CN106302157B - Method and device for sending message - Google Patents

Abstract

The invention provides a kind of message sending method and device, wherein, the method comprises: obtaining parent service function path identification SFP ID and one or more child SFP ID corresponding to this parent SFP ID; Receive the message from user equipment; Obtain the specified parent SFP ID and the specified child SFP ID corresponding to the type of the message; send the message to the parent SFP corresponding to the specified parent SFP ID, or to the child SFP corresponding to the specified child SFP ID. The invention solves the problem that the SFC cannot change the service chain path according to the strategy in some scenarios in the related art.

Description

Method and device for sending message

technical field

The present invention relates to the field of communications, and in particular, to a method and device for sending a message.

Background technique

Service Function Chaining (SFC for short) is a network technology that is currently being researched and standardized. Since the data center network has developed to the overlay network, the network edge has become the boundary between the virtual network and the physical network, where the network edge is the Server or ToR, and possibly the gateway (Gateway). However, the Overlay technology does not solve all the problems. There are still many middlewares in the data center, such as firewalls/load balancers, etc. These devices are processed based on user services. If these devices are traversed through tunnels, obviously No way.

This deployment model of the data center requires that the virtual firewall/load balancer can be deployed arbitrarily in the network, that is, independent of the network topology. In this way, a new problem will arise, how can the traffic be flexibly processed through the virtual firewall/load balancer? As a result, new types of middleware such as virtual firewalls/load balancers have emerged. These virtual firewalls/load balancers, deployed at the edge of the network, can be implemented by standard servers.

Generally, business processing functions such as virtual firewalls/load balancers/gateways are called Service Functions, and traffic is processed by a series of Service Functions to form SFC. Figure 1. An example diagram of a business function chain (SFC), as shown in Figure 1, representing two Service Chains.

The framework of SFC can be basically divided into the following components and modules in the current related technologies:

1. Service Overlay (service overlay), that is, the Overlay (overlay) technology that each network edge node needs to communicate;

2. The Generic Service Control Plane (GSCP for short) is the controller that forms the Service Function Chaining;

3. Service Classification (business classification), that is, flow identification is required, and then a specific flow is processed for a specific Service Function Chaining;

4. Dataplane Metadata (control plane metadata), which is a major feature, Metadata (metadata) allows each edge business processing node to exchange information with each other to achieve a certain business processing purpose;

5. SFP (Business Function Path), SFP is the specific path information that constitutes a business chain, such as a flow to process the business chain, and which specific services it needs to go through. The most fine-grained path information of SFP can be specific to the instance of the service. Each SFP has a corresponding ID (identification number), corresponding to the corresponding service path.

To sum up, it is a method that separates the service function and forwarding of the network device, thereby realizing the independent operation and processing of the service function and improving the forwarding performance of the network device.

However, for the existing SFC technology, one SFP ID corresponds to only one service function path.

Example 1, when the SFP ID is equal to 1, the corresponding SFP is "NAT (Network Address Translation) -> DPI (Deep Packet Inspection)", then after the user's first traffic packet enters the NAT, the NAT generates a forwarding table and After sending the table to the switch, address translation can be performed directly on the switch for the packets of the second traffic of the same session of the user, and the service chain only needs to perform DPI. Therefore, the service chain paths processed by the first traffic packet of the user and the second traffic packet of the same session are different.

Example 2, when the SFP ID is equal to 2, the corresponding SFP is "FW (Firewall)->DPI (Deep Packet Inspection)-HTTPFILTER (HTTP Filtering)", where the effective time of setting DPI is 8:00-18:00, so Between 8:00-18:00, execute "FW (firewall)->DPI (deep packet inspection)->HTTP FILTER (HTTP filtering)"; and between 18:00-8:00, execute " FW (firewall) -> HTTP FILTER (HTTP filter)". Therefore, in different time periods, the paths of business processing are different.

In the related art, in some scenarios, the SFC cannot change the service chain path according to the policy, and no effective solution has been proposed yet.

SUMMARY OF THE INVENTION

The present invention provides a message sending method and device, so as to at least solve the problem that the SFC cannot change the service chain path according to the policy in some scenarios in the related art.

According to one aspect of the present invention, a message sending method is provided, comprising: obtaining a parent service function path identifier SFP ID and one or more child SFP IDs corresponding to the parent SFP ID; receiving a message from the user equipment; obtaining The designated parent SFP ID corresponding to the type of the message and the designated child SFP ID; the message is sent to the parent SFP corresponding to the designated parent SFP ID, or the child corresponding to the designated child SFP ID. on SFP.

Further, the message is sent to the parent SFP corresponding to the designated parent SFP ID, or the child SFP corresponding to the designated child SFP ID includes: will include the first designated parent SFP ID and the designated The first designated message with the child SFP ID 0 is encapsulated into the SFP, and the encapsulated SFP and the message are sent to the parent SFP corresponding to the first designated parent SFP ID; perhaps, the second designated parent SFP will be included The second designated message whose ID and the first designated sub-SFP ID are non-0 is encapsulated into the SFP, and the encapsulated SFP and the message are sent to the sub-SFP corresponding to the first designated sub-SFP ID.

Further, the first designated packet is encapsulated into an SFP header or the second designated packet is encapsulated into an SFP header.

Further, the SFP ID and the one or more sub-SFP IDs are configured by the controller or by the network element.

Further, the first designated message that will comprise the first designated parent SFP ID and the designated child SFP ID to be 0 is encapsulated to the SFP, and the encapsulated SFP and the message are sent to the first designated parent SFP ID Before the corresponding parent SFP includes: determining that the message does not have a local session; or, determining that the message is at the sampling point; or, determining that the message is the first packet; or, determining that the child SFP is not configured.

Further, will include the second specified parent SFP ID and the first specified child SFP ID to be non-0 second specified message encapsulation to SFP, the SFP after the encapsulation and the message are sent to the first specified child SFP Before the sub-SFP corresponding to the ID includes: determining that there is a forwarding table for the message; or, determining that the message is not at the sampling point.

Further, obtaining parent business function path identification SFP ID and one or more child SFP IDs corresponding to this parent SFP ID include: for a session identification unique parent SFP, for a plurality of flows in the session, identify different child respectively. SFP.

According to another aspect of the present invention, a message sending method is also provided, comprising: configuring a parent service function path identifier SFP ID and one or more child SFP IDs corresponding to the parent SFP ID; The child SFP ID is sent to the network element, wherein the parent SFP corresponding to the parent SFP ID and the child SFP corresponding to the child SFP ID are used for message sending.

According to yet another aspect of the present invention, a message sending method is also provided, comprising: configuring a parent service function path identifier SFP ID and one or more child SFP IDs corresponding to the parent SFP ID, wherein the parent SFP ID The corresponding parent SFP and the child SFP corresponding to the child SFP ID are used for message sending.

According to an aspect of the present invention, a message sending device is provided, the device is applied to a classifier, and the device includes: a first obtaining module, configured to obtain a parent service function path identifier SFP ID and a relationship with the parent SFP ID Corresponding one or more child SFP IDs; Receiving module, for receiving the message from user equipment; The second acquisition module, for obtaining the specified parent SFP ID and the specified child SFP ID corresponding to the type of the message; Send A module for sending the message to the parent SFP corresponding to the specified parent SFP ID, or to the child SFP corresponding to the specified child SFP ID.

Further, described sending module also includes: the first sending unit, is used to encapsulate the first designated message containing the first designated parent SFP ID and the designated child SFP ID to SFP to SFP, and the SFP after the encapsulation and The message is sent to the parent SFP corresponding to the first specified parent SFP ID; perhaps, the second sending unit is used to include the second specified parent SFP ID and the first specified child SFP ID to be a second non-0 The designated message is encapsulated into the SFP, and the encapsulated SFP and the message are sent to the sub-SFP corresponding to the first designated sub-SFP ID.

Further, the first sending unit is further configured to encapsulate the first designated message into the SFP header; the second sending unit is further configured to encapsulate the second designated message into the SFP header.

Further, the SFP ID and the one or more sub-SFP IDs are configured by the controller or by the network element.

Further, described device also includes the first determination module for, will comprise the first designated parent SFP ID and described designated child SFP ID is the first designated message of 0 to be encapsulated to SFP, the SFP after encapsulation and the described Before the message is sent to the parent SFP corresponding to the first designated parent SFP ID, it is determined that the message does not have a local session; Or, it is determined that the message is at the sampling point; Or, it is determined that the message is the first packet ; or, make sure that no sub-SFPs are configured.

Further, described device also includes the second determination module for, will comprise the second specified parent SFP ID and the first specified child SFP ID to be non-0 The second specified message is encapsulated to the SFP, the SFP after the encapsulation and all Before the message is sent to the sub-SFP corresponding to the first designated sub-SFP ID, it is determined that there is a forwarding table for the message; or, it is determined that the message is not at the sampling point.

Further, the first acquisition module is further configured to identify a unique parent SFP for a session, and identify different child SFPs for multiple flows in the session.

According to another aspect of the present invention, a message sending device is provided, the device is applied to a controller, and the device includes: a configuration module for configuring a parent service function path identifier SFP ID and corresponding to the parent SFP ID One or more child SFP IDs; sending module, for sending described parent SFP ID and described child SFP ID to network element, wherein, the corresponding parent SFP of described parent SFP ID and the child corresponding to described child SFP ID SFP is used for message sending.

According to another aspect of the present invention, a message sending device is provided, the device is applied to a network element, and the device includes: a configuration module for configuring a parent service function path identifier SFP ID and corresponding to the parent SFP ID One or more child SFP IDs, wherein, the parent SFP corresponding to the parent SFP ID and the child SFP corresponding to the child SFP ID are used for message sending.

By the present invention, adopt to obtain parent business function path identification SFP ID and one or more child SFP IDs corresponding to this parent SFP ID; Receive the message from user equipment; Obtain the specified parent SFP ID corresponding to the type of this message and Specify the child SFP ID; send the message to the parent SFP corresponding to the specified parent SFP ID, or to the child SFP corresponding to the specified child SFP ID. It solves the problem that the SFC cannot change the service chain path according to the policy in some scenarios in the related art.

Description of drawings

The accompanying drawings described herein are used to provide a further understanding of the present invention and constitute a part of the present application. The exemplary embodiments of the present invention and their descriptions are used to explain the present invention and do not constitute an improper limitation of the present invention. In the attached image:

Figure 1. Example diagram of business function chain (SFC);

2 is a flowchart of a method for sending a message according to an embodiment of the present invention;

3 is a structural block diagram of a message sending apparatus according to an embodiment of the present invention;

4 is a structural block diagram (1) of a message sending apparatus according to an embodiment of the present invention;

5 is a structural block diagram (2) of a message sending apparatus according to an embodiment of the present invention;

6 is a structural block diagram (3) of a message sending apparatus according to an embodiment of the present invention;

7 is a flowchart (1) of a method for sending a message according to an embodiment of the present invention;

8 is a structural block diagram (four) of a message sending apparatus according to an embodiment of the present invention;

9 is a flowchart (2) of a method for sending a message according to an embodiment of the present invention;

10 is a structural block diagram (5) of a message sending apparatus according to an embodiment of the present invention;

11 is a schematic diagram of an application scenario of a business function chain according to an embodiment of the present invention;

12 is a flow chart of packet forwarding according to an embodiment of the present invention;

13 is a schematic diagram of packet encapsulation according to an embodiment of the present invention;

14 is a schematic diagram of an application scenario of a business function chain according to Embodiment 1 of the present invention;

15 is a schematic diagram of an application scenario of a business function chain according to Embodiment 2 of the present invention;

FIG. 16 is a schematic diagram of an application scenario of a business function chain according to Embodiment 3 of the present invention.

Detailed ways

Hereinafter, the present invention will be described in detail with reference to the accompanying drawings and in conjunction with embodiments. It should be noted that the embodiments in the present application and the features of the embodiments may be combined with each other in the case of no conflict.

A method for sending a message is provided in this embodiment. FIG. 2 is a flowchart of a method for sending a message according to an embodiment of the present invention. As shown in FIG. 2 , the process includes the following steps:

Step S202, obtains parent business function path identification SFP ID and one or more child SFP IDs corresponding to this parent SFP ID;

Step S204, receiving a message from the user equipment;

Step S206, obtains the specified parent SFP ID and the specified child SFP ID corresponding to the type of this message;

Step S208, send the message to the parent SFP corresponding to the specified parent SFP ID, or to the child SFP corresponding to the specified child SFP ID.

Through the above steps, configure the forwarding policy of the message and the parent SFP and the child SFP, and send the message to the parent SFP corresponding to the specified parent SFP ID according to the type of the message, or to the child SFP corresponding to the specified child SFP ID, For the existing SFP technology, one SFP ID corresponds to only one service function path. The above steps solve the problem that the SFC cannot change the service chain path according to the policy in some scenarios in the related art.

Above-mentioned steps S208 relate to that the message is sent to the parent SFP corresponding to the specified parent SFP ID, or on the child SFP corresponding to the specified child SFP ID, in an optional embodiment, will include the first specified parent SFP ID and The first designated message whose ID is 0 of the designated child SFP is encapsulated into the SFP, and the encapsulated SFP and the message are sent to the parent SFP corresponding to the first designated parent SFP ID. In another optional embodiment, encapsulate a second designated message containing a second designated parent SFP ID and a first designated child SFP ID that is not 0 into an SFP, and send the encapsulated SFP and the message to the first designated sub-SFP. Specify the sub-SFP corresponding to the sub-SFP ID.

In the process of encapsulating the first designated packet or the second designated packet into the SFP, in an optional embodiment, the first designated packet is encapsulated into the SFP header or the second designated packet is encapsulated into the SFP header department.

In an optional embodiment, the above-mentioned SFP ID and the above-mentioned one or more sub-SFP IDs are configured by the controller or by the network element.

The first designated message containing the first designated parent SFP ID and this designated child SFP ID is 0 is encapsulated to the SFP, before the SFP after the encapsulation and this message are sent to the parent SFP corresponding to the first designated parent SFP ID, In an optional embodiment, it is determined that there is no local session for the above-mentioned packet; or, it is determined that the above-mentioned packet is at the sampling point; or, it is determined that the above-mentioned packet is the first packet; or, it is determined that no sub-SFP is configured.

Encapsulate the second specified message containing the second specified parent SFP ID and the first specified child SFP ID that is not 0 to the SFP, and send the encapsulated SFP and the message to the child SFP corresponding to the first specified child SFP ID Before, in an optional embodiment, it is determined that there is a forwarding table for the above-mentioned packet; or, it is determined that the above-mentioned packet is not at the sampling point.

Relate to obtaining parent business function path identification SFP ID and one or more child SFP IDs corresponding to this parent SFP ID in above-mentioned steps S202, in an optional embodiment, for the unique parent SFP of a session identification, for this session The multiple flows of , respectively, identify different sub-SFPs.

In this embodiment, a message sending apparatus is also provided, and the apparatus is used to implement the above-mentioned embodiments and preferred implementation manners, which have been described and will not be repeated. As used below, the term "module" may be a combination of software and/or hardware that implements a predetermined function. Although the apparatus described in the following embodiments is preferably implemented in software, implementations in hardware, or a combination of software and hardware, are also possible and contemplated.

Fig. 3 is a structural block diagram of a message sending apparatus according to an embodiment of the present invention. The apparatus is applied to a classifier. As shown in Fig. 3, the apparatus includes: a first obtaining module 32 for obtaining the parent service function path identifier SFP ID And one or more child SFP IDs corresponding to this parent SFPID; Receiving module 34, for receiving the message from user equipment; Second acquisition module 36, for obtaining the specified parent SFP ID and the type corresponding to this message Specify the child SFP ID; the sending module 38 is configured to send the message to the parent SFP corresponding to the specified parent SFP ID, or to the child SFP corresponding to the specified child SFP ID.

Fig. 4 is a structural block diagram (1) of a message sending device according to an embodiment of the present invention. As shown in Fig. 4, the sending module 38 further includes: a first sending unit 382, which is used to send the first designated parent SFP ID and the designated The first designated message with the child SFP ID 0 is encapsulated into the SFP, and the encapsulated SFP and this message are sent to the parent SFP corresponding to the first designated parent SFP ID; or, the second sending unit 384 is used to include The second designated parent SFP ID and the first designated sub-SFP ID are non-zero second designated messages are encapsulated into the SFP, and the encapsulated SFP and the message are sent to the sub-SFP corresponding to the first designated sub-SFP ID.

Optionally, the first sending unit 382 is further configured to encapsulate the first designated packet into the SFP header; the second sending unit 384 is further configured to encapsulate the second designated packet into the SFP header.

Optionally, the above-mentioned SFP ID and the above-mentioned one or more sub-SFP IDs are configured by the controller or by the network element.

FIG. 5 is a structural block diagram (2) of a message sending apparatus according to an embodiment of the present invention. As shown in FIG. 5 , the apparatus further includes a first determining module 52 for setting the ID of the first designated parent SFP and the designated child SFP to include the ID of the first designated parent SFP and the designated child SFP The first designated message whose ID is 0 is encapsulated into the SFP, and before the encapsulated SFP and the message are sent to the parent SFP corresponding to the first designated parent SFP ID, it is determined that there is no local session for the message; or, it is determined The packet is at the sampling point; or, it is determined that the packet is the first packet; or, it is determined that no sub-SFP is configured.

FIG. 6 is a structural block diagram (3) of a message sending apparatus according to an embodiment of the present invention. As shown in FIG. 6 , the apparatus further includes a second determination module 62, which is used to send the ID of the parent SFP including the second specified and the first specified The second specified message whose sub-SFP ID is non-0 is encapsulated into the SFP, and before the encapsulated SFP and the message are sent to the sub-SFP corresponding to the first specified sub-SFP ID, it is determined that there is a forwarding table for the message; or , make sure that the packet is not at the sampling point.

Optionally, the first obtaining module 32 is further configured to identify a unique parent SFP for a session, and identify different child SFPs for multiple flows in the session.

In another embodiment, another method for sending a message is provided. FIG. 7 is a flowchart (1) of a method for sending a message according to an embodiment of the present invention. As shown in FIG. 7 , the process includes the following steps:

Step S702, configure parent business function path identification SFP ID and one or more child SFP IDs corresponding to this parent SFP ID;

Step S704, sending the parent SFP ID and the child SFP ID to the network element, wherein the parent SFP ID corresponding to the parent SFP ID and the child SFP corresponding to the child SFP ID are used for message sending.

Through the above steps, configure the forwarding policy of the message and the parent SFP and the child SFP, and send the message to the parent SFP corresponding to the specified parent SFP ID according to the type of the message, or to the child SFP corresponding to the specified child SFP ID, For the existing SFP technology, one SFP ID corresponds to only one service function path. The above steps solve the problem that the SFC cannot change the service chain path according to the policy in some scenarios in the related art.

Fig. 8 is a structural block diagram (4) of a message sending device according to an embodiment of the present invention. The device is applied to a controller. As shown in Fig. 8, the device includes: a configuration module 82 for configuring the parent service function path identifier SFP ID and one or more child SFP IDs corresponding to the parent SFPID; the sending module 84 is used to send the parent SFP ID and the child SFP ID to the network element, wherein the parent SFP and the child SFP corresponding to the parent SFP ID The sub-SFP corresponding to the ID is used for packet sending.

In another embodiment, another method for sending a message is provided. FIG. 9 is a flowchart (2) of a method for sending a message according to an embodiment of the present invention. As shown in FIG. 9 , the process includes the following steps:

Step S902, configure parent business function path identification SFP ID and one or more child SFP IDs corresponding to this parent SFP ID, wherein, the parent SFP corresponding to this parent SFP ID and the child SFP corresponding to this child SFP ID are used for message send.

Fig. 10 is a structural block diagram (5) of a message sending apparatus according to an embodiment of the present invention. The apparatus is applied to a network element. As shown in Fig. 10, the apparatus includes: a configuration module 102 for configuring the parent service function path identifier SFP ID and one or more child SFP IDs corresponding to the parent SFP ID, wherein the parent SFP corresponding to the parent SFP ID and the child SFP corresponding to the child SFP ID are used for message sending.

In view of the above-mentioned problems existing in the related art, the following description is made with reference to specific optional embodiments, in which the above-mentioned optional embodiments and optional implementations thereof are combined.

Configure the packet forwarding policy and parent SFP and child SFP for each NE in the SFC domain, or send the packet forwarding policy and parent SFP and child SFP from the SFC controller to the NEs in the SFC domain.

FIG. 11 is a schematic diagram of an application scenario of a business function chain according to an embodiment of the present invention. The above-mentioned parent SFP, child SFP and forwarding strategy include, for a session, a unique "parent SFP"; a session will generate several flows (first, second, third... flow), for the first flow, the identification "Sub-SFP 1"; for the second traffic, identify "Sub-SFP 2"...and so on.

A parent SFP may include one or more child SFPs, or may not include any child SFPs.

If the parent SFP does not contain any child SFPs, all traffic of the above session is processed through the service path shown by the parent SFP;

If the parent SFP contains one or more child SFPs, the first traffic corresponding to the above session is processed by the service path indicated by "child SFP 1", and the second traffic is processed by the service path indicated by "child SFP 2".

FIG. 12 is a flow chart of packet forwarding according to an embodiment of the present invention, as shown in FIG. 12 : the flow includes the following steps:

Step S1202, configure a classification strategy;

Step S1204, the classifier matches the message;

Step S1206, look up the traffic type to which the packet belongs;

Step S1208, package parent SFP ID and child SFP ID;

Step S1210, forwarding to the corresponding parent SFP or child SFP according to the traffic type.

Specifically, the classifier classifies packets according to the configured policy or the policy issued by the controller, and distinguishes the first traffic, the second traffic in the same session...

(1) The first traffic packet enters the classifier, and the classifier encapsulates the corresponding SFP ID in the SFC packet header, and at the same time encapsulates the ID of the sub-SFP 1, as shown in FIG. 13 .

The classifier sends the encapsulated first traffic packet to the service function path corresponding to the "sub-SFP 1" for processing;

(2) The second traffic packet enters the classifier, and the classifier encapsulates the corresponding SFP ID in the SFC packet header, and simultaneously encapsulates the ID of the sub-SFP 2.

The classifier sends the encapsulated first traffic packet to the service function path corresponding to the "sub-SFP 2" for processing;

(3) and so on.

Specific embodiment 1:

FIG. 14 is a schematic diagram of an application scenario of a business function chain according to Embodiment 1 of the present invention, as shown in FIG. 14 , including the following steps:

Step S1401, the controller configures the user data execution SFP to be the operation of the service function chain of NAT->DPI->firewall; and configure the NAT service to generate a forwarding table and issue it to the switch, and the firewall service forwarding table is not issued to the switch;

Step S1402, the controller configures the parent SFP ID to be 100, the service chain of "NAT->DPI->Firewall"; the child SFP ID is 1, and the service chain of "DPI->Firewall" to each network element in the SFC domain;

Step S1403, the above-mentioned user in the intranet sends out the first message to access the Internet, and after the switch table look-up and the classification filter, it is found that the message does not have a session locally, and it is the first packet of the session, so the execution parent SFP ID is 100. , the process of the business chain of "NAT->DPI->Firewall";

Step S1404, the classifier encapsulates the message whose parent SFP ID is 100, and the child SFP ID is 0 to the SFC package header, and sends it to the service chain together with the message;

Step S1405, after the NAT service receives the user message, a new session is created, and the forwarding table of the session is delivered to the switch;

Step S1406, the above-mentioned user on the intranet sends a second packet for accessing the Internet, and the packet and the above-mentioned first packet belong to the same session. After the switch table lookup and classifier screening, it is found that the forwarding table of the session already exists, so the process of the service chain with the sub-SFP ID is 1 and "DPI->Firewall" is executed;

Step S1407, the classifier encapsulates the packet whose parent SFP ID is 100 and the child SFP ID is 1 into the SFC encapsulation header, and sends the packet to the "DPI->Firewall" service chain together with the packet, and maintains DPI and firewall through the parent SFP. instance unchanged;

Fig. 15 is a schematic diagram of an application scenario of a business function chain according to Embodiment 2 of the present invention, as shown in Fig. 15, including the following steps

Step S1501, the controller configures the user data to perform an operation in which the SFP is the business function chain of DPI->Http Filter->firewall; wherein, DPI is detected by sampling;

Step S1502, the controller configures the parent SFP ID to be 101, the service chain of "DPI->Http Filter->Firewall"; the child SFP ID is 1, the service chain of "Http Filter->Firewall" to each network element in the SFC domain;

Step S1503, the above-mentioned user on the intranet sends the first packet, and after filtering and sampling through the classifier, it is found that the packet is at the DPI sampling point, so the execution of the parent SFP ID is 101, "DPI->Http Filter->Firewall". business chain process;

Step S1504, the classifier encapsulates the message with the parent SFP ID of 101 and the child SFP ID of 0 into the SFC package header, and sends the message to the "DPI->Http Filter->Firewall" service chain together with the message;

Step S1505, the above-mentioned user on the intranet sends a second packet for accessing the Internet, and the packet and the above-mentioned first packet belong to the same user. After filtering and screening by the classifier, it is found that the packet is not at the DPI sampling point, so the process of the service chain with the sub-SFP ID of 1 and "Http Filter->Firewall" is executed;

Step S1506, the classifier encapsulates the packet whose parent SFP ID is 101 and the child SFP ID is 1 into the SFC encapsulation header, and sends the packet together with the packet to the service chain of "Http Filter->Firewall", and maintains Http through the parent SFP. The Filter and Firewall instances remain unchanged.

Fig. 16 is a schematic diagram of an application scenario of a business function chain according to Embodiment 3 of the present invention, as shown in Fig. 16, including the following steps

Step S1601, the controller configures the user data to execute the operation of the business function chain whose SFP is vBRAS->Http Filter->Firewall->DPI;

Step S1602, the controller configures the parent SFP ID as 102, the service chain of "vBRAS->Http Filter->Firewall->DPI"; the first child SFP ID is 1, "Http Filter->Firewall->DPI"; the second The sub-SFP ID is 2, "Firewall->DPI"; the controller configures the above services to be linked to each network element in the SFC domain;

Step S1603, the controller configures vBRAS to deliver the forwarding table to the switch; the controller is configured to execute Http Filter at 6:00-18:00 Beijing time; at 6:00 Beijing time, the above-mentioned user on the intranet sends the first packet, which is passed through After the switch looks up the table and filters the classifier, it is found that the packet is the first packet of the user, so the process of the service chain with the parent SFP ID of 102 and "vBRAS->HttpFilter->Firewall->DPI" is executed;

Step S1604, the classifier encapsulates the message whose parent SFP ID is 103 and the child SFP ID is 0 into the SFC encapsulation header, and sends the message together with the message to the "vBRAS->Http Filter->Firewall->DPI" service chain;

Step S1605, at 6:01 Beijing time, the above-mentioned user on the intranet sends a second packet for accessing the Internet, and the packet and the above-mentioned first packet belong to the same user. After the switch table lookup and classifier screening, it is found that the packet already exists in the local user forwarding table, so the process of the service chain with the sub-SFP ID is 1 and "Http Filter->Firewall->DPI" is executed;

Step S1606, the classifier encapsulates the packet with the parent SFP ID 103 and the child SFP ID 1 into the SFC encapsulation header, and sends the packet together with the packet to the service chain of "Http Filter->Firewall->DPI", and passes the parent SFP keeps Http Filter, firewall, and DPI instances unchanged;

Step S1607, at 18:01 Beijing time, the above-mentioned user on the intranet sends the Nth Internet-accessing packet, which belongs to the same user as the above-mentioned first, second... packets. After the switch table lookup and classifier screening, it is found that the packet already exists in the local user forwarding table and is no longer within the time limit of Http filter filtering. Therefore, the sub-SFP ID is 2 and the service chain of "firewall->DPI" is executed. process;

Step S1608, the classifier encapsulates the message with the parent SFP ID of 103 and the child SFP ID of 2 into the SFC encapsulation header, and sends the message to the service chain of "Firewall->DPI" together with the message, and maintains the firewall, The DPI instance is unchanged.

To sum up, the present invention provides a method for generating a business function chain, especially a method for dividing a business chain into a parent chain and a child chain, to solve the defect that the business chain path cannot be changed according to the strategy in the related art.

In another embodiment, a software is also provided, and the software is used to execute the technical solutions described in the foregoing embodiment and the preferred implementation manner.

In another embodiment, a storage medium is also provided, in which the above-mentioned software is stored, and the storage medium includes but is not limited to: an optical disk, a floppy disk, a hard disk, a rewritable memory, and the like.

Obviously, those skilled in the art should understand that the above-mentioned modules or steps of the present invention can be implemented by a general-purpose computing device, and they can be centralized on a single computing device or distributed in a network composed of multiple computing devices Alternatively, they may be implemented in program code executable by a computing device, such that they may be stored in a storage device and executed by the computing device, and in some cases, in a different order than here The steps shown or described are performed either by fabricating them separately into individual integrated circuit modules, or by fabricating multiple modules or steps of them into a single integrated circuit module. As such, the present invention is not limited to any particular combination of hardware and software.

The above descriptions are only preferred embodiments of the present invention, and are not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and changes. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included within the protection scope of the present invention.

Claims (16)

1. A message sending method is applied to a classifier and is characterized by comprising the following steps:

acquiring a father service function path identifier (SFP ID) and one or more child SFP IDs corresponding to the father SFP ID;

receiving a message from user equipment;

acquiring an appointed father SFP ID and an appointed son SFP ID corresponding to the flow type of the message;

and sending the message to a parent SFP corresponding to the ID of the specified parent SFP or a child SFP corresponding to the ID of the specified child SFP.

2. The method of claim 1, wherein sending the message to a parent SFP corresponding to the specified parent SFP ID or a child SFP corresponding to the specified child SFP ID comprises:

packaging a first specified message containing a first specified father SFP ID and the specified son SFP ID of 0 to the header of an SFC message, and sending the packaged message to a father SFP corresponding to the first specified father SFP ID; or,

and packaging a second specified message containing a second specified father SFP ID and a first specified sub SFP ID which is not 0 to the header of the SFC message, and sending the packaged message to a sub SFP corresponding to the first specified sub SFP ID.

3. The method of claim 1, wherein the parent SFP ID and the one or more child SFPIDs are configured by a controller or by a network element.

4. The method of claim 2, wherein encapsulating the first specified packet containing the first specified parent SFP ID and the specified child SFP ID of 0 into an SFC packet header, and wherein sending the encapsulated packet onto the parent SFP corresponding to the first specified parent SFP ID comprises:

determining that the message does not have a session locally; or,

determining the message at a sampling point; or,

determining the message as a first packet; or,

it is determined that the sub-SFP is not configured.

5. The method of claim 2, wherein encapsulating a second specified packet containing a second specified parent SFP ID and a first specified child SFP ID that is not 0 into an SFC packet header, and wherein sending the encapsulated packet onto a child SFP corresponding to the first specified child SFP ID comprises:

determining a forwarding table of the message; or,

and determining that the message is not at a sampling point.

6. The method of any of claims 1-5, wherein obtaining a parent Service Function Path Identification (SFPID) and one or more child SFP IDs corresponding to the parent SFP ID comprises:

a unique parent SFP is identified for a session, and different child SFPs are identified for a plurality of traffic in the session, respectively.

7. A message sending method is applied to a controller and is characterized by comprising the following steps:

configuring a forwarding strategy of a message, a father service function path identification (SFP ID) and one or more child SFP IDs corresponding to the father SFP ID;

and sending the forwarding strategy of the message, a parent service function path identification (SFP ID) and one or more child SFP IDs corresponding to the parent SFP ID to a classifier, so that the classifier sends the message to a parent SFP corresponding to a specified parent SFP ID or a child SFP corresponding to a specified child SFP ID according to the flow type of the message, and sends the parent SFP PID and the child SFP ID to a network element, wherein the parent SFP corresponding to the parent SFP ID and the child SFP corresponding to the child SFP ID are used for sending the message.

8. A message sending method is applied to a network element and is characterized by comprising the following steps:

configuring a forwarding strategy of a message, a father service function path identification (SFP ID) and one or more child SFP IDs corresponding to the father SFP ID;

and sending the forwarding strategy of the message, a parent service function path identification (SFP ID) and one or more child SFP IDs corresponding to the parent SFP ID to a classifier so that the classifier sends the message to a parent SFP corresponding to a specified parent SFP ID or a child SFP corresponding to a specified child SFP ID according to the flow type of the message, wherein the parent SFP corresponding to the parent SFP ID and the child SFP corresponding to the child SFP ID are used for sending the message.

9. A message transmission apparatus, the apparatus being applied to a classifier, the apparatus comprising:

a first obtaining module, configured to obtain a parent service function path identifier SFP ID and one or more child SFP IDs corresponding to the parent SFP ID;

the receiving module is used for receiving a message from user equipment;

a second obtaining module, configured to obtain a specified parent SFP ID and a specified child SFPID corresponding to the traffic type of the packet;

and the sending module is used for sending the message to a parent SFP corresponding to the specified parent SFP ID or a child SFP corresponding to the specified child SFP ID.

10. The apparatus of claim 9, wherein the sending module further comprises:

the first sending unit is used for packaging a first specified message containing a first specified father SFP ID and the specified son SFP ID of 0 to the head of an SFC message and sending the packaged message to a father SFP corresponding to the first specified father SFP ID; or,

and the second sending unit is used for encapsulating a second specified message containing a second specified parent SFP ID and the first specified child SFP ID which is not 0 to the header of the SFC message and sending the encapsulated message to a child SFP corresponding to the first specified child SFP ID.

11. The apparatus of claim 9, wherein the parent SFP ID and the one or more child SFPIDs are configured by a controller or by a network element.

12. The apparatus of claim 10, further comprising a first determining module, configured to encapsulate a first specified packet containing a first specified parent SFP ID and the specified child SFP ID is 0 into an SFC packet header, and determine that there is no session in the packet locally before sending the encapsulated packet to a parent SFP corresponding to the first specified parent SFP ID; or,

determining the message at a sampling point; or,

determining the message as a first packet; or,

it is determined that the sub-SFP is not configured.

13. The apparatus of claim 10, further comprising a second determining module for encapsulating a second specified packet containing a second specified parent SFP ID and a first specified child SFP ID being other than 0 into an SFC packet header, before sending the encapsulated packet to a child SFP corresponding to the first specified child SFP ID,

determining a forwarding table of the message; or,

and determining that the message is not at a sampling point.

14. The apparatus of any of claims 9-13, wherein the first obtaining module is further configured to identify a unique parent SFP for a session, and to identify different child SFPs for a plurality of traffic in the session.

15. A message transmission apparatus, the apparatus being applied to a controller, the apparatus comprising:

the configuration module is used for configuring a forwarding strategy of a message, a father service function path identification (SFP ID) and one or more child SFP IDs corresponding to the father SFP ID;

and the sending module is used for sending the forwarding strategy of the message configured by the configuration module, the parent service function path identification (SFP ID) and one or more child SFP IDs corresponding to the parent SFP ID to a classifier so that the classifier sends the message to a parent SFP corresponding to a specified parent SFP ID or a child SFP corresponding to a specified child SFP ID according to the flow type of the message, and sends the parent SFP ID and the child SFP ID to a network element, wherein the parent SFP corresponding to the parent SFP ID and the child SFP corresponding to the child SFP ID are used for sending the message.

16. A message sending apparatus, the apparatus being applied to a network element, the apparatus comprising:

the configuration module is used for configuring a forwarding strategy of a message, a father service function path identification (SFP ID) and one or more child SFP IDs corresponding to the father SFP ID;

the device is further configured to send a forwarding policy of the packet configured by the configuration module, a parent service function path identifier (SFP ID), and one or more child SFP IDs corresponding to the parent SFP ID to a classifier, so that the classifier sends the packet to a parent SFP corresponding to a specified parent SFP ID or a child SFP corresponding to a specified child SFP ID according to a traffic type of the packet, where the parent SFP corresponding to the parent SFP ID and the child SFP corresponding to the child SFP ID are used for sending the packet.

Images