Network computing node and security initialization method thereof

Abstract

The invention provides a network computing node and a security initialization method and device thereof. The method comprises the steps that a network computing node NCP detects that hardware initialization is completed; the distribution system retains a logic module number MOD; enabling a control plane basic forwarding function; and sending a piece of reachable information carrying the system reserved MOD through a serial switching matrix interface connected with the main network forwarding node NCF and the standby NCF.

Description

Technical Field

[0001] This application relates to communication technology, specifically a network computing node and its secure initialization method. Background Technology

[0002] In OPENDDC (Open Distributed Data Center), the system can support 256 NCP (Network Compute Processor) devices and 40 NCF (Network Control Fabric) devices. The system architecture requires all NCPs to be interconnected with all NCFs, meaning that each NCP card needs to establish a physical link connection with each NCF card, for example through SFI (SerDes Fabric Interface) ports, to achieve large-scale distributed forwarding.

[0003] In OPENDDC, each NCP board is identified by a unique board number (SLOT number). The system usually generates a module identifier (MOD) based on the board number for reachability calculation and forwarding table maintenance. When a new NCP device is added to the system, the NCF will synchronize the SLOT number and reachability information of the newly added NCP to each NCF device.

[0004] If a newly added NCP has the same SLOT number as other NCPs, both NCPs will generate the same MOD and report the reachability information of the same MOD through their respective connected NCFs. This can lead to errors in reachability calculation, potentially causing service traffic to be incorrectly forwarded to the newly added NCP, resulting in service interruption or abnormal forwarding, thus affecting system stability and reliability. Summary of the Invention

[0005] The purpose of this application is to provide a network computing node and its secure initialization method to avoid conflicts in sending network computing node slot numbers.

[0006] To achieve the above objectives, this application provides a secure initialization method for a network computing node. The method includes: detecting that hardware initialization has been completed; allocating a system reserved logical module number (MOD); enabling the control plane basic forwarding function; and sending a reachability information carrying the system reserved MOD through a serial switching matrix interface connecting the primary network forwarding node (NCF) and the backup NCF.

[0007] To achieve the above objectives, this application also provides a network computing node, which includes a processor, a machine-readable storage medium, a switching chip, and a network interface; the processor performs the following operations by running machine-executable instructions recorded on the machine-readable storage medium: detecting that hardware initialization is complete; allocating a system reserved logical module number (MOD); enabling control plane basic forwarding functions; and sending a reachability information carrying the system reserved MOD through a serial switching matrix interface connecting the primary network forwarding node (NCF) and the backup NCF. Attached Figure Description

[0008] Figure 1 A flowchart illustrating an embodiment of a method for secure initialization of a network computing node provided in this application; Figure 2 A schematic diagram of an embodiment of secure initialization of a network computing node provided in this application; Figure 3 This application provides a schematic diagram of another embodiment of secure initialization of a network computing node; Figure 4 This is a schematic diagram of the architecture of a network computing node provided in this application. Detailed Implementation

[0009] The following detailed description will be provided with reference to several examples illustrated in the accompanying figures. In this detailed description, numerous specific details are used to provide a comprehensive understanding of the present application. Known methods, steps, components, and circuits are not described in detail in the examples to avoid obscuring their meaning.

[0010] In the terminology used, the term "including" means including but not limited to; the term "containing" means including but not limited to; the terms "above," "within," and "below" include the number itself; the terms "greater than" and "less than" mean not including the number itself. The term "based on" means based on at least a portion of them.

[0011] Figure 1 This is a flowchart illustrating an embodiment of a method for secure initialization of a network computing node provided in this application. The embodiment includes... Step 101: Hardware initialization has been completed. Step 102: Assign the system reserved logical module number (MOD); Step 103: Enable the basic forwarding function of the control plane; Step 104: Send a reachability message carrying the system reserved MOD through the serial switching matrix interface connecting the primary network forwarding node NCF and the backup NCF.

[0012] Figure 2 A schematic diagram of an embodiment of secure initialization of a network computing node provided in this application; After NCP1 restarts, it performs hardware initialization. Once hardware initialization is complete, it enables the basic forwarding function of the control plane and allocates reserved MOD 1600 within the OPENDDC system.

[0013] To avoid all NCPs powering on simultaneously and sending NCF messages with reserved MOD1600, NCP1 calculates a random backoff delay in this application.

[0014] For example, NCP1 generates random backoff delays based on local timestamps and unique device identifiers. The backoff delay calculated by each NCP within the system ranges from 0 to 300 milliseconds.

[0015] Once the random backoff delay calculation for NCP1 is complete, it generates an NCF Hello message 211 carrying a reserved MOD1600 and sends it through the serial switching matrix interface SFI connecting the primary NCF1 and the backup NCF2.

[0016] After receiving the NCF Hello message 211, both the primary NCF1 and the backup NCF2 respond. The primary NCF1 generates an NCF topology synchronization message 212 containing reachability entries for all online NCPs. The reachability entry for each online NCP device includes: NCP MOD and the SFI interface connecting the NCF.

[0017] NCP1 calculates the corresponding Slot ID based on the MOD of other NCPs in each reachability entry; and compares each calculated Slot ID with the Slot ID of this device.

[0018] NCP1 ensures that each calculated Slot ID does not conflict with the Slot ID of this device. Based on the Slot ID of this device, NCP1 calculates the local MOD 8 and generates a change notification message 213 carrying the local MOD 8; this is then transmitted via the SFI interface of the primary NCF1. Afterwards, NCP1 enables the service traffic forwarding function of this device and forwards data packets.

[0019] When the primary NCF1 receives the change notification message 213, it recalculates the reachability table entry to NCP1 and updates the retained MOD1600 to NCP1's MOD8.

[0020] Figure 3 This application provides a schematic diagram of another embodiment of secure initialization of a network computing node; After NCP1 restarts, it performs hardware initialization. Once hardware initialization is complete, it enables the basic forwarding function of the control plane and allocates the reserved MOD 1600 in the OPENDDC system.

[0021] NCP1 calculates the random backoff delay, waits for the calculated random backoff delay to complete, generates an NCF Hello message 311 carrying the reserved MOD1600, and sends it through the SFI interface connecting the primary NCF1 and the backup NCF2 respectively.

[0022] After receiving the NCF Hello message 311, the primary NCF1 generates an NCF topology synchronization message 312 containing reachability entries for all online NCPs.

[0023] NCP1 calculates the corresponding Slot ID based on the MOD of other NCPs in each reachability entry; and compares each calculated Slot ID with the Slot ID of this device.

[0024] NCP1 determines if any calculated Slot ID conflicts with the Slot ID of this device and outputs MOD conflict alarm information, such as printing a MOD conflict alarm message.

[0025] NCP1 keeps business traffic forwarding disabled, and maintains the system's MOD1600.

[0026] Figure 4 This application provides a schematic diagram of the architecture of a network computing node. The network computing node includes a processor 41, a machine-readable storage medium 42, a switching chip 43, and a network interface 44.

[0027] Processor 41 performs the following operations by running machine-executable instructions recorded in machine-readable storage medium 42: detecting that hardware initialization is complete; assigning a system reserved logical module number (MOD); enabling control plane basic forwarding functions; and sending a reachability message carrying the system reserved MOD through the serial switching matrix interface connecting the primary network forwarding node (NCF) and the backup NCF.

[0028] The processor 41 executes the machine-executable instructions recorded in the machine-readable storage medium 42 to perform the following operations: receive reachability entries of online network computing nodes (NCPs) through the serial switching matrix interface connected to the primary NCF; calculate the slot number corresponding to MOD in each reachability entry; and determine that the slot number of this device does not conflict with each calculated slot number.

[0029] The processor 41 executes the machine-executable instructions recorded in the machine-readable storage medium 42 to perform the following operations: calculate the local MOD based on the slot number of this device; generate a change notification message carrying the local MOD; send the change notification message through the serial switching matrix interface connected to the primary NCF; and enable the service traffic forwarding function.

[0030] The processor 41 executes the machine-executable instructions recorded in the machine-readable storage medium 42 to perform the following operations: receive reachability entries of online network computing nodes (NCPs) through the serial switching matrix interface connected to the primary NCF; calculate the slot number corresponding to MOD in each reachability entry; determine if the slot number of this device conflicts with any calculated slot number; output MOD conflict alarm information; keep service traffic forwarding disabled; and maintain the system reserved MOD.

[0031] Processor 41 performs the following operations by running machine-executable instructions recorded in machine-readable storage medium 42: after enabling control plane basic forwarding functions, it also performs the following operations: calculates random backoff delay; waits for random backoff delay; and sends a reachability information carrying the system reserved MOD through the serial switching matrix interface connecting the primary network forwarding node NCF and the backup NCF.

[0032] In this application, a machine-readable storage medium can be any electronic, magnetic, optical, or other physical storage device used to store or contain information (such as executable instructions, data, etc.). For example, any machine-readable storage medium described herein can be any type of random access memory (RAM), volatile memory, non-volatile memory, flash memory, storage drive (such as a hard disk drive), solid-state drive, any type of optical disc (such as an optical disc, DVD, etc.), and similar devices, or combinations thereof. Furthermore, any machine-readable storage medium described herein can be a non-transitory machine-readable storage medium.

[0033] The above description is merely a preferred embodiment of this application and is not intended to limit this application. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of this application should be included within the scope of protection of this application.

Claims

1. A method for secure initialization of a network computing node, characterized in that, The method includes, Hardware initialization has been completed; The allocation system retains the logical module number (MOD). Enable basic control plane forwarding functionality; A reachability message carrying the system reserved MOD is sent through the serial switching matrix interface connecting the primary network forwarding node (NCF) and the backup NCF.

2. The method according to claim 1, characterized in that, The method also includes, The reachability entries of the online network computing nodes (NCPs) are received by connecting to the serial switching matrix interface of the primary NCF. Calculate the slot number corresponding to MOD in each reachability entry; Ensure that the slot number of this equipment does not conflict with each calculated slot number.

3. The method according to claim 2, characterized in that, The method also includes, Calculate the local MOD based on the slot number of this device; Generate a change notification message carrying the local MOD; By connecting to the serial switching matrix interface of the primary NCF, a change notification message is sent. Enable the business traffic forwarding function.

4. The method according to claim 1, characterized in that, The method also includes, The reachability entries of the online network computing nodes (NCPs) are received by connecting to the serial switching matrix interface of the primary NCF. Calculate the slot number corresponding to MOD in each reachability entry; It is determined that the slot number of this equipment conflicts with any calculated slot number; Output MOD conflict alarm information; Keep business traffic forwarding disabled; Maintain the system retains MOD.

5. The method according to claim 1, characterized in that, After enabling the control plane basic forwarding function, the method further includes, Calculate the random backoff delay; Waiting for the random backoff delay; The primary network forwarding node (NCF) and the backup NCF each send a reachability message carrying the system reserved MOD through their respective serial switching matrix interfaces.

6. A network computing node, characterized in that, The network computing node includes a processor, a machine-readable storage medium, a switching chip, and a network interface; characterized in that the processor performs the following operations by executing machine-executable instructions recorded on the machine-readable storage medium. Hardware initialization has been completed; The allocation system retains the logical module number (MOD). Enable basic control plane forwarding functionality; A reachability message carrying the system reserved MOD is sent through the serial switching matrix interface connecting the primary network forwarding node (NCF) and the backup NCF.

7. The network computing node according to claim 6, characterized in that, The processor performs the following operations by executing machine-executable instructions recorded on the machine-readable storage medium. The reachability entries of the online network computing nodes (NCPs) are received by connecting to the serial switching matrix interface of the primary NCF. Calculate the slot number corresponding to MOD in each reachability entry; Ensure that the slot number of this equipment does not conflict with the calculated slot number.

8. The network computing node according to claim 7, characterized in that, The processor performs the following operations by executing machine-executable instructions recorded on the machine-readable storage medium. Calculate the local MOD based on the slot number of this device; Generate a change notification message carrying the local MOD; By connecting to the serial switching matrix interface of the primary NCF, a change notification message is sent. Enable the business traffic forwarding function.

9. The network computing node according to claim 6, characterized in that, The processor performs the following operations by executing machine-executable instructions recorded on the machine-readable storage medium. The reachability entries of the online network computing nodes (NCPs) are received by connecting to the serial switching matrix interface of the primary NCF. Calculate the slot number corresponding to MOD in each reachability entry; It is determined that the slot number of this equipment conflicts with any calculated slot number; Output MOD conflict alarm information; Keep business traffic forwarding disabled; Maintain the system retains MOD.

10. The network computing node according to claim 6, characterized in that, After enabling the control plane basic forwarding function by executing machine-executable instructions recorded on the machine-readable storage medium, the processor also performs the following operations: Calculate the random backoff delay; Waiting for the random backoff delay; A reachability information carrying the system reserved MOD is sent through the serial switching matrix interface connecting the primary network forwarding node (NCF) and the backup NCF.

Images