Message distribution method and device, communication equipment and readable storage medium
By extracting the SRv6 destination address in the message from the root system of the SRv6 node and forwarding it to the corresponding virtual system, the conflict problem of virtual system shunt in the SRv6 network is solved, and effective virtual system shunt and simplified message shunt process are realized.
Patent Information
- Application Number
- CN202310974453.3
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2023-08-03
- Publication Date
- 2025-02-14
- Estimated Expiration
- 2043-08-03
AI Technical Summary
In the SRv6 network, due to the conflict between the private service attributes of the virtual system and the SRv6 public network routing attributes, the packet diversion effect of the virtual system is poor, making it difficult to achieve effective virtual system diversion.
By extracting the SRv6 destination address in the message from the root system of the SRv6 node, and forwarding the message to the virtual system corresponding to the SRv6 destination address according to the correspondence between the preconfigured SRv6 address and the virtual system.
It solves the problem that the private service attributes of the virtual system conflict with the routing attributes of the SRv6 public network, realizes effective diversion of the virtual system in the SRv6 network, and simplifies the message diversion process.
Smart Images

Figure CN119449682A_ABST
Abstract
Description
Technical Field
[0001] The present application belongs to the field of communication technology, and specifically relates to a message diversion method, device, communication equipment and readable storage medium. Background Art
[0002] Considering security and differentiated business requirements, segment routing (SRv6) nodes based on the IPv6 forwarding plane often need to provide independent services for different tenants or businesses. When an SRv6 node serves multiple tenants / businesses, and these multiple tenants / businesses require independent service isolation, the interior of the SRv6 node can be divided into multiple independent and isolated virtual systems to provide separate services for different tenants / businesses. However, in an SRv6 network, since SRv6 addresses are generally public network addresses, the private service attributes of the virtual system will conflict with the SRv6 public network routing attributes, thereby affecting the SRv6 message diversion. In this case, how to effectively implement virtual system diversion in an SRv6 network is an urgent problem to be solved. Summary of the invention
[0003] The purpose of the embodiments of the present application is to provide a message diversion method, apparatus, communication equipment and readable storage medium to solve the problem of how to effectively implement virtual system diversion in an SRv6 network.
[0004] In order to solve the above technical problems, this application is implemented as follows:
[0005] In a first aspect, a message diversion method is provided, which is applied to an SRv6 node, including:
[0006] Forwarding the acquired first message to the root system in the SRv6 node;
[0007] Extracting, in the root system, the SRv6 destination address in the first message;
[0008] When the function type of the SRv6 destination address is a preset type, the first message is forwarded from the root system to the virtual system corresponding to the SRv6 destination address in the SRv6 node according to the correspondence between the preconfigured SRv6 address and the virtual system.
[0009] Optionally, after extracting the SRv6 destination address in the first message in the root system, the method further includes:
[0010] In the root system, it is determined whether the SRv6 destination address is a local SRv6 address, and if the SRv6 destination address is a local SRv6 address, it is determined whether a function type of the SRv6 destination address is a preset type.
[0011] Optionally, determining in the root system whether the SRv6 destination address is a local SRv6 address includes:
[0012] Searching a local SRv6 address table in the root system, and determining whether the local SRv6 address table includes the SRv6 destination address; when the local SRv6 address table includes the SRv6 destination address, the SRv6 destination address is a local SRv6 address; or, when the local SRv6 address table does not include the SRv6 destination address, the SRv6 destination address is not a local SRv6 address.
[0013] Optionally, the SRv6 destination address is a segment identifier SID, and the preset type is an END.V type.
[0014] Optionally, forwarding the first message from the root system to the virtual system corresponding to the SRv6 destination address in the SRv6 node according to the preconfigured correspondence between the SRv6 address and the virtual system includes:
[0015] In the root system, the next hop address of the first message is updated according to the SRv6 protocol to obtain a second message; and according to the correspondence between the preconfigured SRv6 address and the virtual system, the second message is forwarded from the root system to the virtual system corresponding to the SRv6 destination address.
[0016] Optionally, after forwarding the second message from the root system to the virtual system corresponding to the SRv6 destination address, the method further includes:
[0017] In the virtual system corresponding to the SRv6 destination address, the second message is processed and the processed message is forwarded to the root system; and the processed message is forwarded from the root system.
[0018] The forwarding of the processed message from the root system includes:
[0019] A public network route is searched in the root system, and the processed message is forwarded according to the SRv6 destination address in the processed message.
[0020] In a second aspect, a message splitting device is provided, which is applied to an SRv6 node and includes a forwarding module, a root system, and at least one virtual system;
[0021] The forwarding module is used to: forward the acquired first message to the root system;
[0022] The root system is used to extract the SRv6 destination address in the first message, and when the function type of the SRv6 destination address is a preset type, forward the first message to the virtual system corresponding to the SRv6 destination address in the SRv6 node according to the correspondence between the preconfigured SRv6 address and the virtual system.
[0023] In a third aspect, a communication device is provided, comprising a processor, a memory, and a program or instruction stored in the memory and executable on the processor, wherein the program or instruction, when executed by the processor, implements the steps of the method described in the first aspect.
[0024] In a fourth aspect, a readable storage medium is provided, on which a program or instruction is stored. When the program or instruction is executed by a processor, the steps of the method described in the first aspect are implemented.
[0025] In the embodiment of the present application, the root system in the SRv6 node forwards the received message to the virtual system corresponding to the SRv6 destination address according to the correspondence between the pre-configured SRv6 address and the virtual system, which can solve the problem of the conflict between the private service attributes of the virtual system and the SRv6 public network routing attributes in the related technology, thereby effectively realizing the virtual system diversion in the SRv6 network. In addition, the solution in the present application is simple to configure, and the changes to the message diversion process in the related technology are relatively small, which is conducive to realizing the virtual system diversion in the SRv6 network. BRIEF DESCRIPTION OF THE DRAWINGS
[0026] Figure 1 It is a schematic diagram of the correspondence between the SRv6 address and the virtual system in the embodiment of the present application;
[0027] Figure 2 It is a flow chart of a message diversion method provided in an embodiment of the present application;
[0028] Figure 3 It is a schematic diagram of the message diversion process in an embodiment of the present application;
[0029] Figure 4 It is a specific flow chart of the message diversion process in the embodiment of the present application;
[0030] Figure 5 It is a structural schematic diagram of a message diversion device provided in an embodiment of the present application;
[0031] Figure 6 It is a structural diagram of a communication device provided in an embodiment of the present application. DETAILED DESCRIPTION
[0032] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.
[0033] The terms "first", "second", etc. in the specification and claims of the present application are used to distinguish similar objects, and are not used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable under appropriate circumstances, so that the embodiments of the present application can be implemented in an order other than those illustrated or described here, and the objects distinguished by "first", "second", etc. are generally of one type, and the number of objects is not limited. For example, the first object can be one or more. In addition, "and / or" in the specification and claims represents at least one of the connected objects, and the character " / " generally indicates that the objects associated with each other are in an "or" relationship.
[0034] In order to facilitate understanding of the embodiments of the present application, the following contents are first described.
[0035] SRv6 is a protocol designed based on source routing to forward Internet Protocol Version 6 (IPv6) packets on the network. SRv6 packets are mainly composed of three parts: IPv6 basic header, SRv6 routing extension header and upper layer protocol data unit.
[0036] The SRv6 Segment Identifier (SID) is in the form of an IPv6 address, generally with 128 bits, including Locator, Function, and Arguments. Locator identifies a network node and is used to route and forward packets to the network node. Function is used to express the forwarding action to be performed by the device instruction, which can indicate forwarding by specifying a forwarding table query (end.t), forwarding by specifying an outbound interface (end.x), etc. Arguments is an optional field that indicates the parameters when the instruction is executed.
[0037] The SRv6 Segment Routing Header (SRH) contains an explicit SRv6 address stack. When the SRv6 source node encapsulates the SRv6 message, it encapsulates the nodes and destination SRv6 addresses that the message needs to pass through in the SRH. During the message forwarding process, it is forwarded in the network according to the path defined by the SRH, passing through the nodes included in the SRH.
[0038] A virtual system refers to multiple independent logical devices divided from a physical device. Through the virtual system feature, a physical device can be logically divided into two or more virtual systems. Each virtual system is equivalent to a real device, has its own resources, and processes messages according to the policies and entries within the virtual system. Administrators can configure and manage the services and resources within the virtual system separately.
[0039] Virtual systems can be divided into two types: one is the root system (Public) and the other is the virtual system (VSYS). The root system (Public) is a special virtual system that exists by default, and the virtual system (VSYS) is a logical device that is divided from a physical device and runs independently.
[0040] With the digital transformation of enterprises and the development of cloud computing and virtualization technologies, public clouds, multi-tenant data centers, etc. need to be able to guide messages to various service function nodes in an orderly manner to flexibly provide various services to different users. When messages are forwarded in the network, they often need to pass through various service nodes to ensure that the network can provide users with safe, fast, and stable services according to the pre-planned plan. These service nodes include firewalls (Firewall, FW), load balancers (LoadBalancer, LB), intrusion prevention systems (Intrusion Prevention System, IPS), etc. Messages need to pass through these service nodes in the established order required by the business logic to achieve the required business.
[0041] When an SRv6 node serves multiple tenants / businesses, and these multiple tenants / businesses require independent service isolation, the SRv6 node can be divided into multiple independent and isolated virtual systems to provide services to different tenants / businesses. Accordingly, it is necessary to be able to distinguish the correspondence between SRv6 traffic and virtual systems, and to implement traffic diversion from traffic forwarding devices to virtual systems.
[0042] In order to solve the problem of how to implement virtual system diversion in SRv6 network, the embodiment of the present application expands the SRv6 address definition and introduces a new function type for SRv6 address, such as END.V type, which is used to identify the virtual system in the SRv6 node. After creating a virtual system on the SRv6 node, you can configure the correspondence between the SRv6 address and the virtual system, that is, configure the binding relationship between the SRv6 address and the virtual system. Different virtual systems on the same SRv6 node can be distinguished by different Functions, or by different Locators or Arguments.
[0043] like Figure 1As shown in the figure, after creating virtual system vsys2 and virtual system vsys3 on a certain SRv6 node, you can configure the correspondence between SRv6 addresses and virtual systems, such as configuring SRv6 address SID2 to correspond to virtual system vsys2, and the function type is END.V, and configuring SRv6 address SID3 to correspond to virtual system vsys3, and the function type is END.V, so as to identify multiple virtual systems in a device / system / platform. SID2 and SID3 can be distinguished by different Functions, or by different Locators or Arguments.
[0044] The message diversion method, apparatus, communication device and readable storage medium provided in the embodiments of the present application are described in detail below with reference to the accompanying drawings through specific embodiments and their application scenarios.
[0045] See also Figure 2 , Figure 2 1 is a flow chart of a message diversion method provided by an embodiment of the present application, which is applied to a segment routing SRv6 node based on an IPv6 forwarding plane, and the SRv6 node may be, but is not limited to, a firewall, a load balancer, an intrusion prevention system, etc. Figure 2 As shown, the method comprises the following steps:
[0046] Step 21: forward the obtained first message to the root system in the SRv6 node;
[0047] Step 22: Extract the SRv6 destination address in the first message in the root system;
[0048] Step 23: When the function type of the SRv6 destination address is a preset type, according to the correspondence between the preconfigured SRv6 address and the virtual system, forward the first message from the root system to the virtual system corresponding to the SRv6 destination address in the SRv6 node.
[0049] Here, the root system is a special virtual system that exists by default in the SRv6 node. The SRv6 node can virtualize multiple virtual systems to provide independent isolation services for multiple tenants / services. The virtual system can meet the multi-tenant / service isolation requirements in scenarios such as large-scale data centers, cloud computing, and cloud services, and avoid the waste of resources caused by deploying multiple independent devices.
[0050] The first message is specifically an SRv6 message.
[0051] The preset type can be understood as a new functional type introduced for the SRv6 address in this application, which is used to identify the virtual system in the SRv6 node, that is, if the functional type of the SRv6 destination address is a preset type, then there is a corresponding relationship between the SRv6 destination address and the virtual system.
[0052] Optionally, the SRv6 destination address is SID, and the preset type is END.V type.
[0053] The message diversion method in the embodiment of the present application forwards the received message to the virtual system corresponding to the SRv6 destination address through the root system in the SRv6 node according to the correspondence between the pre-configured SRv6 address and the virtual system, which can solve the problem of the conflict between the private service attributes of the virtual system and the SRv6 public network routing attributes in the related technology, thereby effectively realizing the virtual system diversion in the SRv6 network. In addition, the solution in the present application is simple to configure, and the changes to the message diversion process in the related technology are relatively small, which is conducive to realizing the virtual system diversion in the SRv6 network.
[0054] Optionally, after extracting the SRv6 destination address in the first message in the root system, the message diversion method in this embodiment may further include:
[0055] In the root system, it is determined whether the SRv6 destination address is a local SRv6 address, and if the SRv6 destination address is a local SRv6 address, it is determined whether the function type of the SRv6 destination address is a preset type. Afterwards, if the function type of the SRv6 destination address is the preset type, the first message is forwarded to the virtual system corresponding to the SRv6 destination address according to the preconfigured correspondence between the SRv6 address and the virtual system.
[0056] That is to say, only when the extracted SRv6 destination address is a local SRv6 address and the corresponding function type is a preset type, the corresponding message is forwarded to the virtual system corresponding to the SRv6 destination address according to the correspondence between the preconfigured SRv6 address and the virtual system.
[0057] In the embodiment of the present application, the local SRv6 address table may be used to determine whether the extracted SRv6 destination address is a local SRv6 address. The above-mentioned determination in the root system whether the SRv6 destination address is a local SRv6 address may include:
[0058] Searching a local SRv6 address table in the root system, and determining whether the local SRv6 address table includes an SRv6 destination address; wherein, when the local SRv6 address table includes the SRv6 destination address, the SRv6 destination address is a local SRv6 address; or, when the local SRv6 address table does not include the SRv6 destination address, the SRv6 destination address is not a local SRv6 address.
[0059] In this way, by using the local SRv6 address table, it is easy to determine whether the extracted SRv6 destination address is a local SRv6 address.
[0060] Optionally, in step 23, forwarding the first message from the root system to the virtual system corresponding to the SRv6 destination address according to the preconfigured correspondence between the SRv6 address and the virtual system may include:
[0061] In the root system, the next hop address of the first message is updated according to the SRv6 protocol to obtain a second message;
[0062] According to the preconfigured correspondence between the SRv6 address and the virtual system, the second message is forwarded from the root system to the virtual system corresponding to the SRv6 destination address.
[0063] In this way, the next hop address of the message is updated before forwarding to the corresponding virtual system, which can facilitate the forwarding processing of subsequent messages.
[0064] The following is an explanation of updating the next hop address according to the SRv6 protocol: There are two key fields in the SRH of the SRv6 message: 1) Segment List in the form of IPv6 address. Each Segment List (such as Segment List[0], Segment List[1], ..., Segment List[n]) is a path segment, which is arranged in order to form the displayed path of IPv6; 2) Segment Left (abbreviated as SL) in the form of a pointer, pointing to the currently active Segment List. The minimum value of SL is 0, and the maximum value is the number of Segment Lists minus 1. During the SRv6 message forwarding process, the destination address field of the message header keeps changing. Its value is determined by the Segment Left (SL) and Segment List in the SRH. When SL points to an active Segment List, the path segment information in the Segment List is copied to the destination address field of the Header to update the destination address.
[0065] Optionally, after the second message is forwarded from the root system to the virtual system corresponding to the SRv6 destination address, the message splitting method in this embodiment may further include:
[0066] In the virtual system corresponding to the SRv6 destination address, the second message is processed, the processed message is forwarded to the root system, and the processed message is forwarded from the root system.
[0067] For example, the above-mentioned processing of the second message may be: processing the second message and providing services according to tenant / business requirements.
[0068] Optionally, forwarding the processed message from the root system includes: searching for a public network route in the root system, and forwarding the processed message according to an SRv6 destination address in the processed message.
[0069] Combine the following Figure 3 and Figure 4 The message diversion process in the embodiment of the present application is explained.
[0070] In the present application embodiment, Figure 3 As shown, first, a virtual system, such as vsys2 and vsys3, can be created on the SRv6 node; then, an SRv6 address of the End.V type is defined on the root system of the SRv6 node, and the SRv6 address is mapped to the virtual system, that is, a mapping / binding relationship between the SRv6 address and the virtual system is established, such as END.V SID2 corresponds to vsys2, and END.V SID3 corresponds to vsys3; and the SRv6 address route identifying the virtual system is published to the network in the root system.
[0071] When encapsulating SRv6 messages based on tenant / business requirements, the SRv6 head node can add the SRv6 address (such as SID2 or SID3) that identifies the virtual system to the message SRH extension header, and send the obtained SRv6 message to the network; the SRv6 message is routed and forwarded to this SRv6 node in the network. When the SRv6 message is forwarded to this SRv6 node, it first enters the root system and searches the local SID table in the root system. If the local SID table can be hit and the function type is END.V, the corresponding virtual system is found, and the SRv6 message is forwarded to the corresponding virtual system after updating the next hop destination address according to the SRv6 protocol. For example, after the SRv6 message with the destination address of SID2 is updated with the next hop address according to the SRv6 protocol, it is forwarded to the virtual system vsys2; or after the SRv6 message with the destination address of SID3 is updated with the next hop address according to the SRv6 protocol, it is forwarded to the virtual system vsys3. After that, after the SRv6 message enters the corresponding virtual system, it is processed and provided with services according to the tenant / business needs, and the processed message is forwarded to the root system, which searches the routing table for forwarding according to the destination address in the SRv6 message.
[0072] like Figure 4 As shown in the figure, the specific diversion process after the message enters the SRv6 node with the virtual system enabled includes:
[0073] S1: The message is forwarded to the SRv6 node, and the SRv6 node has the virtual system function enabled.
[0074] S2: The root system of the SRv6 node determines whether the message is an SRv6 message. If it is not an SRv6 message, it enters the original message processing process, that is, it performs routing forwarding according to the destination address in the message. If it is an SRv6 message, it enters S3.
[0075] S3: The root system of the SRv6 node searches the local SID table to determine whether the SRv6 destination address in the message is a local SRv6 address; if it is not a local SRv6 address, the original message processing flow is entered; if it is a local SRv6 address, S4 is entered.
[0076] S4: The root system of the SRv6 node determines whether the SRv6 destination address is of the END.V type; if the SRv6 destination address is not of the END.V type, the SRv6 message processing flow is entered; and if the SRv6 destination address is of the END.V type, S5 is entered.
[0077] S5: The root system of the SRv6 node continues to update the next hop destination address of the message according to the SRv6 protocol, that is, updates the next hop destination address in the SRH to the SRv6 destination address. After the SRv6 address is updated, the message is forwarded to the corresponding virtual system according to the corresponding relationship between the configured SRv6 address and the virtual system.
[0078] S6: After the message enters the corresponding virtual system, the virtual system processes the message according to the configuration, such as performing security detection or other value-added services.
[0079] S7: After the message processing is completed, the virtual system forwards the processed message to the root system.
[0080] S8: The root system forwards and processes the SRv6 message.
[0081] It should be noted that the message diversion method provided in the embodiment of the present application can be executed by a message diversion device, or a control module in the message diversion device for executing the message diversion method. In the embodiment of the present application, the message diversion device provided in the embodiment of the present application is described by taking the message diversion device executing the message diversion method as an example.
[0082] See also Figure 5 , Figure 5 Schematic diagram of a packet splitting device provided in an embodiment of the present application, which is applied to a segment routing SRv6 node based on an IPv6 forwarding plane, such as Figure 5 As shown, the message splitting device 50 includes a forwarding module 51, a root system 52 and at least one virtual system 53;
[0083] The forwarding module 51 is used to: forward the acquired first message to the root system 52;
[0084] The root system 52 is used to extract the SRv6 destination address in the first message, and when the function type of the SRv6 destination address is a preset type, forward the first message to the virtual system 53 corresponding to the SRv6 destination address according to the correspondence between the preconfigured SRv6 address and the virtual system.
[0085] Optionally, the root system 52 is further used to: determine whether the SRv6 destination address is a local SRv6 address, and if the SRv6 destination address is a local SRv6 address, determine whether the function type of the SRv6 destination address is a preset type.
[0086] Optionally, the root system 52 is also used to: search a local SRv6 address table and determine whether the local SRv6 address table includes the SRv6 destination address; when the local SRv6 address table includes the SRv6 destination address, the SRv6 destination address is a local SRv6 address; or, when the local SRv6 address table does not include the SRv6 destination address, the SRv6 destination address is not a local SRv6 address.
[0087] Optionally, the SRv6 destination address is a segment identifier SID, and the preset type is an END.V type.
[0088] Optionally, the root system 52 is further used to: update the next hop address of the first message according to the SRv6 protocol to obtain a second message; and forward the second message to the virtual system corresponding to the SRv6 destination address according to the correspondence between the preconfigured SRv6 address and the virtual system.
[0089] Optionally, the virtual system 53 corresponding to the SRv6 destination address is used to: process the second message and forward the processed message to the root system 52;
[0090] The root system 52 is further configured to forward the processed message.
[0091] Optionally, the root system 52 is further used to: search for a public network route, and forward the processed message according to the SRv6 destination address in the processed message.
[0092] The message splitting device 50 of the embodiment of the present application can realize the above Figure 2The various processes of the method embodiment shown can achieve the same technical effect, and will not be described again here to avoid repetition.
[0093] Optional, such as Figure 6 As shown, an embodiment of the present application also provides a communication device 60, including a processor 61, a memory 62, and a program or instruction stored in the memory 62 and executable on the processor 61. When the program or instruction is executed by the processor 61, each process of the above-mentioned message diversion method embodiment is implemented, and the same technical effect can be achieved. To avoid repetition, it will not be repeated here.
[0094] An embodiment of the present application also provides a readable storage medium on which a program or instruction is stored. When the program or instruction is executed by a processor, the various processes of the above-mentioned message diversion method embodiment can be implemented and the same technical effect can be achieved. To avoid repetition, it will not be repeated here.
[0095] Computer readable media include permanent and non-permanent, removable and non-removable media, and can be implemented by any method or technology to store information. Information can be computer readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, magnetic tape magnetic disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined herein, computer readable media does not include temporary computer readable media (transitory media), such as modulated data signals and carrier waves.
[0096] It should be noted that, in this article, the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, an element defined by the sentence "comprises a ..." does not exclude the existence of other identical elements in the process, method, article or device including the element.
[0097] The serial numbers of the above-mentioned embodiments of the present application are for description only and do not represent the advantages or disadvantages of the embodiments.
[0098] Through the description of the above implementation methods, those skilled in the art can clearly understand that the above-mentioned embodiment methods can be implemented by means of software plus a necessary general hardware platform, and of course by hardware, but in many cases the former is a better implementation method. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art, can be embodied in the form of a software product, which is stored in a storage medium (such as ROM / RAM, magnetic disk, optical disk), and includes a number of instructions for enabling a service classification device (which can be a mobile phone, computer, server, air conditioner, or network device, etc.) to execute the methods described in each embodiment of the present application.
[0099] The above is only a preferred implementation of the present application. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principles of the present application. These improvements and modifications should also be regarded as the scope of protection of the present application.
Claims
1. A message diversion method, applied to an SRv6 node, characterized in that: The method comprises: Forwarding the acquired first message to the root system in the SRv6 node; Extracting, in the root system, the SRv6 destination address in the first message; When the function type of the SRv6 destination address is a preset type, the first message is forwarded from the root system to the virtual system corresponding to the SRv6 destination address in the SRv6 node according to the correspondence between the preconfigured SRv6 address and the virtual system.
2. The method according to claim 1, characterized in that After extracting the SRv6 destination address in the first message in the root system, the method further includes: In the root system, it is determined whether the SRv6 destination address is a local SRv6 address, and if the SRv6 destination address is a local SRv6 address, it is determined whether a function type of the SRv6 destination address is a preset type.
3. The method according to claim 2, characterized in that The determining in the root system whether the SRv6 destination address is a local SRv6 address includes: Searching a local SRv6 address table in the root system, and determining whether the local SRv6 address table includes the SRv6 destination address; When the local SRv6 address table includes the SRv6 destination address, the SRv6 destination address is a local SRv6 address; or, when the local SRv6 address table does not include the SRv6 destination address, the SRv6 destination address is not a local SRv6 address.
4. The method according to any one of claims 1 to 3, characterized in that: The SRv6 destination address is a segment identifier SID, and the preset type is an END.V type.
5. The method according to claim 1, characterized in that The forwarding the first message from the root system to the virtual system corresponding to the SRv6 destination address in the SRv6 node according to the preconfigured correspondence between the SRv6 address and the virtual system includes: Updating the next hop address of the first message in the root system according to the SRv6 protocol to obtain a second message; According to the preconfigured correspondence between the SRv6 address and the virtual system, the second message is forwarded from the root system to the virtual system corresponding to the SRv6 destination address.
6. The method according to claim 5, characterized in that After forwarding the second message from the root system to the virtual system corresponding to the SRv6 destination address, the method further includes: In the virtual system corresponding to the SRv6 destination address, processing the second message and forwarding the processed message to the root system; The processed message is forwarded from the root system.
7. The method according to claim 6, characterized in that The forwarding of the processed message from the root system includes: A public network route is searched in the root system, and the processed message is forwarded according to the SRv6 destination address in the processed message.
8. A message diversion device, applied to an SRv6 node, characterized in that: including a forwarding module, a root system and at least one virtual system; The forwarding module is used to: forward the acquired first message to the root system; The root system is used to extract the SRv6 destination address in the first message, and when the function type of the SRv6 destination address is a preset type, forward the first message to the virtual system corresponding to the SRv6 destination address in the SRv6 node according to the correspondence between the preconfigured SRv6 address and the virtual system.
9. A communication device, characterized in that: It includes a processor, a memory, and a program or instruction stored in the memory and executable on the processor, wherein the program or instruction, when executed by the processor, implements the steps of the message diversion method as described in any one of claims 1 to 7.
10. A readable storage medium, characterized in that: The readable storage medium stores a program or instruction, and when the program or instruction is executed by the processor, the steps of the message diversion method as described in any one of claims 1 to 7 are implemented.
Citation Information
Patent Citations
Message shunting method and device
CN104917687A
Message processing method and system
CN105743993A
Message forwarding method and device based on SRv6 network, storage medium and electronic device
CN111935014A
SRv6-based message processing method and system, electronic equipment and medium
CN114338498A
Message transmission method, device and system
CN114760243A