Data processing method, device, apparatus and readable storage medium

Abstract

Embodiments of the present application provide a data processing method, device and equipment and readable storage medium, the method comprising: after receiving the first user's online message, determining the public address segment of the second network element for network address translation and the private address of the first user; generating the NAT user table item of the first user according to the public address segment of the second network element and the private address of the first user; sending the NAT user table item to the second network element, the NAT user table item is used to generate the NAT session table item of the data plane message of the first user, and the NAT session table item is used for NAT conversion of the data plane message of the first user to access the Internet.

Description

Technical Field

[0001] This application relates to the field of communication technology, specifically to a data processing method, apparatus, device, and readable storage medium. Background Technology

[0002] A Broadband Remote Access Server (BRAS) is a new type of access gateway for broadband network applications. Located at the edge layer of the backbone network, it can enable users to access broadband IP / Asynchronous Transfer Mode (ATM) networks, providing broadband internet access for commercial buildings and residential communities, IP Virtual Private Network (VPN) services based on Internet Protocol Security (IPSec), building enterprise intranets, and supporting ISPs to provide wholesale services to users.

[0003] With the surge in broadband users and the development of new services such as 4K high-definition and the Internet of Things, BRAS devices, as the edge of IP networks and gateways for user access, face challenges such as low equipment utilization, complex management and maintenance, and slow deployment of new services. As new technologies such as Software Defined Networking (SDN), Network Function Virtualization (NFV), and cloud computing mature, the industry is applying these technologies to the transformation of telecommunications networks, transforming traditional telecommunications data centers into flexible and open telecommunications clouds. This is driving the development of traditional network elements from specialized to general-purpose, thereby achieving the organic integration and virtuous cycle of Communication Technology (CT) and Information Technology (IT).

[0004] For BRAS devices, the most important step in promoting their generalization is the separation of forwarding and control.

[0005] The basic idea of ​​a virtualized broadband remote access server (vBRAS) system with control plane separation is to abstract the control plane functions of multiple BRAS devices and centrally deploy them in the cloud to form a unified BRAS control plane (BRAS-CP, hereinafter referred to as CP); at the same time, the BRAS devices or other forwarding devices stripped of the control plane form the BRAS user plane (BRAS-UP, hereinafter referred to as UP). The control plane separation vBRAS system consists of CP and UP.

[0006] Network Address Translation (NAT) is used to translate users' public and private addresses. NAT can be deployed on the UP (Uploader) as a panel or as a standalone device attached to the UP. For example... Figure 1 As shown, in the control-transfer separation vBRAS system, the centrally deployed CP manages multiple UPs. However, since NAT and BRAS belong to different network elements, the CP does not manage NAT in a unified manner. Summary of the Invention

[0007] This application provides a data processing method, apparatus, device, and readable storage medium to address the problem of how CP can uniformly manage NAT.

[0008] Firstly, a data processing method is provided, applied to a first network element, including:

[0009] After receiving the online message from the first user, the public address range of the second network element used for network address translation and the private address of the first user are determined.

[0010] Based on the public address range of the second network element and the private address of the first user, generate a Network Address Translation (NAT) user entry for the first user;

[0011] The NAT user entry is sent to the second network element. The NAT user entry is used to generate a NAT session entry for the first user's data plane packets. The NAT session entry is used to perform NAT translation on the first user's data plane packets to access the Internet.

[0012] Optionally, the method further includes:

[0013] Send the public address range of the second network element to the second network element.

[0014] Optionally, the method further includes:

[0015] Determine the BRAS user table entry for the first user;

[0016] The BRAS user table entry is sent to a third network element, which is a virtualized broadband remote access server user plane vBRAS-UP.

[0017] Optionally, the method further includes:

[0018] After receiving the online message of the first user, the system sends the online log of the first user to the log server.

[0019] Optionally, the method further includes:

[0020] After receiving the offline message from the first user, perform one or more of the following:

[0021] Delete the NAT user table entry for the first user;

[0022] Send a first message to the second network element, the first message being used to instruct the second network element to delete the NAT user session table entry of the first user;

[0023] Send the log of the first user's offline status to the log server;

[0024] When all users within the public address range of the second network element have gone offline, a second message is sent to the second network element, which instructs the second network element to revoke the public address range.

[0025] Optionally, the first network element is a virtualized broadband remote access server control plane vBRAS-CP.

[0026] Optionally, the second network element is deployed on vBRAS-CP, or the second network element is a stand-alone device.

[0027] Secondly, a data processing method is provided, applied to a second network element used for network address translation, including:

[0028] Receive the data plane message from the first user;

[0029] The first user's data plane packets are NAT translated according to the NAT session table entries of the first user's data plane packets to access the Internet.

[0030] Optionally, the method further includes:

[0031] Obtain the NAT user entry of the first user, wherein the NAT user entry is generated by the first network element based on the public address range of the second network element and the private address of the first user;

[0032] The NAT session entry for the data plane packets of the first user is determined based on the NAT user entry of the first user.

[0033] Optionally, the method further includes:

[0034] Receive first information sent by the first network element, the first information being used to instruct the deletion of the NAT user session table entry of the first user;

[0035] Delete the NAT user session table entry for the first user.

[0036] Optionally, the method further includes:

[0037] Obtain the public address range of the second network element allocated by the first network element;

[0038] Send a third message, which is used to indicate the public address range of the second network element.

[0039] Optionally, the method further includes:

[0040] Receive second information sent by the first network element, the second information being used to instruct the cancellation of the public address range;

[0041] Send a fourth message, which is used to instruct the revocation of the public address range.

[0042] Optionally, the first network element is vBRAS-CP.

[0043] Optionally, the second network element is deployed on vBRAS-CP, or the second network element is a stand-alone device.

[0044] Thirdly, a data processing apparatus is provided, applied to a first network element, comprising:

[0045] The first determining module is used to determine the public address range of the second network element used for network address translation and the private address of the first user after receiving the online message of the first user;

[0046] The first generation module is used to generate a NAT user entry for the first user based on the public address range of the second network element and the private address of the first user.

[0047] The first sending module is used to send the NAT user entry to the second network element. The NAT user entry is used to generate a NAT session entry for the data plane packets of the first user. The NAT session entry is used to perform NAT translation on the data plane packets of the first user to access the Internet.

[0048] Fourthly, a data processing apparatus is provided for use in a second network element for network address translation, comprising:

[0049] The first receiving module is used to receive data plane messages from the first user.

[0050] The first processing module is configured to perform NAT translation on the data plane packets of the first user according to the NAT session table entries of the data plane packets of the first user in order to access the Internet.

[0051] Fifthly, a communication device is provided, including a processor, a memory, and a program or instructions stored in the memory and executable on the processor, wherein the program or instructions, when executed by the processor, implement the steps of the method as described in the first or second aspect.

[0052] A sixth aspect provides a readable storage medium on which a program or instructions are stored, which, when executed by a processor, implement the steps of the method as described in the first or second aspect.

[0053] In this embodiment, the first network element uniformly manages all NATs and generates NAT user entries. This allows the first network element to directly interface with the log server, and user log traffic can be directly sent to the log server. Furthermore, since the first network element uniformly manages the public address pool, it automatically allocates address ranges to NATs based on user online access, greatly simplifying operation and maintenance. Attached Figure Description

[0054] Various other advantages and benefits will become apparent to those skilled in the art upon reading the following detailed description of preferred embodiments. The accompanying drawings are for illustrative purposes only and are not intended to limit the scope of this application. Furthermore, the same reference numerals denote the same parts throughout the drawings. In the drawings:

[0055] Figure 1 This is a schematic diagram of a control-separated vBRAS system;

[0056] Figure 2 It is a flowchart in the relevant technology;

[0057] Figure 3 This is one of the schematic diagrams of the data processing method provided in the embodiments of this application;

[0058] Figure 4 This is a second schematic diagram of the data processing method provided in the embodiments of this application;

[0059] Figure 5 This is a schematic diagram of the control-separation vBRAS system provided in an embodiment of this application;

[0060] Figure 6 This is the third schematic diagram of the data processing method provided in the embodiments of this application;

[0061] Figure 7 This is one of the schematic diagrams of a data processing apparatus provided in an embodiment of this application;

[0062] Figure 8 This is a second schematic diagram of the data processing apparatus provided in the embodiments of this application;

[0063] Figure 9 This is a schematic diagram of a communication device provided in an embodiment of this application. Detailed Implementation

[0064] The technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, not all embodiments. Based on the embodiments of this application, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this application.

[0065] The term "comprising," and any variations thereof, used in the specification and claims of this application, is intended to cover a non-exclusive inclusion. For example, a process, manner, system, product, or apparatus that includes a series of steps or units is not necessarily limited to those explicitly listed, but may include other steps or units not explicitly listed or inherent to such process, manner, product, or apparatus. Furthermore, the use of "and / or" in the specification and claims indicates at least one of the connected objects, such as A and / or B, indicating the inclusion of A alone, B alone, or both A and B.

[0066] In the embodiments of this application, the terms "exemplary" or "for example" are used to indicate that something is an example, illustration, or description. Any embodiment or design that is described as "exemplary" or "for example" in the embodiments of this application should not be construed as being more preferred or advantageous than other embodiments or design. Specifically, the use of the terms "exemplary" or "for example" is intended to present the relevant concepts in a specific manner.

[0067] The terminals involved in this application can be mobile phones, tablet computers, laptop computers (also known as notebook computers), personal digital assistants (PDAs), handheld computers, netbooks, ultra-mobile personal computers (UMPCs), mobile internet devices (MIDs), augmented reality (AR) / virtual reality (VR) devices, robots, wearable devices, vehicle-mounted devices (VUEs), pedestrian terminals (PUEs), smart home devices (home appliances with wireless communication capabilities, such as refrigerators, televisions, washing machines, or furniture), game consoles, personal computers (PCs), ATMs, or self-service machines, etc. Wearable devices include: smartwatches, smart bracelets, smart headphones, smart glasses, smart jewelry (smart bracelets, smart chains, smart rings, smart necklaces, smart anklets, smart anklets, etc.), smart wristbands, smart clothing, etc. It should be noted that the specific type of terminal is not limited in the embodiments of this application.

[0068] like Figure 2 As shown, the existing technical process is as follows:

[0069] Step 1: Configure your own public address pool using NAT static settings;

[0070] Step 2: When a user dials in on the Customer Premises Equipment (CPE), the control plane dial message arrives at the UP and is then sent to the CP for processing via a Layer 2 tunnel.

[0071] Step 3: The CP completes the user's dialing process and assigns a private user address to the user, which is then sent to the CPE user via the UP;

[0072] Step 4: The first data plane packet of the CPE user arrives at the UP, and the UP sends the packet to the NAT;

[0073] Step 5: After receiving the user's first data plane packet, NAT assigns a public address and public port range to the user and generates a NAT user table entry for the user (e.g., user address <-> public address, public port range);

[0074] Step 6: Based on the NAT user entry (for example, selecting an unused public port from the public port segment), NAT generates a NAT session entry for the first user plane packet (for example, user address, user port <-> public address, public port);

[0075] Step 7: NAT sends the user log to the log server. This user log entry should include at least the following information: user address, public address, public port range, timestamp, operation identifier, etc. The operation identifier indicates that the operation is to allocate a port range.

[0076] Step 8: The data plane packets of the CPE user's session are then translated using NAT based on the generated NAT session entries to access the Internet;

[0077] Step 9: Once all NAT session entries for the CPE user have aged out, delete the user's NAT user entry.

[0078] Step 10: NAT sends the user log to the log server. This user log entry should include at least the following information: user address, public address, public port range, timestamp, operation identifier, etc. The operation identifier indicates that the operation is to release the port range.

[0079] In existing technologies, the log server needs to interface with all NATs on all UPs. All NAT logs will be sent to the log server via the IP network, which not only makes operation and maintenance management complicated, but also wastes valuable network bandwidth resources due to log traffic. In addition, each NAT on the UP has an independent static configuration, which makes configuration management complicated and the workload of operation and maintenance large.

[0080] See Figure 3 This application provides a data processing method applied to a first network element, optionally, the first network element is a vBRAS-CP, and the specific steps include: step 301, step 302 and step 303.

[0081] Step 301: After receiving the online message of the first user, determine the public address range of the second network element used for network address translation and the private address of the first user;

[0082] Step 302: Generate a NAT user entry for the first user based on the public address range of the second network element and the private address of the first user;

[0083] Optionally, NAT user entries include user address <-> public address and public port range.

[0084] Step 303: Send the NAT user entry to the second network element. The NAT user entry is used to generate a NAT session entry for the data plane packets of the first user. The NAT session entry is used to perform NAT translation on the data plane packets of the first user to access the Internet.

[0085] In this embodiment, the first network element uniformly manages all NATs and generates NAT user entries. This allows the first network element to directly interface with the log server, and user log traffic can be directly sent to the log server. Furthermore, since the first network element uniformly manages the public address pool, it automatically allocates address ranges to NATs based on user online access, greatly simplifying operation and maintenance. NAT session entries are generated by the NAT to guide data plane traffic forwarding.

[0086] In one embodiment of this application, the method further includes:

[0087] Send the public address range of the second network element to the second network element.

[0088] In this embodiment, the public address pool of NAT is automatically distributed by the first network element without manual configuration, which greatly simplifies the operation and maintenance burden.

[0089] In one embodiment of this application, the method further includes:

[0090] Determine the BRAS user table entry for the first user;

[0091] The BRAS user table entry is sent to a third network element, which is a virtualized broadband remote access server user plane vBRAS-UP.

[0092] In one embodiment of this application, the method further includes:

[0093] After receiving the online message of the first user, the system sends the online log of the first user to the log server.

[0094] Optionally, the log may include one or more of the following: user address, public address, public port range, timestamp, operation identifier, etc. The operation identifier indicates that the operation is to allocate a port range.

[0095] In this embodiment, the first network element directly interfaces with the log server, and user log traffic is sent directly to the log server without passing through the IP network. This not only simplifies configuration but also avoids consuming valuable network resources.

[0096] After receiving the offline message from the first user, perform one or more of the following:

[0097] (1) Delete the NAT user table entry for the first user;

[0098] (2) Send first information to the second network element, the first information being used to instruct the second network element to delete the NAT user session table entry of the first user;

[0099] (3) Send the log of the first user going offline to the log server;

[0100] Optionally, the log may include one or more of the following: user address, public address, public port range, timestamp, operation identifier, etc. The operation identifier indicates that the operation is to release the port range.

[0101] (4) When all users in the public address range of the second network element have gone offline, send a second message to the second network element, the second message being used to instruct the second network element to revoke the public address range.

[0102] In one embodiment of this application, the second network element is deployed on vBRAS-CP, or the second network element is an independently deployed device.

[0103] In this embodiment, the first network element uniformly manages all NATs and generates NAT user entries. This allows the first network element to directly interface with the log server, and user log traffic can be directly sent to the log server. Furthermore, since the first network element uniformly manages the public address pool, it automatically allocates address ranges to NATs based on user online access, greatly simplifying operation and maintenance.

[0104] See Figure 4 This application provides a data processing method applied to a second network element used for network address translation, and the specific steps include: step 401 and step 402;

[0105] Step 401: Receive the data plane message from the first user;

[0106] Step 402: Perform NAT translation on the data plane packets of the first user according to the NAT session table entries of the first user's data plane packets to access the Internet.

[0107] In one embodiment of this application, the method further includes:

[0108] Obtain the NAT user entry of the first user, wherein the NAT user entry is generated by the first network element based on the public address range of the second network element and the private address of the first user;

[0109] The NAT session entry for the data plane packets of the first user is determined based on the NAT user entry of the first user.

[0110] In one embodiment of this application, the method further includes:

[0111] Receive first information sent by the first network element, the first information being used to instruct the deletion of the NAT user session table entry of the first user;

[0112] Delete the NAT user session table entry for the first user.

[0113] In one embodiment of this application, the method further includes:

[0114] Obtain the public address range of the second network element allocated by the first network element;

[0115] Send a third message, which is used to indicate the public address range of the second network element.

[0116] In one embodiment of this application, the method further includes:

[0117] Receive second information sent by the first network element, the second information being used to instruct the cancellation of the public address range;

[0118] Send a fourth message, which is used to instruct the revocation of the public address range.

[0119] In one embodiment of this application, the first network element is a vBRAS-CP.

[0120] In one embodiment of this application, the second network element is deployed on vBRAS-CP, or the second network element is an independently deployed device.

[0121] In this embodiment, the first network element uniformly manages all NATs and generates NAT user entries. This allows the first network element to directly interface with the log server, and user log traffic can be directly sent to the log server. Furthermore, since the first network element uniformly manages the public address pool, it automatically allocates address ranges to NATs based on user online access, greatly simplifying operation and maintenance.

[0122] This embodiment only uses a NAT panel as an example for introduction; the case of a standalone NAT device is also fully applicable to the embodiment in this application.

[0123] See Figure 5 and Figure 6 The embodiments of this application provide a data processing method flowchart, the specific steps of which are as follows:

[0124] Step 1: When a user dials in and connects, the message arrives at the UP and is directly sent to the CP through a Layer 2 tunnel.

[0125] Step 2: The CP assigns a public address range to the NAT on the UP and assigns a private user address to the user. It also selects an address from the assigned public address range to create a NAT user table entry for the online user (user address <-> public address, public port range).

[0126] Step 3: The CP sends the allocated public address range to the UP, which then forwards it to the NAT.

[0127] Step 4: The CP sends the user's NAT user entry to the NAT via the UP; at the same time, the CP sends the user's BRAS user entry to the UP, and sends the user address assigned to the user to the user via the UP.

[0128] Optionally, the relevant fields of the NAT user table entry can be merged into the BRAS user table entry, and the CP can directly send this entry to the UP, which in turn sends the relevant fields of the NAT user table entry to the NAT.

[0129] Step 5: The CP sends the user's online log to the log server. This user log should include at least the following information: user address, public address, public port range, timestamp, and operation identifier (indicating that the operation is a user online operation).

[0130] Step 6: The NAT publicly announces this public address range;

[0131] Step 7: After the user's data plane traffic arrives at the NAT via the UP, the NAT establishes a NAT session entry for the data plane traffic based on the user's NAT user table entry (user address, user port <-> public address, public port);

[0132] Step 8: User data plane traffic accesses the Internet by performing NAT translation based on the generated NAT session table;

[0133] Step 9: If the UP receives a user offline message, it sends it to the CP through a Layer 2 tunnel; the CP deletes the user's NAT user table entry and sends a command to the NAT on the UP to delete the user's NAT session table entry.

[0134] Step 10: After receiving the command, NAT deletes the NAT session entry for that user;

[0135] Step 11: CP sends a user offline log to the log server. This user log should include at least the following information: user address, public address, public port range, timestamp, and operation identifier (indicating that the operation is a user offline operation).

[0136] Step 12: If all users within the public address range allocated to the NAT on the UP have gone offline, the CP sends a command to the NAT on the UP to revoke the previously announced public address range;

[0137] Step 13: After receiving the command, the NAT will revoke the public address range.

[0138] See Figure 7 This application provides a data processing apparatus applied to a first network element. Optionally, the first network element is a vBRAS-CP. The apparatus 700 includes:

[0139] The first determining module 701 is used to determine the public address range of the second network element used for network address translation and the private address of the first user after receiving the online message of the first user;

[0140] The first generation module 702 is used to generate a NAT user entry for the first user based on the public address range of the second network element and the private address of the first user.

[0141] The first sending module 703 is used to send the NAT user entry to the second network element. The NAT user entry is used to generate a NAT session entry for the data plane packets of the first user. The NAT session entry is used to perform NAT translation on the data plane packets of the first user to access the Internet.

[0142] In one embodiment of this application, the device 700 further includes:

[0143] The second sending module is used to send the public address range of the second network element to the second network element.

[0144] In one embodiment of this application, the device 700 further includes:

[0145] The second determining module is used to determine the BRAS user table entry of the first user;

[0146] The third sending module is used to send the BRAS user table entry to a third network element, which is vBRAS-UP.

[0147] In one embodiment of this application, the device 700 further includes:

[0148] The fourth sending module is used to send the log of the first user's online status to the log server after receiving the first user's online status message.

[0149] In one embodiment of this application, the device 700 further includes:

[0150] The first execution module is configured to perform one or more of the following actions upon receiving the offline message from the first user:

[0151] Delete the NAT user table entry for the first user;

[0152] Send a first message to the second network element, the first message being used to instruct the second network element to delete the NAT user session table entry of the first user;

[0153] Send the log of the first user's offline status to the log server;

[0154] When all users within the public address range of the second network element have gone offline, a second message is sent to the second network element, which instructs the second network element to revoke the public address range.

[0155] In one embodiment of this application, the second network element is deployed on vBRAS-CP, or the second network element is an independently deployed device.

[0156] The apparatus provided in this application embodiment can achieve... Figure 3 The various processes implemented in the illustrated embodiments achieve the same technical effect, and will not be described again here to avoid repetition.

[0157] See Figure 8 This application provides a data processing apparatus for a second network element used for network address translation. The apparatus 800 includes:

[0158] The first receiving module 801 is used to receive the data plane message of the first user;

[0159] The first processing module 802 is used to perform NAT translation on the data plane packets of the first user according to the NAT session table entries of the data plane packets of the first user in order to access the Internet.

[0160] In one embodiment of this application, the apparatus further includes:

[0161] The first acquisition module is used to acquire the NAT user table entry of the first user, wherein the NAT user table entry is generated by the first network element based on the public address range of the second network element and the private address of the first user;

[0162] The second determining module is used to determine the NAT session entry of the first user's data plane packets based on the first user's NAT user entry.

[0163] In one embodiment of this application, the apparatus further includes:

[0164] The second receiving module is used to receive the first information sent by the first network element, the first information being used to instruct the deletion of the NAT user session table entry of the first user.

[0165] The deletion module is used to delete the NAT user session table entry for the first user.

[0166] In one embodiment of this application, the apparatus further includes:

[0167] The second acquisition module is used to acquire the public address range of the second network element allocated by the first network element;

[0168] The fifth sending module is used to send third information, which is used to indicate the public address range of the second network element.

[0169] In one embodiment of this application, the apparatus further includes:

[0170] The third receiving module is used to receive second information sent by the first network element, the second information being used to indicate the cancellation of the public address range;

[0171] The sixth sending module is used to send fourth information, which is used to indicate the cancellation of the public address range.

[0172] In one embodiment of this application, the first network element is a vBRAS-CP.

[0173] In one embodiment of this application, the second network element is deployed on vBRAS-CP, or the second network element is an independently deployed device.

[0174] The apparatus provided in this application embodiment can achieve... Figure 4 The various processes implemented in the illustrated embodiments achieve the same technical effect, and will not be described again here to avoid repetition.

[0175] like Figure 9 As shown, this application embodiment also provides a communication device 900, including a processor 901, a memory 902, and a program or instructions stored in the memory 902 and executable on the processor 901. When the program or instructions are executed by the processor 901, they implement the above-mentioned... Figure 3 or Figure 4 The various processes in the illustrated embodiments achieve the same technical effect. To avoid repetition, they will not be described again here.

[0176] This application embodiment also provides a readable storage medium storing a program or instructions that, when executed by a processor, implement the above-described functionality. Figure 3 or Figure 4 The various processes in the illustrated embodiments can achieve the same technical effect, and will not be described again here to avoid repetition.

[0177] The processor mentioned above is the processor in the terminal described in the above embodiments. The readable storage medium includes computer-readable storage media, such as computer read-only memory (ROM), random access memory (RAM), magnetic disk, or optical disk.

[0178] The steps of the methods or algorithms described in this application can be implemented in hardware or by executing software instructions on a processor. The software instructions can consist of corresponding software modules, which can be stored in RAM, flash memory, ROM, EPROM, EEPROM, registers, hard disk, portable hard disk, read-only optical disk, or any other form of storage medium known in the art. An exemplary storage medium is coupled to the processor, enabling the processor to read information from and write information to the storage medium. Of course, the storage medium can also be a component of the processor. The processor and storage medium can be housed in an ASIC. Alternatively, the ASIC can be housed in a core network interface device. Of course, the processor and storage medium can also exist as discrete components in the core network interface device.

[0179] Those skilled in the art will recognize that, in one or more of the examples above, the functions described in this application can be implemented using hardware, software, firmware, or any combination thereof. When implemented in software, these functions can be stored in a computer-readable medium or transmitted as one or more instructions or code on a computer-readable medium. Computer-readable media include computer storage media and communication media, wherein communication media include any medium that facilitates the transfer of a computer program from one place to another. Storage media can be any available medium accessible to a general-purpose or special-purpose computer.

[0180] The specific embodiments described above further illustrate the purpose, technical solution, and beneficial effects of this application. It should be understood that the above description is only a specific embodiment of this application and is not intended to limit the scope of protection of this application. Any modifications, equivalent substitutions, improvements, etc., made on the basis of the technical solution of this application should be included within the scope of protection of this application.

[0181] Those skilled in the art will understand that embodiments of this application can be provided as a method, system, or computer program product. Therefore, embodiments of this application can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, embodiments of this application can take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0182] This application describes embodiments with reference to flowchart illustrations and / or block diagrams of embodiments of the present application, apparatus (systems), and computer program products. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create a machine for implementing the flowchart illustrations. Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0183] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to function in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0184] These computer program instructions may also be loaded onto a computer or other programmable data processing equipment to cause a series of operational steps to be performed on the computer or other programmable equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0185] Obviously, those skilled in the art can make various modifications and variations to the embodiments of this application without departing from the spirit and scope of this application. Therefore, if these modifications and variations to the embodiments of this application fall within the scope of the claims of this application and their equivalents, this application also intends to include these modifications and variations.

Claims

1. A data processing method, applied to a first network element, characterized in that, include: After receiving the online message from the first user, a public address range is allocated to the second network element used for network address translation, and a private address is allocated to the first user. Based on the public address range of the second network element and the private address of the first user, a Network Address Translation (NAT) user entry for the first user is generated. The NAT user entry includes the correspondence between the first user's private address and public address, and public port range. Send the public address range of the second network element to the third network element, so that the third network element sends the public address range of the second network element to the second network element; The NAT user entry is sent to the second network element via the third network element. The NAT user entry is used by the second network element to generate a NAT session entry for the data plane packets of the first user. The NAT session entry is used to perform NAT translation on the data plane packets of the first user to access the Internet. Determine the BRAS user entry for the first user and send the BRAS user entry to the third network element; The first network element is the virtualized broadband remote access server control plane vBRAS-CP, and the third network element is the virtualized broadband remote access server user plane vBRAS-UP.

2. The method according to claim 1, characterized in that, The method further includes: After receiving the online message of the first user, the system sends the online log of the first user to the log server.

3. The method according to claim 1, characterized in that, The method further includes: After receiving the offline message from the first user, perform one or more of the following: Delete the NAT user table entry for the first user; Send a first message to the second network element, the first message being used to instruct the second network element to delete the NAT user session table entry of the first user; Send the log of the first user's offline status to the log server; When all users within the public address range of the second network element have gone offline, a second message is sent to the second network element, which instructs the second network element to revoke the public address range.

4. The method according to claim 1 or 3, characterized in that, The second network element is deployed on vBRAS-CP, or the second network element is a stand-alone device.

5. A data processing method applied to a second network element used for network address translation, characterized in that, include: Obtain the public address range of the second network element allocated by the first network element; Obtain the NAT user entry for the first user. The NAT user entry is generated by the first network element after receiving the online message of the first user, based on the public address range of the second network element and the private address of the first user allocated by the first network element. The NAT user entry includes the correspondence between the private address and public address and public port range of the first user. Receive the data plane message of the first user sent via the third network element; The NAT session entry for the data plane packet of the first user is determined based on the NAT user entry of the first user; The first user's data plane packets are NAT translated according to the NAT session table entries of the first user's data plane packets to access the Internet; The first network element is the virtualized broadband remote access server control plane vBRAS-CP, and the third network element is the virtualized broadband remote access server user plane vBRAS-UP.

6. The method according to claim 5, characterized in that, The method further includes: Receive first information sent by the first network element, the first information being used to instruct the deletion of the NAT user session table entry of the first user; Delete the NAT user session table entry for the first user.

7. The method according to claim 5, characterized in that, The method further includes: Send a third message, which is used to indicate the public address range of the second network element.

8. The method according to claim 7, characterized in that, The method further includes: Receive second information sent by the first network element, the second information being used to instruct the cancellation of the public address range; Send a fourth message, which is used to instruct the revocation of the public address range.

9. The method according to any one of claims 5-8, characterized in that, The second network element is deployed on vBRAS-CP, or the second network element is a stand-alone device.

10. A data processing apparatus, applied to a first network element, characterized in that, include: The first determining module is used to allocate a public address range to the second network element used for network address translation and allocate a private address to the first user after receiving the online message of the first user. The first generation module is used to generate a NAT user entry for the first user based on the public address range of the second network element and the private address of the first user. The NAT user entry includes the correspondence between the private address and the public address and public port range of the first user. The first sending module is used to send the NAT user entry to the second network element via the third network element. The NAT user entry is used by the second network element to generate a NAT session entry for the data plane packets of the first user. The NAT session entry is used to perform NAT translation on the data plane packets of the first user to access the Internet. The second determining module is used to determine the BRAS user table entry of the first user; The third sending module is used to send the BRAS user table entry to the third network element; The device is further configured to send the public address range of the second network element to the third network element, so that the third network element sends the public address range of the second network element to the second network element; The first network element is the virtualized broadband remote access server control plane vBRAS-CP, and the third network element is the virtualized broadband remote access server user plane vBRAS-UP.

11. A data processing apparatus, applied to a second network element for network address translation, characterized in that, include: The second acquisition module is used to acquire the public address range of the second network element allocated by the first network element; The first acquisition module is used to acquire the NAT user table entry of the first user. The NAT user table entry is generated by the first network element after receiving the online message of the first user, based on the public address range of the second network element and the private address of the first user allocated by the first network element. The NAT user table entry includes the correspondence between the private address and the public address and public port range of the first user. The first receiving module is used to receive the data plane message of the first user sent via the third network element; The second determining module is used to determine the NAT session entry of the first user's data plane packets based on the first user's NAT user entry; The first processing module is used to perform NAT translation on the data plane packets of the first user according to the NAT session table entries of the data plane packets of the first user in order to access the Internet; The first network element is the virtualized broadband remote access server control plane vBRAS-CP, and the third network element is the virtualized broadband remote access server user plane vBRAS-UP.

12. A communication device, characterized in that, It includes a processor, a memory, and a program or instructions stored in the memory and executable on the processor, wherein the program or instructions, when executed by the processor, implement the steps of the method as described in any one of claims 1 to 9.

13. A readable storage medium, characterized in that, The readable storage medium stores a program or instructions that, when executed by a processor, implement the steps of the method as described in any one of claims 1 to 9.

Images