Methods, apparatus, equipment and media for implementing H-VPN hierarchical management of SRV6 BE networks

Abstract

The present disclosure provides a method, device, equipment and medium for implementing SRV6BE network H-VPN hierarchical management, relating to the technical field of communication. The method comprises: receiving a service route sent by a first device, the service route carrying a service label; selecting a target SID type from preset SID types based on a service scenario to which the service route belongs; generating a target service route based on the target SID type and the service route, the next hop of a SID corresponding to the target SID type in the target service route being the service label; and sending the target service route to a second device, so that the second device performs address table lookup forwarding according to the target service route. According to the embodiment of the present disclosure, the SPE does not need to deploy a VPN instance, can directly implement VPN SID exchange, and can implement H-VPN hierarchical management of EVPN L2 / L3 services of the SRV6BE network.

Description

Technical Field

[0001] This disclosure relates to the field of communication technology, and in particular to a method, apparatus, device and medium for implementing H-VPN hierarchical management of SRV6 BE networks. Background Technology

[0002] In an H-VPN+MPLS tunnel, after a UPE service packet arrives at the SPE, the inner service label is switched, and then the service label is superimposed on the outer tunnel and sent to the PE node. However, for an H-VPN+SRV6 tunnel, since the SPE does not have a VPN instance configured, there is currently no way to implement SRV6 service label (VPN SID) switching; therefore, there is no existing method for implementing H-VPN+SRV6 services in the industry. In related technologies, the Layer 2 services of SRV6 services all establish MP-BGP neighbors directly between the source and destination nodes, and the source and destination nodes directly advertise the VPN SID to the peer. This routing does not achieve hierarchical structure; it is an end-to-end VPN service.

[0003] It should be noted that the information disclosed in the background section above is only used to enhance the understanding of the background of this disclosure, and therefore may include information that does not constitute prior art known to those skilled in the art. Summary of the Invention

[0004] The inventors discovered through research that current EVPN L3VPN / VPWS / VPLS cannot achieve MPLS label-like switching due to the inability of SRV6 VPN SIDs to implement hierarchical H-VPN deployment. Therefore, they can only use point-to-point BGP neighbor establishment to achieve service deployment, and SRV6 routing needs to be fully connected across the network. This method increases the total number of routes across the network and is not conducive to hierarchical management.

[0005] As an example, the interpretation of the terms in this application is based on the definitions of the standard protocols of the China Communications Standards Association.

[0006] According to a first aspect of this disclosure, a method for implementing H-VPN hierarchical management of an SRV6 BE network is provided, applied to BGP of an SPE device, the method comprising:

[0007] Receive the service route sent by the first device, the service route carrying a service tag;

[0008] Based on the business scenario to which the business route belongs, select the target SID type from the preset SID types;

[0009] Based on the target SID type and service route, a target service route is generated. In the target service route, the next hop of the SID corresponding to the target SID type is the service label.

[0010] The target service route is sent to the second device so that the second device can look up the address in the target service route and forward it.

[0011] In one embodiment of this disclosure, the business scenario includes at least one of the following scenarios:

[0012] IPv4 H-VPN scenario, IPv6 H-VPN scenario, EVPN VPWS H-VPN scenario, EVPN VPLS H-VPN scenario.

[0013] In one embodiment of this disclosure, when the service routing belongs to an IPv4 H-VPN scenario, the first SID type is selected;

[0014] When the service routing belongs to the IPv6 H-VPN scenario, select the second SID type;

[0015] When the service routing belongs to the EVPN VPWS H-VPN scenario, select the third SID type;

[0016] When the service routing belongs to the EVPN VPLS H-VPN scenario, select the fourth SID type.

[0017] In one embodiment of this disclosure, if the first device is an NPE device, the second device is a UPE device; if the first device is a UPE device, the second device is an NPE device.

[0018] In one embodiment of this disclosure, routing the target service to the second device includes:

[0019] The target service route is sent to the second device via an update message.

[0020] In one embodiment of this disclosure, the method further includes:

[0021] Obtain the network segment route corresponding to the SRv6 SID through the IGP protocol.

[0022] In one embodiment of this disclosure, the second device matches the forwarding action according to the target SID type in the target service route, removes the IPv6 packet header, matches the VPN instance according to the SID corresponding to the target SID type, and forwards the packet by looking up the VPN instance routing table.

[0023] According to a second aspect of this disclosure, an apparatus for implementing H-VPN layered management of an SRV6 BE network is provided, applied to BGP of an SPE device, the apparatus comprising:

[0024] The routing message receiving module is used to receive service routes sent by the first device. The service routes carry service tags.

[0025] The judgment module is used to select the target SID type from the preset SID types based on the business scenario to which the business route belongs;

[0026] The data processing module is used to generate a target business route based on the target SID type and the business route. The next hop of the SID corresponding to the target SID type in the target business route is the business label.

[0027] The data sending module is used to send the target service route to the second device, so that the second device can look up the address in the target service route and forward it.

[0028] According to a third aspect of this disclosure, an electronic device is provided, comprising: a memory for storing instructions; and a processor for calling the instructions stored in the memory to implement the above-described method for implementing H-VPN hierarchical management of SRV6 BE networks.

[0029] According to a fourth aspect of this disclosure, a computer-readable storage medium is provided having computer instructions stored thereon, which, when executed by a processor, implement the above-described method for implementing H-VPN hierarchical management of an SRV6 BE network.

[0030] According to a fifth aspect of this disclosure, a computer program product is provided, which stores instructions that, when executed by a computer, cause the computer to implement the above-described method for implementing H-VPN hierarchical management of an SRV6 BE network.

[0031] According to a sixth aspect of this disclosure, a chip is provided, including at least one processor and an interface;

[0032] An interface is used to provide program instructions or data to at least one processor;

[0033] At least one processor is used to execute program instructions to implement the above-described method for implementing H-VPN hierarchical management of SRV6 BE networks.

[0034] The method, apparatus, device, and medium for implementing H-VPN hierarchical management of SRV6 BE networks provided in this disclosure, based on the service scenario to which the service route belongs, selects a target SID type from preset SID types, generates a target service route based on the target SID type and the service route, and the next hop of the SID corresponding to the target SID type in the target service route is the service label; the target service route is sent to a second device so that the second device can forward the route by looking up the address in the target service route. In this disclosure, the SPE does not need to deploy a VPN instance and can directly realize the exchange of VPN SIDs, thereby achieving H-VPN hierarchical management of EVPN L2 / L3 services in the SRV6 BE network.

[0035] It should be understood that the above general description and the following detailed description are exemplary and explanatory only, and are not intended to limit this disclosure. Attached Figure Description

[0036] The accompanying drawings, which are incorporated in and form a part of this specification, illustrate embodiments consistent with this disclosure and, together with the description, serve to explain the principles of this disclosure.

[0037] Obviously, the accompanying drawings described below are merely some embodiments of this disclosure. Those skilled in the art can obtain other drawings based on these drawings without any creative effort.

[0038] Figure 1 This diagram illustrates the EVPN, L3VPN, and HoVPN service architecture in related technologies.

[0039] Figure 2 This illustration shows a flowchart of a method for implementing H-VPN hierarchical management of an SRV6 BE network according to an embodiment of the present disclosure;

[0040] Figure 3 This diagram illustrates the mapping of END.BDT6.SID to SRV6-BE in an embodiment of this disclosure.

[0041] Figure 4 This diagram illustrates the generation of END.BDT6.SID in an embodiment of this disclosure.

[0042] Figure 5 This illustration shows a service forwarding diagram where the next hop for END.BDT6.SID is SRV6-BE in an embodiment of this disclosure.

[0043] Figure 6 This diagram illustrates an apparatus for implementing hierarchical management of an SRV6 BE network H-VPN according to an embodiment of the present disclosure.

[0044] Figure 7A structural block diagram of an electronic device according to an embodiment of the present disclosure is shown. Detailed Implementation

[0045] The exemplary implementation will now be described more fully with reference to the accompanying drawings.

[0046] It should be noted that the example implementation can be implemented in many forms and should not be construed as being limited to the examples set forth herein.

[0047] Most current network designs adopt traditional layered structures. For example, a typical metropolitan area network (MAN) has a three-layer model: core layer, aggregation layer, and access layer. BGP / MPLS IP VPN, however, is a flat model where all physical network entities (PEs) are on the same plane. To deploy VPN functionality in a layered network, BGP / MPLS IP VPN must be transformed from a flat model to a layered model. Therefore, the Hierarchy of VPN (HVPN) solution has been proposed.

[0048] HVPN solutions distribute the functionality of a PE (Pressure Equipment) across multiple PE devices. These PEs perform different roles, forming a hierarchical structure that collectively performs the functions of a single PE. Therefore, this solution is sometimes referred to as a layered PE solution.

[0049] SRv6 Segment is an IPv6 address format, often referred to as SRv6 SID (SegmentIdentifier). As shown in the figure, SRv6 SID consists of two parts: Locator and Function, in the format of Locator:Function. The Locator occupies the high bits of the IPv6 address, while the Function occupies the remaining part of the IPv6 address.

[0050] The Locator has a location function, so it must be unique within the SR domain. After a node is configured with a Locator, the system generates a Locator network segment route and distributes it within the domain via IGP. Other nodes in the network can locate this node through the Locator network segment route.

[0051] Function represents the device's instructions, which are pre-defined by the device. The Function section is used to instruct the SRv6 SID generation node to perform the corresponding functional operations.

[0052] Nodes that enable SRv6 maintain a local SID table, which contains all SRv6 SID information generated on the node. An SRv6 forwarding table (FIB) can be generated based on this table.

[0053] The Local SID table has the following uses:

[0054] 1. Define a locally generated SID, such as End.X SID.

[0055] 2. Specify the instructions to bind to these SIDs.

[0056] 3. Store forwarding information related to these instructions, such as the outgoing interface and the next hop.

[0057] In an H-VPN+MPLS tunnel, after a UPE service packet arrives at the SPE, the inner service label is switched, and then the service label is superimposed on the outer tunnel and sent to the PE node.

[0058] For H-VPN+SRV6 tunnels, since the SPE does not have a VPN instance configured, there is currently no way to implement SRV6 VPNSID exchange, and there is no existing method in the industry to implement H-VPN+SRV6 services. Currently, the Layer 2 services for SRV6 all establish MP-BGP neighbors directly between the source and destination nodes, and the source and destination nodes directly advertise the VPN SID to the peer. In this way, the routing does not achieve hierarchical structure, and it is an end-to-end VPN service.

[0059] The inventors discovered the following problems in the related technology:

[0060] Currently, EVPN L3VPN / VPWS / VPLS cannot achieve MPLS label-like switching due to the inability of IPv6 VPNSID to implement hierarchical H-VPN deployment. Therefore, it can only use point-to-point BGP neighbor establishment to achieve service deployment, and SRV6 routing needs to be connected across the entire network. This method increases the total number of routes across the network and is not conducive to hierarchical management.

[0061] For existing EVPN, L3VPN, and HoVPN services, by deploying VPN services on SPE nodes, traffic from both UPE and NPE ends up at the SPE before routing. However, after VPN deployment, the SPE nodes need to generate a large number of VPN service routes, placing significant pressure on the SPEs.

[0062] When configuring the EVPN L3VPN HoVPN model, services from both UPE and NPE nodes need to be routed to the SPE before being forwarded, resulting in low service forwarding efficiency.

[0063] like Figure 1 In the related technologies shown, the SRV6 EVPN L3VPN HOVPN service deploys VPN instances on SPE nodes. Services originating from both UPE and NPE are routed to the SPE before being checked against the routing forwarding mechanism. After deploying the VPN, the SPE node needs to maintain VPN service routes.

[0064] When configuring an EVPN, L3VPN, or HoVPN model, services from both UPE and NPE nodes need to be routed to the SPE before being forwarded, resulting in low service forwarding efficiency. After deploying the VPN, the SPE node needs to generate a large number of VPN service routes, placing significant pressure on the SPE.

[0065] In this embodiment, H-VPN hierarchical management of L2 / L3 services in SRV6 network is achieved by exchanging new service SIDs. SPE nodes directly exchange SRV6 VPN SIDs without needing to look up VPN service routes after the service is deployed. Furthermore, SPE does not need to deploy VPN instances, and services can directly exchange IPv6 addresses on SPE nodes, improving forwarding efficiency.

[0066] The following detailed description of this exemplary implementation method is provided in conjunction with the accompanying drawings and embodiments.

[0067] Figure 2 This disclosure illustrates a method for implementing H-VPN hierarchical management of an SRV6 BE network, applied to the BGP of an SPE device, such as... Figure 1 As shown, the NAME method provided in this embodiment includes the following steps:

[0068] S202, Receive the service route sent by the first device, the service route carries a service label;

[0069] S204, based on the business scenario to which the service route belongs, select the target SID type from the preset SID types;

[0070] S206, Based on the target SID type and service route, generate the target service route, where the next hop of the SID corresponding to the target SID type in the target service route is the service label;

[0071] S208, the target service route is sent to the second device so that the second device can look up the table and forward it according to the address in the target service route.

[0072] In some embodiments, the service route can be the VPNv6 route corresponding to the VPNv6 service.

[0073] It should be noted that the embodiments disclosed herein can be applied to H-VPN layered deployment scenarios carrying SRV6 EVPN VPWS / VPLS / L3VPN services on the network. These embodiments can meet the layered deployment requirements of SRV6 EVPN L2 and L3 services, reducing network load.

[0074] In this embodiment of the disclosure, the first device and the second device may be an NPE device and / or a UPE device.

[0075] As an example, in the case where the first device is an NPE device, the second device is a UPE device.

[0076] As another example, if the first device is a UPE device, the second device is an NPE device.

[0077] In some embodiments, the business scenario in S204 above may include at least one of the following scenarios:

[0078] IPv4 H-VPN scenario, IPv6 H-VPN scenario, EVPN VPWS H-VPN scenario, EVPN VPLS H-VPN scenario.

[0079] In the above S204, when the service scenario to which the service route belongs is an IPv4 H-VPN scenario, the first SID type is selected;

[0080] In the above S204, when the service scenario to which the service route belongs is an IPv6 H-VPN scenario, the second SID type is selected;

[0081] In the above S204, when the service scenario to which the service route belongs is an EVPN VPWS H-VPN scenario, the third SID type is selected;

[0082] In the above S204, when the service scenario to which the service route belongs is an EVPN VPLS H-VPN scenario, the fourth SID type is selected.

[0083] In the embodiments disclosed herein, the terms “first,” “second,” “third,” and “fourth,” etc., are used for descriptive purposes only and should not be construed as indicating or implying relative importance.

[0084] In the above example, the first SID type, the second SID type, the third SID type, and the fourth SID type are only used to represent different SID types. In specific implementations, SID types may also have other names.

[0085] As an example, the first SID type can be End.BDT4 SID, the second SID type can be End.BDT6 SID, the third SID type can be End.BDX2 SID, and the fourth SID type can be END.BDT2U SID.

[0086] End.BDT4 SID: End.BDT4 SID is used in SRV6 H-VPN (IPv4 private network) scenarios. It is used to replace a new next hop. The bottom layer of the SID LIST is the service label (VPN SID), and the outermost SID is updated to the DIP. Forwarding is then performed based on the new IPv6 address lookup table. End.BDT4 SID is used in IPv4 H-VPN scenarios.

[0087] End.BDT6 SID: End.BDT6 SID is used in SRV6 H-VPN (IPv6 private network) scenarios. It is used to replace a new next hop. The bottom layer of the SID LIST is the service label (VPN SID), and the outermost SID is updated to the DIP. Forwarding is then performed based on the new IPv6 address lookup table. End.BDT6 SID is used in IPv6 H-VPN scenarios.

[0088] End.BDX2 SID: End.BDX2 SID represents the scenario of SRV6 EVPN VPWS H-VPN service. It is used to replace a new next hop. The bottom layer of the SID LIST is the service label (VPN SID), and the outermost SID is updated to the DIP. Forwarding is then performed based on the new IPv6 address lookup table. End.BDX2 SID can be used in EVPN VPWS H-VPN scenarios.

[0089] END.BDT2U SID: End.BDT2U SID represents a scenario for SRV6 EVPN VPLS H-VPN services. It is used to replace the previous hop with a new one. The bottom layer of the SID list is the service label (VPN SID), and the outermost SID is updated to the DIP. Forwarding is then performed based on the new IPv6 address lookup table. It can be used in EVPN VPLS H-VPN scenarios.

[0090] The following section, using the above example, details the mapping of VPN SIDs.

[0091] For L3 VPNV6+SRV6 H-VPN services, the NPE advertises the service route to the SPE via MP-BGP, carrying VPN SID A. The SPE then locally requests a new END.BDT6 B using BGP.

[0092] For L3 VPNv4+SRV6 H-VPN services, the NPE advertises VPNv4 routes to the SPE via MP-BGP, carrying VPN SID A. The SPE then locally requests a new END.BDT4 B using BGP.

[0093] For the EVPN VPWS+SRV6 H-VPN service, the NPE advertises a Type 1 route to the SPE via MP-BGP, carrying the service SID A. The SPE then locally requests a new END.BDX2 B using BGP.

[0094] For EVPN VPLS+SRV6 H-VPN services, the NPE advertises Type 2 routes to the SPE via MP-BGP, carrying the service SID A. The SPE then locally requests a new END.BDT2U B using BGP.

[0095] For the SIDs END.BDT6, END.BDT4, END.BDX2, and END.BDT2U, the SPE pushes the SID to the UPE as the VPN SID for the service, and at the same time modifies the next hop of END.BDT6 / END.BDT4 / END.BDX2 / END.BDT2U to the service SID A.

[0096] As an example, Figure 3 The diagram shows a mapping where the next hop for END.BDT6.SID is SRV6-BE. The SPE receives NPE service routes, such as: private network route 2001::1 / 128, VPN SID A2:1::100;

[0097] SPE generates a new END.BDT6 SID A, and sets the next hop of this SID to A2:1::100, as follows:

[0098] SPE replaces NPE's VPNSID with END.BDT6.SID A, and sends END.BDT6.SID A as the new VPN SID to UPE via an update message.

[0099] This disclosure adds the following SID types: End.BDT4 SID, End.BDT6 SID, End.BDX2 SID, and END.BDT2U SID; VPN SID mapping processing: the VPN SID is mapped to the next hop of the newly added SID; the SPE traversal pushes the newly added End.BDT4 / End.BDT6 / End.BDX2 / END.BDT2U SID as the VPN SID to the UPE via an UPDATE message, and the UPE uses the received VPN SID as the corresponding service SID.

[0100] Tag push NPE->SPE->UPE: After the SPE device's BGP receives the NPE's service tag A, it dynamically generates an END.BDT6 / END.BDT4 / END.BDX2 / END.BDT2U tag and uses this tag as the service tag to push it to the UPE device via the BGPUPDATE message; the reverse process is the same, UPE->SPE->NPE.

[0101] Figure 4 This diagram illustrates the generation of END.BDT6.SID, which is the BGP protocol label implementation process in this embodiment of the disclosure. In this example, the service route is a VPNv6 route, such as... Figure 4 As shown, the BGP protocol label implementation process includes the following steps:

[0102] S401, configure SRv6 VPN.

[0103] The PE device is configured with SRv6 and SRv6 VPN, while the intermediate node SPE device does not need to be configured with SRV6 VPN.

[0104] S402 publishes SRv6 Locator routes to other PE devices.

[0105] NPE2 distributes SRv6 Locator routes to other PE devices.

[0106] S403, publish IPv6 routes.

[0107] S404, Install VPN instance route, generate VPNv6 route.

[0108] S405, publishes VPNv6 routes, carrying VPN SID.

[0109] S406, BGP locally requests END.BDT6, publishes VPNv6 route, carrying VPN SID (END.BDT6) to UPE.

[0110] S407 receives VPNv6 routes and installs VPN instance routes carrying SRv6 VPN SIDs.

[0111] Routing information exchange from CE to PE: CE2 advertises its local IPv6 routes to NPE. After learning the VPN routing information from CE2, NPE stores it in the VPN instance routing table. Simultaneously, it translates it into VPNv6 routes.

[0112] Route advertising between PEs: The NPE advertises the VPNv6 route to the SPE via MP-BGP, carrying VPN SID A; the SPE requests a new END.BDT6 SID B locally via BGP, and sets the next hop of SID B to VPNSID A.

[0113] After receiving the VPNv4 route, the UPE will use SID B as the VPN SID, and the VPN route will be sent out while associating it with SRv6 VPNSID B.

[0114] Figure 5 This diagram illustrates a service forwarding scenario where the next hop for END.BDT6.SID is SRV6-BE. In this example, the service route is a VPNv6 route. Figure 5 As shown, the service forwarding implementation process is as follows:

[0115] Configure the END SID on the NPE, and then publish it to the SPE and UPE via the IGP protocol.

[0116] UPE learns the network segment route A2:1:: / 64 corresponding to the SRv6 SID through the IGP protocol.

[0117] The NPE automatically generates the END.DT6 SID A2:1::100 for the VPN instance within the END SID range, and generates the LocalSID table.

[0118] After receiving the private IPv6 route published by CE2, NPE converts the private IPv6 route into a BGP VPNv6 route and publishes it to SPE. This route carries the SRv6 VPN SID attribute, which is the VPN instance's END.DT6 SID A2:1::100.

[0119] After receiving the VPNv6 route, the SPE generates a new END.BDT6 A3:1::1 and sets the next hop of SID A3 to A2:1::100. Then, SPEA3:1::1 is sent to the UPE as the VPNSID, carrying the SRV6 VPN SID A3:1::1.

[0120] After receiving the VPNv6 route, the UPE cross-references it to the corresponding VPN instance routing table, then converts it into a regular IPv6 route and publishes it to CE1.

[0121] refer to Figure 5 The data forwarding phase process is as follows:

[0122] CE1 sends a regular IPv6 message to UPE.

[0123] After receiving a private network packet from the interface bound to the VPN instance, the UPE searches the routing table of the corresponding VPN instance, matches the destination IPv6 prefix, and finds the associated SRv6 VPN SID and next-hop information. Then, it directly encapsulates the packet into an IPv6 packet using the SRv6VPN SID A3:1::1 as the destination address.

[0124] When the SPE receives the message, it resolves the outer DIP A3:1::1 to the local END.BDT6, then swaps the DIP to the next hop A2:1::100 of END.BDT6, and sends it to the NPE by looking up the routing table.

[0125] The NPE uses A2:1::100 to look up the Local SID table, matches the forwarding action corresponding to END.DT6 SID, removes the IPv6 header, and then matches the VPN instance based on END.DT6 SID, looks up the VPN instance routing table, and forwards the packet.

[0126] Furthermore, although the steps of the method in this disclosure are described in a specific order in the accompanying drawings, this does not require or imply that the steps must be performed in that specific order, or that all the steps shown must be performed to achieve the desired result.

[0127] In some embodiments, certain steps may be omitted, multiple steps may be combined into one step for execution, and / or one step may be broken down into multiple steps for execution.

[0128] This disclosure enables H-VPN hierarchical management of EVPN L2 / L3 services in SRV6 networks; SRV6 networks can deploy H-VPN services, SPE nodes can directly exchange VPN SIDs, and SPEs do not need to deploy VPN instances; by adding a new exchange type SID, EVPN L2 / L3VPN H-VPN is realized, allowing services to directly exchange IPv6 addresses and generate SRv6 policies on SPE nodes, improving forwarding efficiency.

[0129] Based on the same inventive concept, this disclosure also provides an apparatus for implementing H-VPN hierarchical management of SRV6 BE networks, as described in the following embodiments. Since the principle by which this apparatus solves the problem is similar to that of the method embodiments described above, the implementation of this apparatus embodiment can refer to the implementation of the method embodiments described above, and repeated details will not be elaborated further.

[0130] Figure 6 This disclosure illustrates an apparatus for implementing H-VPN hierarchical management of an SRV6 BE network, applied to the BGP of an SPE device, such as... Figure 6As shown, the apparatus 600 for implementing H-VPN hierarchical management of SRV6 networks includes:

[0131] The routing message receiving module 602 is used to receive the service route sent by the first device, and the service route carries a service label.

[0132] The judgment module 604 is used to select the target SID type from the preset SID types based on the business scenario to which the business route belongs.

[0133] The data processing module 606 is used to generate a target service route based on the target SID type and the service route, wherein the next hop of the SID corresponding to the target SID type in the target service route is the service label;

[0134] The data sending module 608 is used to send the target service route to the second device, so that the second device can look up the table and forward it according to the address in the target service route.

[0135] In some embodiments, the business scenario includes at least one of the following scenarios:

[0136] IPv4 H-VPN scenario, IPv6 H-VPN scenario, EVPN VPWS H-VPN scenario, EVPN VPLS H-VPN scenario.

[0137] In some embodiments, when the service scenario to which the service route belongs is an IPv4 H-VPN scenario, the determination module 604 selects the first SID type;

[0138] When the service routing belongs to the IPv6 H-VPN scenario, select the second SID type;

[0139] When the service routing belongs to the EVPN VPWS H-VPN scenario, select the third SID type;

[0140] When the service routing belongs to the EVPN VPLS H-VPN scenario, select the fourth SID type.

[0141] In some embodiments, if the first device is an NPE device, the second device is a UPE device; if the first device is a UPE device, the second device is an NPE device.

[0142] In some embodiments, the data sending module 608 sends the target service route to the second device, which may be done by sending the target service route to the second device via an update message.

[0143] In some embodiments, the apparatus 600 for implementing H-VPN hierarchical management of SRV6 networks may further include:

[0144] The acquisition module is used to obtain the network segment route corresponding to the SRv6 SID via the IGP protocol.

[0145] In some embodiments, the second device matches the forwarding action according to the target SID type in the target service route, removes the IPv6 packet header, matches the VPN instance according to the SID corresponding to the target SID type, and forwards the packet by looking up the VPN instance routing table.

[0146] The concepts of "first" and "second" mentioned in this disclosure are used only to distinguish different devices, modules or units, and are not used to define the order of functions performed by these devices, modules or units or their interdependencies.

[0147] Regarding the apparatus for implementing H-VPN hierarchical management of SRV6 networks in the above embodiments, the specific manner in which each module performs its operations has been described in detail in the embodiments concerning the method for implementing H-VPN hierarchical management of SRV6 networks, and will not be elaborated upon here.

[0148] This disclosure enables H-VPN hierarchical management of EVPN L2 / L3 services in SRV6 networks; SRV6 networks can deploy H-VPN services, SPE nodes can directly exchange VPN SIDs, and SPEs do not need to deploy VPN instances; by adding a new exchange type SID, EVPN L2 / L3VPN H-VPN is realized, allowing services to directly exchange IPv6 addresses and generate SRv6 policies on SPE nodes, improving forwarding efficiency.

[0149] It should be noted that although several modules or units of the device used for action execution are mentioned in the detailed description above, this division is not mandatory.

[0150] In fact, according to embodiments of this disclosure, the features and functions of two or more modules or units described above can be embodied in one module or unit. Conversely, the features and functions of one module or unit described above can be further divided and embodied by multiple modules or units.

[0151] Some of the block diagrams shown in the accompanying drawings are functional entities and do not necessarily correspond to physically or logically independent entities. These functional entities can be implemented in software, in one or more hardware modules or integrated circuits, or in different network and / or processor devices and / or microcontroller devices.

[0152] The following reference Figure 7 This describes the electronic device provided in the embodiments of this disclosure. Figure 7The electronic device 700 shown is merely an example and should not impose any limitation on the functionality and scope of use of the embodiments disclosed herein.

[0153] Figure 7 This diagram illustrates the architecture of an electronic device 700 provided in an embodiment of the present invention. Figure 7 As shown, the electronic device 700 includes, but is not limited to, at least one processor 710 and at least one memory 720.

[0154] Memory 720 is used to store instructions.

[0155] In some embodiments, memory 720 may include a readable medium in the form of volatile memory cells, such as random access memory (RAM) 7201 and / or cache memory 7202, and may further include read-only memory (ROM) 7203.

[0156] In some embodiments, the memory 720 may also include a program / utility 7204 having a set (at least one) program module 7205, such program module 7205 including but not limited to: an operating system, one or more application programs, other program modules, and program data, each or some combination of these examples may include an implementation of a network environment.

[0157] In some embodiments, the memory 720 may store an operating system. This operating system may be a real-time operating system (RTX), such as Linux, UNIX, Windows, or OS X.

[0158] In some embodiments, the memory 720 may also store data.

[0159] As an example, processor 710 can read data stored in memory 720, which may be stored at the same memory address as the instruction, or the data may be stored at a different memory address than the instruction.

[0160] Processor 710 is configured to invoke instructions stored in memory 720 to implement the steps described in the "Exemplary Methods" section above, according to various exemplary embodiments of this disclosure. For example, processor 710 may execute the following steps of the above method embodiments:

[0161] Receive the service route sent by the first device, the service route carrying a service tag;

[0162] Based on the business scenario to which the business route belongs, select the target SID type from the preset SID types;

[0163] Based on the target SID type and service route, a target service route is generated. In the target service route, the next hop of the SID corresponding to the target SID type is the service label.

[0164] The target service route is sent to the second device so that the second device can look up the address in the target service route and forward it.

[0165] It should be noted that the processor 710 described above can be a general-purpose processor or a special-purpose processor. The processor 710 may include one or more processing cores, and the processor 710 executes various functional applications and data processing by running instructions.

[0166] In some embodiments, processor 710 may include a central processing unit (CPU) and / or a baseband processor.

[0167] In some embodiments, the processor 710 may determine an instruction based on the priority identifier and / or function category information carried in each control instruction.

[0168] In this disclosure, the processor 710 and the memory 720 can be configured separately or integrated together.

[0169] As an example, the processor 710 and memory 720 can be integrated on a single board or a system-on-a-chip (SOC).

[0170] like Figure 7 As shown, the electronic device 700 is embodied in the form of a general-purpose computing device. The electronic device 700 may also include a bus 730.

[0171] Bus 730 can represent one or more of several types of bus structures, including a memory bus or memory controller, peripheral bus, graphics acceleration port, processor, or a local bus using any of the various bus structures.

[0172] Electronic device 700 can also communicate with one or more external devices 740 (e.g., keyboard, pointing device, Bluetooth device, etc.), and with one or more devices that enable a user to interact with electronic device 700, and / or with any device that enables electronic device 700 to communicate with one or more other computing devices (e.g., router, modem, etc.). Such communication can be performed through input / output (I / O) interface 750.

[0173] Furthermore, the electronic device 700 can also communicate with one or more networks (such as local area networks (LANs), wide area networks (WANs), and / or public networks, such as the Internet) via the network adapter 760.

[0174] like Figure 7 As shown, the network adapter 760 communicates with other modules of the electronic device 700 via the bus 730.

[0175] It should be understood that, although not shown in the figure, other hardware and / or software modules may be used in conjunction with the electronic device 700, including but not limited to: microcode, device drivers, redundant processing units, external disk drive arrays, RAID systems, tape drives, and data backup storage systems.

[0176] It is understood that the structure illustrated in the embodiments of this disclosure does not constitute a specific limitation on the electronic device 700. In other embodiments of this disclosure, the electronic device 700 may include more than Figure 7 This may involve more or fewer components, or combining certain components, or splitting certain components, or different component arrangements. Figure 7 The components shown can be implemented in hardware, software, or a combination of both.

[0177] This disclosure also provides a computer-readable storage medium storing computer instructions thereon, which, when executed by a processor, implement the method for implementing H-VPN hierarchical management of SRV6 BE networks as described in the above method embodiments.

[0178] In this embodiment of the disclosure, the computer-readable storage medium is a computer instruction that can be sent, propagated, or transmitted for use by or in conjunction with an instruction execution system, apparatus, or device.

[0179] As an example, a computer-readable storage medium is a non-volatile storage medium.

[0180] In some embodiments, more specific examples of computer-readable storage media in this disclosure may include, but are not limited to: electrical connections having one or more wires, portable computer disks, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fiber, portable compact disk read-only memory (CD-ROM), optical storage devices, magnetic storage devices, USB flash drives, portable hard drives, or any suitable combination of the foregoing.

[0181] In this embodiment of the disclosure, the computer-readable storage medium may include data signals propagated in baseband or as part of a carrier wave, wherein computer instructions (readable program code) are carried.

[0182] The transmitted data signal can take many forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination thereof.

[0183] Any readable medium other than a readable storage medium

[0184] In some examples, computational instructions contained on a computer-readable storage medium may be transmitted using any suitable medium, including but not limited to wireless, wired, optical fiber, RF, etc., or any suitable combination thereof.

[0185] This disclosure also provides a computer program product that stores instructions that, when executed by a computer, cause the computer to implement the method for implementing H-VPN hierarchical management of SRV6BE networks as described in the above method embodiments.

[0186] The aforementioned instructions can be program code. In practice, the program code can be written using any combination of one or more programming languages.

[0187] Programming languages ​​include object-oriented programming languages—such as Java and C++—as well as conventional procedural programming languages—such as the "C" language or similar programming languages.

[0188] The program code can be executed entirely on the user's computing device, partially on the user's computing device, as a standalone software package, partially on the user's computing device and partially on a remote computing device, or entirely on a remote computing device or server.

[0189] In cases involving remote computing devices, the remote computing devices can be connected to user computing devices via any type of network, including local area networks (LANs) or wide area networks (WANs), or they can be connected to external computing devices (e.g., via the Internet using an Internet service provider).

[0190] This disclosure also provides a chip, including at least one processor and an interface;

[0191] An interface is used to provide program instructions or data to at least one processor;

[0192] At least one processor is used to execute program instructions to implement the method for implementing H-VPN hierarchical management of SRV6 BE networks as described in the above method embodiments.

[0193] In some embodiments, the chip may further include a memory for storing program instructions and data, the memory being located within or outside the processor.

[0194] Those skilled in the art will understand that all or part of the steps of the above embodiments can be specifically implemented in the following forms: a completely hardware implementation, a completely software implementation (including firmware, microcode, etc.), or a combination of hardware and software implementations, which can be collectively referred to as "circuit", "module" or "system".

[0195] Other embodiments of this disclosure will readily occur to those skilled in the art upon consideration of the specification and practice of the invention disclosed herein.

[0196] This disclosure is intended to cover any variations, uses, or adaptations of this disclosure that follow the general principles of this disclosure and include common knowledge or customary techniques in the art not disclosed herein. The description and examples are to be considered exemplary only, and the true scope and spirit of this disclosure are indicated by the appended claims.

Claims

1. A method for implementing hierarchical management of H-VPN in SRV6 BE networks, characterized in that, BGP applied to SPE devices, the method includes: Receive a service route sent by a first device, wherein the service route carries a service tag; Based on the business scenario to which the service route belongs, select the target SID type from the preset SID types; Based on the target SID type and the service route, a target service route is generated, wherein the next hop of the SID corresponding to the target SID type in the target service route is the service tag; The target service route is sent to the second device so that the second device can look up the address in the target service route and forward it.

2. The method according to claim 1, characterized in that, Business scenarios include at least one of the following: IPv4 H-VPN scenario, IPv6 H-VPN scenario, EVPN VPWS H-VPN scenario, EVPN VPLS H-VPN scenario.

3. The method according to claim 2, characterized in that, When the service route belongs to the IPv4 H-VPN scenario, select the first SID type; When the service scenario to which the service route belongs is an IPv6 H-VPN scenario, select the second SID type; When the service route belongs to the EVPN VPWS H-VPN scenario, select the third SID type; When the service route belongs to the EVPN VPLS H-VPN scenario, select the fourth SID type.

4. The method according to claim 1, characterized in that, When the first device is an NPE device, the second device is a UPE device; when the first device is a UPE device, the second device is an NPE device.

5. The method according to claim 1, characterized in that, Sending the target service route to the second device includes: The target service route is sent to the second device via an update message.

6. The method according to claim 1, characterized in that, The method further includes: Obtain the network segment route corresponding to the SRv6 SID through the IGP protocol.

7. The method according to claim 1, characterized in that, The second device matches the forwarding action according to the target SID type in the target service route, removes the IPv6 packet header, matches the VPN instance according to the SID corresponding to the target SID type, and forwards the packet by looking up the VPN instance routing table.

8. An apparatus for implementing hierarchical management of SRV6 BE network H-VPN, characterized in that, BGP for use in SPE equipment, the device comprising: A routing message receiving module is used to receive a service route sent by a first device, wherein the service route carries a service tag; The determination module is used to select the target SID type from the preset SID types based on the business scenario to which the business route belongs; The data processing module is used to generate a target service route based on the target SID type and the service route, wherein the next hop of the SID corresponding to the target SID type in the target service route is the service tag; The data sending module is used to send the target service route to the second device, so that the second device can look up the address in the target service route and forward it.

9. An electronic device, characterized in that, include: Memory, used to store instructions; A processor is configured to invoke instructions stored in the memory to implement the method for implementing H-VPN hierarchical management of SRV6 BE network as described in any one of claims 1-7.

10. A computer-readable storage medium storing computer instructions thereon, characterized in that, When the computer instructions are executed by the processor, they implement the method for implementing H-VPN hierarchical management of SRV6 BE networks as described in any one of claims 1-7.

Images