Enterprise srv6 network communication system adopting flex-e protocol

Abstract

The application discloses an enterprise SRV6 network communication system adopting a flex-e protocol and belongs to the technical field of computer networking. The application comprises a public bearing network and a service access network; the public bearing network comprises a plurality of routers supporting SRV6 and FlexE functions, bears an IPv6 protocol at a bottom layer, and deploys an IPv6 segment routing; each router is configured with a FlexE domain, an Ethernet physical port is bound to the FlexE domain, and a peer router identifier is configured, and a FlexE link is established between adjacent routers; the service access network adopts VXLAN encapsulation and is combined with the public bearing network EVPN to build an Overlay network. The application can integrally bear all service data streams in an enterprise park and can differentially provide service service guarantee levels that can be selected and matched as required for different services. The network communication system can realize network security isolation between services, simultaneously supports unified scheduling and distribution of safe resources, and achieves sharing of bottom layer basic resources.

Description

Technical Field

[0001] This invention relates to the field of computer network construction technology, and more specifically, to an enterprise SRV6 network communication system using the flex-e protocol. Background Technology

[0002] Enterprise-level networks adopt a layered architecture based on applications, organizational structure, and deployment location, with various information system services serving as the main network carriers. With the continuous development of the Industrial Internet industry, diversified service carrying needs have emerged. Different services have significantly different requirements for network resources, and various services generally require logical isolation or physically independent networking.

[0003] Different services have varying requirements for key indicators such as network latency, real-time performance, and transmission bandwidth, making it difficult for traditional unified bearer networks to meet these diverse requirements. Adopting the traditional deployment approach of building separate networks for each service would result in a series of problems, including fragmented network resources that cannot be shared, high project construction costs, and significant operational and maintenance pressures throughout the entire lifecycle.

[0004] With the large-scale deployment and application of IPv6 technology, related technical standards such as Flex-E and Segmented Routing (SR) are gradually being improved and matured, enabling enterprises to build virtual private networks adapted to the corresponding transmission performance based on a unified set of hardware network equipment and to meet the differentiated network indicator requirements of their services, thereby simultaneously achieving security isolation between services and ensuring transmission performance. Summary of the Invention

[0005] 1. The technical problem that the invention aims to solve In view of the problems existing in the above-mentioned technologies, such as the inability of a unified bearer network to adapt to differentiated needs, high cost of independent network construction, and fragmented resources that cannot be shared, this invention provides an enterprise SRV6 network communication system using the Flex-E protocol. This invention can achieve integrated bearer of all business data streams within an enterprise campus and provide selectable service guarantee levels for different business needs. The network communication system of this invention can achieve network security isolation between various services, while supporting unified scheduling and allocation of security resources to achieve sharing of underlying basic resources. Furthermore, this invention can eliminate the constraints of business network hierarchy, allowing various business applications to directly access the cloud through a single-hop forwarding path, achieving end-to-end simplified cloud transmission.

[0006] 2. Technical Solution To achieve the above objectives, the technical solution provided by the present invention is as follows: The present invention provides an enterprise SRV6 network communication system using the Flex-E protocol, comprising a public bearer network and a service access network; The public bearer network includes multiple routers that support SRV6 and FlexE functions. The underlying layer of the public bearer network carries the IPv6 protocol and deploys IPv6 segmented routing. Each router is configured with a FlexE domain, the Ethernet physical port is bound to the FlexE domain and the peer router identifier is configured, and a FlexE link is established between adjacent routers; The service access network adopts VXLAN encapsulation and is combined with the public bearer network EVPN to build an overlay network.

[0007] Furthermore, the public bearer network is configured with two independent networks, namely bearer public network A and bearer public network B.

[0008] Furthermore, the public bearer network selects the SR forwarding mode, assigns dedicated operation codes to each service VPN, and generates SR scheduling policies that match the services.

[0009] Furthermore, the public bearer network encapsulates the SRH segmented routing extension header in the IPv6 packet, and during the forwarding process, each intermediate node iteratively updates the packet destination address and offset address stack to complete the SRv6 end-to-end forwarding.

[0010] Furthermore, the public bearer network completes the exchange of routing information between devices within the network through any of the IGP interior gateway protocols such as RIP, OSPF, IS-IS, IGRP, and EIGRP.

[0011] Furthermore, a VPN instance is created on the public bearer network, and the VPN instance is bound to the service port and the FlexE domain.

[0012] Furthermore, the VPN is based on SRv6 bearer, and the VPN execution process includes SRv6 BE / TE path establishment, VPN route interconnection, and end-to-end forwarding of service packets.

[0013] Furthermore, the public bearer network is equipped with an SDN-WAN public bearer control service platform; the SDN-WAN public bearer control service platform schedules SR-TE tunnels, divides network slices according to tunnel priority, distinguishes slices according to the type of service carried, sets slice bandwidth according to service traffic, uses SR-TE to carry slice traffic and plans node distribution according to tunnel priority.

[0014] Furthermore, the service access network is a multi-service shared aggregation network, or an independent network equipped with independent access equipment and connected to a dedicated channel of the public bearer network.

[0015] Furthermore, the internal transmission channel of the service access network reuses the public bearer network EVPN channel or independently deploys point-to-point tunnels; the public bearer network carries private network VPN services by establishing SRv6BE / TE paths; when the SR forwarding mode selects SRv6 TE, the public bearer network is configured with a network controller, which configures an independent overlay network architecture for each service, encapsulates packets based on the standard TCP / IP protocol, and presets an egress gateway to achieve communication with the external network.

[0016] 3. Beneficial effects Compared with the prior art, the technical solution provided by this invention has the following advantages: (1) The present invention provides an enterprise SRV6 network communication system using the flex-e protocol, which can configure no less than two equivalent internal channel routes for various business networks, including enterprise private cloud networks, to meet the redundancy backup and bandwidth carrying requirements of business networks.

[0017] (2) For different business systems such as enterprise zoned information networks, industrial control systems, video surveillance systems, power monitoring networks, and 5G private networks, this invention can allocate independent transmission channels to realize the convergence of multiple business networks such as information services, industrial control, video monitoring, power monitoring, and factory 5G, forming a "single network" for interconnection of various enterprise applications. This ensures the different requirements of high reliability, low latency, and large bandwidth for enterprise industrial control. At the same time, it also supports 5G network transmission within the enterprise area, enabling the enterprise to have autonomous and secure control over the 5G network it uses.

[0018] (3) This invention can provide low latency, high reliability and high bandwidth transmission access capabilities for industrial access services, and provide flexible access technology support for various information services. Attached Figure Description

[0019] Figure 1 This is a schematic diagram of the public bearer network structure in this invention; Figure 2 This is a schematic diagram of the service access network structure in this invention. Detailed Implementation

[0020] To further understand the content of this invention, a detailed description of the invention will be provided in conjunction with the accompanying drawings and embodiments.

[0021] See Figure 1 and Figure 2 To achieve the goals of seamless connectivity between different layers, network convergence, and one-hop cloud access for all business networks, this embodiment provides an enterprise SRV6 network communication system using the flex-e protocol, including a public bearer network and a service access network.

[0022] The public bearer network includes multiple routers, which support SRV6 and FlexE functions. To ensure reliable and uninterrupted operation, the system includes two independent public bearer networks, referred to as bearer network A and bearer network B. This ensures that at least one network can be used normally during normal maintenance, system upgrades, or the deployment of new services.

[0023] Configure and create a FlexE domain on the router, configure the Ethernet port, and associate it with the domain to establish a FlexE link between adjacent routers. The specific process is as follows: create a FlexE domain on the router side, bind the corresponding Ethernet physical port, configure the identifier of the peer router, and complete the establishment of the FlexE link and bandwidth resource allocation.

[0024] The network layer carries the IPv6 protocol, deploys IPv6 segmented routing and selects the SR forwarding mode (TE / BE), assigns exclusive operation codes to each service VPN, and generates SR scheduling policies that match the services.

[0025] By encapsulating IPv6 packets with SRH (Segment Routing Header) extension headers, and iteratively updating the packet destination address and offset address stack at each intermediate node during forwarding, SRv6 end-to-end forwarding capability is achieved.

[0026] Internal network routing communication relies on the IGP internal gateway protocol, and can be accomplished by using RIP, OSPF, IS-IS, IGRP, and EIGRP to exchange routing information between devices within the network.

[0027] Create a VPN instance and bind the business port to the FlexE domain to build a dedicated physically isolated private network.

[0028] VPNs are based on SRv6 and their core processes include SRv6 BE / TE path establishment, VPN route interconnection, and end-to-end forwarding of service packets.

[0029] By building an underlying public bearer network using IPv6, it can connect to both IPv4 and IPv6 traditional private networks; by establishing SRv6 BE / TE paths in the public network, it can carry VPN services for private networks.

[0030] If the SRv6 TE forwarding mode is selected, a network controller can be introduced to achieve unified management of the entire access network: the controller configures an independent overlay network architecture for each service, completes packet encapsulation based on the standard TCP / IP protocol, and presets an egress gateway to complete communication with the external network.

[0031] The service access network can be an aggregation network shared by multiple services, or an independent network using independent access equipment and dedicated channels of the public bearer network.

[0032] It can optimize the network according to the priority definition of the business network carried in the VPN and support more flexible bandwidth granularity scheduling, so as to realize the diversification of network performance for business and application scenarios, without being restricted by the tiered rate system of 10-25-40-50-100-200-400G set by the standard.

[0033] FlexE provides channelized hardware isolation at the physical interface layer, ensuring the SLA (Service Level Agreement) indicators of various services, enabling each service to have its own dedicated bandwidth, preventing data interference between services, and significantly improving QoS guarantee capabilities under concurrent multi-service support.

[0034] This embodiment, through the reasonable deployment of FlexE technology, can achieve hardware channel isolation for multiple services, on-demand bandwidth expansion, and support the segmentation and bearing of different services. It is an important technology to support the construction, application and development of new networks.

[0035] The service access network adopts VXLAN encapsulation combined with the public bearer network EVPN to build a highly flexible enterprise overlay network; the internal transmission channel of the service can reuse the EVPN channel of the public bearer network or deploy point-to-point tunnels independently.

[0036] The public bearer network adopts a multi-link interconnection architecture to improve network plane reliability; the nodes are close to the business network to provide access for different nearby business networks, so as to provide refined network service quality assurance for the access network.

[0037] The node device supports FlexE hardware isolation and SRv6 segmented routing forwarding capabilities.

[0038] The bearer network is equipped with a public bearer control service platform SDN-WAN to achieve intelligent scheduling of network resources and support SR-TE tunnel scheduling, accurately matching the SLA requirements of various service channels.

[0039] First, slices are divided according to the traditional tunnel priority method, and then sliced ​​according to the type of service carried. The size is customized according to the service volume and dynamically optimized by SDN-WAN. The service is carried through SR-TE and the node distribution is divided according to the traditional tunnel priority method.

[0040] This embodiment can configure no fewer than two equivalent internal channel routes for various business networks, including enterprise private cloud networks, to meet the redundancy backup and bandwidth carrying requirements of business networks.

[0041] Meanwhile, this embodiment can allocate independent transmission channels for different business systems such as enterprise zoned information networks, industrial control systems, video surveillance systems, power monitoring networks, and 5G private networks. This enables the convergence of multiple business networks, including information services, industrial control, video monitoring, power monitoring, and factory 5G, forming a unified network for interconnecting various enterprise applications. This ensures the enterprise's diverse requirements for high reliability, low latency, and high bandwidth in industrial control. Simultaneously, it supports 5G network transmission within the enterprise area, enabling the enterprise to autonomously and securely manage the 5G network it uses.

[0042] This embodiment can provide low-latency, high-reliability, and high-bandwidth transmission access capabilities for industrial access services, and provide flexible access technology support for various information services.

[0043] The present invention and its embodiments have been described above illustratively. This description is not restrictive, and the accompanying drawings are only one embodiment of the present invention, and are not actually limited thereto. Therefore, if those skilled in the art are inspired by this description and design similar structures and embodiments without departing from the spirit of the present invention, such designs should fall within the protection scope of the present invention.

Claims

1. An enterprise SRV6 network communication system using the Flex-E protocol, characterized in that, This includes public bearer networks and service access networks; The public bearer network includes multiple routers that support SRV6 and FlexE functions. The underlying layer of the public bearer network carries the IPv6 protocol and deploys IPv6 segmented routing. Each router is configured with a FlexE domain, the Ethernet physical port is bound to the FlexE domain and the peer router identifier is configured, and a FlexE link is established between adjacent routers; The service access network adopts VXLAN encapsulation and is combined with the public bearer network EVPN to build an overlay network.

2. The enterprise SRV6 network communication system using the Flex-E protocol according to claim 1, characterized in that, The public bearer network is configured with two independent networks, namely bearer public network A and bearer public network B.

3. An enterprise SRV6 network communication system using the Flex-E protocol according to claim 1 or 2, characterized in that, The public bearer network selects the SR forwarding mode, assigns exclusive operation codes to each service VPN, and generates SR scheduling policies that match the services.

4. The enterprise SRV6 network communication system using the Flex-E protocol according to claim 3, characterized in that, The public bearer network encapsulates the SRH segmented routing extension header in the IPv6 packet. During the forwarding process, each intermediate node iteratively updates the packet destination address and offset address stack to complete the SRv6 end-to-end forwarding.

5. An enterprise SRV6 network communication system using the Flex-E protocol according to claim 4, characterized in that, The public bearer network completes the exchange of routing information between devices within the network through any of the IGP interior gateway protocols such as RIP, OSPF, IS-IS, IGRP, and EIGRP.

6. The enterprise SRV6 network communication system using the Flex-E protocol according to claim 5, characterized in that, A VPN instance is created on the public bearer network, and the VPN instance is bound to the service port and the FlexE domain.

7. An enterprise SRV6 network communication system using the Flex-E protocol according to claim 6, characterized in that, The VPN is based on SRv6 bearer, and the VPN execution process includes SRv6 BE / TE path establishment, VPN route interconnection, and end-to-end forwarding of service packets.

8. An enterprise SRV6 network communication system using the Flex-E protocol according to claim 7, characterized in that, The public bearer network is equipped with an SDN-WAN public bearer control service platform. The SDN-WAN public bearer control service platform schedules SR-TE tunnels, divides network slices according to tunnel priority, distinguishes slices according to the type of service carried, sets slice bandwidth according to service traffic, uses SR-TE to carry slice traffic, and plans node distribution according to tunnel priority.

9. An enterprise SRV6 network communication system using the Flex-E protocol according to claim 8, characterized in that, The service access network is a multi-service shared aggregation network, or an independent network equipped with independent access equipment and connected to a dedicated channel of the public bearer network.

10. An enterprise SRV6 network communication system using the Flex-E protocol according to claim 9, characterized in that, The internal transmission channel of the service access network reuses the public bearer network EVPN channel, or independently deploys a point-to-point tunnel; The public bearer network carries private VPN services by establishing SRv6BE / TE paths. When SRv6 TE is selected as the SR forwarding mode, the public bearer network is configured with a network controller. The controller configures an independent overlay network architecture for each service, encapsulates packets based on the standard TCP / IP protocol, and sets up an egress gateway to enable communication with the external network.

Images