Information reporting method, device and system

Abstract

The invention relates to the technical field of communication, and provides an information reporting method, device and system, and the method comprises the steps that a first communication device receives a first VPN route from a second communication device, and the first VPN route comprises a first IP address prefix and equipment information of the second communication device; and the first communication device sends a protocol message to the control management device, and the protocol message comprises the first IP address prefix or the first IP address in the network segment to which the first IP address prefix belongs, the equipment information of the first communication device and the equipment information of the second communication device. Therefore, the control management device can successfully and efficiently obtain the information of the data transmission path transmitted from the first communication device to the first IP address prefix; wherein the information comprises equipment information of a communication device, namely a first communication device, at a data input end in the data transmission path and equipment information of a communication device, namely a second communication device, at a data output end in the data transmission path.

Description

Technical Field

[0001] The present application relates to the field of communication technology, and specifically to an information reporting method, device and system. Background Art

[0002] Virtual Private Network (VPN) is widely used in various business scenarios. Business data streams can be transmitted securely and reliably through VPN networks. Statistical analysis of the transmission path of data streams in VPN networks can help understand the transmission status of data streams and help ensure the normal transmission of data streams in VPN networks. However, there may be many communication devices and routes in VPNs, making it difficult to statistically analyze the transmission path of data streams. Summary of the invention

[0003] The present application provides an information reporting method, device and system, which can successfully and efficiently obtain information on data transmission paths in a VPN network.

[0004] In a first aspect, an information reporting method is provided, which can be executed by a first communication device. The method includes the first communication device receiving a first VPN route from a second communication device, the first VPN route including a first IP address prefix and device information of the second communication device. And, the first communication device sends a protocol message to a control management device, the protocol message including the first IP address prefix or a first IP address in a network segment to which the first IP address prefix belongs, device information of the first communication device, and device information of the second communication device.

[0005] In the information reporting method provided in the embodiment of the present application, the first VPN route indicates the route for transmitting data from the second communication device to the first IP address prefix. The first VPN route is notified to the first communication device through the second communication device, and the first communication device can obtain the routing information of the first VPN route (including the first IP address prefix and the device information of the second communication device). In addition, the first communication device also reports a protocol message to the control and management device, and the protocol message includes the first IP address prefix or the first IP address prefix in the network segment to which the first IP address prefix belongs, the device information of the first communication device, and the device information of the second communication device. In this way, the control and management device can successfully and efficiently obtain the information of the data transmission path from the first communication device to the first IP address prefix or the first IP address prefix in the network segment to which the first IP address prefix belongs, including: the device information of the communication device at the data input end in the data transmission path, that is, the first communication device, and the device information of the communication device at the data output end, that is, the second communication device.

[0006] In a possible implementation, the device information of the second communication device includes one or more of the following: a BGP ID of the second communication device or a VRF instance identifier of a first VRF instance included in the second communication device, wherein the first VRF instance includes a first VPN route.

[0007] The BGP ID of the communication device can identify the communication device. In the information reporting method provided in the embodiment of the present application, the first communication device obtains the BGP ID of the second communication device and reports it to the control management device along with the first IP address prefix or the first IP address through a protocol message, so that the control management device can determine and identify the communication device at the data output end in the data transmission path, that is, the second communication device, through the BGP ID of the second communication device.

[0008] The communication device includes a VRF instance, which includes routing information. The communication device can notify the routes in the VRF instance to other communication devices, and can forward data based on the VRF instance. The second communication device may include one or more VRF instances, wherein the VRF instance where the first VPN route is located is the first VRF instance. In the information reporting method provided in the embodiment of the present application, the first communication device obtains the VRF instance identifier of the first VRF instance where the first VPN route is located on the second communication device, and reports it to the control and management device along with the first IP address prefix or the first IP address through a protocol message, so that the control and management device can clearly identify the communication device at the data output end in the data transmission path, that is, the specific VRF instance on the second communication device through the VRF instance identifier of the first VRF instance (that is, it is known which VRF instance on the communication device at the data output end forwards the data flow).

[0009] In another possible implementation, the device information of the first communication device includes one or more of the following: a BGP ID of the first communication device or a VRF instance identifier of a local VRF instance included in the first communication device, wherein the local VRF instance includes a first VPN route.

[0010] In the information reporting method provided in the embodiment of the present application, the first communication device reports the BGP ID of the first communication device along with the first IP address prefix or the first IP address to the control and management device through a protocol message, so that the control and management device can determine and identify the communication device at the data input end in the data transmission path, that is, the first communication device, through the BGP ID of the first communication device.

[0011] In the information reporting method provided in the embodiment of the present application, the first communication device reports the VRF instance identifier of the local VRF instance where the first VPN route on the first communication device is located to the control and management device along with the first IP address prefix or the first IP address through a protocol message, so that the control and management device can clearly identify and identify the communication device at the data input end in the data transmission path, that is, the specific VRF instance on the first communication device through the VRF instance identifier of the local VRF instance (that is, know which VRF instance on the communication device at the data input end forwards the data flow).

[0012] In another possible implementation manner, the VRF instance identifier includes a VRF instance RD.

[0013] The VRF instance RD can uniquely identify each VRF instance. Thus, in the information reporting method provided in the embodiment of the present application, each VRF instance involved can be accurately determined and identified through the VRF instance RD.

[0014] In another possible implementation, the protocol message is at least one of a BMP message or an IPFIX message.

[0015] A VPN network configured with the BGP protocol can efficiently announce and update routes, and the BMP protocol can efficiently monitor the operating status of BGP devices (communication devices configured with BGP). Thus, in the information reporting method provided in the embodiment of the present application, by configuring BGP in the VPN network and configuring BMP on the first communication device in the VPN network, and the first communication device reports the information of the data transmission path to the control management device by sending a BMP message, it is possible to successfully and efficiently obtain the information of the data transmission path of the data flow in the VPN network.

[0016] The IPFIX protocol can efficiently measure the information of the data flow transmitted by the communication device. Thus, in the information reporting method provided in the embodiment of the present application, by configuring IPFIX on the first communication device in the VPN network, and the first communication device reports the information of the data transmission path to the control management device by sending an IPFIX message, it is possible to successfully and efficiently obtain the information of the data transmission path of the data flow in the VPN network.

[0017] In another possible implementation, the second communication device includes a first VRF instance and a second VRF instance, the first VRF instance includes a first VPN route, and the second VRF instance includes a second VPN route. And, before the first communication device sends a protocol message to the control management device, the method also includes receiving a second VPN route from the second communication device, and saving the first VPN route as a target VPN route in a local VRF instance of the first communication device. The second VPN route includes a first IP address prefix, a BGP ID of the second communication device, and a VRF instance identifier of the second VRF instance included in the second communication device.

[0018] In some scenarios, the second communication device includes multiple VRF instances, and the second communication device sends multiple VPN routes with the same IP address prefix from the multiple VRF instances to the first communication device. For example, a first VPN route is sent from the first VRF instance, and a second VPN route is sent from the second VRF instance, and the first VPN route and the second VPN route carry the same IP address prefix. The first communication device can determine one (e.g., the first VPN route) from the multiple VPN routes with the same IP address prefix received as the target VPN route (i.e., the optimal route) and save it in the local VRF instance.

[0019] Thus, in the information reporting method provided in the embodiment of the present application, the VPN route notified to the first communication device includes the VRF instance identifier of the VRF instance where the VPN route is located, and the first communication device can determine and identify which VRF instance of the second communication device the received VPN route comes from. After the first communication device reports the protocol message (wherein the device information of the second communication device may include the VRF instance identifier of the VRF instance where the first VPN route is located on the second communication device) to the control management device, the control management device can clearly identify and identify the specific VRF instance on the communication device at the data output end in the data transmission path, that is, the second communication device (that is, it is known which VRF instance on the communication device at the data output end forwards the data flow).

[0020] In another possible implementation, before sending the protocol message to the control management device, the method further includes receiving a third VPN route from a third communication device, and saving the first VPN route as a target VPN route in a local VRF instance of the first communication device, wherein the third VPN route includes the first IP address prefix and device information of the third communication device.

[0021] In some scenarios, multiple communication devices respectively send multiple VPN routes with the same IP address prefix to the first communication device. For example, the second communication device sends the first VPN route, the third communication device sends the third VPN route, etc., and the first VPN route and the third VPN route carry the same IP address prefix. The first communication device can determine one (for example, the first VPN route) from the multiple VPN routes with the same IP address prefix received as the target VPN route (i.e., the optimal route) and save it in the local VRF instance.

[0022] Thus, in the information reporting method provided in the embodiment of the present application, the VPN route notified to the first communication device includes the device information of the communication device where the VPN route is located (such as the device information of the second communication device), and the first communication device can determine and identify which communication device among the multiple communication devices the received VPN route comes from. After the first communication device reports the protocol message (including the device information of the second communication device) to the control management device, the control management device can clearly identify which of the multiple communication devices the communication device at the data output end in the data transmission path is.

[0023] In another possible implementation, when the protocol message is a BMP message, the BMP message carries TLV data indicating device information of the second communication device. The TLV data may include message length, address family information, sub-address family information, and device information of the second communication device.

[0024] TLV can encode information effectively and clearly. In the embodiment of the present application, by carrying TLV data indicating the device information of the second communication device in the BMP message, the device information of the second communication device can be reported effectively and clearly.

[0025] In a second aspect, another information reporting method is provided, which can be executed by a control management device. The method includes the control management device receiving a protocol message from a first communication device, the protocol message including a first IP address prefix or a first IP address in a network segment to which the first IP address prefix belongs, device information of the first communication device, and device information of a second communication device. The first IP address prefix is ​​an IP address prefix carried in a first VPN route sent by the second communication device to the first communication device. And, the control management device obtains the first IP address prefix or the first IP address, the device information of the first communication device, and the device information of the second communication device from the protocol message.

[0026] The technical effect of the information reporting method provided by the second aspect can be found in the information reporting method provided by the first aspect.

[0027] In a possible implementation, the device information of the second communication device includes one or more of the following: a BGP ID of the second communication device or a VRF instance identifier of a first VRF instance included in the second communication device, wherein the first VRF instance includes a first VPN route.

[0028] In another possible implementation, the device information of the first communication device includes one or more of the following: a BGP ID of the first communication device or a VRF instance identifier of a local VRF instance included in the first communication device, wherein the local VRF instance includes a first VPN route.

[0029] In another possible implementation manner, the VRF instance identifier includes a VRF instance RD.

[0030] In another possible implementation, the protocol message is at least one of a BMP message or an IPFIX message.

[0031] In another possible implementation, when the protocol message is a BMP message, the method further includes acquiring information of a data stream, the destination network address of the data stream being the first IP address, and also establishing an association between the data stream and device information of the second communication device.

[0032] In this way, after the first communication device reports the information of the data transmission path and the data flow information to the control management device through the BMP message, the control management device can associate the data flow whose destination network address is the first IP address with the information of the data transmission path (including the device information of the communication device at the data output end, i.e., the second communication device). That is, for the specific data flow received by the first communication device, the information of the data transmission path of the specific data flow can be clearly identified.

[0033] In another possible implementation, the first VPN route is a target VPN route selected by the first communication device from a plurality of VPN routes from the second communication device, wherein the IP address prefix carried by the plurality of VPN routes is the first IP address prefix.

[0034] In another possible implementation, the first VPN route is a target VPN route selected by the first communication device from multiple VPN routes from the second communication device and the third communication device, and the IP address prefix carried by the multiple VPN routes is the first IP address prefix.

[0035] In a third aspect, a first communication device is provided, comprising: a transceiver module and a processing module, for implementing the method implemented by the first communication device in the aforementioned first aspect and any possible implementation of the first aspect. Specifically, the transceiver module is used to receive a first VPN route from a second communication device, the first VPN route including a first IP address prefix and device information of the second communication device. The transceiver module is also used to send a protocol message to a control management device, the protocol message including the first IP address prefix or the first IP address in the network segment to which the first IP address prefix belongs, the device information of the first communication device, and the device information of the second communication device.

[0036] In a possible implementation, the device information of the second communication device includes one or more of the following: a BGP ID of the second communication device or a VRF instance identifier of a first VRF instance included in the second communication device, wherein the first VRF instance includes a first VPN route.

[0037] In another possible implementation, the device information of the first communication device includes one or more of the following: a BGP ID of the first communication device or a VRF instance identifier of a local VRF instance included in the first communication device, wherein the local VRF instance includes a first VPN route.

[0038] In another possible implementation manner, the VRF instance identifier includes a VRF instance RD.

[0039] In another possible implementation, the protocol message is at least one of a BMP message or an IPFIX message.

[0040] In another possible implementation manner, the second communication device includes a first VRF instance and a second VRF instance, the first VRF instance includes a first VPN route, and the second VRF instance includes a second VPN route.

[0041] Furthermore, the transceiver module is further configured to receive a second VPN route from the second communication device before the first communication device sends a protocol message to the control management device, wherein the second VPN route includes the first IP address prefix and a VRF instance identifier of a second VRF instance included in the second communication device.

[0042] In another possible implementation manner, the processing module is configured to store the first VPN route as a target VPN route in a local VRF instance of the first communication device.

[0043] In another possible implementation, the transceiver module is further configured to receive a third VPN route from a third communication device before sending the protocol message to the control management device, wherein the third VPN route includes the first IP address prefix and device information of the third communication device.

[0044] In another possible implementation manner, the processing module is configured to store the first VPN route as a target VPN route in a local VRF instance of the first communication device.

[0045] In another possible implementation, the device information of the third communication device includes one or more of the following: a BGP ID of the third communication device and a VRF instance identifier of a third VRF instance included in the third communication device, wherein the third VRF instance includes a third VPN route.

[0046] In a fourth aspect, a control and management device is provided, comprising: a transceiver module and a processing module, for implementing the method implemented by the control and management device in the aforementioned second aspect and any possible implementation of the second aspect. Specifically, the transceiver module is used to receive a protocol message from a first communication device, and the protocol message includes a first IP address prefix or a first IP address in a network segment to which the first IP address prefix belongs, device information of the first communication device, and device information of the second communication device. Among them, the first IP address prefix is ​​the IP address prefix carried in the first VPN route sent by the second communication device to the first communication device. And, the processing module is used to obtain the first IP address prefix or the first IP address, the device information of the first communication device, and the device information of the second communication device from the protocol message.

[0047] In a possible implementation, the device information of the second communication device includes one or more of the following: a BGP ID of the second communication device or a VRF instance identifier of a first VRF instance included in the second communication device, wherein the first VRF instance includes a first VPN route.

[0048] In another possible implementation, the device information of the first communication device includes one or more of the following: a BGP ID of the first communication device or a VRF instance identifier of a local VRF instance included in the first communication device, wherein the local VRF instance includes a first VPN route.

[0049] In another possible implementation manner, the VRF instance identifier includes a VRF instance RD.

[0050] In another possible implementation, the protocol message is at least one of a BMP message or an IPFIX message.

[0051] In another possible implementation, when the protocol message is a BMP message, the transceiver module is further used to obtain information of a data stream, the destination network address of the data stream is the first IP address, and the processing module is further used to establish an association between the data stream and the device information of the second communication device.

[0052] In another possible implementation, the first VPN route is a target VPN route selected by the first communication device from a plurality of VPN routes from the second communication device, wherein the IP address prefix carried by the plurality of VPN routes is the first IP address prefix.

[0053] In another possible implementation, the first VPN route is a target VPN route selected by the first communication device from multiple VPN routes from the second communication device and the third communication device, and the IP address prefix carried by the multiple VPN routes is the first IP address prefix.

[0054] In a fifth aspect, a communication system is provided, the system comprising a first communication device and a control management device, the first communication device being used to execute the information reporting method as described in the first aspect or any possible implementation of the first aspect, and the control management device being used to execute the information reporting method as described in the second aspect or any possible implementation of the second aspect.

[0055] In a sixth aspect, a communication device is provided, comprising a processor and a memory; the processor is used to execute instructions stored in the memory so that the communication device executes the information reporting method as described in the first aspect or any possible implementation of the first aspect; or the information reporting method as described in the second aspect or any possible implementation of the second aspect.

[0056] In the seventh aspect, a computer program product is provided, comprising instructions, which, when executed on a processor, implement the information reporting method as described in the first aspect or any possible implementation of the first aspect; or the information reporting method as described in the second aspect or any possible implementation of the second aspect.

[0057] In an eighth aspect, a computer-readable storage medium is provided, comprising computer program instructions. When the computer program instructions are executed by a communication device, the communication device executes the information reporting method as described in the first aspect or any possible implementation of the first aspect; or the information reporting method as described in the second aspect or any possible implementation of the second aspect.

[0058] Based on the implementations provided in the above aspects, this application can also be further combined to provide more implementations.

[0059] The following description includes more specific details about the implementation methods provided by the above aspects. BRIEF DESCRIPTION OF THE DRAWINGS

[0060] Figure 1 A schematic diagram of a first communication system provided in an embodiment of the present application;

[0061] Figure 2 A schematic diagram of a second communication system provided in an embodiment of the present application;

[0062] Figure 3 A flowchart of an information reporting method provided in an embodiment of the present application;

[0063] Figure 4 A schematic diagram of the format of a BMP message provided in an embodiment of the present application;

[0064] Figure 5 A schematic diagram of the format of the TLV data of the newly added field of the BMP message provided in the embodiment of the present application;

[0065] Figure 6 A method diagram of a first example of an information reporting method provided in an embodiment of the present application;

[0066] Figure 7 A method diagram of a second example of the information reporting method provided in an embodiment of the present application;

[0067] Figure 8 A schematic diagram of a module of a first communication device provided in an embodiment of the present application;

[0068] Fig. 9 A schematic diagram of a module of a control management device provided in an embodiment of the present application;

[0069] Fig.10 A schematic diagram of the structure of a communication device provided in an embodiment of the present application;

[0070] Fig.11 A schematic diagram of the structure of a device cluster provided in an embodiment of the present application. DETAILED DESCRIPTION

[0071] A Virtual Private Network (VPN) is a virtual private communication network established in a public network. VPN is widely used in various business scenarios, and the data flow (or traffic) of the business can be transmitted securely and reliably through the VPN network.

[0072] For example, a user terminal is connected to a public network and needs to access an enterprise intranet. At this time, the user terminal opens a VPN client and sends a data stream, which is sent to the VPN network. The VPN network encrypts the data stream and transmits it to a server in the enterprise intranet.

[0073] The devices in the VPN network architecture are communication devices (also referred to as network devices). The communication devices can connect to the network, realize the interconnection between networks, and can transmit data between communication devices. The communication devices can be various devices, modules, programs, etc. that can realize their functions, wherein the devices can be, for example, routers, switches, etc. In the embodiments of the present application, the communication device is mainly described as a router.

[0074] VPNs include various types according to differences in service usage, networking model, operation mode, implementation level classification, etc. For example, they may include L2VPN, L3VPN (which may include MPLS VPN), etc.

[0075] The communication devices involved in the VPN network architecture may include various types according to the functions of the communication devices. Taking L3VPN as an example, the VPN network architecture may include but is not limited to the following types of communication devices.

[0076] Customer Edge (CE): It is the edge device of the user network. CE is directly connected to the operator network. CE can notify the VPN customer's route (also called customer route) to PE, and can also learn the routes of other sites under the same VPN from PE.

[0077] Provider Edge (PE): It is the edge device of the operator network and is directly connected to the CE. PE can perform routing protocols with CE to obtain customer routes. In addition, PE can also transfer routes with other PEs.

[0078] Provider backbone equipment (P): It is the backbone equipment in the operator network and is not directly connected to the CE. P can be connected to PE or other Ps and can be used to forward data to PE or other Ps.

[0079] The user network refers to the network used by the user, such as the public network used by the user's equipment, the enterprise intranet, etc. The operator network refers to the VPN backbone network established by the operator, and the VPN backbone network can be constructed by PE, P, etc.

[0080] It is very important to ensure the normal transmission of data flows in VPN networks. Statistical analysis of the transmission paths of data flows in VPN networks can help understand the transmission status of data flows and help ensure the normal transmission of data flows in VPN networks. However, there may be many communication devices and routes in VPNs, making it difficult to perform statistical analysis on the transmission paths of data flows in VPNs.

[0081] As an example, Figure 1 Schematic diagram of the first communication system provided in the embodiment of the present application. The first communication system 100 shows a schematic diagram of the VPN network architecture. Figure 1 As shown, the first communication system 100 includes a first user device 101 , a VPN backbone network 102 , a second user device 103 , and a target device 104 .

[0082] The first user device 101 and the second user device 103 may be devices for connecting to a user network, namely, a user edge device CE. The user device may be any feasible device such as a server, a terminal (such as a mobile terminal, a laptop computer, etc.). The user network may be a public network, an enterprise intranet, etc.

[0083] The target device 104 may be a device that the user needs to access through a VPN, such as a device in an enterprise intranet. The target device 104 may be a server, a terminal, or any other device.

[0084] The first user equipment 101 may be connected to the VPN backbone network 102 , and the VPN backbone network 102 may be connected to the second user equipment 103 , and the second user equipment 103 may be connected to the target device 104 .

[0085] The first user device 101 can send a data stream to the VPN backbone network 102 , and the destination network address of the data stream is the network address of the target device 104 . The VPN backbone network 102 can transmit the received data stream to the second user device 103 , and the second user device 103 then sends the data stream to the target device 104 .

[0086] The data stream may be data related to user services, such as user request messages, service data, etc. Also, the data stream may include various types of data, such as one or more of image data, text data, audio data, etc. The data stream may be transmitted in various feasible forms such as messages.

[0087] The VPN backbone network 102 may include communication devices such as operator edge devices PE and operator backbone devices P. The communication devices in the VPN backbone network 102 may form a variety of network topologies.

[0088] For example, Figure 1 1022 shows a schematic diagram of a network topology structure of a VPN network. As shown in 1022, the first user equipment 101 includes CE1, the VPN network includes PE1, PE2, PE3, PE4, and the second user equipment 103 includes CE21, CE22, and CE23. Among them, CE1 is connected to PE1, PE1 is connected to PE2, PE3, and PE4, PE2 is connected to CE21, PE3 is connected to CE22, PE4 is connected to CE23, and CE21, CE22, and CE23 are all connected to the target device 104.

[0089] For example, Figure 1Figure 1024 shows another schematic diagram of the network topology of a VPN network. As shown in 1024, the first user equipment 101 includes CE1, the VPN network includes PE1, PE2, and P1, and the second user equipment 103 includes CE21, CE22, and CE23. Among them, CE1 is connected to PE1, PE1 is connected to P1, P1 is connected to PE2, PE2 is connected to CE21, CE22, and CE23, and CE21, CE22, and CE23 are all connected to the target device 104.

[0090] The user can initiate a data flow through the first user device 101, such as CE1, the destination network address of the data flow is the network address of the target device 104, CE1 can send the data flow to the second user device 103 through the VPN backbone network 102, and the second user device 103 sends the data flow to the target device 104.

[0091] In a VPN network, a data stream is transmitted to a target device 104 through a transmission path. There are many possible transmission paths for the data stream, for example, in 1022, it may be CE1—>PE1—>PE2—>CE21—>target device 104, or CE1—>PE1—>PE3—>CE23—>target device 104, etc. In 1024, it may be CE1—>PE1—>P1—>PE2—>CE21—>target device 104, or CE1—>PE1—>P1—>PE2—>CE22—>target device 104, etc. How to perform statistical analysis on the transmission path of the data stream in the VPN network has become a technical problem that needs to be solved urgently.

[0092] In some implementations, a collection component may be configured on each communication device in the VPN network to collect information about the data stream transmitted by each communication device. In this way, the transmission path of the data stream may be determined based on the collected data stream information of each communication device. However, this method requires configuration of each communication device and requires collection of a large amount of communication device data, which consumes a large amount of computing resources and storage resources.

[0093] The embodiment of the present application provides an information reporting method, which can conveniently and effectively perform statistical analysis on the transmission path of data flows in a VPN network, and help analyze the transmission process conditions such as the transmission security of the data flows.

[0094] Figure 2 The second communication system 200 is a schematic diagram of a second communication system provided in an embodiment of the present application. The second communication system 200 can be used to implement the information reporting method provided in an embodiment of the present application. Figure 2It is only a schematic diagram of the architecture of a communication system provided by an embodiment of the present application, and the positional relationship between the devices, components, modules, etc. shown in the figure does not constitute any limitation. The information reporting method provided by the embodiment of the present application can be applied to various types of VPN networks, such as VPN version 4 (VPNv4), VPN version 6 (VPNv6), and other versions of VPN networks.

[0095] like Figure 2 As shown, the second communication system 200 is Figure 1 Based on the VPN network architecture of the first communication system 100 shown (including a first user device 101, a VPN backbone network 102, a second user device 103, and a target device 104), a control management device 105 is also included.

[0096] The control management device 105 can be connected to the communication device in the VPN network, perform data communication with the communication device, obtain information sent by the communication device, and can also be used to process received information.

[0097] In the embodiment of the present application, the communication device connected to the control management device 105 may be referred to as a first communication device. The first communication device may be an operator edge device connected to the first user equipment 101, such as PE1. Other communication devices other than the first communication device may be referred to as a second communication device, a third communication device, a fourth communication device, etc.

[0098] The control management device 105 may be any device or module capable of implementing its functions, such as an application program, a software module, a hardware device (eg, a router, a switch, a server, etc.), and the like.

[0099] Communication devices (such as CE and PE devices) in a VPN network can announce routes to each other. For example, CE21 can send routes to PE2. PE2, PE3, PE4 and other devices can send routes to the first communication device PE1, etc. In the embodiment of the present application, the routes in the VPN network can be called VPN routes.

[0100] Each communication device in a VPN network may include a VPN Routing and Forwarding table (VRF), also known as a VRF instance. The VRF instance includes routing information.

[0101] The communication device can determine the route for data forwarding based on the VRF instance, and the communication device can notify the route in the VRF instance to other communication devices. For example, PE2 includes a first VRF instance, the first VRF instance includes a first VPN route, and PE2 sends the first VPN route in the first VRF instance to PE1.

[0102] For each other communication device connected to the communication device, the communication device may include a VRF instance corresponding to the other communication device. The VRF instance corresponding to the communication device 2 on the communication device 1 maintains the routing information associated with the communication device 2, for example, the VPN route sent by the communication device 2 to the communication device 1 is maintained.

[0103] For example, if the communication device is connected to one other communication device, the communication device may include a VRF instance corresponding to the other communication device. If the communication device is connected to multiple other communication devices, the communication device may include multiple VRF instances corresponding to the multiple other communication devices.

[0104] Each VRF instance may have a corresponding identifier, which may be referred to as a VRF instance identifier. The VRF instance identifier may be represented by data in various forms, such as an ID or other information that may be used to indicate a VRF instance.

[0105] In some embodiments, the VRF instance identifier of the VRF instance may be a route identifier (RD). In the embodiments of the present application, RD is mainly used as an example of a VRF example identifier for illustration, and RD may also be replaced by other identifier information that can represent a VRF instance.

[0106] In some embodiments, each communication device in the VPN network (e.g., the first user device 101, the second user device 103, and the communication device in the VPN backbone network 102 in the second communication system 200) can be configured with the Border Gateway Protocol (BGP). Communication devices running BGP can announce routes by sending BGP messages. BGP messages can be sent in the form of messages, also known as BGP messages.

[0107] The following is an introduction to BGP and related terms or concepts involved in BGP.

[0108] Border Gateway Protocol (BGP) is a routing protocol used to transmit routing information between communication devices. When BGP runs between different autonomous systems (AS), it can be called External BGP (EBGP). When BGP runs within the same AS, it can be called Internal BGP (IBGP), that is, intra-domain BGP.

[0109] BGP speaker: In a network architecture that uses BGP, a communication device that is configured with BGP and can send BGP messages can be called a BGP speaker. A BGP speaker can receive or generate routing information and send the routing information to other BGP speakers through BGP messages. BGP speakers can establish neighbor relationships with each other, and after forming neighbors, they can start exchanging routing information with each other.

[0110] Peer: BGP speakers that exchange routing information with each other are called peers.

[0111] Local Routing Information Base (Loc-RIB): includes routing information announced by the local BGPSpeaker. Loc-RIB includes local VRF instances.

[0112] Adj-RIB-In: Routing information base announced by the peer to the local speaker.

[0113] Adj-RIB-Out: The routing information base that the local speaker announces to peers.

[0114] BGP ID: The identifier of a BGP device, where a BGP device refers to a communication device configured with BGP.

[0115] The VPN route sent by the communication device may include a route prefix (ie, an IP address prefix) and device information of the communication device.

[0116] The route prefix (or IP address prefix) included in the VPN route indicates the network address associated with / reached by the route. The route prefix (or IP address prefix) may represent a network segment.

[0117] The routing prefix (or IP address prefix) may include: a network address and a prefix length (or mask). The prefix length (or mask) may indicate the length of the network address.

[0118] As an example, a routing prefix (or IP address prefix) is expressed as “network address / prefix length (or mask)”, such as 12.1.1.1 / 32, where 12.1.1.1 is the network address and 32 is the prefix length (or mask).

[0119] The device information of the communication device included in the VPN route may include: the device identifier of the communication device, the VRF instance identifier of the VRF instance where the current route on the communication device is located, etc. As an example, the VRF instance VRF1 on the second communication device sends route a to the first communication device, and route a includes the device identifier of the second communication device (e.g., BGP ID: 2.2.2.2) and the VRF instance identifier of VRF1 (e.g., RD ​​of VRF1: 21:1).

[0120] When a communication device, such as the first communication device, receives a VPN route, the VPN route may be used as a target VPN route (ie, an optimal route), and the target VPN route may be stored in a local VRF instance.

[0121] When a communication device, such as a first communication device, receives multiple VPN routes with the same route prefix, it can determine one of the multiple VPN routes as a target VPN route (i.e., an optimal route), and can save the determined target VPN route in a local VRF instance. The communication device can determine the optimal route among the multiple VPN routes according to various feasible routing methods, such as a routing method of the BGP protocol.

[0122] For the convenience of explanation, in the information reporting method provided in the embodiment of the present application, the first VPN route sent by the second communication device to the first communication device is used as the target VPN route for explanation. The first VPN route includes the device information of the second communication device, and the IP address prefix in the route prefix included in the first VPN route can be called the first IP address prefix.

[0123] In an embodiment of the present application, the first communication device may be configured with a network protocol, and running the network protocol may realize reporting a protocol message to a control management device connected to the first communication device. The protocol message includes device information of the first communication device, an IP address prefix carried in a target VPN route received by the first communication device, and device information of a communication device that sends the target VPN route.

[0124] The network protocol may be any protocol that can realize its functions, such as BGP Monitoring Protocol (BGP Monitoring Protocol, BMP), IP Flow Information Export (IPFIX), etc.

[0125] BMP is a protocol used to monitor the BGP operation status of a communication device. Among them, the BGP operation status includes the establishment and termination of peer relationships, routing information refresh, etc. A BGP device running BMP can be used as a monitored device. A BGP device running BMP can send BMP messages to a monitoring server, and the BMP messages include BGP operation status information. BMP messages can be sent in the form of messages, also known as BMP messages. For more detailed introductions to BMP and BMP messages, please refer to the following description.

[0126] Before BMP was implemented, the BGP running status of the device could only be obtained through manual query, which was inefficient. After BMP was implemented, the device can report its BGP running status information to the monitoring server through the connection with the monitoring server, which greatly improves the efficiency of network detection.

[0127] In some embodiments, the first communication device such as PE1 may be configured with BMP, and the first communication device may send a BMP message to the control management device 105. At this time, the first communication device such as PE1 serves as a monitored device, and the control management device 105 may serve as a monitoring server (BMP Server) of the first communication device.

[0128] IPFIX is a protocol for sampling the information of data flows (or traffic) transmitted in the network. The architecture for implementing IPFIX may include three functional components: a traffic exporter, a data collector, and a traffic analyzer. A communication device running IPFIX may serve as a data exporter. The communication device running IPFIX may send IPFIX messages to the Collector. The IPFIX messages include information about the data flows transmitted by the communication device. The Collector may obtain the characteristics of the traffic in the network based on the IPFIX messages, such as the duration of the traffic, the average length of the messages in the traffic, etc., and may determine the current application of the network. The information of the data flows obtained by the Collector may also be analyzed through the Data Analyzer. The results of the analysis may help network billing, network planning, network detection, application detection, and network optimization. IPFIX messages may be sent in the form of messages, also known as IPFIX messages. Depending on the naming, in other cases, traffic sampling protocols that are the same or similar to the IPFIX protocol also include the Netstream protocol, the NetFlow protocol, and the like. The IPFIX protocol in the embodiment of the present application can be replaced by a flow sampling protocol that is the same or similar to the Netstream protocol, the NetFlow protocol, etc. For more detailed introductions to IPFIX and IPFIX messages, please refer to the following description.

[0129] In some embodiments, IPFIX may be configured on the first communication device such as PE1, and the first communication device may send an IPFIX message to the control management device 105. At this time, the first communication device such as PE1 acts as a flow exporter, and the control management device 105 may act as a data collector and a flow analyzer.

[0130] The information reporting method provided in the embodiment of the present application includes a first communication device receiving a first VPN route from a second communication device, the first VPN route including a first IP address prefix and device information of the second communication device, and the first communication device sending a protocol message to a control management device, the protocol message including the first IP address prefix, device information of the first communication device, and device information of the second communication device.

[0131] As an example, Figure 2 Take the communication system as an example:

[0132] The first communication device is an operator edge device connected to the first user equipment 101, such as PE1;

[0133] Other operator edge devices directly or indirectly connected to the first communication device (e.g., connected via P and / or other PEs), such as PE2 or PE3 or PE4, etc., may be referred to as a second communication device, a third communication device, etc.;

[0134] The network address to which the target device 104 belongs may be the first IP address prefix carried in the first VPN route;

[0135] The first user equipment 101 sends a data stream to a first communication device (such as PE1), and the destination network address of the data stream is the network address of the target device 104. The first communication device (such as PE1) then forwards the data stream to a second communication device (such as PE2 or PE3 or PE4). The second communication device (such as PE2 or PE3 or PE4) can continue to forward the data stream so that the data stream is sent to the target device 104 through the first VPN route.

[0136] In the information reporting method provided in the embodiment of the present application, the first VPN route indicates the route for transmitting data from the second communication device to the first IP address prefix (such as the IP address of the target device 104). The first VPN route is notified to the first communication device through the second communication device, and the first communication device can obtain the routing information of the first VPN route (including the first IP address prefix and the device information of the second communication device). In addition, the first communication device also reports a protocol message to the control and management device, and the protocol message includes the first IP address prefix, the device information of the first communication device, and the device information of the second communication device. In this way, the control and management device can successfully and efficiently obtain the information of the data transmission path of the data stream from the first communication device to the first IP address prefix, including: the device information of the communication device at the data input end in the data transmission path, that is, the first communication device, and the device information of the communication device at the data output end, that is, the second communication device.

[0137] In the embodiment of the present application, the information on the data transmission path obtained by the control and management device can be used for various required applications such as network billing, network planning, network detection, application detection and network optimization.

[0138] The information reporting method provided by the embodiment of the present application is described in detail below in conjunction with the accompanying drawings. Figure 2 The second communication system 200 is shown.

[0139] The information reporting method provided in the embodiment of the present application can be executed by multiple devices in collaboration. For example, the first communication device in the VPN network can be Figure 2 PE1 and other communication devices such as Figure 2 PE2 or PE3 or PE4, etc., and the control management device 105 cooperate in execution.

[0140] For ease of understanding, the information reporting method collaboratively executed by multiple devices is described in the embodiments of the present application, wherein the operations or steps executed by each device may constitute the information reporting method executed by the device. For example, the operations or steps executed by the first communication device constitute the information reporting method executed by the first communication device, and the operations or steps executed by the control management device constitute the information reporting method executed by the control management device.

[0141] Figure 3 The flowchart of the information reporting method provided in the embodiment of the present application is as follows. Figure 3 As shown, the method includes the following steps.

[0142] Step 310: The first communication device receives a VPN route from another communication device.

[0143] like Figure 2As described in, other communication devices in the VPN network can send VPN routes to the first communication device. Also, the communication devices can announce routes through BGP messages (the BGP messages include information about VPN routes).

[0144] When the first communication device receives a VPN route, it may use the VPN route as a target VPN route (ie, an optimal route), and may store the target VPN route in a local VRF instance.

[0145] When the first communication device receives multiple VPN routes with the same route prefix, it can determine one of the multiple VPN routes as the target VPN route (ie, the optimal route), and can save the determined target VPN route in the local VRF instance.

[0146] The embodiment of the present application is described by taking the first VPN route sent by the second communication device to the first communication device as the target VPN route. The IP address prefix (i.e., the route prefix) included in the first VPN route can be called the first IP address prefix. The device information of the communication device included in the first VPN route is the device information of the second communication device. The first VPN route can be stored in the local VRF instance of the first communication device.

[0147] Step 320: The first communication device sends a protocol message to the control management device.

[0148] like Figure 2 As described in, the first communication device can be configured with various network protocols such as BMP, IPFIX, etc. In step 320, according to the different network protocols configured by the first communication device, the first communication device can send a protocol message to the control management device in a variety of ways.

[0149] The protocol message includes the first IP address prefix, the device information of the first communication device, and the device information of the second communication device. In this way, the control management device can obtain the first IP address prefix, the device information of the first communication device, and the device information of the second communication device.

[0150] In the protocol message, the device information of the first communication device may include the device identification of the first communication device (the embodiment of the present application is mainly explained by BGP ID as an example, and BGP ID can also be replaced with other information that can represent the device identification), and the device information of the second communication device may include the device identification of the second communication device (the embodiment of the present application is mainly explained by BGP ID as an example, and BGP ID can also be replaced with other information that can represent the device identification). In this way, the control and management device can learn the communication device at the data input end and the communication device at the data output end in the data transmission path.

[0151] In the protocol message, the device information of the first communication device may also include a VRF instance identifier of a local VRF instance included in the first communication device. The first VPN route received by the first communication device is stored in the local VRF instance. In this way, the control management device can learn the specific VRF instance of the communication device at the data input end in the data transmission path, that is, learn which VRF instance on the communication device at the data input end forwards the data flow.

[0152] In the protocol message, the device information of the second communication device may also include a VRF instance identifier of the first VRF instance included in the second communication device. The first VRF instance is the VRF instance where the first VPN route is located. In this way, the control management device can also learn the specific VRF instance of the communication device at the data output end in the data transmission path, that is, learn which VRF instance on the communication device at the data output end forwards the data flow.

[0153] The following introduces various ways in which the first communication device sends a protocol message to the control and management device.

[0154] In a first implementation manner, a first communication device and other communication devices in a VPN network announce routes via BGP messages, and the first communication device configures BMP.

[0155] After the first communication device receives and stores the first VPN route in step 310, the first communication device can send a BMP message to the control management device in step 320. The BMP message indicates information of the first VPN route.

[0156] The BMP message in the first implementation manner includes: a first IP address prefix, device information of the first communication device, and device information of the second communication device.

[0157] In a first implementation, the BMP configured by the first communication device may include a BMP protocol for monitoring Loc-RIB. Also, the BMP protocol for monitoring Loc-RIB used in the embodiment of the present application may be: a BMP protocol extended based on the BMP protocol (e.g., standard RFC9069) that can be used to monitor Loc-RIB issued by the Internet Engineering Task Force (IETF).

[0158] For specific contents of the BMP protocol used to monitor Loc-RIB in the embodiments of the present application, please refer to the detailed description below.

[0159] In a second implementation, the first communication device is configured with IPFIX. The first communication device may receive data streams from other communication devices, for example, a data stream from the first user device 101, wherein the destination network address of the data stream may be an IP address (referred to as a first IP address) in the network segment to which the first IP address prefix (i.e., the IP address prefix in the first VPN route) belongs.

[0160] For the convenience of description, in the embodiment of the present application, a data flow whose destination network address is the first IP address may be referred to as a first data flow.

[0161] After the first communication device receives and stores the first VPN route and receives the first data flow through step 310, the first communication device can send an IPFIX message to the control management device. The IPFIX message indicates information of the first data flow.

[0162] The IPFIX message in the second implementation manner includes: the destination network address of the first data flow (which is the first IP address), the equipment information of the first communication device, and the equipment information of the second communication device.

[0163] In a second implementation manner, the IPFIX protocol configured by the first communication device may be an IPFIX protocol extended based on the IPFIX protocol published by IETF (eg, standard RFC5102).

[0164] For specific contents of the IPFIX protocol used in the embodiments of the present application, please refer to the detailed introduction below.

[0165] As can be seen from the above, through the first implementation and the second implementation, the control management device can obtain information about the data transmission path from the first communication device to the first IP address prefix, including: the communication device at the data stream input end, i.e., the device information of the first communication device, and the communication device at the data stream output end, i.e., the device information of the second communication device. And, in the second implementation, for the first data stream received by the first communication device, the control management device can clearly obtain the data transmission path of the first data stream.

[0166] In a third implementation, the first communication device and other communication devices in the VPN network notify routes via BGP messages, and the first communication device configures BMP. The first communication device can receive a first data stream from other communication devices.

[0167] Furthermore, the first communication device may also be configured with modules, programs, network protocols (such as IPFIX or other available network protocols), etc. for collecting data flow information.

[0168] In step 310, the first communication device receives and stores the first VPN route, and after the first communication device receives the first data stream:

[0169] The first communication device can send a BMP message to the control management device, where the BMP message indicates information about the first VPN route;

[0170] The first communication device can also send information about the first data flow to the control and management device, such as sending an IPFIX message, where the IPFIX message indicates the information about the first data flow.

[0171] The BMP message in the third implementation manner includes the first IP address prefix, device information of the first communication device, and device information of the second communication device.

[0172] The information of the first data flow in the third implementation manner (eg, an IPFIX message) includes: a destination network address of the first data flow (which is a first IP address) and equipment information of the first communication device.

[0173] In a third implementation, the BMP configured in the first communication device may be the same as the BMP in the first implementation, which is a BMP protocol extended based on the BMP protocol (eg, standard RFC9069) for monitoring Loc-RIB published by IETF.

[0174] In a third implementation manner, if the first communication device is configured with an IPFIX protocol, the IPFIX protocol may be an IPFIX protocol capable of implementing the aforementioned functions, such as an IPFIX protocol of standard RFC5102 published by IETF.

[0175] For the third implementation method, the control and management device can also associate the first data stream with the information of the first VPN route in the BMP message (including the first IP address prefix, the equipment information of the first communication device, and the equipment information of the second communication device) when the destination network address of the first data stream and the first IP address prefix in the BMP message match (for example, the destination network address of the first data stream and the first IP address prefix belong to the same network segment, or the destination network address of the first data stream is an IP address in the network to which the first IP address prefix belongs).

[0176] Thus, for the third implementation, Figure 3 The method may further include step 330: controlling the management device to establish an association between the first data flow and the device information of the second communication device.

[0177] Through the third implementation method, for the first data stream received by the first communication device, the control management device can clearly obtain information about the data transmission path of the first data stream, including: equipment information of the communication device at the input end of the first data stream, i.e., the first communication device, and equipment information of the communication device at the output end of the first data stream, i.e., the second communication device.

[0178] The following is a detailed introduction to BMP and the BMP protocol proposed in the embodiments of the present application, which is an extension of the BMP protocol (such as standard RFC9069) published by IETF and can be used to monitor Loc-RIB.

[0179] The communication device (i.e. the monitored device) configured with BMP can establish a communication connection with the monitoring server. The monitored device can send BGP operation status information to the monitoring server without the need for the monitoring server to send instructions to the monitored device. The monitoring server parses the received BMP message and can present it in the monitoring view.

[0180] According to the message header representing the peer information carried in the message sent to the monitoring server, the monitoring server can distinguish which BGP neighbor the message comes from. The monitoring server can monitor all BGP neighbors of the communication device, or it can monitor a specified BGP neighbor.

[0181] The connection between the communication device (such as a router) and the monitoring server is based on the TCP protocol, and the connection port number can be specified.

[0182] The connection between the communication device and the monitoring server can be a many-to-many relationship (for example, one router can send messages to multiple monitoring servers, and one monitoring server can also monitor multiple routers).

[0183] One BMP instance can connect to multiple monitoring servers. In this way, multiple monitoring servers can back up each other and improve reliability. In addition, it can reduce the load of a single monitoring server monitoring BGP neighbors. In addition, different monitoring servers can monitor different BGP neighbors, thereby controlling different BGP services.

[0184] The following introduces the BMP message types. As shown in Table 1 below, a BMP session can include an Initiation message, a PU (Peer Up Notification) message, a RM (Route Monitoring) message, a PD (Peer Down Notification) message, a SR (Stats Reports) message, and a Termination message. These types of messages can all be sent in the form of messages. The reported information mainly includes BGP routing information, BGP neighbor information, and the manufacturer information and version number of the communication device (such as a router).

[0185]

[0186]

[0187] Table 1

[0188] The message interaction process of the BMP protocol between the communication device (represented by router) and the monitoring server (represented by monitor) may include: the router first sends an Initiation message to the monitor, then the router sends a PU message to the monitor, then the router sends an RM message to the monitor, then the router sends a PD message to the monitor, then the router sends an SR message to the monitor, and then the router sends a Termination message to the monitor.

[0189] A BMP session is usually one-way, that is, the communication device reports messages to the monitoring server but ignores any messages sent by the monitoring server.

[0190] All BMP messages include a common header. BMP messages such as PU messages and RM messages may also include a peer-level header (Per-Peer header), which is used to indicate peer information.

[0191] The fields and definitions included in the public header may be shown in Table 2. The remaining data in the BMP message depends on the "Message Type" field in the public header.

[0192]

[0193] Table 2

[0194] As an example, the common header format defined by BMP can be as follows: Figure 4 As shown in A. Version is data with a length of 8 bits (ie, 1 byte), Message Length is data with a length of 32 bits (ie, 4 bytes), and Msg.Type is data with a length of 8 bits (ie, 1 byte).

[0195] Taking the standard RFC7854 released by IETF as an example, the fields and definitions included in the Per-Peer header can be shown in Table 3 below.

[0196]

[0197] Table 3

[0198] It should be noted that the PDU in Table 3 refers to a protocol data unit (Protocol Data Unit).

[0199] As an example, the Per-Peer header format defined by BMP can be as follows: Figure 4 As shown in B. Among them, Peer Type + Peer Flags is 16-bit (i.e., 2-byte) data, Peer Distinguisher (present based on peer type) is 64-bit (i.e., 8-byte) data, Peer Address is 128-bit (i.e., 16-byte) data at maximum, Peer AS is 32-bit (i.e., 4-byte) data, Peer BGP ID can be 32-bit (i.e., 4-byte) data, Timestamp (seconds) is 32-bit (i.e., 4-byte) data, and Timestamp (microseconds) is 32-bit (i.e., 4-byte) data.

[0200] In a BMP session, after the BMP session Up is achieved through the Initiation message and the PU message, the RM message can be used to publish the Adj-RIB-In and Adj-RIB-Out states of the BGP neighbor, and the Local-RIB state on the communication device. And this can be achieved by using the standard BGP Update message encapsulated in the RM message to send the routes stored in the BGP neighbor's Adj-RIB-In, BGP neighbor's Adj-RIB-Out, and Local-RIB.

[0201] The PU messages defined by BMP include: Common Header, Per-Peer Header and Peer UpNotification PDU.

[0202] The RM messages defined by BMP include: Common Header, Per-Peer Header and BGP Update PDU.

[0203] Among them, the definitions of each field in the Peer Up Notification PDU can be shown in Table 4 below.

[0204]

[0205] Table 4

[0206] As an example, the Peer Up Notification PDU format defined by BMP can be as follows: Figure 4As shown in C. Among them, Local Address is data with a length of 128 bits (i.e., 16 bytes), Local Port+Remote Port is data with a length of 16 bits (i.e., 2 bytes), Sent OPEN Message is data of indefinite length, and Received OPEN Message is data of indefinite length.

[0207] The OPEN Message carried in the Peer Up Notification message complies with the definition of the BGP protocol (including Sent OPEN Message and Received OPEN Message).

[0208] In the embodiment of the present application, the first communication device and the control management device can realize BMP session UP through the Initiation message and PU message in the BMP message, and after the BMP session UP, the first communication device can also send the RM message in the BMP message to the control management device, and the RM message is used to monitor the Local-RIB of the first communication device. The Local-RIB may include a local VRF instance.

[0209] Based on the BMP protocol (such as standard RFC9069) released by IETF and used to monitor Loc-RIB, the Per-Peer header is defined as shown in Table 5 below:

[0210]

[0211]

[0212] Table 5

[0213] For ease of description, the first communication device in the information reporting method provided in the present application, that is, the monitored device, is called the local end, and the second communication device that sends the first VPN route is called the remote end.

[0214] As can be seen from the introduction of the aforementioned BMP message, if the local end configures the BMP protocol (such as standard RFC9069) published by IETF that can be used to monitor Loc-RIB, after the local end receives the first VPN route from the remote end and saves the first VPN route as the target VPN route in the local VRF instance, the local end can send a BMP message to the control management device to report the route prefix (i.e., the first IP address prefix) of the first VPN route in the local VRF instance, and the Per-Peer header in the BMP message can carry:

[0215] Peer Distinguisher: VRF instance identifier of the local VRF instance (such as RD);

[0216] Peer Address: all 0s;

[0217] Peer BGP ID (peer BGP identifier): the BGP ID of the local end (the BGP ID of the local end can be the Router-ID of the local end).

[0218] In this way, if this end configures the BMP protocol published by IETF that can be used to monitor Loc-RIB (such as standard RFC9069), the BMP message sent by this end to the control and management device includes: the first IP address prefix, the local device information (including the local BGP ID, the VRF instance identifier of the local VRF instance of the local end).

[0219] In the embodiment of the present application, the BMP protocol (such as standard RFC9069) published by IETF and used to monitor Loc-RIB can be extended so that the remote device information of the first VPN route is added to the BMP message. The remote device information may include the remote BGP ID and the VRF instance identifier of the VRF instance where the first VPN route is located on the remote end.

[0220] As an example, a first field may be added to the BMP message, and the first field indicates the remote BGP ID (or peer address). The first field may be represented by Remote Peer Address / BGP ID or other feasible field names, and Remote Peer Address / BGP ID is used as an example for explanation below.

[0221] A second field may also be added to the BMP message, and the second field indicates the VRF instance identifier of the VRF instance where the first VPN route is located on the remote end. The second field may be represented by Remote Route Distinguisher or other feasible field names, and Remote Route Distinguisher is used as an example for explanation below.

[0222] The aforementioned newly added fields, such as the first field and the second field, may be carried in the BMP message in various feasible message forms. As an example, the newly added field may be represented by TLV data, and the TLV data may be carried in the BMP message. TLV is a variable format and may be composed of a Tag (type), a Length (length), and a Value (value). The TLV data used to indicate the newly added field includes information length, address family information, sub-address family information, and device information of the second communication device (e.g., the field value of the aforementioned newly added field).

[0223] Take the newly added fields including Remote Peer Address / BGP ID and Remote Route Distinguisher as an example. Figure 5 The following is a schematic diagram of the format of the TLV data of the newly added field. The TLV data includes the following fields:

[0224] Information Type: Information type, the value is TBD1 (To Be Define), which indicates that this is a remote device information TLV (for example, Remote VRF Information TLV).

[0225] Information Length: information length;

[0226] AFI: Address Family Information;

[0227] SAFI: Sub-address family information;

[0228] Remote Peer Address / BGP ID: remote BGP ID or peer address;

[0229] Remote Route Distinguisher: VRF instance identifier of the VRF instance where the first VPN route on the remote end is located.

[0230] In this way, if the local end configures the aforementioned extended BMP protocol, after the local end receives the first VPN route from the remote end and saves the first VPN route as the target VPN route in the local VRF instance, the local end can send a BMP message to the control management device to report the route prefix (i.e., the first IP address prefix) of the first VPN route in the local VRF instance, and the BMP message can carry (the BMP message can also include other information besides the following information, which is not written here):

[0231] Peer Distinguisher: VRF instance identifier of the local VRF instance (such as RD);

[0232] Peer Address: all 0s;

[0233] Peer BGP ID: The BGP ID of the local end (also known as the Router ID of the local end).

[0234] Remote Peer Address / BGP ID: remote BGP ID or peer address;

[0235] Remote Route Distinguisher: VRF instance identifier of the VRF instance where the first VPN route on the remote end is located.

[0236] In this way, if the local end configures the aforementioned extended BMP protocol, the BMP message sent by the local end to the control and management device includes: the first IP address prefix, the local end's device information (including the local end's BGP ID, the VRF instance identifier of the local VRF instance of the local end), and the remote end's device information (including the remote end's BGP ID, the VRF instance identifier of the VRF instance where the first VPN route on the remote end is located).

[0237] It should be noted that the extended BMP protocol described in the above embodiments of the present application is described by taking the extension according to the standard RFC9069 as an example. The extended BMP protocol described in the above embodiments of the present application can also be extended according to other BMP standards with similar functions to the above standard RFC9069.

[0238] The following is a detailed introduction to the IPFIX message and the IPFIX protocol extended based on the IPFIX protocol (such as standard RFC5102) published by IETF proposed in the embodiments of the present application.

[0239] IPFIX can define different data formats for different needs. IPFIX can output IPFIX messages based on flow data templates. In IPFIX messages, seven key fields related to communication device messages can be used to represent each data flow (i.e., traffic): source IP address, destination IP address, TCP / UDP source port, TCP / UDP destination port, three-layer protocol type, service type (Type-of-service), and input logical interface.

[0240] If all seven key fields in different IPFIX messages match, these IPFIX messages are considered to belong to the same data flow. By obtaining the characteristics of these flows in the network, such as flow duration, average message length in the flow, etc., the current network application status can be determined, and the network can be optimized, security tested, and flow billed based on this information.

[0241] From the introduction of the above IPFIX message, it can be known that if the local end configures the IPFIX protocol (such as standard RFC5102) released by IETF, after receiving the first data flow, the local end can send an IPFIX message to the control management device to report the information of the first data flow, and the IPFIX message can carry: the destination network address of the first data flow, the device information of the local end. Among them, the device information of the local end may include the VRF instance identifier of the local VRF instance (that is, VPN RD) and the BGP ID of the local end.

[0242] In an embodiment of the present application, the IPFIX protocol (such as standard RFC5102) issued by IETF can be extended so that the remote device information of the first VPN route is added to the IPFIX message. The remote device information may include the remote BGP ID and the VRF instance identifier of the VRF instance where the first VPN route is located on the remote end.

[0243] As an example, a third field may be added to the IPFIX message, and the third field indicates the remote BGP ID (or peer address). The third field may be represented by various feasible field names.

[0244] A fourth field may also be added to the IPFIX message, and the fourth field indicates the VRF instance identifier of the VRF instance where the first VPN route is located on the remote end. The fourth field may be represented by RemoteVPNRD or other feasible field names, and RemoteVPNRD is used as an example for explanation below.

[0245] The aforementioned newly added fields such as the third field and the fourth field can be carried in the IPFIX message in various feasible ways. As an example, the IPFIX message includes flow data and a flow data template. Among them, the flow data in the IPFIX message can carry the field value of the newly added field, and the data type corresponding to the newly added field can also be added to the flow data template of the IPFIX message. When the local end reports the flow data template to the control and management device, the type value of the newly added data type and the length space required for the field corresponding to the newly added data type are specified. In this way, after the control and management device receives the IPFIX message sent by the local end, it can parse the flow data according to the flow data template and identify the values ​​of the newly added fields (such as the aforementioned third field and fourth field) carried in the flow data.

[0246] In this way, if the local end configures the aforementioned extended IPFIX protocol, the local end receives the first VPN route from the remote end and saves the first VPN route as the target VPN route in the local VRF instance, and after the local end receives the first data flow, the local end can send an IPFIX message to the control management device to report the information of the first data flow, and the IPFIX message can carry (the IPFIX message can also include other information besides the following information, which is not written here):

[0247] The destination network address of the first data flow;

[0248] The device information of the local end may include the BGP ID of the local end and the VRF instance identifier (also known as VPNRD) of the local VRF instance;

[0249] The remote device information may include the remote BGP ID and the VRF instance identifier of the VRF instance where the first VPN route on the remote end is located (ie, Remote VPN RD).

[0250] It should be noted that the extended IPFIX protocol described in the aforementioned embodiment of the present application is described by taking the extension according to standard RFC5102 as an example. The extended IPFIX protocol described in the aforementioned embodiment of the present application can also be extended according to other IPFIX standards with similar functions to standard RFC5102.

[0251] For ease of understanding, the following Figure 6-Figure 7 An example of an information reporting method is provided in a scenario where a first communication device receives multiple VPN routes with the same route prefix.

[0252] Figure 6 This is a schematic diagram of a first example of an information reporting method. As an example, Figure 6 As shown, the first communication device is PE1, and the second communication device is PE2. PE2 is connected to CE21, CE22, and CE23. CE21, CE22, and CE23 are all connected to a target device, and the network address of the target device is 12.1.1.1 / 32.

[0253] PE2 includes a first VRF instance (VRF1), and VRF1 corresponds to CE21.

[0254] PE2 also includes a second VRF instance (VRF2), and VRF2 corresponds to CE22.

[0255] PE2 also includes a third VRF instance (VRF3), and VRF3 corresponds to CE23.

[0256] CE21 sends a VPN route to PE2, and the route prefix Prefix of the VPN route is 12.1.1.1 / 32. Thus, VRF1 on PE2 includes the first VPN route (BGP ID: 2.2.2.2, RD: 21:1, Prefix 12.1.1.1 / 32).

[0257] Among them, 2.2.2.2 is the BGP ID of PE2, 21:1 is the RD of VRF1, and 12.1.1.1 / 32 is the IP address prefix (expressed as Prefix) of the first VPN route.

[0258] CE22 sends a VPN route to PE2, and the route prefix of the VPN route is 12.1.1.1 / 32. Thus, VRF2 on PE2 includes the second VPN route (BGP ID: 2.2.2.2, RD: 22:1, Prefix 12.1.1.1 / 32).

[0259] Among them, 2.2.2.2 is the BGP ID of PE2, 22:1 is the RD of VRF2, and 12.1.1.1 / 32 is the IP address prefix of the second VPN route.

[0260] CE23 sends a VPN route to PE2, and the route prefix of the VPN route is 12.1.1.1 / 32. Thus, VRF3 on PE2 includes the third VPN route (BGP ID: 2.2.2.2, RD: 23:1, Prefix 12.1.1.1 / 32).

[0261] Among them, 2.2.2.2 is the BGP ID of PE2, 23:1 is the RD of VRF3, and 12.1.1.1 / 32 is the IP address prefix of the third VPN route.

[0262] The routing prefixes of the first VPN route, the second VPN route, and the third VPN route are the same, which is 12.1.1.1 / 32 (referred to as the first IP address prefix).

[0263] In this example, the information reporting method may include the following steps.

[0264] Step 610: The second communication device sends multiple VPN routes in multiple VRF instances to the first communication device.

[0265] In this example, PE2 sends the first VPN route in VRF1, the second VPN route in VRF2, and the third VPN route in VRF3 to PE1.

[0266] Step 620: The first communication device determines a target VPN route among multiple VPN routes.

[0267] In this example, PE1 determines the first VPN route (BGP ID: 2.2.2.2, RD: 21:1, Prefix 12.1.1.1 / 32) as the target VPN route (ie, the optimal route).

[0268] In this example, the first VPN route is stored as a target VPN route in the local VRF instance of PE1. The RD of the local VRF instance of PE1 is 11:1.

[0269] Step 630: The first communication device sends a protocol message to the control management device.

[0270] PE1 can be Figure 3 The method described in step 320 sends a protocol message to the control management device. And, in this example, the prefix reported in the protocol message is 12.1.1.1 / 32. The device information of the first communication device in the protocol message includes the BGP ID of PE1 and the RD of the local VRF instance. The device information of the second communication device in the protocol message includes the BGP ID of PE2 and the RD of VRF1.

[0271] That is, in this example, the protocol message includes: (Prefix: 12.1.1.1 / 32, BGP ID of PE1: 1.1.1.1, RD of the local VRF instance on PE1: 11:1, BGP ID of PE2: 2.2.2.2, RD of VRF1 on PE2: 21:1).

[0272] Take PE1 configured with the aforementioned extended BMP protocol, and PE1 sending a BMP message to the control management device as an example. At this time, PE1 acts as a monitored device, and the control management device acts as a monitoring server. The BMP message in this example includes:

[0273] Prefix: 12.1.1.1 / 32 (or 12.1.1.1, the first IP address prefix);

[0274] Peer Distinguisher: 11:1 (that is, the RD of the local VRF instance of PE1);

[0275] Peer Address: 0;

[0276] Peer BGP ID: 1.1.1.1 (that is, the BGP ID of PE1);

[0277] Remote Route Distinguisher: 21:1 (that is, the RD of VRF1 on PE2);

[0278] Remote Peer Address / BGP ID: 2.2.2.2 (that is, the BGP ID of PE2).

[0279] Figure 7 This is a schematic diagram of a second example of the information reporting method. As an example, Figure 7 As shown, the first communication device is PE1, the second communication device is PE2, the third communication device is PE4, and the fourth communication device is PE3.

[0280] PE2 includes a first VRF instance (VRF1). PE2 is connected to CE21, and VRF1 corresponds to CE21.

[0281] PE3 includes a second VRF instance (VRF2). PE3 is connected to CE22, and VRF2 corresponds to CE22.

[0282] PE4 includes a third VRF instance (VRF3). PE4 is connected to CE23, and VRF3 corresponds to CE23.

[0283] CE21, CE22, and CE23 are all connected to the target device, and the network address of the target device is 12.1.1.1 / 32.

[0284] CE21 sends a VPN route to PE2, and the route prefix Prefix of the VPN route is 12.1.1.1 / 32. Thus, VRF1 on PE2 includes the first VPN route (BGP ID: 2.2.2.2, RD: 21:1, Prefix 12.1.1.1 / 32).

[0285] Among them, 2.2.2.2 is the BGP ID of PE2, 21:1 is the RD of VRF1, and 12.1.1.1 / 32 is the IP address prefix of the first VPN route.

[0286] CE22 sends a VPN route to PE3, and the route prefix of the VPN route is 12.1.1.1 / 32. Thus, VRF2 on PE3 includes the second VPN route (BGP ID: 3.3.3.3, RD: 22:1, Prefix 12.1.1.1 / 32).

[0287] Among them, 3.3.3.3 is the BGP ID of PE3, 22:1 is the RD of VRF2, and 12.1.1.1 / 32 is the IP address prefix of the second VPN route.

[0288] CE23 sends a VPN route to PE4, and the route prefix of the VPN route is 12.1.1.1 / 32. Thus, VRF3 on PE4 includes the third VPN route (BGP ID: 4.4.4.4, RD: 23:1, Prefix 12.1.1.1 / 32).

[0289] Among them, 4.4.4.4 is the BGP ID of PE4, 23:1 is the RD of VRF3, and 12.1.1.1 / 32 is the IP address prefix of the third VPN route.

[0290] The routing prefixes of the first VPN route, the second VPN route, and the third VPN route are the same, which is 12.1.1.1 / 32 (referred to as the first IP address prefix).

[0291] In this example, the information reporting method may include the following steps.

[0292] Step 710: Multiple communication devices send multiple VPN routes to a first communication device.

[0293] In this example, PE2 sends the first VPN route in VRF1 to PE1, PE3 sends the second VPN route in VRF2 to PE1, and PE4 sends the third VPN route in VRF3 to PE1.

[0294] Step 720: The first communication device determines a target VPN route among multiple VPN routes.

[0295] In this example, PE1 determines the first VPN route (BGP ID: 2.2.2.2, RD: 21:1, Prefix 12.1.1.1 / 32) as the target VPN route (ie, the optimal route).

[0296] In this example, the first VPN route is stored as a target VPN route in the local VRF instance of PE1. The RD of the local VRF instance of PE1 is 11:1.

[0297] Step 730: The first communication device sends a protocol message to the control management device.

[0298] PE1 can be Figure 3 The method in step 320 sends a protocol message to the control management device. In this example, the device information of the first communication device in the protocol message includes the BGP ID of PE1 and the RD of the local VRF instance, and the device information of the second communication device in the protocol message includes the BGP ID of PE2 and the RD of VRF1.

[0299] Take PE1 configured with the aforementioned extended IPFIX protocol, PE1 also receives the first data stream sent by CE1 (destination network address is 12.1.1.1), and PE1 sends an IPFIX message to the control management device as an example. At this time, PE1 acts as a flow exporter, and the control management device acts as a data collector and flow analyzer. The IPFIX message in this example includes:

[0300] Destination network address: 12.1.1.1 (i.e., the first IP address, which is the IP address in the network segment to which the prefix of the first IP address belongs);

[0301] BGP ID: 1.1.1.1 (that is, the BGP ID of PE1);

[0302] VPN RD: 11:1 (that is, the RD of the local VRF instance of PE1);

[0303] Remote BGP ID: 2.2.2.2 (that is, the BGP ID of PE2);

[0304] Remote VPN RD: 21:1 (that is, the RD of VRF1 on PE2).

[0305] Alternatively, it is assumed that PE1 is configured with the IPFIX protocol and the aforementioned extended BMP protocol, PE1 also receives the first data stream sent by CE1 (the destination network address is 12.1.1.1), and PE1 sends an IPFIX message and a BMP message to the control management device:

[0306] At this time, PE1 acts as a traffic exporter, the control management device acts as a data collector and traffic analyzer, and the IPFIX messages in this example include:

[0307] Destination network address: 12.1.1.1 (i.e., the first IP address, which is the IP address in the network segment to which the prefix of the first IP address belongs);

[0308] VPN RD: 11:1 (that is, the RD of the local VRF instance of PE1);

[0309] At this time, PE1 can also serve as the monitored device, and the control management device serves as the monitoring server. The BMP message in this example includes:

[0310] Prefix: 12.1.1.1 / 32 (or 12.1.1.1, the first IP address prefix);

[0311] Peer Distinguisher: 11:1 (that is, the RD of the local VRF instance of PE1);

[0312] Peer Address: 0;

[0313] Peer BGP ID: 1.1.1.1 (that is, the BGP ID of PE1);

[0314] Remote Route Distinguisher: 21:1 (that is, the RD of VRF1 on PE2);

[0315] Remote Peer Address / BGP ID: 2.2.2.2 (that is, the BGP ID of PE2).

[0316] In this example, the control and management device can determine, based on the acquired protocol message, that the destination network address of the first data stream matches the first IP address prefix in the BMP message (for example, the destination network address of the first data stream and the first IP address prefix belong to the same network segment, or the destination network address of the first data stream is an IP address in the network to which the first IP address prefix belongs), and can associate the first data stream with the information of the first VPN route in the BMP message (including the first IP address prefix, the equipment information of the first communication device, and the equipment information of the second communication device).

[0317] In this way, the control and management device can determine the information of the data transmission path of the first data flow, including: 12.1.1.1 (destination network address of the first data flow), 1.1.1.1 (BGP ID of PE1, that is, the BGP ID of the input end in the transmission path of the first data flow), 11:1 (RD of the local VRF instance of PE1, that is, the RD of the local VRF instance at the input end in the transmission path of the first data flow), 2.2.2.2 (BGP ID of PE2, that is, the BGP ID of the output end in the transmission path of the first data flow), 21:1 (RD of VRF1, that is, the RD of the VRF instance where the first VPN route is located at the output end in the transmission path of the first data flow).

[0318] Combined with the above Figures 2 to 7 , describes in detail the information reporting method provided according to the embodiment of the present application. Figure 8 , describing the devices provided according to the present application. These devices can be used to implement the functions of the processor in the above method embodiments, and thus can also achieve the beneficial effects possessed by the above method embodiments.

[0319] Figure 8 This is a schematic diagram of a module of a first communication device provided in an embodiment of the present application. Figure 8 As shown, the first communication device 800 includes a transceiver module 812 and a processing module 814 .

[0320] The transceiver module 812 can be used to receive a first VPN route from a second communication device, where the first VPN route includes a first IP address prefix and device information of the second communication device. The transceiver module 812 can also be used to send a control management device (e.g. Fig. 9 The control management device 900) sends a protocol message, the protocol message includes the first IP address prefix or the first IP address in the network segment to which the first IP address prefix belongs, the device information of the first communication device and the device information of the second communication device.

[0321] In some implementations, the device information of the second communication device includes one or more of the following: a BGP ID of the second communication device or a VRF instance identifier of a first VRF instance included in the second communication device, wherein the first VRF instance includes a first VPN route.

[0322] In some implementations, the device information of the first communication device includes one or more of the following: a BGP ID of the first communication device or a VRF instance identifier of a local VRF instance included in the first communication device, wherein the local VRF instance includes a first VPN route.

[0323] In some implementations, the VRF instance identification includes a VRF instance RD.

[0324] In some implementations, the protocol message is at least one of a BMP message or an IPFIX message.

[0325] In some implementations, the second communication device includes a first VRF instance and a second VRF instance, the first VRF instance includes a first VPN route, and the second VRF instance includes a second VPN route.

[0326] In some implementations, the transceiver module 812 can also be used to transmit a message from the first communication device to a control management device (eg, Fig. 9 The control management device 900) receives a second VPN route from the second communication device before sending the protocol message, wherein the second VPN route includes the first IP address prefix and the VRF instance identifier of the second VRF instance included in the second communication device.

[0327] In some implementations, the transceiver module 812 can also be used to send a message to a control management device (eg Fig. 9 Before the control management device 900 sends the protocol message, a third VPN route is received from the third communication device, wherein the third VPN route includes the first IP address prefix and the device information of the third communication device.

[0328] In some implementations, the processing module 814 can be configured to store the first VPN route as a target VPN route in a local VRF instance of the first communication device.

[0329] In some implementations, the device information of the third communication device includes one or more of the following: a BGP ID of the third communication device and a VRF instance identifier of a third VRF instance included in the third communication device, wherein the third VRF instance includes a third VPN route.

[0330] For more detailed description of the functions implemented by the aforementioned transceiver module 812 and the processing module 814, please refer to Figure 3 , Figure 6 , Figure 7 A description of the information reporting method provided.

[0331] Fig. 9 A schematic diagram of a control management device provided in an embodiment of the present application. Fig. 9 As shown, the control management device 900 includes a transceiver module 912 and a processing module 914 .

[0332] The transceiver module 912 can be used to receive a signal from a first communication device (eg Figure 8 The protocol message of the first communication device 800 in the protocol message includes the first IP address prefix or the first IP address in the network segment to which the first IP address prefix belongs, the device information of the first communication device, and the device information of the second communication device. The first IP address prefix is ​​the IP address prefix carried in the first VPN route sent by the second communication device to the first communication device. And the processing module 914 can be used to obtain the first IP address prefix, the device information of the first communication device, and the device information of the second communication device from the protocol message.

[0333] In a possible implementation, the device information of the second communication device includes one or more of the following: a BGP ID of the second communication device or a VRF instance identifier of a first VRF instance included in the second communication device, wherein the first VRF instance includes a first VPN route.

[0334] In some implementations, the device information of the first communication device includes one or more of the following: a BGP ID of the first communication device or a VRF instance identifier of a local VRF instance included in the first communication device, wherein the local VRF instance includes a first VPN route.

[0335] In some implementations, the VRF instance identification includes a VRF instance RD.

[0336] In some implementations, the protocol message is at least one of a BMP message or an IPFIX message.

[0337] In some implementations, when the protocol message is a BMP message, the transceiver module 912 can also be used to obtain information about the data stream, the destination network address of the data stream is the first IP address, and the processing module 914 can also be used to establish an association between the data stream and the device information of the second communication device.

[0338] In some implementations, the first VPN route is a first communication device (eg, Figure 8The first communication device 800) selects a target VPN route from multiple VPN routes from the second communication device, wherein the IP address prefix carried by the multiple VPN routes is the first IP address prefix.

[0339] In some implementations, the first VPN route is a first communication device (eg, Figure 8 The first communication device 800) selects a target VPN route from multiple VPN routes from the second communication device and the third communication device, and the IP address prefix carried by the multiple VPN routes is the first IP address prefix.

[0340] For more detailed description of the functions implemented by the aforementioned transceiver module 912 and the processing module 914, please refer to Figure 3 , Figure 6 , Figure 7 A description of the information reporting method provided.

[0341] The devices can be implemented by software, or by hardware, or by a combination of software and hardware. As an example, the implementation of the first communication device 800 and the control management device 900 is described below.

[0342] As an example of a software functional unit, the first communication device 800 and the control management device 900 may include code running on a device instance. The device instance may be at least one of a physical device (e.g., a switch, a router, a server, etc.) and a virtualized device (e.g., a virtual machine, etc.). Furthermore, the device instance may be one or more.

[0343] For example, the first communication device 800 may include code running on one or more physical devices (e.g., switches, routers), or the first communication device 800 may include code running on one or more virtualized devices, or the first communication device 800 may include code running on one or more physical devices and one or more virtualized devices.

[0344] For another example, the control and management device 900 may include code running on one or more physical devices (e.g., switches, routers, servers), or the control and management device 900 may include code running on one or more virtualized devices, or the control and management device 900 may include code running on one or more physical devices and one or more virtualized devices.

[0345] As an example, a virtualized device may be a virtual machine (VM), which is deployed on a hardware device (e.g., a physical host). A virtual machine refers to a complete computer system that is simulated by software and has complete hardware system functions and runs in a completely isolated environment. The virtual machine may be configured as a communication device involved in the embodiments of the present application (e.g., a communication device in a VPN network, a control management device, and other devices with communication functions involved in the embodiments of the present application). For example, each communication device may be implemented based on a general physical host in combination with network function virtualization (NFV) technology. The communication device is a virtual host, a virtual router, or a virtual switch. Those skilled in the art may virtualize each communication device having the functions described in the embodiments of the present application on a general physical host in combination with NFV technology by reading this application.

[0346] As an example of a hardware functional unit, the first communication device 800 and the control management device 900 may include at least one hardware device. For example, the first communication device 800 may include a router, a switch, etc. The control management device 900 may include a switch, a router, a server, etc. Alternatively, the first communication device 800 and the control management device 900 may also be devices implemented using application-specific integrated circuits (ASIC) or programmable logic devices (PLD). The above-mentioned PLD may be a complex programmable logical device (CPLD), a field-programmable gate array (FPGA), a generic array logic (GAL) or any combination thereof.

[0347] The embodiment of the present application also provides a communication device 1000. The communication device 1000 is an example of a communication device as a hardware device. The communication device 1000 provided in the embodiment of the present application can be used as a communication device (such as CE, PE, P, etc.) in a VPN network, a control management device, and other devices with communication functions involved in the embodiment of the present application.

[0348] like Fig.10As shown, the communication device 1000 includes: a bus 1002, a processor 1004, a memory 1006 and a communication interface 1008. The processor 1004, the memory 1006 and the communication interface 1008 communicate with each other through the bus 1002. It should be understood that the present application does not limit the number of processors and memories in the communication device 1000. Optionally, the processor 1004 of the communication device 1000 can be connected to a display, an input device ( Fig.10 not shown).

[0349] The bus 1002 can be divided into an address bus, a data bus, a control bus, etc. For ease of representation, Fig.10 The bus 1002 may include a path for transmitting information between various components of the communication device 1000 (eg, the memory 1006, the processor 1004, and the communication interface 1008).

[0350] The processor 1004 may include any one or more of a central processing unit (CPU), a graphics processing unit (GPU), a microprocessor (MP), or a digital signal processor (DSP). In the embodiment of the present application, the processor 1004 is used to execute the embodiments of the present application. Figure 3 , Figure 6 , Figure 7 The steps or operations in the proposed information reporting method.

[0351] The memory 1006 may include a volatile memory, such as a random access memory (RAM). The processor 1004 may also include a non-volatile memory, such as a read-only memory (ROM), a flash memory, a hard disk drive (HDD), or a solid state drive (SSD).

[0352] The memory 1006 stores executable program codes, and the processor 1004 executes the executable program codes to respectively implement the functions of the transceiver module 812 and the processing module 814 in the aforementioned first communication device 800 or the functions of the transceiver module 912 and the processing module 914 in the aforementioned control management device 900, thereby implementing the embodiments of the present application. Figure 3 , Figure 6 , Figure 7 The proposed information reporting method. That is, the memory 1006 stores the information for executing the embodiment of the present application. Figure 3 , Figure 6 , Figure 7 Instructions for the proposed information reporting method.

[0353] The communication interface 1008 uses a transceiver module such as, but not limited to, a network interface card or a transceiver to implement communication between the communication device 1000 and other devices or a communication network.

[0354] The display may include various display devices that can realize display functions, such as plasma displays and liquid crystal displays. The communication device 1000 can realize the embodiment of the present application through the display Figure 3 , Figure 6 , Figure 7 The proposed information reporting method involves display functions.

[0355] Input devices may include various input devices such as keyboard, mouse, touch screen, etc. that can realize information / signal input.

[0356] The present application also provides a device cluster 1100. Fig.11 As shown, the device cluster includes at least one communication device 1000. The memory 1006 in one or more communication devices 1000 in the device cluster may store the same data for executing the embodiments of the present application. Figure 3 , Figure 6 , Figure 7 Instructions for the proposed information reporting method.

[0357] In some possible implementations, the memory 1006 of one or more communication devices 1000 in the device cluster may also store the memory 1006 for executing the embodiments of the present application. Figure 3 , Figure 6 , Figure 7 In other words, a combination of one or more communication devices 1000 can be used together to execute the method for performing the information reporting method in the embodiment of the present application. Figure 3 , Figure 6 , Figure 7 Instructions for the proposed information reporting method.

[0358] It should be noted that the memory 1006 in different communication devices 1000 in the device cluster may store different instructions, which are respectively used to implement part of the functions of the first communication device 800 or the control management device 900. That is, the instructions stored in the memory 1006 in different communication devices 1000 may implement the functions of one or more of the aforementioned transceiver module 812 and the processing module 814, or the instructions stored in the memory 1006 in different communication devices 1000 may implement the functions of one or more of the aforementioned transceiver module 912 and the processing module 914.

[0359] In some possible implementations, one or more communication devices in the device cluster may be connected via a network, which may be a wide area network or a local area network.

[0360] The present application also provides a computer program product. The computer program product may be a software or program product that includes instructions and can be run on a communication device (for example, on a processor of the aforementioned communication device 1000 or device cluster 1100) or stored in any available medium. The instructions included in the computer program product may include instructions for executing the present application. Figure 3 , Figure 6 , Figure 7 The steps or operation instructions in the proposed information reporting method. When the computer program product is executed on a communication device (for example, running on the processor of the aforementioned communication device 1000 or device cluster 1100), the embodiments of the present application are implemented. Figure 3 , Figure 6 , Figure 7 The steps or operations of the proposed information reporting method.

[0361] The present application also provides a computer-readable storage medium. The computer-readable storage medium may be any available medium that can be stored by a computing device or a data storage device such as a data center that contains one or more available media. The available medium may be a magnetic medium (e.g., a floppy disk, a hard disk, a tape), an optical medium (e.g., a DVD), or a semiconductor medium (e.g., a solid-state hard disk). The computer-readable storage medium includes instructions that instruct the communication device to execute the present application. Figure 3 , Figure 6 , Figure 7 The steps or operations of the proposed information reporting method.

[0362] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present application, rather than to limit it. Although the present application has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not cause the essence of the corresponding technical solutions to deviate from the protection scope of the technical solutions of the embodiments of the present application.

[0363] The terms "first", "second", "third" and "fourth" etc. in the specification and claims of this application and the above-mentioned drawings are used to distinguish different objects rather than to limit a specific order.

[0364] In the embodiments of the present application, words such as "exemplary" or "for example" are used to indicate examples, illustrations or descriptions. Any embodiment or design described as "exemplary" or "for example" in the embodiments of the present application should not be interpreted as being more preferred or more advantageous than other embodiments or designs. Specifically, the use of words such as "exemplary" or "for example" is intended to present related concepts in a specific way.

Claims

1. An information reporting method, characterized in that: The method is performed by a first communication device, and the method includes: Receiving a first virtual private network (VPN) route from a second communication device, wherein the first VPN route includes a first Internet Protocol (IP) address prefix and device information of the second communication device; A protocol message is sent to a control management device, wherein the protocol message includes the first IP address prefix or the first IP address in the network segment to which the first IP address prefix belongs, device information of the first communication device, and device information of the second communication device.

2. The method according to claim 1, characterized in that The device information of the second communication device includes one or more of the following: A Border Gateway Protocol BGP identity ID of the second communication device or a VRF instance identifier of a first VPN routing / forwarding table VRF instance included in the second communication device; The first VRF instance includes the first VPN route.

3. The method according to claim 1 or 2, characterized in that: The device information of the first communication device includes one or more of the following: The BGP ID of the first communication device or the VRF instance identifier of the local VRF instance included in the first communication device; The local VRF instance includes the first VPN route.

4. The method according to claim 2 or 3, characterized in that: The VRF instance identifier includes a VRF instance routing identifier RD.

5. The method according to any one of claims 1 to 4, characterized in that The protocol message is a BGP monitoring protocol BMP message or an IP data flow information output IPFIX message.

6. The method according to any one of claims 1 to 5, characterized in that The second communication device includes a first VRF instance and a second VRF instance, the first VRF instance includes the first VPN route, and the second VRF instance includes a second VPN route; Before sending the protocol message to the control management device, the method further includes: receiving a second VPN route from the second communication device, the second VPN route including the first IP address prefix and a VRF instance identifier of the second VRF instance included in the second communication device; The first VPN route is stored as a target VPN route in a local VRF instance of the first communication device.

7. The method according to any one of claims 1 to 5, characterized in that Before sending the protocol message to the control management device, the method further includes: receiving a third VPN route from a third communication device, the third VPN route including the first IP address prefix and device information of the third communication device; The first VPN route is stored as a target VPN route in a local VRF instance of the first communication device.

8. An information reporting method, characterized in that: The method is performed by a control management device, and the method includes: Receiving a protocol message from a first communication device, the protocol message including a first IP address prefix or a first IP address in a network segment to which the first IP address prefix belongs, device information of the first communication device, and device information of a second communication device; wherein the first IP address prefix is ​​an IP address prefix carried in a first VPN route sent by the second communication device to the first communication device; The first IP address prefix or the first IP address, the device information of the first communication device, and the device information of the second communication device are acquired from the protocol message.

9. The method according to claim 8, characterized in that The device information of the second communication device includes one or more of the following: The BGP ID of the second communication device or the VRF instance identifier of the first VRF instance included in the second communication device; The first VRF instance includes the first VPN route.

10. The method according to claim 8 or 9, characterized in that: The device information of the first communication device includes one or more of the following: The BGP ID of the first communication device or the VRF instance identifier of the local VRF instance included in the first communication device; The local VRF instance includes the first VPN route.

11. The method according to claim 9 or 10, characterized in that: The VRF instance identifier includes a VRF instance RD.

12. The method according to any one of claims 8 to 11, characterized in that The protocol message is a BMP message or an IPFIX message.

13. The method according to claim 12, characterized in that In the case where the protocol message is a BMP message, the method further includes: Acquire information of a data flow, wherein the destination network address of the data flow is the first IP address; An association is established between the data flow and the device information of the second communication device.

14. The method according to any one of claims 8 to 12, characterized in that: The first VPN route is a target VPN route selected by the first communication device from a plurality of VPN routes from the second communication device, and the IP address prefixes carried by the plurality of VPN routes are the first IP address prefixes.

15. The method according to any one of claims 8 to 12, characterized in that: The first VPN route is a target VPN route selected by the first communication device from a plurality of VPN routes from the second communication device and a third communication device, and the IP address prefixes carried by the plurality of VPN routes are the first IP address prefixes.

16. A first communication device, characterized in that: The first communication device comprises a transceiver module and a processing module, and the first communication device is used to implement the method according to any one of claims 1 to 7.

17. A control management device, characterized in that: The control management device comprises a transceiver module and a processing module, and the control management device is used to implement the method as described in any one of claims 8-15.

18. A communication system, characterized in that: The system comprises a first communication device and a control management device, wherein the first communication device is used to execute the method according to any one of claims 1 to 7, and the control management device is used to execute the method according to any one of claims 8 to 15.

19. A communication device, characterized in that: The communication device comprises a processor and a memory; the processor is configured to execute instructions stored in the memory, so that the communication device executes the method according to any one of claims 1 to 7 or the method according to any one of claims 8 to 15.

20. A computer program product, characterized in that The computer program product comprises instructions, and when the instructions are executed by a processor, the method according to any one of claims 1 to 7 or the method according to any one of claims 8 to 15 is implemented.

21. A computer-readable storage medium, characterized in that: The method comprises computer program instructions. When the computer program instructions are executed by a communication device, the communication device performs the method according to any one of claims 1 to 7 or the method according to any one of claims 8 to 15.

Images