106 results about "Forwarding plane" patented technology

This application provides a dial-up packet processing method. The method is applied to a dial-up packet processing system. The system includes a controller, an access gateway, a forwarding plane network element, and a control plane network element that are connected to each other. The method includes: The control plane network element receives a dial-up packet from the access gateway, where the dial-up packet is a dial-up packet sent by user equipment to the access gateway; the control plane network element sends an authentication request to an external server, where the authentication request is generated by the control plane network element based on the dial-up packet; the control plane network element receives dial-up success information sent by the external server; and the control plane network element determines the forwarding plane network element based on the dial-up success information.

Some embodiments provide novel methods for performing services for machines operating in one or more datacenters. For instance, for a group of related guest machines (e.g., a group of tenant machines), some embodiments define two different forwarding planes: (I) a guest forwarding plane and (2) a service forwarding plane. The guest forwarding plane connects to the machines in the group and performs L2 and / or L3 forwarding for these machines. The service forwarding plane (1) connects to the service nodes that perform services on data messages sent to and from these machines, and (2) forwards these data messages to the service nodes. In some embodiments, the guest machines do not connect directly with the service forwarding plane.

The invention provides a forwarding method and device based on a geographic relative position, equipment and a medium, and the method comprises the steps: carrying out the coding according to the geographic space coordinates of producers through employing a Geohash algorithm, and distributing a unique Geohash code for each producer; distributing a Geohash code naming Dpkt to the producer based on a Geohash algorithm, and obtaining a data name of the Dpkt of the producer; performing inverse analysis on the Ipkt data name through the forwarding node to obtain a geographic space coordinate, and determining a geographic relative orientation of the forwarding node and the forwarding target according to the own coordinate of the forwarding node and the geographic space coordinate; and sending the Ipkt to the forwarding interface of the corresponding geographical orientation through the forwarding node. The method has the beneficial effects that the storage overhead of the forwarding plane and the communication overhead between the nodes are reduced, and the reliability of the network is improved.

The invention provides a service message transmission method and device, equipment and a storage medium, relates to the technical field of communication, and is used for solving the problem of poor compatibility of new and old equipment in a network. The method is applied to a first provider edge device PE, and comprises: receiving an edge-to-edge pseudo-wire simulation PWE3 service message from a source user edge device CE, the PWE3 service message comprising a target pseudo-wire PW identifier, and the target PW identifier being used for indicating a PW between the source CE and a target CE. And packaging the PWE3 service message according to the target PW identifier to obtain a segment routing SRv6 service message based on the sixth version of forwarding plane of the Internet protocol. And sending the SRv6 service message to a second PE through a target SRv6 tunnel between the first PE and the second PE, the second PE being a PE connected with the target CE.

The invention discloses an intelligent dynamic load balancing method and system based on Clico-VPP. The method comprises the following steps: acquiring a load state index of a back-end service pod; according to the load state index and a service capability coefficient corresponding to the back-end service pod, calculating a dynamic traffic allocation weight of the back-end service pod through a weighted calculation model; based on a dynamic threshold synchronization strategy, synchronizing the state of a first hash ring located in a control plane to a second hash ring located in a forwarding plane; and based on the second hash ring, determining a target pod for the input data stream through consistency lookup. A double-loop decoupling architecture is provided, hash rings of a control plane and a forwarding plane are separated, a synchronization strategy is determined through a dynamic threshold value, decision intelligence and forwarding stability are both considered, and jitter is avoided; meanwhile, a dynamic weight-driven consistent Hash algorithm is adopted, a real-time load index and Pod service capability are fused to calculate a dynamic weight, and the dynamic weight is mapped into the number of virtual nodes, so that intelligent scheduling based on capability and maximum maintenance of connection during capacity expansion and contraction are realized.

The application discloses a multicast switching method and device, electronic equipment and a storage medium, and belongs to the technical field of communication. In the method, multicast data of a multicast source is received by a network device with PIM FRR function through a main link and a backup link. When the main link fails, the backup link of the multicast is switched to the main link at a data forwarding plane, so that the multicast data from the backup link is sent, and the backup link is switched to a new main link at a control plane. Instead of sending the multicast data from the backup link after the switching at the control plane and the data forwarding plane is completed, the amount of multicast data loss during multicast switching can be greatly reduced.

The invention provides a service transmission tunnel identification method and device, equipment and a storage medium, relates to the technical field of communication, and is used for solving the problem of how to identify a real SRv6 tunnel to which a path of a transmission service belongs. The method is applied to a control plane device, and comprises the following steps: obtaining service information and a path identifier, the service information being used for indicating a first service in a segment routing SRv6 message based on an Internet protocol version 6 forwarding plane sent by a first node to a second node, and the SRv6 message comprising the path identifier; and according to the path identifier, determining that the path for transmitting the first service is a path (namely a real path through which the service passes) under the first SRv6 tunnel.

The present application relates to a user backup method, apparatus, system, device, medium, and program product, and relates to the field of communications technology. In this method, in response to fault information from a target forwarding plane device, the faulty user access port on the target forwarding plane device is obtained. Based on the faulty user access port, the real-time migration priorities of multiple normal user access ports corresponding to the control plane device are then obtained. Finally, user backup of the faulty user access port is performed based on the real-time migration priorities and real-time idle ratios of each normal user access port. This method can largely prevent users on the faulty user access port from being disconnected, ensuring the normal processing of user services.

The application discloses a data transmission control method and device, a network element and a medium. The method comprises the following steps: when a data packet is received, a two-layer member link adjacency segment identifier corresponding to a segment routing based on an IPv6 forwarding plane of the data packet is acquired; a first forwarding path corresponding to the data packet is determined according to the two-layer member link adjacency segment identifier; when the first forwarding path has a fault, a processing mode corresponding to the two-layer member link adjacency segment identifier is determined, and the data packet is processed according to the processing mode. The application improves the flexibility of data packet transmission and processing.

This invention belongs to the field of computer network communication and proposes a remote mirroring scheme that is easy to operate, fine-grained, and has low resource consumption. The scheme is based on the p4 programmable data forwarding plane and can mirror the packets of interest of a specified network element to the operation and maintenance equipment, which facilitates the location of network faults.

The invention discloses a NetFlow automatic analysis method and device, and the method comprises the steps: S01, configuring a feature library according to a business scene, and creating and issuing an analysis scheme template; s02, creating an analysis scheme and associating an analysis scheme template, and issuing the analysis scheme to a forwarding plane of the system; s03, the system forwarding surface collects original Netflow data, integrates multivariate data, and performs preprocessing and aggregation processing on the original Netflow data; and S04, storing the data after aggregation processing, obtaining aggregation data with service attributes, and performing data analysis and display according to different service scenes. According to the NetFlow automatic analysis method and device, the analysis scheme is configured at will according to different service scenes, special adaptive development for new service scenes is not needed, the flexibility and expandability of the system analysis scheme are embodied, the timeliness and accuracy of data processing are improved, and the development, operation and maintenance cost is reduced.

The invention relates to providing symmetric coherency hashing in a forwarding plane of a network device. A network device may receive hash keys from a control plane of the network device, and may sort the hash keys based on a next hop address field and to generate sorted hash keys. The network device may locally store the ranked hash keys in a data plane of the network device, and may generate a ranked hash table based on the ranked hash keys. The network device may utilize the sorted hash table to route traffic symmetrically with another network device.

The invention provides a packet injection method based on an OpenvSwitch forwarding plane, and the method comprises the steps: creating a special packet injection port in an OpenvSwitch network bridge, and the type of the packet injection port is an internal interface; configuring a packet injection application program, wherein the packet injection application program receives message information input by a user and a target packet injection port name; the packet injection application program generates a target network message according to the input message information and a preset logic; after a target network message is processed through a protocol stack of an operating system, the target network message is sent to the OpenvSwitch network bridge from the packet injection port; and in the OpenvSwitch network bridge, forwarding the injected message according to a default flow table rule or a predefined flow table rule. The packet injection method based on the OpenvSwitch forwarding plane has the beneficial effects that the packet injection operation with rich functions is realized through the special packet injection port and the user-defined flow table.

The invention discloses a hardware-based mutual exclusion lock device and a control method thereof, and belongs to the technical field of data processing, the hardware-based mutual exclusion lock device comprises hardware and software, and the hardware is connected with the software; the hardware comprises a first register, a second register and a first counter, and the first register is connected with the first counter; the software comprises a locking interface and a release locking interface, the locking interface is connected with the release locking interface, the first register and the second register, and the release locking interface is connected with the second register. According to the mutual exclusion lock device realized based on hardware, a high-speed mutual exclusion scheme for verifying mutual exclusion in current different address spaces in an operating system is not needed, and the mutual exclusion requirements of different address spaces in current high-performance application scenes such as a high-speed data forwarding plane and the like are met.

Techniques are disclosed for maintaining processing unit core affinity for fragmented packets. In one example, a service physical interface card (PIC) implementing a service plane of a network device receives fragmented and / or non-fragmented packet data for a traffic flow. The service PIC comprises at least one processing unit comprising multiple cores. A routing engine operating in a control plane of the network device defines one or more core groups comprising a subset of the cores. The routing engine assigns the traffic flow to a core group and a forwarding engine operating in a forwarding plane of the network device forwards the packet data for the traffic flow to the assigned core group. A core of the assigned core group applies a network service to the fragmented and / or non-fragmented packet data for the traffic flow, and the forwarding engine forwards the packet data for the traffic flow toward a destination.

The invention provides a bandwidth configuration method, electronic equipment and a storage medium, and relates to but is not limited to the technical field of communication, the bandwidth configuration method comprises the following steps: sending a request message to a management and control system, the request message carrying bandwidth demand information; receiving a response message returned by the management and control system, the response message carrying bandwidth confirmation information generated by the management and control system according to the bandwidth demand information; and generating a time slot configuration message according to the bandwidth confirmation information, and sending the time slot configuration message to the downstream equipment, so that the downstream equipment executes a time slot configuration operation according to the time slot configuration message. According to the embodiment of the invention, the bandwidth configuration method suitable for a scene with small time slot granularity and a large number of time slots can be provided, the complexity of a forwarding plane is reduced, the bandwidth configuration rate is improved, and thus the service deployment efficiency is improved.

The application discloses an encrypted traffic restoration system, method and device and a storage medium, relates to the technical field of network security, and comprises a data forwarding plane, a self-defined transmission control protocol stack, a virtual service layer and a virtual service layer. The data forwarding plane is used for receiving encrypted traffic and performing data analysis on the encrypted traffic. The self-defined transmission control protocol stack is used for monitoring the analyzed traffic and determining the connection relationship between a target service end and a target client. The virtual service layer is used for constructing a virtual service end and a virtual client, determining a virtual sender and a virtual receiver, and sequentially transmitting the analyzed traffic to an actual receiver through the virtual sender and the virtual receiver. The virtual service end and the virtual client are both configured with traffic decryption and encryption functions, so that the decrypted traffic obtained through the decryption function can be subjected to data security detection. The plaintext traffic is obtained through the decryption function between the virtual service end and the virtual client, thereby avoiding the problem of changing the original network structure in the encrypted traffic restoration process.

Embodiments of the present application disclose a message transmission method and an access gateway device. Embodiments of the present application can be applied to a system architecture with separated control plane and forwarding plane, and can be specifically implemented on an access gateway device. The method includes: The access gateway device determines the CAR channel corresponding to the message according to the user host characteristic information and the changed salt value or the characteristic sequence after random sorting of the bit positions of the user host characteristic information, so that messages sent by the same user host at different time periods can enter different CAR channels for transmission. Therefore, a legitimate user host can avoid the attack of an illegal user host and complete the process of establishing a session.

The embodiment of the invention provides a data processing method and device, equipment and a readable medium. The method comprises the following steps: in response to a failure of a first BGP process in a control plane of network equipment, enabling the control plane to stop receiving and transmitting a data packet with a forwarding plane of the network equipment; enabling the IO thread in the first BGP process to continuously process the received data packet; in response to completion of processing of the data packet in the IO thread, reconstructing a second BGP process in the control plane based on BGP peer information and BGP routing information associated with the first BGP process; reconstructing a first socket interface of the BGP peer associated with the second BGP process based on the socket information of the BGP peer; and in response to the completion of the reconstruction of the second BGP process and the first socket interface, recovering the transceiving of the data packet between the control plane and the forwarding plane.

The application discloses a service data flow protection method based on a multi-medium channel, and comprises the following steps: S1, forwarding plane multi-medium channel network topology sensing; S2, service multi-path planning of a control plane controller software based on the multi-medium channel; S3, switching of a protection path of a forwarding layer device based on the multi-medium channel; and S4, fault tunnel repairing of a control plane based on the multi-medium channel. The application can reduce the interruption risk of user service flow and improve the stability of a packet transmission network.

The invention discloses a shared database configuration method, a traffic redirection method and related equipment, and belongs to the technical field of communication. The method comprises: according to policy configuration information in a first network device, determining a Border Gateway Protocol (BGP) message, the BGP message comprising a target color mark in the policy configuration information; and a BGP message is sent to the second network device, the BGP message is used for configuring a first shared database of the second network device, the first shared database comprises a target color mark, and the target color mark is used for indicating the second network device to determine a segment routing strategy of the target traffic according to the target color mark when determining that the target traffic is attacked. Through the mode, the configuration consistency between the network devices can be ensured, the possibility of artificial configuration errors is reduced, meanwhile, the forwarding plane of the second network device directly interacts with the first shared database, and the process interaction safety can be improved.

The invention discloses a broadband core network deployment method based on forwarding and control separation. A broadband core network control plane is deployed in a provincial centralized manner and is deployed in a different-address or different-place 1 + 1 hot standby manner; broadband core network user planes are deployed in a centralized manner according to cities and different local addresses are in 3 + 1 warm standby; control planes of the broadband core network communicate with each other through MER equipment, are borne by using L3VPN, and are connected to an intelligent metropolitan area network by using the MER equipment to communicate with CR equipment; the broadband core network user plane double-uplink different-local-address two CRs are incorporated into the autonomous domain management of the metropolitan area network, and uplink broadband core network control plane and downlink OLT equipment are connected through the intelligent metropolitan area network. Compared with a traditional BRAS, under the same hardware condition, the number of supported users is larger, forwarding plane resources are utilized more efficiently, and the capacity expansion requirement is lowered; the IP addresses can be controlled in a centralized mode, applied and distributed according to needs, automatically released after being used, efficiently used and easy to operate, maintain and manage.

A data processing system, a data processing method, and a related device, which relate to the technical field of computers. A management and control node sends first management information and first control information to a computing node on the basis of a first bus, wherein the first management information comprises information for managing a communication function of the computing node, and the first control information comprises information for controlling the communication function of the computing node; and the management and control node further sends second management information and second control information to a switching node on the basis of a second bus, wherein the second management information comprises information for managing a data forwarding function of the switching node, and the second control information comprises information for controlling the data forwarding function of the switching node. In this way, the management and control node directly sends the management information and the control information to the computing node and the switching node by means of the buses, and it is unnecessary to perform forwarding by means of the switching node, thereby realizing physical isolation of the management information and the control information from a forwarding plane, and thus improving the security of management and control for the computing node and the switching node.

The embodiment of the invention provides a resource management method, electronic equipment and a program product. The method comprises the following steps: acquiring time-varying bandwidth path arrangement information issued by a controller; the time-varying bandwidth path arrangement information comprises an executable time period and a bandwidth demand and an execution path in the time period; sending a resource judgment message along the execution path, wherein the resource judgment message carries a time variable bandwidth resource request parameter and a bandwidth resource information field; the bandwidth resource information field is used for indicating time period-based bandwidth resource information of at least one hop in the execution path; and in response to a resource reservation confirmation message sent by the receiving end equipment according to the resource judgment message, bandwidth resource reservation based on the time-varying bandwidth path is executed. According to the scheme of the embodiment, the time variable parameters are processed on the forwarding surface, the value-added service can be provided by using the existing IP network, the operation efficiency of the wide area network is improved, and the data express service can be ordered as required, so that the cost is reduced, and the service is more flexible.

The invention discloses an encrypted traffic restoration system, method and device and a storage medium, and relates to the technical field of network security, and the system comprises a data forwarding plane which is used for receiving encrypted traffic and carrying out the data analysis of the encrypted traffic; the user-defined transmission control protocol stack is used for monitoring the analyzed flow and determining a connection relationship between the target server and the target client; the virtual service layer is used for constructing a virtual server and a virtual client, determining a virtual sender and a virtual receiver, and transmitting the analyzed flow to an actual receiver through the virtual sender and the virtual receiver in sequence; the virtual server and the virtual client are both provided with a traffic decryption function and a traffic encryption function, so that data security detection can be carried out on decrypted traffic obtained through the decryption function. The plaintext traffic is obtained through the decryption function between the virtual server and the virtual client, and the problem that an original network structure is changed in the encrypted traffic reduction process is avoided.

The invention discloses a dynamic routing optimization method for a hybrid forwarding plane network, which is characterized in that a centralized controller broadcasts a whole network flow table to routing equipment in a network domain in a flooding mode, and the routing equipment in the network domain introduces the whole network flow table in calculating a shortest path in a dynamic routing calculation process so as to optimize the dynamic routing. And optimizing and generating a routing table and conflict information, reporting the conflict information to the centralized controller by the routing equipment, and optimizing a service guarantee strategy by the centralized controller. The method has the beneficial effects that in a communication network based on a hybrid forwarding plane architecture, high-quality generation of a dynamic routing path is realized, a routing next hop is preferably formed, and the problems of network congestion and transmission delay increase generated after a centralized controller manages and controls the communication network are avoided.

The invention relates to a southbound resource management method and device, computer equipment, a computer readable storage medium and a computer program product. The method comprises the following steps: acquiring a southbound resource to be processed, and acquiring a first forwarding plane label corresponding to the southbound resource to be processed; determining a resource configuration node according to the first forwarding plane label, and obtaining a large top heap corresponding to the resource configuration node; and when the large top heap comprises the resource label of the southbound resource to be processed, adding the southbound resource to be processed into the large top heap. By adopting the method, the accuracy of southbound resource management can be improved.

The invention discloses a video encryption transmission link optimization method and system based on digital twinning. The method comprises the following steps: deploying lightweight probes at a sending end, a receiving end and an intermediate node, acquiring an encryption algorithm, a key length, encryption and decryption time delay, hop-by-hop time delay and a packet loss rate in real time, and sending the information with timestamps into a message queue; after the cloud twin container reads the data, a network topological graph, an encryption state machine and a video quality attenuation model are updated, a future traffic matrix and an attacker model are input into a running diagram neural network, and multiple groups of encryption parameter and routing path combinations are output; the reinforcement learning agent selects an optimal combination, issues encryption parameters to an encryption engine through a network configuration protocol, and issues a new path to a forwarding plane through a segment routing protocol; after the strategy takes effect, the probe continues to collect performance data, a message queue is sent back to correct network weight, closed-loop optimization is formed, encryption delay and end-to-end delay are continuously reduced, and dynamic optimization of a video encryption transmission link is achieved.

The application provides a tunnel label processing method and device and network equipment, and relates to the technical field of network communication. The method comprises the following steps: in response to a label allocation operation acting on the network equipment, obtaining a tunnel label corresponding to the label allocation operation, generating a network entry containing the tunnel label according to a pre-configured association group format; saving the network entry to a preset storage location; and issuing the allocated tunnel label to a forwarding plane of the network equipment to publish the tunnel label. The tunnel label processing method, device and network equipment provided by the application can quickly find the tunnel label from the preset storage location when the network equipment is reset, which helps the network link converge quickly and effectively avoids the problem of poor communication quality caused by too long interruption time, thereby improving the user experience.

The invention relates to the technical field of computers, in particular to a distributed routing system, a routing processing method and a related device. The system comprises a control subsystem, at least one routing subsystem and at least one forwarding subsystem, each routing subsystem is used for establishing communication connection with a router of an associated business object side so as to receive routing report information notified by the business object side and report the routing report information to the control subsystem; the routing report information is used for indicating a service network configured for the service object; the control subsystem is used for generating a forwarding plane route based on the route report information and issuing the forwarding plane route to the forwarding subsystem associated with the business object; and each forwarding subsystem is used for updating the first local routing table based on the forwarding plane routing so as to forward a service flow request based on the first local routing table after receiving the service flow request. According to the invention, the functions of a traditional commercial router are decoupled, the expansibility and other performances of the routing system are improved, and the comprehensive performance is better.