A distributed system and a traffic diversion method

Abstract

An embodiment of the present application provides a distributed system and a traffic splitting method, which relate to the technical field of network and infrastructure security. The distributed system includes an interface board, a switching board, and a plurality of service boards; the switching board is respectively connected to the interface board and the service boards; the interface board and the switching board are configured with a preset stacking rule, and the preset stacking rule forms the interface board and the switching board into a stacking system, and configures the interfaces of the interface board and the interfaces of the switching board as the stacking ports of the stacking system, and the stacking system is configured with a preset ACL rule and a preset LAG group; traffic forwarding operations are performed between the interface board and the switching board according to the preset ACL rule and the preset LAG group. The distributed system can achieve the technical effect of reducing the complexity of traffic splitting.

Description

Technical Field

[0001] This application relates to the field of network and infrastructure security technologies. Specifically, it relates to a distributed system and a traffic diversion method. Background Art

[0002] Currently, with the development of network technologies and the continuous improvement of the functional and performance requirements for network devices, network devices with a multi-board distributed processing architecture have emerged. A network device with a double-star-shaped multi-board distributed processing architecture includes multiple service boards, a switching board, and interface boards. Both the switching board and the interface boards contain switching chips and CPUs (central processing units), and the service boards only contain CPUs. All service boards jointly provide data processing functions. The interface boards provide device panel interfaces through the switching chips. The switching board serves as the connection hub between the service boards and the interface boards and is connected to all service boards and interface boards. The packets received at the panel ports of the interface boards need to be diverted to each service board to achieve load sharing among multiple service boards. The realization of the diversion function generally relies on hardware such as ASICs (Application Specific Integrated Circuits), logic devices, or switching chips. Considering the flexibility, efficiency, and comprehensive cost of diversion, the switching chip is an ideal diversion hardware. The function modules related to diversion include ACLs (Access Control Lists), LAGs (Link Aggregation Groups), LBs (Load Balancing), and stacking, etc.

[0003] In the prior art, generally, the upstream traffic entering from the panel ports is load-shared among all service boards after two-stage diversions. The upstream traffic entering from the panel ports first undergoes the first-stage diversion by the switching chip on the interface board, and the packets are evenly distributed to all switching boards. After receiving the packets, the switching boards undergo the second-stage diversion by the switching chips on the switching boards, and the packets are evenly distributed to all service boards. Through the two-stage diversions by the interface boards and the switching boards, load sharing of the traffic among multiple service boards is achieved.

[0004] However, with this technical solution of two - stage traffic splitting, the switching chips on the interface board and the switching board both need to be configured with ACL rules, LAG groups, and LB algorithms, and when board card online / offline events occur, the LAG group members need to be dynamically maintained. The downstream traffic after being processed by the service board also needs to be redirected twice by ACLs before it can be sent out from the corresponding panel port. Therefore, this traffic splitting solution has the following defects: First, both the upstream and downstream traffic need to be redirected and forwarded twice by ACLs, which causes a great waste of the limited ACL resources of the switching chips; Second, in order to implement the session backup function, the device needs to implement a software traffic splitting algorithm that is consistent with the hardware traffic splitting result of the switching chips, and this two - stage traffic splitting solution greatly increases the complexity of the software traffic splitting algorithm; Third, all switching chips need to maintain their own LAG group member interfaces to handle different board card online / offline events, increasing the complexity of chip management. Summary of the Invention

[0005] The purpose of the embodiments of the present application is to provide a distributed system, a traffic splitting method, an electronic device, and a computer - readable storage medium, which can achieve the technical effect of reducing the complexity of traffic splitting.

[0006] In a first aspect, the embodiments of the present application provide a distributed system, which includes an interface board, a switching board, and multiple service boards;

[0007] The switching board is respectively connected to the interface board and the service boards;

[0008] The interface board and the switching board are configured with a preset stacking rule, and the preset stacking rule forms a stacking system with the interface board and the switching board, and configures the interfaces of the interface board and the interfaces of the switching board as the stacking ports of the stacking system. The stacking system is configured with a preset ACL rule and a preset LAG group;

[0009] According to the preset ACL rule and the preset LAG group, perform traffic forwarding operations between the interface board and the switching board.

[0010] In the above implementation process, the distributed system configures a preset stacking rule between the interface board and the switching board, so as to form a stacking system by combining the interface board and the switching board; when the interface board receives uplink traffic data, based on the preset ACL rule and the preset LAG group configured by the stacking system, the uplink traffic data is redirected to the preset LAG group according to the preset ACL rule, and the first shunt of the uplink traffic data is completed based on the preset LAG group, and the uplink traffic data is directly shunted and then forwarded to the service board by the switching board; thus, the operations of the first shunt of the traffic of the interface board and the second shunt of the traffic of the switching board are avoided, and the uplink traffic data only passes through one shunt to realize the load sharing function of multiple service boards; thus, the distributed system can achieve the technical effect of reducing the shunt complexity.

[0011] Further, the interfaces of the interface board include panel ports and the uplink ports of the interface board, the interfaces of the switching board include the downlink ports of the switching board and the uplink ports of the switching board, an external device is connected to the panel port, the uplink ports of the interface board are connected to the downlink ports of the switching board, and the uplink ports of the switching board are connected to the multiple service boards.

[0012] Further, the interface board is configured with an LB module for load sharing. The interface board manages the downlink ports and the uplink ports of the switching board based on the preset LAG group, and after receiving the uplink traffic data, the interface board redirects it to the preset LAG group based on the LB module and the preset ACL rule.

[0013] In the above implementation process, the uplink ports of the switching board are used as the member interfaces of the preset LAG group of the interface board. After the uplink traffic data is redirected to the preset LAG group through the preset ACL rule, load sharing of the LB module is performed on the member interfaces of the preset LAG group and then forwarded to the service board for processing to achieve load sharing of the traffic among multiple service boards; thus, in the above manner, the uplink traffic data received by the panel port of the interface board is evenly load-shared to each service board through one shunt, avoiding the secondary traffic shunt of the switching board.

[0014] Further, the switching board configures the preset ACL rule, and after receiving the downlink traffic data, the switching board redirects it to the panel port of the interface board based on the preset ACL rule.

[0015] In the above implementation process, the downlink traffic data can be transferred out from the panel port of the interface board after one ACL redirection and forwarding by the switching board.

[0016] In a second aspect, an embodiment of the present application provides a traffic shunting method for a distributed system, which is applied to the distributed system according to any one of the first aspects. The method includes:

[0017] The interface board obtains the uplink traffic data to be split.

[0018] The uplink traffic data is redirected to a preset LAG group based on a preset ACL rule, and the uplink stacking port information and uplink outgoing interface information of the uplink traffic data are obtained.

[0019] The interface board forwards the uplink traffic data to the switching board according to the uplink stacking port information.

[0020] The switching board forwards the uplink traffic data to the multiple service boards according to the uplink outgoing interface information.

[0021] In the above implementation process, the uplink traffic data arrives at the interface board and is redirected to a preset LAG group based on a preset ACL rule; thus, according to the stacking group configuration of the preset LAG group, the uplink stacking port information and uplink outgoing interface information are obtained, and the uplink traffic data is sequentially forwarded to the switching board and the service board.

[0022] Further, the step in which the switching board forwards the uplink traffic data to the multiple service boards according to the uplink outgoing interface information includes:

[0023] Determine the uplink port of the switching board according to the uplink outgoing interface information.

[0024] Forward the uplink traffic data to the multiple service boards through the uplink port of the switching board.

[0025] In the above implementation process, after receiving the uplink traffic data, the switching board forwards the uplink traffic data from the corresponding uplink port of the switching board to the service board for processing according to the relevant configuration of the stacking group.

[0026] Further, the step in which the interface board forwards the uplink traffic data to the switching board according to the uplink stacking port information includes:

[0027] Determine the uplink port of the interface board according to the uplink stacking port information.

[0028] Forward the uplink traffic data to the switching board through the uplink port of the interface board.

[0029] In the above implementation process, when the interface board forwards the uplink traffic data, it determines the uplink port of the interface board according to the uplink stacking port information, and thus forwards the uplink traffic data from the corresponding uplink port of the interface board to the switching board according to the stacking group configuration.

[0030] In a third aspect, an embodiment of the present application provides a traffic splitting method for a distributed system, which is applied to the distributed system according to any one of the first aspects. The method includes:

[0031] The switching board obtains the downlink traffic data forwarded by the service board;

[0032] The downlink traffic data is redirected based on a preset ACL rule to obtain downlink stacking port information;

[0033] The switching board forwards the downlink traffic data to the interface board according to the downlink stacking port information;

[0034] The interface board transfers the downlink traffic data out from the corresponding panel port according to the downlink outgoing interface information.

[0035] In the above implementation process, after the downlink traffic data is sent from the service board to the switching board, it will be hit by the pre-configured preset ACL rule and forwarded according to the redirection action of the preset ACL rule; according to the downlink stacking port information, the downlink traffic data is forwarded from the corresponding stacking port to the interface board; after receiving the downlink traffic data, the interface board transfers the packet out from the corresponding panel port according to the relevant configuration of the stacking group.

[0036] In a fourth aspect, an electronic device provided by an embodiment of the present application includes: a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the computer program, the steps of the method described in any item of the first aspect are implemented.

[0037] In a fifth aspect, a computer-readable storage medium provided by an embodiment of the present application has instructions stored thereon. When the instructions are run on a computer, the computer is caused to execute the method described in any item of the first aspect.

[0038] In a sixth aspect, a computer program product provided by an embodiment of the present application, when run on a computer, causes the computer to execute the method described in any item of the first aspect.

[0039] Other features and advantages disclosed in the present application will be described in the subsequent specification, or, some features and advantages can be inferred from the specification or determined without doubt, or can be known by implementing the above technologies disclosed in the present application.

[0040] To make the above objects, features, and advantages of the present application more obvious and understandable, the following specific embodiments are given and described in detail in conjunction with the accompanying drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0041] To more clearly illustrate the technical solutions of the embodiments of the present application, the following will briefly introduce the accompanying drawings required for the embodiments of the present application. It should be understood that the following drawings only show some embodiments of the present application and should not be regarded as limiting the scope. For those of ordinary skill in the art, without creative efforts, other related drawings can also be obtained based on these drawings.

[0042] Figure 1 Schematic diagram of the structure of the distributed system provided by the embodiments of the present application;

[0043] Figure 2 Schematic flowchart of a traffic splitting method for a distributed system provided by the embodiments of the present application;

[0044] Figure 3 Schematic flowchart of another traffic splitting method for a distributed system provided by the embodiments of the present application;

[0045] Figure 4 Block diagram of the structure of an electronic device provided by the embodiments of the present application. Detailed implementation manners

[0046] The following will describe the technical solutions in the embodiments of the present application in conjunction with the accompanying drawings in the embodiments of the present application.

[0047] It should be noted that similar reference numerals and letters indicate similar items in the following drawings. Therefore, once an item is defined in one drawing, it does not need to be further defined and explained in subsequent drawings. At the same time, in the description of the present application, terms such as "first" and "second" are only used for distinguishing descriptions and cannot be understood as indicating or implying relative importance.

[0048] The embodiments of the present application provide a distributed system, a traffic splitting method, an electronic device, and a computer-readable storage medium, which can be applied to the traffic splitting process of a double-star multi-board distributed device architecture; the distributed system configures a preset stacking rule between the interface board and the switching board, thereby forming a stacking system by combining the interface board and the switching board; when the interface board receives uplink traffic data, based on the preset ACL rule and the preset LAG group configured by the stacking system, the uplink traffic data is redirected to the preset LAG group according to the preset ACL rule, and the first splitting of the uplink traffic data is completed based on the preset LAG group, and the uplink traffic data is directly split and then forwarded by the switching board to the service board; thus, the operations of the first splitting of the traffic on the interface board and the second splitting of the traffic on the switching board are avoided, and the uplink traffic data only undergoes one splitting to achieve the load sharing function of multiple service boards; thus, the distributed system can achieve the technical effect of reducing the complexity of splitting.

[0049] Please refer to Figure 1 ,Figure 1 It is a schematic structural diagram of a distributed system provided by an embodiment of the present application. The distributed system includes an interface board, a switching board, and multiple service boards.

[0050] Exemplarily, the switching board is respectively connected to the interface board and the service boards.

[0051] Exemplarily, the interface board is connected to the switching board, and the switching board is respectively connected to multiple service boards; after receiving the upstream traffic data, the interface board shunts the upstream traffic data to multiple service boards through the switching board to achieve load sharing.

[0052] Exemplarily, after receiving the downstream traffic data of the service board, the switching board forwards the downstream traffic data to the corresponding external device through the interface board.

[0053] Exemplarily, the interface board and the switching board are configured with a preset stacking rule. The preset stacking rule forms a stacking system with the interface board and the switching board, and configures the interfaces of the interface board and the switching board as the stacking ports of the stacking system. The stacking system is configured with a preset ACL rule and a preset LAG group.

[0054] Exemplarily, traffic forwarding operations between the interface board and the switching board are performed according to the preset ACL rule and the preset LAG group; optionally, it includes an upstream ACL and a downstream ACL, which are respectively used for forwarding upstream traffic data and downstream traffic data.

[0055] In some embodiments, the upstream ACL and the preset LAG group are set on the interface board; the downstream ACL is set on the switching board.

[0056] Exemplarily, the distributed system configures a preset stacking rule between the interface board and the switching board, thereby forming a stacking system with the interface board and the switching board; when the interface board receives the upstream traffic data, based on the preset ACL rule and the preset LAG group configured by the stacking system, the upstream traffic data is redirected to the preset LAG group according to the preset ACL rule, and the first shunt of the upstream traffic data is completed based on the preset LAG group, and the upstream traffic data is directly shunted and then forwarded by the switching board to the service boards; thus, the operations of the first shunt of the traffic of the interface board and the second shunt of the traffic of the switching board are avoided, and the load sharing function of multiple service boards is achieved with only one shunt of the upstream traffic data; thus, the distributed system can achieve the technical effect of reducing the complexity of shunting.

[0057] Exemplarily, the interfaces of the interface board include a panel port and an interface board uplink port, the interfaces of the switching board include a switching board downlink port and a switching board uplink port, the external device is connected to the panel port, the interface board uplink port is connected to the switching board downlink port, and the switching board uplink port is connected to multiple service boards.

[0058] Exemplarily, the interface board is configured with an LB module, which is used for load sharing. The interface board manages the downlink port and uplink port of the switch board based on the preset LAG group. After receiving the uplink traffic data, the interface board redirects it to the preset LAG group based on the LB module and the preset ACL rules.

[0059] For example, the uplink port on the switch board is used as a member interface of the preset LAG group of the interface board. After the uplink traffic data is redirected to the preset LAG group through the preset ACL rules, it will be load-balanced by the LB module on the member interface of the preset LAG group and then forwarded to the service board for processing, so as to realize load sharing of traffic among multiple service boards; thus, through the above method, the uplink traffic data received by the panel port of the interface board is evenly distributed to each service board through one diversion, avoiding secondary traffic diversion of the switch board.

[0060] Exemplarily, the switch board is configured with a preset ACL rule, and after receiving the downlink traffic data, the switch board redirects the data to the panel port of the interface board based on the preset ACL rule.

[0061] For example, the downstream traffic data is redirected and forwarded once by the ACL on the switch board, and can then be forwarded out of the panel port on the interface board.

[0062] Exemplarily, the interface board and the switching board each include a switching chip; after the interface board and the switching board form a stacking system, the interface of the other chip can be added to the management of the own chip, and the interfaces of other chips in the stacking system can be used as member interfaces of the LAG group of the own chip or the destination interface of the ACL redirection action; the distributed system adopted by the embodiment of the present application can use one diversion in a dual-star distributed architecture to evenly distribute the uplink traffic data entering the panel port of the interface board to multiple business boards, while realizing the load sharing function of multiple business boards, and solving many defects caused by multiple diversions; at the same time, by setting the LB module, the uplink traffic data is load balanced when forwarded to the business board through the switching board.

[0063] See Figure 2 , Figure 2 A flow chart of a flow diversion method for a distributed system provided in an embodiment of the present application, wherein the flow diversion method for a distributed system is applied to Figure 1 The distributed system shown in FIG. 1 includes a traffic diversion method of the distributed system including:

[0064] S110: The interface board obtains the uplink traffic data to be diverted;

[0065] S120: Redirecting the uplink traffic data to the preset LAG group based on the preset ACL rule, and obtaining the uplink stack port information and the uplink outbound interface information of the uplink traffic data;

[0066] S130: The interface board forwards the upstream traffic data to the switch board according to the upstream stack port information.

[0067] S140: The switch board forwards the upstream traffic data to multiple service boards according to the upstream outbound interface information.

[0068] For example, the uplink traffic data reaches the interface board and is redirected to the preset LAG group based on the preset ACL rules; thus, according to the stacking group configuration of the preset LAG group, the uplink stacking port information and the uplink outbound interface information are obtained, and the uplink traffic data is forwarded to the switching board and the service board in turn.

[0069] Exemplarily, S140: the step of forwarding, by the switch board, uplink traffic data to multiple service boards according to the uplink outbound interface information includes:

[0070] Determine the uplink port on the switch board based on the uplink outbound interface information;

[0071] Forwards uplink traffic data to multiple service boards through the switch board uplink port.

[0072] Exemplarily, after receiving the uplink traffic data, the switch board forwards the uplink traffic data from the corresponding switch board uplink port to the service board for processing according to the relevant configuration of the stacking group.

[0073] Exemplarily, S130: the step of forwarding, by the interface board, the uplink traffic data to the switch board according to the uplink stack port information includes:

[0074] Determine the uplink port on the interface board based on the uplink stack port information;

[0075] Forwards uplink traffic data to the switch board through the uplink port on the interface board.

[0076] Illustratively, when the interface board forwards uplink traffic data, it determines the uplink port on the interface board according to the uplink stack port information, and thus forwards the uplink traffic data from the corresponding uplink port on the interface board to the switch board according to the stacking group configuration.

[0077] See Figure 3 , Figure 3 A flow chart of another method for distributing traffic in a distributed system provided in an embodiment of the present application, wherein the method for distributing traffic in a distributed system is applied to Figure 1 The distributed system shown in FIG. 1 includes a traffic diversion method of the distributed system including:

[0078] S210: The switch board obtains the downlink traffic data forwarded by the service board;

[0079] S220: Downstream traffic data is redirected based on preset ACL rules, and downstream stack port information is obtained;

[0080] S230: The switching board forwards the downstream traffic data to the interface board according to the downstream stacking port information;

[0081] S240: The interface board forwards the downstream traffic data out from the corresponding front panel port according to the downstream outgoing interface information.

[0082] Exemplarily, after the downstream traffic data is sent from the service board to the switching board, it will be hit by the pre-configured preset ACL rule and forwarded according to the redirection action of the preset ACL rule; according to the downstream stacking port information, the downstream traffic data is forwarded from the corresponding stacking port to the interface board; after receiving the downstream traffic data, the interface board forwards the packet out from the corresponding front panel port according to the relevant configuration of the stacking group.

[0083] Optionally, the downstream interface of the switching board can be determined according to the downstream stacking port information, and the downstream traffic data is forwarded to the interface board through the downstream interface of the switching board.

[0084] Combined with Figures 1 to 3 , Figure 1 For the distributed system and traffic splitting method provided by the embodiments of the present application, it can be applied to the up and down traffic forwarding of the double-star distributed architecture to achieve load sharing of multiple service boards; in some implementation scenarios, based on the firewall device of the multi-board distributed architecture, a splitting scheme proposed by the present application is described. By configuring the switching chips on the interface board and the switching board, the upstream traffic is evenly distributed to multiple service boards after one splitting, achieving the function of load sharing of multiple service boards. At the same time, the downstream traffic only needs to go through one ACL redirection action to be forwarded out from the front panel port; exemplarily, according to the method described in detail in the embodiments of the present application, the specific process steps are as follows:

[0085] 1. When the system starts, the switching chips on the interface board and the switching board perform chip initialization operations according to the predefined configuration;

[0086] 2. The interface board chip and the switching board chips configure the stacking-related content, and form a stacking system with the interface board chips and all switching board chips. The interface board chips are independent of each other, and the switching board chips are independent of each other, and do not need to form a stacking system;

[0087] 3. After adding the upstream interface of the switching board to the management of the interface board chip, create a LAG group on the interface board chip, add all the upstream interfaces of the switching board to the LAG group, and configure the hash splitting algorithm of the LB module;

[0088] 4. Create an ACL rule on the interface board chip to match the upstream traffic entering the front panel port, and specify the action of the ACL rule as redirecting to the LAG group;

[0089] 5. Add all the front panel ports to the management of the switching board chip;

[0090] 6. Create an ACL rule on the switching board chip to match the downstream traffic and specify the action of the ACL rule as redirecting to the panel port;

[0091] So far, the configuration for guiding the forwarding of upstream and downstream traffic has been completed. The following is the specific forwarding process of the traffic:

[0092] 1. When the upstream packet arrives at the interface board chip, it is redirected to the LAG group by the ACL rule. After being shunted by the LAG group, the outgoing interface of this packet is obtained as the upstream link port of the switching board (the traffic has been evenly load-shared to all service boards after this shunting);

[0093] 2. When the interface board chip forwards the packet and finds that the outgoing interface of the packet is not the interface of this chip, it will forward the packet from the corresponding stacking port to the switching board chip according to the stacking group configuration;

[0094] 3. After receiving the packet, the switching board chip forwards the packet from the corresponding upstream link port of the switching board to the service board for processing according to the relevant stacking group configuration.

[0095] 4. After the downstream packet is sent from the service board to the switching board chip, it will be hit by the pre-configured ACL rule. According to the redirection action of the ACL rule, the packet is forwarded. It is found that the outgoing interface (panel port) of the packet is not the interface of this chip. Then it will query the stacking group configuration and forward the packet from the corresponding stacking port to the interface board chip;

[0096] 5. After receiving the packet, the interface board chip forwards the packet from the corresponding panel port according to the relevant stacking group configuration.

[0097] In summary, the distributed system and traffic shunting method provided by the embodiments of the present application have at least the following beneficial effects:

[0098] 1. Both upstream and downstream traffic only need to be redirected and forwarded by ACL once, saving the ACL resources of the switching chip;

[0099] 2. The software shunting algorithm only needs to implement shunting once, reducing the complexity of the software shunting algorithm;

[0100] 3. Only the interface board chip needs to maintain the LAG group, reducing the complexity of chip management and maintenance.

[0101] The present application also provides an electronic device. Please refer to Figure 4 , Figure 4A structural block diagram of an electronic device provided by an embodiment of the present application. The electronic device may include a processor 510, a communication interface 520, a memory 530, and at least one communication bus 540. Among them, the communication bus 540 is used to implement direct connection communication between these components. Among them, the communication interface 520 of the electronic device in the embodiment of the present application is used to communicate signaling or data with other node devices. The processor 510 may be an integrated circuit chip with signal processing capabilities.

[0102] The above-mentioned processor 510 may be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it may also be a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field-programmable gate array (FPGA), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components. It can implement or execute the various methods, steps, and logic block diagrams disclosed in the embodiments of the present application. The general-purpose processor may be a microprocessor or the processor 510 may also be any conventional processor, etc.

[0103] The memory 530 may be, but is not limited to, a random access memory (RAM), a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), etc. The memory 530 stores computer-readable instructions. When the computer-readable instructions are executed by the processor 510, the electronic device can execute the above Figures 2 to 3 Each step involved in the method embodiment.

[0104] Optionally, the electronic device may further include a storage controller and an input / output unit.

[0105] The memory 530, the storage controller, the processor 510, the peripheral interface, and the input / output unit are directly or indirectly electrically connected to each other to achieve data transmission or interaction. For example, these components can be electrically connected to each other through one or more communication buses 540. The processor 510 is used to execute the executable module stored in the memory 530, such as a software function module or a computer program included in the electronic device.

[0106] The input / output unit is used to provide the user with the ability to create tasks and create a start optional period or a preset execution time for the task to achieve the interaction between the user and the server. The input / output unit can be, but is not limited to, a mouse, a keyboard, etc.

[0107] It can be understood that Figure 4 The structure shown is only schematic, and the electronic device may further include more or fewer components than those shown Figure 4 in the figure, or have a different configuration from that shown Figure 4 in the figure. Figure 4 Each component shown in the figure can be implemented by hardware, software, or a combination thereof.

[0108] The embodiment of the present application also provides a storage medium, on which instructions are stored. When the instructions are run on a computer, the computer program, when executed by a processor, implements the method described in the method embodiment. To avoid repetition, it will not be elaborated here.

[0109] The present application also provides a computer program product, which, when run on a computer, causes the computer to execute the method described in the method embodiment.

[0110] In several embodiments provided by the present application, it should be understood that the disclosed devices and methods can also be implemented in other ways. The device embodiments described above are only illustrative. For example, the flowcharts and block diagrams in the drawings show the possible architectures, functions, and operations of the devices, methods, and computer program products according to multiple embodiments of the present application. In this regard, each block in the flowchart or block diagram may represent a module, a program segment, or a part of code, and the module, program segment, or part of code contains one or more executable instructions for implementing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the blocks may occur in a different order from that marked in the drawings. For example, two consecutive blocks can actually be executed substantially in parallel, and they can sometimes be executed in the reverse order, depending on the functions involved. It should also be noted that each block in the block diagram and / or flowchart, as well as the combination of blocks in the block diagram and / or flowchart, can be implemented by a dedicated hardware-based system for performing the specified functions or actions, or can be implemented by a combination of dedicated hardware and computer instructions.

[0111] In addition, in each embodiment of the present application, the various functional modules can be integrated together to form an independent part, or each module can exist separately, or two or more modules can be integrated to form an independent part.

[0112] When the above-mentioned functions are implemented in the form of software function modules and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, or a part of this technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions for causing a computer device (which may be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the methods described in various embodiments of this application. The aforementioned storage medium includes: various media that can store program codes, such as USB flash drives, mobile hard disks, read-only memories (ROM, Read-Only Memory), random access memories (RAM, Random Access Memory), magnetic disks, or optical discs.

[0113] The above are only the embodiments of this application and are not used to limit the protection scope of this application. For those skilled in the art, this application can have various changes and modifications. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of this application shall be included in the protection scope of this application. It should be noted that similar reference numerals and letters represent similar items in the following drawings. Therefore, once an item is defined in one drawing, it does not need to be further defined and explained in subsequent drawings.

[0114] The above is only the specific implementation manner of this application, but the protection scope of this application is not limited thereto. Any person skilled in the art can easily think of changes or replacements within the technical scope disclosed by this application, and all should be covered by the protection scope of this application. Therefore, the protection scope of this application should be subject to the protection scope of the claims.

[0115] It should be noted that in this article, relational terms such as first and second are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any actual relationship or order between these entities or operations. Moreover, the term "comprising", "including" or any other variant thereof is intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements not only includes those elements, but also includes other elements not expressly listed, or further includes elements inherent to such process, method, article or device. Without further limitations, an element defined by the statement "including a..." does not exclude the existence of additional identical elements in the process, method, article or device including the said element.

Claims

1. A distributed system, characterized in that, The distributed system includes an interface board, a switch board and multiple service boards; The switch board is connected to the interface board and the service board respectively; The interface board and the switch board are configured with preset stacking rules, wherein the preset stacking rules form the interface board and the switch board into a stacking system, and configure the interfaces of the interface board and the interfaces of the switch board as stack ports of the stacking system, and the stacking system is configured with preset ACL rules and a preset LAG group; Performing traffic forwarding between the interface board and the switch board according to the preset ACL rule and the preset LAG group; The interface board is configured with an LB module, which is used for load balancing. The interface board manages the downlink port and the uplink port of the switch board based on the preset LAG group. After receiving the uplink traffic data, the interface board redirects it to the preset LAG group based on the LB module and the preset ACL rules. After the LB module load is shared on the member interfaces of the preset LAG group, it is forwarded to the service board for processing.

2. The distributed system according to claim 1, wherein The interface of the interface board includes a panel port and an interface board uplink port, the interface of the switch board includes a switch board downlink port and a switch board uplink port, the external device is connected to the panel port, the interface board uplink port is connected to the switch board downlink port, and the switch board uplink port is connected to the multiple business boards.

3. The distributed system according to claim 1, characterized in that, The switch board is configured with the preset ACL rule, and after receiving the downlink traffic data, the switch board redirects the data to the panel port of the interface board based on the preset ACL rule.

4. A traffic diversion method for a distributed system, characterized in that, Applied to the distributed system according to any one of claims 1 to 3, the method comprises: The interface board obtains the uplink traffic data to be diverted; The uplink traffic data is redirected to a preset LAG group based on a preset ACL rule, and the uplink stack port information and the uplink outbound interface information of the uplink traffic data are obtained; The interface board forwards the upstream traffic data to the switch board according to the upstream stack port information; The switch board forwards the uplink traffic data to the multiple service boards according to the uplink outbound interface information.

5. The traffic diversion method of the distributed system according to claim 4, characterized in that The step of forwarding, by the switching board, the uplink traffic data to the multiple service boards according to the uplink outbound interface information includes: Determine the uplink port on the switch board according to the uplink outbound interface information; The uplink traffic data is forwarded to the multiple service boards through the uplink port on the switch board.

6. The traffic diversion method of the distributed system according to claim 4, wherein The step of forwarding, by the interface board, the upstream traffic data to the switch board according to the upstream stack port information includes: Determine the uplink port on the interface board according to the uplink stack port information; The uplink traffic data is forwarded to the switch board through the uplink port on the interface board.

7. A traffic diversion method for a distributed system, characterized in that, Applied to the distributed system according to any one of claims 1 to 3, the method comprises: The switch board obtains the downlink traffic data forwarded by the service board; The downstream traffic data is redirected based on the preset ACL rules to obtain the downstream stack port information; The switch board forwards the downstream traffic data to the interface board according to the downstream stack port information; The interface board transfers the downstream traffic data out of the corresponding panel port according to the downstream outbound interface information.

8. An electronic device, characterized in that, include: A memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the computer program, the steps of the traffic diversion method of the distributed system according to any one of claims 4 to 7 are implemented.

9. A computer-readable storage medium, characterized in that, Instructions are stored on the computer-readable storage medium, and when the instructions run on a computer, the computer is caused to execute the traffic diversion method of the distributed system according to any one of claims 4 to 7.

Images