Service flow rate limiting system, method and device

Abstract

The embodiment of the invention provides a service flow speed limiting system, method and device, and relates to the technical field of networks, the service flow speed limiting system comprises a main leaf node and a standby leaf node, the main leaf node is in communication connection with the standby leaf node, and the main leaf node and the standby leaf node are both connected with a switch; the standby leaf node is used for receiving the first uplink flow and forwarding the first uplink flow to the main leaf node; the primary leaf node is used for receiving the first uplink flow and the second uplink flow and forwarding the first uplink flow and the second uplink flow according to a preset uplink bandwidth; the first uplink flow and the second uplink flow are sent by the terminal equipment through the switch, and the preset uplink bandwidth is the maximum uplink bandwidth capable of being used by the terminal equipment. By applying the scheme provided by the embodiment of the invention, the speed of the private line service flow of the terminal equipment can be accurately limited.

Description

Technical Field

[0001] The present application relates to the field of network technology, and in particular to a service flow rate limiting system, method, and device. Background Art

[0002] Switches in the network (such as OLT (Optical Line Terminal)) can be connected to terminal devices to provide traffic forwarding services for terminal devices. The same switch can be connected to multiple leaf nodes, which are leaf nodes in the Spine-Leaf network structure. Multiple leaf nodes can forward traffic for the switch. When the same switch is connected to two leaf nodes, a dual-home dual-active access scenario is formed. Dual-home means that a switch is connected to two leaf nodes, and dual-active means that both leaf nodes can forward traffic for the switch. When the switch is connected to multiple leaf nodes, the traffic of the terminal devices connected to the switch can be forwarded through multiple leaf nodes. This makes it difficult to limit the traffic rate of the dedicated line services of terminal devices.

[0003] Take the dual-homing and dual-active access scenario as an example. Figure 1 , is a schematic diagram of the first speed limiting method in the related art. The figure includes the switch OLT, the terminal equipment CPE (Customer Premise(s) Equipment), and two leaf nodes connected to the OLT, namely A-leaf1 and A-leaf2. The dotted line between A-leaf1 and A-leaf2 indicates that the two maintain dual active based on the link aggregation protocol. Figure 1 In the scenario shown, if the available bandwidth required to be provided to the CPE is 100M, since both A-leaf1 and A-leaf2 can forward the traffic of the CPE, the speed can be limited to 50M on the interfaces of A-leaf1 and A-leaf2. In this case, if there are multiple service flows for the dedicated line service of the terminal device, the OLT can forward different service flows with different leaf nodes. The two leaf nodes are each limited to 50M, for a total CPE speed limit of 100M. However, if there is only one service flow (indicated by a dotted double arrow in the figure), the OLT can only forward the service flow with one leaf node, and the CPE speed limit is reduced to 50M, which cannot meet the CPE's 100M available bandwidth requirement.

[0004] In another case, see Figure 2 , which is a schematic diagram of the second speed limiting method in the related art, Figure 2 The network structure and Figure 1The difference is that both leaf nodes are limited to 100M. In this case, if there is only one service flow, the OLT only forwards the service flow with one leaf node, and the speed limit of the CPE is 100M. However, if there are multiple service flows (two of the service flows are represented by two dotted double arrows in the figure), the OLT can forward different service flows with different leaf nodes, and each leaf node is limited to 100M. The total speed limit of the two leaf nodes is 200M, which is higher than the available bandwidth of CPE 100M.

[0005] It can be seen that in a scenario where a switch is connected to multiple leaf nodes and multiple leaf nodes can forward traffic, it is difficult to accurately limit the speed of the dedicated line service traffic of the terminal devices connected to the switch. Summary of the invention

[0006] The purpose of the embodiments of the present application is to provide a service traffic speed limiting system, method, and device to accurately limit the speed of the dedicated line service traffic of the terminal device. The specific technical solution is as follows:

[0007] In a first aspect, an embodiment of the present application provides a service flow rate limiting system, the service flow rate limiting system comprising: a primary leaf node and a backup leaf node, the primary leaf node and the backup leaf node are communicatively connected, and the primary leaf node and the backup leaf node are both connected to a switch;

[0008] The standby leaf node is configured to receive the first uplink traffic and forward the first uplink traffic to the active leaf node;

[0009] The master leaf node is configured to receive the first uplink traffic and the second uplink traffic, and forward the first uplink traffic and the second uplink traffic according to a preset uplink bandwidth;

[0010] The first uplink traffic and the second uplink traffic are sent by the terminal device through the switch, and the preset uplink bandwidth is the maximum uplink bandwidth that can be used by the terminal device.

[0011] In a second aspect, an embodiment of the present application provides a service traffic rate limiting method, which is applied to a standby leaf node, wherein the standby leaf node is communicatively connected to an active leaf node, and both the active leaf node and the standby leaf node are connected to a switch, and the method includes:

[0012] receiving first uplink traffic, where the first uplink traffic is sent by a terminal device through the switch;

[0013] The first uplink traffic is forwarded to the active leaf node, so that the active leaf node forwards the received uplink traffic according to a preset uplink bandwidth.

[0014] In a third aspect, an embodiment of the present application provides a service traffic rate limiting method, which is applied to a primary leaf node, wherein the primary leaf node is communicated with a backup leaf node, and both the primary leaf node and the backup leaf node are connected to a switch, and the method includes:

[0015] Receiving the first uplink traffic forwarded by the standby leaf node;

[0016] receiving second upstream traffic;

[0017] forwarding the first uplink traffic and the second uplink traffic according to a preset uplink bandwidth;

[0018] The first uplink traffic is sent by the terminal device to the backup leaf node through the switch, the second uplink traffic is sent by the terminal device to the active leaf node through the switch, and the preset uplink bandwidth is the maximum uplink bandwidth that can be used by the terminal device.

[0019] In a fourth aspect, an embodiment of the present application provides a service flow rate limiting device, which is applied to a standby leaf node, wherein the standby leaf node is communicatively connected to an active leaf node, and both the active leaf node and the standby leaf node are connected to a switch, and the device includes:

[0020] A first traffic receiving module, configured to receive first uplink traffic, where the first uplink traffic is sent by a terminal device through the switch;

[0021] The first traffic forwarding module is used to forward the first uplink traffic to the active leaf node, so that the active leaf node forwards the received uplink traffic according to a preset uplink bandwidth.

[0022] In a fifth aspect, an embodiment of the present application provides a service flow rate limiting device, which is applied to a primary leaf node, wherein the primary leaf node is communicated with a backup leaf node, and the primary leaf node and the backup leaf node are both connected to a switch, and the device includes:

[0023] A fourth traffic receiving module, used to receive the first uplink traffic forwarded by the standby leaf node;

[0024] A fifth traffic receiving module, configured to receive second uplink traffic;

[0025] a fourth traffic forwarding module, configured to forward the first uplink traffic and the second uplink traffic according to a preset uplink bandwidth;

[0026] The first uplink traffic is sent by the terminal device to the backup leaf node through the switch, the second uplink traffic is sent by the terminal device to the active leaf node through the switch, and the preset uplink bandwidth is the maximum uplink bandwidth that can be used by the terminal device.

[0027] In a sixth aspect, an embodiment of the present application provides a standby leaf node, wherein the standby leaf node is communicatively connected to an active leaf node, the active leaf node and the standby leaf node are both connected to a switch, and the standby leaf node includes:

[0028] processor;

[0029] Transceiver;

[0030] A machine-readable storage medium storing machine-executable instructions that can be executed by the processor; the machine-executable instructions prompt the processor to perform the following steps:

[0031] receiving first uplink traffic, where the first uplink traffic is sent by a terminal device through the switch;

[0032] The first uplink traffic is forwarded to the active leaf node, so that the active leaf node forwards the received uplink traffic according to a preset uplink bandwidth.

[0033] In a seventh aspect, an embodiment of the present application provides a primary leaf node, wherein the primary leaf node is communicatively connected to a backup leaf node, the primary leaf node and the backup leaf node are both connected to a switch, and the primary leaf node includes:

[0034] processor;

[0035] Transceiver;

[0036] A machine-readable storage medium storing machine-executable instructions that can be executed by the processor; the machine-executable instructions prompt the processor to perform the following steps:

[0037] Receiving the first uplink traffic forwarded by the standby leaf node;

[0038] receiving second upstream traffic;

[0039] forwarding the first uplink traffic and the second uplink traffic according to a preset uplink bandwidth;

[0040] The first uplink traffic is sent by the terminal device to the backup leaf node through the switch, the second uplink traffic is sent by the terminal device to the active leaf node through the switch, and the preset uplink bandwidth is the maximum uplink bandwidth that can be used by the terminal device.

[0041] In an eighth aspect, an embodiment of the present application provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the method described in any one of the second aspect or the third aspect is implemented.

[0042] In a ninth aspect, an embodiment of the present application further provides a computer program product comprising instructions, which, when executed on a computer, enables the computer to execute any of the methods described in the second or third aspects above.

[0043] Beneficial effects of the embodiments of the present application:

[0044] The service flow rate limiting system provided in the embodiment of the present application includes a main leaf node and a backup leaf node, both of which are connected to the switch, and the switch is connected to the terminal device. Therefore, the upstream traffic of the terminal device can be sent to the main leaf node and the backup leaf node respectively. For the first upstream traffic sent to the backup leaf node, the backup leaf node will forward the first upstream traffic to the main leaf node, and then the main leaf node will continue to forward it. For the second upstream traffic sent to the main leaf node, the main leaf node will directly forward the second upstream traffic. That is, although the switch will send upstream traffic to the main leaf node and the backup leaf node respectively, ultimately all upstream traffic is forwarded to the outside of the service flow rate limiting system through the main leaf node. Therefore, the main leaf node can monitor all upstream traffic, so as to achieve the speed limit of the upstream traffic in the scenario where the switch is connected to multiple leaf nodes and multiple leaf nodes can forward traffic. BRIEF DESCRIPTION OF THE DRAWINGS

[0045] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other embodiments can also be obtained based on these drawings.

[0046] Figure 1 It is a schematic diagram of the first speed limiting method in the related art;

[0047] Figure 2 Schematic diagram of the second speed limiting method in the related art;

[0048] Figure 3 A schematic diagram of an application scenario provided for an embodiment of the present application;

[0049] Figure 4 A schematic diagram of a business traffic speed limiting system in the related art;

[0050] Figure 5 A schematic diagram of the structure of the first service flow rate limiting system provided in an embodiment of the present application;

[0051] Figure 6 A flowchart of the first service flow rate limiting method provided in an embodiment of the present application;

[0052] Figure 7 A schematic diagram of the structure of a second service flow rate limiting system provided in an embodiment of the present application;

[0053] Figure 8 A schematic diagram of a traffic forwarding path provided in an embodiment of the present application;

[0054] Fig. 9 A flow chart of a second method for limiting the speed of business traffic provided in an embodiment of the present application;

[0055] Fig.10 A flowchart of a third method for limiting the speed of business traffic provided in an embodiment of the present application;

[0056] Fig.11 A schematic diagram of the structure of the first service flow rate limiting device provided in an embodiment of the present application;

[0057] Fig.12 A schematic diagram of the structure of a second service flow rate limiting device provided in an embodiment of the present application;

[0058] Fig.13 A schematic diagram of the structure of a standby leaf node provided in an embodiment of the present application;

[0059] Fig.14 A schematic diagram of the structure of a main leaf node provided in an embodiment of the present application. DETAILED DESCRIPTION

[0060] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field based on the present application belong to the scope of protection of the present application.

[0061] In order to better illustrate the application scenario of the embodiment of the present application, first refer to Figure 3 An application scenario of an embodiment of the present application is described.

[0062] See also Figure 3 , is a schematic diagram of an application scenario provided in an embodiment of the present application.

[0063] The figure includes vBRAS (virtual Broadband Remote Access Server)-VP (Control Plane) 1 and vBRAS-CP2, which serve as a cloud resource pool and a metropolitan area cloud network. Figure 3 It also includes the DV (Data Center)-leaf connected to vBRAS-CP1 and the DC-leaf connected to vBRAS-CP2. Figure 3 It also includes two VRs (Core Routers), which are connected to the core network of the 163 network segment. Figure 3 It also includes two S-leafs, which are respectively connected to pUP1, pUP2, and pUP3. pUP1, pUP2, and pUP3 are all home bandwidth service gateways and are all located in the vBRAS-UP (User Plane) pool. Figure 3 The network also includes two A-leafs, both of which are connected to the OLT, and the OLT is also connected to the ONU (Optical Network Unit) and the CPE. The two A-leafs maintain dual active based on the link aggregation protocol. For example, the link aggregation protocol may be S-trunk or other link aggregation protocols.

[0064] Figure 3 There are also two spines in the VR. Each spine is connected to each DC-leaf, each A-leaf, and each S-leaf. Another VR is connected to one spine, and the two VRs are connected to different spines.

[0065] In one example, ONE and pUP1-pUP3 are used to implement home broadband services, IPTV (Internet Protocol Television) services, etc. CPE is used to implement government affairs or enterprise services.

[0066] Therefore, the forwarding path of the service traffic of the home broadband service and IPTV service can be pUP to S-leaf to Spine to VR to core network, or the forwarding path can also be pUP to S-leaf to Spine to A-leaf to OLT to ONU.

[0067] The forwarding path of business traffic for government affairs or enterprise services can be CPE to OLT to A-leaf to Spine to VR to core network.

[0068] pUP1, pUP2, and pUP3 are located in the vBRAS-UP pool and can be speed-limited by the vBRAS-UP device. EVPN (Ethernet Virtual Private Network) VPLS (Virtual Private Lan Service) over SRv6 (Segment Routing Internet Protocol Version 6) can be established between A-Leaf and S-Leaf.

[0069] exist Figure 3 In the application scenario shown, the above-mentioned problems may occur when the speed of the ONU and VPE connected to the OLT is limited.

[0070] In order to solve the above problems, a processing method is proposed in the related art. Figure 3 For example, the CPE in the example has the above speed limit problem. In the related art, the CPE separately adds a dedicated link between the OLT and the A-leaf.

[0071] See also Figure 4 , which is a schematic diagram of a service flow rate limiting system in the related art. The connection relationship between CPE, OLT, A-leaf1, and A-leaf2 in the figure can be seen in the previous text. Figure 3 As shown, no further details are given here.

[0072] The pair of dotted double arrows in the figure represent newly added dedicated links. In this case, the OLT is accessed in a dual-home single-active manner. That is, the OLT is connected to both A-leaf1 and A-leaf2, but only the link with A-leaf1 is activated, and the link with A-leaf2 is not activated. That is, traffic is forwarded only through A-leaf1. Therefore, the speed is limited to 100M on A-leaf1 and A-leaf2 respectively, but since traffic is forwarded only through A-leaf1, the 100M speed limit for CPE can be achieved.

[0073] However, the above method requires adding a dedicated link, which consumes additional optical path resources, has high construction costs, and is not available when there are no construction conditions.

[0074] In order to accurately limit the dedicated line service traffic of terminal devices connected to the switch in a scenario where the switch is connected to multiple leaf nodes and all of the leaf nodes can forward traffic, the embodiments of the present application provide a service traffic speed limiting system, method, and device.

[0075] See also Figure 5, which is a structural diagram of the first business traffic speed limiting system provided in an embodiment of the present application, the above-mentioned business traffic speed limiting system includes: a main leaf node 501 and a backup leaf node 502, the above-mentioned main leaf node 501 and the above-mentioned backup leaf node 502 are communicated with each other, and the above-mentioned main leaf node 501 and the above-mentioned backup leaf node 502 are both connected to the switch.

[0076] It should be noted that the service flow rate limiting system includes one active leaf node 501 and one or more standby leaf nodes 502. Figure 5 Only one standby leaf node 502 is shown. When there are multiple standby leaf nodes 502, and the active leaf node is not faulty, each standby leaf node 502 performs the same steps, and one standby leaf node is used as an example for description below.

[0077] See also Figure 6 , which is a flow chart of the first service flow rate limiting method provided in an embodiment of the present application, including the following steps S601-S604.

[0078] S601: The standby leaf node 502 receives the first uplink traffic.

[0079] The first uplink traffic is sent by the terminal device through the switch.

[0080] S602 : The standby leaf node 502 forwards the first uplink traffic to the active leaf node 501 .

[0081] S603: The active leaf node 501 receives the first uplink traffic and the second uplink traffic.

[0082] The second uplink traffic is sent by the terminal device through the switch.

[0083] S604: The active leaf node 501 forwards the first uplink traffic and the second uplink traffic according to a preset uplink bandwidth.

[0084] Among them, the above-mentioned preset uplink bandwidth is the maximum uplink bandwidth that can be used by the above-mentioned terminal device.

[0085] After receiving the second upstream traffic sent by the terminal device, the above-mentioned switch encapsulates the second destination MAC (Media Access Control) address in the Ethernet header of the second upstream traffic as the MAC address of the interface on the primary leaf node 501. Therefore, after the primary leaf node 501 determines that the second destination MAC address is the MAC address of its own interface, it will decapsulate the outer Ethernet header and forward the second upstream traffic through the above-mentioned interface according to the destination IP address of the inner IP header.

[0086] In addition, the above-mentioned uplink traffic forwarding process is a forwarding process for a terminal device, and the same forwarding process can be used for uplink traffic forwarding for each terminal device. The above-mentioned main leaf node 501 can record the correspondence between the device information of different terminal devices and the preset uplink bandwidth of the terminal device. Therefore, the terminal device to which it belongs can be determined based on the information contained in the first uplink traffic and the second uplink traffic, thereby determining the preset uplink bandwidth of the terminal device. Furthermore, when forwarding the first uplink traffic and the second uplink traffic, it is ensured that the total traffic forwarding speed of the two does not exceed the above-mentioned preset uplink bandwidth.

[0087] As can be seen from the above, the service flow rate limiting system provided by the embodiment of the present application includes a main leaf node and a backup leaf node, both of which are connected to the switch, and the switch is connected to the terminal device. Therefore, the upstream traffic of the terminal device can be sent to the main leaf node and the backup leaf node respectively. For the first upstream traffic sent to the backup leaf node, the backup leaf node will forward the first upstream traffic to the main leaf node, and then the main leaf node will continue to forward it. For the second upstream traffic sent to the main leaf node, the main leaf node will directly forward the second upstream traffic. That is, although the switch will send upstream traffic to the main leaf node and the backup leaf node respectively, ultimately all upstream traffic is forwarded to the outside of the service flow rate limiting system through the main leaf node. Therefore, the main leaf node can monitor all upstream traffic, so as to achieve the speed limit of the upstream traffic in the scenario where the switch is connected to multiple leaf nodes and multiple leaf nodes are able to forward traffic.

[0088] In another embodiment of the present application, the above-mentioned main leaf node 501 also performs the following steps A-B.

[0089] Step A: Send a first routing protocol message to other network nodes outside the above service flow rate limiting system.

[0090] Specifically, after the active leaf node 501 sends the first routing protocol message to other network nodes, the other network nodes can learn the route for sending downstream traffic to the active leaf node 501, and the other network nodes can send downstream traffic to the active leaf node 501. However, the standby leaf node 502 will not send routing protocol messages to other network nodes, so the other network nodes cannot learn the route for sending downstream traffic to the standby leaf node 502, and will not send downstream traffic to the standby leaf node 502.

[0091] Step B: receiving and forwarding the first downstream traffic for the terminal device to the switch according to the preset downstream bandwidth.

[0092] The above-mentioned main leaf node 501 can record the correspondence between the device information of different terminal devices and the preset downlink bandwidth of the terminal device. Therefore, the terminal device to which it belongs can be determined based on the information contained in the first downlink traffic, thereby determining the preset uplink bandwidth of the terminal device. Then, when forwarding the first downlink traffic, it is ensured that its traffic forwarding speed does not exceed the above-mentioned preset downlink bandwidth.

[0093] As can be seen from the above, in the embodiment of the present application, only the primary leaf node will send the first routing protocol message to other network nodes, and the backup leaf node will not send routing protocol messages to other network nodes. Other network nodes can only learn the route to forward the downstream traffic to the primary leaf node, and when sending downstream traffic to the terminal device, they will only forward the downstream traffic to the primary leaf node. As a result, all downstream traffic sent to the terminal device is forwarded via the primary leaf node, and the primary leaf node can monitor all downstream traffic sent to the terminal device, thereby achieving downstream traffic speed limit for the terminal device.

[0094] In one embodiment of the present application, the above-mentioned active leaf node and the backup leaf node are respectively configured with a VPLS instance, a layer 3 virtual interface of the network layer, a layer 2 virtual interface of the link layer, a physical sub-interface and a physical interface of the physical layer. The above-mentioned active leaf node and the backup leaf node are connected via a VPLS PW (Pseudo-Wire), the above-mentioned physical interface is connected to the above-mentioned switch, the physical sub-interface in the same leaf node is connected to the physical interface, the above-mentioned layer 3 virtual interface has a one-to-one correspondence with the VLAN (Virtual Local Area Network) of the above-mentioned physical sub-interface, and the physical sub-interface will send the upstream traffic to its corresponding layer 3 virtual interface after receiving the upstream traffic, and the layer 3 virtual interface will send the downstream traffic to its corresponding physical sub-interface after receiving the downstream traffic, and the layer 3 virtual interface and the physical sub-interface in the same leaf node are associated with the same VPLS instance.

[0095] It should be noted that each leaf node may have a layer 3 virtual interface and multiple physical sub-interfaces as long as the two correspond one to one.

[0096] See also Figure 7 , which is a structural diagram of the second service traffic speed limiting system provided in an embodiment of the present application. The dotted box on the left side of the figure represents the main leaf node 501, and the dotted box on the right side represents the backup leaf node 502.

[0097] The active leaf node 501 includes a physical interface P1, which is connected to physical sub-interfaces P1.1 and P1.2. The active leaf node 501 also includes a first layer 2 virtual interface. Figure 7 The active leaf node 501 also includes two first layer three virtual interfaces, which are represented by L3VE1.1 and L3VE1.2. L3VE1.1 corresponds to P1.1, and L3VE1.2 corresponds to P1.2.

[0098] The standby leaf node 502 includes a physical interface P2, which is connected to physical sub-interfaces P2.1 and P2.2. The standby leaf node 502 also includes a second layer 2 virtual interface. Figure 7 The standby leaf node 502 also includes two layer 2 three virtual interfaces, which are represented by L3VE2.1 and L3VE2.2, respectively. L3VE2.1 corresponds to P2.1, and L3VE2.2 corresponds to P2.2.

[0099] The dotted box running through the active leaf node 501 and the standby leaf node 502 in the figure represents a VPLS instance. The dotted box contains L2-VE1, L2-VE2, P1.1, and P1.2, indicating that L2-VE1, L2-VE2, P1.1, and P1.2 are bound to the same VPLS instance. The active leaf node 501 and the standby leaf node 502 are connected via a VPLS PW, thereby constructing a Layer 2 channel between the two leaf nodes. The VPLS PW is established based on the physical channel between the P3 interfaces in the physical layer of the two leaf nodes.

[0100] Link aggregation is deployed between the P1 interface and the P2 interface of the active leaf node 501 and the standby leaf node 502 , and the two are connected via the P3 interface to implement link aggregation heartbeat keepalive between the active leaf node 501 and the standby leaf node 502 .

[0101] On this basis, the specific forwarding process of the upstream traffic can be referred to in step V to step G below.

[0102] Step V: The first VPLS instance in the standby leaf node 502 forwards the first upstream traffic to the active leaf node 501 through the VPLS PW based on the first destination MAC address of the first upstream traffic.

[0103] Among them, the above-mentioned first destination MAC address is: the MAC address of the first layer three virtual interface in the above-mentioned main leaf node.

[0104] After receiving the first upstream traffic sent by the terminal device, the above-mentioned switch encapsulates the first destination MAC address in the Ethernet header of the first upstream traffic as the MAC address of the interface on the primary leaf node 501. Therefore, after the above-mentioned first VPLS instance receives the first upstream traffic, it searches the MAC table based on the first destination MAC address, and determines that the next-hop IP address is the tunnel IP address of the VPLS PW. The tunnel header whose destination IP address is the tunnel IP address is encapsulated in the outer layer of the first upstream traffic. According to the destination IP address of the tunnel header, the first upstream traffic after the encapsulation of the tunnel header is forwarded to the primary leaf node 501 through the VPLS PW.

[0105] Step D: The second VPLS instance in the active leaf node 501 sends the first uplink traffic to the first layer 3 virtual interface through the first layer 2 virtual interface based on the first destination MAC address.

[0106] After receiving the first upstream traffic, the second VPLS instance decapsulates the outer tunnel header, determines that the destination MAC address in the Ethernet header is the virtual MAC address of the first layer 3 virtual interface, and then transparently transmits the first upstream traffic to the first layer 3 virtual interface through the first layer 2 virtual interface. The first layer 3 virtual interface decapsulates the Ethernet header of the first upstream traffic, and then performs routing table lookup and forwarding according to the destination IP address in the inner layer IP header.

[0107] Step E: The second physical interface of the active leaf node 501 receives the second uplink traffic, and sends the second uplink traffic to the first physical sub-interface according to the second destination MAC address of the second uplink traffic.

[0108] The second destination MAC address is the MAC address of the first layer three virtual interface, and the first physical sub-interface corresponds to the first layer three virtual interface.

[0109] Each first physical sub-interface corresponds to a first layer three virtual interface, the second destination MAC address of the second upstream traffic is the virtual MAC address of the first layer three virtual interface, and the second physical interface sends the second upstream traffic to the first physical sub-interface corresponding to the first layer three virtual interface whose MAC address is the second destination MAC address of the second upstream traffic.

[0110] Step F: The first physical sub-interface sends the second uplink traffic to the first layer 3 virtual interface through the first layer 2 virtual interface according to the second destination MAC address.

[0111] Specifically, the first physical sub-interface corresponds to the first layer 3 virtual interface whose MAC address corresponds to the second destination MAC address, and transparently transmits the second uplink traffic to the first layer 3 virtual interface through the first layer 2 virtual interface.

[0112] Step G: The first layer three virtual interface forwards the first upstream traffic and the second upstream traffic according to a preset upstream bandwidth.

[0113] Specifically, the correspondence between the device information of different terminal devices and the preset uplink bandwidth of the terminal device is configured in the first layer three virtual interfaces, so that the terminal device to which it belongs can be determined according to the information contained in the first uplink flow and the second uplink flow, thereby determining the preset uplink bandwidth of the terminal device. Then, when forwarding the first uplink flow and the second uplink flow, it is ensured that the total flow forwarding speed of the two does not exceed the above-mentioned preset uplink bandwidth.

[0114] In addition, in terms of forwarding the first downstream traffic, after receiving the first downstream traffic, the first layer 3 interface sends the first downstream traffic to the first physical sub-interface corresponding to the first layer 3 interface through the first layer 2 virtual interface, the first physical sub-interface sends the first downstream traffic to the second physical interface, and the first downstream traffic is sent to the switch through the second physical interface, and the switch forwards the first downstream traffic to the terminal device.

[0115] Furthermore, the above-mentioned main leaf node 501 can have multiple first-layer three-virtual interfaces, and different first-layer three-virtual interfaces are used to forward the upstream traffic and downstream traffic of different terminal devices. The same first-layer three-virtual interface can be used to forward the upstream traffic and downstream traffic of one or more terminal devices.

[0116] In addition, when the virtual MAC address of the first layer 3 virtual interface of the active leaf node 501 is in an activated and available state, the virtual MAC address of the layer 3 virtual interface of the standby leaf node 502 is in an unactivated and unavailable state, that is, the switch will not forward the uplink traffic with the virtual MAC address of the layer 3 virtual interface of the standby leaf node as the destination MAC address. Other network nodes will not forward the downlink traffic with the virtual MAC address of the layer 3 virtual interface of the standby leaf node as the destination MAC address.

[0117] See also Figure 8 , is a traffic forwarding path schematic diagram provided in an embodiment of the present application.

[0118] and Figure 7In comparison, the figure shows a switch (OLT) connected to the main leaf node 501 and the backup leaf node 502. The OLT is connected to two terminal devices, namely terminal device 1 and terminal device 2. The IP address of terminal device 1 is 192.168.0.2, and the IP address of terminal device 2 is 192.168.0.3. The gateway addresses of the main leaf node 501 and the backup leaf node 502 are both configured in the address pool 192.168.0.1. The above IP addresses are only examples, and the embodiments of the present application do not limit the specific values ​​of the IP addresses.

[0119] There are two arrows from terminal device 1 to L3VE1.1 in the figure, indicating the forwarding path of the upstream traffic, wherein the arrow passing through the standby leaf node 502 indicates the forwarding path of the first upstream traffic, and the other arrow indicates the forwarding path of the second upstream traffic.

[0120] The arrow from L3VE1.1 to terminal device 1 in the figure represents the forwarding path of the downstream traffic.

[0121] In addition, since the main leaf node 501 may fail, in order to ensure that traffic forwarding can still be performed normally after the main leaf node 501 fails, VRRP (Virtual Router Redundancy Protocol) and VSRP (Virtual Service Redundancy Protocol) can be configured between the main leaf node 501 and the backup leaf node 502. The heartbeat keepalive of VRRP and VSRP is implemented through VPLS PW. Therefore, through VPLS PW, the main leaf node 501 can monitor whether the backup leaf node 502 fails, and the backup leaf node 502 can also monitor whether the main leaf node 501 fails.

[0122] The leaf nodes negotiate through VRRP to determine the active leaf node 501 and the standby leaf node 502 .

[0123] In order to cope with the problem of failure of the active leaf node 501, the standby leaf node 502 further performs the following step H.

[0124] Step H: If it is determined that the above-mentioned active leaf node 501 is in a faulty state, the third uplink traffic is received, and the above-mentioned third uplink traffic is forwarded according to the above-mentioned preset uplink bandwidth.

[0125] The third uplink traffic is sent by the terminal device through the switch.

[0126] After the active leaf node 501 fails, the standby leaf node 502 detects the failure of the active leaf node 501 through the VRRP heartbeat, and the standby leaf node 502 is changed to the new active leaf node, and the virtual MAC address of the standby leaf node 502 is activated. After that, VSPR synchronizes the VRRP status and notifies the routing module of the standby leaf node 502 that the original active leaf node 501 fails and traffic forwarding is required.

[0127] After the original active leaf node 501 fails, the interface between the original active leaf node 501 and the switch fails, and the switch can no longer send the third upstream traffic to the original active leaf node 501, so the switch can only send the third upstream traffic to the original standby leaf node 502. On this basis, the standby leaf node 502 also determines that the active leaf node 501 fails and cannot forward the third upstream traffic, and the standby leaf node 502 is changed to the new active leaf node. The new active leaf node can forward the third upstream traffic based on the method shown in steps S601-S604 shown above, and the specific forwarding method is not repeated here.

[0128] From the above, it can be seen that in the solution provided by the embodiment of the present application, after the main leaf node fails, the backup leaf node can serve as the new main leaf node to ensure the normal forwarding of the upstream traffic and still complete the speed limit processing of the upstream traffic.

[0129] In another embodiment of the present application, the above-mentioned backup leaf node 502 can also perform the following steps I-J.

[0130] Step I: If it is determined that the active leaf node 501 is in a faulty state, a second routing protocol message is sent to other network nodes outside the service flow rate limiting system.

[0131] Step J: According to the preset downstream bandwidth, receiving and forwarding the second downstream traffic for the terminal device to the switch.

[0132] As shown above, after the standby leaf node 502 determines that the active leaf node 501 is in a faulty state, it changes itself to a new active leaf node to forward the second downlink traffic. The specific forwarding process can be found in the description of steps A-B above, which will not be repeated here.

[0133] From the above, it can be seen that in the solution provided by the embodiment of the present application, after the main leaf node fails, the backup leaf node can serve as the new main leaf node to ensure the normal forwarding of the downstream traffic and still complete the speed limit processing of the downstream traffic.

[0134] In another embodiment of the present application, in order to ensure the security of the network, the device information of the above-mentioned terminal device is recorded in the main leaf node 501.

[0135] Specifically, the above device information may include user name, IP address, VLAN name and other information.

[0136] The active leaf node 501 also performs the following step K.

[0137] Step K: forwarding the first uplink traffic and the second uplink traffic that conform to the above device information.

[0138] If the information of the first uplink flow and the second uplink flow matches the above device information, it means that the flow is for normal terminal users, and the flow is forwarded normally. If the information of the first uplink flow and the second uplink flow does not match the above device information, it means that the flow is for unregistered illegal terminal users, and the flow can be discarded and not forwarded.

[0139] In addition, the internal structure of the main leaf node 501 is as described above. Figure 7 In the case of the structure shown, the above device information is configured in the first layer three virtual interface, and the first layer three virtual interface verifies the flow information to determine whether the received flow information conforms to the above device information.

[0140] Furthermore, the standby leaf node 502 may also record device information, so that after the active leaf node 501 fails, the standby leaf node 502 can continue to verify the traffic information as the new active leaf node.

[0141] From the above, it can be seen that the main leaf node in the solution provided in the embodiment of the present application can also verify the information of the received traffic before forwarding the traffic, thereby preventing illegal terminal devices from impersonating and ensuring network security.

[0142] Corresponding to the aforementioned service traffic speed limiting system, an embodiment of the present application also provides a service traffic speed limiting method applied to a standby leaf node.

[0143] See also Fig. 9 , which is a flow chart of the second service traffic speed limiting method provided in an embodiment of the present application, and is applied to a backup leaf node. The backup leaf node is connected to the primary leaf node via a VPLS PW. Both the primary leaf node and the backup leaf node are connected to a switch. The method includes the following steps S901-S902.

[0144] S901: Receive first uplink traffic.

[0145] The first uplink traffic is sent by the terminal device through the switch.

[0146] S902: Forward the first uplink traffic to the master leaf node, so that the master leaf node forwards the received uplink traffic according to a preset uplink bandwidth.

[0147] As can be seen from the above, the service flow rate limiting system provided by the embodiment of the present application includes a main leaf node and a backup leaf node, both of which are connected to the switch, and the switch is connected to the terminal device. Therefore, the upstream traffic of the terminal device can be sent to the main leaf node and the backup leaf node respectively. For the first upstream traffic sent to the backup leaf node, the backup leaf node will forward the first upstream traffic to the main leaf node, and then the main leaf node will continue to forward it. For the second upstream traffic sent to the main leaf node, the main leaf node will directly forward the second upstream traffic. That is, although the switch will send upstream traffic to the main leaf node and the backup leaf node respectively, ultimately all upstream traffic is forwarded to the outside of the service flow rate limiting system through the main leaf node. Therefore, the main leaf node can monitor all upstream traffic, so as to achieve the speed limit of the upstream traffic in the scenario where the switch is connected to multiple leaf nodes and multiple leaf nodes are able to forward traffic.

[0148] In one embodiment of the present application, the standby leaf node is configured with a first VPLS instance, a layer 3 virtual interface of the network layer, a layer 2 virtual interface of the link layer, a physical sub-interface and a physical interface of the physical layer, the active leaf node and the standby leaf node are connected via a virtual private LAN service VPLS pseudo-wire PW, the physical interface is connected to the switch, the physical sub-interface is connected to the physical interface, the layer 3 virtual interface has a one-to-one correspondence with the virtual LAN VLAN of the physical sub-interface, and the layer 3 virtual interface and the physical sub-interface are associated with the same VPLS instance;

[0149] The above step S902 is implemented through the following step L.

[0150] Step L: The first VPLS instance forwards the first upstream traffic to the active leaf node through the VPLSPW based on the first destination MAC address of the first upstream traffic, so that the active leaf node forwards the received upstream traffic according to the preset upstream bandwidth.

[0151] In one embodiment of the present application, the above method further includes:

[0152] If it is determined that the active leaf node is in a faulty state, receiving a third upstream flow, wherein the third upstream flow is sent by the terminal device through the switch;

[0153] The third uplink traffic is forwarded according to the preset uplink bandwidth.

[0154] From the above, it can be seen that in the solution provided by the embodiment of the present application, after the main leaf node fails, the backup leaf node can serve as the new main leaf node to ensure the normal forwarding of the upstream traffic and still complete the speed limit processing of the upstream traffic.

[0155] In one embodiment of the present application, the method further includes:

[0156] If it is determined that the active leaf node is in a faulty state, sending a second routing protocol message to other network nodes outside the service flow rate limiting system;

[0157] According to the preset downstream bandwidth, second downstream traffic for the terminal device is received and forwarded to the switch.

[0158] From the above, it can be seen that in the solution provided by the embodiment of the present application, after the main leaf node fails, the backup leaf node can serve as the new main leaf node to ensure the normal forwarding of the downstream traffic and still complete the speed limit processing of the downstream traffic.

[0159] Corresponding to the aforementioned service traffic speed limiting system, the embodiment of the present application also provides a service traffic speed limiting method applied to a primary leaf node.

[0160] See also Fig.10 , which is a flow chart of the third service traffic speed limiting method provided in an embodiment of the present application, is applied to the main leaf node, the main leaf node is communicated with the backup leaf node, the main leaf node and the backup leaf node are both connected to the switch, and the method includes the following steps S1001-S1003.

[0161] S1001: Receive the first uplink traffic forwarded by the standby leaf node.

[0162] S1002: Receive second uplink traffic.

[0163] S1003: Forward the first uplink traffic and the second uplink traffic according to the preset uplink bandwidth.

[0164] The first uplink traffic is sent by the terminal device to the backup leaf node through the switch, the second uplink traffic is sent by the terminal device to the active leaf node through the switch, and the preset uplink bandwidth is the maximum uplink bandwidth that can be used by the terminal device.

[0165] As can be seen from the above, the service flow rate limiting system provided by the embodiment of the present application includes a main leaf node and a backup leaf node, both of which are connected to the switch, and the switch is connected to the terminal device. Therefore, the upstream traffic of the terminal device can be sent to the main leaf node and the backup leaf node respectively. For the first upstream traffic sent to the backup leaf node, the backup leaf node will forward the first upstream traffic to the main leaf node, and then the main leaf node will continue to forward it. For the second upstream traffic sent to the main leaf node, the main leaf node will directly forward the second upstream traffic. That is, although the switch will send upstream traffic to the main leaf node and the backup leaf node respectively, ultimately all upstream traffic is forwarded to the outside of the service flow rate limiting system through the main leaf node. Therefore, the main leaf node can monitor all upstream traffic, so as to achieve the speed limit of the upstream traffic in the scenario where the switch is connected to multiple leaf nodes and multiple leaf nodes are able to forward traffic.

[0166] In one embodiment of the present application, the method further includes:

[0167] Sending a first routing protocol message to other network nodes outside the service flow rate limiting system;

[0168] According to the preset downstream bandwidth, first downstream traffic for the terminal device is received and forwarded to the switch.

[0169] As can be seen from the above, in the embodiment of the present application, only the primary leaf node will send the first routing protocol message to other network nodes, and the backup leaf node will not send routing protocol messages to other network nodes. Other network nodes can only learn the route to forward the downstream traffic to the primary leaf node, and when sending downstream traffic to the terminal device, they will only forward the downstream traffic to the primary leaf node. As a result, all downstream traffic sent to the terminal device is forwarded via the primary leaf node, and the primary leaf node can monitor all downstream traffic sent to the terminal device, thereby achieving downstream traffic speed limit for the terminal device.

[0170] In one embodiment of the present application, the active leaf node is configured with a second VPLS instance, a layer 3 virtual interface of the network layer, a layer 2 virtual interface of the link layer, a physical sub-interface and a physical interface of the physical layer, the active leaf node and the standby leaf node are connected via a virtual private LAN service VPLS pseudo-wire PW, the physical interface is connected to the switch, the physical sub-interface is connected to the physical interface, the layer 3 virtual interface corresponds to the virtual LAN VLAN of the physical sub-interface one by one, and the layer 3 virtual interface and the physical sub-interface are associated with the same VPLS instance;

[0171] The above step S1003 can be implemented by following steps M1 to M4.

[0172] Step M1: The second VPLS instance sends the first upstream traffic to the first layer 3 virtual interface through the first layer 2 virtual interface based on the first destination MAC address of the first upstream traffic.

[0173] Step M2: After the second physical interface of the main leaf node receives the second upstream traffic, it sends the second upstream traffic to the first physical sub-interface according to the second destination MAC address of the second upstream traffic, wherein the second destination MAC address is: the MAC address of the first layer three virtual interface, and the first physical sub-interface corresponds to the first layer three virtual interface.

[0174] Step M3: The first physical sub-interface sends the second uplink traffic to the first layer 3 virtual interface through the first layer 2 virtual interface according to the second destination MAC address.

[0175] Step M4: the first layer 3 virtual interface forwards the first upstream traffic and the second upstream traffic according to a preset upstream bandwidth.

[0176] In one embodiment of the present application, the device information of the terminal device is recorded in the main leaf node, and the above step S1003 can be implemented by the following steps N.

[0177] Step N: forwarding the first uplink traffic and the second uplink traffic that conform to the above device information according to the preset uplink bandwidth.

[0178] From the above, it can be seen that the main leaf node in the solution provided in the embodiment of the present application can also verify the information of the received traffic before forwarding the traffic, thereby preventing illegal terminal devices from impersonating and ensuring network security.

[0179] Corresponding to the aforementioned service traffic speed limiting system, the embodiment of the present application also provides a service traffic speed limiting device applied to a standby leaf node.

[0180] See also Fig.11 , is a structural diagram of a first service flow rate limiting device provided in an embodiment of the present application, which is applied to a standby leaf node, wherein the standby leaf node is communicatively connected to an active leaf node, and both the active leaf node and the standby leaf node are connected to a switch, and the device comprises:

[0181] A first traffic receiving module 1101 is configured to receive first uplink traffic, where the first uplink traffic is sent by a terminal device through the switch;

[0182] The first traffic forwarding module 1102 is used to forward the first uplink traffic to the active leaf node, so that the active leaf node forwards the received uplink traffic according to a preset uplink bandwidth.

[0183] As can be seen from the above, the service flow rate limiting system provided by the embodiment of the present application includes a main leaf node and a backup leaf node, both of which are connected to the switch, and the switch is connected to the terminal device. Therefore, the upstream traffic of the terminal device can be sent to the main leaf node and the backup leaf node respectively. For the first upstream traffic sent to the backup leaf node, the backup leaf node will forward the first upstream traffic to the main leaf node, and then the main leaf node will continue to forward it. For the second upstream traffic sent to the main leaf node, the main leaf node will directly forward the second upstream traffic. That is, although the switch will send upstream traffic to the main leaf node and the backup leaf node respectively, ultimately all upstream traffic is forwarded to the outside of the service flow rate limiting system through the main leaf node. Therefore, the main leaf node can monitor all upstream traffic, so as to achieve the speed limit of the upstream traffic in the scenario where the switch is connected to multiple leaf nodes and multiple leaf nodes are able to forward traffic.

[0184] In one embodiment of the present application, the standby leaf node is configured with a first VPLS instance, a layer 3 virtual interface of the network layer, a layer 2 virtual interface of the link layer, a physical sub-interface and a physical interface of the physical layer, the active leaf node and the standby leaf node are connected via a virtual private LAN service VPLS pseudo-wire PW, the physical interface is connected to the switch, the physical sub-interface is connected to the physical interface, the layer 3 virtual interface has a one-to-one correspondence with the virtual LAN VLAN of the physical sub-interface, and the layer 3 virtual interface and the physical sub-interface are associated with the same VPLS instance;

[0185] The first traffic forwarding module 1102 is specifically configured to:

[0186] The first VPLS instance forwards the first upstream traffic to the active leaf node through the VPLS PW based on a first destination media access control MAC address of the first upstream traffic.

[0187] In one embodiment of the present application, the device further includes:

[0188] A third traffic receiving module, configured to receive a third uplink traffic if it is determined that the active leaf node is in a faulty state, wherein the third uplink traffic is sent by the terminal device through the switch;

[0189] The third traffic forwarding module is used to forward the third uplink traffic according to the preset uplink bandwidth.

[0190] From the above, it can be seen that in the solution provided by the embodiment of the present application, after the main leaf node fails, the backup leaf node can serve as the new main leaf node to ensure the normal forwarding of the upstream traffic and still complete the speed limit processing of the upstream traffic.

[0191] In one embodiment of the present application, the device further includes:

[0192] A second protocol message sending module is used to send a second routing protocol message to other network nodes outside the service flow rate limiting system if it is determined that the main leaf node is in a fault state;

[0193] The second traffic receiving module is used to receive and forward the second downstream traffic for the terminal device to the switch according to the preset downstream bandwidth.

[0194] From the above, it can be seen that in the solution provided by the embodiment of the present application, after the main leaf node fails, the backup leaf node can serve as the new main leaf node to ensure the normal forwarding of the downstream traffic and still complete the speed limit processing of the downstream traffic.

[0195] Corresponding to the aforementioned service traffic speed limiting system, the embodiment of the present application also provides a service traffic speed limiting device applied to a primary leaf node.

[0196] See also Fig.12 , is a structural diagram of a second service flow rate limiting device provided in an embodiment of the present application, which is applied to a primary leaf node, wherein the primary leaf node is communicated with a backup leaf node, and the primary leaf node and the backup leaf node are both connected to a switch, and the device includes:

[0197] The fourth traffic receiving module 1201 is used to receive the first uplink traffic forwarded by the standby leaf node;

[0198] The fifth traffic receiving module 1202 is used to receive the second uplink traffic;

[0199] The fourth traffic forwarding module 1203 is used to forward the first uplink traffic and the second uplink traffic according to a preset uplink bandwidth;

[0200] The first uplink traffic is sent by the terminal device to the backup leaf node through the switch, the second uplink traffic is sent by the terminal device to the active leaf node through the switch, and the preset uplink bandwidth is the maximum uplink bandwidth that can be used by the terminal device.

[0201] As can be seen from the above, the service flow rate limiting system provided by the embodiment of the present application includes a main leaf node and a backup leaf node, both of which are connected to the switch, and the switch is connected to the terminal device. Therefore, the upstream traffic of the terminal device can be sent to the main leaf node and the backup leaf node respectively. For the first upstream traffic sent to the backup leaf node, the backup leaf node will forward the first upstream traffic to the main leaf node, and then the main leaf node will continue to forward it. For the second upstream traffic sent to the main leaf node, the main leaf node will directly forward the second upstream traffic. That is, although the switch will send upstream traffic to the main leaf node and the backup leaf node respectively, ultimately all upstream traffic is forwarded to the outside of the service flow rate limiting system through the main leaf node. Therefore, the main leaf node can monitor all upstream traffic, so as to achieve the speed limit of the upstream traffic in the scenario where the switch is connected to multiple leaf nodes and multiple leaf nodes are able to forward traffic.

[0202] In one embodiment of the present application, the device further includes:

[0203] A first protocol message sending module, used for sending a first routing protocol message to other network nodes outside the service flow rate limiting system;

[0204] The sixth traffic receiving module is used to receive and forward the first downstream traffic for the terminal device to the switch according to the preset downstream bandwidth.

[0205] As can be seen from the above, in the embodiment of the present application, only the primary leaf node will send the first routing protocol message to other network nodes, and the backup leaf node will not send routing protocol messages to other network nodes. Other network nodes can only learn the route to forward the downstream traffic to the primary leaf node, and when sending downstream traffic to the terminal device, they will only forward the downstream traffic to the primary leaf node. As a result, all downstream traffic sent to the terminal device is forwarded via the primary leaf node, and the primary leaf node can monitor all downstream traffic sent to the terminal device, thereby achieving downstream traffic speed limit for the terminal device.

[0206] In one embodiment of the present application, the active leaf node is configured with a second VPLS instance, a layer 3 virtual interface of the network layer, a layer 2 virtual interface of the link layer, a physical sub-interface and a physical interface of the physical layer, the active leaf node and the standby leaf node are connected via a virtual private LAN service VPLS pseudo-wire PW, the physical interface is connected to the switch, the physical sub-interface is connected to the physical interface, the layer 3 virtual interface corresponds to the virtual LAN VLAN of the physical sub-interface one by one, and the layer 3 virtual interface and the physical sub-interface are associated with the same VPLS instance;

[0207] The fourth traffic forwarding module 1203 is specifically configured to:

[0208] The second VPLS instance sends the first upstream traffic to the first layer 3 virtual interface through the first layer 2 virtual interface based on the first destination MAC address of the first upstream traffic;

[0209] After the second physical interface of the active leaf node receives the second uplink traffic, the second uplink traffic is sent to the first physical sub-interface according to the second destination MAC address of the second uplink traffic, wherein the second destination MAC address is: the MAC address of the first layer 3 virtual interface, and the first physical sub-interface corresponds to the first layer 3 virtual interface;

[0210] The first physical sub-interface sends the second uplink traffic to the first layer 3 virtual interface through the first layer 2 virtual interface according to the second destination MAC address;

[0211] The first layer 3 virtual interface forwards the first upstream traffic and the second upstream traffic according to a preset upstream bandwidth.

[0212] In one embodiment of the present application, the device information of the terminal device is recorded in the main leaf node, and the fourth traffic forwarding module 1203 is specifically used to:

[0213] The first uplink traffic and the second uplink traffic that match the device information are forwarded according to the preset uplink bandwidth.

[0214] From the above, it can be seen that the main leaf node in the solution provided in the embodiment of the present application can also verify the information of the received traffic before forwarding the traffic, thereby preventing illegal terminal devices from impersonating and ensuring network security.

[0215] Corresponding to the aforementioned service flow rate limiting system, the embodiment of the present application further provides a backup leaf node, the backup leaf node is communicatively connected with the main leaf node, and the main leaf node and the backup leaf node are both connected to the switch, such as Fig.13 As shown, the standby leaf node includes:

[0216] Processor 1301;

[0217] transceiver 1304;

[0218] A machine-readable storage medium 1302, wherein the machine-readable storage medium 1302 stores machine-executable instructions that can be executed by the processor 1301; the machine-executable instructions prompt the processor 1301 to perform the following steps:

[0219] receiving first uplink traffic, where the first uplink traffic is sent by a terminal device through the switch;

[0220] The first uplink traffic is forwarded to the active leaf node, so that the active leaf node forwards the received uplink traffic according to a preset uplink bandwidth.

[0221] like Fig.13 As shown, the network device may further include a communication bus 1303. The processor 1301, the machine-readable storage medium 1302, and the transceiver 1304 communicate with each other through the communication bus 1303. The communication bus 1303 may be a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus. The communication bus 1303 may be divided into an address bus, a data bus, a control bus, and the like.

[0222] The transceiver 1304 may be a wireless communication module. Under the control of the processor 1301 , the transceiver 1304 exchanges data with other devices.

[0223] The machine-readable storage medium 1302 may include a random access memory (RAM) or a non-volatile memory (NVM), such as at least one disk storage. In addition, the machine-readable storage medium 1302 may also be at least one storage device located away from the aforementioned processor.

[0224] Processor 1301 can be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it can also be a digital signal processor (DSP), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components.

[0225] As can be seen from the above, the service flow rate limiting system provided by the embodiment of the present application includes a main leaf node and a backup leaf node, both of which are connected to the switch, and the switch is connected to the terminal device. Therefore, the upstream traffic of the terminal device can be sent to the main leaf node and the backup leaf node respectively. For the first upstream traffic sent to the backup leaf node, the backup leaf node will forward the first upstream traffic to the main leaf node, and then the main leaf node will continue to forward it. For the second upstream traffic sent to the main leaf node, the main leaf node will directly forward the second upstream traffic. That is, although the switch will send upstream traffic to the main leaf node and the backup leaf node respectively, ultimately all upstream traffic is forwarded to the outside of the service flow rate limiting system through the main leaf node. Therefore, the main leaf node can monitor all upstream traffic, so as to achieve the speed limit of the upstream traffic in the scenario where the switch is connected to multiple leaf nodes and multiple leaf nodes are able to forward traffic.

[0226] In one embodiment of the present application, the standby leaf node is configured with a first VPLS instance, a layer 3 virtual interface of the network layer, a layer 2 virtual interface of the link layer, a physical sub-interface and a physical interface of the physical layer, the active leaf node and the standby leaf node are connected via a virtual private LAN service VPLS pseudo-wire PW, the physical interface is connected to the switch, the physical sub-interface is connected to the physical interface, the layer 3 virtual interface has a one-to-one correspondence with the virtual LAN VLAN of the physical sub-interface, and the layer 3 virtual interface and the physical sub-interface are associated with the same VPLS instance;

[0227] The forwarding the first uplink traffic to the active leaf node through the VPLS PW specifically includes:

[0228] The first VPLS instance forwards the first upstream traffic to the active leaf node through the VPLS PW based on a first destination media access control MAC address of the first upstream traffic.

[0229] In one embodiment of the present application, the machine executable instructions further cause the processor 1201 to perform the following steps:

[0230] If it is determined through the VPLS PW that the active leaf node is in a faulty state, receiving a third upstream flow, wherein the third upstream flow is sent by the terminal device through the switch;

[0231] The third uplink traffic is forwarded according to the preset uplink bandwidth.

[0232] From the above, it can be seen that in the solution provided by the embodiment of the present application, after the main leaf node fails, the backup leaf node can serve as the new main leaf node to ensure the normal forwarding of the upstream traffic and still complete the speed limit processing of the upstream traffic.

[0233] In one embodiment of the present application, the machine executable instructions further cause the processor 1301 to perform the following steps:

[0234] If it is determined that the active leaf node is in a faulty state, sending a second routing protocol message to other network nodes outside the service flow rate limiting system;

[0235] According to the preset downstream bandwidth, second downstream traffic for the terminal device is received and forwarded to the switch.

[0236] From the above, it can be seen that in the solution provided by the embodiment of the present application, after the main leaf node fails, the backup leaf node can serve as the new main leaf node to ensure the normal forwarding of the downstream traffic and still complete the speed limit processing of the downstream traffic.

[0237] Corresponding to the aforementioned service flow rate limiting system, the embodiment of the present application further provides a primary leaf node, wherein the primary leaf node is connected to a backup leaf node for communication, and the primary leaf node and the backup leaf node are both connected to a switch, such as Fig.14 As shown, the main leaf node includes:

[0238] Processor 1401;

[0239] transceiver 1404;

[0240] A machine-readable storage medium 1402, wherein the machine-readable storage medium 1402 stores machine-executable instructions that can be executed by the processor 1401; the machine-executable instructions prompt the processor 1401 to perform the following steps:

[0241] Receiving the first uplink traffic forwarded by the standby leaf node;

[0242] receiving second upstream traffic;

[0243] forwarding the first uplink traffic and the second uplink traffic according to a preset uplink bandwidth;

[0244] The first uplink traffic is sent by the terminal device to the backup leaf node through the switch, the second uplink traffic is sent by the terminal device to the active leaf node through the switch, and the preset uplink bandwidth is the maximum uplink bandwidth that can be used by the terminal device.

[0245] like Fig.14As shown, the network device may further include a communication bus 1403. The processor 1401, the machine-readable storage medium 1402, and the transceiver 1404 communicate with each other through the communication bus 1403. The communication bus 1403 may be a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus. The communication bus 1403 may be divided into an address bus, a data bus, a control bus, and the like.

[0246] The transceiver 1404 may be a wireless communication module. Under the control of the processor 1401 , the transceiver 1404 exchanges data with other devices.

[0247] The machine-readable storage medium 1402 may include a random access memory (RAM) or a non-volatile memory (NVM), such as at least one disk storage. In addition, the machine-readable storage medium 1402 may also be at least one storage device located away from the aforementioned processor.

[0248] Processor 1401 can be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it can also be a digital signal processor (DSP), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components.

[0249] As can be seen from the above, the service flow rate limiting system provided by the embodiment of the present application includes a main leaf node and a backup leaf node, both of which are connected to the switch, and the switch is connected to the terminal device. Therefore, the upstream traffic of the terminal device can be sent to the main leaf node and the backup leaf node respectively. For the first upstream traffic sent to the backup leaf node, the backup leaf node will forward the first upstream traffic to the main leaf node, and then the main leaf node will continue to forward it. For the second upstream traffic sent to the main leaf node, the main leaf node will directly forward the second upstream traffic. That is, although the switch will send upstream traffic to the main leaf node and the backup leaf node respectively, ultimately all upstream traffic is forwarded to the outside of the service flow rate limiting system through the main leaf node. Therefore, the main leaf node can monitor all upstream traffic, so as to achieve the speed limit of the upstream traffic in the scenario where the switch is connected to multiple leaf nodes and multiple leaf nodes are able to forward traffic.

[0250] In one embodiment of the present application, the machine executable instructions further cause the processor 1401 to perform the following steps:

[0251] Sending a first routing protocol message to other network nodes outside the service flow rate limiting system;

[0252] According to the preset downstream bandwidth, first downstream traffic for the terminal device is received and forwarded to the switch.

[0253] As can be seen from the above, in the embodiment of the present application, only the primary leaf node will send the first routing protocol message to other network nodes, and the backup leaf node will not send routing protocol messages to other network nodes. Other network nodes can only learn the route to forward the downstream traffic to the primary leaf node, and when sending downstream traffic to the terminal device, they will only forward the downstream traffic to the primary leaf node. As a result, all downstream traffic sent to the terminal device is forwarded via the primary leaf node, and the primary leaf node can monitor all downstream traffic sent to the terminal device, thereby achieving downstream traffic speed limit for the terminal device.

[0254] In one embodiment of the present application, the active leaf node is configured with a second VPLS instance, a layer 3 virtual interface of the network layer, a layer 2 virtual interface of the link layer, a physical sub-interface and a physical interface of the physical layer, the active leaf node and the standby leaf node are connected via a virtual private LAN service VPLS pseudo-wire PW, the physical interface is connected to the switch, the physical sub-interface is connected to the physical interface, the layer 3 virtual interface corresponds to the virtual LAN VLAN of the physical sub-interface one by one, and the layer 3 virtual interface and the physical sub-interface are associated with the same VPLS instance;

[0255] The forwarding the first uplink traffic and the second uplink traffic according to the preset uplink bandwidth specifically includes:

[0256] The second VPLS instance sends the first upstream traffic to the first layer 3 virtual interface through the first layer 2 virtual interface based on the first destination MAC address of the first upstream traffic;

[0257] After the second physical interface of the active leaf node receives the second uplink traffic, the second uplink traffic is sent to the first physical sub-interface according to the second destination MAC address of the second uplink traffic, wherein the second destination MAC address is: the MAC address of the first layer 3 virtual interface, and the first physical sub-interface corresponds to the first layer 3 virtual interface;

[0258] The first physical sub-interface sends the second uplink traffic to the first layer 3 virtual interface through the first layer 2 virtual interface according to the second destination MAC address;

[0259] The first layer 3 virtual interface forwards the first upstream traffic and the second upstream traffic according to a preset upstream bandwidth.

[0260] In one embodiment of the present application, the device information of the terminal device is recorded in the master leaf node, and the forwarding of the first uplink traffic and the second uplink traffic specifically includes:

[0261] When the information of the received traffic matches the device information, the received traffic is forwarded.

[0262] From the above, it can be seen that the main leaf node in the solution provided in the embodiment of the present application can also verify the information of the received traffic before forwarding the traffic, thereby preventing illegal terminal devices from impersonating and ensuring network security.

[0263] In another embodiment provided in the present application, a computer-readable storage medium is also provided, which stores a computer program. When the computer program is executed by a processor, the steps of any service traffic speed limiting method applied to a primary leaf node or a backup leaf node are implemented.

[0264] In another embodiment provided by the present application, a computer program product containing instructions is also provided. When the computer is run on a computer, the computer executes the steps of any service traffic rate limiting method applied to a primary leaf node or a backup leaf node in the above-mentioned embodiment.

[0265] In the above embodiments, it can be implemented in whole or in part by software, hardware, firmware or any combination thereof. When implemented using software, it can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, the process or function described in the embodiment of the present application is generated in whole or in part. The computer may be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions may be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium, for example, the computer instructions may be transmitted from a website site, computer, server or data center by wired (e.g., coaxial cable, optical fiber, digital subscriber line (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) mode to another website site, computer, server or data center. The computer-readable storage medium may be any available medium that a computer can access or a data storage device such as a server or data center that includes one or more available media integrated. The available medium may be a magnetic medium, (e.g., a floppy disk, a hard disk, a tape), an optical medium (e.g., a DVD), or a semiconductor medium (e.g., a solid-state drive Solid State Disk (SSD)), etc.

[0266] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the statement "comprise a ..." do not exclude the presence of other identical elements in the process, method, article or device including the elements.

[0267] Each embodiment in this specification is described in a related manner, and the same or similar parts between the embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the method, device, backup leaf node, main leaf node, computer-readable storage medium, and computer program product embodiments, since they are basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0268] The above description is only a preferred embodiment of the present application and is not intended to limit the protection scope of the present application. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application are included in the protection scope of the present application.

Claims

1. A service flow rate limiting system, characterized in that: The service flow rate limiting system comprises: a main leaf node and a backup leaf node, the main leaf node is in communication connection with the backup leaf node, and the main leaf node and the backup leaf node are both connected to a switch; The standby leaf node is configured to receive the first uplink traffic and forward the first uplink traffic to the active leaf node; The master leaf node is configured to receive the first uplink traffic and the second uplink traffic, and forward the first uplink traffic and the second uplink traffic according to a preset uplink bandwidth; The first uplink traffic and the second uplink traffic are sent by the terminal device through the switch, and the preset uplink bandwidth is the maximum uplink bandwidth that can be used by the terminal device.

2. The system according to claim 1, characterized in that The main leaf node is also used for: Sending a first routing protocol message to other network nodes outside the service flow rate limiting system; According to the preset downstream bandwidth, first downstream traffic for the terminal device is received and forwarded to the switch.

3. The system according to claim 1, characterized in that The active leaf node and the standby leaf node are respectively configured with a VPLS instance, a layer 3 virtual interface of the network layer, a layer 2 virtual interface of the link layer, a physical sub-interface and a physical interface of the physical layer; the active leaf node and the standby leaf node are connected via a virtual private LAN service VPLS pseudo-wire PW; the physical interface is connected to the switch; the physical sub-interface in the same leaf node is connected to the physical interface; the layer 3 virtual interface corresponds to the virtual LAN VLAN of the physical sub-interface one by one; the layer 3 virtual interface and the physical sub-interface in the same leaf node are associated with the same VPLS instance; The first VPLS instance in the standby leaf node forwards the first upstream traffic to the active leaf node through the VPLS PW based on the first destination media access control MAC address of the first upstream traffic, wherein the first destination MAC address is: the MAC address of the first layer 3 virtual interface in the active leaf node; The second VPLS instance in the active leaf node sends the first uplink traffic to the first layer 3 virtual interface through the first layer 2 virtual interface based on the first destination MAC address; The second physical interface of the active leaf node receives the second uplink traffic, and sends the second uplink traffic to the first physical sub-interface according to the second destination MAC address of the second uplink traffic, wherein the second destination MAC address is: the MAC address of the first layer 3 virtual interface, and the first physical sub-interface corresponds to the first layer 3 virtual interface; The first physical sub-interface sends the second uplink traffic to the first layer 3 virtual interface through the first layer 2 virtual interface according to the second destination MAC address; The first layer 3 virtual interface forwards the first upstream traffic and the second upstream traffic according to a preset upstream bandwidth.

4. The system according to any one of claims 1 to 3, characterized in that: The standby leaf node is also used for: If it is determined that the active leaf node is in a faulty state, the third uplink traffic is received, and the third uplink traffic is forwarded according to the preset uplink bandwidth, wherein the third uplink traffic is sent by the terminal device through the switch.

5. The system according to any one of claims 1 to 3, characterized in that: The standby leaf node is also used for: If it is determined that the active leaf node is in a faulty state, sending a second routing protocol message to other network nodes outside the service flow rate limiting system; According to the preset downstream bandwidth, second downstream traffic for the terminal device is received and forwarded to the switch.

6. The system according to claim 1 or 2, characterized in that: The main leaf node records the device information of the terminal device; The master leaf node is specifically used to forward the first uplink traffic and the second uplink traffic that conforms to the device information.

7. A method for limiting the speed of business traffic, characterized in that: Applied to a standby leaf node, the standby leaf node is communicatively connected to an active leaf node, and both the active leaf node and the standby leaf node are connected to a switch, the method comprising: receiving first uplink traffic, where the first uplink traffic is sent by a terminal device through the switch; The first uplink traffic is forwarded to the active leaf node, so that the active leaf node forwards the received uplink traffic according to a preset uplink bandwidth.

8. The method according to claim 7, characterized in that The standby leaf node is configured with a first VPLS instance, a layer 3 virtual interface of the network layer, a layer 2 virtual interface of the link layer, a physical sub-interface and a physical interface of the physical layer; the active leaf node and the standby leaf node are connected via a virtual private LAN service VPLS pseudo-wire PW; the physical interface is connected to the switch; the physical sub-interface is connected to the physical interface; the layer 3 virtual interface corresponds to the virtual LAN VLAN of the physical sub-interface one by one; and the layer 3 virtual interface and the physical sub-interface are associated with the same VPLS instance; The forwarding the first uplink traffic to the active leaf node includes: The first VPLS instance forwards the first upstream traffic to the active leaf node through the VPLS PW based on a first destination media access control MAC address of the first upstream traffic.

9. The method according to claim 7 or 8, characterized in that: The method further comprises: If it is determined that the active leaf node is in a faulty state, receiving a third upstream flow, wherein the third upstream flow is sent by the terminal device through the switch; The third uplink traffic is forwarded according to the preset uplink bandwidth.

10. The method according to claim 7 or 8, characterized in that: The method further comprises: If it is determined that the active leaf node is in a faulty state, sending a second routing protocol message to other network nodes outside the service flow rate limiting system; According to the preset downstream bandwidth, second downstream traffic for the terminal device is received and forwarded to the switch.

11. A method for limiting the speed of business traffic, characterized in that: Applied to a primary leaf node, the primary leaf node is communicatively connected to a backup leaf node, and both the primary leaf node and the backup leaf node are connected to a switch, and the method includes: Receiving the first uplink traffic forwarded by the standby leaf node; receiving second upstream traffic; forwarding the first uplink traffic and the second uplink traffic according to a preset uplink bandwidth; The first uplink traffic is sent by the terminal device to the backup leaf node through the switch, the second uplink traffic is sent by the terminal device to the active leaf node through the switch, and the preset uplink bandwidth is the maximum uplink bandwidth that can be used by the terminal device.

12. The method according to claim 11, characterized in that The method further comprises: Sending a first routing protocol message to other network nodes outside the service flow rate limiting system; According to the preset downstream bandwidth, first downstream traffic for the terminal device is received and forwarded to the switch.

13. The method according to claim 11, characterized in that The active leaf node is configured with a second VPLS instance, a layer 3 virtual interface of the network layer, a layer 2 virtual interface of the link layer, a physical sub-interface and a physical interface of the physical layer; the active leaf node and the standby leaf node are connected via a virtual private LAN service VPLS pseudo-wire PW; the physical interface is connected to the switch; the physical sub-interface is connected to the physical interface; the layer 3 virtual interface corresponds to the virtual LAN VLAN of the physical sub-interface one by one; and the layer 3 virtual interface and the physical sub-interface are associated with the same VPLS instance; The forwarding the first uplink traffic and the second uplink traffic according to the preset uplink bandwidth includes: The second VPLS instance sends the first upstream traffic to the first layer 3 virtual interface through the first layer 2 virtual interface based on the first destination MAC address of the first upstream traffic; After the second physical interface of the active leaf node receives the second uplink traffic, the second uplink traffic is sent to the first physical sub-interface according to the second destination MAC address of the second uplink traffic, wherein the second destination MAC address is: the MAC address of the first layer 3 virtual interface, and the first physical sub-interface corresponds to the first layer 3 virtual interface; The first physical sub-interface sends the second uplink traffic to the first layer 3 virtual interface through the first layer 2 virtual interface according to the second destination MAC address; The first layer 3 virtual interface forwards the first upstream traffic and the second upstream traffic according to a preset upstream bandwidth.

14. The method according to claim 11, characterized in that The recording of the device information of the terminal device in the master leaf node, and the forwarding of the first uplink traffic and the second uplink traffic include: The first uplink traffic and the second uplink traffic that match the device information are forwarded.

15. A service flow rate limiting device, characterized in that: Applied to a standby leaf node, the standby leaf node is communicatively connected with an active leaf node, the active leaf node and the standby leaf node are both connected to a switch, and the device comprises: A first traffic receiving module, configured to receive first uplink traffic, where the first uplink traffic is sent by a terminal device through the switch; The first traffic forwarding module is used to forward the first uplink traffic to the active leaf node, so that the active leaf node forwards the received uplink traffic according to a preset uplink bandwidth.

16. A service flow rate limiting device, characterized in that: Applied to a master leaf node, the master leaf node is connected to a backup leaf node for communication, the master leaf node and the backup leaf node are both connected to a switch, and the device includes: A fourth traffic receiving module, used to receive the first uplink traffic forwarded by the standby leaf node; A fifth traffic receiving module, configured to receive second uplink traffic; a fourth traffic forwarding module, configured to forward the first uplink traffic and the second uplink traffic according to a preset uplink bandwidth; The first uplink traffic is sent by the terminal device to the backup leaf node through the switch, the second uplink traffic is sent by the terminal device to the active leaf node through the switch, and the preset uplink bandwidth is the maximum uplink bandwidth that can be used by the terminal device.

17. A spare leaf node, characterized in that: The standby leaf node is in communication connection with the main leaf node, the main leaf node and the standby leaf node are both connected to a switch, and the standby leaf node includes: processor; Transceiver; A machine-readable storage medium storing machine-executable instructions that can be executed by the processor; the machine-executable instructions prompt the processor to perform the following steps: receiving first uplink traffic, where the first uplink traffic is sent by a terminal device through the switch; The first uplink traffic is forwarded to the active leaf node, so that the active leaf node forwards the received uplink traffic according to a preset uplink bandwidth.

18. A master leaf node, characterized in that: The active leaf node is connected to the standby leaf node in communication, and both the active leaf node and the standby leaf node are connected to a switch. The active leaf node includes: processor; Transceiver; A machine-readable storage medium storing machine-executable instructions that can be executed by the processor; the machine-executable instructions prompt the processor to perform the following steps: Receiving the first uplink traffic forwarded by the standby leaf node; receiving second upstream traffic; forwarding the first uplink traffic and the second uplink traffic according to a preset uplink bandwidth; The first uplink traffic is sent by the terminal device to the backup leaf node through the switch, the second uplink traffic is sent by the terminal device to the active leaf node through the switch, and the preset uplink bandwidth is the maximum uplink bandwidth that can be used by the terminal device.

19. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the method described in any one of claims 7-10 or 11-14 is implemented.

Images