A method and edge node device for managing traffic

Abstract

The specification provides a method for managing traffic and an edge node device, the method comprising: receiving an EVPN routing message, obtaining first field information in the EVPN routing message, when the first field information carries a first identifier, obtaining second field information in the EVPN routing message, the second field information comprising Leaf-group information, determining a user corresponding to the Leaf-group information, and establishing communication with the user. Through the method, communication between users corresponding to the Leaf-group information can be established according to the Leaf-group information, thereby realizing a flexible isolation strategy.

Description

TECHNICAL FIELD

[0001] The present specification relates to the technical field of communication, and in particular to a method for managing traffic and an edge node device. BACKGROUND

[0002] VPLS: Virtual Private LAN Service, a virtual private LAN service. It is a point-to-multipoint L2VPN service provided on an MPLS or IP backbone network. The service provider provides VPLS service for a user network by simulating a virtual switch connected to multiple remote sites on the backbone network for a user network. The backbone network is transparent to the sites of the user network, and each site of the user network works as if it were in a local area network.

[0003] VSI: (Virtual Switch Instance, virtual switch instance) VSI is a virtual instance on a PE device that provides Layer 2 switching service for a VPLS instance. VSI can be regarded as a virtual switch on the PE device, which has all the functions of a traditional Ethernet switch, including source MAC address learning, MAC address aging, flooding, etc. VPLS enables forwarding of Layer 2 data packets within a VPLS instance through VSI.

[0004] AC: Attachment Circuit, an access circuit or a virtual circuit connecting a CE and a PE.

[0005] E-TREE: Ethernet Tree, a Layer 2 Ethernet service based on a Root and Leaf model, which allows bidirectional communication from Root to Leaf and arbitrary communication between multiple Roots, but does not allow communication between Leafs and Leafs.

[0006] In the same VPLS domain, AC-side users under the same VSI can access each other, but in a network carrying access user traffic by VPLS, in order to improve the security between users and reduce the mutual influence between users, it is usually necessary to control the mutual access between AC-side users.

[0007] VPLS E-Tree provides a solution to the problem of isolating AC interfaces across devices. It divides all AC interfaces into two categories by setting Root and Leaf attributes for AC interfaces:

[0008] • Root attribute AC interface: can interwork with other Root and Leaf attribute AC interfaces.

[0009] • AC interface of Leaf attribute: can interwork with AC interface of Root attribute, but cannot interwork with AC interface of other Leaf attributes.

[0010] Since Root and Leaf are currently fully connected, it is currently difficult to implement a more flexible isolation policy. SUMMARY

[0011] To overcome the problems in the related art, the specification provides a method for managing traffic and an edge node device.

[0012] According to a first aspect of the embodiments of the specification, a method for managing traffic is provided, which is applied to a PE device in an E-TREE service architecture, and the method comprises:

[0013] receiving an EVPN routing message and obtaining first field information in the EVPN routing message;

[0014] When the first field information carries a first identifier, obtaining second field information in the EVPN routing message, wherein the second field information comprises Leaf-group information;

[0015] determining a user corresponding to the Leaf-group information and establishing communication with the user.

[0016] The EVPN routing message comprises:

[0017] an EVPN MAC Advertisement routing message.

[0018] The method further comprises:

[0019] When the first field information carries a second identifier, it indicates that the EVPN routing message comes from a Leaf interface, and then the message from the PE is forwarded to a Root attribute interface.

[0020] The method further comprises:

[0021] When the first field information carries a third identifier, it indicates that the EVPN routing message comes from a Root interface, and then the message from the PE is forwarded to all interfaces.

[0022] When the first field information carries a first identifier, the second field information in the EVPN routing message is obtained, which comprises:

[0023] The Hybrid mode is configured, a virtual switching instance (VSI) is configured for the Hybrid mode, and the VSI is used to control obtaining second field information in the EVPN routing packet when the first field information carries a first identifier.

[0024] The Leaf-group information corresponds to a service attribute of a user, and the Leaf-group information is different for different service attributes.

[0025] It can be seen from the above method that when the device receives the EVPN routing packet, the Leaf-group information is read when the first identifier is carried, and the communication between users corresponding to the Leaf-group information is established according to the Leaf-group information, so that a flexible isolation strategy is realized.

[0026] According to a second aspect of the embodiments of the present specification, an edge node device is provided, and the edge node device comprises a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the following method when executing the program:

[0027] receiving an EVPN routing packet and obtaining first field information in the EVPN routing packet;

[0028] when the first field information carries a first identifier, obtaining second field information in the EVPN routing packet, the second field information comprising Leaf-group information;

[0029] determining a user corresponding to the Leaf-group information and establishing communication with the user.

[0030] According to a third aspect of the embodiments of the present specification, an edge node device is provided, and the edge node device enables E-TREE service, and the edge node device comprises:

[0031] a receiving module configured to receive an EVPN routing packet and obtain first field information in the EVPN routing packet;

[0032] a processing module configured to, when the first field information carries a first identifier, obtain second field information in the EVPN routing packet, the second field information comprising Leaf-group information;

[0033] a determining module configured to determine a user corresponding to the Leaf-group information and establish communication with the user.

[0034] The EVPN routing packet comprises:

[0035] An EVPN MAC Advertisement route message.

[0036] The edge node device further comprises:

[0037] The configuration module is configured to configure a Hybrid mode, configure a virtual switching instance (VSI) for the Hybrid mode, and control the obtaining of the second field information in the EVPN route message when the first field information carries a first identifier through the VSI.

[0038] It should be understood that the general description above and the following detailed description are exemplary and explanatory only and are not restrictive of the present specification. BRIEF DESCRIPTION OF DRAWINGS

[0039] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present specification and serve to explain the principles of the present specification.

[0040] Figure 1 is a network architecture diagram of an E-TREE service architecture according to an exemplary embodiment of the present specification.

[0041] Figure 2 is a flow diagram of a method of managing traffic according to an exemplary embodiment of the present specification.

[0042] Figure 3 is a flow diagram of a method of managing traffic according to an exemplary embodiment of the present specification. DETAILED DESCRIPTION

[0043] The exemplary embodiments will be described in detail herein with reference to the attached drawings. The following description is made with reference to the accompanying drawings in which like reference numerals refer to like elements, and qualitative descriptions are used in conjunction with quantitative descriptions where appropriate. The following description is not meant to limit the present specification in any way. Rather, the following description is meant to provide an example of the present specification where the following description is not meant to be limiting.

[0044] The terminology used in the present specification is for the purpose of describing particular embodiments only and is not intended to limit the present specification. As used in the present specification and the appended claims, the singular forms "a," "an" and "the" are intended to include the plural forms as well, unless the context clearly indicates otherwise. It will also be understood that the term "and / or" as used herein refers to and encompasses any and all possible combinations of one or more of the associated listed items.

[0045] It should be understood that, although the terms first, second, third, etc. can be employed in this specification to describe various information, these information should not be limited to these terms. These terms are only used to distinguish one piece of information from another piece of information. For example, without departing from the scope of the present specification, the first information can also be referred to as the second information, and similarly, the second information can also be referred to as the first information. Depending on the context, the word "if' as used herein can be interpreted as "when" or "upon" or "in response to determining".

[0046] Currently, in the same VPLS domain, AC side users under the same VSI can access each other, but in the network of VPLS carrying access user traffic, in order to improve the security between users and reduce the mutual influence between users, it is usually necessary to control the mutual access between AC side users.

[0047] VPLS E-Tree provides a solution to this cross-device AC interface isolation problem. It divides all AC interfaces into two categories by setting Root, Leaf attributes for AC interfaces:

[0048] • AC interface with Root attribute: can interwork with other AC interfaces with Root and Leaf attributes.

[0049] • AC interface with Leaf attribute: can interwork with AC interfaces with Root attribute, but cannot interwork with other AC interfaces with Leaf attribute.

[0050] By setting Root and Leaf attributes for different ports through VPLS E-Tree, and specifying Root VLAN and Leaf VLAN for VSI. The packet from Root interface adds Root VLAN ID tag, and the packet from Leaf interface adds Leaf VLAN ID tag. After receiving the packet, the PE judges whether the packet is from the Leaf interface or the Root interface according to the outer VLAN, so as to realize the isolation of Leaf interface across devices:

[0051] • If from Root interface, forward to all interfaces.

[0052] • If from Leaf interface, only forward to interfaces with Root attribute.

[0053] As shown in Figure 1 Based on the above technology, by setting the VSI AC port of PE1 as Root interface and the VSI AC port of PE2 and PE3 as Leaf interface, normal communication between headquarters and branch offices can be realized, and communication between branch offices cannot be realized.

[0054] But the communication between different departments of the headquarters and the branch cannot be isolated, and the headquarters and the branch need to deploy additional network equipment to realize the normal communication between the same departments, and the scenario of isolation between different departments.

[0055] To solve the above technical problems, the embodiments of the present disclosure provide a method for managing traffic, which is applied to a PE device in an E-TREE service architecture, as shown in the following Figure 2 The method comprises the following steps of:

[0056] S201 receiving an EVPN routing message and obtaining first field information in the EVPN routing message;

[0057] S202 when the first field information carries a first identifier, obtaining second field information in the EVPN routing message, wherein the second field information comprises Leaf-group information;

[0058] S203 determining a user corresponding to the Leaf-group information and establishing communication with the user.

[0059] In the embodiment, the EVPN routing message can be an EVPN MAC Advertisement routing message, which is a BGP message used to announce the MAC address and optional IP address information of a host (usually a virtual machine) participating in an EVPN instance. When a new host joins the EVPN network, the device (such as a switch or a router) where the host is located will generate a MAC Advertisement routing message and distribute it to other devices participating in the EVPN through BGP.

[0060] In the embodiment, the first field and the second field can be added based on the EVPN MAC Advertisement routing message. For example, the first field can be a Flags field, and the Flags field can be filled with Flags. In order to reduce the change to the E-TREE service protocol, the technical solution in the present disclosure can be enabled by configuring a preset value in the Flags field.

[0061] For example, “2” can be set as the preset value. When the PE device receives the EVPN MAC Advertisement routing message and obtains the value 2 of the Flags field, the PE device further obtains the second field information to realize the establishment of user communication between services. Specifically, the Hybrid interface can be configured, the VSI is configured for the Hybrid interface, so that the functions of Root and Leaf can be considered when the Hybrid mode is started, and when the PE obtains the value 2 of the Flags field, the PE can be instructed to recognize the second field information.

[0062] The second field information includes Leaf-group information corresponding to the service attribute of the user, and the Leaf-group information of different service attributes is different, that is, when the user communication is established according to the Leaf-group information, the communication between the users belonging to the same Leaf-group information is established.

[0063] For example Figure 1 As shown, PE1 receives the first EVPN MAC Advertisement routing message and the second EVPN MAC Advertisement routing message sent by PE2 and PE3, identifies that the value of the Flags field in the first EVPN MAC Advertisement routing message and the second EVPN MAC Advertisement routing message is 2, and if the Leaf-group information in the first EVPN MAC Advertisement routing message corresponds to the finance department under PE2 (which can be marked by VLAN identification, MAC identification), and the Leaf-group information in the second EVPN MAC Advertisement routing message corresponds to the finance department under PE3, then the communication between the finance department under PE2, the finance department under PE3 and the finance department under PE1 can be established, and it can also be understood that the Leaf-group information in the first EVPN MAC Advertisement routing message corresponds to the Leaf-group information in the second EVPN MAC Advertisement routing message and the Leaf-group information of the headquarters finance department under PE. It can be seen that through the Leaf-group information, the users with the same service attribute in the Root and the Leaf can be realized, and the communication between the users with the same service attribute is established, thereby solving the technical problem that in the prior art, the Root and the Leaf are completely connected, and the flexible isolation strategy cannot be realized.

[0064] In another example, when the PE device receives the EVPN MAC Advertisement routing message and obtains the value of the Flags field as 1, it indicates that the EVPN MAC Advertisement routing message comes from the Leaf interface.

[0065] In another example, when the PE device receives the EVPN MAC Advertisement routing message and obtains the value of the Flags field as 0, it indicates that the EVPN MAC Advertisement routing message comes from the Root interface.

[0066] When the EVPN MAC Advertisement routing message is identified as coming from a Leaf interface or a Root interface, it can be processed in the current manner, which will not be described in detail in this example.

[0067] In order to explain the technical problems in the embodiments of the present disclosure in detail, the embodiments of the present disclosure are described in combination with the actual situation, as shown in Figure 3 The specific process is as follows:

[0068] In an example, the E-TREE extended group attribute in the EVPN MAC Advertisement routing can be used to identify whether the MAC goes to the Hybrid process and distinguish the Leaf-group:

[0069] The message format of the EVPN E-TREE extended group attribute is shown in Table 1:

[0070]

[0071] Table 1

[0072] The current protocol Flags only uses two values of 0 and 1, 0 indicates that the MAC comes from the Root interface, 1 indicates that the MAC comes from the Leaf interface, and the Hybrid interface is newly defined, and its value is 2.

[0073] When the PE device receives the EVPN MAC Advertisement routing with the Flags value of 2, it will check the Reserved field, and in this embodiment, the last 8 bits of the Reserved field can be selected as the Leaf-group value, so that theoretically 256 Leaf-groups can be created.

[0074] If the Leaf-group field is all 0, it is considered that the MAC does not have any isolation restriction and can communicate with all hosts in the VPLS domain; if the Leaf-group has a value, it indicates that the MAC can only communicate with the MAC with the same Leaf-group value and the Leaf-group value of 0, and the MAC with different Leaf-group values cannot communicate.

[0075] In this embodiment, regarding the setting of the Leaf-group of the MAC, a routing policy can be added when the AC port is associated with the VSI to realize the isolation of the corresponding host according to the MAC or VLAN (i.e. service attribute information).

[0076] As can be seen from the above embodiments, by adding the Hybrid interface, the interface can have the attributes of the Root and Leaf interfaces, and by adding the Leaf-group field, MAC or VLAN level isolation can be achieved, which is more flexible than the current port level isolation.

[0077] In combination with the above embodiments, the embodiments of the present disclosure further provide an edge node device, which comprises a memory, a processor and a computer program stored in the memory and executable on the processor, wherein the processor implements the following method when executing the program:

[0078] receiving an EVPN routing message and obtaining first field information in the EVPN routing message;

[0079] when the first field information carries a first identifier, obtaining second field information in the EVPN routing message, wherein the second field information comprises Leaf-group information;

[0080] determining a user corresponding to the Leaf-group information and establishing communication with the user.

[0081] In combination with the above embodiments, the embodiments of the present disclosure further provide an edge node device, which enables E-TREE service, and the edge node device comprises:

[0082] a receiving module configured to receive an EVPN routing message and obtain first field information in the EVPN routing message;

[0083] a processing module configured to, when the first field information carries a first identifier, obtain second field information in the EVPN routing message, wherein the second field information comprises Leaf-group information;

[0084] a determining module configured to determine a user corresponding to the Leaf-group information and establish communication with the user.

[0085] The EVPN routing message comprises:

[0086] an EVPN MAC Advertisement routing message.

[0087] The edge node device further comprises:

[0088] a configuration module configured to configure a Hybrid mode, configure a virtual switching instance (VSI) for the Hybrid mode, and control, through the VSI, when the first field information carries a first identifier, obtaining second field information in the EVPN routing message.

[0089] For the device embodiments, since they basically correspond to the method embodiments, the relevant parts are referred to the part of the method embodiments. The device embodiments described above are only illustrative, wherein the modules described as separate components can or can not be physically separated, and the components shown as modules can or can not be physical modules, i.e., can be located in one place or distributed on multiple network modules. Some or all of the modules can be selected to achieve the purposes of the schemes of the present specification according to actual needs. Those skilled in the art can understand and implement without creative labor.

[0090] The above describes specific embodiments of the present specification. Other embodiments are within the scope of the appended claims. In some cases, the acts or steps recited in the claims can be performed in a different order than the order in which they are recited and still achieve the desired results. In addition, the processes depicted in the figures do not necessarily require the particular order shown, or sequential order, to achieve the desired results. In certain implementations, multitasking and parallel processing can be advantageous.

[0091] Other embodiments of the present specification will be apparent to those skilled in the art upon consideration of the specification and practice of the application disclosed herein. The present specification is intended to cover any variations, uses or adaptations of the present specification following, in general, the principles of the present specification and including such departures from the present specification as come within known or customary practice in the art to which the present specification pertains or relates. The specification is to be regarded as illustrative rather than restrictive, and the true scope and spirit of the present specification are indicated by the following claims.

[0092] It should be understood that the present specification is not limited to the precise structures described herein and as shown in the drawings, and that various modifications and changes can be made without departing from the scope thereof. The scope of the present specification is indicated by the appended claims, and their equivalents.

[0093] The above only describes the preferred embodiments of the present specification, and does not limit the present specification, and any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present specification shall be included in the scope of protection of the present specification.

Claims

1. A method for managing traffic, characterized in that, The method is applied to PE devices in an E-TREE service architecture, and the method includes: Receive EVPN routing messages and obtain the first field information in the EVPN routing messages; When the first field information carries the first identifier, the second field information in the EVPN routing message is obtained, and the second field information includes Leaf-group information; Identify the user corresponding to the Leaf-group information and establish communication with that user; The Leaf-group information corresponds to the user's business attributes, and the Leaf-group information is different for different business attributes.

2. The method according to claim 1, characterized in that, The EVPN routing message includes: EVPN MAC Advertisement routing message.

3. The method according to claim 1, characterized in that, The method further includes: When the first field information carries the second identifier, it indicates that the EVPN routing message comes from the Leaf interface, and the message from the PE is forwarded to the Root attribute interface.

4. The method according to claim 1, characterized in that, The method further includes: When the first field information carries a third identifier, it indicates that the EVPN routing message comes from the Root interface, and the message from the PE will be forwarded to all interfaces.

5. The method according to claim 1, characterized in that, When the first field information carries a first identifier, obtaining the second field information in the EVPN routing message includes: Configure Hybrid mode, configure a Virtual Switching Instance (VSI) for Hybrid mode, and use the VSI to control the acquisition of the second field information in the EVPN routing message when the first field information carries the first identifier.

6. An edge node device, characterized in that, The edge node device includes: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor, when executing the program, implements the following method: Receive EVPN routing messages and obtain the first field information in the EVPN routing messages; When the first field information carries the first identifier, the second field information in the EVPN routing message is obtained, and the second field information includes Leaf-group information; Identify the user corresponding to the Leaf-group information and establish communication with that user; The Leaf-group information corresponds to the user's business attributes, and the Leaf-group information is different for different business attributes.

7. An edge node device, characterized in that, The edge node device enables the E-TREE service, and the edge node device includes: The receiving module is used to receive EVPN routing messages and obtain the first field information in the EVPN routing message. The processing module is configured to obtain the second field information in the EVPN routing message when the first field information carries the first identifier, wherein the second field information includes Leaf-group information; The determination module is used to determine the user corresponding to the Leaf-group information and establish communication with that user; The Leaf-group information corresponds to the user's business attributes, and the Leaf-group information is different for different business attributes.

8. The edge node device according to claim 7, characterized in that, The EVPN routing message includes: EVPN MAC Advertisement routing message.

9. The edge node device according to claim 7, characterized in that, The edge node device also includes: The configuration module is used to configure the Hybrid mode, configure a Virtual Switching Instance (VSI) for the Hybrid mode, and control the acquisition of the second field information in the EVPN routing message when the first field information carries the first identifier.

Images