embodiment of the present invention, the user data packet is received from a first user network and is encapsulated with the network identifier.

[0127] In an optional embodiment of the present invention, determining the tenant ID of the user data packet includes:

[0128] The tenant ID of the user data packet is determined according to the first port information and the network identifier of the user data packet.

[0129] In an optional embodiment of the present invention, querying the network connection resource identifier of the target network device to which the user data packet is to be sent according to the tenant ID includes:

[0130] According to the tenant ID, obtain the tenant forwarding table;

[0131] According to the destination address of the user data packet, the network connection resource identifier of the target network device is queried in the tenant forwarding table.

[0132] In an optional embodiment of the present invention, sending a user data packet includes:

[0133] Send user data packets to the target network device through the transmission network.

[0134] In an optional embodiment of the present invention, sending a user data packet to a target network device through a transmission network includes:

[0135] The user data packet is sent to the second network device through the transmission network, and the second network device sends the user data packet to the second user network.

[0136] In an optional embodiment of the present invention, the second network device sends the user data packet to the second user network, including:

[0137] The second network device obtains the tenant forwarding table according to the tenant ID of the user data packet and queries the second port information and network identifier connected to the destination network in the tenant forwarding table according to the destination address of the user data packet;

[0138] The user data packet is sent to the second user network via the second port.

[0139] In an optional embodiment of the present invention, sending a user data packet to a target network device through a transmission network includes:

[0140] The user data packet is sent to the third network device through the transmission network, and the third network device sends the user data packet to the cloud data center network, and the cloud data center network forwards the user data packet to the corresponding cloud network VPC.

[0141] In an optional embodiment of the present invention, the third network device sends the user data packet to the cloud data center network, and the cloud data center network forwards the user data packet to the corresponding cloud network VPC, including:

[0142] The third network device extracts the tenant ID in the user data packet and locates the corresponding tenant forwarding table,

[0143] According to the destination address of the user data packet, the third port information and the network identifier of the virtual private cloud VPC access are searched in the tenant forwarding table,

[0144] Query the VPC network ID based on the third port information and network identifier of the VPC access;

[0145] When the VPC network ID is the VNI of the VPC network, the third network device replaces the network identifier in the user data packet with the VNI, encapsulates the user data packet into a VxLAN data packet, and forwards the user data packet to the corresponding cloud network VPC through the cloud data center network;

[0146] When the VPC network ID is a VLAN ID, the third network device replaces the network identifier in the user data packet with the VLAN ID; and forwards the user data packet to the corresponding cloud network VPC through the cloud data center network.

[0147] The present invention provides an underlay SD-WAN construction method and system based on a "pure two-layer" network of an access network and a transmission network. Starting from the network exit, user data can be perceived by the access network, and at the same time, the user data can also be perceived by the underlying transmission network, and different users in the same tenant can be identified and provided with different QoS guarantees. It is only necessary to configure and maintain the user global ID on the TVPN gateway device, without configuring a large amount of port + VLAN ID data on a wider number of access devices and transmission network access ring devices, and it is not related to the device hardware port; it reduces the network maintenance cost and complexity, and improves the user data forwarding cost performance. The user network and cloud data center of the present invention are based on VxLAN, VLAN, and L3VPN technology implementations. For users, there is no need to know any details of the cloud data center network. It is completely like a device accessing a local Ethernet network. There is no need to propose technical requirements for the user network to be transformed, which greatly reduces the cost and complexity of users using cloud dedicated lines.

[0148] like Figure 4 As shown, a second network device 40 includes:

[0149] The receiving unit 410 receives a data packet from a cloud data center network device;

[0150] The second determining unit 420 determines the tenant ID of the target user network according to the virtual private cloud VPC network ID in the data packet;

[0151] The second encapsulation unit 430 encapsulates the tenant ID of the target user network into a data packet and sends it to the target network device through the transmission network.

[0152] In an optional embodiment of the present invention, after encapsulating the network identifier of the target user network in the data packet, the method further includes:

[0153] Determine the tenant ID of the data packet;

[0154] Query the network connection resource identifier of the target network device according to the tenant ID;

[0155] Encapsulate the tenant ID and network connection resource identifier in the user data packet.

[0156] In an optional embodiment of the present invention, determining the tenant ID of the data packet includes:

[0157] The tenant ID of the data packet is determined according to the first port information and the network identifier of the data packet.

[0158] In an optional embodiment of the present invention, querying the network connection resource identifier of the target network device according to the tenant ID includes: obtaining a tenant forwarding table according to the tenant ID;

[0159] According to the destination address of the data packet, the network connection resource identifier of the target network device is queried in the tenant forwarding table.

[0160] In an optional embodiment of the present invention, sending to a target network device via a transmission network includes:

[0161] The data packet is sent to the target network device through the transmission network, and the target network device sends the user data packet to the target user network.

[0162] In an optional embodiment of the present invention, the target network device sends the data packet to the target user network, including: the target network device obtains the tenant forwarding table according to the tenant ID of the user data packet and queries the second port information and network identifier connected to the destination network in the tenant forwarding table according to the destination address of the data packet;

[0163] The user data packet is sent to the target user network via the second port.

[0164] The present invention provides an underlay SD-WAN construction method and system based on a "pure two-layer" network of an access network and a transmission network. Starting from the network exit, user data can be perceived by the access network, and at the same time, the user data can also be perceived by the underlying transmission network, and different users in the same tenant can be identified and provided with different QoS guarantees. It is only necessary to configure and maintain the user global ID on the TVPN gateway device, without configuring a large amount of port + VLAN ID data on a wider number of access devices and transmission network access ring devices, and it is not related to the device hardware port; it reduces the network maintenance cost and complexity, and improves the user data forwarding cost performance. The user network and cloud data center of the present invention are based on VxLAN, VLAN, and L3VPN technology implementations. For users, there is no need to know any details of the cloud data center network. It is completely like a device accessing a local Ethernet network. There is no need to propose technical requirements for the user network to be transformed, which greatly reduces the cost and complexity of users using cloud dedicated lines.

[0165] like Figure 5 As shown, a network system includes a first user branch network, a first access network communicatively connected to the first user branch network, a first network device communicatively connected to the first access network, and a transmission network communicatively connected to the first network device, wherein the first network device receives a user data packet from the first user network through the first access network, and determines the tenant ID of the user data packet; queries the network connection resource identifier of the target network device to which the user data packet is to be sent according to the tenant ID; encapsulates the tenant ID and the network connection resource identifier in the user data packet, and sends the user data packet through the transmission network.

[0166] In this embodiment, the network system includes a first user branch network for sending user data packets, which sends the user data packets to a first access network, and the first access network sends the user data packets to a transmission network through a first network device (i.e., a first TVPN gateway device).

[0167] In an optional embodiment of the present invention, the network system further includes:

[0168] A second network device communicatively connected to the transmission network;

[0169] a second access network communicatively connected to the second network device;

[0170] The second network device receives the user data packet sent by the transmission network, and sends the user data packet to a second user network through a second access network.

[0171] In this embodiment, when the transmission network sends a user data packet to the second user branch network, the transmission network sends the user data packet to the second access network via the second network device (i.e., the second TVPN gateway device), and the second access network forwards the user data packet to the second user branch network.

[0172] In an optional embodiment of the present invention, the network system further includes:

[0173] A third network device (such as a third TVPN gateway device) that is communicatively connected to the transmission network;

[0174] a cloud data center network communicatively connected to the third network device;

[0175] The third network device receives the user data packet sent by the transmission network, and sends the user data packet to the cloud data center network, and the cloud data center network forwards the user data packet to the corresponding user cloud VPC.

[0176] In this embodiment, when the transport network sends a user data packet to the cloud data center network, the transport network sends the user data packet to the cloud data center network via the third TVPN gateway device, and the cloud data center network forwards the user data packet to the user cloud VPC.

[0177] In an optional embodiment of the present invention, the network system further includes:

[0178] The third network device is also used to receive a data packet from a cloud data center network device; determine the tenant ID of the target user network based on the virtual private cloud VPC network ID in the data packet; encapsulate the tenant ID of the target user network in the data packet, and send it to the second network device or the first network device via the transmission network.

[0179] In this embodiment, when the cloud data center network sends a data packet downstream to the first user network or the second user network, the user cloud VPC sends the data packet to the cloud data center network, the cloud data center network sends the data packet to the transmission network via the third TVPN gateway device, the transmission network sends the data packet to the first access network or the second access network via the first TVPN gateway device or the second TVPN gateway device, and the first access network or the second access network forwards the user data packet to the first user branch network or the second user branch network.

[0180] The present invention provides an underlay SD-WAN construction method and system based on a "pure two-layer" network of an access network and a transmission network. Starting from the network exit, user data can be perceived by the access network, and at the same time, the user data can also be perceived by the underlying transmission network, and different users in the same tenant can be identified and provided with different QoS guarantees. It is only necessary to configure and maintain the user global ID on the TVPN gateway device, without configuring a large amount of port + VLAN ID data on a wider number of access devices and transmission network access ring devices, and it is not related to the device hardware port; it reduces the network maintenance cost and complexity, and improves the user data forwarding cost performance. The user network and cloud data center of the present invention are based on VxLAN, VLAN, and L3VPN technology implementations. For users, there is no need to know any details of the cloud data center network. It is completely like a device accessing a local Ethernet network. There is no need to propose technical requirements for the user network to be transformed, which greatly reduces the cost and complexity of users using cloud dedicated lines.

[0181] exist Figure 5 In the network architecture described:

[0182] The user branch network refers to the user network including the enterprise headquarters, enterprise branch networks, etc., which are connected to the operator network through the operator PON access network.

[0183] The access network includes ONU and OLT devices, which are responsible for connecting the user network to the operator's transmission network.

[0184] TVPN gateway devices are divided into enterprise branch access TVPN gateway devices and cloud data center TVPN gateway devices. The former is deployed on the operator network, and the latter can be deployed on the operator network or the cloud data center. It is mainly responsible for sending user enterprise branch data or cloud VPC data to the corresponding TVPN gateway device.

[0185] Transmission networks include PTN, SPN, and OTN networks. These networks can include different levels such as metropolitan area aggregation, provincial backbone, and national backbone networks. They are mainly used to connect user networks together and provide users with "virtual network" or "connection" services that connect user networks with user networks and user networks with data centers.

[0186] Cloud data center and user VPC: Provide cloud "VPC" services for users. User networks need to use connection services with QoS guarantees to ensure that user networks in different locations can communicate with cloud data center VPC networks and have the user experience of LAN intercommunication.

[0187] Figure 6 A flow chart showing the sending of a user data packet from a source user network branch to a transmission network OTN includes the following steps:

[0188] Step 1: The user sends a data packet to another branch network of the enterprise;

[0189] Step 2.1: The ONU in the source access network identifies the user service type and uses a corresponding CVLAN identifier together with the corresponding enterprise user branch ID, such as Figure 7 shown.

[0190] Step 2.2: The OLT device in the source access network converts the CVLAN and the access port number into a unique SVLAN identifier for the OLT device, such as Figure 8 shown.

[0191] Step 3: The OLT sends data to the source TVPN gateway device or metropolitan area access network device.

[0192] Step 4: After the source TVPN gateway receives the user data packet:

[0193] 4.1 Determine the tenant ID (uniformly assigned) to which the enterprise branch belongs based on the user data packet ingress port and data packet SVLAN, such as Fig. 9 shown.

[0194] 4.2 Locate the tenant forwarding table based on the tenant ID, and query the destination TVPN gateway device network connection resource identifier in the forwarding table based on the destination address of the user data packet, such as Fig.10 shown.

[0195] 4.3 Encapsulate the unified tenant ID and network connection resource identifier in the user data packet from the inside to the outside, such as Fig.11 shown.

[0196] Step 5: The source TVPN gateway device sends the data packet to the transport network.

[0197] Fig.12 The flow chart of the transmission network sending the user data packet to the destination enterprise network branch is shown, including the following steps:

[0198] Step 6: The transmission network carries the user data on the corresponding network connection according to the network connection resource identifier;

[0199] Step 7: The transmission network sends the user data packet to the sink TVPN gateway device;

[0200] Step 8: After receiving the user data packet, the sink TVPN gateway device:

[0201] 8.1 Locate the corresponding forwarding table according to the tenant ID in the user data packet;

[0202] 8.2 According to the destination address of the user data packet, the port and SVLAN to which the target branch network is connected are searched in the forwarding table;

[0203] 8.3 Replace the VLAN value in the user data packet with SVLAN.

[0204] Step 9: The user data packet is sent to the OLT device via the port queried in the above step;

[0205] Step 10: The OLT device replaces the SVLAN in the data packet with the corresponding CVLAN in the local table and sends the data packet to the ONU device.

[0206] When the transport network transmits user data packets upstream to the cloud VPC, steps 1-7 in the process are the same as steps 1-8 in the VPN interconnection process between the source enterprise network branch and the destination enterprise network branch.

[0207] Fig.13 The flowchart of the cloud data network receiving user data packets from the transmission network and transmitting them to the enterprise VPC is shown. The steps include:

[0208] Step 8: After the TVPN gateway device on the cloud data center receives the user data packet:

[0209] 8a. The TVPN gateway device on the cloud data center side extracts the tenant ID (TVLAN) in the user data packet and locates the corresponding forwarding table;

[0210] 8b. Query the port and SVLAN to which the enterprise cloud VPC is connected in the forwarding table based on the destination address of the user data packet

[0211] 8c. Fig.14 The corresponding user cloud VPC network ID is found in the user network branch ID and cloud data center VPC ID matching information table based on the access port and SVLAN: VNI ​​or VLAN;

[0212] Among them, VNI / VLAN is the ID of the user cloud VPC in the cloud data center network to which it belongs, and the access port and SLVAN combined information is the global ID assigned by the operator to the user branch network.

[0213] 8d. For VxLAN intercommunication scenarios, the TVPN gateway device replaces the VLAN in the user data packet with the cloud VPC network VLAN ID queried in step 8c, and acts as a VTEP point to encapsulate the user data into a VxLAN data packet, and its VNI uses the VNI queried in step 8c;

[0214] 8e. For VLAN intercommunication scenarios, the TVPN gateway device replaces the VLAN in the user data packet with the cloud VPC network VLAN ID queried in step 8c;

[0215] Step 9: The TVPN gateway device sends the repackaged user data to the cloud data center network device;

[0216] Step 10: The cloud data center network device forwards the user data packet to the corresponding cloud VPC.

[0217] Fig.15 The flow chart of the data packet transmission from the enterprise cloud VPC to the enterprise branch network is shown. In this process, except for steps 1-3, which are different from the VPN intercommunication process between the source enterprise network branch and the destination enterprise network branch, its steps 4-9 are the same as the latter 4-10. Fig.15 Only the different steps are shown, including:

[0218] Step 1: The enterprise cloud VPC device sends data to other enterprise branch networks;

[0219] Step 2: The cloud data center network device sends the user data packet to the TVPN gateway device on the cloud data center side;

[0220] Step 3: After the TVPN gateway receives the data packet:

[0221] 3.1 Extract VNI or VLAN ID, i.e. cloud VPC ID, from the data packet (VxLAN or MAC);

[0222] 3.2 Based on VNI or VLAN ID Fig.14 The matching item is found in the table, the user data packet is re-encapsulated, and the VLAN is replaced with the corresponding SVLAN.

[0223] In the above embodiment of the present invention, the first network device may be Figure 5The first TVPN gateway device shown in the figure, the second network device can be the second TVPN gateway device, and the third network device can be the third TVPN gateway device. The above embodiment provides an underlay SD-WAN construction method and system based on a "pure two-layer" network of an access network and a transmission network. Starting from the network exit, user data can be perceived by the access network, and user data can also be perceived by the underlying transmission network, and different users in the same tenant can be identified and provided with different QoS guarantees. It is only necessary to configure and maintain the user global ID on the TVPN gateway device, without configuring a large amount of port + VLAN ID data on a wider number of access devices and transmission network access ring devices, and it is not related to the device hardware port; reduce network maintenance costs and complexity, and improve user data forwarding cost performance. The user network and cloud data center of the present invention are based on VxLAN, VLAN, and L3VPN technology implementations. For users, there is no need to know any details of the cloud data center network. It is completely like a device accessing a local Ethernet network. There is no need to propose technical requirements for transformation of the user network, which greatly reduces the cost and complexity of users using cloud dedicated lines.

[0224] The embodiment of the present invention further provides a communication device, comprising: a processor and a memory storing a computer program, wherein when the computer program is executed by the processor, the method described above is executed. All implementations in the above method embodiment are applicable to this embodiment and can achieve the same technical effect.

[0225] The embodiment of the present invention further provides a computer-readable storage medium, including instructions, which, when executed on a computer, enable the computer to execute the method described above. All implementations in the above method embodiment are applicable to this embodiment and can achieve the same technical effect.

[0226] Those skilled in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of the present invention.

[0227] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0228] In the embodiments provided by the present invention, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0229] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0230] In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0231] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, or the part that contributes to the prior art, or the part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium, including several instructions for a computer device (which can be a personal computer, server, or network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present invention. The aforementioned storage medium includes: various media that can store program codes, such as USB flash drives, mobile hard disks, ROM, RAM, magnetic disks, or optical disks.

[0232] In addition, it should be noted that in the apparatus and method of the present invention, it is obvious that each component or each step can be decomposed and / or recombined. These decompositions and / or recombinations should be regarded as equivalent schemes of the present invention. Moreover, the steps of performing the above-mentioned series of processing can naturally be performed in chronological order according to the order of description, but it is not necessary to perform them in chronological order, and some steps can be performed in parallel or independently of each other. For those of ordinary skill in the art, it is understood that all or any steps or components of the method and apparatus of the present invention can be implemented in any computing device (including processors, storage media, etc.) or a network of computing devices in hardware, firmware, software or a combination thereof, which can be achieved by those of ordinary skill in the art using their basic programming skills after reading the description of the present invention.

[0233] Therefore, the purpose of the present invention can also be achieved by running a program or a group of programs on any computing device. The computing device can be a well-known general device. Therefore, the purpose of the present invention can also be achieved by simply providing a program product containing a program code that implements the method or device. That is to say, such a program product also constitutes the present invention, and the storage medium storing such a program product also constitutes the present invention. Obviously, the storage medium can be any well-known storage medium or any storage medium developed in the future. It should also be pointed out that in the device and method of the present invention, it is obvious that each component or each step can be decomposed and / or recombined. These decompositions and / or recombinations should be regarded as equivalent schemes of the present invention. In addition, the steps of performing the above-mentioned series of processing can naturally be performed in chronological order according to the order of description, but it is not necessary to perform them in chronological order. Some steps can be performed in parallel or independently of each other.

[0234] The above is a preferred embodiment of the present invention. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principles of the present invention. These improvements and modifications should also be regarded as the scope of protection of the present invention.

Claims

1. A data transmission method, characterized in that: Applied to a first network device, comprising: Determine the tenant ID of the user data packet; Query the network connection resource identifier of the target network device to which the user data packet is to be sent according to the tenant ID; Encapsulate the tenant ID and the network connection resource identifier in a user data packet and send the user data packet; The step of determining the tenant ID of the user data packet includes: Determine the tenant ID of the user data packet according to the first port information and the network identifier of the user data packet; The sending of the user data packet comprises: Send user data packets to the target network device through the transmission network; The step of sending the user data packet to the target network device through the transmission network includes: Sending the user data packet to the third network device through the transmission network, and the third network device sending the user data packet to the cloud data center network, and the cloud data center network forwarding the user data packet to the corresponding cloud network VPC; The third network device sends the user data packet to the cloud data center network, and the cloud data center network forwards the user data packet to the corresponding cloud network VPC, including: The third network device extracts the tenant ID in the user data packet and locates the corresponding tenant forwarding table; According to the destination address of the user data packet, query the third port information and network identifier of the virtual private cloud VPC access in the tenant forwarding table; Query the VPC network ID based on the third port information and network identifier of the VPC access; When the VPC network ID is the VNI of the VPC network, the third network device replaces the network identifier in the user data packet with the VNI, encapsulates the user data packet into a VxLAN data packet, and forwards the user data packet to the corresponding cloud network VPC through the cloud data center network; When the VPC network ID is a VLAN ID, the third network device replaces the network identifier in the user data packet with the VLAN ID; and forwards the user data packet to the corresponding cloud network VPC through the cloud data center network.

2. The data transmission method according to claim 1, characterized in that: The user data packet is received from the first user network and is encapsulated with the network identifier.

3. The data transmission method according to claim 1, characterized in that: Query the network connection resource identifier of the target network device to which the user data packet is to be sent based on the tenant ID, including: According to the tenant ID, obtain the tenant forwarding table; According to the destination address of the user data packet, the network connection resource identifier of the target network device is queried in the tenant forwarding table.

4. The data transmission method according to claim 1, characterized in that: Send user data packets to the target network device through the transmission network, including: The user data packet is sent to the second network device through the transmission network, and the second network device sends the user data packet to the second user network.

5. The data transmission method according to claim 4, characterized in that: The second network device sends the user data packet to the second user network, including: The second network device obtains the tenant forwarding table according to the tenant ID of the user data packet and queries the second port information and network identifier connected to the destination network in the tenant forwarding table according to the destination address of the user data packet; The user data packet is sent to the second user network via the second port.

6. A data transmission method, applied to a third network device, characterized in that: include: The third network device receives the data packet from the cloud data center network device; The third network device determines the tenant ID of the target user network according to the virtual private cloud VPC network ID in the data packet; The tenant ID of the target user network is encapsulated in a data packet and sent to the target network device through the transmission network.

7. A first network device, characterized in that: The first network device comprises: A first determining unit, determining a tenant ID of a user data packet; A query unit, querying the network connection resource identifier of the target network device to which the user data packet is to be sent according to the tenant ID; A first encapsulation unit encapsulates the tenant ID and the network connection resource identifier in a user data packet and sends the user data packet; The first determining unit is specifically configured to: Determine the tenant ID of the user data packet according to the first port information and the network identifier of the user data packet; The sending of the user data packet comprises: Send user data packets to the target network device through the transmission network; The step of sending the user data packet to the target network device through the transmission network includes: Sending the user data packet to the third network device through the transmission network, and the third network device sending the user data packet to the cloud data center network, and the cloud data center network forwarding the user data packet to the corresponding cloud network VPC; The third network device sends the user data packet to the cloud data center network, and the cloud data center network forwards the user data packet to the corresponding cloud network VPC, including: The third network device extracts the tenant ID in the user data packet and locates the corresponding tenant forwarding table; According to the destination address of the user data packet, query the third port information and network identifier of the virtual private cloud VPC access in the tenant forwarding table; Query the VPC network ID based on the third port information and network identifier of the VPC access; When the VPC network ID is the VNI of the VPC network, the third network device replaces the network identifier in the user data packet with the VNI, encapsulates the user data packet into a VxLAN data packet, and forwards the user data packet to the corresponding cloud network VPC through the cloud data center network; When the VPC network ID is a VLAN ID, the third network device replaces the network identifier in the user data packet with the VLAN ID; and forwards the user data packet to the corresponding cloud network VPC through the cloud data center network.

8. A second network device, characterized in that: The second network device includes: A receiving unit, receiving data packets from a network device in a cloud data center; A second determining unit determines a tenant ID of a target user network according to a virtual private cloud VPC network ID in the data packet; The second encapsulation unit encapsulates the tenant ID of the target user network in a data packet and sends it to the target network device through the transmission network.

9. A network system comprising a first user network, a first access network communicatively connected to the first user network, a first network device communicatively connected to the first access network, and a transmission network communicatively connected to the first network device, characterized in that: The first network device receives a user data packet from a first user network through a first access network, and determines a tenant ID of the user data packet; queries a network connection resource identifier of a target network device to which the user data packet is to be sent according to the tenant ID; encapsulates the tenant ID and the network connection resource identifier in the user data packet, and sends the user data packet through the transmission network; The step of determining the tenant ID of the user data packet includes: Determine the tenant ID of the user data packet according to the first port information and the network identifier of the user data packet; A third network device communicatively connected to the transmission network; a cloud data center network communicatively connected to the third network device; The third network device receives the user data packet sent by the transmission network, and sends the user data packet to the cloud data center network, and the cloud data center network forwards the user data packet to the corresponding cloud network VPC; The third network device sends the user data packet to the cloud data center network, and the cloud data center network forwards the user data packet to the corresponding cloud network VPC, including: The third network device extracts the tenant ID in the user data packet and locates the corresponding tenant forwarding table; According to the destination address of the user data packet, query the third port information and network identifier of the virtual private cloud VPC access in the tenant forwarding table; Query the VPC network ID based on the third port information and network identifier of the VPC access; When the VPC network ID is the VNI of the VPC network, the third network device replaces the network identifier in the user data packet with the VNI, encapsulates the user data packet into a VxLAN data packet, and forwards the user data packet to the corresponding cloud network VPC through the cloud data center network; When the VPC network ID is a VLAN ID, the third network device replaces the network identifier in the user data packet with the VLAN ID; and forwards the user data packet to the corresponding cloud network VPC through the cloud data center network.

10. The network system according to claim 9, characterized in that: Also includes: A second network device communicatively connected to the transmission network; a second access network communicatively connected to the second network device; The second network device receives the user data packet sent by the transmission network, and sends the user data packet to a second user network through a second access network.

11. The network system according to claim 9, characterized in that: Also includes: The third network device is also used to receive a data packet from a cloud data center network device; determine the tenant ID of the target user network based on the virtual private cloud VPC network ID in the data packet; encapsulate the tenant ID of the target user network in the data packet, and send it to the second network device or the first network device via the transmission network.

12. A communication device, characterized in that: include: A processor and a memory storing a computer program, wherein when the computer program is executed by the processor, the method according to any one of claims 1 to 5 or the method according to claim 6 is executed.

13. A computer-readable storage medium, characterized in that: Instructions are stored, and when the instructions are executed on a computer, the computer is caused to execute the method according to any one of claims 1 to 5 or the method according to claim 6.

Images