Deterministic flow transmission method, apparatus, and network node

Abstract

Embodiments of the present application provide a deterministic flow transmission method, an apparatus, and a network node. According to the embodiments, when a target deterministic flow matched with messages is identified, legitimacy detection is performed on the basis of the target deterministic flow and the messages, and when it is determined that legitimacy detection has passed, the messages belonging to the target deterministic flow are sorted in advance by the original message routing forwarding assembly of an NP by means of a newly deployed input interface unit before message processing, guaranteeing the sequentiality of messages of a same deterministic flow.

Description

Deterministic stream transmission method, device and network node Technical Field

[0001] The present application relates to network communication technology, and in particular to a deterministic stream transmission method, device, and network node. Background Art

[0002] In deterministic networks, to ensure forwarding flexibility, the forwarding units in network processors (NPs) in network devices such as routers must be flexibly programmable. This functionality can be achieved, for example, using the network device's multi-core CPU program or the NP's microcode. Figure 1 illustrates the structure of a forwarding unit in an NP. The forwarding unit is implemented in software, while the remaining hardware can be implemented in hardware. The forwarding unit and the remaining hardware are collectively referred to as the packet routing and forwarding component.

[0003] In a specific implementation, the forwarding units can be executed concurrently. In this way, after the packets of the same deterministic flow are processed by the forwarding units concurrently and corresponding operations such as routing forwarding or service processing are performed, the packets may be out of order, and the order of the packets belonging to the same deterministic flow cannot be guaranteed.

[0004] Summary of the Invention

[0005] The embodiments of the present application provide a deterministic stream transmission method, apparatus, and network node to ensure the sequence of messages belonging to the same deterministic stream.

[0006] An embodiment of the present application provides a deterministic stream transmission method, which is applied to a network node in a deterministic network, wherein the network node includes a network processor (NP); the NP is newly deployed with an input interface unit, or the network node is newly deployed with an input interface unit connected to the NP; the method includes:

[0007] Receive messages;

[0008] Identifying, through the input interface unit, a target deterministic flow matched by the message, and performing a legitimacy check based on the target deterministic flow and the message;

[0009] If the validity check passes, metadata matching the message is determined through the input interface unit and based on the target deterministic flow. The metadata includes at least a sequence number assigned to the message based on the target deterministic flow, the sequence number being used to indicate the order in which messages belonging to the target deterministic flow are received by the local node. The metadata is carried in the message through the input interface unit and delivered to the existing message routing and forwarding component deployed in the NP for routing and forwarding processing.

[0010] If the validity check fails, the message is discarded, or the attributes of the data flow to which the message belongs are modified and the message is transmitted based on the modified attributes, where the modified attributes are used to instruct the message to switch from the target deterministic flow to the best effort flow.

[0011] An input interface unit is applied to a network node, comprising: a data packet parsing module and a control logic module;

[0012] The data packet parsing module is used to parse the message to obtain parameters for identifying the deterministic flow and pass them to the control logic module;

[0013] The control logic module is used to identify the target deterministic flow matched by the message based on the parameters, and perform legitimacy detection based on the target deterministic flow and the message;

[0014] If the validity check passes, metadata matching the message is determined based on the target deterministic flow. The metadata includes at least a sequence number assigned to the message based on the target deterministic flow, the sequence number indicating the order in which messages belonging to the target deterministic flow are received by the local node. The metadata is carried in the message and passed to the existing message routing and forwarding component deployed in the NP for routing and forwarding processing.

[0015] If the validity check fails, the message is discarded, or the attributes of the data flow to which the message belongs are modified and the message is transmitted based on the modified attributes, where the modified attributes are used to instruct the message to switch from the target deterministic flow to the best effort flow.

[0016] An electronic device, comprising:

[0017] a processor and a machine-readable storage medium storing machine-executable instructions that can be executed by the processor;

[0018] The processor is used to execute machine-executable instructions to implement the steps in the above method.

[0019] It can be seen from the above technical solution that in the embodiment of the present application, after identifying the target deterministic flow that the message matches, a legitimacy check is performed based on the target deterministic flow and the message, and when it is determined that the legitimacy check has passed, the message belonging to the target deterministic flow is sorted in advance through the newly deployed input interface unit before the original message routing and forwarding component of the NP processes the message, so as to ensure the sequence of messages in the same deterministic flow.

[0020] Furthermore, this embodiment also discards the message or modifies the attributes of the data flow to which the message belongs when performing a legitimacy check based on the target deterministic flow and the message, so as to forward the message originally belonging to the above-mentioned target deterministic flow in a best-effort flow forwarding manner, and ultimately avoid the deterministic flow's attack on the network node. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present disclosure and, together with the description, serve to explain the principles of the present disclosure.

[0022] Figure 1 is a schematic diagram of the structure of NP in a network node;

[0023] FIG2 is a diagram illustrating a network structure of a network node according to an embodiment of the present application;

[0024] FIG3 is another network structure diagram of network nodes provided in an embodiment of the present application;

[0025] FIG4 is a flow chart of a method provided in an embodiment of the present application;

[0026] FIG5 is a diagram showing an improved structure of a network node according to an embodiment of the present application;

[0027] FIG6 is an abstract diagram of an improved structure of a network node provided in an embodiment of the present application;

[0028] FIG7 is a schematic diagram of a message processing mechanism within a network node according to an embodiment of the present application;

[0029] FIG8 is another schematic diagram of the internal message processing mechanism of a network node provided in an embodiment of the present application;

[0030] FIG9 is a structural diagram of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0031] Exemplary embodiments are described in detail herein, with examples illustrated in the accompanying drawings. When the following description refers to the drawings, identical numerals in different figures represent identical or similar elements unless otherwise indicated. The embodiments described in the following exemplary embodiments are not intended to represent all embodiments consistent with the present application. Rather, they are merely examples of apparatuses and methods consistent with certain aspects of the present application.

[0032] The terms used in this application are for the purpose of describing particular embodiments only and are not intended to limit this application. The singular forms "a", "the" and "the" used in this application are also intended to include plural forms, unless the context clearly indicates otherwise.

[0033] In order to ensure the sequence of messages belonging to the same deterministic flow, the embodiment of the present application will improve the network node used to copy messages, specifically: an input interface unit for docking with NP is newly deployed at the network node, or an input interface unit is newly deployed at NP. Figure 2 shows an example of the structure of a network node deployed with an input interface unit for docking with NP. Figure 3 shows an example of the structure of a newly deployed input interface unit based on the existing NP. In this embodiment, the input interface unit processes the message received by the network node before the original module in the NP (collectively referred to as the message routing and forwarding component), as shown in the process shown in Figure 4. The network nodes here are, for example, the ingress node (Ingress PE) where the message enters the deterministic network, the P node, and the network node specified by the controller, etc., which are not specifically limited in this embodiment.

[0034] Based on the above description, the method provided in the embodiment of the present application is described below:

[0035] See Figure 4, which is a flow chart of a method provided by an embodiment of the present application. This flow chart is applied to the improved network node described above. As shown in Figure 4, the method may include the following steps:

[0036] Step 401: Receive a message.

[0037] Step 402 : Identify the target deterministic flow matched by the message through the input interface unit, and perform a validity check based on the target deterministic flow and the message. If the validity check is passed, execute step 403 ; otherwise, execute step 404 .

[0038] In this embodiment, the input interface unit can accurately identify which deterministic flow the message belongs to (ie, the target deterministic flow that the message matches). As for how to accurately identify the target deterministic flow that the message matches, the following examples will be used to describe it, which will not be repeated here.

[0039] In this embodiment, the validity check is performed primarily because deterministic flows are handled more favorably than best-effort flows. If an abnormality occurs in the access device for a deterministic flow, it may impact the aforementioned network nodes. To prevent this impact, after the input interface unit identifies the target deterministic flow that the message matches, this embodiment further performs a validity check based on the target deterministic flow and the message.

[0040] As an embodiment, the aforementioned legitimacy check based on the target deterministic flow and message can be implemented in many ways. For example, it may include at least one of the following: message length detection (specifically, detecting whether the length of the message meets the set length required by the target deterministic flow; if so, determining that the message has passed the legitimacy check; if not, determining that the message has failed the legitimacy check); meter performance detection of the target deterministic flow based on each received message belonging to the target deterministic flow (specifically, detecting whether the message reception speed within a period of time meets the set speed; if so, determining that the message has passed the legitimacy check; if not, determining that the message has failed the legitimacy check); and so on. This embodiment does not specifically limit this.

[0041] Step 403: Determine metadata that matches the message based on the target deterministic flow through the input interface unit. The metadata includes at least: a sequence number assigned to the message based on the target deterministic flow, the sequence number being used to indicate the order in which messages belonging to the target deterministic flow are received by this node. The metadata is carried in the message through the input interface unit and delivered to the existing message routing and forwarding component deployed in the NP for routing and forwarding processing.

[0042] In this embodiment, the local node records the total number of packets belonging to each deterministic flow received by the local node in a register. Based on this, the sequence number may be the sum of the total number of packets belonging to the target deterministic flow received by the local node as recorded in the register and a set value, such as 1. This will be described with an example below and will not be further elaborated here.

[0043] Once metadata including at least the message sequence number is determined, the input interface unit carries the metadata in the message and passes it to the existing message routing and forwarding component deployed in the NP for routing and forwarding. This is equivalent to determining the message sequence number before the existing message routing and forwarding component deployed in the NP processes the message, thus ensuring the order of messages belonging to the same deterministic flow.

[0044] Step 404: discard the message, or modify the attribute of the data flow to which the message belongs and transmit the message based on the modified attribute, wherein the modified attribute is used to instruct the message to switch from the target deterministic flow to the best effort flow.

[0045] This step 404 is performed on the premise that the legitimacy check of step 402 has not been passed. Once the legitimacy check of step 402 has not been passed, it means that the message belonging to the above-mentioned target deterministic flow at this time may attack the above-mentioned network node due to the characteristics of the deterministic flow itself (such as the characteristic that the deterministic flow takes precedence over the best-effort flow, etc.). To avoid the above-mentioned attack, this step 404 will discard the message, or modify the attributes of the data flow to which the message belongs and transmit the above-mentioned message based on the modified attributes. Here, the modified attributes are used to indicate that the message is switched from the target deterministic flow to which it belongs to to the best-effort flow. In this way, through step 404, the message originally belonging to the above-mentioned target deterministic flow can be forwarded in the forwarding mode of the best-effort flow, so as to avoid the attack of the deterministic flow on the above-mentioned network node.

[0046] As an embodiment, modifying the attributes of the data flow to which the message belongs can be: modifying the service-level agreement (SLA) category of the message, for example, when the message belongs to a target deterministic flow, the SLA category of the message is S1, and when the message belongs to a best-effort flow, the SLA category of the message is S2, and S2 is less than S1, thereby ultimately switching the message from the target deterministic flow to which it belongs to to a best-effort flow.

[0047] At this point, the process shown in Figure 4 is completed.

[0048] Through the process shown in Figure 4, after identifying the target deterministic flow that the message matches, a legitimacy check can be performed based on the target deterministic flow and the message. When it is determined that the legitimacy check has passed, the message belonging to the target deterministic flow can be sorted in advance through the newly deployed input interface unit before the original message routing and forwarding component of the NP processes the message, thereby ensuring the sequence of messages in the same deterministic flow.

[0049] Furthermore, this embodiment also discards the message or modifies the attributes of the data flow to which the message belongs when performing a legitimacy check based on the target deterministic flow and the message, so as to forward the message originally belonging to the above-mentioned target deterministic flow in a best-effort flow forwarding manner, and ultimately avoid the deterministic flow's attack on the network node.

[0050] Based on the process shown in Figure 4, Figure 5 illustrates an abstract example of a corresponding structure diagram. As shown in Figure 5, after a message enters the input interface unit of a network node, the input interface unit performs the processing of steps 402 to 404 above on the message. The message, along with the metadata matched by the input interface unit, is then passed to one of the message routing and forwarding components of the NP in the network node, such as a pipeline scheduling unit. The pipeline scheduling unit schedules the message based on the metadata (for example, prioritizing the message with the highest SLA value in the metadata) to one of the message routing and forwarding components of the NP, such as the input pipeline unit. The input pipeline unit performs message encapsulation (for example, adding tunnel information) and other processing on the message. The input pipeline unit transmits the processed message to another message routing and forwarding component, such as a switching unit, which then performs packet replication of the message. Based on the processing of the input interface unit described above, the message sorting function is implemented here by the message from the output of the input interface unit to the input of the switching unit. After the switching unit replicates the packet, it is switched to the output pipeline processing unit where each output interface is located for further processing. Here, the output pipeline processing unit mainly performs quality of service (QoS) scheduling and internal transmission channel selection, and hands it over to the output interface unit through different transmission channels, so that the output interface unit can schedule messages belonging to deterministic flows or perform combined scheduling of messages belonging to deterministic flows and messages belonging to best-effort flows.

[0051] It should be noted that this embodiment focuses on the sorting of messages, and other operations are similar to existing operations. Therefore, for ease of understanding, the structural diagram shown in Figure 5 can be simplified to the structural diagram shown in Figure 6. As shown in Figure 6, after the input interface unit accurately identifies the target deterministic flow that the message matches, a legitimacy check is performed based on the message, and when the legitimacy check is passed, the input interface unit determines the metadata that matches the message based on the target deterministic flow. Afterwards, the input interface unit passes the metadata along with the message to the pipeline scheduling unit, and the pipeline scheduling unit schedules the message according to the metadata (for example, the message with the highest SLA value in the metadata is prioritized); after the metadata and the message are scheduled into the corresponding pipeline by the pipeline scheduling unit, the corresponding input pipeline unit encapsulates the message according to the protocol regulations. After that, it can be processed according to the existing process.

[0052] It should be noted that the input interface unit involved in Figures 4 to 6 needs to identify the target deterministic flow that the message matches and perform legitimacy checks based on the message. This requires the input interface unit to have sufficient resources to parse the message and provide strong programmability. In addition, since the input interface unit also needs to further determine the metadata that matches the message based on the target deterministic flow (this can be achieved through ACL), this requires the input interface unit to provide a sufficiently large-scale ACL capability.

[0053] Optionally, as an embodiment, in this embodiment, in a scenario where the network node deploys an input interface unit that connects to the NP in the network node, the input interface unit at this time can implement the above-mentioned input interface unit through FPGA or programmable switching chip; and under the premise that the input interface unit is deployed in the NP in the network node, the input interface unit at this time can be integrated into the NP. Taking the NP as an example, if it is implemented through ASIC, the input interface unit at this time can be integrated into the ASIC.

[0054] For ease of understanding, Figure 7 illustrates how an FPGA-based input interface unit can be used with an NP to implement message transmission, assuming a network node is equipped with an input interface unit for interfacing with an NP. Figure 8 illustrates how an NP-based integrated input interface unit can implement message transmission.

[0055] In FIG7 and FIG8 , the structures of the input interface units are similar, and may include: a data packet parsing module (Parser) and a control logic module (ControlLogic).

[0056] The Parser is used to parse the header vector from the message and pass it to the ControlLogic. The header vector includes parameters for identifying deterministic flows, such as: 1) the message quintuple and DSCP for IPv4 and IPv6 messages; 2) the flow label for IPv4 messages; and 3) the forwarding label and service label for MPLS messages or PREOF implemented using MPLS.

[0057] It should be noted that, in this embodiment, the bit width of each field in the Header Vector complies with the protocol requirements, such as 32 bits for the source IP address of IPv4 and 128 bits for the source IP address of IPv6. Furthermore, the Header Vector also includes a vector field valid indication bit (ValidFlag) to indicate whether each vector field in the Header Vector is valid. When the corresponding bit of the ValidFlag is a set value, such as 1, it indicates that each vector field in the Header Vector is valid.

[0058] ControlLogic is used to use the Header Vector to identify the target deterministic flow that the message matches in the configured deterministic flow table.

[0059] As an embodiment, the deterministic flow table is implemented using an ACL table, which primarily includes a correspondence between flow feature keywords and deterministic flow identifiers. Here, the flow feature keyword may include at least one parameter carried by the aforementioned Header Vector. Based on this, this embodiment uses the at least one parameter carried by the aforementioned Header Vector as a keyword to search the ACL table for the corresponding deterministic flow identifier, ultimately identifying the target deterministic flow that the message matches.

[0060] In this embodiment, the deterministic flow table may also be implemented by an ACL table, which may further include:

[0061] Local Flow ID (LocalFlowID), used to map the hardware resources of NP and subsequent processing stages;

[0062] SLA;

[0063] Global flow / aggregated flow ID (GlobalFlowID / AggregatedFlowID);

[0064] Based on this, this embodiment can obtain the above-mentioned deterministic flow information in all the obtained ACL tables serving as deterministic flow information tables according to the target deterministic flow.

[0065] In this embodiment, LocalFlowID may be associated with a corresponding register information table also called an input flow table (Input Flow Table). The Input Flow Table is generally indexed by LocalFlowID and maintains at least the following parameters: 1) Flow sequence number register address, the corresponding flow sequence number register is used to accumulate the number of packets belonging to the above-mentioned target deterministic flow received by this node, so as to assign corresponding sequence numbers to the packets; 2) Meter register address: the corresponding meter register is used to measure the packet traffic through the token bucket mechanism; 3) Statistics register address: the corresponding statistics register is used to count packets, such as the number of received packets, number of bytes, number of lost packets, packet loss statistics, etc.; 4) Legal length check threshold: for example, the legal length check is performed with the maximum receiving unit length as the upper limit; 5) Traffic excess threshold, in bps; 6) Burst length threshold; 7) Related policies, such as the policy adopted for packets of illegal length, such as discarding and counting, or modifying the attributes of the data flow to which the packet belongs. The modified attributes are used to instruct the packet to switch from the target deterministic flow to the best-effort flow (which can be achieved, for example, by lowering the packet SLA level).

[0066] Based on the Input Flow Table, in this embodiment, ControlLogic can perform at least one of the following legitimacy checks based on the message: for example, obtaining the corresponding meter register based on the meter register address, measuring the message traffic through the token bucket mechanism to obtain the measurement result, and performing meter performance detection based on the measurement result; performing legitimacy length check and traffic excess check on the message based on the legitimacy length check threshold and traffic excess threshold; when the length of the message changes compared to the length of other messages belonging to the target deterministic flow, performing burst length check on the message based on the burst length threshold, etc.

[0067] When it is found that the legitimacy check fails, the message is processed based on the above-mentioned relevant strategies, such as discarding the above message, or modifying the attributes of the data flow to which the above message belongs and transmitting the above message based on the modified attributes. The modified attributes are used to instruct the message to switch from the target deterministic flow to which it belongs to to the best-effort flow.

[0068] If the validity check passes, ControlLogic is further configured to determine metadata matching the message based on the target deterministic flow. For example, ControlLogic searches the register information table for the flow sequence number register address based on the local flow ID. The flow sequence number register corresponding to the flow sequence number register address is assigned a sequence number corresponding to the message received by the node, and metadata matching the message is determined based on the sequence number. Determining metadata matching the message based on the sequence number may include using the sequence number, the SLA, and other metadata matching the message.

[0069] In Figure 7, after determining the metadata, ControlLogic sends the metadata and the message together to the Input Class Unit in the NP, so that the Input Class Unit knows the SLA in the metadata and maps it to the corresponding SLA queue in the Processor Management Unit. It should be noted that the Input Class Unit in the NP only has simple message recognition functions, such as parsing messages based on a fixed offset position, identifying fixed IPv4 / IPv6 format messages, and prioritizing according to certain field values. However, its message parsing capability is very weak. It cannot recognize the metadata of the message, nor can it distinguish the SLA of the message in the metadata. This requires the input interface unit to adapt to the Input Class Unit so that the Input Class Unit can identify the SLA of the message.

[0070] In Figure 8, because the input interface unit is integrated into the NP, the Input Class Unit is omitted from the Input Interface Unit and the Processor Management Unit within the NP. Instead, the Control Logic within the Input Interface Unit directly collaborates with the Processor Management Unit within the NP, completely freeing it from SLA classification processing. This significantly simplifies processing complexity and improves processing capabilities. Furthermore, during processing, messages with high SLA levels are prioritized, preventing high-priority, high-real-time traffic from being overwhelmed by lower-priority or less-real-time traffic.

[0071] As an embodiment, the present application also provides a hardware structure for a network node. See Figure 9, which is a block diagram of an electronic device provided in an embodiment of the present application. As shown in Figure 9, the hardware structure may include: a processor and a machine-readable storage medium storing machine-executable instructions that can be executed by the processor; the processor is configured to execute the machine-executable instructions to implement the method disclosed in the above examples of the present application.

[0072] Based on the same application concept as the above method, an embodiment of the present application also provides a machine-readable storage medium, on which a number of computer instructions are stored. When the computer instructions are executed by a processor, the method disclosed in the above example of the present application can be implemented.

[0073] Exemplarily, the machine-readable storage medium may be any electronic, magnetic, optical, or other physical storage device that may contain or store information, such as executable instructions, data, and the like. For example, the machine-readable storage medium may be: RAM (Random Access Memory), volatile memory, non-volatile memory, flash memory, a storage drive (such as a hard disk drive), a solid-state drive, any type of storage disk (such as a CD, DVD, etc.), or similar storage media, or a combination thereof.

[0074] The systems, devices, modules, or units described in the above embodiments may be implemented by computer chips or entities, or by products having certain functions. A typical implementation device is a computer, which may be in the form of a personal computer, laptop computer, cellular phone, camera phone, smartphone, personal digital assistant, media player, navigation device, email transceiver, game console, tablet computer, wearable device, or any combination of these devices.

[0075] For the convenience of description, the above devices are described as being divided into various units according to their functions. Of course, when implementing this application, the functions of each unit can be implemented in the same or multiple software and / or hardware.

[0076] Those skilled in the art will appreciate that the embodiments of the present application can be provided as methods, systems, or computer program products. Therefore, the present application can adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment in combination with software and hardware. Moreover, the embodiments of the present application can adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to magnetic disk storage, CD-ROM, optical storage, etc.) that contain computer-usable program code.

[0077] The present application is described with reference to the flow chart and / or block diagram of the method, device (system) and computer program product according to the embodiment of the present application. It should be understood that each flow process and / or box in the flow chart and / or block diagram and the combination of the flow process and / or box in the flow chart and / or block diagram can be realized by computer program instructions. These computer program instructions can be provided to the processor of a general-purpose computer, a special-purpose computer, an embedded processing machine or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device produce a device for realizing the function specified in one flow chart flow or multiple flows and / or one box or multiple boxes of the block diagram.

[0078] Moreover, these computer program instructions can also be stored in a computer-readable memory that can guide a computer or other programmable data processing device to work in a specific manner, so that the instructions stored in the computer-readable memory produce a manufactured product including an instruction device, which implements the functions specified in one or more processes in the flowchart and / or one or more boxes in the block diagram.

[0079] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, whereby the instructions executed on the computer or other programmable device provide steps for implementing the functions specified in one or more processes in the flowchart and / or one or more boxes in the block diagram.

[0080] The foregoing is merely an embodiment of the present application and is not intended to limit the present application. For those skilled in the art, the present application may have various changes and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principles of the present application should be included within the scope of the claims of the present application.

Claims

1. A deterministic stream transmission method, characterized in that: The method is applied to a network node in a deterministic network, the network node comprising a network processor NP; the NP is newly deployed with an input interface unit or the network node is newly deployed with an input interface unit connected to the NP; the method comprises: Receive messages; Identifying, through the input interface unit, a target deterministic flow matched by the message, and performing a legitimacy check based on the target deterministic flow and the message; If the legitimacy check is passed, metadata matching the message is determined through the input interface unit and according to the target deterministic flow, the metadata at least including: a sequence number assigned to the message based on the target deterministic flow, the sequence number being used to indicate the order in which the messages belonging to the target deterministic flow are received by the node, and the metadata is carried in the message through the input interface unit and transmitted to the original message routing and forwarding component deployed in the NP for routing and forwarding processing; If the validity check fails, the message is discarded, or the attribute of the data flow to which the message belongs is modified and the message is transmitted based on the modified attribute, wherein the modified attribute is used to instruct the message to switch from the target deterministic flow to which it belongs to to a best-effort flow.

2. The method according to claim 1, characterized in that The NP is implemented by an ASIC, and the newly deployed input interface unit of the NP is integrated into the ASIC; or, On the premise that the network node is deployed with an input interface unit connected to the NP, the input interface unit is implemented by FPGA.

3. The method according to claim 1, characterized in that The identifying, by the input interface unit, a target deterministic flow matched by the message comprises: Parsing a header vector Header Vector from the message through the input interface unit; the Header Vector includes parameters for identifying a deterministic flow; Based on the parameters, a target deterministic flow matched by the message is identified in a configured deterministic flow table.

4. The method according to claim 3, characterized in that The parameter included in the Header Vector for identifying the deterministic stream is at least one of the following parameters: Applicable to the packet quintuple and DSCP of IPv4 and IPv6 packets; Flow Label for IPv4 packets; Forwarding Label and Service Label applicable to MPLS packets or PREOF implemented using MPLS.

5. The method according to claim 1, characterized in that The performing of legitimacy detection based on the target deterministic flow and the message comprises: At least one of the following detections is performed based on the target deterministic flow and the message: Detecting whether the message length of the message meets the set length required by the target deterministic flow; A meter performance check is performed on the target deterministic flow based on each received message belonging to the target deterministic flow.

6. The method according to claim 1, characterized in that The target deterministic flow has corresponding deterministic flow information, and the deterministic flow information at least includes: a local flow ID, a service level category SLA, and a global flow / aggregate flow ID; The determining of metadata matching the message according to the target deterministic flow includes: Searching for a stream sequence number register address in a register information table based on the local stream ID; the stream sequence number register corresponding to the stream sequence number register address is controlled to assign a corresponding sequence number to the message belonging to the target deterministic stream received by the node; The stream sequence number register corresponding to the stream sequence number register address is obtained to assign a corresponding sequence number to the message, and metadata matching the message is determined according to the sequence number.

7. An input interface unit, characterized in that: The input interface unit is applied to a network node and includes: a data packet parsing module and a control logic module; The data packet parsing module is used to parse out parameters for identifying deterministic flows from the message and pass them to the control logic module; The control logic module is used to identify the target deterministic flow matched by the message based on the parameter, and perform legitimacy detection based on the target deterministic flow and the message; If the legitimacy check is passed, metadata matching the message is determined according to the target deterministic flow, where the metadata at least includes: a sequence number assigned to the message based on the target deterministic flow, where the sequence number is used to indicate the order in which the messages belonging to the target deterministic flow are received by the node, and the metadata is carried in the message and transmitted to the original message routing and forwarding component deployed in the NP for routing and forwarding processing; If the validity check fails, the message is discarded, or the attribute of the data flow to which the message belongs is modified and the message is transmitted based on the modified attribute, wherein the modified attribute is used to instruct the message to switch from the target deterministic flow to which it belongs to to a best-effort flow.

8. The input interface unit according to claim 7, characterized in that: If the input interface unit is connected to an existing NP of the network node, the control logic module transmits the metadata together with the data packet to the input classification unit in the NP; the input interface unit is adapted to the input classification unit to assist the input classification unit in identifying the SLA of the message carried by the metadata, and the input classification unit transmits the message to the SLA queue in the pipeline scheduling unit in the NP based on the identified SLA; If the input interface unit is integrated into the NP, the control logic module transmits the metadata together with the data packet to the SLA queue in the pipeline scheduling unit in the NP.

9. The input interface unit according to claim 7, characterized in that: The NP is implemented by an ASIC, and the newly deployed input interface unit of the NP is integrated into the ASIC; or, On the premise that the input interface unit is connected to the NP, the input interface unit is implemented by FPGA.

10. The input interface unit according to claim 7, characterized in that: The parameter used to identify the deterministic flow is a parameter carried by the header vector Header Vector in the message; The control logic module identifies a target deterministic flow matched by the message in a configured deterministic flow table based on the parameters.

11. The input interface unit according to claim 7, characterized in that: The parameter used to identify the deterministic flow is at least one of the following parameters: Applicable to the packet quintuple and DSCP of IPv4 and IPv6 packets; Flow Label for IPv4 packets; Forwarding Label and Service Label applicable to MPLS packets or PREOF implemented using MPLS.

12. The input interface unit according to claim 7, characterized in that: The control logic module performs legitimacy detection based on the target deterministic flow and the message, including: At least one of the following detections is performed based on the target deterministic flow and the message: Detecting whether the message length of the message meets the set length required by the target deterministic flow; A meter performance check is performed on the target deterministic flow based on each received message belonging to the target deterministic flow.

13. The input interface unit according to claim 7, characterized in that: The target deterministic flow has corresponding deterministic flow information, and the deterministic flow information at least includes: a local flow ID, a service level category SLA, and a global flow / aggregate flow ID; The control logic module determines metadata matching the message according to the target deterministic flow, including: Searching for a stream sequence number register address in a register information table based on the local stream ID; the stream sequence number register corresponding to the stream sequence number register address is controlled to assign a corresponding sequence number to the message belonging to the target deterministic stream received by the node; The stream sequence number register corresponding to the stream sequence number register address is obtained to assign a corresponding sequence number to the message, and metadata matching the message is determined according to the sequence number.

14. An electronic device, characterized in that: The electronic device includes: A processor and a machine-readable storage medium storing machine-executable instructions that can be executed by the processor; The processor is used to execute machine executable instructions to implement the steps in any one of the methods of claims 1 to 6.

Images