Monitoring processing method and apparatus based on border gateway protocol (BGP)

Abstract

Embodiments of the present disclosure provide a monitoring processing method and apparatus based on a border gateway protocol (BGP). The method comprises: constructing a BGP-FS routing specification entry by means of extending BGP-FS, said BGP-FS carrying BGP monitoring protocol (BMP) information required for enabling BMP monitoring; sending the BGP-FS routing specification entry to a routing device, the BGP-FS routing specification entry being used to instruct the routing device to perform monitoring and report a monitoring result. This can solve the problem in the related art of how to monitor the BMP. The BGP-FS is extended to carry BMP information required for the BMP to start automatic monitoring, thereby achieving the purpose of automatic and fine-grained monitoring.

Description

Monitoring and processing method and device based on Border Gateway Protocol BGP

[0001] CROSS-REFERENCE TO RELATED APPLICATIONS

[0002] The present disclosure is based on Chinese patent application CN2024100904090 filed on January 22, 2024, entitled “Monitoring and processing method and device based on Border Gateway Protocol BGP”, and claims the priority of the patent application, and all the disclosed contents are incorporated into the present disclosure by reference. Technical Field

[0003] The present disclosure relates to the field of communication technology, and in particular to a monitoring and processing method and apparatus based on the Border Gateway Protocol (BGP). Background Art

[0004] Before the implementation of the BGP Monitoring Protocol (BMP), customers could only obtain the Border Gateway Protocol (BGP) status of their devices through manual queries, which was inefficient. With BMP, monitored devices can connect to a monitoring server and report their status information to it, significantly improving network monitoring efficiency. Understanding BGP status through BMP allows for timely identification of network security risks and mitigation measures, ensuring network stability. The BMP protocol promptly transmits BGP neighbor status information and route change information from monitored devices to the monitoring server. The monitoring server then organizes and analyzes this information to identify patterns in BGP neighbor status changes and route refreshes, significantly improving network monitoring efficiency.

[0005] However, the current BMP protocol cannot monitor routes at a fine-grained level. Once enabled, all routes received from neighbors (including pre-policy, post-policy, and pre- and post-policy routes) are packaged and reported to the SDN control controller via the BMP neighbor. This not only imposes significant CPU overhead on the router, but also places significant protocol processing pressure on the Software Defined Networking (SDN) control controller.

[0006] In addition, since it is impossible to detect problematic nodes or neighboring devices in advance, the BMP function is manually configured in advance. When the network scale continues to expand, manual configuration cannot keep up with the speed of scale, which poses a considerable challenge to network operation and maintenance.

[0007] Traditional routing was originally designed for traffic forwarding. Routing table entries only contained prefix mask information for destination address matching and traffic outbound interface information. Later, with the development of network services (such as preventing distributed denial of service (DDOS) attacks and traffic engineering), support for traffic policies (such as static policy routing) was required. Forwarding routing table entries were required to further segment data flows. This was not limited to matching data flows based on the destination address, but also included source address, IP protocol number, port number, etc.; the processing action information for the flow was not limited to forwarding out of a specific outbound interface, but also included processing actions such as rate limiting, discarding, and redirection. However, the biggest limitation of policy routing is that it is a local behavior and needs to be configured on a device-by-device basis. Manual configuration is labor-intensive, requires high requirements for operation and maintenance personnel, and has poor network tuning maintainability.

[0008] To address these issues, the IETF proposed implementing the BGP Flow Specification (FS) protocol on network forwarding devices. FS routes are distributed to network devices and then converted into control policies, ultimately influencing network routing and enabling traffic path adjustment and optimization. This technology will significantly improve the accuracy of network traffic optimization, enhance network flexibility and maintainability, reduce human error, and significantly impact secure and efficient operations and maintenance for operators. However, BMP monitoring has its limitations.

[0009] Regarding the problem of how to monitor BMP in related technologies, no solution has been proposed yet.

[0010] Summary of the Invention

[0011] The embodiments of the present disclosure provide a monitoring processing method and apparatus based on the Border Gateway Protocol (BGP), so as to at least solve the problem of how to monitor BGP in the related art.

[0012] According to one embodiment of the present disclosure, a monitoring and processing method based on the Border Gateway Protocol (BGP) is provided, which is applied to a server. The method includes:

[0013] Constructing a BGP-FS routing rule entry by extending the BGP flow rule BGP-FS, wherein the BGP-FS carries BMP information required to enable BGP monitoring protocol BMP monitoring;

[0014] The BGP-FS routing rule entry is sent to a routing device, wherein the BGP-FS routing rule entry is used to instruct the routing device to perform monitoring and report a monitoring result.

[0015] According to another embodiment of the present disclosure, a monitoring and processing method based on the Border Gateway Protocol (BGP) is provided, which is applied to a routing device. The method includes:

[0016] Receiving a BGP-FS routing rule entry constructed by the server by extending the BGP flow rule BGP-FS, wherein the BGP-FS carries BMP information required for enabling BGP Monitoring Protocol (BMP) monitoring;

[0017] Monitoring is performed according to the BGP-FS routing rule entries, and monitoring results are reported to the server.

[0018] According to another embodiment of the present disclosure, a monitoring and processing device based on the Border Gateway Protocol (BGP) is provided, which is applied to a server. The device includes:

[0019] A construction module is configured to construct a BGP-FS routing rule entry by extending a BGP flow rule BGP-FS, wherein the BGP-FS carries BMP information required for enabling BGP monitoring protocol BMP monitoring;

[0020] The sending module is configured to send the BGP-FS routing rule entry to the routing device, wherein the BGP-FS routing rule entry is used to instruct the routing device to perform monitoring and report the monitoring result.

[0021] According to another embodiment of the present disclosure, a monitoring and processing device based on the Border Gateway Protocol (BGP) is provided, which is applied to a routing device. The device includes:

[0022] A receiving module is configured to receive a BGP-FS routing rule entry constructed by a server through an extended BGP flow rule BGP-FS, wherein the BGP-FS carries BMP information required for enabling BGP monitoring protocol BMP monitoring;

[0023] The monitoring module is configured to monitor according to the BGP-FS routing rule entries and report monitoring results to the server.

[0024] According to another embodiment of the present disclosure, a computer-readable storage medium is provided, in which a computer program is stored. The computer program is configured to execute the steps of any one of the above method embodiments when running.

[0025] According to another embodiment of the present disclosure, an electronic device is provided, including a memory and a processor, wherein the memory stores a computer program, and the processor is configured to run the computer program to perform the steps in any one of the above method embodiments. BRIEF DESCRIPTION OF THE DRAWINGS

[0026] 1 is a hardware structure block diagram of a computer device according to an embodiment of the present disclosure, which is a monitoring and processing method based on the Border Gateway Protocol (BGP);

[0027] FIG2 is a flowchart of a monitoring processing method based on the Border Gateway Protocol BGP according to an embodiment of the present disclosure;

[0028] FIG3 is a schematic diagram of an extended BGP attribute according to an embodiment of the present disclosure;

[0029] FIG4 is a schematic diagram of a newly added action item according to an embodiment of the present disclosure;

[0030] FIG5 is a schematic diagram of a sub-tlv in a newly added BGP BMP attribute according to an embodiment of the present disclosure;

[0031] FIG6 is a schematic diagram 1 of a newly added BGP BMP attribute sub-tlv according to an optional embodiment of the present disclosure;

[0032] FIG7 is a second schematic diagram of a sub-tlv in a newly added BGP BMP attribute according to an optional embodiment of the present disclosure;

[0033] FIG8 is a third schematic diagram of a sub-tlv in a newly added BGP BMP attribute according to an optional embodiment of the present disclosure;

[0034] FIG9 is a fourth schematic diagram of a sub-tlv in a newly added BGP BMP attribute according to an optional embodiment of the present disclosure;

[0035] 10 is a second flowchart of a monitoring processing method based on the Border Gateway Protocol BGP according to an embodiment of the present disclosure;

[0036] FIG11 is a schematic diagram of automatically creating a BMP basic session according to an embodiment of the present disclosure;

[0037] FIG12 is a schematic diagram of a BMP reporting customized time period according to an embodiment of the present disclosure;

[0038] 13 is a schematic diagram of BMP reporting IPv4 unicast address family routing according to an embodiment of the present disclosure;

[0039] FIG14 is a block diagram of a monitoring processing device based on the Border Gateway Protocol BGP according to an embodiment of the present disclosure;

[0040] FIG15 is a second block diagram of a monitoring and processing device based on the Border Gateway Protocol (BGP) according to an embodiment of the present disclosure. DETAILED DESCRIPTION

[0041] Hereinafter, embodiments of the present disclosure will be described in detail with reference to the accompanying drawings and in conjunction with embodiments.

[0042] It should be noted that the terms "first", "second", etc. in the specification and claims of the present disclosure and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence.

[0043] The method embodiments provided in the embodiments of the present disclosure can be executed in a computer device or a similar computing device. Taking operation on a computer device as an example, FIG1 is a hardware structure block diagram of a computer device of the monitoring and processing method based on the Border Gateway Protocol BGP in the embodiment of the present disclosure. As shown in FIG1 , the computer device may include one or more (only one is shown in FIG1 ) processors 102 (the processor 102 may include but is not limited to a processing device such as a microprocessor MCU or a programmable logic device) and a memory 104 for storing data, wherein the above-mentioned computer device may also include a transmission device 106 and an input and output device 108 for communication functions. It can be understood by those skilled in the art that the structure shown in FIG1 is only for illustration, and it does not limit the structure of the above-mentioned computer device. For example, the computer device may also include more or fewer components than those shown in FIG1 , or have a configuration different from that shown in FIG1 .

[0044] The memory 104 can be used to store computer programs, for example, software programs and modules of application software, such as the computer program corresponding to the monitoring and processing method based on the Border Gateway Protocol (BGP) in the embodiment of the present disclosure. The processor 102 executes various functional applications and single-board matching by running the computer program stored in the memory 104, thereby implementing the above-mentioned method. The memory 104 may include a high-speed random access memory and may also include a non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some instances, the memory 104 may further include a memory remotely located relative to the processor 102, and these remote memories can be connected to the computer device via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0045] The transmission device 106 is used to receive or send data via a network. A specific example of the aforementioned network may include a wireless network provided by a communications provider of a computer device. In one embodiment, the transmission device 106 includes a network interface controller (NIC), which can be connected to other network devices via a base station to enable communication with the Internet. In another embodiment, the transmission device 106 may be a radio frequency (RF) module, which is used to communicate with the Internet wirelessly.

[0046] In this embodiment, a monitoring and processing method based on the Border Gateway Protocol (BGP) running on the above-mentioned computer device is provided. FIG2 is a flowchart of a monitoring and processing method based on the Border Gateway Protocol (BGP) according to an embodiment of the present disclosure, which is applied to a server. As shown in FIG2 , the process includes the following steps:

[0047] Step S202: Constructing a BGP-FS routing rule entry by extending BGP-FS, wherein the BGP-FS carries BMP information required for enabling BMP monitoring;

[0048] Step S204: Send the BGP-FS routing rule entry to the routing device, wherein the BGP-FS routing rule entry is used to instruct the routing device to perform monitoring and report the monitoring result.

[0049] Through the above steps S202 to S204, the problem of how to monitor BMP in related technologies can be solved, and BGP-FS is extended to carry the BMP information required for BMP to enable automatic monitoring, thereby achieving the purpose of automatic and fine-grained monitoring.

[0050] In one embodiment, the above-mentioned step S202 may specifically include: when the above-mentioned BMP information does not include the neighbor address to be monitored, adding an action item in the BGP-FS, wherein the action item is used to indicate automatic BMP action; adding a BGP attribute in the BGP-FS. Figure 3 is a schematic diagram of the extended BGP attribute according to an embodiment of the present disclosure. As shown in Figure 3, the BGP attribute is used to carry BMP information.

[0051] In the embodiment of the present disclosure, as shown in FIG3 , a BGP attribute includes a type Type, a length Length, and a value Value; wherein Type is used to indicate that the BGP attribute carries BMP information, Length is used to indicate the length of Value, and Value includes multiple sub-tlvs, each of which is used to carry BMP information.

[0052] FIG4 is a schematic diagram of a newly added action item according to an embodiment of the present disclosure. As shown in FIG4 , a new action item is added to the BGP-FS route, that is, a BMP action is automatically performed, such as the underlined field in FIG4 (according to RFC8955).

[0053] In another embodiment, the above-mentioned step S202 may specifically include: when the above-mentioned BMP information includes the neighbor address to be monitored, adding a match item in the BGP-FS, wherein the match item is used to indicate the neighbor address to be monitored; adding an action item in the BGP-FS, wherein the action item is used to indicate automatic BMP action; adding a BGP attribute in the BGP-FS, wherein the BGP attribute is used to carry BMP information other than the neighbor address to be monitored.

[0054] In the embodiment of the present disclosure, the above-mentioned BMP information includes the basic data and monitoring policy for establishing a BMP session. Figure 5 is a schematic diagram of the sub-tlv in the newly added BGP BMP attribute according to the embodiment of the present disclosure. As shown in Figure 5, each sub-tlv includes a sub-tlv type, a sub-tlv length, and a sub-tlv value, wherein the sub-tlv value is used to carry one of the following: basic data, monitoring policy; the sub-tlv type is one of the following: 0x01, 0x02, 0x03, 0x04, wherein 0x01 is used to carry basic data, 0x02, 0x03, and 0x04 are all used to carry monitoring policy, 0x02 is used to carry the time period for BMP monitoring or reporting, 0x03 is used to carry the policy information for BMP monitoring or reporting, and 0x04 is used to carry the address family information for BMP monitoring or reporting.

[0055] In the embodiment of the present disclosure, when the sub-tlv type is 0x01, the sub-tlv value is used to carry basic data, wherein the sub-tlv value includes: BMP listening port listen-port; BMP neighbor port station-port; address type address-type; BMP neighbor address station-address.

[0056] FIG6 is a schematic diagram 1 of a sub-tlv in a newly added BGP BMP attribute according to an optional embodiment of the present disclosure. As shown in FIG6 , type 1, sub-tlvtype=0x01, is used to carry BMP session basic data (required), wherein:

[0057] listen-port: BMP listening port;

[0058] station-port: The port used by the BMP neighbor to initiate an active health link

[0059] address-type=1 represents the IPv4 address type;

[0060] address-type=2 represents the IPv6 address type;

[0061] Station-address is divided into IPv4 address (4 bytes) and IPv6 address (16 bytes), representing the BMP neighbor address.

[0062] When the sub-tlv type is 0x02, the sub-tlv value includes: start time start_time and end time end_time.

[0063] FIG7 is a second schematic diagram of a sub-tlv in a newly added BGP BMP attribute according to an optional embodiment of the present disclosure. As shown in FIG7 , type 2, sub-tlvtype=0x02, is used to carry the BGP routes within which time periods are reported by BMP, wherein:

[0064] start_time represents the starting time (Greenwich Mean Time), in seconds;

[0065] end_time represents the end time, in seconds;

[0066] BMP needs to report routing entries that fall within the [start_time, end_time] time period.

[0067] When the sub-tlv type is 0x03, the sub-tlv value includes: flag and rib flag bits, where flag = 1 represents monitoring or reporting of routes before the policy is sent, flag = 2 represents monitoring or reporting of routes after the policy is sent, and flag = 3 represents monitoring or reporting of routes before and after the policy is sent; rib = 1 represents monitoring or reporting of routes received from the remote end, rib = 2 represents monitoring or reporting of routes received from the local end, and rib = 3 represents monitoring or reporting of routes sent out.

[0068] FIG8 is a third schematic diagram of a sub-tlv in a newly added BGP BMP attribute according to an optional embodiment of the present disclosure. As shown in FIG8 , type 3, sub-tlvtype=0x03, is used to carry policy information reported by BMP, wherein:

[0069] The flag and rib flag bits are both 1 byte and can be expanded. The values ​​defined in this invention are as follows:

[0070] Flag = 1 means the route before sending the policy;

[0071] Flag = 2 means the route after sending the policy;

[0072] Flag = 3 means sending the routes before and after the policy;

[0073] rib=1 represents the route received from the remote end;

[0074] rib=2 represents the route received locally;

[0075] rib=3 represents the route sent out.

[0076] When the sub-tlv type is 0x04, the sub-tlv value includes: address family information AFI, where AFI=1 represents monitoring or reporting of the IPv4 unicast address family, AFI=2 represents monitoring or reporting of the IPv6 unicast address family, AFI=3 represents monitoring or reporting of the VPNv4 unicast address family, AFI=4 represents monitoring or reporting of the VPNv6 unicast address family, AFI=5 represents monitoring or reporting of the IPv4-VRF unicast address family, AFI=6 represents monitoring or reporting of the IPv6-VRF unicast address family, and AFI=7 represents monitoring or reporting of the EVPN address family.

[0077] FIG9 is a fourth schematic diagram of a sub-tlv in a newly added BGP BMP attribute according to an optional embodiment of the present disclosure. As shown in FIG9 , type 4, sub-tlvtype=0x04, is used to carry address family information reported by BMP, wherein:

[0078] afi=1 means sending IPv4 unicast address family;

[0079] afi=2 means sending IPv6 unicast address family;

[0080] afi=3 means sending VPNv4 unicast address family;

[0081] afi=4 means sending VPNv6 unicast address family;

[0082] afi=5 means sending ipv4-vrf unicast address family;

[0083] afi=6 means sending ipv6-vrf unicast address family;

[0084] afi=7 represents the sending evpn address family.

[0085] The present disclosure also provides a monitoring and processing method based on the Border Gateway Protocol (BGP). FIG10 is a second flowchart of the monitoring and processing method based on the Border Gateway Protocol (BGP) according to an embodiment of the present disclosure. As shown in FIG10 , the method is applied to a routing device. The process includes the following steps:

[0086] Step S1002: receiving a BGP-FS routing rule entry constructed by the server by extending BGP-FS, wherein the BGP-FS carries BMP information required for enabling BMP monitoring;

[0087] Step S1004: Monitor according to the BGP-FS routing rule entry, and report the monitoring result to the server.

[0088] Through the above steps S1002 to S1004, the problem of how to monitor BMP in the related art can be solved, and BGP-FS is extended to carry the BMP information required for BMP to enable automatic monitoring, thereby achieving the purpose of automatic and fine-grained monitoring.

[0089] In one embodiment, in the above-mentioned step S1004, monitoring according to the BGP-FS routing rule entry may specifically include: when the BMP information includes the neighbor address to be monitored, monitoring the BGP neighbor corresponding to the neighbor address to be monitored; when the BMP information does not include the neighbor address to be monitored, monitoring all BGP neighbors.

[0090] Optionally, before the above step S1004, the method further includes: parsing the above BGP-FS routing rule entry to obtain basic data for establishing a BMP session, wherein the BMP information includes basic data, and establishing a BMP session with the server based on the basic data.

[0091] In another embodiment, the above-mentioned step S1004 may specifically include: when the above-mentioned BMP information also includes a monitoring policy, obtaining the monitoring policy from the BGP-FS routing rule entry; monitoring according to the monitoring policy; based on the BMP session, reporting the above-mentioned monitoring results to the server according to the reporting conditions corresponding to the monitoring policy.

[0092] The disclosed embodiments implement automatic BMP collection and reporting, specifically including: traffic anomaly and attack analysis, finding that certain BGP neighbors have abnormal conditions, and needing to monitor the routing entries sent and received by the neighbors; constructing BGP-FS rules, carrying BMP action items, and sending them to the abnormal device; the device parses the BGP-FS rules, extracts BMP information, automatically establishes a BMP session with the server, and starts BMP monitoring; when extracting BMP information, if the BGP-FS match item contains a destination address, it is monitored as the neighbor address for BMP monitoring; if the BGP-FS match item does not contain a destination address, all BGP neighbors on the receiving device are BMP monitored; when a routing entry that meets the conditions is generated, it is reported through the BMP session. It solves the thorny problem of manual BMP operation in complex topology scenarios, enhances network flexibility and maintainability, reduces human adjustment errors, and has a very significant impact on operators' safe and efficient operation and maintenance; it solves the current difficult problems of BMP reporting such as excessive CPU usage and untimely performance processing; it refines the granularity of BMP reporting, providing customers with precise customization options; and it enriches the action items of BGP-Flowspec, filling related gaps.

[0093] FIG11 is a schematic diagram of automatically creating a BMP basic session according to an embodiment of the present disclosure. As shown in FIG11 , the method includes:

[0094] (1) The BGP-FS server analyzes traffic and discovers an anomaly in the routing message from PE2 to PE1, requiring prompt monitoring.

[0095] (2) BGP-FS server automatically constructs BGP-FS routing rule entries:

[0096] The match item is dest-ip 10.10.10.1, which represents the neighbor address (PE1) to be monitored.

[0097] The action item is a bmp action item, which is used to automatically create a bmp session;

[0098] Carry BGP BMP attributes, including listening port, BMP neighbor port, and BMP neighbor address;

[0099] (3) After receiving the BGP-FS routing rule, PE2 parses the BGP-FS entry and obtains the basic data for establishing a BMP session. Based on the basic data, it creates a BMP session and the BMP session goes up. According to the RFC7854 protocol standard, it monitors and reports the route of the BGP neighbor 10.10.10.1, i.e., PE1.

[0100] (4) The BGP-FS server receives the message reported by bmp and conducts further analysis.

[0101] FIG12 is a schematic diagram of a BMP reporting customized time period according to an embodiment of the present disclosure. As shown in FIG12 , the following steps are performed: (1) the BGP-FS server finds through traffic analysis that there is an anomaly in the routing message between time [100, 1000] from PE2 to PE1, and needs to monitor the routing transmission and reception during this period;

[0102] (2) BGP-FS server automatically constructs BGP-FS routing rule entries:

[0103] The match item is dest-ip 10.10.10.1, which represents the neighbor address to be monitored;

[0104] The action item is a bmp action item, which is used to automatically create a bmp session;

[0105] Carry BGP BMP basic attributes, including listening port, BMP neighbor port, and BMP neighbor address;

[0106] Carry BGP BMP time attributes, including start and end time, start-time = 100s, end-time = 1000s;

[0107] (3) After PE2 receives the BGP-FS routing rule:

[0108] Parse BGP-FS entries to obtain basic data and time data for BGP-FS session establishment.

[0109] Create a bmp session based on basic data;

[0110] bmpsessionup;

[0111] According to the RFC7854 protocol standard, the route monitoring and reporting of the BGP neighbor 10.10.10.1 (PE1) is performed;

[0112] Only routing entries whose generation time is between [100,2000] will be selected for reporting;

[0113] (4) The BGP-FS server receives the message reported by bmp and conducts further analysis.

[0114] FIG13 is a schematic diagram of BMP reporting IPv4 unicast address family routing according to an embodiment of the present disclosure, as shown in FIG13 , including:

[0115] (1) The BGP-FS server discovered through traffic analysis that there was an anomaly in the IPv4 unicast route from PE2 to PE1, and that the IPv4 unicast route transmission and reception needed to be monitored.

[0116] (2) BGP-FS server automatically constructs BGP-FS routing rule entries:

[0117] The match item is dest-ip 10.10.10.1, which represents the neighbor address to be monitored;

[0118] The action item is a bmp action item, which is used to automatically create a bmp session;

[0119] Carry BGP BMP basic attributes, including listening port, BMP neighbor port, and BMP neighbor address;

[0120] Carries BGP BMP address family attributes, including afi=1 data;

[0121] (3) After PE2 receives the BGP-FS routing rule:

[0122] Parse the BGP-FS entry to obtain the basic data and address family data for BGP session establishment;

[0123] Create a bmp session based on basic data;

[0124] bmpsessionup;

[0125] According to the RFC7854 protocol standard, the route monitoring and reporting of the BGP neighbor 10.10.10.1 (PE1) is performed;

[0126] Only routing entries of the IPv4 unicast address family will be selected for reporting;

[0127] (4) The BGP-FS server receives the message reported by bmp and conducts further analysis.

[0128] The present disclosure also provides a monitoring and processing device based on the Border Gateway Protocol (BGP). FIG14 is a block diagram of a monitoring and processing device based on the Border Gateway Protocol (BGP) according to an embodiment of the present disclosure. As shown in FIG14 , the device is applied to a server and includes:

[0129] A construction module 142 is configured to construct a BGP-FS routing rule entry by extending a BGP flow rule BGP-FS, wherein the BGP-FS carries BMP information required to enable BGP monitoring protocol BMP monitoring;

[0130] The sending module 144 is configured to send the BGP-FS routing rule entry to the routing device, wherein the BGP-FS routing rule entry is used to instruct the routing device to perform monitoring and report the monitoring result.

[0131] In one embodiment, the construction module 142 is further configured to add an action item in the BGP-FS when the BMP information does not include the neighbor address to be monitored, and the action item is used to indicate automatic BMP action; and to add a BGP attribute in the BGP-FS, wherein the BGP attribute is used to carry BMP information.

[0132] In one embodiment, the construction module 142 is further configured to, when the BMP information includes the neighbor address to be monitored, add a match item in the BGP-FS, wherein the match item is used to indicate the neighbor address to be monitored; add an action item in the BGP-FS, wherein the action item is used to indicate automatic BMP action; and add a BGP attribute in the BGP-FS, wherein the BGP attribute is used to carry the BMP information other than the neighbor address to be monitored.

[0133] In one embodiment, the BGP attribute includes a type Type, a length Length, and a value Value; wherein the Type is used to indicate that the BGP attribute carries the BMP information, the Length is used to indicate the length of the Value, and the Value includes multiple sub-tlvs, each of which is used to carry the BMP information.

[0134] In one embodiment, the BMP information includes basic data and monitoring policies for establishing a BMP session;

[0135] Each of the sub-tlvs includes a sub-tlv type, a sub-tlv length, and a sub-tlv value, wherein the sub-tlv value is used to carry one of the following: the basic data, the monitoring policy;

[0136] The sub-tlv type is one of the following: 0x01, 0x02, 0x03, 0x04, wherein the 0x01 is used to carry the basic data, the 0x02, the 0x03, and the 0x04 are all used to carry the monitoring policy, the 0x02 is used to carry the time period for BMP monitoring or reporting, the 0x03 is used to carry the policy information for BMP monitoring or reporting, and the 0x04 is used to carry the address family information for BMP monitoring or reporting.

[0137] In one embodiment, when the sub-tlv type is 0x01, the sub-tlv value is used to carry the basic data, wherein the sub-tlv value includes: BMP listening port listen-port; BMP neighbor port station-port; address type address-type; BMP neighbor address station-address;

[0138] When the sub-tlv type is 0x02, the sub-tlv value includes: start time start_time, end time end_time;

[0139] When the sub-tlv type is 0x03, the sub-tlv value includes: flag and rib flag bits, where flag=1 represents monitoring or reporting of the route before the policy is sent, flag=2 represents monitoring or reporting of the route after the policy is sent, and flag=3 represents monitoring or reporting of the routes before and after the policy is sent; rib=1 represents monitoring or reporting of the route received from the remote end, rib=2 represents monitoring or reporting of the route received from the local end, and rib=3 represents monitoring or reporting of the route sent out;

[0140] When the sub-tlv type is 0x04, the sub-tlv value includes: address family information afi, wherein afi=1 represents monitoring or reporting of the ipv4 unicast address family, afi=2 represents monitoring or reporting of the ipv6 unicast address family, afi=3 represents monitoring or reporting of the vpnv4 unicast address family, afi=4 represents monitoring or reporting of the vpnv6 unicast address family, afi=5 represents monitoring or reporting of the ipv4-vrf unicast address family, afi=6 represents monitoring or reporting of the ipv6-vrf unicast address family, and afi=7 represents monitoring or reporting of the evpn address family.

[0141] The present disclosure also provides a monitoring and processing device based on the Border Gateway Protocol (BGP). FIG15 is a block diagram of a second monitoring and processing device based on the Border Gateway Protocol (BGP) according to an embodiment of the present disclosure. As shown in FIG15 , the device is applied to a routing device and includes:

[0142] A receiving module 152 is configured to receive a BGP-FS routing rule entry constructed by a server through an extended BGP flow rule BGP-FS, wherein the BGP-FS carries BMP information required for enabling BGP monitoring protocol BMP monitoring;

[0143] The monitoring module 154 is configured to monitor according to the BGP-FS routing rule entries and report monitoring results to the server.

[0144] In one embodiment, the monitoring module 154 is further configured to monitor the BGP neighbors corresponding to the neighbor address to be monitored when the BMP information includes the neighbor address to be monitored; and to monitor all BGP neighbors when the BMP information does not include the neighbor address to be monitored.

[0145] In one embodiment, the apparatus further comprises:

[0146] a parsing module configured to parse the BGP-FS routing rule entry to obtain basic data for establishing a BMP session, wherein the BMP information includes the basic data;

[0147] A creation module is configured to create a BMP session with the server based on the basic data.

[0148] In one embodiment, the monitoring module 154 is further configured to obtain the monitoring policy from the BGP-FS routing rule entry when the BMP information also includes the monitoring policy; perform monitoring according to the monitoring policy; and report the monitoring results to the server based on the BMP session and the reporting conditions corresponding to the monitoring policy.

[0149] An embodiment of the present disclosure further provides a computer-readable storage medium, in which a computer program is stored. The computer program is configured to execute the steps of any one of the above method embodiments when run.

[0150] In an exemplary embodiment, the computer-readable storage medium may include, but is not limited to, various media that can store computer programs, such as a USB flash drive, a read-only memory (ROM), a random access memory (RAM), a mobile hard disk, a magnetic disk, or an optical disk.

[0151] An embodiment of the present disclosure further provides an electronic device, including a memory and a processor, wherein the memory stores a computer program, and the processor is configured to run the computer program to perform the steps in any of the above method embodiments.

[0152] In an exemplary embodiment, the electronic device may further include a transmission device and an input / output device, wherein the transmission device is connected to the processor, and the input / output device is connected to the processor.

[0153] For specific examples in this embodiment, reference may be made to the examples described in the above embodiments and exemplary implementation modes, and this embodiment will not be described in detail here.

[0154] Obviously, those skilled in the art should understand that the modules or steps of the present disclosure described above can be implemented using a general-purpose computing device, they can be concentrated on a single computing device, or distributed across a network composed of multiple computing devices, they can be implemented using program code executable by the computing device, and thus, they can be stored in a storage device and executed by the computing device, and in some cases, the steps shown or described can be performed in a different order than herein, or they can be fabricated into separate integrated circuit modules, or multiple modules or steps can be fabricated into a single integrated circuit module for implementation. Thus, the present disclosure is not limited to any particular combination of hardware and software.

[0155] The foregoing description is merely a preferred embodiment of the present disclosure and is not intended to limit the present disclosure. Those skilled in the art will readily appreciate that various modifications and variations of the present disclosure are possible. Any modifications, equivalent substitutions, or improvements made within the principles of the present disclosure shall be included within the scope of protection of the present disclosure.

Claims

1. A monitoring and processing method based on Border Gateway Protocol (BGP), applied to a server, the method comprising: Constructing a BGP-FS routing rule entry by extending the BGP Flow Specification (BGP-FS), wherein the BGP-FS carries BMP information required for enabling the monitoring of the BGP Monitoring Protocol (BMP); Sending the BGP-FS routing rule entry to a routing device, wherein the BGP-FS routing rule entry is used to instruct the routing device to perform monitoring and report monitoring results.

2. The method according to claim 1, wherein Constructing a BGP-FS routing rule entry by extending the BGP Flow Specification (BGP-FS) includes: In the case where the BMP information does not include the neighbor address to be monitored, adding an action item in the BGP-FS, wherein the action item is used to indicate automatically performing a BMP action; Adding a BGP attribute in the BGP-FS, wherein the BGP attribute is used to carry the BMP information.

3. The method according to claim 1, wherein Constructing a BGP-FS routing rule entry by extending the BGP Flow Specification (BGP-FS) includes: In the case where the BMP information includes the neighbor address to be monitored, adding a match item in the BGP-FS, wherein the match item is used to indicate the neighbor address to be monitored; Adding an action item in the BGP-FS, wherein the action item is used to indicate automatically performing a BMP action; Adding a BGP attribute in the BGP-FS, wherein the BGP attribute is used to carry the BMP information except the neighbor address to be monitored.

4. The method according to claim 2 or 3, wherein The BGP attribute includes Type, Length, and Value; Wherein, the Type is used to indicate that the BGP attribute carries the BMP information, the Length is used to indicate the length of the Value, and the Value includes multiple sub-tlvs, and each sub-tlv is used to carry the BMP information.

5. The method according to claim 4, wherein, The BMP information includes the basic data for establishing a BMP session and a monitoring policy; Each sub-tlv includes a sub-tlv type, a sub-tlv length, and a sub-tlv value, wherein the sub-tlv value is used to carry one of the following: the basic data, the monitoring policy; The sub-tlv type is one of the following: 0x01, 0x02, 0x03, 0x04, wherein 0x01 is used to carry the basic data, and 0x02, 0x03, and 0x04 are all used to carry the monitoring policy, 0x02 is used to carry the time period for BMP monitoring or reporting, 0x03 is used to carry the policy information for BMP monitoring or reporting, and 0x04 is used to carry the address family information for BMP monitoring or reporting.

6. The method according to claim 5, wherein When the sub - tlv type is 0x01, the sub - tlv value is used to carry the basic data, where the sub - tlv value includes: BMP listening port listen - port; BMP neighbor port station - port; address type address - type; BMP neighbor address station - address; When the sub - tlv type is 0x02, the sub - tlv value includes: start time start_time, end time end_time; When the sub - tlv type is 0x03, the sub - tlv value includes: flag and rib flag bits, where flag = 1 represents monitoring or reporting the route before the sending policy, flag = 2 represents monitoring or reporting the route after the sending policy, flag = 3 represents monitoring or reporting the routes before and after the sending policy; rib = 1 represents monitoring or reporting the routes received from the remote end, rib = 2 represents monitoring or reporting the routes received locally, rib = 3 represents monitoring or reporting the routes sent out; When the sub - tlv type is 0x04, the sub - tlv value includes: address family information afi, where afi = 1 represents monitoring or reporting the ipv4 unicast address family, afi = 2 represents monitoring or reporting the ipv6 unicast address family, afi = 3 represents monitoring or reporting the vpnv4 unicast address family, afi = 4 represents monitoring or reporting the vpnv6 unicast address family, afi = 5 represents monitoring or reporting the ipv4 - vrf unicast address family, afi = 6 represents monitoring or reporting the ipv6 - vrf unicast address family, afi = 7 represents monitoring or reporting the evpn address family.

7. A monitoring and processing method based on the Border Gateway Protocol (BGP), which is applied to a routing device, wherein, The method includes: Receiving a BGP - FS routing rule entry constructed by a server through an extended BGP flow rule BGP - FS, where the BGP - FS carries BMP information required for enabling the BGP monitoring protocol BMP monitoring; Monitoring according to the BGP - FS routing rule entry and reporting the monitoring result to the server.

8. The method according to claim 7, wherein Monitoring according to the BGP - FS routing rule entry includes: When the BMP information contains the neighbor address to be monitored, monitoring the BGP neighbor corresponding to the neighbor address to be monitored; When the BMP information does not contain the neighbor address to be monitored, monitoring all BGP neighbors.

9. The method according to claim 7, wherein Before monitoring according to the BGP - FS routing rule entry, the method further includes: Parsing the BGP - FS routing rule entry to obtain the basic data for establishing a BMP session, where the BMP information includes the basic data; Creating a BMP session with the server according to the basic data.

10. The method according to claim 9, wherein, Monitoring according to the BGP - FS routing rule entry and reporting the monitoring result to the server includes: When the BMP information further includes a monitoring policy, obtain the monitoring policy from the BGP-FS routing rule entry; Monitor according to the monitoring policy; Based on the BMP session, report the monitoring result to the server according to the reporting condition corresponding to the monitoring policy.

11. A monitoring processing device based on Border Gateway Protocol (BGP), applied to a server, the device includes: A construction module, configured to construct a BGP-FS routing rule entry by extending the BGP Flow Specification (BGP-FS), wherein the BGP-FS carries BMP information required for enabling the monitoring of the BGP Monitoring Protocol (BMP); A sending module, configured to send the BGP-FS routing rule entry to a routing device, wherein the BGP-FS routing rule entry is used to instruct the routing device to perform monitoring and report the monitoring result.

12. A monitoring processing device based on Border Gateway Protocol (BGP), applied to a routing device, the device includes: A receiving module, configured to receive the BGP-FS routing rule entry constructed by the server through extending the BGP Flow Specification (BGP-FS), wherein the BGP-FS carries BMP information required for enabling the monitoring of the BGP Monitoring Protocol (BMP); A monitoring module, configured to perform monitoring according to the BGP-FS routing rule entry and report the monitoring result to the server.

13. A computer-readable storage medium storing a computer program therein, wherein, The computer program is configured to execute the method described in any one of claims 1 to 6 and 7 to 10 when running.

14. An electronic device, including a memory and a processor, wherein a computer program is stored in the memory, and the processor is configured to run the computer program to execute the method described in any one of claims 1 to 6 and 7 to 10.

Images