Communication system, communication method and enhanced gateway

Abstract

The invention discloses a communication system, a communication method and an enhanced gateway, and relates to the technical field of communication. The home gateway accesses the Internet through different WAN ports, such as the WAN port directly connected with the Internet and the WAN port connected with the enhanced gateway and then accessed to the Internet, so that the problem of communication interruption between the home gateway and the Internet caused by failure or abnormity of edge cloud is avoided, and the communication reliability of the home gateway is improved. Moreover, the home gateway, the enhanced gateway and the edge cloud device are arranged in the same broadcast domain, so that the home gateway, the enhanced gateway and the edge cloud device are in the same two-layer network, thereby providing in-cloud service access experience to the edge cloud for users. The enhanced gateway can send the service messages of different destination addresses to different destination devices, so that the function that the enhanced gateway accesses the service messages to the cloud at will is realized, and the internet traffic of the home gateway can be shunted in the enhanced gateway.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of communication, and particularly relates to a communication system, a communication method and an enhanced gateway. BACKGROUND

[0002] A home gateway will form a two-layer or three-layer network with a home intranet, and the home intranet is isolated from the Internet. When a user in the home intranet accesses the Internet, the user is connected to an external network such as the Internet through a wide area network (WAN) port of the home gateway, and the WAN port is configured with an internet protocol (IP) address connected to the external network. In order to improve the user experience in the home intranet, the home gateway is generally set to a bridge mode, so as to connect the user in the home intranet to an edge cloud. The edge cloud is deployed with an access gateway and a service gateway. Since the bridge mode connects the WAN port of the home gateway to the edge cloud, all the traffic in the home intranet needs to pass through the gateway in the edge cloud before being connected to the Internet or other external network. Further, all the WAN traffic of the user in the home intranet is connected to the Internet through the edge cloud, that is, the user needs to first access the cloud and then access the Internet. Therefore, when the edge cloud fails, the user cannot normally connect to the Internet. SUMMARY

[0003] The present application provides a communication system, a communication method and an enhanced gateway, so that the user does not need to first access the cloud and then access the Internet, and the problem that the user in the home intranet cannot normally connect to the Internet due to the failure of the edge cloud is solved, and the reliability of the WAN traffic is improved.

[0004] In a first aspect, the present application provides a communication system. The communication system comprises a first home gateway, an enhanced gateway and a first edge cloud device in the same broadcast domain. The first home gateway comprises a first WAN port and a second WAN port. The first WAN port is configured to send a first service packet to the Internet, and the second WAN port is configured to send a second service packet to the enhanced gateway. The enhanced gateway is configured to send the second service packet to the first edge cloud device if a destination media access control (MAC) address in the second service packet is a MAC address of the first edge cloud device, and send the second service packet to the Internet if the destination MAC address in the second service packet is a MAC address of the first bridge interface.

[0005] In the first aspect of the present application, the first home gateway, the enhanced gateway and the first edge cloud device are arranged in a same broadcast domain, and a broadcast message in the same broadcast domain can reach each host in the broadcast domain, which is beneficial to improving the communication efficiency in the broadcast domain. Moreover, the enhanced gateway can determine the forwarding direction of the uplink traffic of the first home gateway according to the destination MAC address in the service message, so that the service message is sent to the Internet only when the destination MAC address is the MAC address of the first bridge interface. In the forwarding process of the service message by the enhanced gateway, the service message with the destination MAC address being the MAC address of the first bridge interface will not be sent to the first edge cloud device, but will be directly sent to the Internet, i.e., the uplink traffic of the first home gateway does not need to access the cloud first and then access the Internet, and therefore, even when the first edge cloud device fails, the uplink traffic of the first home gateway can still be normally connected to the Internet.

[0006] In addition, since the first home gateway and the first edge cloud device are in the same broadcast domain, when the first home gateway wants to use the cloud service provided by the first edge cloud device, the first home gateway can communicate with the first edge cloud device according to the destination MAC address corresponding to the first edge cloud device, thereby reducing the uplink dialing process that needs to be performed by the first home gateway when accessing the cloud.

[0007] In combination with the communication system provided in the first aspect, in an optional implementation manner, a second layer tunnel is established between the enhanced gateway and the first home gateway, and the second layer tunnel is used to transmit a second service message. The enhanced gateway and the first home gateway are in a same broadcast domain, which makes the second layer tunnel be used to transmit the service message between the enhanced gateway and the first home gateway, and is beneficial to improving the communication efficiency between the devices in the same broadcast domain.

[0008] In combination with the communication system provided in the first aspect, in an optional implementation manner, the communication system further includes a second edge cloud device which is not in the broadcast domain. The enhanced gateway is further configured to receive a fifth service message from the first home gateway, and if the destination IP address of the fifth service message is the IP address of the second edge cloud device, send the fifth service message to the second edge cloud device. The communication system can establish a point-to-point communication connection between the enhanced gateway in the broadcast domain and the second edge cloud device which is not in the broadcast domain, so that the home gateway or the host in the broadcast domain can realize the communication of the service message based on the point-to-point communication connection.

[0009] With reference to the communication system provided in the first aspect, in an optional implementation, the communication system further comprises a second home gateway located in the broadcast domain. The second home gateway comprises a third WAN port and a fourth WAN port. The third WAN port is configured to send third service packets to the Internet, and the fourth WAN port is configured to send fourth service packets to the enhanced gateway. In the present application, other home gateways (the first home gateway) can also be included in the broadcast domain, which enables the hosts in the broadcast domain to connect to the Internet based on different home gateways, thereby avoiding the problem that the hosts cannot access the Internet due to the failure of a single home gateway, and facilitating to improve the stability of the communication system.

[0010] In the second aspect, the present application provides a communication method. The communication method is applied to a communication system comprising a home gateway and an enhanced gateway. The first WAN port of the home gateway is connected to the Internet, the second WAN port of the home gateway is connected to the enhanced gateway, the enhanced gateway is connected to a first edge cloud device and connected to the Internet through a first network bridge interface, and the home gateway, the enhanced gateway and the first edge cloud device are in the same broadcast domain. The communication method provided in the present application comprises the following steps: the home gateway sends first service packets to the Internet through the first WAN port, and the home gateway sends second service packets to the enhanced gateway through the second WAN port. Furthermore, if the destination MAC address in the second service packets is the MAC address of the first edge cloud device, the enhanced gateway sends the second service packets to the first edge cloud device; and if the destination MAC address in the second service packets is the MAC address of the first network bridge interface, the enhanced gateway sends the second service packets to the Internet.

[0011] In the second aspect of the present application, the first home gateway, the enhanced gateway and the first edge cloud device are arranged in the same broadcast domain. The broadcast packets in the same broadcast domain can reach each host in the broadcast domain, which facilitates to improve the communication efficiency in the broadcast domain. Since the enhanced gateway can determine the forwarding direction of the Internet access traffic of the first home gateway according to the destination MAC address in the service packets, the service packets with the destination MAC address being the MAC address of the first network bridge interface are sent to the Internet. That is, in the forwarding process of the service packets by the enhanced gateway, the service packets with the destination MAC address being the MAC address of the first network bridge interface are not sent to the first edge cloud device, but are directly sent to the Internet. That is, the Internet access traffic of the first home gateway does not need to access the cloud first and then access the Internet. Therefore, even when the first edge cloud device fails, the Internet access traffic of the first home gateway can still be normally connected to the Internet.

[0012] In an optional implementation of the communication method provided in the second aspect, before the enhanced gateway sends the second service packet to the Internet, the communication method provided in the application further includes: the enhanced gateway performing network address translation (NAT) on the second service packet sent by the home gateway. The NAT refers to a process of converting an IP address in a header of a service packet into another IP address, and is mainly used to realize the function of accessing an external network (public IP address) from an internal network (private IP address).

[0013] In an optional implementation of the communication method provided in the second aspect, the communication system further includes: a second edge cloud device not in the broadcast domain, and the enhanced gateway is connected to the second edge cloud device. The communication method provided in the application further includes: the enhanced gateway receiving a fifth service packet from the home gateway, and if the destination IP address in the fifth service packet is the IP address of the second edge cloud device, the enhanced gateway sends the fifth service packet to the second edge cloud device.

[0014] In an optional implementation of the communication method provided in the second aspect, the communication system provided in the application further includes: a second home gateway located in the broadcast domain, and a third WAN port of the second home gateway is connected to the Internet, and a fourth WAN port of the second home gateway is connected to the enhanced gateway. The communication method provided in the application further includes: the second home gateway sending a third service packet to the Internet through the third WAN port, and the second home gateway sending a fourth service packet to the enhanced gateway through the fourth WAN port. If the destination MAC address in the fourth service packet is the MAC address of the first edge cloud device, the enhanced gateway sends the fourth service packet to the first edge cloud device. If the destination MAC address in the fourth service packet is the MAC address of the first bridge interface, the enhanced gateway sends the fourth service packet to the Internet.

[0015] In an optional implementation of the communication method provided in the second aspect, the first WAN port is connected to the second bridge interface, the IP address of the first bridge interface is the same as the IP address of the second bridge interface, and the MAC address of the first bridge interface is the same as the MAC address of the second bridge interface. The communication method provided in the application further includes: if the first bridge interface fails, the home gateway deletes the MAC address of the first bridge interface configured by the home gateway. If the second bridge interface fails, the enhanced gateway deletes the MAC address of the second bridge interface configured by the enhanced gateway.

[0016] In an optional implementation of the communication method provided in the second aspect, the first WAN port is connected to the second bridge interface, the IP address of the first bridge interface is the same as the IP address of the second bridge interface, and the MAC address of the first bridge interface is different from the MAC address of the second bridge interface. The communication method provided in the application further includes: if the first bridge interface fails, the first home gateway sends a first address resolution protocol (ARP) message to the hosts in the broadcast domain, and the first ARP message carries the MAC address of the second bridge interface. If the second bridge interface fails, the enhanced gateway sends a second ARP message to the hosts in the broadcast domain, and the second ARP message carries the MAC address of the first bridge interface.

[0017] In an optional implementation of the communication method provided in the second aspect, the first WAN port is connected to the second bridge interface, the IP address of the first bridge interface is the same as the IP address of the second bridge interface, and the MAC address of the first bridge interface is different from the MAC address of the second bridge interface. The communication method provided in the application further includes: if the first bridge interface fails, the enhanced gateway sends a first address resolution protocol (ARP) message to the hosts in the broadcast domain, and the first ARP message carries the MAC address of the second bridge interface. If the second bridge interface fails, the enhanced gateway sends a second ARP message to the hosts in the broadcast domain, and the second ARP message carries the MAC address of the first bridge interface.

[0018] In an optional implementation of the communication method provided in the second aspect, the first WAN port is connected to the second bridge interface, the IP address of the first bridge interface is the same as the IP address of the second bridge interface, and the MAC address of the first bridge interface is different from the MAC address of the second bridge interface. The communication method provided in the application further includes: if the first bridge interface fails, the enhanced gateway sends a first address resolution protocol (ARP) message to the hosts in the broadcast domain, and the first ARP message carries the MAC address of the second bridge interface. If the second bridge interface fails, the enhanced gateway sends a second ARP message to the hosts in the broadcast domain, and the second ARP message carries the MAC address of the first bridge interface.

[0019] Alternatively, if the first bridge interface fails, the enhanced gateway sends a second ACL to the hosts in the broadcast domain, and the second ACL is used to indicate that the MAC address of the first bridge interface in a service message is modified to the MAC address of the second bridge interface. If the first bridge interface recovers the connection with the Internet, the enhanced gateway cancels the second ACL.

[0020] In a third aspect, the present application provides another communication method. The communication method is applied to an enhanced gateway, the enhanced gateway is connected with a first edge cloud device and a first home gateway, the enhanced gateway is connected with the Internet through a first bridge interface, and the home gateway, the enhanced gateway and the edge cloud device are located in the same broadcast domain. The communication method provided by the present application comprises the following steps: the enhanced gateway receives a second service packet of the first home gateway. If a destination media access control (MAC) address in the second service packet is the MAC address of the first edge cloud device, the enhanced gateway sends the second service packet to the first edge cloud device; if the destination MAC address in the second service packet is the MAC address of the first bridge interface, the enhanced gateway sends the second service packet to the Internet.

[0021] In combination with the communication method provided in the third aspect, in an optional implementation manner, the communication method provided by the present application further comprises the following steps: the enhanced gateway receives a sixth service packet of the first edge cloud device. If a destination MAC address in the sixth service packet is the MAC address of the home gateway, the enhanced gateway sends the sixth service packet to the home gateway; if the destination MAC address in the sixth service packet is the MAC address of the first bridge interface, the enhanced gateway sends the sixth service packet to the Internet.

[0022] In combination with the communication method provided in the third aspect, in an optional implementation manner, the communication method provided by the present application further comprises the following steps: the enhanced gateway receives a plurality of service packets of the Internet. The enhanced gateway sends a seventh service packet in the plurality of service packets to the first edge cloud device, and the seventh service packet carries an IP address of the first edge cloud device; and / or the enhanced gateway sends an eighth service packet in the plurality of service packets to the home gateway, and the eighth service packet carries an IP address of the home gateway.

[0023] In a fourth aspect, the present application provides an enhanced gateway. The enhanced gateway comprises a processor and a transceiver. The transceiver is configured to send service packets or receive packets, and the transceiver and the processor cooperatively implement the method steps of any one of the optional implementation manners of the second aspect or the third aspect.

[0024] As to the beneficial effects of the fourth aspect, refer to the description of any one of the optional implementation manners of the first aspect to the third aspect, which will not be described here. On the basis of the implementation manners of the above aspects, the present application can be further combined to provide more implementation manners. BRIEF DESCRIPTION OF DRAWINGS

[0025] Figure 1 FIG. 1 is a schematic structural diagram of a metropolitan area network provided by the present application;

[0026] Figure 2 FIG. 2 is a schematic structural diagram of a communication system provided by the present application; and Figure 1 FIG. 3 is a schematic structural diagram of an enhanced gateway provided by the present application.

[0027] Figure 3 Structure diagram of a communication system provided for the present application Figure 2 ;

[0028] Figure 4 Structure diagram of a communication system provided for the present application Figure 3 ;

[0029] Figure 1 Flow diagram of a communication method provided for the present application Figure 6 ;

[0030] Figure 2 Flow diagram of a communication method provided for the present application Figure 7A ;

[0031] Figure 7B Flow diagram of a first traffic forwarding method provided for the present application

[0032] Figure 7C Flow diagram of a second traffic forwarding method provided for the present application

[0033] Figure 7D Flow diagram of a third traffic forwarding method provided for the present application

[0034] Figure 7E Flow diagram of a fourth traffic forwarding method provided for the present application

[0035] Figure 8A Structure diagram of a service layer forwarding model provided for the present application

[0036] Figure 1 Structure diagram of a gateway deployment design provided for the present application Figure 8B ;

[0037] Figure 2 Structure diagram of a gateway deployment design provided for the present application Figure 8C ;

[0038] Figure 3 Structure diagram of a gateway deployment design provided for the present application Figure 8D ;

[0039] Figure 4 Structure diagram of a gateway deployment design provided for the present application Figure 8E ;

[0040] Figure 5 Structure diagram of a gateway deployment design provided for the present application Figure 9 ;

[0041] Figure 1A structure diagram of a communication pipe provided for the present application Figure 10 ;

[0042] Figure 11 A structure diagram of an ECGW component and an ECGW cluster provided for the present application

[0043] Figure 2 A structure diagram of a communication pipe provided for the present application Figure 12 ;

[0044] Figure 3 A structure diagram of a communication pipe provided for the present application Figure 13 ;

[0045] Figure 4 A structure diagram of a communication pipe provided for the present application Figure 14 ;

[0046] Figure 5 A structure diagram of a communication pipe provided for the present application Figure 15 ;

[0047] Figure 6 A structure diagram of a communication pipe provided for the present application Figure 16 ;

[0048] Figure 17 A structure diagram of a communication pipe provided for the present application

[0049] Figure 18 A structure diagram of a communication pipe provided for the present application

[0050] Figure 19 A flow diagram of an access service provided for the present application

[0051] Figure 20 A structure diagram of an S-L metropolitan area family bandwidth service model provided for the present application

[0052] Figure 21 A structure diagram of a communication device provided for the present application

[0053] Figure 22 A structure diagram of a family gateway provided for the present application

[0054] Figure 1 A structure diagram of an enhanced gateway provided for the present application DETAILED DESCRIPTION

[0055] In the present application, the first home gateway, the enhanced gateway and the first edge cloud device are arranged in one broadcast domain, and a broadcast message in the same broadcast domain can reach each host in the broadcast domain, which is beneficial to improve the communication efficiency in the broadcast domain. Moreover, since the enhanced gateway can determine the forwarding direction of the first home gateway's uplink traffic according to the destination MAC address in the service message, the service message is sent to the Internet only when the destination MAC address is the MAC address of the second bridge interface. In the forwarding process of the service message by the enhanced gateway, the service message with the destination MAC address of the second bridge interface is not sent to the first edge cloud device, but is directly sent to the Internet, that is, the uplink traffic of the first home gateway does not need to access the cloud first and then access the Internet, so even when the first edge cloud device fails, the uplink traffic of the first home gateway can still be normally connected to the Internet.

[0056] In addition, since the first home gateway and the first edge cloud device are in the same broadcast domain, when the first home gateway wants to use the cloud service provided by the first edge cloud device, the first home gateway can communicate with the first edge cloud device according to the destination MAC address corresponding to the first edge cloud device, thereby reducing the uplink dialing process that the first home gateway needs to perform when accessing the cloud.

[0057] The present application can not only be applied to existing wireless communication technology, optical communication technology and edge cloud scenarios, but also can be applied to future wireless communication technology, optical communication technology and edge cloud scenarios, etc. The terms used in the embodiment part of the present application are only used to explain the specific embodiments of the present application, and are not intended to limit the present application. First, some concepts that may be involved in the present application are briefly introduced.

[0058] Cloud: abstraction of the Internet and underlying infrastructure.

[0059] Edge cloud: a small-scale cloud data center distributed at the edge of the network, providing real-time data processing and analysis decision.

[0060] Internet: also known as international network, refers to the vast network formed by the connection between networks. These networks are connected by a common set of protocols, forming a logically single huge international network.

[0061] Wide area network (WAN): also known as external network or public network. WAN is a remote network connecting computers in different local area networks or metropolitan area networks. WAN usually spans a large physical range, covering a range from tens of kilometers to thousands of kilometers. WAN is not equal to the Internet.

[0062] Local area network (LAN): LAN generally covers a range of several thousand square kilometers, and its characteristics such as convenient installation, cost saving, and easy expansion make it widely used in various offices. LAN can realize functions such as file management, application software sharing, and printer sharing. In the use process, by maintaining the network security of LAN, the data security can be effectively protected, and the normal and stable operation of LAN network can be ensured.

[0063] Virtual LAN (VLAN): VLAN is a group of logical devices and users, which are not limited by physical location, and can be organized according to functions, departments, and applications. The communication between them is as if they are in the same network segment. Therefore, it is named virtual LAN. Since the switch port has two VLAN attributes, one is VLAN identification (ID), and the other is VLAN tag (TAG), which correspond to setting VLAN tag (VLAN TAG) for data packets (or service messages) and allowing data packets (or service messages) with VLAN TAG to pass through, respectively. Different VLAN ID ports can build VLAN by allowing VLAN TAGs.

[0064] Selective VLAN (SVLAN): also known as outer VLAN, is an extension technology of VLAN based on QinQ (802.1Q-in-802.1Q). By stacking two 802.1Q packet headers in the Ethernet frame, the number of VLANs is effectively expanded, so that the number of VLANs can reach up to 4096x4096.

[0065] Customer VLAN (CVLAN): defined by 802.1ad, in a VLAN, add a layer of QinQ tag, become a double-tag VLAN, the outer layer is SVLAN, and the inner layer is CVLAN.

[0066] Gateway: also known as network connector or protocol converter. Gateway realizes network interconnection at the network layer and above, is a complex network interconnection device, and is used only for network interconnection of two high-layer protocol different networks. Gateway can be used for wide area network interconnection and local area network interconnection. Gateway is a computer system or device that acts as a translation. Used between two systems with different communication protocols, data formats or languages, or even completely different architectures, gateway is a translator. Unlike the bridge which simply transmits information, the gateway repackages the received information to meet the needs of the destination system.

[0067] Dynamic Host Configuration Protocol (DHCP) protocol: DHCP allows a server to dynamically assign IP addresses and configuration information to a client or host.

[0068] Broadband remote access server (BRAS): A BRAS routes traffic to a digital subscriber line access multiplexer (DSLAM) within an internet service provider's network. For example, the BRAS is located within the service provider's core network and aggregates user sessions within the access network.

[0069] The following is an illustrative description of the scenarios in which the embodiments of the present application can be applied, with reference to the accompanying drawings.

[0070] like Figure 1 As shown, Figure 1 A structural diagram of a metropolitan area network provided for this application. The metropolitan area network 100 includes: an optical network terminal (ONT) 101, an optical line terminal (OLT) 102, an aggregation network 103, a BRAS 104, a core router (CR) 105 and an edge data center (EDC) 106. For example, ONT 101 refers to the end unit of fiber to the home (FTTH), commonly known as "optical modem", which is used for end users. OLT 102 is located at a location provided by the operator's network (such as a building's corridor, a computer room, a dedicated communication box on the roadside, etc.). The aggregation network 103 refers to a communication network including one or more routing switches. BRAS 104 is used to connect routing traffic to the Internet service provider's network over a digital subscriber line, such as Figure 1 EDC106 in.

[0071] Figure 1 The MAN shown is a typical north-south tree structure. OLT 102 converges through layers of traffic to the MAN egress (CR 105). In most cases, OLT 102 uses SVLAN+CVLAN (hereinafter referred to as S+C) to tag specific services for specific users. Aggregation network 103 ignores the inner CVLAN and simply forwards OLT 102 traffic to BRAS 104 based on the SVLAN. This means that the S+C packets on a single BRAS 104 port must be unique. BRAS 104 terminates the Point-to-Point Protocol over Ethernet (PPPOE) and then forwards the traffic to EDC 106 via CR 105.

[0072] With the continuous development of technology, in Figure 2 the traditional metropolitan area network shown in the prior art, the present application provides a new type of communication system, as shown in Figure 2 , Figure 1 a schematic structural diagram of a communication system provided by the present application Figure 2 . The communication system 200 includes: an ONT 201, an edge compute gateway (ECGW) 202, an edge cloud 203, a transmission network 204, and an Internet 205.

[0073] In Figure 2 , the ONT 201 is only provided for this embodiment and should not be understood as including only one ONT in the communication system 200. The communication system 200 can also include a larger number of ONTs. The ONT can refer to an optical modem or other optical network equipment accessing the communication system 200, which is not limited by the present application. In this article, the ONT 201 can also be referred to as a home gateway. The home gateway (ONT 201) provides a two-layer based two-layer private line to the edge cloud 203 on the basis of providing ordinary Internet services for users, which extends to the ECGW 202 deployed in the edge cloud.

[0074] As shown in Figure 2 , the ONT 201 is configured with dual-WAN ports: WAN1 and WAN2. In Figure 2 ①, WAN1 is the original Internet access channel, and the Internet access traffic of the home network built by the ONT 201 can pass through this Internet access channel provided by WAN1 to directly access the Internet 205 and access the services provided by the Internet 205. In Figure 2 ②, WAN2 is a bridging channel for the ONT 201 to access the edge cloud 203 and the Internet, and the home network built by the ONT 201 accesses the edge cloud 203 through this channel provided by WAN2, i.e. the above-mentioned two-layer private line to the edge cloud 203 based on two layers, which is also referred to as a two-layer tunnel between the ONT 201 and the edge cloud 203. The two-layer tunnel can be used to transmit service packets between the ECGW 202 and the edge cloud 203.

[0075] The ECGW 202 can also be referred to as an enhanced gateway, a service gateway, a converged edge gateway, an edge gateway, or other names. A network enhanced residential gateway (NERG) instance on the ECGW 202 is also configured with an uplink WAN port that is connected to a user plane (UP) of a BRAS, and traffic of a cloud service on the edge cloud to the Internet passes through the channel provided by the uplink WAN port. In this embodiment, the ECGW 202 provides a three-way splitting function, i.e., traffic splitting to a user, to the edge cloud, and to the external network. For example, the ECGW 202 provides a user with a two-layer or three-layer based cloud-in-service access experience to the edge cloud 203, and provides the user with a cloud-in-service fast access service to the external network (such as the Internet 205).

[0076] In this embodiment, the edge cloud 203 splits the backhaul traffic of the ECGW 202 to include local network traffic of the edge cloud 203 to the home network to the ONT 201 and uplink traffic of the edge cloud 203 to the Internet 205 to pass through the PPPOE export channel (i.e., the channel provided by the uplink WAN port of the ECGW 202).

[0077] In this embodiment, the Internet 205 splits the backhaul traffic of the ECGW 202 to include traffic to the edge cloud 203 (such as uplink traffic of a cloud computer) and traffic to the home network.

[0078] For the uplink channel provided by the WAN 1 in the ONT 201 and the uplink channel provided by the WAN 2 in the ONT 201 and the ECGW WAN (the uplink WAN port of the ECGW 202), in order to improve the reliability of the traffic between the ONT 201 and the Internet 205, an example is provided in this embodiment, in which the WAN 1 in the ONT 201 and the ECGW WAN are configured in a dual-active mode. The dual-active mode means that the Internet export of the ONT 201 and the ECGW 202 are both active (for example, two PPPOE domain names are used), and the home uplink traffic passes through the ONT WAN 1, and the service uplink in the edge cloud passes through the ECGW WAN (the ONT 201 can also access the Internet through the WAN 2).

[0079] In another example, the WAN 1 in the ONT 201 and the ECGW WAN are configured in a master-slave mode. The master-slave mode means that the WAN 1 of the ONT 201 is not active by default, and all uplink traffic passes through the ECGW WAN, and only when the ECGW WAN fails, the uplink traffic of the ONT 201 is switched back to the WAN 1 of the ONT 201.

[0080] The above two feasible examples are only optional manners provided by the embodiment, and should not be understood as a limitation to the present application.

[0081] As shown in Figure 2 , the transmission network 204 includes a leaf-spine network and a core router (CR), and the leaf-spine network includes a spine switch (Spine), an access-leaf switch (A-Leaf), a service-leaf switch (S-Leaf), and the like. As the A-Leaf is used to access the traffic transmitted by the ONT 201 via the OLT to the Spine, one S-Leaf is used to access the online traffic of the ECGW WAN to the Spine, and another S-Leaf is used to access the online traffic of the BRAS-UP to the Spine, the Spine is used to transmit the traffic converged by multiple channels to the CR, and the CR is used to send the traffic to the Internet 205.

[0082] Based on the above, Figure 3 , the embodiment of the present application introduces another home network (secondary home network) in addition to the home network supported by the ONT 201, to further illustrate the communication system provided by the embodiment of the present application, as shown in Figure 3 , a structure of a communication system provided by the present application Figure 2 . The communication system 200 includes an ONT 201a, an ONT 201b, an ECGW 202, an edge cloud 203, and an Internet 205. Figure 3

[0083] Among them, the ONT 201a and the ONT 201b use the same user identity, that is, the primary home network supported by the ONT 201a and the secondary home network supported by the ONT 201b can be considered as different sites used by one user. In some cases, the ONT 201a is also called a first home gateway or a primary home gateway, and the ONT 201b is also called a second home gateway or a secondary home gateway.

[0084] Compared with Figure 3 , the edge cloud 203 included in the communication system 200 shown in Figure 3 includes L2 cloud services and L3 cloud services. The L3 cloud service and the L2 cloud service belong to different bridge domains (BD).

[0085] Among them, the device providing hardware support for the L2 cloud service is a first edge cloud device 2031, and the device providing hardware support for the L3 cloud service is a second edge cloud device 2032.

[0086] In Figure 3 ​In the embodiment, the ECGW 202 accesses the Internet 205 through the BR0 gateway, the ONT 201a accesses the Internet 205 through the BR1 gateway, and the ONT 201b accesses the Internet 205 through the BR2 gateway.

[0087] In some possible cases, the BR0 gateway, also referred to as the ECGW 202, is a first bridging interface or a first gateway interface for connecting the Internet, the BR1 gateway, also referred to as the ONT 201a, is a second bridging interface or a second gateway interface for connecting the Internet, and the BR2 gateway, also referred to as the ONT 201b, is a third bridging interface or a third gateway interface for connecting the Internet.

[0088] From the user service layer, Figure 2 The communication system 200 shown has the following features.

[0089] Feature 1: The L2 cloud services in the main home network, the secondary home network, and the edge cloud are in one broadcast domain (BD), and different devices in the BD use different addresses in the same network segment. In the embodiment, the network formed by the L2 cloud services in the main home network, the secondary home network, and the edge cloud is also referred to as a large two-layer networking.

[0090] For example, for the family broadband service, the studio broadband service, and the like, the BR0 gateway can be used as a first bridging interface or a first gateway interface for connecting the Internet, the BR1 gateway can be used as a second bridging interface or a second gateway interface for connecting the Internet, and the BR2 gateway can be used as a third bridging interface or a third gateway interface for connecting the Internet. Figure 3 The communication system 200 shown implements multi-site two-layer networking, and thus implements the use of the same network segment for the multiple physical houses and the L2 services in the edge cloud in one broadcast domain under one username.

[0091] Feature 2: The multi-site of one user and the L2 cloud services form a local area network that supports multiple L3 cloud services. The BR0 gateway can be routed to the Internet and the L3 cloud services in the edge cloud 203, and the host on the ONT of each physical house can also be routed to the Internet through the BR1 gateway or the BR2 gateway. In some optional cases, the BR0 gateway can also be referred to as NERG.BR0, the BR1 gateway can also be referred to as ONT.BR1, and the BR2 gateway can also be referred to as ONT.BR2.

[0092] Feature 3: The large local area network of a single user uses a private network address, and thus the service packets of all the gateways (the BR0 gateway, the BR1 gateway, and the BR2 gateway) out of the Internet need to be subjected to NAT or network address port translation (NAPT) conversion. In order to make independent address planning for the large two-layer networking and the L3 cloud services, the ECGW 202 accessing the L3 cloud services also needs to subject the service packets to NAT or NAPT conversion.

[0093] NAT refers to a process of converting IP address in the header of a service message to another IP address, mainly used to realize the function of internal network (private IP address) accessing external network (public IP address). NAPT can hide small and medium-sized network behind a legal IP address, and map internal connection to a single IP address in external network.

[0094] The above Figure 2 and Figure 3 are only examples of communication systems provided by embodiments of the present application, and should not be construed as limiting the present application. The following describes the scenarios to which the communication method provided by the present application is applied, based on the communication system shown in Figure 4 and Figure 4 , as shown in Figure 3 , and Figure 2 is a structural diagram of a communication system provided by the present application. Figure 3 The communication system comprises an ONT 401, an NERG 402, a primary home network 403, a secondary home network 404, an L2 cloud service, an L3 cloud service, and the Internet.

[0095] The NERG is an instance of an edge computing gateway of a user, and the instance can be a virtual device for realizing hardware functions, which is also realized by hardware. Exemplarily, an edge computing gateway (ECGW) component can comprise one or more NERG instances, such as an ECGW component comprising 4K-8K NERG instances. The specific implementation of other components in the communication system can refer to the description of the foregoing Figure 4 or Figure 2 to Figure 4 , which will not be described here.

[0096] Please refer to Figure 4 , the following connections are all service-level connections: for example, L2 native ETH, L2 S+C, IPOE (IP over Ethernet), PPPOE session, etc.; a single user comprises 7 service-level connections.

[0097] ①, the LAN interface (ETH, WIFI) of the ONT 401 is connected to the devices of the home network.

[0098] ②, the WAN1 interface of the ONT is the Internet exit of the home network, which is connected to the BRAS through an L3 session (PPPOE / IPOE) and indirectly connected to the Internet.

[0099] ③, the L2 cloud service connected to the NERG instance (NERG 402) is connected to the WAN2 interface of the ONT.

[0100] IV. NERG.WAN1 is the Internet exit of the user's local area network on the edge cloud, and is connected to the BRAS through an L3 session (PPPOE / IPOE) and indirectly to the Internet.

[0101] V. NERG.WAN2 is connected to the L2 cloud service.

[0102] VI. NERG.WAN3 is connected to the L3 cloud service through an L3 session. For example, the NERG 402 can establish an L3 session with the L3 cloud service through PPPOE, IPOE, or virtual routing and forwarding (VRF).

[0103] VII. The NERG.LAN2 interface is connected to another site (the secondary home network 404) of the user.

[0104] Because the local area network of each user is E2E (end to end) isolated, the local area network address of each user can use the same planning, and when the address segment of the local area network of the user is modified by the user (for example, the default 192.168.16.1 / 24 is modified to 192.168.0.1 / 24), it is also recommended to modify the address segment of the L2 cloud service and the secondary site (the secondary home network 404) according to the same offset. The address planning is shown in Table 1 below.

[0105] Table 1 Address planning of the service layer

[0106]

[0107] In some possible examples, the L2 cloud service is also referred to as an L2 cloud service or an L2 edge cloud service, and the L3 cloud service is also referred to as an L3 cloud service, an L3 edge cloud service, or another cloud service, and the present application does not limit this.

[0108] On the basis of Figure 2 to Figure 4 , the present application provides a connection example of a port list of an ONT and a NERG, as shown in Table 2 and Table 3 below.

[0109] Table 2 NERG meaningful port list

[0110]

[0111] In Table 2, the NERG can be the NERG 402 shown in Figure 5 . The LAN1 of the NERG 402 in the L2 BD is connected to the WAN2 of the ONT 401 (i.e., the ONT.WAN2).

[0112] Table 3 ONT meaningful port list

[0113]

[0114] The above Table 2 and Table 3 are only examples provided by the embodiment, and should not be understood as limitation to the present application.

[0115] The communication system shown in Figure 5 The communication method provided by the present application is exemplarily described as follows. Figure 1 as shown, Figure 5 The flow of the communication method provided by the present application is shown in Payload The enhanced gateway can be the aforementioned NERG instance, or can be an ECGW, and the first home gateway can be the aforementioned ONT (such as the ONT 201, the ONT 201a or the ONT 201b). The first home gateway and the enhanced gateway each support one routing WAN port to connect to the external network (Internet), and the first home gateway and the enhanced gateway each support PPPoE dialing or DHCP Client to obtain the IP address of the WAN port from the BRAS.

[0116] Exemplarily, the enhanced gateway supports PPPoE dialing, and the home supports DHCP Client to obtain the IP address of the WAN port from the BRAS.

[0117] In the embodiment, the first home gateway and the enhanced gateway are deployed in a distributed manner, and each assigns an intranet IP address to the local host, and maintains the two gateways in one intranet address segment, i.e., the first home gateway and the enhanced gateway are in one broadcast domain.

[0118] Please refer to SIP = 0 The communication method provided by the embodiment of the present application includes the following S501 to S504.

[0119] S501, the enhanced gateway configures the first IP address for the enhanced gateway.

[0120] Exemplarily, the range of the entire intranet address is preset on the enhanced gateway, such as 192.168.0.0 / 20, and 192.168.0.0 / 20~192.168.15.0 / 20 can be divided into 16 sub-segments. The 16 sub-segments can be used by one enhanced gateway and 15 first home gateways to form a large two-layer intranet.

[0121] S502, the first home gateway sends a first request to the enhanced gateway.

[0122] Corresponding to the process of S502, the enhanced gateway receives the first request of the first home gateway.

[0123] The first request is used to indicate the allocation of a network address for the first home gateway. The network address includes information such as a DHCP Server address, a host address pool, and a mask.

[0124] For example, when the first home gateway is started, a broadcast is performed in the local area network, and a local DHCP Server address and an address pool range that can be allocated for local users of the first home gateway are obtained from the enhanced gateway. For example, the DHCP Server is 192.168.0.1, the network mask is 20 bits, and the address pool range is 192.168.0.2-192.168.0.254.

[0125] For example, the payload of the message (the first request) broadcast by the first home gateway can be as shown in Table 4.

[0126] Table 4

[0127] DIP = 0 SMAC = BR1_MAC DMAC = FF Payload SIP = BR1_IP

[0128] In the table, SIP is a source IP address (source IP, SIP), DIP is a destination IP address (destination IP, DIP), SMAC is a source MAC address (source MAC, SMAC), and DMAC is a destination MAC address (destination MAC, DMAC). BR1_MAC can be the MAC address of the first home gateway.

[0129] S503, the enhanced gateway sends a first message to the first home gateway according to the first request.

[0130] The first message includes a second IP address allocated for the first home gateway, and the second IP address and the first IP address are in the same broadcast domain.

[0131] For example, the payload of the first message can be as shown in Table 5.

[0132] Table 5

[0133]

[0134]

[0135] In the table, BR0_IP is the IP address of the enhanced gateway, BR0_MAC is the MAC address of the enhanced gateway, and BR1_MAC is the MAC address of the first home gateway.

[0136] Exemplarily, after receiving the broadcast (the first request) of the first home gateway, the enhanced gateway judges the received information: if the information reported by the first home gateway is within the subnet range set by the enhanced gateway and is not used by other first home gateways, the enhanced gateway accepts and records the information reported by the first home gateway; otherwise, the enhanced gateway allocates a more reasonable data (DHCP Server address, mask length, address pool range, etc.) to the first home gateway within the subnet segment recorded by the enhanced gateway, and responds to the first home gateway through layer 2 unicast.

[0137] S504, the first home gateway sends a first response to the enhanced gateway.

[0138] Corresponding to the process of S504, the enhanced gateway receives the first response of the first home gateway.

[0139] The first response indicates that the first home gateway has configured a second IP address.

[0140] Exemplarily, after receiving the first message of the enhanced gateway, the first home gateway refreshes local data if necessary. Then, the first home gateway replies to the enhanced gateway through layer 3 unicast, such as sending a first response to the enhanced gateway, so that the enhanced gateway completes the synchronization and update of the data.

[0141] For example, the payload of the first response can be as shown in Table 6.

[0142] Table 6

[0143] DIP = BR0_IP SMAC = BR1_MAC DMAC = BR0_MAC Figure 6 Figure 6

[0144] Wherein, BR0_IP is the IP address of the enhanced gateway, BR1_IP is the IP address of the first home gateway, BR0_MAC is the MAC address of the enhanced gateway, and BR1_MAC is the MAC address of the first home gateway.

[0145] In order to enable the transmission of control signaling and other messages between the enhanced gateway and the first home gateway, in the embodiment, the first home gateway can report local data (the contents of IP address and MAC address in the data can refer to Table 6 described above) to the enhanced gateway for synchronization in a timely manner, and the enhanced gateway responds to the reported data (the contents of IP address and MAC address in the response can refer to Table 5 described above) to maintain the heartbeat. That is, the first home gateway establishes a heartbeat connection between the second WAN port (WAN2) and the enhanced gateway, and the heartbeat connection is used to synchronize the status of the first home gateway and the enhanced gateway.

[0146] Next, the communication method provided by the embodiment of the application will be described in detail with reference to the accompanying drawings, such as Figure 2 as shown in Figure 6A flowchart of a communication method provided in the present application Figure 6 . In Figure 2 to Figure 4 , a first WAN port (WAN1) in the first home gateway is connected to the Internet access device, and a second WAN port (WAN2) is connected to the enhanced gateway. The enhanced gateway is also connected to the first edge cloud device. As to Figure 3 , the description of the devices can refer to the foregoing Figure 5 , which will not be repeated here.

[0147] The first edge cloud device provided in the embodiments of the present application can be used to support the implementation of the functions corresponding to the L2 cloud service in the foregoing Figure 6 . For example, by using the rich machine room facilities, the electronic devices such as servers in these machine rooms having the functions of computing, storage or network transmission are transformed into edge clouds to obtain the advantage of "edge computing" for mobile operators. Alternatively, the first edge cloud device can also refer to the electronic devices that are idle in the home network, such as servers that have not been used for a long time, hardware devices with low performance or other devices.

[0148] In the embodiments, the enhanced gateway, the first home gateway and the first edge cloud device are in the same broadcast domain, which can refer to the description in Figure 7E , which will not be repeated here.

[0149] Please refer to Figure 6 , the communication method provided in the embodiments of the present application includes the following S601 to S605.

[0150] S601, the first home gateway sends a first service packet to the Internet through a first WAN port (WAN1).

[0151] S602, the first home gateway sends a second service packet to the enhanced gateway through a second WAN port (WAN2).

[0152] Corresponding to the process of S601, the enhanced gateway receives the second service packet of the first home gateway.

[0153] For example, the second service packet carries a user identifier supporting the use of the broadcast domain. For example, the user identifier refers to a user ID or a hash value obtained by hashing the user ID.

[0154] After the enhanced gateway receives the second service packet, the enhanced gateway parses the second service packet to obtain a destination MAC address.

[0155] If the destination MAC address in the second service packet is the MAC address of the first edge cloud device, S603 is performed; if the destination MAC address in the second service packet is the MAC address of the first bridge interface (BR0 gateway), S604 is performed.

[0156] In some possible cases, a second layer tunnel is established between the enhanced gateway and the first home gateway, and the second layer tunnel is used to transmit service packets between the enhanced gateway and the first home gateway. During the service packet transmission process of the second layer tunnel, the packet header of the service packet can include tunnel ID and session ID information, which are used to identify different tunnels and sessions. Packets with the same tunnel ID and different session IDs are multiplexed on the same tunnel. For the labels that can be used in the second layer tunnel, refer to the description of Table 7 and Table 7 is not described here. Figure 4

[0157] S603, the enhanced gateway sends a second service packet to the first edge cloud device.

[0158] For example, the second service packet can carry the MAC address of the first edge cloud device. Alternatively, the second service packet carries the IP address of the cloud service provided by the first edge cloud device.

[0159] S604, the enhanced gateway sends the second service packet to the Internet.

[0160] In one possible example, if the IP address carried in the second service packet is a private IPv4 address allocated in the Internet (there is no address in the Internet that is the same as the IPv4 address), the enhanced gateway can directly send the second service packet to the Internet.

[0161] In another possible example, if the IP address carried in the second service packet is an IP address (IPv4 address or IPv6 address) allocated in the broadcast domain, the enhanced gateway can also perform NAT or network address port translation (NAPT) on the second service packet before sending the second service packet.

[0162] NAT refers to the process of converting the IP address in the header of the service packet to another IP address, and is mainly used to realize the function of accessing the internal network (private IP address) to the external network (public IP address). NAPT can hide a small and medium-sized network behind a legal IP address, and map internal connections to a single IP address in the external network. NAPT can further improve the accuracy of the converted address on the basis of NAT by also converting the port address. The above two possible examples are described by taking IP address conversion as an example, but in some other possible examples, address conversion can also be applied to MAC address or port, etc., which is not limited in the present application.

[0163] ​For the process that the first home gateway accesses to the edge cloud, the first home gateway, the enhanced gateway and the first edge cloud device are arranged in the same broadcast domain, so that the first home gateway, the enhanced gateway and the first edge cloud device are in a layer 2 network, thereby providing the user of the first home gateway with an in-cloud service access experience to the edge cloud.

[0164] As can be known from the content of S602 to S604, in the embodiment, the enhanced gateway can identify the destination MAC address of the service message sent by the first home gateway, and send the service messages with different MAC addresses to different destination devices, such as the first edge cloud device or the Internet, so that the enhanced gateway can randomly select the in-cloud service message in the data flow, that is, all the online traffic of the first home gateway does not need to be connected to the cloud, thereby avoiding the problem of insufficient performance of the first edge cloud device caused by the fact that all the service messages sent by the first home gateway to the enhanced gateway need to be connected to the cloud, and realizing the shunting function of the online traffic of the first home gateway in the enhanced gateway.

[0165] In an optional implementation, the first home gateway can also receive the response service message sent by the Internet through the first WAN port (WAN1), and the response service message carries the IP address of the first home gateway as the destination IP address.

[0166] As can be known from the content of S601, S602 and S604, in the process that the first home gateway accesses to the Internet, the first home gateway can not only transmit online traffic through the first WAN port (WAN1), but also transmit online traffic through the second WAN port (WAN2) via the enhanced gateway, thereby avoiding the problem of communication interruption between the first home gateway and the Internet caused by the failure or abnormality of the enhanced gateway, and being beneficial to improving the communication reliability of the first home gateway.

[0167] It is worth noting that, although Figure 6 the service messages sent by S603 and S604 in the embodiment are different, in some feasible cases, the effective data carried in the second service message sent by the enhanced gateway to the Internet and the effective data carried in the service message sent by the first home gateway to the Internet can be the same, and the second service message is used herein to exemplarily illustrate the data accessing to the Internet, and should not be understood as a limitation on the present application. For example, the effective data carried in the first service message sent by the first home gateway through the first WAN port (WAN1) is data 1, and the effective data carried in the second service message sent by the enhanced gateway to the Internet is also data 1.

[0168] In the following, the traffic forwarding process in the enhanced gateway provided by the present application will be exemplarily explained based on the embodiments shown in Figure 7A to Figure 7D and Figure 7A , in combination with Figure 7A .

[0169] Figure 6 The flowchart of the first traffic forwarding method provided in the present application is shown in the following figure, Figure 7A The S601-S603 in the figure can refer to the foregoing Figure 2 description, which will not be repeated here. Please refer to Figure 7A The traffic forwarding method provided by the embodiments of the present application further includes the following S6061-S6063.

[0170] S6061, the first edge cloud device sends a first set of response service packets to the enhanced gateway.

[0171] Corresponding to the process of S6061, the enhanced gateway receives the first set of response service packets sent by the first edge cloud device.

[0172] The first set of response service packets is determined by the first edge cloud device according to the second service packet in the foregoing S603. The first set of response service packets can include one or more service packets.

[0173] For example, the first set of response service packets is the service packet output after the execution of the L2 cloud service provided by the first edge cloud device. For example, the cloud service provided by the first edge cloud device can be cloud computing, cloud desktop, cloud storage, hybrid cloud server, or other cloud services, etc., which are not limited by the present application.

[0174] S6062, the enhanced gateway sends a sixth service packet in the first set of response service packets to the first home gateway.

[0175] Corresponding to the process of S6062, the first home gateway receives the sixth service packet.

[0176] For example, the sixth service packet refers to a packet set containing one or more service packets, such as a data stream. The destination IP address of the sixth service packet is the IP address of the first home gateway.

[0177] S6063, the enhanced gateway sends an online service packet in the first set of response service packets to the Internet.

[0178] Corresponding to the process of S6063, the Internet receives the online service packet.

[0179] The online service packet refers to a packet set containing one or more service packets, such as a data stream. The difference between the online service packet and the sixth service packet is that the destination IP address of the data in the online service packet is the IP address of the target device in the Internet.

[0180] The specific process of S6061-S6063 is described above Figure 7BThe third of the above provides a feasible specific example: the traffic received by the ECGW 202 from the Internet 205 is partly forwarded by the ECGW 202 to the edge cloud 203 and partly forwarded by the ECGW 202 to the ONT 201.

[0181] It is worth noting that, in the above Figure 7B In the embodiment shown, S6062 and S6063 exist at the same time, but in some optional manners, S6062 and S6063 can also exist alternatively, which is not limited in the application.

[0182] In the embodiment of the application, the enhanced gateway can forward the traffic from the edge cloud, realizing the role of traffic splitting at the enhanced gateway, avoiding the problem that all the traffic of the edge cloud can only be transmitted in one direction, and being conducive to improving the communication stability of the user in the first home gateway.

[0183] Figure 6 The flowchart of the second traffic forwarding method provided by the application is shown in Figure 7B S601 to S603 in the above Figure 2 are described above and will not be repeated here. Please refer to Figure 7B The traffic forwarding method provided by the embodiment of the application further includes the following S6071 to S6073.

[0184] S6071, the Internet sends a second group of response service packets to the enhanced gateway.

[0185] Corresponding to the process of S6071, the enhanced gateway receives the second group of response service packets from the Internet.

[0186] The second group of response service packets is determined by the device in the Internet according to the second service packet in S604. The second group of response service packets can include one or more service packets. The device in the Internet can include but is not limited to: an application server, a cloud server, a user device, a game server or other types of devices, which are not limited in the application.

[0187] For example, the second group of response service packets is the service packet generated or obtained by one or more service providers in the Internet in response to the second service packet.

[0188] S6072, the enhanced gateway sends a seventh service packet in the second group of response service packets to the first edge cloud device.

[0189] For example, the seventh service packet refers to a packet set containing one or more service packets, such as a data stream. The destination IP address of the data in the seventh service packet is the IP address of the first edge cloud device.

[0190] S6073, the enhanced gateway sends an eighth service packet in the second group of response service packets to the first home gateway.

[0191] The eighth service packet refers to a data stream containing one or more service packets. The destination IP address of the data in the eighth service packet is the IP address of the host accessing the Internet through the first home gateway. The difference between the eighth service packet and the seventh service packet is that the destination IP addresses are different.

[0192] The specific processes of S6071 to S6073 above, the foregoing Figure 3 provides a feasible specific example: the traffic from the Internet 205 received by the ECGW 202 is partially forwarded by the ECGW 202 to the edge cloud 203, and the other part is forwarded by the ECGW 202 to the ONT 201.

[0193] It is worth noting that in the embodiment shown in Figure 3 , S6072 and S6073 exist at the same time, but in some optional ways, S6072 and S6073 can also exist alternatively, and the present application does not limit this.

[0194] In the embodiment of the present application, the enhanced gateway can forward the traffic from the Internet, realizing the role of traffic splitting at the enhanced gateway, avoiding the problem that all Internet traffic must pass through the edge cloud for transmission, and being conducive to improving the communication stability of the user (host) in the first home gateway.

[0195] In an optional implementation, the foregoing enhanced gateway is also connected with a second home gateway, and the second home gateway is also in the broadcast domain where the foregoing first home gateway, enhanced gateway, and first edge cloud device are located, such as the first home gateway referring to Figure 3 ONT 201a, the second home gateway referring to Figure 3 ONT 201b, the enhanced gateway referring to the ECGW 202, and the first edge cloud device referring to the first edge cloud device 2031 corresponding to the L2 cloud service. The content of each device in the same broadcast domain can refer to the foregoing description of Figure 7C , which will not be described here.

[0196] In combination with the communication system provided in Figure 7C and the examples of the present implementation, the traffic forwarding process provided by the present application is exemplarily described, Figure 3 the flowchart of the third traffic forwarding method provided by the present application. Please refer to Figure 3 , the traffic forwarding method provided by the present application further includes the following S6081 to S6084.

[0197] S6081、The second home gateway sends a third service packet to the Internet through WAN3.

[0198] S6082、The second home gateway sends a fourth service packet to the enhanced gateway through WAN4.

[0199] Corresponding to the process of S6082, the enhanced gateway receives the fourth service packet of the second home gateway.

[0200] The same point between the fourth service packet and the second service packet sent by the first home gateway to the enhanced gateway is that the destination MAC address in the fourth service packet and the second service packet is the MAC address of the first bridge interface (BR0.MAC). The difference between the fourth service packet and the second service packet is that the second service packet is sent by the first home gateway and the fourth service packet is sent by the second home gateway, that is, the two service packets are sent to the enhanced gateway by different home gateways.

[0201] The enhanced gateway parses the fourth service packet to obtain the destination MAC address. If the destination MAC address in the fourth service packet is the MAC address of the first edge cloud device, S6083 is performed; if the destination MAC address in the fourth service packet is the MAC address of the first bridge interface, S6084 is performed.

[0202] S6083、The enhanced gateway sends the fourth service packet to the first edge cloud device.

[0203] Corresponding to the process of S6083, the first edge cloud device receives the fourth service packet sent by the enhanced gateway.

[0204] S6084、The enhanced gateway sends the fourth service packet to the Internet.

[0205] Corresponding to the process of S6084, the Internet receives the fourth service packet sent by the enhanced gateway.

[0206] Optionally, before the enhanced gateway sends the fourth service packet, the fourth service packet can also be subjected to NAT or Network Address Port Translation (NAPT).

[0207] The specific process of S6081 to S6084 above, the foregoing Figure 3 A feasible specific example is provided: the traffic from the ONT 201b (secondary home intranet) received by the ECGW 202 is partly forwarded by the ECGW 202 to the L2 cloud service and partly forwarded by the ECGW 202 to the Internet.

[0208] In the embodiment of the present application, the enhanced gateway can forward the traffic from the secondary home intranet, realize the role of traffic splitting in the enhanced gateway, avoid the problem that all traffic must be transmitted through the edge cloud service, and be beneficial to improving the communication stability of the user in the first home gateway.

[0209] In an optional implementation, the foregoing enhanced gateway is further connected with a second edge cloud device, which is not located in the broadcast domain where the foregoing first home gateway, enhanced gateway and first edge cloud device are located. For example, the first home gateway refers to the ONT 201a in Figure 3 , the second edge cloud device refers to the L3 cloud service in Figure 3 , the enhanced gateway refers to the ECGW 202, and the first edge cloud device refers to the L2 cloud service. For the session establishment process between the second edge cloud device and the enhanced gateway, refer to the foregoing related content in Figure 7D , which will not be repeated here.

[0210] In combination with the communication system provided in Figure 7D and the examples of the present implementation, the traffic forwarding process provided in the present application is exemplarily described as follows, Figure 6 , a flowchart of a fourth traffic forwarding method provided in the present application, Figure 7D , S601 to S603 can refer to the foregoing description in Figure 7A to Figure 7D , which will not be repeated here. Please refer to Figure 4 , the traffic forwarding method provided in the embodiment of the present application further includes the following S6091 to S6093.

[0211] S6091, the first home gateway sends a fifth service packet to the enhanced gateway.

[0212] Corresponding to the process of S6091, the enhanced gateway receives the fifth service packet of the first home gateway.

[0213] If the destination MAC address in the fifth service packet is the second edge cloud device, S6092 is performed; if the destination MAC address in the fifth service packet is the MAC address of the first bridge interface, S6093 is performed.

[0214] S6092, the enhanced gateway sends the fifth service packet to the second edge cloud device.

[0215] Corresponding to the process of S6092, the foregoing second edge cloud device receives the fifth service packet sent by the enhanced gateway.

[0216] The fifth service packet has a destination IP address of the second edge cloud device. For example, the enhanced gateway can perform NAT or NAPT on the service packet before sending the fifth service packet to the Internet. Details can be referred to the related content of S604, which will not be limited in the present application. When the destination IP address of the fifth service packet is the IP address of the second edge cloud device, the fifth service packet is also referred to as a cloud service packet.

[0217] S6093, the enhanced gateway sends the fifth service packet to the Internet.

[0218] Corresponding to the process of S6092, the Internet receives the fifth service packet sent by the enhanced gateway.

[0219] For example, the enhanced gateway can perform NAT or NAPT on the service packet before sending the fifth service packet to the Internet. Details can be referred to the related content of S604, which will not be limited in the present application.

[0220] In the embodiments of the present application, the enhanced gateway can send service packets with different IP addresses to different devices, such as the second edge cloud device (such as L3 cloud service) or the Internet, thereby realizing the role of traffic splitting in the enhanced gateway, avoiding the problem that all traffic must pass through the edge cloud service for transmission, and being conducive to improving the communication stability of users in the first home gateway.

[0221] For the specific implementation process of the above Figure 7E , on the basis of the ports shown in the ONT 401 and the NERG 402 shown in Figure 7E , a possible example is provided Figure 7E , which is a structural diagram of a service layer forwarding model provided by the present application. In Figure 7A to Figure 7E the ONT 401 shown, the ONT 401 and the NERG 402 both adopt a traffic forwarding mode to forward service packets. Figure 3

[0222] ​For example, in the ONT 401, the ONT 401 judges the destination address (DA) of the service packet in the incoming direction, such as DA = ONT.BR1 MAC?. If DA = ONT.BR1 MAC, the ONT 401 queries the flow forwarding table, and after packet editing (such as port redirection, packet header editing, etc.) of the service packet, forwards the edited service packet through the WAN1 (ONT.WAN1) of the ONT 401. If DA ≠ ONT.BR1 MAC, the ONT 401 queries the L2 table, and forwards the service packet through the bridging exit. For example, the L2 table can support SVLAN + destination MAC (DMAC) forwarding.

[0223] For another example, in the NERG 402, the NERG 402 judges the DA of the service packet in the incoming direction, such as DA = ONT.BR0 MAC?. If DA = ONT.BR0 MAC, the NERG 402 queries the flow forwarding table, and after packet editing (such as port redirection, packet header editing, etc.) of the service packet, forwards the edited service packet through the WAN1 (NERG.WAN1) or WAN3 (NERG.WAN3) of the NERG 402. If DA ≠ ONT.BR0 MAC, the NERG 402 queries the L2 table, and forwards the service packet through the bridging exit. For example, the L2 table can support SVLAN + DMAC forwarding.

[0224] In some possible cases, the L2 table described above can also support port + SVLAN + DMAC forwarding. In order to improve the adaptability of traffic forwarding, the ONT 401 and the NERG 402 can also support processing of some extended functions or protocols, such as processing of bridge protocol data unit (BPDU), and the ONT 401 and the NERG 402 can support extended functions without limitation. The flow forwarding table (L3 table) described above uses flow forwarding based on 5-tuple, and also supports packet header-based policy message, and the action after table lookup also supports port redirection, packet header editing, etc.

[0225] The above Figure 4 The above is only an example of traffic forwarding provided by the present embodiment, and should not be construed as a limitation on the present application. In order to realize traffic forwarding and communication between users and edge clouds or the Internet, the following describes the traffic forwarding of the ONT 401 and the NERG 402 in the foregoing Figure 2 to Figure 7E and Figure 8AOn the basis of the above, the gateway design of the Internet access device in the communication system is exemplarily described: in the local area network corresponding to the large two-layer networking, there are two or more L3 gateways, such as BR0 gateway, BR1 gateway and BR2 gateway. Among them, the function of accessing the Internet through the BR0 gateway is realized by the gateway export NERG.WAN1 (the WAN port of NERG used for connecting the Internet), and the function of accessing the Internet through the BR1 gateway is realized by the gateway export ONT.WAN1 (the WAN port of ONT used for connecting the Internet).

[0226] In the local area network corresponding to the large two-layer networking, the user equipment or host in the local area network needs to select a suitable gateway export to other networks. In order to avoid the problem that the failure of a single gateway causes part of the hosts in the local area network to be unable to access the Internet, the large two-layer networking can adopt the following constraint conditions.

[0227] Constraint condition 1: In the case that both Internet gateway exports (NERG.WAN1 and ONT.WAN1) are available, the local host selects the Internet interface based on the principle of proximity. For example, the host in the cloud service goes through NERG.WAN1, and the host in the home network goes through ONT.WAN1.

[0228] Constraint condition 2: In the case that the local Internet gateway export is unavailable, the local host accesses the Internet through the off-site Internet gateway export. Optionally, the host does not perceive during the process of switching the Internet gateway export.

[0229] Constraint condition 3: The interfaces of NERG.BR0 and the main and auxiliary home network ONT.BRx (such as ONT.BR1) need to be able to independently log in to the website (WEB) locally for easy maintenance.

[0230] Constraint condition 4: If the master-slave mode of the Internet gateway export is considered, only the master-slave relationship between NERG (or ECGW) and ONT is established, and the master-slave relationship between the main and auxiliary ONTs (such as ONT 201a and ONT 201b) is not considered.

[0231] The configuration states of the above BR interfaces include: active state and deactive state. Among them, the active state indicates that the forwarding and interface protocol functions are unavailable; the deactive state indicates that the interface forwarding and protocol functions are unavailable.

[0232] The running states of the BR interface include: UP state, Passive state and Down state. The UP state indicates that the local WAN interface on the VRF is UP. The Passive state indicates that the local WAN interface on the VRF is down, and can only be single-armed forwarding and used as an IP host. The Down state indicates that the BR interface enters the state after being disabled (pure bridge mode).

[0233] For example, if the NERG and the ONT internet outlet are in a dual-active mode, the default NERG.BR0 interface and the ONT.BR1 interface are in the UP state. When the ONT.WAN1 is down, the ONT.BR1 interface enters the Passive mode. When the ONT.WAN1 is restored to the UP state, the ONT.BR1 interface is restored to the UP state.

[0234] Based on the above constraint conditions and the feasible examples of the BR interface, a suggestion of a service layer routing design is provided in combination with the table, as shown in Table 7.

[0235] Table 7: Suggestion of service layer routing design

[0236]

[0237]

[0238] The master ONT can be the home gateway, the ONT 201a and the like, the secondary ONT can be the other home gateway, the ONT 201b and the like, and the NERG can be the enhanced gateway, the ECGW 202 and the like.

[0239] For example, if the multiple ONTs and the NERG are regarded as multiple independent routers connected on a local area network, the above routing table design suggestion does not contain the ARP table item. The design principles of the routing core include the following contents.

[0240] Design principle 1: The ONT.BRx and the NERG.BR0 can both route to the internet, but the local gateway is preferred (the default route of the local out interface has a higher priority than another gateway as a next hop).

[0241] Design principle 2: The L3 cloud service is finally exported through the NERG.WAN3. If the traffic to the L3 cloud service is sent to the ONT.BRx interface, it needs to be routed and forwarded to the NERG.BR0 interface. The downlink direction of the L3 cloud service to the host in the local area network is directly forwarded by the NERG direct connection routing.

[0242] Design principle 3: the packet or service packet directly connected to the destination 192.168.16.1 / 20 network segment is also preferentially routed through the local interface, and the indirect route (NERG.BR0) to this network segment is the backup.

[0243] Design principle 4: the ONT and NERG also need to process protocol messages, and the destination address is the 127.0.0.0 / 8 network segment of each L3 interface, which needs to be received by the loopback interface for CPU processing.

[0244] Design principle 5: considering security, network segment broadcast, multicast packets, and IP broadcast are locally terminated and processed by protocols, and do not perform L3 forwarding.

[0245] It is worth noting that the above constraints, BR interface, and service layer routing design suggestions are only examples provided by the embodiment and should not be understood as the only way to implement the application. In some alternative ways, the above constraints, BR interface, and routing design suggestions can be changed according to actual conditions, such as different user needs or changes in network segments, which will not be described here.

[0246] The above Figure 1 Based on the two-layer network, the communication method provided by the embodiment of the application is introduced, and the communication method provided by the embodiment of the application will be further described in detail in combination with different deployment modes of the home gateway and the enhanced gateway, as described in the following first to third alternative implementation modes.

[0247] In the first alternative implementation mode, the home gateway and the enhanced gateway are distributed full anycast gateways.

[0248] For example, the IP address of the first bridge interface (BR0) and the IP address of the second bridge interface (BR1) are the same, and the MAC address of the first bridge interface (BR0) and the MAC address of the second bridge interface (BR1) are the same.

[0249] In one possible case, if the first bridge interface fails, the first home gateway deletes the MAC address of the first bridge interface configured by the first home gateway, such as BR0.MAC (the MAC address of NERG.BR0).

[0250] In another possible case, if the second bridge interface fails, the enhanced gateway deletes the MAC address of the second bridge interface configured by the enhanced gateway, such as BR1.MAC (the MAC address of ONT.BR1).

[0251] Figure 8A The structure of the gateway deployment design provided by the application Figure 8BThe two BR interfaces, ONT.BR1 and NERG.BR0, appear as a single logical interface to the LAN, using the same IP and MAC addresses. By default, both BR interfaces are active. If one BR interface fails, all hosts in the LAN (such as the large Layer 2 network described above) are unaware of it. Outgoing traffic from the host is routed to only one logical gateway, the IP and MAC addresses used by the two BR interfaces. Therefore, the host does not require segment routing, only the default route.

[0252] In other words, the ONT and NERG use a distributed Full Anycast gateway deployment design, and ONT.BR1 and NERG.BR0 are in active-active mode. Both BR interfaces are active, appearing as a single logical anycast interface to the LAN. For example, the IP address uses 192.168.16.1 / 20, and the MAC address uses the same MAC=A (for example, a locally valid virtual MAC calculated based on the same IP address). ARP packets from hosts within the LAN requesting the BR interface MAC address are processed locally and respond to the same MAC address. This MAC address is also configured in the local forwarding table as the BR interface MAC address.

[0253] For example, when Figure 2 When one of the BR interfaces fails, for example, when ONT.WAN1's ​​connection to the Internet is interrupted, it can be considered that ONT.BR1 interface has also failed (because ONT.BR1 is the only external network connected to ONT.WAN1). At this time, it is necessary to delete BR1.MAC on the forwarding plane so that all packets or service packets are forwarded only by the bridge.

[0254] As a feasible example, when the DHCP servers of the ONT and NERG assign addresses to hosts, they only need to use DHCP option 3 to convey the default gateway; DHCP option 33 / 121 is not required to convey the route to a specific network segment.

[0255] It is worth noting that heartbeats and a lot of information need to be transmitted between NERG and ONT, and LAN information synchronization protocol is supported for communication.

[0256] For example, the enhanced gateway deletes the MAC address of the forwarding plane in the home gateway, so that the traffic directly connected to the Internet via the home gateway is switched to the enhanced gateway, and all messages or business messages are forwarded only through the bridge channel of the enhanced gateway. That is, the Internet traffic is switched to the enhanced gateway, avoiding the problem of being unable to access the Internet due to failure of the communication pipeline directly connecting the home gateway to the Internet, which is conducive to improving the communication robustness of users' Internet access.

[0257] In the second optional implementation, the home gateway and the enhanced gateway are distributed Half Anycast gateways.

[0258] For example, the IP address of the first bridge interface (BR0) is the same as the IP address of the second bridge interface (BR1), and the MAC address of the first bridge interface (BR0) is different from the MAC address of the second bridge interface (BR1).

[0259] In a possible case, if the first bridge interface fails, the first home gateway sends a first ARP message to the hosts in the broadcast domain, and the first ARP message carries the MAC address of the second bridge interface.

[0260] In another possible case, if the second bridge interface fails, the enhanced gateway sends a second ARP message to the hosts in the broadcast domain, and the second ARP message carries the MAC address of the first bridge interface.

[0261] For example, the first ARP message and the second ARP message described above can be sent in the form of a gratuitous ARP broadcast, such as "IP=192.168.16.1 / 20 MAC=A".

[0262] Figure 8B The structure of the gateway deployment design provided in the present application Figure 8C The distributed Half Anycast gateway deployment design of the ONT and the NERG means that the two BR interfaces use the same IP address but different MAC addresses. In this way, the host also only sees one logical gateway, so the host still only needs a default route.

[0263] In Figure 8C In the example provided, when both BR interfaces are active, the ARP table entries of the logical gateway obtained by the edge cloud L2 host and the home network host are different. For example, the ARP table entry of the logical gateway obtained by the edge cloud L2 host includes "IP=192.168.16.1 / 20 MAC=A", and the ARP table entry of the logical gateway obtained by the home network L2 host includes "IP=192.168.16.1 / 20 MAC=B".

[0264] For the case where one BR interface fails, two possible processing methods are provided below.

[0265] In the first possible processing method, if one BR interface fails, the BR interface no longer intercepts ARP messages, and the other BR interface immediately sends a gratuitous ARP to all hosts in the network to declare the gateway MAC.

[0266] For example, if the heartbeat connection between the home gateway (ONT) and the enhanced gateway (NERG) is in an abnormal state, the enhanced gateway (NERG) sends an address resolution protocol (ARP message) to all hosts in the broadcast domain. The ARP message carries the MAC address of the enhanced gateway (MAC=A).

[0267] In the second possible approach, if a BR interface fails, the ONT does not immediately refresh the host ARP entry. Instead, it uses a policy message to forcefully modify the destination MAC address and then redirects traffic to another BR interface, waiting for the host's ARP entry to age before responding with an update. For example, a NERG sends an ARP request (ARP request What is MAC of 192.168.16.1) and waits for the ARP entry in the home intranet L2 host to age before redirecting the traffic to "IP=192.168.16.1 / 20MAC=B."

[0268] Exemplarily, if the first bridge interface fails, the enhanced gateway sends a first policy message to the host in the broadcast domain. The first policy message carries: the MAC address of the second bridge interface. The first policy message indicates: the Internet traffic of the host in the large Layer 2 network is forwarded through the second bridge interface.

[0269] As another example, if the second bridge interface fails, the first home gateway sends a second policy message to hosts in the broadcast domain. The second policy message carries the MAC address of the first bridge interface and instructs hosts in the large Layer 2 network to forward their internet traffic through the first bridge interface. For example, if ONT.WAN1 is in an abnormal state, the ONT sends a policy message instructing all service packets connecting the ONT to the internet to be transferred to the enhanced gateway (NERG). The policy message includes the MAC address of the first bridge interface (BR0.MAC), such as MAC=A.

[0270] like Figure 3 As shown, Figure 8D Schematic diagram of the gateway deployment design provided for this application Figure 8DWhen the BR interface fails, the processing procedure includes: after the ONT.WAN1 loses connection, the ONT.BR1 is no longer valid. At this time, in order to reduce the linkage of the NERG, the NERG.BR0 can not send the free ARP to declare the new gateway MAC, but the ONT can send a policy message, and the message received by the ONT is modified to the MAC of the NERG.BR0 interface, and then the message is bridged and forwarded to the NERG.BR0 interface through the ONT.WAN2 interface. When the ARP table entry of the host in the home network is aged, the NERG.BR0 interface answers the ARP request, and a new ARP table entry is generated on the host in the home network.

[0271] Because the MAC addresses are different, the communication link between the NERG and the ONT can use the native ETH to communicate.

[0272] It should be noted that when the two BR interfaces are active, each BR interface has its own "sphere of influence", and the edge cloud L2 host uses the NERG.BR0 interface as the gateway, and the host in the home network uses the ONT.BR1 as the exit gateway. In order to prevent the ARP table entry on the host from being incorrectly overwritten, the ARP messages sent by the NERG.BR0 and the ONT.BR1 in the home network need to be isolated from each other, and the ARP response or free ARP sent by the NERG.BR0 must be intercepted to the CPU of the ONT, and is not allowed to be sent to the host in the home network. Conversely, the same is true.

[0273] When one BR interface fails, the ARP function on the interface needs to be disabled, and the ARP message sent by the other BR interface to the local is no longer intercepted, so that the other BR interface can bear the ARP server function of the local host.

[0274] In the implementation mode, when one BR interface fails, the other BR interface takes over the uplink traffic of the host in the local area network, which avoids the problem of uplink traffic disconnection caused by the failure of the BR interface in the large L2 network, and is beneficial to improve the uplink stability of the user.

[0275] In a third optional implementation mode, the home gateway and the enhanced gateway are distributed independent gateways.

[0276] For example, the IP address of the first bridge interface (BR0) and the IP address of the second bridge interface (BR1) are different, and the MAC address of the first bridge interface (BR0) and the MAC address of the second bridge interface (BR1) are different.

[0277] In a possible case, if the connection between the second bridge interface and the Internet is interrupted, the first home gateway sends a first ACL to the hosts in the broadcast domain, the first ACL being used to indicate that the MAC address of the second bridge interface in the service message is modified to the MAC address of the first bridge interface. In addition, if the connection between the second bridge interface and the Internet is restored, the first home gateway cancels the first ACL.

[0278] In another possible case, if the connection between the first bridge interface and the Internet is interrupted, the enhanced gateway sends a second ACL to the hosts in the broadcast domain, the second ACL being used to indicate that the MAC address of the first bridge interface in the service message is modified to the MAC address of the second bridge interface. In addition, if the connection between the first bridge interface and the Internet is restored, the enhanced gateway cancels the second ACL.

[0279] The following will be described in conjunction with Figure 4 exemplary description, Figure 8D the structure diagram of the gateway deployment design provided in the present application Figure 8E For different hosts, the two BR interfaces are two independent gateways, and according to the route table matching, the service message is sent from which gateway, so when the host is allocated an address, the detailed network segment route needs to be carried through the DHCP option 121, for example, the L3 cloud service network segment needs to be sent from the NERG.BR0.

[0280] In Figure 8E , the default route to the Internet is only issued for the local BR interface as the export, and the alternative route for the off-site BR interface is not issued, mainly to avoid the switching of the route affecting the final host. If both the default routes are issued, after the local BR interface enters passive, the route table on the local host needs to be updated through the DHCP forcerenew, and the off-site BR export is adjusted to the preferred route. When the BR interface is restored to UP, the route table on the local host also needs to be updated through the similar mechanism.

[0281] When the ONT is unreachable to the Internet, the local host needs to be forced to redirect the uplink Internet message to the NERG.BR0.

[0282] As Figure 5 , Figure 2 to Figure 8E the structure diagram of the gateway deployment design provided in the present application Figure 9When the ONT.WAN1 is interrupted, the ONT.BR1 enters the passive state, and then the ONT issues an ACL to force the modification of the destination MAC of the message whose destination MAC is BR1 to NERG.BR0 MAC, and performs redirection. The source MAC is not changed, and for NERG, the message is originally sent by the home host to the NERG.BR0 interface, and the flow is forwarded by NERG through L3+NAPT.

[0283] When the ONT.BR1 recovers to the UP state, the redirection ACL is revoked.

[0284] The reason why the L3 forwarding mode is not used on the ONT to process the uplink message is that the uplink and downlink paths are inconsistent: the uplink is processed through L3 on the ONT, and through L3+NAPT on the NERG, the downlink message is processed through L3+NAPT on the NERG, and through L2 forwarding on the ONT. This will cause the inconsistency of L2 and L3 tables. In addition, it is not recommended to adjust the route on the host through the ICMP redirect, mainly because the processing of the ICMP redirect message by various operating systems is uncontrollable.

[0285] In the implementation mode, in the case of BR interface failure, a policy message is issued by the gateway, so that the traffic originally accessed to the Internet through the failed BR interface is switched to the non-failed BR interface.

[0286] The above Figure 1 The communication method provided by the embodiment of the application is introduced based on a two-layer network, and the communication method provided by the embodiment of the application will be further described in detail in combination with a communication pipe, Figure 9 The structure of a communication pipe provided by the application Figure 9 The pipe of the communication system adopts underlay / overlay separation design, and can work in a traditional metropolitan area and S-L metropolitan area, so as to reduce the workload required for planning and configuration of the metropolitan area network.

[0287] It is worth noting that in some optional modes, the pipe provided by the application can also be called a tunnel or other names, which are not limited by the application.

[0288] In Figure 9 The ECGW component includes an ECGW C face and a U face, an NCE-FAN network management (managing the ECGW U face), an FC management platform (responsible for the management of the ECGW C face virtualization base), and an ONT. The remaining components include an OLT, a metropolitan area network, a BRAS, a DCN network, an edge cloud service, a fusion edge management platform, and other management and control systems.

[0289] Please refer to Figure 10For the ONT, the online pipe of the ONT includes: connecting to the BRAS through the PPPOE1@S+C dialing connection and accessing the Internet. A feasible example is that the service message transmitted by the ONT to the BRAS is marked in the SVLAN+CVLAN (S+C) mode, wherein the SVLAN is used to identify the OLT node and the service type adopted by the ONT to access the metropolitan area network, and the CVLAN represents the user number under the OLT. For example, "SVLAN1001" represents the general Internet service of the OLT1, and "CVLAN32" represents the 32nd user under the OLT.

[0290] The user-level service flow of the pipe transmission from the ONT to the ECGW includes: the service message transmitted from the ONT to the OLT is marked in the CVLAN mode, and the service message transmitted from the OLT to the user plane (U plane) of the ECGW 202 is marked in the SVLAN+CVLAN (S+C) mode.

[0291] The service message of the pipe transmission from the ECGW to the cloud service is marked in the S+C mode, wherein the VXLAN is used for marking on the Underlaytunnel, the Userbased EVPN is used for marking on the Overlay VPN, and the virtual routing and forwarding (VRF) technology based on the L3 cloud service is used on the Overlay VPN to implement the traffic forwarding process between the ECGW and the L3 cloud service.

[0292] In the online pipe of the ECGW, the online mode of the user-level service flow includes: connecting to the BRAS through the PPPOE2@S+C dialing connection and accessing the Internet based on the U plane of the ECGW. As shown in Figure 10 , the enhanced gateway (ECGW) establishes an EVPN pipe with the Internet through the WAN port, and the EVPN pipe is used for carrying the online traffic of all users accessing the Internet through the home gateway.

[0293] As shown in Figure 10 , the structure schematic diagram of the ECGW component and the ECGW cluster provided in the present application is shown. Figure 10

[0294] In Figure 10 way 1, the ECGW component includes one C plane server (ECGW C plane or simply C plane) and one U plane board (ECGW U plane or simply U plane), and the ECGW component mainly implements the functions of the user access gateway and the edge cloud service gateway.

[0295] ​Optionally, the C-plane server can be implemented in the manner of a control plane network element, and the U-plane board can be implemented in the manner of a user plane network element. The control plane network element is configured to perform protocol processing on the service message, and the user plane network element is configured to transmit the service message.

[0296] For example, the C-plane can be used to implement the functions of DHCP-S, DNS (domain name server), PPPOE, NAPT, application level gateway (ALG), universal plug and play (UPnP), and the like included in the user access gateway; the C-plane can also be used to implement the functions of NAPT, VHOST (virtual host), and the like included in the edge cloud service gateway, wherein the VHOST includes the functions of server message block (SMB) agent, multicast DNS (mDNS), basic input / output (NETBIOS), and the like. For another example, the U-plane is used to implement the functions of SRv6 / VXLAN tunnel, EVPN L2 virtual private LAN service / virtual private wire service (VPLS / VPWS), protocol message capture and underlay, 5-tuple flow forwarding, ACL, policy message, Quality of Service (QoS) management, and the like.

[0297] In some possible manners, the ECGW component can also extend to support unified data management (UDM) functions, such as AAA client, user authority, and bandwidth control.

[0298] In another possible manner, the ECGW component can also support the three-way splitting function of the aforementioned ECGW 202, which will not be described herein.

[0299] In an optional implementation manner, the ECGW component can provide a 4K-8K user capacity, i.e., 4K-8K NERG instances, and provide a bidirectional 10M-20Mbps bandwidth for each user.

[0300] In Figure 9 In the manner 2, the ECGW component also supports a cluster organization manner composed of multiple C-planes and multiple U-planes, just as the ECGW cluster shown in the manner 2. Figure 10 The functions that can be implemented by the U-plane and the C-plane can refer to the descriptions above, and will not be described herein.

[0301] The following will be described in detail in combination with the contents of Figure 2 to Figure 8E and Figure 11 , Figure 2 the communication pipe used by the foregoing Figure 11 The structure of a communication pipe provided by the present application is shown in Figure 12 . Figure 3 The pipe model shown is the edge cloud network pipe model in the S-L metropolitan area network. First, the access side is considered. The ONT.WAN2 interface export encapsulates a single-layer CVLAN, which is converted into the corresponding S+C on the OLT. A specific SVLAN is allocated on each OLT, and 3000 users on the OLT share this SVLAN, and the CVLAN is used for user-level distinction.

[0302] On an A-L pair, the SVLAN must be unique. The A-L is mapped to a specific EVPN (the EVPN.SID is obtained by searching the BD L2 table in the VPLS mode) based on the SVLAN. The TAG mode is used, and the S+C tag is not stripped. It is extended to the designated ECGW, that is, one SVLAN (OLT) can only correspond to one ECGW component or cluster, and cannot cross the ECGW. Multiple SVLANs can be terminated on one ECGW component. After the ECGW terminates the coarse-grained EVPN, the S+C flow is connected to the corresponding NERG.LAN1 port, and enters the user-level L2 BD domain (that is, the large two-layer network or local area network or broadcast domain in the foregoing embodiment).

[0303] Similarly, the ECGW to S-L pair also uses a coarse-grained EVPN pipe to carry all the users in one SVLAN WAN3 interface. At the entrance, the NERG.WAN1 interface packet encapsulates the PPPOE / IPOE header, adds the S+C double TAG (which can be consistent with the NERG.LAN1 encapsulation), and is connected to the SVLAN-level BD domain. After searching the BD L2 table, the EVPN.SID is obtained, the EVPN SRv6 is encapsulated and sent to the S-L pair. After the S-L pair terminates the EVPN, the S+C is restored, the L2 table is searched (EDN.DX2V behavior), and the corresponding BRAS interface is sent. One SVLAN 1:1 corresponds to one ECGW and S-L pair, and does not cross the ECGW or the S-L pair.

[0304] Figure 12 The structure of a communication pipe provided by the present application is shown in Figure 12 , Figure 13 The access side (ONT.WAN2 to NERG.LAN1) pipe model is shown. As Figure 4As shown, the access side pipeline model is divided into two levels, one is the user level pipeline, and the other is the OLT level pipeline (or user group). The home network, ONT, ECGW NERG instance, and L2 cloud service all belong to the user level pipeline; A-L and ECGW coarse-grained EVPN all belong to the OLT level.

[0305] Taking a specific forwarding process as an example, for example, the TV of the home network accesses the cloud NAS (L2 cloud service) in the edge cloud. The IP address of the TV is 192.168.16.2, and the MAC is A. The cloud NAS address of this user is 192.168.17.2, and the MAC is B. The broadcast ARP process is omitted, and the unicast data packet forwarding is started directly.

[0306] 1. The original packet is untag, and a layer of CVLAN is added at the ONT.WAN2 interface.

[0307] 2. The OLT is converted into S+C.

[0308] 3. In A-L, SVLAN is introduced as the local AC interface of the corresponding BD, the BD L2 table is queried, and the egress interface is found to be an EVPN.END.DT2U SID.

[0309] 4. A-L encapsulates EVPN SRv6 and sends it to ECGW.

[0310] 5. ECGW terminates the OLT level EVPN, finds the corresponding BD L2 table of the EVPN, and finds that the egress is the local AC interface (SVLAN), which is connected to a logical port (facing the ONT side) of ECGW.

[0311] 6. ECGW introduces S+C on the logical port into the corresponding user level BD (VNI), and finds the egress interface to be a remote VXLAN tunnel endpoint (VTEP) by querying the L2 table.

[0312] 7. ECGW encapsulates the user level VXLAN EVPN and sends it to the multilayer virtual switch (OpenvSwitch, OVS) where the L2 cloud service is located.

[0313] 8. OVS terminates the VXLAN and restores it to the original data encapsulation, and sends it to the corresponding cloud NAS based on DMAC.

[0314] In the above description, the OLT level EVPN uses VPLS mode, and using VPWS does not need to query the MAC table, but can be directly forwarded according to the cross-connection table.

[0315] The above description is the process of accessing L2 cloud service, accessing L3 cloud service or Internet in the home network, and the difference is that the destination MAC in the service message is replaced by NERG.BR0 interface MAC, and the destination IP of the service message needs to be replaced by the L3 cloud service network segment.

[0316] Figure 13 A structure diagram of a communication pipeline provided by the present application Figure 12 , Figure 13 The network side (NERG.WAN1 to BRAS-UP) pipeline model is shown. In combination Figure 14 with Figure 5 an exemplary description, and similar to the access side pipeline model, the network side pipeline model is also divided into two levels, one is a user level pipeline, and one is an ECGW level pipeline (or user group), the ECGW NERG instance and the L2 cloud service belong to the user level pipeline; the S-L and the ECGW coarse-grained EVPN belong to the ECGW level.

[0317] Suppose that the cloud NAS in the edge cloud needs to access the external network, the cloud NAS address is 192.168.17.2, and the MAC is B.

[0318] 1. The cloud NAS sends an original message, and the destination MAC is filled in as the NERG.BR0 interface address.

[0319] 2. The OVS of the server where the cloud NAS is located finds the VTEP of the remote ECGW based on the VNI+destination MAC, and encapsulates the VXLAN EVPN.

[0320] 3. The NERG instance finds the BD L2 table, knows that the gateway needs to be accessed based on the destination MAC, and finds the out interface as NERG.WAN1 through the flow table (assuming that the flow table has been created), and the message editing actions include NAPT replacement, PPPOE encapsulation header, S+C encapsulation, and sending to the internal logical port.

[0321] 4. The ECGW accesses a certain BD with the SVLAN sub-port of the internal logical port as the local AC, finds the remote EVPN.SID through the table, and encapsulates the SRv6 EVPN header.

[0322] 5. The S-L terminates the SRv6 EVPN, finds the out direction as the local AC (SVLAN) through the L2 table.

[0323] The above is only a specific example of the network side pipeline model provided by the present embodiment, and should not be understood as a limitation on the present application.

[0324] Figure 14 A structure diagram of a communication pipeline provided by the present application Figure 3 ,Figure 12 The shown is a secondary home access pipe model (secondary ONT to NERG.LAN2), which can refer to the aforementioned Figure 14 ONT 201b. In combination Figure 11 to Figure 14 with Figure 11 to Figure 14 exemplary description, the access side pipe model adopts coarse-grained EVPN mainly to simplify user-level service provisioning on the metropolitan area network, and the OLT level EVPN is pre-configured, and when the user opens the service, only the user level device such as the ONT, the OLT and the ECGW needs to be configured. The access of the secondary home network is similar to the networking special line, and the coarse-grained pipe cannot be pre-configured; therefore, the logic of special line configuration is adopted, and when the user opens the secondary home multi-point access, the ONT, the OLT, the A-L and the ECGW are configured on demand.

[0325] The secondary ONT multiplexes the WAN2 channel and the configuration, and another SVLAN is used on the OLT, the SVLAN of the edge cloud network cannot be used, and the CVLAN can use similar coding rules; after the OLT re-adds the S+C, the S+C is sent to the A-L; on the A-L, it is identified based on the specific SVLAN that this is a secondary ONT access, the S+C is corresponded to the secondary ONT level EVPN (which can use VPWS, or can use VPLS to find the corresponding EVPN.SID through BD), and the S+C tag is stripped and encapsulated EVPN; on the ECGW, the EVPN.SID is used as a remote port of the user level BD, and after the tunnel is drained, the BD L2 table or the GW routing table is searched to find the final outlet of the NERG.

[0326] For the above Figure 15 content, the embodiment of the application further provides an optional VLAN / VNI planning suggestion, as shown in the following table 8.

[0327] Table 8 VLAN / VNI planning suggestion

[0328]

[0329]

[0330] The above Figure 6 default uses SRv6-BE EVPN as the metropolitan coarse-grained pipe, and of course VXLAN EVPN can also be used, the principle is similar, and the difference mainly needs to consider VTEP+VNI planning, which can follow the existing VXLAN VTEP+VNI planning principle. The VXLAN EVPN is exemplarily described below for different pipe models.

[0331] Figure 15 A structure of a communication pipe provided by the application is shown Figure 16, Figure 16 The pipeline model shown is a traditional metropolitan pipeline model. In the traditional metropolitan area, the OLT is taken as the VTEP starting point, SVLAN is mapped to coarse-grained EVPN, VPWS or VPLS mode can be adopted.

[0332] The processing on the ECGW and the S-L metropolitan area are similar. After the coarse-grained EVPN is terminated, S+C is introduced as the local AC to access the corresponding user-level BD, and the BD L2 table or the GW flow forwarding table is searched to find the final NERG exit.

[0333] The secondary home broadband is also processed as a dedicated line on demand. The OLT is mapped to the secondary home-level EVPN based on a specific S+C, and the user-level BD is accessed as a remote VTEP port on the ECGW.

[0334] The Internet traffic from NERG.WAN1 is converged to a specific SVLAN, taken as a coarse-grained EVPN local AC interface, the EVPN BD table or the VPWS cross-connection table is searched to find the VTEP port corresponding to the DC-GW, and the ECGW-level VXLAN EVPN is encapsulated. After the DC-GW terminates the EVPN, S+C is introduced to flow to the BRAS.

[0335] In order to make the communication method provided by the embodiments of the present application clearer, the edge cloud is briefly introduced as follows: the edge cloud construction is a three-level architecture, composed of provincial centers, shallow edges and deep edges, and the edge cloud management VPN (EC-mgnt) and the edge cloud storage VPN (EC-obs) are deployed through the cloud network hub center to form a unified scheduling network of cloud resources. The edge cloud is designed and planned around the NAS-type business as the core of the business network, and the products and applications of numerous ecological business partners are added to form an ecological application business network of the edge cloud, which provides a variety of home entertainment, collaborative office, game competition and other scene applications.

[0336] The applications of the edge cloud mainly include L2 cloud services (cloud NAS, cloud desktop, cloud STB) and L3 cloud services (cloud rendering, cloud server) business, and in the future, the security value-added server (VAS) business can be supported through service function chaining (SFC) expansion.

[0337] The L2 cloud service is a special L2 host, mainly a two-layer network access mode, and is provided with a two-layer VXLAN static / dynamic tunnel capability by a top of rack (TOR) switch or an OVS, serves as a tunnel entrance of the L2 VXLAN and is connected with the ECGW, and the ECGW.NERG instance provides a DHCP capability. The L2 cloud service automatically acquires an IP address with the same subnet mask as the user's home network from the ECGW.NERG in a booting process, so as to realize the formation of a large two-layer home network of the L2 cloud service and the user's home network.

[0338] The L3 cloud service connection is a three-layer network access mode, the L3 cloud service business platform has a multi-tenant access capability, and since the platform provides a shared service capability, when a user accesses the shared service, the traffic passes through the ECGW, the ECGW provides a source NAT address capability, and a three-layer network access is realized by an IP routing mode.

[0339] Next, based on the edge cloud service, an edge cloud service pipeline model is provided, as shown in Figure 16 , and Figure 16 , a structural schematic diagram of a communication pipeline provided in the present application is shown in Figure 16 The pipeline model shown in the figure is an L2 cloud service connection pipeline model. The L2 cloud service refers to a service that is exclusively enjoyed by a user and is isolated between different users. There is no access path between each other. Figure 16 Two pipeline termination modes are provided: one is VXLAN termination at a peer TOR switch, and the other is VXLAN termination on an OVS. In this way, the ECGW does not need to plan a VLAN of the user-level L2 cloud service, and is more simple.

[0340] In the first termination mode, Figure 17 , the ECGW is connected with the TOR switch associated with the L2 cloud service, a plurality of TOR devices need to be connected with the ECGW, the ECGW can identify the TOR device by an outer VLAN (VTEP) and identify the VM / container (user level) connected with the TOR device by an inner VLAN.

[0341] The NERG finds the traffic exit as a remote VTEP (remote TOR) by searching a BD table or a flow table, and then encapsulates a double-layer VLAN label, the outer layer represents the peer TOR, and the inner layer represents the user-level L2 cloud service under the TOR. When the flow is introduced into the user-level VXLAN EVPN, the double-layer VLAN label is not stripped.

[0342] After the peer TOR switch terminates the EVPN, the outer VLAN is stripped, and is sent to the corresponding VM / container based on the inner VLAN.

[0343] You can also use the RAW method. ECGW does not encapsulate double-layer VLANs, but uses the untag method. The TOR switch adds a user-level VLAN based on the VNI (representing a user under the ECGW), and then forwards it to the corresponding virtual machine / container based on the VLAN.

[0344] The ECGW and the TOR are connected via VTEPs in the underlay domain. Overlay domains are connected on a per-home or 2B basis, with each home using a BD domain. Underlay routing uses OSPF, with the loopback address passed to the gateway (DC-GW) via OSPF. Overlay routing can be statically configured or via EVPN. The ECGW establishes BGP EVPN neighbors with each TOR.

[0345] When the host accesses the L2 cloud service VM / container via IP, it first requests the MAC address of the VM / container through a Layer 2 ARP broadcast. The VM / container returns the MAC address to the host, and then the host directly accesses the VM based on the unicast MAC address of the VM.

[0346] exist Figure 17 In the second termination method, the server OVS is used as VTEP. The main difference between this and TOR is that OVS can directly associate with user-level virtual machines / containers based on VNI, without the need for VLAN identification. Therefore, EVPN uses the untag RAW mode.

[0347] Based on the edge cloud service, another edge cloud service pipeline model is proposed below, such as Figure 17 As shown, Figure 17 Schematic diagram 8 of the structure of a communication pipeline provided by this application, Figure 17 The pipeline model shown is the L3 cloud service docking pipeline model. Figure 18 In the edge cloud, all L3 cloud services share an underlay VRF. Each NERG.WAN2 and all L3 cloud services are placed in a VRF, which can use a centralized gateway or a distributed gateway. The centralized gateway of the VRF can be deployed on SPINE or DC-GW. The VRF plane needs to deploy a DHCP server to provide dynamic address management services for the L3 cloud service virtual machines and NERG.WAN3.

[0348] Combined with attachment Figure 18 For the shared service access process in the edge cloud, assuming that the two BR interfaces of ONT and NERG are two independent gateways, the process steps for the home network host to access the virtual machine 29.2.3.10 include the following ① to ④.

[0349] ①、The HOST in the home network routes the packet for accessing 29.2.3.10 to the BR1 of the ONT according to the default route.

[0350] ②、The BR1 is configured with a static route (to the L3 cloud service network segment 29.0,0.0 / 8) and routes to the NERG.BR0.

[0351] ③、The NERG.BR0 routes from the WAN3 interface to the DC-GW gateway 29.2.2.1 according to the configured network segment route.

[0352] ④、The gateway 29.2.2.1 routes to a specific virtual machine / container again.

[0353] In the embodiment, it is suggested to build a local DNS in the edge cloud, publish a domain name for the L3 cloud service, and resolve the domain name to a virtual machine address by a user. The flow of accessing the service through the DNS is shown in the following Figure 18 Figure 19 It is a flow diagram of accessing the service provided in the application. The preparation work required before accessing the service includes: 1, building a DNS Server; 2, publishing the service to the DNS Server; 3, providing the private network DNS Server as a parameter in the BRAS DHCP Server and issuing it to the optical network terminal (ONT); and 4, configuring the optical network terminal (ONT) to use the DNS Server obtained on the WAN side.

[0354] Please refer to Figure 19 The accessing service provided in the embodiment includes the following S801 to S804.

[0355] S801, the host sends a DNS request to a local DNS (local DNS).

[0356] Corresponding to the process of S801, the DNS receives the DNS request of the host.

[0357] For example, the DNS request includes www.aabbccddeeff.com.

[0358] S802, the DNS sends a private network IP address to the host.

[0359] Corresponding to the process of S802, the host receives the private network IP address sent by the DNS, and the private network IP address is 29.3.2.16, for example.

[0360] ​As for DNS, DNS can determine whether the address used by the user in the host is an intranet address, such as the address 29.xxx. If so, it returns the private network address of the edge cloud to the host (depending on the type of service provided, load balancing, etc.). If the address used by the user is an external network address, DNS returns the public network address provided by the service. In addition, if the DNS local query cannot be found, the public network DNS server address is returned to the host, and the host obtains the content it wants to access from the public network.

[0361] S803: The host accesses the application server corresponding to the private IP address.

[0362] For application servers, the application can publish a list of addresses providing services to the DNS.

[0363] S804: The application server sends the access data result to the host.

[0364] Corresponding to the process of S804, the host receives the data result sent by the application server.

[0365] For hosts, the DNS server address is obtained in two ways: When the BRAS assigns the WAN address to the optical modem / NERG, it carries the DNS server address. Zhu Yong's address is filled in with the private DNS server address based on the POD location, and the public DNS server address is used as a backup.

[0366] It is worth noting that the evolution of traditional metropolitan area networks to SL metropolitan area networks will not change the user-level service model on OLT and BRAS. It only transports the traffic of the OLT upstream port to BRAS-UP intact. Therefore, even if some operators do not use S+C to mark each user and each service at the user level, but instead use a single-layer VLAN with N:1 aggregation to mark the service, the pure transmission service nature of the SL metropolitan area network will not change.

[0367] like Figure 1 to Figure 19 As shown, Figure 20 This application provides a schematic diagram of the structure of a SL metropolitan area home bandwidth service model. To avoid user-level service provisioning, the metropolitan area network uses SVLAN-based EVPN to transport traffic. Instead of considering the inner VLAN, the SVLAN is mapped 1:1 to the EVPN. Using TAG mode, traffic is directly transmitted without any processing of the VLAN tags on both sides when entering and leaving the tunnel. For details about S+C, please refer to the previous embodiment and will not be repeated here.

[0368] It can be understood that, in order to realize the functions in the above embodiments, the home gateway and the enhanced gateway comprise hardware structures and / or software modules corresponding to the functions. Those skilled in the art should easily realize that, in combination with the units and method steps of the examples described in the embodiments disclosed in the present application, the present application can be realized in the form of hardware or a combination of hardware and computer software. Whether a certain function is realized in the form of hardware or computer software driving hardware depends on the specific application scenario and design constraints of the technical solution.

[0369] The communication method provided by the embodiments of the present application is described in detail above, and the communication device provided by the embodiments of the present application will be described below. Figure 20 Figure 20 The communication method provided by the embodiments of the present application is described in detail above, and the communication device provided by the embodiments of the present application will be described below.

[0370] Figure 21 A structural schematic diagram of a communication device provided by the present application is shown. The communication device can be used to realize the functions of the home gateway or the enhanced gateway in the above method embodiments, and thus can also realize the beneficial effects possessed by the above method embodiments. In the embodiments of the present application, the communication device can also be the ONT, the NERG, the ECGW described above, or a chip applied to the above devices.

[0371] As shown in Figure 22 , the communication device 2000 comprises a transceiver module 2010 and a processing module 2020.

[0372] When the communication device 2000 is used to realize the function of the home gateway, the transceiver module 2010 can be used to send a first service packet to the Internet through a first WAN port and send a second service packet to the enhanced gateway through a second WAN port. The processing module 2020 can be used to realize the functions of the above home gateway or any OLT in cooperation with the transceiver module 2010, which will not be described here.

[0373] When the communication device 2000 is used to realize the function of the enhanced gateway, the transceiver module 2010 can be used to receive the second service packet of the home gateway; the processing module 2020 can be used to parse the second service packet to obtain a destination MAC address. The transceiver module 2010 is further used to: if the destination MAC address is the MAC address of the first edge cloud device, send the second service packet to the first edge cloud device; if the destination MAC address is the MAC address of the first network bridge interface, send the second service packet to the Internet access device.

[0374] ​The communication device 2000 of the embodiments of the present application can be implemented by software modules. The communication device 2000 of the embodiments of the present application can correspond to performing the methods described in the embodiments of the present application, and the above and other operations and / or functions of each module in the communication device 2000 are respectively for realizing the method flows in the foregoing figures, and for brevity, will not be repeated here.

[0375] It is worth noting that if the communication device 2000 is implemented by software modules, the communication device 2000 can be a logical gateway and the like.

[0376] The communication device 2000 of the embodiments of the present application can also be implemented by hardware, such as a home gateway or an enhanced gateway, and the specific implementation of the home gateway and the enhanced gateway will be described below. Figure 21 and Figure 20 Possible examples are provided respectively.

[0377] Figure 22 A structural schematic diagram of a home gateway provided by the present application is provided. The home gateway 2100 includes a memory 2110 and at least one processor 2120, the processor 2120 can implement the communication method provided by the above embodiments, and the memory 2110 is used to store the software instructions corresponding to the above communication method.

[0378] As an optional implementation manner, in the hardware implementation, the home gateway 2100 can refer to a chip or a chip system packaged with one or more processors 2120. For example, when the home gateway 2100 is used to implement the method steps in the above embodiments, the processor 2120 included in the home gateway 2100 executes the steps and possible sub-steps of the above method.

[0379] In an optional case, the home gateway 2100 can further include a communication interface 2130, which can be used to transceive data. For example, the communication interface 2130 is used to send service packets or receive service packets, etc.; the communication interface 2130 can be implemented by the interface circuit included in the home gateway 2100.

[0380] In some optional examples, the communication interface 2130 can be used to provide multiple WAN ports, such as a WAN1 directly connected to the Internet, a WAN2 connected to an enhanced gateway, etc. It should be understood that in some cases, the communication interface 2130 can also be referred to as a transceiver of the home gateway 2100, which is not limited in the present application.

[0381] In the embodiments of the present application, the communication interface 2130, the processor 2120 and the memory 2110 can be connected through a bus 2140, which can be divided into an address bus, a data bus, a control bus, etc. The bus 2140 can be a Peripheral Component Interconnect Express (PCIe) bus, or an extended industry standard architecture (EISA) bus, a unified bus (Ubus or UB), a compute express link (CXL), a cache coherent interconnect for accelerators (CCIX), etc.

[0382] It is worth noting that the home gateway 2100 can also perform the functions of the communication device 2000 shown above, which will not be described here. The home gateway 2100 provided in the embodiments can be any of the ONTs above, or other home gateways with data processing functions, which are not limited in the present application. For example, the home gateway 2100 can be any of the foregoing home gateways. Figure 22

[0383] Figure 22 A structural schematic diagram of an enhanced gateway provided in the present application is shown. The enhanced gateway can be a terminal device or a network device, or a chip (system) or other components or assemblies that can be arranged in a terminal device or a network device. As shown in the figure, the enhanced gateway 2200 can include a processor 2201. Optionally, the enhanced gateway 2200 can also include a memory 2202 and / or a transceiver 2203. The processor 2201 is coupled with the memory 2202 and the transceiver 2203, which can be connected through a communication bus. Figure 22

[0384] The various constituent components of the enhanced gateway 2200 will be described in detail below: Figure 22

[0385] ​​​The processor 2201 is the control center of the enhanced gateway 2200 and can be a single processor or a collective term for multiple processing elements. For example, the processor 2201 can be one or more central processing units (CPUs), an application-specific integrated circuit (ASIC), or one or more integrated circuits configured to implement the embodiments of the present application, such as one or more digital signal processors (DSPs) or one or more field programmable gate arrays (FPGAs).

[0386] Optionally, the processor 2201 may execute various functions of the enhanced gateway 2200 by running or executing software programs stored in the memory 2202 and calling data stored in the memory 2202. In a specific implementation, as an embodiment, the processor 2201 may include one or more CPUs, such as Figure 22 CPU0 and CPU1 are shown in FIG.

[0387] Optionally, the enhanced gateway 2200 may also include multiple processors, such as Figure 22 2201 and processor 2204 are shown in FIG. Each of these processors can be a single-core processor (single-CPU) or a multi-core processor (multi-CPU). A processor herein can refer to one or more devices, circuits, and / or processing cores for processing data (e.g., computer program instructions).

[0388] The memory 2202 is configured to store a software program for implementing the solutions of the present application, and the processor 2201 is configured to control the execution of the software program. The specific implementation can refer to the above-mentioned method embodiments, and details are not described herein. For example, the memory 2202 can be a read-only memory (ROM) or other types of static storage devices that can store static information and instructions, a random access memory (RAM) or other types of dynamic storage devices that can store information and instructions, an electrically erasable programmable read-only memory (EEPROM), a compact disc read-only memory (CD-ROM) or other optical disc storage, an optical disc storage (including a compact disc, a laser disc, an optical disc, a digital versatile disc, a Blu-ray disc, etc.), a magnetic disc storage medium or other magnetic storage device, or any other medium capable of carrying or storing desired program codes in the form of instructions or data structures and capable of being accessed by a computer, but the present application is not limited thereto. The memory 2202 can be integrated with the processor 2201 or exist independently, and is coupled with the processor 2201 through an interface circuit (not shown in the figure) of the edge gateway 2200. The embodiments of the present application do not make a specific limitation in this regard. Figure 22

[0389] The transceiver 2203 is configured to communicate with other network devices.

[0390] Optionally, the transceiver 2203 can include a receiver and a transmitter (not shown separately in the figure). The receiver is configured to implement the receiving function, and the transmitter is configured to implement the transmitting function. ​

[0391] Optionally, the transceiver 2203 can be integrated with the processor 2201 or exist independently, and is coupled with the processor 2201 through an interface circuit (not shown in the figure) of the edge gateway 2200. The embodiments of the present application do not make a specific limitation in this regard. ​

[0392] ​​​The method steps in the embodiments can be implemented by hardware or by a processor executing software instructions. The software instructions can be composed of corresponding software modules, which can be stored in RAM, flash memory, ROM, PROM, EPROM, EEPROM, registers, hard disks, mobile disks, CD-ROMs, or any other form of storage medium well known in the art. An exemplary storage medium is coupled to the processor such that the processor can read information from, and write information to, the storage medium. Of course, the storage medium can be a component of the processor. The processor and the storage medium can be located in an ASIC. The ASIC can be located in a computing device or an electronic device. Of course, the processor and the storage medium can also be located in a network device or a terminal device as discrete components.

[0393] In the above embodiments, all or part of the embodiments can be implemented by software, hardware, firmware, or any combination thereof. When implemented by software, all or part of the embodiments can be implemented in the form of a computer program product. The computer program product includes one or more computer programs or instructions. When the computer programs or instructions are loaded and executed on a computer, all or part of the processes or functions described in the embodiments are performed. The computer can be a general-purpose computer, a special-purpose computer, a computer network, a network device, a user device, or other programmable apparatus. The computer programs or instructions can be stored in a computer-readable storage medium or transferred from one computer-readable storage medium to another computer-readable storage medium, for example, the computer programs or instructions can be transferred from one website, computer, server, or data center to another website, computer, server, or data center through a wired or wireless manner. The computer-readable storage medium can be any available medium accessible by a computer or a data storage device such as a server, data center, etc. integrated with one or more available media. The available media can be a magnetic medium, such as a floppy disk, a hard disk, a magnetic tape; an optical medium, such as a digital video disc (DVD); or a semiconductor medium, such as a solid state drive (SSD).

[0394] The above merely provides the specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art can easily think of various equivalent modifications or replacements within the technical range disclosed in the present application, and these modifications or replacements shall be encompassed in the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the protection scope of the claims.

Claims

1. A communication system, characterized in that: include: The first home gateway, enhanced gateway, and first edge cloud device located in the same broadcast domain, The first home gateway includes: a first wide area network (WAN) port and a second WAN port; The first WAN port is used to send a first service message to the Internet; The second WAN port is used to: send a second service message to the enhanced gateway; The enhanced gateway is used to: if the destination media access control MAC address in the second business message is the MAC address of the first edge cloud device, send the second business message to the first edge cloud device; if the destination MAC address in the second business message is the MAC address of the first bridge interface, send the second business message to the Internet.

2. The communication system according to claim 1, wherein: A layer 2 tunnel is established between the enhanced gateway and the first home gateway, and the layer 2 tunnel is used to transmit the second service message.

3. The communication system according to claim 1 or 2, characterized in that The communication system further includes: a second edge cloud device that is not in the broadcast domain; The enhanced gateway is also used to: receive a fifth service message from the first home gateway, and if the destination Internet Protocol IP address of the fifth service message is the IP address of the second edge cloud device, send the fifth service message to the second edge cloud device.

4. The communication system according to any one of claims 1 to 3, characterized in that: The communication system further includes: a second home gateway located in the broadcast domain; The second home gateway includes: a third WAN port and a fourth WAN port; The third WAN port is used to send a third service message to the Internet; The fourth WAN port is used to send a fourth service message to the enhanced gateway.

5. A communication method, characterized in that: Applied to a communication system including a first home gateway and an enhanced gateway, wherein a first wide area network (WAN) port of the first home gateway is connected to the Internet, a second WAN port of the first home gateway is connected to the enhanced gateway, the enhanced gateway is connected to a first edge cloud device and to the Internet via a first bridge interface, and the first home gateway, the enhanced gateway, and the first edge cloud device are in the same broadcast domain, the method comprising: The first home gateway sends a first service message to the Internet through the first WAN port; The first home gateway sends a second service message to the enhanced gateway through the second WAN port; If the destination media access control MAC address in the second service message is the MAC address of the first edge cloud device, the enhanced gateway sends the second service message to the first edge cloud device; If the destination MAC address in the second service message is the MAC address of the first bridge interface, the enhanced gateway sends the second service message to the Internet.

6. The method according to claim 5, characterized in that Before the enhanced gateway sends the second service message to the Internet, the method further includes: The enhanced gateway performs network address translation NAT on the second service message sent by the first home gateway.

7. The method according to claim 5 or 6, characterized in that The communication system further includes: a second edge cloud device that is not in the broadcast domain, the enhanced gateway is connected to the second edge cloud device, and the method further includes: The enhanced gateway receives the fifth service message from the first home gateway; If the destination IP address in the fifth service message is the IP address of the second edge cloud device, the enhanced gateway sends the fifth service message to the second edge cloud device.

8. The method according to any one of claims 5 to 7, characterized in that The communication system further includes: a second home gateway located in the broadcast domain, a third WAN port of the second home gateway connected to the Internet, and a fourth WAN port of the second home gateway connected to the enhanced gateway, and the method further includes: The second home gateway sends a third service message to the Internet through the third WAN port; The second home gateway sends a fourth service message to the enhanced gateway through the fourth WAN port; If the destination MAC address in the fourth service message is the MAC address of the first edge cloud device, the enhanced gateway sends the fourth service message to the first edge cloud device; If the destination MAC address in the fourth service message is the MAC address of the first bridge interface, the enhanced gateway sends the fourth service message to the Internet.

9. The method according to any one of claims 5 to 8, characterized in that The first WAN port is connected to a second bridge interface, the IP address of the first bridge interface is the same as the IP address of the second bridge interface, and the MAC address of the first bridge interface is the same as the MAC address of the second bridge interface, and the method further includes: If the first network bridge interface fails, the first home gateway deletes the MAC address of the first network bridge interface configured by the first home gateway; If the second network bridge interface fails, the enhanced gateway deletes the MAC address of the second network bridge interface configured by the enhanced gateway.

10. The method according to any one of claims 5 to 8, characterized in that The first WAN port is connected to a second bridge interface, the IP address of the first bridge interface is the same as the IP address of the second bridge interface, and the MAC address of the first bridge interface is different from the MAC address of the second bridge interface, and the method further includes: If the first bridge interface fails, the first home gateway sends a first Address Resolution Protocol ARP message to the host in the broadcast domain, where the first ARP message carries the MAC address of the second bridge interface; If the second bridge interface fails, the enhanced gateway sends a second ARP message to the host in the broadcast domain, where the second ARP message carries the MAC address of the first bridge interface.

11. The method according to any one of claims 5 to 8, characterized in that The first WAN port is connected to a second bridge interface, the IP address of the first bridge interface is the same as the IP address of the second bridge interface, and the MAC address of the first bridge interface is different from the MAC address of the second bridge interface, and the method further includes: If the first bridge interface fails, the enhanced gateway sends a first policy message to the host in the broadcast domain, the first policy message carrying: the MAC address of the second bridge interface, the first policy message indicating: the Internet traffic of the host is forwarded through the second bridge interface; If the second bridge interface fails, the first home gateway sends a second policy message to the host in the broadcast domain. The second policy message carries: the MAC address of the first bridge interface. The second policy message indicates: the Internet traffic of the host is forwarded through the first bridge interface.

12. The method according to any one of claims 5 to 8, characterized in that The first WAN port is connected to a second bridge interface, the IP address of the first bridge interface is different from the IP address of the second bridge interface, and the MAC address of the first bridge interface is different from the MAC address of the second bridge interface, and the method further includes: If the connection between the second bridge interface and the Internet is interrupted, the first home gateway sends a first access control list (ACL) to the host in the broadcast domain, where the first ACL is used to instruct: to modify the MAC address of the second bridge interface in the service message to the MAC address of the first bridge interface; If the second bridge interface recovers the connection with the Internet, the first home gateway cancels the first ACL; or If the connection between the first bridge interface and the Internet is interrupted, the enhanced gateway sends a second ACL to the host in the broadcast domain, where the second ACL is used to instruct: to modify the MAC address of the first bridge interface in the service message to the MAC address of the second bridge interface; If the first bridge interface recovers the connection with the Internet, the enhanced gateway revokes the second ACL.

13. A communication method, characterized in that: The method is applied to an enhanced gateway, the enhanced gateway is connected to a first edge cloud device and a first home gateway, the first home gateway, the enhanced gateway, and the first edge cloud device are located in the same broadcast domain, and the method includes: The enhanced gateway receives the second service message from the first home gateway; If the destination media access control MAC address in the second service message is the MAC address of the first edge cloud device, the enhanced gateway sends the second service message to the first edge cloud device; If the destination MAC address in the second service message is the MAC address of the first bridge interface, the enhanced gateway sends the second service message to the Internet.

14. The method according to claim 13, characterized in that The method further comprises: The enhanced gateway receives a sixth service message from the first edge cloud device; If the destination MAC address in the sixth service message is the MAC address of the first home gateway, the enhanced gateway sends the sixth service message to the first home gateway; If the destination MAC address in the sixth service message is the MAC address of the first bridge interface, the enhanced gateway sends the sixth service message to the Internet.

15. An enhanced gateway, characterized in that: include: Processor and transceiver; the transceiver is used to send business messages or receive messages, and the transceiver and the processor cooperate to implement the method steps of enhancing the gateway implementation in the method as described in any one of claims 5-14.

Images