Method and system for controlling routing in trust domain

Abstract

The invention relates to a method and a system for controlling routing in a trust domain, and belongs to the technical field of communication, the method comprises the following steps: defining a target Marge coverage attribute, the target Marge coverage attribute comprising an identifier field, a first field and a second field; the method comprises the following steps: based on peer configuration, under the condition that a route receiving end receives a target Marge coverage attribute issued by a route issuing end, judging whether the route receiving end and the route issuing end are in the same trust domain or not; acquiring a target route in the route receiving end under the condition that the route receiving end and the route issuing end are the same trust domain; and determining the route priority of the target route under the condition that the target Marge communication attribute transmission is carried out based on the target route, and selecting the route based on the route priority. According to the method, routing can be carried out based on the routing priority, and efficient transmission of network traffic is ensured.

Description

Technical Field

[0001] The present invention belongs to the field of communication technology, and in particular relates to a method and system for controlling routing in a trust domain. Background Art

[0002] In related technologies, different units of the same organization have multiple autonomous domains (AS). During daily operation and maintenance, traffic from different autonomous domain systems constantly interacts. Based on regional attributes, link bandwidth, latency, and service planning and deployment, network administrators do not want all cross-domain traffic to be directly connected to the other end ASBR through the local ASBR. For some traffic, it will be designed to detour to the local PE node before reaching the other end ASBR. With different path planning requirements, network administrators need to perform refined deployment to achieve the purpose of differentiated routing. Therefore, how to better implement routing within the trust domain has become an urgent problem to be solved. Summary of the invention

[0003] In view of the above shortcomings of the prior art, the purpose of the invention is to provide a method and system for controlling route selection in a trust domain. The method can select routes based on route priorities, ensuring efficient transmission of network traffic.

[0004] The first aspect of the present invention provides a method for controlling route selection in a trust domain, comprising: S1, defining a target Large community attribute, wherein the target Large community attribute comprises an identifier field, a first field and a second field; S2, based on peer configuration, when a route receiving end receives the target Large community attribute published by a route publishing end, determining whether the route receiving end and the route publishing end are in the same trust domain; S3, when the route receiving end and the route publishing end are in the same trust domain, obtaining a target route in the route receiving end; S4, when the target Large community attribute is transmitted based on the target route, determining a route priority of the target route, and selecting a route based on the route priority.

[0005] Furthermore, obtaining the target route in the route receiving end includes: obtaining a first route carrying the target Large community attribute from multiple candidate routes in the route receiving end, the first route including multiple routes; obtaining the target byte values ​​of the first field in the multiple first routes; and taking the first route corresponding to the smallest value among the target byte values ​​of the first field in the multiple first routes as the target route.

[0006] Furthermore, it also includes: when the target Large community attribute carried in the multiple candidate routes is the same, comparing other attributes carried in the multiple candidate routes except the target Large community attribute based on a preset rule, and determining the target route based on the comparison result.

[0007] Further, obtaining the target route in the route receiving end includes: obtaining a first route carrying the target Large community attribute from a plurality of candidate routes in the route receiving end; and using the first route as the target route.

[0008] Further, in the case of transferring the target Large community attribute based on the target route, determining the routing priority of the target route includes: determining a target source for transferring the target Large community attribute by the target route; in the case where the target source remains unchanged, the priority of the target route remains unchanged; in the case where the target source changes, changing the priority of the target route based on a preset configuration.

[0009] Further, determining the priority of the target route includes: determining the priority of the target route according to network performance parameters in the trust domain, the network performance parameters including link bandwidth utilization, packet loss rate, and delay; or customizing the priority of the target route.

[0010] Furthermore, the method further includes: obtaining a first route carrying the target Large Community attribute from a plurality of candidate routes in the route receiving end; obtaining a route carrying a function field from the first route, and aggregating the routes.

[0011] According to a second aspect of the present invention, a system for controlling route selection in a trust domain is proposed, comprising: a definition module, used to define a target Large community attribute, wherein the target Large community attribute comprises an identifier field, a first field and a second field; a judgment module, used to judge, based on peer configuration, whether a route receiving end and a route publishing end are in the same trust domain when the route receiving end receives the target Large community attribute published by a route publishing end; an acquisition module, used to acquire a target route in the route receiving end when the route receiving end and the route publishing end are in the same trust domain; and a determination module, used to determine a route priority of the target route when the target Large community attribute is transmitted based on the target route, and select a route based on the route priority.

[0012] According to a third aspect of the present invention, an electronic device is proposed, comprising: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor can execute any of the methods described in the first aspect of the present invention.

[0013] According to a fourth aspect of the present invention, a non-transitory computer-readable storage medium storing computer instructions is provided, wherein the computer instructions are used to enable the computer to execute any one of the methods according to the first aspect of the present invention.

[0014] The beneficial effects of the present invention are as follows:

[0015] The method and system for controlling route selection in a trust domain of the present invention define a target Large community attribute, which includes an identifier field, a first field and a second field; based on peer configuration, when a route receiving end receives the target Large community attribute issued by a route issuing end, it is determined whether the route receiving end and the route issuing end are in the same trust domain; when the route receiving end and the route issuing end are in the same trust domain, the target route in the route receiving end is obtained; when the target Large community attribute is transmitted based on the target route, the route priority of the target route is determined, and the route is selected based on the route priority. The method can select a route based on the route priority, thereby ensuring efficient transmission of network traffic. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] The accompanying drawings are only used to illustrate specific embodiments and are not considered to limit the present invention. In the entire drawings, the same reference symbols represent the same components. Obviously, the drawings described below are only some embodiments recorded in the embodiments of the present invention. For those of ordinary skill in the art, other drawings can also be obtained based on these drawings.

[0017] Figure 1 is a flow chart of a method for controlling routing in a trust domain according to an embodiment of the present invention;

[0018] Figure 2 is a flow chart of a method for controlling routing in a trust domain according to a specific embodiment of the present invention;

[0019] Figure 3 is a schematic diagram of controlling routing in a first scenario according to an embodiment of the present invention;

[0020] Figure 4 is a schematic diagram of controlling routing in a second scenario according to an embodiment of the present invention;

[0021] Figure 5 is a schematic diagram of a system for controlling routing in a trust domain according to an embodiment of the present invention;

[0022] Figure 6 It is a structural block diagram of an electronic device according to an embodiment of the present invention. DETAILED DESCRIPTION

[0023] In order to enable those skilled in the art to better understand the technical solutions in the embodiments of the present invention, the technical solutions of the present invention will be clearly and completely described below in conjunction with the accompanying drawings. Obviously, the described embodiments are part of the embodiments of the present invention, rather than all of the embodiments. It should be understood that these descriptions are only exemplary and are not intended to limit the scope of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in the field without making creative work should fall within the scope of protection of the present invention.

[0024] Furthermore, in the following description, descriptions of well-known structures and technologies are omitted to avoid unnecessarily obscuring the concepts disclosed in the present invention.

[0025] In the description of the present invention, it should be noted that, unless otherwise clearly specified and limited, the orientation or position relationship indicated by the terms "center", "upper", "lower", "left", "right", "vertical", "horizontal", "inside", "outside", etc. is based on the orientation or position relationship shown in the drawings, which is only for the convenience of describing the present invention and simplifying the description, and does not indicate or imply that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore cannot be understood as a limitation of the present invention. In addition, the terms "first", "second", and "third" are only used for descriptive purposes and cannot be understood as indicating or implying relative importance. The terms "installed", "connected", and "connected" should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection, or it can be indirectly connected through an intermediate medium, or it can be a connection between the two elements. For those of ordinary skill in the art, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0026] Exemplary embodiments will be described in detail herein, examples of which are shown in the accompanying drawings. When the following description refers to the drawings, unless otherwise indicated, the same numbers in different drawings represent the same or similar elements. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with the present invention. Instead, they are merely examples of methods and systems consistent with some aspects of the present invention as detailed in the appended claims.

[0027] The present invention proposes a method, system and related equipment for controlling routing selection within a trust domain. Specifically, the method, system and related equipment for controlling routing selection within a trust domain according to an embodiment of the present invention are described below with reference to the accompanying drawings.

[0028] Figure 1 1 is a flow chart of a method for controlling routing in a trust domain according to an embodiment of the present invention. It should be noted that the method for controlling routing in a trust domain according to an embodiment of the present invention can be applied to a system for controlling routing in a trust domain according to an embodiment of the present invention. The system for controlling routing in a trust domain can be configured on an electronic device or in a server. This embodiment of the present application does not limit this.

[0029] like Figure 1 As shown, the method for controlling routing in a trust domain includes:

[0030] S110, defining a target Large community attribute, where the target Large community attribute includes an identifier field, a first field, and a second field.

[0031] In an embodiment of the present invention, the target large community attribute is divided into three parts, namely, an identifier field, a first field and a second field, wherein the identifier field is the source AS when the route is generated, a field that can be identified as the route priority is added to the first field, and the second field is the router-id value of the router into which the route is introduced or the serial number planned by the administrator.

[0032] S120: Based on the peer configuration, when receiving the target Large Community attribute published by the route publishing end, the route receiving end determines whether the route receiving end and the route publishing end are in the same trust domain.

[0033] Among them, the peer configuration can be pre-set. For example, the routing publishing end A can pre-define the trust domain members to include the routing receiving end B and the routing receiving end C. When the routing receiving end B and the routing receiving end C receive the target Large community attribute published by the routing publishing end A, it can be determined that the routing publishing end A and the routing receiving end B and the routing receiving end C are in the same trust domain.

[0034] Among them, peer configuration can ensure that the target large community attribute takes effect in the trust domain. This attribute is not published outside the trust domain to prevent other autonomous domain systems from understanding the internal implementation. At the same time, when peer neighbors in other non-trust domains publish this attribute, they will not be processed as routes carrying route priorities to prevent traffic from being hijacked.

[0035] S130, when the route receiving end and the route issuing end are in the same trust domain, obtaining the target route in the route receiving end.

[0036] In the embodiment of the present invention, when the route receiving end and the route issuing end are in the same trust domain, the target route can be determined from multiple candidate routes in the route receiving end. The specific implementation method can refer to the subsequent embodiments.

[0037] S140: When the target large community attribute is transferred based on the target route, a route priority of the target route is determined, and a route is selected based on the route priority.

[0038] In the embodiment of the present invention, when the target Large community attribute is transferred based on the target route, the target source of the target Large community attribute transfer is determined, and based on the target source, it is determined whether the priority of the target route is changed, and then the route is selected based on the priority of the target route. The specific implementation method can refer to the subsequent embodiments.

[0039] According to the method for controlling route selection in a trust domain of an embodiment of the present invention, a target Large community attribute is defined, and the target Large community attribute includes an identifier field, a first field, and a second field; based on peer configuration, when a route receiving end receives the target Large community attribute published by a route publishing end, it is determined whether the route receiving end and the route publishing end are in the same trust domain; when the route receiving end and the route publishing end are in the same trust domain, the target route in the route receiving end is obtained; when the target Large community attribute is transmitted based on the target route, the route priority of the target route is determined, and the route is selected based on the route priority. The method can select a route based on the route priority, ensuring efficient transmission of network traffic.

[0040] In order to make it easier for those skilled in the art to understand the present invention, Figure 2 A method for controlling routing in a trust domain according to a specific embodiment of the present invention is as follows. Figure 2 As shown, the method for controlling routing in the trust domain includes:

[0041] S210, defining a target Large community attribute, where the target Large community attribute includes an identifier field, a first field, and a second field.

[0042] S220, based on the peer configuration, when the route receiving end receives the Large community attribute issued by the route issuing end, the route receiving end determines whether the route receiving end and the route issuing end are in the same trust domain.

[0043] In the embodiment of the present invention, the implementation of steps S210 - S220 may refer to the implementation of steps S110 - S120 described above, and the present invention will not elaborate on this.

[0044] S230, when the route receiving end and the route issuing end are in the same trust domain, obtaining the target route in the route receiving end.

[0045] In an embodiment of the present invention, when a route receiving end and a route issuing end are in the same trust domain, a first route carrying a target large community attribute is obtained from a plurality of candidate routes in the route receiving end, the first route including a plurality of routes; a target byte value of a first field in the plurality of first routes is obtained; and a first route corresponding to the smallest value among the target byte values ​​of the first field in the plurality of first routes is used as a target route.

[0046] That is to say, when the route receiving end and the route publishing end are in the same trust domain, the multiple candidate routes participating in the route selection in the route receiving end all carry the target large community attribute, that is, the multiple candidate routes are used as multiple first routes, and then the target route is determined by comparing the target byte values ​​of the first field in the multiple first routes. The target byte value of the first field ranges from 0 to 65535.

[0047] In an embodiment of the present invention, when the target Large community attribute carried in multiple candidate routes is the same, other attributes except the target Large community attribute carried in the multiple candidate routes are compared based on preset rules, and the target route is determined based on the comparison result.

[0048] Among them, other attributes are attributes of other BGP protocol routing. The preset rules include but are not limited to comparing numerical values, comparing types, etc. That is, among multiple candidate routes, based on the preset rules, other attributes of multiple candidate routes are compared one by one.

[0049] In one embodiment of the present invention, when the route receiving end and the route issuing end are in the same trust domain, the first route carrying the target Large community attribute among multiple candidate routes in the route receiving end is obtained; and the first route is used as the target route.

[0050] That is to say, when the route receiving end and the route publishing end are in the same trust domain, some of the multiple candidate routes participating in the route selection in the route receiving end carry the target Large community attribute, and some of the routes corresponding to the target Large community attribute are used as the first route, that is, the first route is used as the target route.

[0051] S240: When the target large community attribute is transferred based on the target route, a route priority of the target route is determined.

[0052] In the embodiment of the present invention, the target source of the target route for transferring the target large community attribute is determined; when the target source remains unchanged, the priority of the target route remains unchanged; when the target source changes, the priority of the target route is changed based on a preset configuration.

[0053] Among them, the target source can be set in advance. For example, the target route includes route A, route B and route C. When route A, route B and route C perform target large community attribute transmission, route A is transmitted to route B, that is, the target source of route B is route A, and route B is transmitted to route C, that is, the target source of route C is route A or route B. Among them, when the target source of route C is route A, it can be determined that the priority of the target route remains unchanged, that is, the priority of route C is the priority carried by route A. When the target source of route C is route B, the priority of route C can be changed based on the preset configuration.

[0054] In one embodiment of the present invention, the priority of the target route is determined based on network performance parameters in the trust domain, the network performance parameters including link bandwidth utilization, packet loss rate, delay; or the priority of the target route is customized.

[0055] S250, route selection based on routing priority.

[0056] In one embodiment of the present invention, a first route carrying a target Large community attribute is obtained from a plurality of candidate routes in a route receiving end; a route carrying a function field is obtained from the first route, and the routes are aggregated. For example, if there are two routes carrying a function field, the two routes can be merged into one route, wherein the attribute carrying the function field is lost after the aggregation, and other fields of the target Large community attribute are not affected.

[0057] In a specific embodiment of the present invention, the target Large community attribute with routing priority function is used to control the route selection. The scenarios that can be solved by this attribute can be divided into two categories.

[0058] In the first scenario, within the trust domain, in two adjacent autonomous domain systems 65530 and 65531, for the traffic entering autonomous domain system 65531, the network administrator plans to bypass the local router B to enter the local autonomous domain system.

[0059] like Figure 3As shown in the figure, 1. In the autonomous domain system 65531, router A publishes routes. The routes published to the reflector in the domain carry a priority of 50, and the routes published to the adjacent autonomous domain system router C have a priority of 100; 2. Based on the direction of router A, reflector, and router B, after the route reaches the reflector, it is published to router B, and the local priority carried is still 50 (unchanged after passing through the reflector); 3. Router B forwards this route to the adjacent autonomous domain system, and does not modify this attribute. The priority of the route received by the router is still 50; 4. Based on the direction of router A and router C, the priority of the route published by router A to the adjacent autonomous domain system is 100; 5. The priorities of the routes received by routers C and D are 100 and 50 respectively. The routes are synchronized through the reflector in the domain. The routing results of routers C and D are both preferred routes with a routing priority of 50. Then the traffic to the autonomous domain system 65531 will eventually use router D as the exit, and the purpose of controlling the route entering 65531 is achieved.

[0060] In summary, by controlling the routing priority carried by the route in the trust domain, the route selection can be controlled, which can ultimately determine the entrance of the traffic into the target autonomous domain system.

[0061] In the second scenario, based on factors such as link bandwidth, packet loss rate, latency, and geographical location within the trust domain, the network administrator can automatically or manually set the routing priority of each node based on the neighbor dimension. The better the path, the smaller the value. The routing priority is accumulated during the routing transmission process, and the final path selection is based on the superimposed routing priority to determine the path.

[0062] like Figure 4As shown, 1. The initial route priority of the route released by router E can be set to 0, and the route priority is set in the neighbor outbound direction. The route priority is set after calculation based on factors such as link bandwidth, delay and packet loss rate in the trust domain. The above assumptions are calculated as follows: router E->router C is 10, and router E->router F is 5. At this time, the routes published from autonomous domain 65532 to autonomous domain 65531 carry two paths with priorities of 10 and 15 respectively; 2. After the route arrives at autonomous domain system autonomous domain 65531, router C has two routes, one is the route learned from router E with a priority of 10, and the other is the route learned from router C with a priority of 15. The route priority learned by D is 30 (the cumulative value of the three segments E->F, F->D and D->C, 5+10+15, is 30), and the route released by router E is preferred. Similarly, router D prefers the route learned from router F, and after completing the optimization, it continues to publish the route to autonomous domain 65530; 3. After the route arrives at autonomous domain 65530, there are two routes on router A. One is the route learned from router C with a priority of 40, and the other is the route learned from router B with a priority of 35. Therefore, the route learned from router B will be preferred, thus completing the accumulation and route selection of route priorities on the routing control plane on the entire path.

[0063] According to the routing priority simulated above, when traffic enters autonomous domain 65530 from routers in other non-trusted domains, the traffic path is calculated based on the routing priority: router A->router B->router D->router F->router E.

[0064] Therefore, the target large community attribute can remain unchanged during the transmission process to determine the path decision, or the administrator can set a routing priority value to accumulate after comprehensively calculating factors such as the existing link bandwidth, tunnel type, delay, packet loss rate, and regional requirements, and ultimately achieve traffic forwarding on a low-consumption path that complies with the network administrator's planning.

[0065] According to the method for controlling route selection in a trust domain according to an embodiment of the present invention, by defining the target Largecommunity attribute, and including an identifier field, a first field (used to identify the route priority) and a second field (used to identify the router-id or serial number of the route introduction router), refined control of traffic within the trust domain is achieved; network administrators can set different priorities for different routes according to actual needs, thereby controlling the flow direction and path of traffic; the method allows network administrators to dynamically adjust route priorities according to network performance parameters (such as link bandwidth utilization, packet loss rate, latency, etc.) or custom rules. This flexibility helps network administrators to quickly respond to network changes and optimize network performance; through a routing mechanism based on route priority, the network can select a path with better quality for data transmission, thereby reducing the risk of data transmission interruption caused by network failure or performance degradation. At the same time, the method also supports route aggregation, further improving the reliability and stability of the network; the method supports dynamic adjustment of route priority based on preset rules and custom configurations, which provides strong support for network automation. Network administrators can write scripts or use existing tools to automatically manage routing priorities, further improving the efficiency and accuracy of network management; the design of this method takes into account a variety of scenarios and requirements within the trust domain, and can adapt to network environments of different scales and complexities by flexibly configuring and adjusting routing priorities. This makes the method more scalable and adaptable in large and complex network environments.

[0066] Through the description of the above implementation methods, those skilled in the art can clearly understand that the method according to the above embodiment can be implemented by means of software plus a necessary general hardware platform, and of course by hardware, but in many cases the former is a better implementation method. Based on such an understanding, the technical solution of the present application, or the part that contributes to the prior art, can be embodied in the form of a software product, which is stored in a storage medium (such as ROM / RAM, magnetic disk, optical disk), and includes a number of instructions for a terminal device (which can be a mobile phone, computer, server, or network device, etc.) to execute the methods of each embodiment of the present application.

[0067] According to one aspect of an embodiment of the present invention, a system for controlling routing in a trust domain is also provided. Figure 5 Schematic diagram of a system for controlling routing in a trust domain according to an embodiment of the present invention; Figure 5 As shown, including:

[0068] A definition module 510, configured to define a target Large community attribute, wherein the target Large community attribute includes an identifier field, a first field, and a second field;

[0069] The judging module 520 is used to judge whether the route receiving end and the route publishing end are in the same trust domain when the route receiving end receives the target large community attribute published by the route publishing end based on the peer configuration;

[0070] An acquisition module 530 is used to acquire a target route in the route receiving end when the route receiving end and the route issuing end are in the same trust domain;

[0071] The determination module 540 is configured to determine the routing priority of the target route when the target large community attribute is transferred based on the target route, and select a route based on the routing priority.

[0072] According to the system for controlling route selection in a trust domain of an embodiment of the present invention, a target Large community attribute is defined, and the target Large community attribute includes an identifier field, a first field, and a second field; based on peer configuration, when a route receiving end receives the target Large community attribute published by a route publishing end, it is determined whether the route receiving end and the route publishing end are in the same trust domain; when the route receiving end and the route publishing end are in the same trust domain, the target route in the route receiving end is obtained; when the target Large community attribute is transmitted based on the target route, the route priority of the target route is determined, and the route is selected based on the route priority. In this way, the route can be selected based on the route priority, ensuring the efficient transmission of network traffic.

[0073] Optionally, the acquisition module 530 is specifically used to obtain a first route carrying the target Large community attribute from multiple candidate routes in the route receiving end, the first routes including multiple ones; obtain the target byte values ​​of the first field in the multiple first routes; and use the first route corresponding to the smallest value among the target byte values ​​of the first field in the multiple first routes as the target route.

[0074] Optionally, the acquisition module 530 is specifically configured to compare other attributes except the target Large community attribute carried by the multiple candidate routes based on preset rules when the target Large community attribute carried by the multiple candidate routes is the same, and determine the target route based on the comparison result.

[0075] Optionally, the acquisition module 530 is specifically configured to acquire a first route carrying the target Large community attribute from among a plurality of candidate routes in the route receiving end; and use the first route as the target route.

[0076] Optionally, the determination module 540 is specifically used to determine the target source for the target route to transfer the target Largecommunity attribute; when the target source remains unchanged, the priority of the target route remains unchanged; when the target source changes, the priority of the target route is changed based on a preset configuration.

[0077] Optionally, the determination module 540 is specifically used to determine the priority of the target route according to network performance parameters in the trust domain, where the network performance parameters include link bandwidth utilization, packet loss rate, and latency; or customize the priority of the target route.

[0078] Optionally, the system further comprises an aggregation module, configured to obtain a first route carrying the target Large community attribute from a plurality of candidate routes in the route receiving end; obtain a route carrying a function field from the first route, and aggregate the routes.

[0079] According to one aspect of an embodiment of the present invention, an electronic device is provided.

[0080] Figure 6 Schematic diagram of the structure of an electronic device according to an embodiment of the present invention. Figure 6 As shown, the electronic device may include one or more ( Figure 6 Only one is shown in the figure) processor 102 (processor 102 may include but is not limited to a microprocessor (Microprocessor Unit, referred to as MPU) or a programmable logic device (Programmable logic device, referred to as PLD)) and a memory 104 for storing data. In an exemplary embodiment, the electronic device may also include a transmission device 106 and an input / output device 108 for communication functions. It can be understood by those skilled in the art that Figure 6 The structure shown is for illustration only and does not limit the structure of the above terminal device. Figure 6 More or fewer components as shown, or with Figure 6 Equivalent functions or comparisons shown Figure 6 A different configuration with more features is shown.

[0081] The memory 104 can be used to store computer programs, for example, software programs and modules of application software, such as the computer program corresponding to the method for controlling routing in the trust domain in the embodiment of the present invention. The processor 102 executes various functional applications and data processing by running the computer program stored in the memory 104, that is, to implement the above method. The memory 104 may include a high-speed random access memory, and may also include a non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some instances, the memory 104 may further include a memory remotely arranged relative to the processor 102, and these remote memories may be connected to the terminal device via a network. Examples of the above network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0082] The transmission device 106 is used to receive or send data via a network. The specific example of the above network may include a wireless network provided by a communication provider of the switching device. In one example, the transmission device 106 includes a network adapter (Network Interface Controller, referred to as NIC), which can be connected to other network devices through a base station so as to communicate with the Internet. In one example, the transmission device 106 can be a radio frequency (RF) module, which is used to communicate with the Internet wirelessly.

[0083] The present invention provides a non-transitory computer-readable storage medium storing computer instructions, wherein the computer instructions are used to enable the computer to execute a method for controlling routing in a trust domain.

[0084] The applicant of the present invention has made a detailed explanation and description of the implementation examples of the present invention in conjunction with the drawings in the specification. However, those skilled in the art should understand that the above implementation examples are only preferred implementation schemes of the present invention, and the detailed description is only to help readers better understand the spirit of the present invention, but not to limit the scope of protection of the present invention. On the contrary, any improvements or modifications based on the inventive spirit of the present invention should fall within the scope of protection of the present invention.

[0085] In addition, each functional unit in each embodiment of the present invention may be integrated into a processing module, or each unit may exist physically separately, or two or more units may be integrated into one module. The above-mentioned integrated module may be implemented in the form of hardware or in the form of a software functional module. If the integrated module is implemented in the form of a software functional module and sold or used as an independent product, it may also be stored in a computer-readable storage medium.

[0086] The storage medium mentioned above may be a read-only memory, a magnetic disk or an optical disk, etc. Although the embodiments of the present invention have been shown and described above, it can be understood that the above embodiments are exemplary and cannot be understood as limiting the present invention. A person of ordinary skill in the art may change, modify, replace and modify the above embodiments within the scope of the present invention.

[0087] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the embodiments of the present invention, rather than to limit them. Although the present invention has been described in detail with reference to the above embodiments, those skilled in the art should understand that they can still modify the technical solutions recorded in the above embodiments, or replace some of the technical features therein by equivalents; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the embodiments of the present invention. Any changes or replacements that can be easily thought of by those skilled in the art within the technical scope disclosed in the present invention should be covered within the protection scope of the present invention.

Claims

1. A method for controlling routing in a trust domain, characterized in that: include: S1, defining a target Large community attribute, wherein the target Large community attribute includes an identifier field, a first field, and a second field; S2, based on the peer configuration, the route receiving end determines whether the route receiving end and the route publishing end are in the same trust domain when receiving the target Large Community attribute published by the route publishing end; S3, when the route receiving end and the route issuing end are in the same trust domain, obtaining the target route in the route receiving end; S4: When the target large community attribute is transferred based on the target route, a route priority of the target route is determined, and a route is selected based on the route priority.

2. The method for controlling routing in a trust domain according to claim 1, characterized in that: Obtaining the target route in the route receiving end includes: Acquire a first route carrying the target Large community attribute from a plurality of candidate routes in the route receiving end, wherein the first route includes a plurality of routes; Obtain the target byte value of the first field in a plurality of the first routes; The first route corresponding to the smallest value among the target byte values ​​of the first field in the plurality of first routes is used as the target route.

3. The method for controlling routing in a trust domain according to claim 2, characterized in that: Also includes: In the case that the target Large community attribute carried in the multiple candidate routes is the same, other attributes except the target Large community attribute carried in the multiple candidate routes are compared based on a preset rule, and the target route is determined based on the comparison result.

4. The method for controlling routing in a trust domain according to claim 1, characterized in that: Obtaining the target route in the route receiving end includes: Acquire a first route carrying the target Large community attribute from among a plurality of candidate routes in the route receiving end; The first route is used as the target route.

5. The method for controlling routing in a trust domain according to claim 1, characterized in that: In the case of transferring the target large community attribute based on the target route, determining the route priority of the target route includes: Determine the target source of the target route for transferring the target Large community attribute; When the target source remains unchanged, the priority of the target route remains unchanged; When the target source changes, the priority of the target route is changed based on a preset configuration.

6. The method for controlling routing in a trust domain according to claim 5, characterized in that: Determining the priority of the target route includes: Determine the priority of the target route according to network performance parameters in the trust domain, wherein the network performance parameters include link bandwidth utilization, packet loss rate, and latency; or Customize the priority of the target route.

7. The method for controlling routing in a trust domain according to claim 1, characterized in that: Also includes: Acquire a first route carrying the target Large community attribute from among a plurality of candidate routes in the route receiving end; Acquire routes carrying function fields from the first routes, and aggregate the routes.

8. A system for controlling routing in a trust domain, characterized in that: include: A definition module, used for defining a target Large community attribute, wherein the target Large community attribute includes an identifier field, a first field and a second field; A judgment module, configured to judge whether the route receiving end and the route publishing end are in the same trust domain based on the peer configuration when the route receiving end receives the target large community attribute published by the route publishing end; An acquisition module, configured to acquire a target route in the route receiving end when the route receiving end and the route issuing end are in the same trust domain; The determination module is used to determine the routing priority of the target route when the target large community attribute is transferred based on the target route, and select a route based on the routing priority.

9. An electronic device, characterized in that: include: at least one processor; as well as a memory communicatively connected to the at least one processor; wherein, The memory stores instructions that can be executed by the at least one processor, and the instructions are executed by the at least one processor to enable the at least one processor to perform the method according to any one of claims 1 to 7.

10. A non-transitory computer-readable storage medium storing computer instructions, characterized in that: The computer instructions are used to cause the computer to execute the method according to any one of claims 1 to 7.

Images