Data forwarding method, device and system and storage medium

Abstract

The invention relates to the technical field of network communication, and discloses a data forwarding method, device and system and a storage medium, and the method comprises the steps: obtaining target basic feature information of a target data flow; matching the target basic feature information with basic feature information of each flow table item in the target flow table; if the target basic feature information is matched with the basic feature information of the first flow table item, forwarding data of the target data flow according to a first forwarding strategy corresponding to the first flow table item; and if the target basic feature information is not matched with the basic feature information of each flow table item in the target flow table, determining a second forwarding strategy corresponding to the target data flow by using the target decision tree, and forwarding the data of the target data flow according to the second forwarding strategy. According to the invention, the accurate forwarding of the data flow can be realized, and the matching efficiency of the forwarding strategy of the data flow is improved, so that the load pressure of the network is reduced, and the network performance is improved.

Description

Technical Field

[0001] The present invention relates to the field of network communication technology, and in particular to a data forwarding method, device, system and storage medium. Background Art

[0002] Today's network traffic comes in various forms, and the underlying data resources required are also different, which poses a huge challenge to the ability of traditional Software Defined Networking (SDN) controllers to regulate resources. For SDN controllers to coordinate northbound services and southbound interface functions, they need to collaborate and interact with the northbound interface applications. Through the northbound interface applications, they can obtain information such as network status and business requirements, and feed this information back to the southbound interface controller, thereby achieving dynamic adjustment and control of the network. At the same time, the formulation of southbound interface policies also needs to take into account multiple aspects such as network performance, security, reliability, and applications to ensure that the network can provide the best service quality and ensure the normal operation of services. However, the matching efficiency of data flow forwarding control in related technologies is low, resulting in limited network performance. Summary of the invention

[0003] In view of this, the present invention provides a data forwarding method, device, system and storage medium to solve the problem of low matching efficiency of data flow forwarding control in SDN networks, resulting in low network performance.

[0004] In a first aspect, the present invention provides a data forwarding method, applied to a software defined network system, the method comprising:

[0005] Obtaining target basic characteristic information of the target data flow, wherein the basic characteristic information includes one or more of the network segment to which the source IP address belongs, the network segment to which the destination IP address belongs, the port, the MAC address, the protocol type, the priority, and the level;

[0006] Matching the target basic characteristic information with the basic characteristic information of each flow table entry in the target flow table respectively;

[0007] If the target basic characteristic information matches the basic characteristic information of the first flow table entry, forwarding the data of the target data flow according to the first forwarding strategy corresponding to the first flow table entry; the first flow table entry is a flow table entry in the target flow table;

[0008] If the target basic characteristic information does not match the basic characteristic information of each flow table entry in the target flow table, the target decision tree is used to determine the second forwarding strategy corresponding to the target data flow, and the data of the target data flow is forwarded according to the second forwarding strategy.

[0009] In an optional implementation, the level is determined according to the priority and the network status.

[0010] In an optional implementation, before using the target decision tree to determine the second forwarding strategy corresponding to the target data flow, the method further includes:

[0011] The target decision tree is constructed by taking the priority as a root node, the protocol type as the first child node under the root node, and other feature information except the priority and the protocol type as other child nodes.

[0012] In an optional implementation, after determining the second forwarding strategy corresponding to the target data flow by using the target decision tree, the method further includes:

[0013] Forming a new flow table entry based on the target basic characteristic information of the target data flow and the second forwarding strategy;

[0014] Add the new flow table entry into the target flow table.

[0015] In an optional implementation, the data forwarding method further includes:

[0016] The flow table entries in the target flow table are updated using a least recently used algorithm.

[0017] In a second aspect, the present invention provides a data forwarding device, applied to a software defined network system, the device comprising:

[0018] An acquisition module is used to acquire target basic characteristic information of a target data stream, wherein the basic characteristic information includes one or more of a network segment to which a source IP address belongs, a network segment to which a destination IP address belongs, a port, a MAC address, a protocol type, a priority, and a level;

[0019] A matching module, used to match the target basic feature information with the basic feature information of each flow table item in the target flow table;

[0020] A first forwarding module, configured to forward the data of the target data flow according to a first forwarding strategy corresponding to the first flow table entry if the target basic characteristic information matches the basic characteristic information of the first flow table entry; the first flow table entry is a flow table entry in the target flow table;

[0021] The second forwarding module is used to determine the second forwarding strategy corresponding to the target data flow by using the target decision tree if the target basic characteristic information does not match the basic characteristic information of each flow table item in the target flow table, and forward the data of the target data flow according to the second forwarding strategy.

[0022] In some optional specific implementations, the data forwarding device further includes:

[0023] A flow entry forming module, used to form a new flow entry based on the target basic feature information of the target data flow and the second forwarding strategy;

[0024] The flow table entry adding module is used to add the new flow table entry into the target flow table.

[0025] In a third aspect, the present invention provides a software-defined network system, which includes a computer device, wherein the computer device includes: a memory and a processor, the memory and the processor are communicatively connected to each other, computer instructions are stored in the memory, and the processor executes the data forwarding method of the first aspect or any corresponding embodiment thereof by executing the computer instructions.

[0026] In a fourth aspect, the present invention provides a computer-readable storage medium having computer instructions stored thereon, the computer instructions being used to enable a computer to execute the data forwarding method of the first aspect or any corresponding embodiment thereof.

[0027] In a fifth aspect, the present invention provides a computer program product, comprising computer instructions, wherein the computer instructions are used to enable a computer to execute the data forwarding method of the first aspect or any corresponding embodiment thereof.

[0028] The data forwarding method, device, system and storage medium provided by the embodiments of the present invention, when receiving data of a new data flow (i.e., target data flow), first obtains the basic characteristic information of the data flow (i.e., target basic characteristic information), and then matches the basic characteristic information with the existing flow table items in the flow table. If the match is successful, the forwarding is directly performed according to the forwarding strategy indicated in the matched flow table item (i.e., the first forwarding strategy). If the flow table item is not successfully matched, the SDN controller actively uses the decision tree to determine the forwarding strategy. This solution of combining active and passive methods to determine the forwarding strategy not only realizes the accurate forwarding of the target data flow, but also improves the matching efficiency of the forwarding strategy of the data flow, thereby reducing the load pressure of the SDN network and improving network performance. BRIEF DESCRIPTION OF THE DRAWINGS

[0029] In order to more clearly illustrate the specific embodiments of the present invention or the technical solutions in the related technologies, the drawings required for use in the specific embodiments or the related technical descriptions will be briefly introduced below. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0030] Figure 1is a schematic flow chart of a data forwarding method according to an embodiment of the present invention;

[0031] Figure 2 is a schematic diagram of a decision tree according to an embodiment of the present invention;

[0032] Figure 3 is a structural block diagram of a data forwarding device according to an embodiment of the present invention;

[0033] Figure 4 It is a schematic diagram of the hardware structure of a computer device in a software defined network system according to an embodiment of the present invention. DETAILED DESCRIPTION

[0034] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative work are within the scope of protection of the present invention.

[0035] Software Defined Networking (SDN) is a network architecture that aims to achieve network flexibility and programmability by separating the network control plane from the data plane. By using SDN, developers can write applications to more easily control network traffic and resource allocation, thereby achieving more efficient network management and better application performance.

[0036] According to an embodiment of the present invention, a data forwarding method embodiment is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of executable computer instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0037] In this embodiment, a data forwarding method is provided, which can be used in a software defined network system. Figure 1 is a flow chart of a data forwarding method according to an embodiment of the present invention. Figure 1 As shown, the process includes the following steps:

[0038] Step S101, obtain the target basic characteristic information of the target data flow, the basic characteristic information includes one or more of the network segment to which the source IP address belongs, the network segment to which the destination IP address belongs, the port, the MAC address, the protocol type, the priority, and the level. Among them, the level is determined according to the priority and the network status. The network status mainly refers to the state of the traffic in the actual transmission. There may be abnormal conditions such as fluctuations, and the degree of goodness is judged according to the delay. Specifically, the level is determined according to the priority first, and the level is determined according to the network status if the priority is the same.

[0039] In addition, the target basic characteristic information may also include a user identifier, so that the data forwarding method provided in the embodiment of the present invention can formulate corresponding forwarding strategies according to different users to achieve specialized management.

[0040] Step S102: Match the target basic feature information with the basic feature information of each flow table entry in the target flow table.

[0041] Among them, the flow table is a collection of policy entries for a specific flow, which is responsible for the search and forwarding of data packets. Each flow table includes a series of flow entries, which are composed of packet header fields, matching priorities, counters, and instructions to be applied.

[0042] The flow table entries in the target flow table need to be prepared in advance. The specific preparation process is: first collect the basic characteristic information of the data flow, and then formulate the corresponding forwarding strategy based on the collected basic characteristic information.

[0043] Step S103: If the target basic characteristic information matches the basic characteristic information of the first flow table entry, forward the data of the target data flow according to the first forwarding strategy corresponding to the first flow table entry; the first flow table entry is a flow table entry in the target flow table.

[0044] Specifically, if a flow table entry includes multiple basic characteristic information, then it is necessary to obtain these basic characteristic information of the target data flow (i.e., the target basic characteristic information) accordingly, and only when these basic characteristic information of the target data flow are consistent with all the basic characteristic information of a flow table entry, it is determined that the target basic characteristic information matches the basic characteristic information of the first flow table entry.

[0045] Step S102 and step S103 may be performed by a switch in the SDN network system.

[0046] Step S104: If the target basic characteristic information does not match the basic characteristic information of each flow table entry in the target flow table, a second forwarding strategy corresponding to the target data flow is determined using a target decision tree, and data of the target data flow is forwarded according to the second forwarding strategy. The target decision tree determines the second forwarding strategy based on the basic characteristic information.

[0047] Specifically, the SDN controller may determine the second forwarding strategy corresponding to the target data flow using the target decision tree, and then send the second forwarding strategy to the switch, so that the switch forwards the data of the target data flow according to the second forwarding strategy.

[0048] The embodiment of the present invention realizes classification of data flows through the basic characteristic information of northbound data flows (i.e., target basic characteristic information), and then forwarding based on the forwarding strategy corresponding to the classification result. The corresponding forwarding strategy is determined by multiple basic characteristic information of the data flow, which improves the granularity of the characteristic information based on which the data flow forwarding control is based, and realizes precise control of network services. Among them, the corresponding forwarding strategy is determined based on the basic characteristic information of the data flow, such as the protocol type, port, network segment, etc., so that data forwarding can meet business needs.

[0049] The data forwarding method provided in this embodiment, when receiving data of a new data flow (i.e., the target data flow), first obtains the basic characteristic information of the data flow (i.e., the target basic characteristic information), and then matches the basic characteristic information with the existing flow table items in the flow table. If the match is successful, then forwarding is performed directly according to the forwarding strategy indicated in the matched flow table item (i.e., the first forwarding strategy). If the flow table item is not successfully matched, the SDN controller actively uses the decision tree to determine the forwarding strategy. This solution of combining active and passive methods to determine the forwarding strategy not only realizes the accurate forwarding of the target data flow, but also improves the matching efficiency of the forwarding strategy of the data flow, thereby improving the forwarding efficiency of the data flow, thereby reducing the load pressure of the SDN network and improving network performance.

[0050] In some optional specific implementations, before using the target decision tree to determine the second forwarding strategy corresponding to the target data flow, the method further includes:

[0051] The target decision tree is constructed by taking the priority as the root node, the protocol type as the first child node under the root node, and other characteristic information except the priority and the protocol type as other child nodes, wherein the other characteristic information includes ports, network segments, etc.

[0052] Decision Tree is a machine learning algorithm that uses a tree structure to represent the decision-making process. Each child node represents a test on feature information, each branch represents a test result, and each leaf node represents a category label.

[0053] In the embodiment of the present invention, before using the target decision tree to determine the second forwarding strategy corresponding to the target data flow, it is necessary to first construct the target decision tree. When constructing the decision tree, the priority and protocol type of the data path are prioritized for the division operation, so as to ensure that the SDN controller gives priority to the service level and quality functions when determining the forwarding strategy. Figure 2 is an example of a constructed target decision tree.

[0054] The specific construction process of the target decision tree includes:

[0055] 1. Collect the network attributes of the network traffic communicating with the SDN controller. The network attributes include network status and priority. The data flow is classified into different levels according to the network status and priority.

[0056] 2. Collect characteristic information of network traffic communicating with the SDN controller, including protocol type, port, network segment, MAC address, level, priority, etc. For details, see the target basic characteristic information.

[0057] 3. Build a decision tree. Use information gain as the basis for selecting feature information, and calculate information entropy H(D), as well as conditional entropy H(D|A) for selecting the current feature information A. Information gain is:

[0058]

[0059] H(D,A)=H(D)-H(D|A)

[0060] Among them, C k represents the number of samples belonging to the kth category, D is the total number of samples, and D i is the number of samples in the ith subset of the total sample set, D ik is the number of samples belonging to the kth category in the ith subset. If the information gain is larger, H(D|A) is smaller, which means that the data in the result set is purer and contains more information.

[0061] The tree is split into two subtrees according to different features through iterative calculations until each child node has only one type, or the number of records in the current node is less than a certain threshold, and the number of iterations reaches a given value, then the construction process is stopped.

[0062] The partitioning operation is performed according to all the feature attributes, and the information entropy of the result sets of all the partitioning operations is compared. The feature attributes with higher information entropy are selected as the data set that needs to be partitioned for the partitioning operation.

[0063] In some optional specific implementations, after determining the second forwarding strategy corresponding to the target data flow by using the target decision tree, the method further includes:

[0064] Forming a new flow table entry based on the target basic characteristic information of the target data flow and the second forwarding strategy;

[0065] Add the new flow table entry into the target flow table.

[0066] In the embodiment of the present invention, the forwarding strategy determined by the decision tree of the target data flow is updated to the target flow table, so that other data flows with the same basic characteristic information can determine the corresponding forwarding strategy by matching the flow table items in the target flow table, without the need for the SDN controller to actively use the decision tree to determine the corresponding forwarding strategy again, thereby improving the efficiency of determining the forwarding strategy and thus improving the data flow forwarding efficiency.

[0067] In some other optional specific implementations, the data forwarding method provided by the embodiment of the present invention further includes:

[0068] The flow table entries in the target flow table are updated using a least recently used (LRU) algorithm.

[0069] Specifically, in an embodiment of the present invention, the flow table entries in the target flow table can be updated periodically. For example, the duration of the update cycle t is set, that is, every t time period, the flow table entries in the target flow table are updated using the LRU algorithm, thereby reducing the size of the flow table. At the same time, it can also ensure that the data in the flow table entries are the latest at the current time.

[0070] In addition, the embodiment of the present invention can also maintain each flow table, each data flow, each device port, and each forwarding queue in the switch based on the relevant information of the data flow counted by the counter. According to the forwarding judgment of real-time data, the current execution state is recorded, and the next execution operation is performed. For example, according to the relevant information of the data flow counted by the timer, the advantages and disadvantages of the flow table item and / or the target decision tree are determined. If the forwarding strategy corresponding to the flow table item is unreasonable, resulting in poor network performance, the flow table item is deleted, or the forwarding strategy determined by the target decision tree is unreasonable, resulting in poor network performance, then other target decision trees are replaced. That is, according to the relevant information of the data flow counted by the counter in the flow table item, it is determined whether the forwarding strategy corresponding to the flow table item is reasonable. If it is unreasonable, the flow table item is deleted. If one or more flow table items in the flow table items generated based on the classification result of the target decision tree are unreasonable, the target decision tree is replaced or updated. When judging whether the forwarding strategy corresponding to the flow table item is reasonable, in addition to network performance, network security, reliability, and application can also be comprehensively considered.

[0071] In the present embodiment, a data forwarding device is also provided, and the device is used to implement the above-mentioned embodiment and preferred implementation mode, and the description that has been made is not repeated. As used below, the term "module" can implement the combination of software and / or hardware of the predetermined function. Although the device described in the following embodiments is preferably implemented with software, the implementation of hardware, or the combination of software and hardware is also possible and conceived.

[0072] This embodiment provides a data forwarding device, which is applied to a software defined network system, such as Figure 3 As shown, the data forwarding device includes:

[0073] An acquisition module 301 is used to acquire target basic characteristic information of a target data stream, wherein the basic characteristic information includes one or more of a network segment to which a source IP address belongs, a network segment to which a destination IP address belongs, a port, a MAC address, a protocol type, a priority, and a level;

[0074] A matching module 302, used to match the target basic feature information with basic feature information of each flow table entry in the target flow table;

[0075] A first forwarding module 303 is configured to forward the data of the target data flow according to a first forwarding strategy corresponding to the first flow table entry if the target basic characteristic information matches the basic characteristic information of the first flow table entry; the first flow table entry is a flow table entry in the target flow table;

[0076] The second forwarding module 304 is used to determine the second forwarding strategy corresponding to the target data flow by using the target decision tree if the target basic characteristic information does not match the basic characteristic information of each flow table item in the target flow table, and forward the data of the target data flow according to the second forwarding strategy.

[0077] In some optional implementations, the data forwarding device further includes:

[0078] The construction module is used to construct the target decision tree by taking the priority as the root node, the protocol type as the first child node under the root node, and other feature information except the priority and the protocol type as other child nodes.

[0079] In some optional implementations, the data forwarding device further includes:

[0080] A flow entry forming module, used to form a new flow entry based on the target basic feature information of the target data flow and the second forwarding strategy;

[0081] The flow table entry adding module is used to add the new flow table entry into the target flow table.

[0082] In some optional implementations, the data forwarding device further includes:

[0083] The flow table entry updating module is used to update the flow table entries in the target flow table by using the least recently used algorithm.

[0084] The further functional description of each of the above modules and units is the same as that of the above corresponding embodiments and will not be repeated here.

[0085] The data forwarding device in this embodiment is presented in the form of a functional unit, where the unit refers to an ASIC (Application Specific Integrated Circuit) circuit, a processor and memory that executes one or more software or fixed programs, and / or other devices that can provide the above functions.

[0086] The embodiment of the present invention also provides a software defined network system having the above Figure 3 The data forwarding device shown.

[0087] See also Figure 4 , Figure 4 is a schematic diagram of the structure of a computer device in a software defined network system provided by an optional embodiment of the present invention, such as Figure 4 As shown, the computer device includes: one or more processors 10, a memory 20, and interfaces for connecting various components, including high-speed interfaces and low-speed interfaces. Various components are connected to each other using different buses for communication, and can be installed on a common mainboard or installed in other ways as needed. The processor can process the instructions executed in the computer device, including instructions stored in or on the memory to display the graphical information of the GUI on an external input / output device (such as, a display device coupled to the interface). In some optional embodiments, if necessary, multiple processors and / or multiple buses can be used together with multiple memories and multiple memories. Similarly, multiple computer devices can be connected, and each device provides some necessary operations (for example, as a server array, a group of blade servers, or a multi-processor system). Figure 4 A processor 10 is taken as an example.

[0088] The processor 10 may be a central processing unit, a network processor or a combination thereof. The processor 10 may further include a hardware chip. The hardware chip may be a dedicated integrated circuit, a programmable logic device or a combination thereof. The programmable logic device may be a complex programmable logic device, a field programmable gate array, a general purpose array logic or any combination thereof.

[0089] The memory 20 stores instructions executable by at least one processor 10, so that the at least one processor 10 executes the method shown in the above embodiment.

[0090] The memory 20 may include a program storage area and a data storage area, wherein the program storage area may store an operating system, an application required for at least one function; the data storage area may store data created according to the use of the computer device, etc. In addition, the memory 20 may include a high-speed random access memory, and may also include a non-transient memory, such as at least one disk storage device, a flash memory device, or other non-transient solid-state storage device. In some optional embodiments, the memory 20 may optionally include a memory remotely arranged relative to the processor 10, and these remote memories may be connected to the computer device via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0091] The memory 20 may include a volatile memory, such as a random access memory; the memory may also include a non-volatile memory, such as a flash memory, a hard disk or a solid state drive; the memory 20 may also include a combination of the above types of memory.

[0092] The computer device further comprises a communication interface 30 for the computer device to communicate with other devices or a communication network.

[0093] The embodiment of the present invention also provides a computer-readable storage medium. The method according to the embodiment of the present invention can be implemented in hardware, firmware, or can be implemented as a computer code that can be recorded in a storage medium, or can be implemented as a computer code that is originally stored in a remote storage medium or a non-temporary machine-readable storage medium and will be stored in a local storage medium through a network download, so that the method described herein can be stored in such software processing on a storage medium using a general-purpose computer, a dedicated processor, or programmable or dedicated hardware. Among them, the storage medium can be a magnetic disk, an optical disk, a read-only storage memory, a random access memory, a flash memory, a hard disk or a solid-state hard disk, etc.; further, the storage medium can also include a combination of the above types of memories. It can be understood that a computer, a processor, a microprocessor controller, or programmable hardware includes a storage component that can store or receive software or computer code. When the software or computer code is accessed and executed by a computer, a processor, or hardware, the method shown in the above embodiment is implemented.

[0094] A part of the present invention may be applied as a computer program product, such as a computer program instruction, which, when executed by a computer, can call or provide the method and / or technical solution according to the present invention through the operation of the computer. Those skilled in the art should understand that the existence of the computer program instruction in a computer-readable medium includes, but is not limited to, a source file, an executable file, an installation package file, etc., and accordingly, the way in which the computer program instruction is executed by the computer includes, but is not limited to: the computer directly executes the instruction, or the computer compiles the instruction and then executes the corresponding compiled program, or the computer reads and executes the instruction, or the computer reads and installs the instruction and then executes the corresponding installed program. Here, the computer-readable medium may be any available computer-readable storage medium or communication medium accessible to the computer.

[0095] Although the embodiments of the present invention have been described in conjunction with the accompanying drawings, those skilled in the art may make various modifications and variations without departing from the spirit and scope of the present invention, and such modifications and variations are all within the scope defined by the appended claims.

Claims

1. A data forwarding method, characterized in that: Applied to a software defined network system, the method comprises: Obtaining target basic characteristic information of the target data flow, wherein the basic characteristic information includes one or more of the network segment to which the source IP address belongs, the network segment to which the destination IP address belongs, the port, the MAC address, the protocol type, the priority, and the level; Matching the target basic characteristic information with the basic characteristic information of each flow table entry in the target flow table respectively; If the target basic characteristic information matches the basic characteristic information of the first flow table entry, forwarding the data of the target data flow according to the first forwarding strategy corresponding to the first flow table entry; the first flow table entry is a flow table entry in the target flow table; If the target basic characteristic information does not match the basic characteristic information of each flow table entry in the target flow table, the target decision tree is used to determine the second forwarding strategy corresponding to the target data flow, and the data of the target data flow is forwarded according to the second forwarding strategy.

2. The method according to claim 1, characterized in that The level is determined according to the priority and the network status.

3. The method according to claim 1 or 2, characterized in that: Before determining the second forwarding strategy corresponding to the target data flow by using the target decision tree, the method further includes: The target decision tree is constructed by taking the priority as the root node, the protocol type as the first child node under the root node, and the other basic feature information except the priority and the protocol type as other child nodes.

4. The method according to claim 1, characterized in that: After the target decision tree is used to determine the second forwarding strategy corresponding to the target data flow, the method further includes: Forming a new flow table entry based on the target basic characteristic information of the target data flow and the second forwarding strategy; Add the new flow table entry into the target flow table.

5. The method according to claim 1 or 4, characterized in that: Also includes: The flow table entries in the target flow table are updated using a least recently used algorithm.

6. A data forwarding device, characterized in that: Applied to a software defined network system, the device comprises: An acquisition module is used to acquire target basic characteristic information of a target data stream, wherein the basic characteristic information includes one or more of a network segment to which a source IP address belongs, a network segment to which a destination IP address belongs, a port, a MAC address, a protocol type, a priority, and a level; A matching module, used to match the target basic feature information with the basic feature information of each flow table entry in the target flow table; A first forwarding module, configured to forward the data of the target data flow according to a first forwarding strategy corresponding to the first flow table entry if the target basic characteristic information matches the basic characteristic information of the first flow table entry; the first flow table entry is a flow table entry in the target flow table; The second forwarding module is used to determine the second forwarding strategy corresponding to the target data flow by using the target decision tree if the target basic characteristic information does not match the basic characteristic information of each flow table item in the target flow table, and forward the data of the target data flow according to the second forwarding strategy.

7. The device according to claim 6, characterized in that Also includes: A flow entry forming module, used to form a new flow entry based on the target basic characteristic information of the target data flow and the second forwarding strategy; The flow table entry adding module is used to add the new flow table entry into the target flow table.

8. A software defined network system, characterized in that: The software defined network system includes a computer device, wherein the computer device includes: A memory and a processor, wherein the memory and the processor are communicatively connected to each other, the memory stores computer instructions, and the processor executes the data forwarding method according to any one of claims 1 to 5 by executing the computer instructions.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a computer to execute the data forwarding method according to any one of claims 1 to 5.

10. A computer program product, characterized in that The method comprises computer instructions, wherein the computer instructions are used to cause a computer to execute the data forwarding method according to any one of claims 1 to 5.

Images