VLAN-based message forwarding method, device, and medium

Abstract

The present invention discloses a VLAN-based message forwarding method, device, and medium, belonging to the field of chip control technology. The method is used to address the technical problem that existing VLAN-based demand chips are unable to deny access to non-mapped messages and unauthorized users, or prohibit forwarding, when the messages do not carry VLAN ID tags and do not hit the VLAN mapping table. The method includes: identifying the VLAN ID tag and the VLAN mapping table of the VLAN-based chip to obtain message action information; if the message action information is a miss, reserving IVC resources for an IVC resource table entry in the VLAN to obtain a reserved IVC table entry; mapping the port number in the missed VLAN mapping table to the reserved IVC table entry based on the table index in the reserved IVC table entry; and modifying the VLAN ID tag to prohibit forwarding of non-mapped message information.

Description

Technical Field

[0001] The present application relates to the field of chip control, and in particular to a VLAN-based message forwarding method, device, and medium. Background Art

[0002] Service providers' business customers often require specific VLAN IDs. VLANs requested by different customers of the same network service provider may overlap, and user traffic passing through the service provider's equipment may also be mixed. By assigning each customer a unique VLAN ID and mapping it to their own VLAN ID, communications for customers with different applications can be separated. For unauthorized customers who don't match the VLAN mapping table, the prohibit forwarding function can be used to filter traffic, thereby ensuring that only specific customers are served.

[0003] Existing virtual LAN services often correspond to the needs of specific VLAN ID users. If some chips do not implement messages that do not carry VLAN ID tags and do not hit the VLAN mapping table, it is difficult to deny access to non-mapped messages and unauthorized users and prohibit forwarding. This is not conducive to users' complete control of VLAN-based demand chips and is likely to cause additional occupation of other chip resources such as ACL. Summary of the Invention

[0004] The embodiments of the present application provide a VLAN-based message forwarding method, device, and medium for solving the following technical problem: the existing VLAN-based demand chip has difficulty in denying access to and prohibiting forwarding of non-mapped messages and unauthorized users when the messages do not carry VLAN ID tags and do not hit the VLAN mapping table, which is not conducive to the user's complete control over the demand chip and causes additional occupation of other chip resources such as ACL.

[0005] The embodiments of this application adopt the following technical solutions:

[0006] On the one hand, an embodiment of the present application provides a VLAN-based message forwarding method, comprising: identifying a VLAN ID tag and a VLAN mapping table on a VLAN-based chip to obtain message action information; wherein, the message action information is information on whether an action field in a message information packet is hit; if the message action information is miss information, reserving an IVC resource for a tail resource table item of an IVC resource table item in the VLAN to obtain a reserved IVC table item; mapping a port number in a missed VLAN mapping table to the reserved IVC table item according to an item index in the reserved IVC table item; and modifying and configuring the VLAN ID tag through the mapped reserved IVC table item to prohibit forwarding of non-mapped message information.

[0007] In order to solve the technical problem that the LOOKUP_MISS discard function cannot be provided in a chip based on VLAN (virtual local area network), in the embodiment of the present application, a tail VLAN mapping table is reserved according to the message forwarding or access situation that does not carry a VLAN ID tag and does not hit the VLAN mapping table in the chip, and combined with the IVC table entry, forwarding is prohibited under the Lookup-Miss function, that is, by using the reserved IVC table entry, access is denied to unauthorized users or forwarding of messages in the virtual network is prohibited, thereby better realizing user control function without occupying other chip resources such as ACL.

[0008] In a feasible implementation, a VLAN-based chip is identified with respect to a VLAN ID tag and a VLAN mapping table to obtain message action information, specifically comprising: based on a built-in message forwarding logic of the VLAN chip, identifying and judging the VLAN ID tag and the VLAN mapping table corresponding to the message forwarding information; if the VLAN chip does not carry the corresponding VLAN ID tag and the VLAN mapping table at the VLAN header position is not hit, then the action field of the message information packet in the message forwarding information is miss information; otherwise, the action field of the message information packet in the message forwarding information is hit information; and the miss information and the hit information are determined as message action information.

[0009] In a feasible implementation manner, if the message action information is miss information, the tail resource table item of the IVC resource table item in the VLAN is reserved for IVC resources to obtain a reserved IVC table item, specifically including: identifying the message action information as miss information; determining the head position of the VLAN mapping table item in the VLAN according to the miss data length of the table item in the VLAN mapping table of the miss information; determining the remaining table item positions of the VLAN mapping table item as the tail resource table item according to the head table item position of the VLAN mapping table item; reserving the tail resource table item for a specific resource table item to obtain the reserved IVC table item; wherein, the reserved IVC table item is a TCAM table, which is used for VLAN mapping, QINQ mapping and modification of VLAN ID tags.

[0010] In a feasible implementation, before mapping the port number in the missed VLAN mapping table to the reserved IVC table entry according to the table index in the reserved IVC table entry, the method further includes: generating a corresponding table entry index value based on the table entry index in the reserved IVC table entry; arranging the table entry index values ​​by numerical value to obtain an arrangement order of the table entry index values; wherein the arrangement order is arranged from small to large; determining the priority order of the table entry index according to the arrangement order of the item index values; wherein, the larger the table entry index value, the smaller the corresponding priority order.

[0011] In a feasible implementation, mapping the port number in the missed VLAN mapping table to the reserved IVC table entry according to the table entry index in the reserved IVC table entry specifically includes: inputting a preset LOOKUP-MISS table entry into the reserved IVC table entry; wherein LOOKUP is a LOOKUP function; the LOOKUP-MISS table entry is used for forwarding and discarding the message information packet to be executed; based on the priority order of the table entry index, determining the LOOKUP-MISS table entry as the lowest priority; and mapping the port number in the missed VLAN mapping table to a low-priority LOOKUP-MISS table entry in the reserved IVC table entry; wherein the port number is the port number of the VLAN in the IVC.

[0012] In a feasible embodiment, before modifying and configuring the VLAN ID tag through the mapped reserved IVC table entry, the method further includes: modifying and configuring the port matching table entry related to the search key in the mapped reserved IVC table entry to a unique matching port number; wherein the unique matching port number corresponds one-to-one to the port number in the missed VLAN mapping table.

[0013] In a feasible implementation, the VLAN ID tag is modified and configured using the mapped reserved IVC table entry, specifically including: modifying the VLAN ID tag in the reserved IVC table entry by using an action instruction in the mapped reserved IVC table entry to obtain a specified VLAN ID tag; and intercepting access forwarding of the message information packet using the specified VLAN ID tag to prohibit forwarding of non-mapped message information.

[0014] In a feasible implementation manner, the action instruction is an action instruction for changing a VLAN ID field and adding and / or deleting a VLAN ID tag in the reserved IVC table entry.

[0015] In a second aspect, an embodiment of the present application further provides a VLAN-based message forwarding device, the device comprising: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions that can be executed by the at least one processor so that the at least one processor can execute a VLAN-based message forwarding method described in any of the above embodiments.

[0016] In a third aspect, an embodiment of the present application further provides a non-volatile computer storage medium, characterized in that the storage medium is a non-volatile computer-readable storage medium, and the non-volatile computer-readable storage medium stores at least one program, each of which includes instructions, and when the instructions are executed by the terminal, the terminal executes a VLAN-based message forwarding method described in any of the above-mentioned embodiments.

[0017] The present application provides a VLAN-based message forwarding method, device, and medium. To solve the technical problem of the lack of a LOOKUP_MISS discard function in VLAN (virtual local area network)-based chips, a tail VLAN mapping table is reserved based on the forwarding or access of messages that do not carry VLAN ID tags and do not hit the VLAN mapping table in the chip. In combination with IVC entries, forwarding is prohibited under the Lookup-Miss function. That is, by reserving IVC entries, access can be denied to unauthorized users or forwarding of messages in the virtual network can be prohibited, thereby better implementing user control functions without occupying other chip resources such as ACLs. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the following briefly introduces the drawings required for the embodiments or the description of the prior art. Obviously, the drawings described below are only some embodiments described in the present application. For those skilled in the art, other drawings can be obtained based on these drawings without creative work. In the drawings:

[0019] Figure 1 A flow chart of a VLAN-based message forwarding method provided in an embodiment of the present application;

[0020] Figure 2 A schematic diagram of the structure of a VLAN-based message forwarding device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0021] In order to enable those skilled in the art to better understand the technical solutions in this application, the following will clearly and completely describe the technical solutions in the embodiments of this application in conjunction with the drawings in the embodiments of this application. Obviously, the embodiments described are only part of the embodiments of this application, not all of the embodiments. Based on the embodiments of this specification, all other embodiments obtained by ordinary technicians in this field without making creative efforts should fall within the scope of protection of this application.

[0022] The present application embodiment provides a VLAN-based message forwarding method, such as Figure 1 As shown, the VLAN-based message forwarding method specifically includes steps S101-S104:

[0023] S101: Identify the VLAN ID tag and the VLAN mapping table on the VLAN-based chip to obtain message action information, wherein the message action information is information on whether the action field in the message information packet is matched.

[0024] Specifically, the VLAN chip's built-in message forwarding logic identifies and determines the VLAN ID tag and VLAN mapping table corresponding to the message forwarding information. If the VLAN chip does not carry the corresponding VLAN ID tag and the VLAN mapping table in the VLAN header is not matched, the action field of the message information packet in the message forwarding information is a miss. Otherwise, the action field of the message information packet in the message forwarding information is a hit. The miss and hit information are determined as message action information.

[0025] In one embodiment, the VLAN ID tag corresponding to the message forwarding information in the VLAN chip and the VLAN mapping table are first determined to correspond to the VLAN mapping table entries. That is, the message information in the chip that does not carry a VLAN ID tag and does not hit the VLAN mapping table is identified and determined. For example, the CTC8180 series chip can use chip logic to set the message that does not hit the VLAN mapping table to prohibit forwarding. For other TEALTEK 9310 series chips, only the prohibition of forwarding based on the failure to hit the message S-VID / C-VID is supported. For messages that do not carry a VLAN ID tag and do not hit the VLAN mapping table, it is not possible to directly prohibit forwarding. It is possible to universally identify the VLAN ID tag and VLAN mapping table in the chip, reducing the situation where the forwarding of unmapped message information cannot be prohibited.

[0026] S102: If the action information of the message is miss information, the tail resource entry of the IVC resource entry in the VLAN is reserved as an IVC resource to obtain a reserved IVC entry.

[0027] Specifically, the action information of the message is identified as miss information, and the head position of the VLAN mapping table entry in the VLAN is determined according to the miss data length of the miss information in the VLAN mapping table entry.

[0028] Furthermore, based on the position of the header entry in the VLAN mapping entry, the remaining entries in the VLAN mapping entry are determined as tail resource entries. The tail resource entries are configured to reserve specific resource entries, resulting in reserved IVC entries. The reserved IVC entries are TCAM entries used for VLAN mapping, QINQ mapping, and VLAN ID tag modification.

[0029] It should be noted that IVC (Ingress Vlan Conversion) is a chip-specific resource table entry, essentially a TCAM table, mainly used for VLAN mapping, QINQ and other VLAN tag modification functions.

[0030] In one embodiment, IVC entry resources are reserved at the end of the IVC entry, and the action for the reserved IVC entry is modified to deny forwarding. Only when no VLAN mapping entry at the head entry position matches the result, the reserved entry at the end, i.e., the reserved IVC entry, is matched, thereby preventing forwarding in the event of a Lookup-Miss.

[0031] S103: Map the port number in the missed VLAN mapping table to the reserved IVC entry according to the entry index in the reserved IVC entry.

[0032] Specifically, based on the entry index in the reserved IVC entry, a corresponding entry index value is generated. The entry index values ​​are numerically arranged to determine an order of entry index values. The order is from smallest to largest. Based on the order of entry index values, a priority order for the entry index is determined. A larger entry index value corresponds to a lower priority order.

[0033] Furthermore, a preset LOOKUP-MISS table entry is input into the reserved IVC table entry, where LOOKUP is the LOOKUP function. The LOOKUP-MISS table entry is used to discard the forwarding of the message information packet to be executed.

[0034] Furthermore, based on the priority order of the entry index, the LOOKUP-MISS entry is assigned the lowest priority. The port number in the missed VLAN mapping table is mapped to a low-priority LOOKUP-MISS entry in the reserved IVC entry. The port number is the port number of the VLAN in the IVC. The priority of the reserved IVC entry is determined by the entry index value in the entry index, with the index from small to large corresponding to the priority from high to low.

[0035] It should be noted that an IVC consists of two main parts: the search key uses data and mask to search for keywords, including information such as port numbers, inner and outer VLAN IDs, and the action field sets the specified action for packets matching the key, including actions such as changing the VLAN ID field and adding or removing VLAN ID tags.

[0036] As a feasible implementation, based on the data structure of IVC, resources can be reserved at the end of the reserved IVC entry. The LOOKUP-MISS entry is placed in the reserved IVC entry to ensure the lowest priority. The reserved IVC entry is only used after all VLAN mapping entries at the head of the entry have failed to match.

[0037] In one embodiment, the LOOKUP_MISS (LOOKUP discard function) discard function is enabled on a VLAN port P. That is, in order to discard all packets that do not match the VLAN mapping table, the port number of port P is first mapped to a low-priority LOOKUP-MISS entry in the reserved IVC table to ensure that the port number can be matched in the reserved IVC table.

[0038] S104: Modify and configure the VLAN ID tag through the mapped reserved IVC table entry to prohibit forwarding of non-mapped message information.

[0039] Specifically, the port matching table entry related to the search key in the mapped reserved IVC table entry is modified and configured as a unique matching port number, wherein the unique matching port number corresponds one-to-one with the port number in the missed VLAN mapping table.

[0040] Furthermore, the VLAN ID tag in the reserved IVC entry is modified numerically by the action instruction in the mapped IVC entry to obtain a specified VLAN ID tag. By using the specified VLAN ID tag, the message information packet is intercepted for access forwarding, thereby prohibiting the forwarding of non-mapped message information.

[0041] In one implementation, the port matching entry for the search key in the mapped reserved IVC entry is modified and configured to a unique matching port number. The VLAN ID tag value in the action instruction of the reserved IVC entry is then modified to 0. Because a VLAN ID tag of 0 is illegal, the modified message will not be forwarded or access by unauthorized users will be denied, thereby achieving the forwarding function of discarding the LOOKUP_MISS message.

[0042] In one implementation, for example, if packet 1 directly matches a VLAN mapping table, its VLAN ID tag is modified to the corresponding value, and the packet then enters the next round of forwarding. Packet 2, which does not match any VLAN mapping table and does not carry a VLAN ID tag, is directly mapped to a reserved IVC entry, and its VLAN ID tag value is modified to an illegal value, namely, VID 0, thereby preventing forwarding of the packet or denying access to unauthorized users.

[0043] In addition, the embodiment of the present application also provides a VLAN-based message forwarding device, such as Figure 2 As shown, the VLAN-based message forwarding device 200 specifically includes:

[0044] At least one processor 201. And a memory 202 in communication with the at least one processor 201; wherein the memory 202 stores instructions executable by the at least one processor 201, so as to enable the at least one processor 201 to execute:

[0045] Identify the VLAN ID tag and VLAN mapping table of the VLAN-based chip to obtain message action information; wherein the message action information is information on whether the action field in the message information packet is matched;

[0046] If the action information of the message is a miss, the tail resource entry of the IVC resource entry in the VLAN is reserved for the IVC resource to obtain a reserved IVC entry;

[0047] Map the port number in the missed VLAN mapping table to the reserved IVC entry according to the entry index in the reserved IVC entry;

[0048] The VLAN ID tag is modified and configured through the reserved IVC table entry after mapping to prohibit forwarding of non-mapped message information.

[0049] The present application provides a VLAN-based message forwarding method, device, and medium. To solve the technical problem of the lack of a LOOKUP_MISS discard function in VLAN (virtual local area network)-based chips, a tail VLAN mapping table is reserved based on the forwarding or access of messages that do not carry VLAN ID tags and do not hit the VLAN mapping table in the chip. In combination with IVC entries, forwarding is prohibited under the Lookup-Miss function. That is, by reserving IVC entries, access can be denied to unauthorized users or forwarding of messages in the virtual network can be prohibited, thereby better implementing user control functions without occupying other chip resources such as ACLs.

[0050] The various embodiments in this application are described in a progressive manner. Similar parts between the various embodiments can be referred to in conjunction with each other. Each embodiment focuses on the differences between the other embodiments. In particular, the device and non-volatile computer storage medium embodiments are generally similar to the method embodiments, so their descriptions are relatively simple. For relevant parts, refer to the descriptions of the method embodiments.

[0051] The devices and media provided in the embodiments of the present application correspond one-to-one to the methods. Therefore, the devices and media also have similar beneficial technical effects to their corresponding methods. Since the beneficial technical effects of the methods have been described in detail above, the beneficial technical effects of the devices and media will not be repeated here.

[0052] Those skilled in the art will appreciate that the embodiments of the present application can be provided as methods, systems, or computer program products. Therefore, the present application can adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment in combination with software and hardware. Moreover, the present application can adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to magnetic disk storage, CD-ROM, optical storage, etc.) that contain computer-usable program code.

[0053] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the steps in the process. Figure 1 a process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0054] Memory may include non-permanent storage in a computer-readable medium, random access memory (RAM) and / or non-volatile memory in the form of read-only memory (ROM) or flash RAM. Memory is an example of a computer-readable medium.

[0055] Computer-readable media includes permanent and non-permanent, removable and non-removable media that can be implemented by any method or technology to store information. The information can be computer-readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disc read-only memory (CD-ROM), digital versatile disc (DVD) or other optical storage, magnetic cassettes, magnetic disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined herein, computer-readable media does not include transitory computer-readable media (transitory media), such as modulated data signals and carrier waves.

[0056] The foregoing description describes specific embodiments of the present application. Other embodiments are within the scope of the appended claims. In some cases, the actions or steps recited in the claims can be performed in an order different from that described in the embodiments and still achieve the desired results. Furthermore, the processes depicted in the accompanying drawings do not necessarily require the specific order shown or the sequential order to achieve the desired results. In certain embodiments, multitasking and parallel processing are also possible or may be advantageous.

[0057] The foregoing is merely an embodiment of the present application and is not intended to limit the present application. For those skilled in the art, the embodiments of the present application may have various modifications and variations. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the embodiments of the present application should be included within the scope of the claims of the present application.

Claims

1. A VLAN-based message forwarding method, characterized in that: The method comprises: Identify the VLAN ID tag and VLAN mapping table of the VLAN-based chip to obtain message action information, including: Based on the built-in message forwarding logic of the VLAN chip, the VLAN ID tag and VLAN mapping table corresponding to the message forwarding information are identified and judged; If the VLAN chip does not carry the corresponding VLAN ID tag and the VLAN mapping table at the VLAN header position is not hit, the action field of the message information packet in the message forwarding information is miss information; otherwise, the action field of the message information packet in the message forwarding information is hit information; Determining the miss information and the hit information as message action information; wherein the message action information is information on whether the action field in the message information packet is hit; If the message action information is miss information, the tail resource table entry of the IVC resource table entry in the VLAN is reserved for IVC resources to obtain a reserved IVC table entry; Mapping the port number in the missed VLAN mapping table to the reserved IVC entry according to the entry index in the reserved IVC entry, specifically including: Entering a preset LOOKUP-MISS table entry into the reserved IVC table entry; wherein LOOKUP is a LOOKUP function; and the LOOKUP-MISS table entry is used for forwarding and discarding the message information packet to be executed; Based on the priority order of the entry indexes, the LOOKUP-MISS entry is determined to have the lowest priority; and the port number in the missed VLAN mapping table is mapped to the low-priority LOOKUP-MISS entry in the reserved IVC entry; wherein the port number is the port number of the VLAN in the IVC; Modify and configure the port matching table entry related to the search key in the reserved IVC table entry after mapping to a unique matching port number; wherein the unique matching port number has a one-to-one correspondence with the port number in the missed VLAN mapping table; Modifying and configuring the VLAN ID tag through the mapped reserved IVC table entry to prohibit forwarding of non-mapped message information specifically includes: Modify the value of the VLAN ID tag in the reserved IVC table entry by using the action instruction in the mapped reserved IVC table entry to obtain a specified VLAN ID tag; The message information packet is access forwarded and intercepted by the designated VLAN ID tag, so as to prohibit forwarding of non-mapped message information.

2. The VLAN-based message forwarding method according to claim 1, wherein: If the message action information is miss information, the tail resource table entry of the IVC resource table entry in the VLAN is reserved for IVC resources to obtain a reserved IVC table entry, specifically including: Identifying the message action information as miss information; Determine the head position of the VLAN mapping table entry in the VLAN according to the miss data length of the entry in the VLAN mapping table according to the miss information; According to the head table entry position of the VLAN mapping table entry, the remaining table entry positions of the VLAN mapping table entry are determined as tail resource table entries; The tail resource table entry is reserved for a specific resource table entry to obtain the reserved IVC table entry; wherein the reserved IVC table entry is a TCAM table used for VLAN mapping, QINQ mapping and modification of VLAN ID tags.

3. The VLAN-based message forwarding method according to claim 1, wherein: Before mapping the port number in the missed VLAN mapping table to the reserved IVC entry according to the entry index in the reserved IVC entry, the method further includes: Based on the entry index in the reserved IVC entry, generating a corresponding entry index value; Arranging the index values ​​of the table items by numerical value to obtain an arrangement order of the index values ​​of the table items; wherein the arrangement order is arranged from small to large; The priority order of the table entry index is determined according to the arrangement order of the item index values; wherein, the larger the table entry index value, the smaller the corresponding priority order.

4. The VLAN-based message forwarding method according to claim 1, wherein: The action instruction is an action instruction for changing the VLAN ID field and adding and / or deleting the VLAN ID tag in the reserved IVC table entry.

5. A VLAN-based message forwarding device, characterized in that: The device comprises: at least one processor; and, a memory communicatively connected to the at least one processor; wherein, The memory stores instructions that can be executed by the at least one processor, so that the at least one processor can execute the VLAN-based message forwarding method according to any one of claims 1 to 4.

6. A non-volatile computer storage medium, characterized in that The storage medium is a non-volatile computer-readable storage medium, which stores at least one program. Each of the programs includes instructions. When the instructions are executed by the terminal, the terminal executes the VLAN-based message forwarding method according to any one of claims 1 to 4.

Images