Service forwarding methods, devices, equipment, media and program products

Abstract

This application provides a service forwarding method, apparatus, device, medium, and program product, relating to the field of broadband communication technology, for improving packet processing efficiency. The specific technical solution is as follows: receiving and parsing Internet Protocol (IP) packets from lower-layer network devices; if the IP packet is a control plane packet, forwarding the IP packet to the BNC control plane device; if the IP packet is a user plane packet, extracting the first Service Virtual Local Area Network (SVLAN) tag from the IP packet, and forwarding the IP packet to the BNC user plane device through a first VPN channel mapped to the first SVLAN tag; wherein, the first SVLAN tag is used to identify the service type of the IP packet. This application is applied to communication scenarios in broadband networks.

Description

Technical Field

[0001] This application relates to the field of broadband communication technology, and in particular to a service forwarding method, apparatus, device, medium, and program product. Background Technology

[0002] Broadband networks are a strategic public infrastructure for my country's economic and social development. Currently, with the rapid development of broadband networks, broadband remote access servers have evolved into broadband core networks, achieving separation of the user plane and control plane. Broadband networks mainly consist of access network optical line terminals (OLTs), optical network units (ONUs), and the broadband network core (BNC).

[0003] Currently, some operators have released the "Broadband Core Network (BNC) Technology White Paper" and are gradually upgrading their Broadband Remote Access Server (BRAS) devices to broadband core network devices in their existing networks, realizing the classification of the control plane and forwarding plane at the metropolitan area network level. Each BNC user plane device carries a certain number of broadband service users (subscribers). In related technologies, ONU control plane messages (such as PPPoE messages and IPoE messages) received by the OLT are forwarded to the BNC user plane device through the OLT, and then forwarded to the BNC control plane device, where the BNC control plane device performs user authentication. User plane messages (such as Internet access service messages, IPTV service messages, management service messages, etc.) received by the OLT are forwarded to the BNC user plane device by the OLT.

[0004] However, using the above method, the IP packets received by the OLT will be forwarded to the BNC user plane device first, and then forwarded according to the packet type. This results in a BNC user plane device receiving different types of IP packets from the same user, leading to redundant packet transmission paths and low packet processing efficiency. Summary of the Invention

[0005] This application provides a service forwarding method, apparatus, device, medium, and program product for improving message processing efficiency.

[0006] In a first aspect, embodiments of this application provide a service forwarding method executed by an Optical Line Terminal (OLT). The OLT establishes multiple Virtual Private Network (VPN) tunnels with a Broadband Core Network (BNC) user plane device. Each VPN tunnel is used to transmit a type of service to the BNC user plane device. The service forwarding method includes: receiving and parsing Internet Protocol (IP) packets from lower-layer network devices; if the IP packets are control plane packets, forwarding the IP packets to the BNC control plane device; if the IP packets are user plane packets, extracting a first Service Virtual Local Area Network (SVLAN) tag from the IP packets, and forwarding the IP packets to the BNC user plane device through a first VPN tunnel mapped to the first SVLAN tag; wherein the first SVLAN tag is used to identify the service type of the IP packets.

[0007] The technical solution provided in this application brings at least the following benefits: After receiving the IP packet from the ONU, the OLT determines whether it is a control plane packet or a user plane packet. The control plane packet is forwarded to the BNC control plane device through the trunk module, and the user plane packet is forwarded to the BNC user plane device through the VPN tunnel. This achieves the technical effect of the OLT forwarding IP packets of different services to different devices on the BNC user plane, thereby improving packet processing efficiency.

[0008] One possible implementation of the above service forwarding method also includes: establishing VPN tunnels with multiple devices on the BNC user plane, with one device on the BNC user plane carrying one type of service.

[0009] Another possible implementation of the above service forwarding method further includes: establishing a mapping relationship between multiple SVLAN tags and multiple VPN identification information; wherein, the multiple SVLAN tags include the first SVLAN tag, and the VPN tunnel indicated by the VPN identification information corresponding to the first SVLAN tag is the first VPN tunnel; different service types correspond to different SVLAN tags, and one VPN identification information indicates one VPN tunnel.

[0010] Another possible implementation, in the case that the IP packet is a control plane packet, forwarding the IP packet to the BNC control plane device includes: in the case that the control plane packet is a user authentication packet, forwarding the user authentication packet to the BNC control plane device through the relay module of the OLT.

[0011] Another possible implementation method for the above service forwarding method includes: after receiving the user authentication result returned by the BNC control plane device through the relay module, forwarding the authentication result to the lower-layer network device.

[0012] Another possible implementation is that the aforementioned user authentication messages include PPPoE messages and IPoE messages.

[0013] Another possible implementation is that the relay module communicates with the BNC control plane device via the Access Node Control Protocol (ANCP), and the control plane messages are encapsulated in the ANCP protocol.

[0014] Secondly, embodiments of this application provide a service forwarding apparatus applied to an optical line terminal (OLT). The OLT establishes multiple Virtual Private Network (VPN) channels with a Broadband Core Network (BNC) user plane device. Each VPN channel is used to transmit a type of service to the BNC user plane device. The service forwarding apparatus includes: a receiving module for receiving Internet Protocol (IP) packets from lower-layer network devices; a processing module for parsing the IP packets; a forwarding module for forwarding the IP packets to the BNC control plane device when the IP packets are control plane packets; the processing module is further used to extract a first Service Virtual Local Area Network (SVLAN) tag from the IP packets when the IP packets are user plane packets; and the forwarding module is further used to forward the IP packets to the BNC user plane device through a first VPN channel mapped to the first SVLAN tag when the IP packets are user plane packets; wherein the first SVLAN tag is used to identify the service type of the IP packets.

[0015] In one possible implementation, the aforementioned service forwarding device further includes: a construction module for establishing VPN tunnels with multiple devices on the BNC user plane, with one device on the BNC user plane carrying a type of service.

[0016] In another possible implementation, the aforementioned building module is also used to: establish a mapping relationship between multiple SVLAN tags and multiple VPN identification information; wherein, the multiple SVLAN tags include the aforementioned first SVLAN tag, and the VPN channel indicated by the VPN identification information corresponding to the aforementioned first SVLAN tag is the first VPN channel; different service types correspond to different SVLAN tags, and one VPN identification information indicates one VPN channel.

[0017] Another possible implementation is that the aforementioned forwarding module is specifically used to: when the control plane message is a user authentication message, forward the aforementioned user authentication message to the aforementioned BNC control plane device through the relay module of the aforementioned OLT.

[0018] In another possible implementation, the forwarding module is further configured to: after receiving the user authentication result forwarded by the BNC control plane device through the relay module, forward the authentication result to the lower-layer network device.

[0019] Another possible implementation is that the aforementioned user authentication messages include PPPoE messages and IPoE messages.

[0020] Another possible implementation is that the relay module communicates with the BNC control plane device via the Access Node Control Protocol (ANCP), and the control plane messages are encapsulated in the ANCP protocol.

[0021] Thirdly, this application provides an electronic device comprising: a processor and a memory; the memory stores a program or instructions executable on the processor, wherein the program or instructions, when executed by the processor, implement the method of the first aspect described above.

[0022] Fourthly, this application provides a readable storage medium on which a program or instructions are stored, which, when executed by a computer, implement the method of the first aspect described above.

[0023] Fifthly, this application provides a computer program product stored in a storage medium, which, when executed by a computer, implements the method described in the first aspect.

[0024] In a sixth aspect, embodiments of this application provide a chip including a processor and a communication interface, wherein the communication interface is coupled to the processor, and the processor is used to run programs or instructions to implement the method described in the first aspect.

[0025] The beneficial effects of the second to sixth aspects mentioned above are described in the corresponding description of the first aspect and will not be repeated here. Attached Figure Description

[0026] Figure 1 A schematic diagram of a network architecture for a service forwarding method provided in an embodiment of this application;

[0027] Figure 2 A flowchart illustrating a service forwarding method provided in an embodiment of this application;

[0028] Figure 3 This is a schematic diagram of the OLT hardware composition provided in the embodiments of this application;

[0029] Figure 4 This is a schematic diagram of the structure of the BNC network provided in an embodiment of this application;

[0030] Figure 5 A flowchart illustrating another service forwarding method provided in an embodiment of this application;

[0031] Figure 6 A flowchart illustrating another service forwarding method provided in an embodiment of this application;

[0032] Figure 7 A flowchart illustrating the implementation process of a service forwarding method provided in this application embodiment;

[0033] Figure 8 A flowchart illustrating the implementation process of a service forwarding method provided in this application embodiment;

[0034] Figure 9 This application provides a schematic diagram of the structure of a service forwarding system according to an embodiment of the present application.

[0035] Figure 10 This is a schematic diagram of the structure of a service forwarding device provided in an embodiment of this application;

[0036] Figure 11 This is a schematic diagram of the structure of an electronic device provided in an embodiment of this application. Detailed Implementation

[0037] The following is a detailed description of the service forwarding method, apparatus, equipment, medium, and program products provided in this application, with reference to the accompanying drawings.

[0038] The technical solutions of the embodiments of this application will be clearly described below with reference to the accompanying drawings. Obviously, the described embodiments are only some, not all, of the embodiments of this application. All other embodiments obtained by those skilled in the art based on the embodiments of this application are within the scope of protection of this application.

[0039] The terms "first," "second," etc., used in the specification and claims of this application are used to distinguish similar objects and not to describe a specific order or sequence. It should be understood that such use of data can be interchanged where appropriate so that embodiments of this application can be implemented in orders other than those illustrated or described herein, and the objects distinguished by "first," "second," etc., are generally of the same class and the number of objects is not limited; for example, a first object can be one or more. Furthermore, in the specification and claims, "and / or" indicates at least one of the connected objects, and the character " / " generally indicates that the preceding and following objects are in an "or" relationship.

[0040] The terms "at least one," "at least one of," etc., used in the specification and claims of this application refer to any one, any two, or a combination of two or more of the included items. For example, at least one of a, b, and c can mean: "a," "b," "c," "a and b," "a and c," "b and c," and "a, b, and c," where a, b, and c can be single or multiple. Similarly, "at least two" refers to two or more items, and its meaning is similar to that of "at least one."

[0041] In the description of this application, unless otherwise stated, "a plurality of" means two or more.

[0042] The service forwarding method, apparatus, device, medium, and program product provided in this application embodiment can be applied to communication scenarios in broadband networks.

[0043] Currently, with the advancement of fiber optic transformation of broadband access networks, Fiber To the Home (FTTH) has become a broadband access method for residential customers. Through continuous network construction, most prefecture-level cities have built optical network cities, achieving "gigabit connectivity in every city." Broadband networks mainly consist of access networks (OLTs), ONUs, and a broadband core network. Among these, the BRAS (Broadband Access Controller Area Network) in the broadband network has evolved into a BNC (Broadband Control Controller Area Network), achieving separation of the user plane and control plane. The BNC and OLT are connected through an intelligent metropolitan area network.

[0044] In existing technology, after receiving a control plane message forwarded by an ONU, the OLT forwards the received control plane message to the BNC control plane device via the BNC user plane device, whereby the BNC control plane device performs user authentication. Alternatively, after receiving a user plane message forwarded by an ONU, the OLT directly forwards the received user plane message to the BNC user plane device.

[0045] However, since the OLT forwards all IP packets received from the ONU to the BNC user plane device, the packet transmission path becomes redundant, resulting in low packet processing efficiency.

[0046] To address the aforementioned technical problems, this application provides a service forwarding method, apparatus, device, medium, and program product. It receives and parses Internet Protocol (IP) packets from lower-layer network devices. When the IP packet is a control plane packet, it forwards the IP packet to the BNC control plane device. When the IP packet is a user plane packet, it extracts a first Service Virtual Local Area Network (SVLAN) tag from the IP packet and forwards the IP packet to the BNC user plane device through a first VPN channel mapped to the first SVLAN tag. The first SVLAN tag identifies the service type of the IP packet. Through this method, after the OLT receives an IP packet from the ONU, it determines whether it is a control plane packet or a user plane packet. Control plane packets are forwarded to the BNC control plane device through a relay module, while user plane packets are forwarded to the BNC user plane device through a VPN channel. This achieves the technical effect of the OLT forwarding IP packets of different services to different devices on the BNC user plane, thereby improving packet processing efficiency.

[0047] The following description, in conjunction with the accompanying drawings, details the service forwarding method, apparatus, device, medium, and program products provided in the embodiments of this application.

[0048] Figure 1 This illustration shows a network architecture for a service forwarding method provided in an embodiment of this application. For example... Figure 1 As shown, the network architecture includes a service forwarding device 101 and a BNC network 102. The service forwarding device 101 and the BNC network 102 are interconnected.

[0049] The service forwarding method provided in this application is executed by a service forwarding device, which can be an optical line terminal (OLT). The following description will use an OLT as an example. A Virtual Private Network (VPN) tunnel exists between the OLT and a device on a different BNC user plane.

[0050] In some embodiments, the OLT mentioned above is a core broadband communication device for a data center, which is a hardware device on the operator's side.

[0051] In some embodiments, the BNC network described above includes BNC control plane equipment and BNC user plane equipment.

[0052] In some embodiments, OLT101 receives and parses Internet Protocol (IP) packets from lower-layer network devices; if the IP packet is a control plane packet, it forwards the IP packet to BNC network 102; if the IP packet is a user plane packet, it extracts the first Service Virtual Local Area Network (SVLAN) tag from the IP packet and forwards the IP packet to BNC network 102 through a first VPN tunnel mapped to the first SVLAN tag; wherein the first SVLAN tag is used to identify the service type of the IP packet.

[0053] It should be noted that the network architecture described in the embodiments of this application is for the purpose of more clearly illustrating the technical solutions of the embodiments of this application, and does not constitute a limitation on the technical solutions provided in the embodiments of this application. As network architectures evolve, the technical solutions provided in the embodiments of this application are also applicable to similar technical problems.

[0054] The service forwarding method provided in this application is executed by a service forwarding device, which can be an OLT, or a functional module or entity within the OLT. This application does not limit the specific implementation of this method. The following will use an OLT as an example to illustrate the service forwarding method provided in this application.

[0055] It should be noted that the above-mentioned OLT establishes multiple Virtual Private Network (VPN) tunnels with BNC user plane devices (such as routers and other forwarding devices), and each VPN tunnel is used to transmit a type of service to the BNC user plane devices.

[0056] Based on the above, see [link / reference] Figure 2 This is a flowchart illustrating a service forwarding method provided in an embodiment of this application. Figure 2 As shown, the service forwarding method provided in this application embodiment can be implemented by an OLT, specifically including the following steps 201 to 203.

[0057] Step 201: The OLT receives and parses Internet Protocol (IP) packets from the lower-layer network devices.

[0058] In some embodiments, the above-mentioned IP packet represents the basic unit for transmitting data in network communication.

[0059] In some embodiments, the aforementioned lower-layer network devices include ONUs and devices connected to the ONUs (such as computers and Wi-Fi routers).

[0060] In some embodiments, the downstream devices of the ONU include: computers, Wi-Fi routers, and other devices that can generate Point-to-Point Protocol over Ethernet (PPPoE) messages, and set-top boxes, and other devices that can generate IP over Ethernet (IPoE) messages.

[0061] In some embodiments, the ONU operates in two modes: routing mode and bridging mode.

[0062] For example, when the ONU is operating in routing mode, the ONU generates the aforementioned user authentication messages (such as PPPoE messages and IPoE messages).

[0063] For example, when the ONU is operating in bridging mode, the downstream device of the ONU generates the user authentication message (such as PPPoE message, IPoE message), and the user authentication message is forwarded to the relay module of the OLT through the ONU.

[0064] In some embodiments, the OLT is a key central office device in PON technology. The OLT's uplink card is connected to the BNC control plane equipment and the BNC user plane equipment, respectively, and the OLT's PON board is connected to the ONU through an optical distribution network to realize functions such as photoelectric signal conversion, data forwarding, and ONU control and management.

[0065] In some embodiments, the OLT hardware block diagram is as follows: Figure 3 As shown, the hardware mainly consists of the following parts:

[0066] a) Control board (main control board), which usually includes two boards, main and backup, to provide functions such as equipment control and protection switching.

[0067] b) DC power supply board, which usually has two boards, one main and one backup, to provide a stable power supply for the various components of the OLT.

[0068] c) Fan unit, responsible for equipment heat dissipation and environmental monitoring, extending equipment lifespan.

[0069] d) Service boards, generally including uplink boards, downlink boards (PON boards) and other boards. Uplink boards include GE / 10GE / 100GE optical interface boards, downlink boards (PON boards) provide multiple PON ports and connect to the ONU through the optical distribution network. Other boards are boards that handle functions such as DPI, Wi-Fi access controllers, and intelligent computing.

[0070] The ONU's uplink port communicates with the OLT's downlink board (PON board) through an optical distribution network, while the ONU's downlink port communicates with the devices connected to the ONU.

[0071] In some embodiments, the OLT establishes multiple VPN tunnels with a device (such as a router) on the BNC user plane, with each VPN carrying a type of service.

[0072] In some embodiments, the OLT establishes VPN tunnels with multiple devices (such as multiple routers) on the BNC user plane, and one device on the BNC user plane carries one type of service.

[0073] In some embodiments, a VPN tunnel is an encrypted virtual communication channel used to securely transmit data between the BNC user plane device and the OLT.

[0074] In some embodiments, the aforementioned multiple devices of the BNC user plane may be referred to as BNC user plane devices.

[0075] In some embodiments, the number of BNC user plane devices (such as routers and other forwarding devices) can be equal to the number of service types.

[0076] In some embodiments, the number of BNC user plane devices (such as routers and other forwarding devices) can be greater than the number of service types. Furthermore, for some critical services (such as IPTV services), two devices are used on the BNC user plane, one as the primary device and the other as a backup device, enabling primary / backup failover in case of device failure.

[0077] In some embodiments, the OLT establishes multiple Virtual Private Network (VPN) tunnels with multiple devices on the BNC user plane, and each VPN tunnel is used to transmit a type of service to the BNC user plane device. Further, the OLT establishes VPN tunnels with multiple devices on the BNC user plane (such as multiple routers), and one device on the BNC user plane (such as a router) carries a type of service.

[0078] For example, the first device on the BNC user plane carries Internet access services and establishes a first VPN with the OLT; the second device on the BNC user plane carries IPTV service packets and establishes a second VPN with the OLT; the third device on the BNC user plane carries management services (such as management services using the Broadband Forum BBF TR-069 protocol family) and establishes a third VPN with the OLT; the fourth device on the BNC user plane carries other types of services (such as artificial intelligence services) and establishes a fourth VPN with the OLT.

[0079] In this way, multiple devices on the OLT and BNC user plane establish VPN tunnels capable of transmitting IP packets, enabling various service types to be transmitted to different BNC user plane devices at the same time, thereby improving packet transmission efficiency.

[0080] In some embodiments, a mapping relationship is established between multiple SVLAN tags and multiple VPN identification information; wherein, the multiple SVLAN tags include the first SVLAN tag, and the VPN channel indicated by the VPN identification information corresponding to the first SVLAN tag is the first VPN channel; different service types correspond to different SVLAN tags, and one VPN identification information indicates one VPN channel.

[0081] In some embodiments, SVLANs are used to identify different service types, such as Internet access, Internet Protocol Television (IPTV), and management services. Within a network, each type of service (e.g., Internet access, IPTV, management) packet has a unique SVLAN tag. That is, one type of service (e.g., Internet access) uniquely corresponds to one SVLAN, and also uniquely corresponds to one VPN.

[0082] For example, in Virtual Private Network (VPN) technology, VPN identification information depends on the specific VPN type. Different VPN architectures rely on different identification mechanisms: For Multi-Protocol Label Switching Virtual Private Network (MPLS VPN), Layer 3 Virtual Private Network (L3VPN), and EVPN: the Route Distinguisher (RD) is the VPN identification information. For traditional VPNs such as Internet Protocol Security Virtual Private Network (IPSec VPN): a combination of Local ID and Peer ID / Network ID constitutes the VPN identification information.

[0083] In some embodiments, the mapping relationship is a one-to-one mapping relationship and is unique.

[0084] In this way, by mapping the relationship between multiple SVLAN tags and identification information, different service types corresponding to different SVLAN tags can be quickly identified, and IP packets can be transmitted through the VPN tunnel indicated by the VPN identification information corresponding to different SVLAN tags, thereby improving packet transmission efficiency.

[0085] Step 202: If the IP packet is a control plane packet, the OLT forwards the IP packet to the BNC control plane device.

[0086] In some embodiments, if the IP packet is determined to be a control plane packet, the OLT can directly forward the IP packet to the BNC control plane device so that the BNC control plane device can process the IP packet.

[0087] In some embodiments, such as Figure 4 As shown, the aforementioned Broadband Core Network (BNC) 40 can adopt a "three-layer, one-base" architecture, including three layers: management plane equipment 41, control plane equipment 42, and user plane equipment 43, and an intelligent computing power base 44.

[0088] Among them, the management plane equipment 41 includes functional units such as network element management, service orchestration, intelligent operation and maintenance, and digital twin. The network element management functional unit is used for unified management of configuration, version, status, alarms, and performance of all BNC network elements (such as control plane, forwarding plane, gateway, and server). The service orchestration functional unit is used for end-to-end service modeling and automated provisioning, global resource scheduling, and service capability opening of services such as broadband, leased lines, VPN, multicast, and security services. The intelligent operation and maintenance functional unit is used for real-time monitoring and visualization, AI fault prediction and self-healing, and traffic and quality optimization. The digital twin functional unit is used to build a real-time mirror model of the entire network, mapping the physical network status, resources, services, and user behavior.

[0089] The control plane device 42 includes units for access management, intelligent policy, and intelligent operation. The embedded management unit provides functions such as access management, authentication, authorization, and billing, address allocation control, and image control. The intelligent policy unit provides functions such as user plane selection, user plane control, policy control, and network slice selection. The intelligent operation unit provides modules for centralized data analysis, user location, and network openness. The control plane device is used for user access authentication and online management, address allocation, session management, policy and Quality of Service (QoS) control, routing and forwarding rule distribution, service triggering and linkage, session persistence, and smooth handover during user roaming, link switching, and device failures, ensuring users do not lose connection.

[0090] User plane device 43 includes units for forwarding control, intelligent sensing, and security self-healing. The forwarding control unit includes functional units such as QoS, SRv6, Access Control Lists (ACLs), and Ethernet Virtual Private Networks (EVPNs). The intelligent sensing unit includes functional units such as intelligent routing, application identification, traffic collection, and security protection. The security self-healing unit includes functional units such as security protection and network self-healing. The user plane device is used for forwarding user traffic, executing rules issued by the control plane, traffic isolation and encapsulation / decapsulation, bandwidth limiting, QoS scheduling, network address translation, and traffic processing.

[0091] The intelligent computing power base 44 is used to provide general computing power to all cloud-based network elements, network management, orchestration, and operation and maintenance systems of BNC, supporting AI intelligent operation and maintenance (AIOps), calculating the entire network traffic, analyzing alarms, automatically checking faults, predicting network congestion, and automatically repairing the network. It analyzes user internet behavior, traffic models, bandwidth usage, and service quality for expansion planning, network optimization, and package operation. It supports digital twins, turning the entire broadband network into a virtual simulation model to simulate expansion, faults, and cutovers without affecting existing network users, and carrying value-added services and private network capabilities.

[0092] In some embodiments, combined with Figure 2 ,like Figure 5 As shown, step 202 above can be implemented through step 202a as follows.

[0093] Step 202a: When the control plane message is a user authentication message, the OLT forwards the user authentication message to the BNC control plane device through the relay module.

[0094] In some embodiments, the user authentication message includes PPPoE messages and IPoE messages.

[0095] Thus, when the control plane message is a user authentication message, the OLT can directly forward the user authentication message to the BNC control plane device, avoiding the message transmission path redundancy problem caused by the control plane message first passing through the BNC user plane device and then being forwarded to the BNC control plane device, thereby improving message processing efficiency.

[0096] In some embodiments, the above-described user authentication message is used for user authentication.

[0097] In some embodiments, combined with Figure 5 ,like Figure 6 As shown in the embodiments of this application, the service forwarding method may further include the following step 202b.

[0098] Step 202b: After receiving the user authentication result forwarded by the control plane device through the relay module, the OLT forwards the authentication result to the lower-layer network device.

[0099] For example, after the OLT receives the user authentication result forwarded by the BNC control plane device through the relay module, it forwards the authentication result to the lower-layer network device, and further includes:

[0100] When the ONU is operating in routing mode, the OLT forwards the authentication result to the ONU.

[0101] When the ONU is operating in bridging mode, the OLT forwards the authentication result to the downstream device of the ONU through the ONU.

[0102] In this way, the OLT forwards control plane messages to the BNC control plane device through the OLT's relay module, avoiding the message transmission path redundancy problem caused by the control plane messages having to pass through the BNC user plane device before being forwarded to the BNC control plane device, thereby improving message processing efficiency.

[0103] It should be noted that step 202b can be performed after step 202a.

[0104] In some embodiments, the relay module communicates with the BNC control plane device via the ANCP protocol, encapsulating control plane messages within the ANCP protocol.

[0105] In this way, by encapsulating control plane messages into the ANCP protocol through ANCP communication, control plane messages can be directly forwarded to BNC control plane devices through end-to-end communication, thus improving message transmission efficiency.

[0106] Step 203: When the IP packet is a user plane packet, the OLT extracts the first service virtual local area network (SVLAN) tag from the IP packet and forwards the IP packet to the BNC user plane device through the first VPN tunnel mapped to the first SVLAN tag.

[0107] The first SVLAN tag mentioned above is used to identify the service type of the IP packet.

[0108] In some embodiments, the VPN tunnel is an isolated and encrypted virtual tunnel established in the BNC by the operator for home / enterprise users, so that users can connect to the Internet securely and isolate traffic.

[0109] In some embodiments, the aforementioned user plane message is a data service message received by the OLT.

[0110] In some embodiments, the above-mentioned service types may be Internet access services, Internet Protocol Television (IPTV) services, management services, etc. The specific types can be determined according to actual needs, and no specific limitations are made here in this embodiment.

[0111] In some embodiments, the SVLAN tag is the SVLAN tag associated with the VPN tunnel corresponding to each service.

[0112] It should be noted that the execution order of steps 202 and 203 described above is not limited in this embodiment. For example, step 202 can be executed first, followed by step 203; or step 203 can be executed first, followed by step 202; or steps 202 and 203 can be executed simultaneously. Figure 2 This example illustrates the process of executing step 202 first, followed by step 203.

[0113] In the service forwarding method provided in this application, the IP packets transmitted by the ONU are first classified to determine whether they are control plane packets or user plane packets. Control plane packets are forwarded to the BNC control plane device through a trunk, while user plane packets are forwarded to the BNC user plane device through a VPN tunnel. This achieves the technical effect of forwarding IP packets of different services to different devices on the BNC user plane, thereby improving packet processing efficiency.

[0114] The service forwarding method provided in this application embodiment will now be described in conjunction with specific implementation methods. The execution subject of this method is the OLT of the broadband access network.

[0115] For example, the service forwarding method provided in this application embodiment may include the following:

[0116] 1. The OLT creates VPN tunnels from the OLT to multiple devices on the BNC user plane (UP), such as an Ethernet Virtual Private Network (EVPN): An EVPN instance for the specific service is configured on each user plane device, the EVPN instance is enabled, and associated with the SVLAN (Service Virtual Local Area Network) of the user-side IP packets (IP packets from the ONU) received by the OLT. The SVLAN is used to identify different services (such as Internet access, IPTV, etc.), with each service corresponding to a separate EVPN. IP packets for different services are forwarded to different devices on the BNC user plane. Furthermore, the OLT establishes EVPN tunnels with multiple devices on the user plane (such as routing devices), with each device on the user plane carrying one type of service. For example: the first device on the user plane carries Internet access services and establishes a first EVPN with the OLT; the second device on the user plane carries IPTV service packets and establishes a second EVPN with the OLT; the third device on the user plane carries management services (such as management services using the TR-069 protocol family of Broadband Forum BBF) and establishes a third EVPN with the OLT; the fourth device on the user plane carries other types of services (such as artificial intelligence services) and establishes a fourth EVPN with the OLT.

[0117] 2. The OLT pre-configured routing table is used to map different types of services to EVPNs. This routing table can also be dynamically distributed to the OLT by the BNC. The routing table is an entry containing mapping relationships between multiple SVLAN tags and multiple VPN identification information. In this entry, a type of service (such as Internet access) uniquely corresponds to one SVLAN and also uniquely corresponds to one VPN (such as EVPN). When the OLT receives a user plane packet, it extracts the SVLAN tag from the user plane packet, queries the entry using that SVLAN tag as the keyword, obtains the VPN identification information mapped to that SVLAN tag (such as the EVPN routing identifier), and forwards it to the corresponding BNC user plane device through that VPN tunnel. For example: a type of service (such as Internet access) uniquely corresponds to one SVLAN, uniquely corresponds to one VPN identification information (such as the EVPN routing identifier), and uniquely corresponds to one VPN (such as EPVN). This entry contains: SVLAN tag, VPN identification information, and VPN mapping relationship (unique correspondence). Therefore, the mapping relationship is one-to-one and unique.

[0118] 3. OLT sets up a default SVLAN (guest SVLAN), and unauthenticated user IP packets will be diverted to this SVLAN.

[0119] 4. The OLT has a built-in relay module. After receiving IPoE / PPPoE control plane messages from the ONU, the OLT relays them to the BNC control plane via the relay module. After the BNC control plane completes the authentication of the ONU, it forwards the return message to the ONU based on the session ID. For example, if IPoE / PPPoE authentication is successful, the data transmission phase begins. Furthermore, DHCP lease renewal and PPPoE LCP messages will continue to be routed to the relay module, while messages indicating lease expiration or PPPoE session termination will have the service port removed.

[0120] It should be noted that the OLT relay module and the BNC control plane device can communicate via the ANCP protocol.

[0121] 5. After receiving the ONU authentication pass message returned by the BNC control plane, the OLT trunk module will forward the message to the ONU and then query the redirection table to map the IP packets subsequently forwarded by the ONU to different EVPNs according to the service type, so as to realize the forwarding of IP packets to the BNC user plane device and achieve the separation of control and forwarding.

[0122] like Figure 7 As shown, the service forwarding method provided in this application embodiment includes the following steps S1 to S6.

[0123] When the ONU is operating in routing mode, the above service forwarding method may include the following steps S1 to S6:

[0124] S1: Generate user authentication message. The ONU is configured with user authentication information (such as PPPoE username and password). The ONU generates a user authentication message (such as a PPPoE authentication message) and forwards it to the OLT. The PPPoE authentication message includes a session ID field. Each session ID uniquely identifies a user and also uniquely corresponds to a single ONU.

[0125] After receiving the user authentication message, S2. The OLT forwards the user authentication message to the BNC control plane device through the OLT's relay module.

[0126] S3. After receiving the PPPoE user authentication message, the BNC control plane device queries the AAA (Authentication, Authorization, Accounting) device to authenticate the user (subscriber), generates the authentication result, and returns the authentication result to the OLT's relay module.

[0127] S4. After receiving the authentication result, the OLT's relay module records that the ONU has passed authentication and forwards it to the ONU based on the session ID.

[0128] S5. When the authentication result includes successful authentication information and the IP address, subnet mask, gateway, and DNS information assigned to the ONU, the ONU performs the corresponding IP layer configuration according to the assigned IP address, subnet mask, gateway, and DNS information.

[0129] Subsequently, when the ONU receives IP packets from devices connected to it, it forwards them to the OLT.

[0130] Next, the OLT receives and parses the Internet Protocol (IP) packets from the ONU device. If the IP packet is a control plane packet, it forwards the IP packet to the BNC control plane device. If the IP packet is a user plane packet and the ONU forwarding the packet is authenticated, the OLT extracts the SVLAN tag from the IP packet and forwards the IP packet to the BNC user plane device through the VPN tunnel mapped to the SVLAN tag. The SVLAN tag identifies the service type of the IP packet, which may include: Internet access, IPTV, management services, etc.

[0131] S6. When the authentication result includes authentication failure information, the ONU cannot perform IP layer configuration and cannot establish an IP layer connection. The ONU can generate the user authentication message again and repeat the above steps S1 to S4.

[0132] Additionally, when the ONU is operating in bridge mode, such as Figure 8 As shown, the service forwarding method provided in this application embodiment may further include the following steps S7 to S12.

[0133] S7. Generate User Authentication Messages. The ONU's downstream devices (e.g., computers, set-top boxes, Wi-Fi routers) are configured with user authentication information (e.g., PPPoE username and password on computers, IPoE on set-top boxes). These downstream devices generate authentication messages (e.g., PPPoE authentication messages on computers, IPoE messages on set-top boxes) and forward them to the OLT. It should be noted that both PPPoE authentication messages and Session-level IPoE authentication messages conforming to the Broadband Forum's WT-146 specification include a session ID field. The session ID uniquely identifies a user (subscriber).

[0134] S8. After receiving the user authentication message, the OLT forwards the user authentication message to the BNC control plane device through the OLT's relay module.

[0135] S9. After receiving a PPPoE / IPoE user authentication message, the BNC control plane device queries the AAA (e.g., Authentication, Authorization, Accounting) device to authenticate the user (subscriber), generates the authentication result, and returns the authentication result to the OLT's relay module.

[0136] S10. After receiving the authentication result, the OLT's relay module records that the ONU's downstream device has passed the authentication, and the OLT's relay module relays the result to the ONU's downstream device based on the session ID. The OLT's relay module then forwards the authentication to the ONU's downstream device through the ONU.

[0137] S11. When the authentication result includes successful authentication information and the IP address, subnet mask, gateway, and DNS information assigned to the ONU's downstream devices, the ONU's downstream devices perform the corresponding IP layer configuration according to the assigned IP address, subnet mask, gateway, and DNS information. Subsequently, the ONU's downstream devices forward IP packets to the OLT through the ONU. The OLT receives and parses the Internet Protocol (IP) packets from the ONU's downstream devices. If the IP packet is a control plane packet, it forwards the IP packet to the BNC control plane device. If the IP packet is a user plane packet and the ONU's downstream device forwarding the packet is authenticated, it extracts the Virtual Local Area Network (SVLAN) tag from the IP packet and forwards the IP packet to the user plane device through the VPN tunnel mapped to the SVLAN tag. The SVLAN tag is used to identify the service type of the IP packet, which includes: Internet access service, IPTV service, remote management service, etc.

[0138] S12. When the authentication result includes authentication failure information, the downstream devices of the ONU cannot perform IP layer configuration and cannot establish an IP layer connection. The ONU can regenerate the user authentication message and repeat steps S7 to S10 above.

[0139] It should be noted that when the ONU is operating in routing mode, the user authentication packets generated by the ONU can also be IPoE packets. Both PPPoE authentication packets and Session-level IPoE authentication packets conforming to the Broadband Forum's WT-146 specification include a session ID field. The session ID uniquely identifies a user (subscriber). That is, each user (subscriber) uniquely corresponds to one ONU, one session ID, and one broadband account (such as a PPPoE account). Regardless of the ONU's operating mode or the authentication method used, the OLT can discard unauthenticated user IP packets (redirecting them to the default SVLAN). In other words, if the ONU or its connected devices have not yet been authenticated (e.g., authentication failed), the OLT will not forward user plane packets sent by that ONU.

[0140] In summary, the service forwarding method provided in this application has the following innovative points: 1) After receiving the IP packet from the ONU, the OLT determines whether it is a control plane packet or a user plane packet (data service packet). Control plane packets are forwarded to the BNC control plane device via trunk, while user plane packets (data service packets) are forwarded to the BNC user plane device via EVPN. 2) This enables the OLT to forward IP packets of different services to different devices on the BNC user plane.

[0141] It should be noted that the descriptions of steps S1 to S12 in this embodiment can be found in the descriptions in the above embodiments, and will not be repeated here.

[0142] In the service forwarding method provided in this application, on the one hand, a relay (RA) module is built into the OLT. After receiving control plane packets such as IPoE / PPPoE from the ONU, the OLT relays them to the BNC control plane device through the relay (RA) module, instead of forwarding them through the BNC user plane device. On the other hand, an Ethernet Virtual Private Network (EVPN) is created from the OLT to the BNC user plane device: an EVPN instance for the service is configured on each UP, the EVPN instance is enabled, and the SVLAN of the user-side IP packets (IP packets from the ONU) received by the OLT is associated. The SVLAN is used to identify different services (such as Internet access service, IPTV service, etc.), and each service corresponds to one EVPN. This achieves the technical effect of forwarding IP packets of different services to different user plane devices of the BNC.

[0143] It should be noted that the above-described method embodiments, or the various possible implementations of the method embodiments, can be executed individually, or, provided there is no conflict, they can be combined with each other. The specific implementation can be determined according to actual usage requirements, and this application embodiment does not impose any restrictions on this.

[0144] Figure 9 This is a schematic diagram of the structure of a service forwarding system provided in an embodiment of this application. Figure 8 As shown, the service forwarding system 900 may include: OLT 901, BNC control plane device 902, BNC user plane device 903, and ONU device 904.

[0145] The OLT901 is used to receive and parse Internet Protocol (IP) packets from lower-layer network devices (such as ONU devices), create a VPN tunnel from the OLT to the BNC user plane device, pre-configure a redirection table to map different types of services to the EVPN, set a default SVLAN (guest SVLAN) label, and has a built-in trunk (RA) module. After receiving IPoE / PPPoE control plane packets from the ONU, the RA module relays them to the BNC control plane device 902. After receiving the ONU authentication pass message forwarded by the BNC control plane device 902, the RA module forwards it to the ONU. The RA module then queries the redirection table (e.g., ...) after receiving subsequent forwarded IP packets from the ONU. Figure 9The source IP routing table shown includes the mapping relationship between different SIPs (i.e., devices with different BNC user planes, such as A / 16, B / 16, C / 16, and D / 16) and SVLANs. For example, there is a mapping relationship between A / 16 and S1, B / 16 and S2, C / 16 and S3, and D / 16 and S4. S1 corresponds to the evpn1 channel, S2 corresponds to the evpn2 channel, S3 corresponds to the evpn3 channel, and S4 corresponds to the evpn4 channel. The SIPs are mapped to different evpn channels according to the service type.

[0146] OLT901 is also used to forward IP packets to the aforementioned BNC control plane device when the IP packet is a control plane packet; and to extract the first service virtual local area network (SVLAN) tag from the IP packet when the IP packet is a user plane packet, and to forward the IP packet to the BNC user plane device 903 through the first VPN channel mapped to the first SVLAN tag by querying the aforementioned redirection table; applicable to the relevant schemes of steps S1 to S5 and steps S7 to S11 above.

[0147] BNC control plane device 902 is used to receive IP packets forwarded from the relay module, complete ONU authentication, and forward the authentication pass message to the relay module, which is applied to the relevant schemes of steps S3 and S9 above.

[0148] BNC user plane device 903 is used to receive IP packets transmitted through different EVPN channels and is applied to the relevant schemes in steps S5 and S11 above.

[0149] ONU device 904 is used to forward IP packets to the OLT and receive ONU authentication pass messages from the OLT trunk module. It is applied to the above steps S1 and the relevant schemes of steps S4 to S6, S7 and steps S10 to S12.

[0150] It should be noted that for a detailed explanation of the steps performed by each module and their beneficial effects, please refer to the description in the above embodiments, which will not be repeated here.

[0151] As can be seen, the above mainly describes the solutions provided by the embodiments of this application from a methodological perspective. To achieve the above functions, the embodiments of this application provide corresponding hardware structures and / or software modules for executing each function. Those skilled in the art should readily recognize that, in conjunction with the modules and algorithm steps of the various examples described in the embodiments disclosed herein, the embodiments of this application can be implemented in hardware or a combination of hardware and computer software. Whether a function is executed in hardware or by computer software driving hardware depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this application.

[0152] This application embodiment can divide the service forwarding device into functional modules according to the above method example. For example, each function can be divided into a separate functional module, or two or more functions can be integrated into one processing module. The integrated module can be implemented in hardware or as a software functional module. Optionally, the module division in this application embodiment is illustrative and only represents one logical functional division; other division methods may be used in actual implementation.

[0153] In some embodiments, this application also provides a service forwarding apparatus. The service forwarding apparatus may include one or more functional modules for implementing the service forwarding method of the above method embodiments. The service forwarding apparatus is applied to an optical line terminal (OLT), which establishes multiple VPN channels with a BNC user plane device. Each VPN channel is used to transmit a type of service to the BNC user plane device.

[0154] For example, Figure 10 This is a schematic diagram of a service forwarding device provided in an embodiment of this application. Figure 10 As shown, the service forwarding device 1000 includes: a receiving module 1001, a processing module 1002, and a forwarding module 1003.

[0155] The receiving module 1001 is used to receive Internet Protocol (IP) packets from lower-layer network devices; the processing module 1002 is used to parse the IP packets; the forwarding module 1003 is used to forward the IP packets to the BNC control plane device when the IP packets are control plane packets; the processing module 1002 is also used to extract the first Service Virtual Local Area Network (SVLAN) tag from the IP packets when the IP packets are user plane packets; the forwarding module 1003 is also used to forward the IP packets to the BNC user plane device through a first VPN channel mapped to the first SVLAN tag when the IP packets are user plane packets; wherein the first SVLAN tag is used to identify the service type of the IP packets.

[0156] The service forwarding apparatus provided in this application receives and parses Internet Protocol (IP) packets from lower-layer network devices. If the IP packet is a control plane packet, it forwards the IP packet to the BNC control plane device. If the IP packet is a user plane packet, it extracts a first Service Virtual Local Area Network (SVLAN) tag from the IP packet and forwards the IP packet to the user plane device through a first VPN channel mapped to the first SVLAN tag. The first SVLAN tag is used to identify the service type of the IP packet. Thus, after receiving an IP packet from the ONU, the OLT determines whether it is a control plane packet or a user plane packet. Control plane packets are relayed to the BNC control plane device via a trunk, while user plane packets are forwarded to the BNC user plane device via a VPN. This achieves the technical effect of the OLT forwarding IP packets of different services to different devices on the BNC user plane, thereby improving packet processing efficiency.

[0157] In some embodiments, the service forwarding device 1000 further includes: a construction module for establishing VPN tunnels with multiple devices on the BNC user plane, wherein one device on the BNC user plane carries a type of service.

[0158] In some embodiments, the above-described construction module is further configured to: establish a mapping relationship between multiple SVLAN tags and multiple VPN identification information; wherein, the multiple SVLAN tags include the first SVLAN tag, and the VPN channel indicated by the VPN identification information corresponding to the first SVLAN tag is the first VPN channel; different service types correspond to different SVLAN tags, and one VPN identification information indicates one VPN channel.

[0159] In some embodiments, the forwarding module 1003 is specifically used to: forward the user authentication message to the control plane device through the relay module of the OLT when the control plane message is a user authentication message.

[0160] The aforementioned forwarding module 1003 is further configured to: after receiving the user authentication result forwarded by the aforementioned BNC control plane device through the aforementioned relay module, forward the authentication result to the aforementioned lower-layer network device.

[0161] The aforementioned forwarding module 1003 is further configured to: after receiving the user authentication result forwarded by the aforementioned BNC control plane device through the aforementioned relay module, forward the authentication result to the aforementioned lower-layer network device.

[0162] In some embodiments, the user authentication message includes PPPoE messages and IPoE messages.

[0163] In some embodiments, the relay module communicates with the BNC control plane device via the ANCP protocol, and the control plane messages are encapsulated in the ANCP protocol.

[0164] It should be noted that the service forwarding device can implement all the processes implemented in the above method embodiments and achieve the same beneficial effects. To avoid repetition, it will not be described again here.

[0165] In the case where the functions of the integrated modules described above are implemented in hardware, this application provides a possible structural schematic diagram of the electronic device involved in the above embodiments. For example... Figure 11 As shown, the electronic device 110 includes: a processor 112, a communication interface 113, and a bus 114. Optionally, the electronic device 110 may also include a memory 111.

[0166] Processor 112 may implement or execute various exemplary logic blocks, modules, and circuits described in conjunction with the disclosure of this application. Processor 112 may be a central processing unit, a general-purpose processor, a digital signal processor, an application-specific integrated circuit (ASIC), a field-programmable gate array (FPGA), or other programmable logic devices, transistor logic devices, hardware components, or any combination thereof. It may implement or execute various exemplary logic blocks, modules, and circuits described in conjunction with the disclosure of this application. Processor 112 may also be a combination that implements computational functions, such as including one or more microprocessor combinations, a combination of a DSP and a microprocessor, etc.

[0167] Communication interface 113 is used to connect with other devices via a communication network. This communication network can be Ethernet, wireless access network, wireless local area network (WLAN), etc.

[0168] The memory 111 may be a read-only memory (ROM) or other type of static storage device capable of storing static information and instructions, random access memory (RAM) or other type of dynamic storage device capable of storing information and instructions, or electrically erasable programmable read-only memory (EEPROM), disk storage media or other magnetic storage devices, or any other medium capable of carrying or storing desired program code in the form of instructions or data structures and accessible by a computer, but is not limited thereto.

[0169] As one possible implementation, the memory 111 can exist independently of the processor 112. The memory 111 can be connected to the processor 112 via a bus 114 and is used to store instructions or program code. When the processor 112 calls and executes the instructions or program code stored in the memory 111, it can implement the service forwarding method provided in the embodiments of this application.

[0170] In another possible implementation, the memory 111 can also be integrated with the processor 112.

[0171] Bus 114 can be an Extended Industry Standard Architecture (EISA) bus, etc. Bus 114 can be divided into address bus, data bus, control bus, etc. For ease of representation, Figure 11 The bus is represented by a single thick line, but this does not mean that there is only one bus or one type of bus.

[0172] Through the above description of the implementation methods, those skilled in the art can clearly understand that, for the sake of convenience and brevity, only the division of the above functional modules is used as an example. In actual applications, the above functions can be assigned to different functional modules as needed, that is, the internal structure of the service calling device can be divided into different functional modules to complete all or part of the functions described above.

[0173] This application embodiment also provides a chip, which includes a processor and a communication interface. The communication interface and the processor are coupled. The processor is used to run programs or instructions to implement the various processes of the above-described service forwarding method embodiments and can achieve the same technical effect. To avoid repetition, it will not be described again here.

[0174] It should be understood that the chip mentioned in the embodiments of this application may also be referred to as a system-on-a-chip, system chip, chip system, or system-on-a-chip, etc.

[0175] This application also provides a readable storage medium storing a program or instructions that, when executed by a computer, implement the service forwarding method provided in the above embodiments. It is understood that all or part of the processes in the above method embodiments can be executed by computer instructions instructing related hardware; the readable storage medium can be any of the foregoing embodiments or memory; the readable storage medium can also be an external storage device of the service invocation device, such as a pluggable hard drive, Smart MediaCard (SMC), Secure Digital (SD) card, flash card, etc., equipped on the service invocation device. Further, the readable storage medium can include both internal storage units of the service invocation device and external storage devices. The readable storage medium is used to store the computer program and other programs and data required by the service invocation device. The readable storage medium can also be used to temporarily store data that has been output or will be output.

[0176] This application also provides a computer program product, which is stored in a storage medium and implements the service forwarding method provided in the above embodiments when the computer program product is executed by a computer.

[0177] It should be noted that, in this document, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Without further limitations, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes that element. Furthermore, it should be noted that the scope of the methods and apparatuses in the embodiments of this application is not limited to performing functions in the order shown or discussed, but may also include performing functions substantially simultaneously or in the reverse order, depending on the functions involved. For example, the described methods may be performed in a different order than described, and various steps may be added, omitted, or combined. Additionally, features described with reference to certain examples may be combined in other examples.

[0178] Through the above description of the embodiments, those skilled in the art can clearly understand that the methods of the above embodiments can be implemented by means of software plus necessary general-purpose hardware platforms. Of course, they can also be implemented by hardware, but in many cases the former is a better implementation method. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, can be embodied in the form of a computer software product. This computer software product is stored in a storage medium (such as ROM / RAM, magnetic disk, optical disk) and includes several instructions to cause a terminal (which may be a mobile phone, computer, server, or network device, etc.) to execute the methods described in the various embodiments of this application.

[0179] The embodiments of this application have been described above with reference to the accompanying drawings. However, this application is not limited to the specific embodiments described above. The specific embodiments described above are merely illustrative and not restrictive. Those skilled in the art can make many other forms under the guidance of this application without departing from the spirit and scope of the claims, and all of these forms are within the protection scope of this application.

Claims

1. A service forwarding method, characterized in that, The process is executed by the Optical Line Terminal (OLT), which establishes multiple Virtual Private Network (VPN) tunnels with the Broadband Core Network (BNC) User Plane Equipment. Each VPN tunnel is used to transmit a type of service to the BNC User Plane Equipment. The service forwarding method includes: Receive and parse Internet Protocol (IP) packets from lower-layer network devices; If the IP packet is a control plane packet, the IP packet is forwarded to the BNC control plane device; If the IP packet is a user plane packet, the first service virtual local area network (SVLAN) tag is extracted from the IP packet, and the IP packet is forwarded to the BNC user plane device through the first VPN channel mapped to the first SVLAN tag. The first SVLAN tag is used to identify the service type of the IP packet.

2. The service forwarding method according to claim 1, characterized in that, The service forwarding method also includes: VPN tunnels are established with multiple devices on the BNC user plane, and one device on the BNC user plane carries one type of service.

3. The service forwarding method according to claim 1 or 2, characterized in that, The service forwarding method also includes: Establish a mapping relationship between multiple SVLAN tags and multiple VPN identification information; wherein, the multiple SVLAN tags include the first SVLAN tag, and the VPN channel indicated by the VPN identification information corresponding to the first SVLAN tag is the first VPN channel; different service types correspond to different SVLAN tags, and one VPN identification information indicates one VPN channel.

4. The service forwarding method according to claim 1, characterized in that, When the IP packet is a control plane packet, forwarding the IP packet to the BNC control plane device includes: When the control plane message is a user authentication message, the user authentication message is forwarded to the BNC control plane device through the relay module of the OLT.

5. The service forwarding method according to claim 4, characterized in that, The service forwarding method also includes: After receiving the user authentication result returned by the BNC control plane device through the relay module, the user authentication result is forwarded to the lower-layer network device.

6. The service forwarding method according to claim 4, characterized in that, The user authentication message includes PPPoE message and IPoE message.

7. The service forwarding method according to claim 6, characterized in that, The relay module communicates with the BNC control plane device via the Access Node Control Protocol (ANCP), and the control plane messages are encapsulated in the ANCP protocol.

8. A service forwarding device, characterized in that, Applied to an optical line terminal (OLT), the OLT establishes multiple virtual private network (VPN) tunnels with a BNC (Browser Control Center) user plane equipment. Each VPN tunnel is used to transmit a type of service to the BNC user plane equipment. The service forwarding device includes: The receiving module is used to receive Internet Protocol (IP) packets from lower-layer network devices; The processing module is used to parse the IP packets; The forwarding module is used to forward the IP packet to the BNC control plane device when the IP packet is a control plane packet; The processing module is further configured to extract the first Service Virtual Local Area Network (SVLAN) tag from the IP packet when the IP packet is a user plane packet; The forwarding module is further configured to, when the IP packet is a user plane packet, forward the IP packet to the BNC user plane device through a first VPN channel mapped to the first SVLAN tag; The first SVLAN tag is used to identify the service type of the IP packet.

9. An electronic device, characterized in that, It includes a processor and a memory, the memory storing programs or instructions that can run on the processor, the programs or instructions being executed by the processor to implement the service forwarding method as described in any one of claims 1-7.

10. A readable storage medium, characterized in that, The readable storage medium stores a program or instructions, which, when executed by a computer, implement the service forwarding method as described in any one of claims 1-7.

11. A computer program product, characterized in that, The computer program product is stored in a storage medium, and when executed by a computer, the computer program product implements the service forwarding method as described in any one of claims 1-7.

Images