WO2011022992A1 - 一种控制网元、转发网元及因特网协议网络的路由方法 - Google Patents

一种控制网元、转发网元及因特网协议网络的路由方法 Download PDF

Info

Publication number
WO2011022992A1
WO2011022992A1 PCT/CN2010/072642 CN2010072642W WO2011022992A1 WO 2011022992 A1 WO2011022992 A1 WO 2011022992A1 CN 2010072642 W CN2010072642 W CN 2010072642W WO 2011022992 A1 WO2011022992 A1 WO 2011022992A1
Authority
WO
WIPO (PCT)
Prior art keywords
network element
forwarding
module
identification
policy
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/CN2010/072642
Other languages
English (en)
French (fr)
Inventor
宋晓丽
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
ZTE Corp
Original Assignee
ZTE Corp
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by ZTE Corp filed Critical ZTE Corp
Priority to JP2012523188A priority Critical patent/JP2013501434A/ja
Priority to EP10811152.7A priority patent/EP2445145B1/en
Priority to US13/384,718 priority patent/US20120144061A1/en
Publication of WO2011022992A1 publication Critical patent/WO2011022992A1/zh
Priority to IN320DEN2012 priority patent/IN2012DN00320A/en
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00—Routing or path finding of packets in data switching networks
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00—Arrangements for monitoring or testing data switching networks
    • H04L43/06—Generation of reports
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L69/00—Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
    • H04L69/30—Definitions, standards or architectural aspects of layered protocol stacks
    • H04L69/32—Architecture of open systems interconnection [OSI] 7-layer type protocol stacks, e.g. the interfaces between the data link level and the physical level
    • H04L69/322—Intralayer communication protocols among peer entities or protocol data unit [PDU] definitions
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00—Routing or path finding of packets in data switching networks
    • H04L45/02—Topology update or discovery
    • H04L45/04—Interdomain routing, e.g. hierarchical routing

Definitions

  • the present invention relates to the field of IP (Internet Protocol) network technology, and in particular, to a routing method for controlling a network element, a forwarding network element, and an Internet Protocol network.
  • IP Internet Protocol
  • IP networks have been widely commercialized on a large scale, and the scale and number of users of commercial networks are continuing to develop rapidly.
  • control plane of the IP network becomes more and more complex, and the scalability of the control plane, data plane, and management plane becomes the main obstacle in the evolution of the IP network. problem.
  • the shortcomings of current IP network architecture design have greatly limited network capacity, network scalability, controllability, security, and QoS (Quality of Service).
  • the control plane and the data plane are integrated on the same network node. Therefore, when more and more services and control signaling are added to the network node, the whole network is extremely complicated and difficult to maintain, and it is difficult to expand.
  • control forwarding separation In order to cope with the above network problems, the industry has proposed the concept of control forwarding separation.
  • the control planes are separated from the data plane and maintained separately, thereby reducing the pressure on network expansion and control capabilities and increasing the robustness of the network.
  • FIG. 1 is a schematic structural diagram of an existing IP network for controlling forwarding and separation.
  • the network in Figure 1 is a network in which the control plane is separated from the data plane.
  • the control plane is composed of multiple CEs (Control Element). It is mainly used to control and manage the operation of all network protocols, including route calculation and routing.
  • the data plane is composed of an FE (Forwarding Element) and an Internal Forwarding Element (IFE). It is mainly used to forward service data.
  • a management network element (ME) is used to manage network entities such as CEs and FEs.
  • the ME monitors and collects static information and status information of each network element, and uses the information and configuration commands to The network element is managed.
  • FIG. 1 is a schematic structural diagram of an IP network for controlling forwarding and separation.
  • data forwarding in a data plane may be implemented according to multiple routing schemes.
  • a statically configured route may be configured by the network through the ME.
  • the information is forwarded according to the routing information calculated by the CE (calculated according to the network information of the connected link of the FE and the IFE collected by the CE).
  • the object of the present invention is to provide a routing method for controlling a network element, a forwarding network element and an internet protocol network, and provide as many routing solutions as possible to meet different requirements.
  • the present invention provides a control network element, including: a policy formulation module and a policy delivery module;
  • a policy setting module configured to formulate a routing policy according to the identification result reported by the forwarding network element;
  • the identification result is a result obtained by the forwarding network element performing deep packet detection on the data packet according to the identification rule;
  • a policy sending module configured to send the routing policy to the forwarding network element, so that the forwarding network element forwards the data packet according to the routing policy.
  • the identification result includes at least one of user information, service information, and data content information.
  • the policy formulating module further includes:
  • the rule issuance module is configured to send a message identification rule to a forwarding network element in the jurisdiction; a result receiving module, configured to receive the identification result reported by the forwarding network element, and a policy determining module, configured to determine a routing policy according to the identification result, where the routing policy includes route forwarding information.
  • the identification result includes information in layers 2 to 7 in the open system interconnection model.
  • the present invention further provides a forwarding network element, including: an identification processing module and a forwarding processing module;
  • the identification processing module is configured to perform deep packet inspection on the data packet according to the packet identification rule sent by the control network element, obtain a recognition result, and report the identification result to the control network element; And forwarding the data packet according to the routing policy, where the routing policy is determined and delivered by the control network element according to the identification result.
  • the identification result includes at least one of user information, service information, and data content information.
  • the identification processing module further includes:
  • a rule receiving module configured to receive a packet identification rule sent by the control network element
  • a packet identification module configured to perform deep packet detection on the received data packet according to the identification rule, to obtain the identification result
  • a result module configured to send the identification result to the control network element
  • the forwarding processing module further includes: a policy receiving module, a forwarding control module, where
  • a policy receiving module configured to receive a routing policy that is determined by the control network element according to the identification result and delivered;
  • a forwarding control module configured to forward the data packet according to the routing policy.
  • the invention also provides a routing method for an internet protocol network, comprising:
  • the forwarding network element performs depth on the data packet according to the packet identification rule sent by the control network element.
  • the packet detection result is obtained and reported to the control network element;
  • the control network element formulates a routing policy according to the identification result
  • the control network element sends the routing policy to the forwarding network element
  • the forwarding network element forwards the data packet according to the routing policy.
  • the above routing method of the Internet Protocol network wherein the identification result includes at least one of user information, service information, and data content information.
  • the deep packet detection module is set in the FE, and after receiving the data packet, the deep packet detection module acquires the application layer information of the data packet, and reports the information to the CE, and the CE reports the datagram according to the datagram.
  • the application layer information of the text is used to calculate the routing policy, and the FE further forwards the data packet according to the routing policy calculated by the CE. Therefore, not only the routing can be performed based on the existing method, but also the corresponding result can be determined according to the result of the deep packet detection.
  • the routing strategy can provide as many routing solutions as possible to meet different needs.
  • FIG. 1 is a schematic structural diagram of an IP network for controlling forwarding and separation in the prior art
  • FIG. 2 is a schematic diagram showing the structure and connection relationship of CE and FE according to the present invention.
  • FIG. 3 is a schematic flowchart of a routing method of an Internet Protocol network according to the present invention.
  • FIG. 4 is a schematic flow chart of a routing method for implementing an Internet Protocol network at a control level according to the present invention
  • FIG. 5 is a schematic flow chart of a routing method for implementing an Internet Protocol network at a forwarding level according to the present invention. detailed description
  • the basic scheme of the present invention is: the forwarding network element performs the deep packet detection on the data packet according to the packet identification rule sent by the control network element to obtain the identification result, and reports the result to the control network element; The network element formulates a routing policy according to the identification result; the control network element sends the routing policy to the forwarding network element; and the forwarding network element forwards the data packet according to the routing policy.
  • FIG. 2 is a schematic diagram of the structure and connection relationship of the CE and the FE according to the present invention. As shown in FIG. 2, the CE21 includes:
  • the policy setting module 211 is configured to formulate a routing policy according to the identification result reported by the FE22; the identification result is a result obtained by the FE22 performing deep packet detection on the data packet according to the identification rule;
  • the policy sending module 212 is configured to send the routing policy to the FE22, so that the FE22 forwards the data packet according to the routing policy.
  • the policy formulation module 211 specifically includes:
  • the rule issuance module 2111 is configured to send a message identification rule to the FE22 in the jurisdiction;
  • the result receiving module 2112 is configured to receive the identification result reported by the FE22, where the recognition result is that the FE22 receives the message according to the identification rule.
  • the result of the deep packet detection obtained by the received data packet includes the application layer information of the data packet;
  • the policy determining module 2113 is configured to determine a routing policy according to the identification result, where the routing policy includes route forwarding information.
  • FE22 includes:
  • the identification processing module 221 is configured to perform deep packet inspection on the data packet according to the packet identification rule sent by the CE21, obtain a recognition result, and report the identification result to the CE21;
  • the forwarding processing module 222 is configured to forward the data packet according to the routing policy, and the routing policy is determined by the CE21 according to the identification result and delivered.
  • the identification processing module 221 includes:
  • the rule receiving module 2211 is configured to receive a packet identification rule sent by the CE21.
  • a message identification module 2212 configured to receive the received data packet according to the packet identification rule Performing deep packet inspection, and obtaining the identification result of the application layer information of the data packet;
  • the result reporting module 2213 is configured to report the identification result to the CE21;
  • the forwarding processing module 222 specifically includes:
  • the policy receiving module 2221 is configured to receive a routing policy determined by the CE21 according to the identification result.
  • the forwarding control module 2222 is configured to forward the data packet according to the routing policy.
  • the Internet Protocol network in the present invention includes at least one control network element, a plurality of forwarding network elements, and a plurality of internal forwarding network elements.
  • the CE and the FE have been described in detail above, and are not described herein again.
  • the control network element can be one, but it can also be multiple. When the number of control network elements is multiple, load balancing and/or redundancy backup of the CE can be implemented.
  • FIG. 3 is a schematic flowchart of a routing method for an Internet Protocol network according to the present invention.
  • the method includes the following steps: Step 31: The forwarding network element is configured according to CE The sent packet identification rule performs a deep packet inspection on the data packet to obtain a recognition result, and reports the result to the CE;
  • Step 32 The CE formulates a routing policy according to the identification result.
  • Step 33 The CE sends the routing policy to the FE.
  • Step 34 The FE forwards the data packet according to the routing policy.
  • FIG. 4 is a schematic flow chart of a method for implementing an Internet Protocol network routing at a control level according to the present invention; as shown in FIG. 4, the method includes the following steps:
  • Step 41 The CE sends a packet identification rule to the FE in the jurisdiction;
  • Step 42 The CE receives the identification result reported by the FE, and the identification result is a result of the application layer information including the data packet obtained by performing deep packet inspection on the received data packet by the FE according to the identification rule. ;
  • Step 43 The CE determines a routing policy according to the identification result.
  • Step 44 The CE sends the routing policy to the FE, so that the FE forwards the data packet according to the routing policy.
  • FIG. 5 is a schematic flowchart of a method for implementing an internet protocol network routing method at a forwarding layer according to the present invention. As shown in FIG. 5, the method includes the following steps:
  • Step 51 The FE receives the packet identification rule sent by the CE.
  • Step 52 The FE performs depth packet detection on the received data packet according to the identification rule, and the obtained identification result of the application layer information of the data packet is obtained.
  • Step 53 The FE is used to report the identification result to the CE.
  • Step 54 The FE receives a routing policy that is determined by the CE according to the identification result.
  • Step 55 The FE forwards the data packet according to the routing policy.
  • the IP network provided by the present invention is a network separate from control and forwarding, and may also be a FPBN (Future Packet Based Networks), and the CE may be implemented based on an iSCP (Independent Scalable Control Plane) technology. controlling device.
  • FPBN Full Packet Based Networks
  • iSCP Independent Scalable Control Plane
  • the CE in the present invention also has calculation modules of other routing strategies, which are respectively described below.
  • the CE further includes:
  • a route calculation module configured to calculate a route according to network information of the connected link reported by the FE
  • a decision module configured to perform routing related policy decisions (from the ME), run a routing protocol, calculate and maintain a routing table RIB (Routing Information Base), and send a neighbor table and a forwarding table FIB including the next hop information to the data plane (Forwarding) Information Base), etc.
  • the route table RIB records routes from various routing protocols such as OSPF, BGP, etc., and the FIB adds the relevant forwarding information to the best route selected in the RIB, and combines the following hop address and outbound interface information. Formed information sheet.
  • the FE updates its own saved FIB according to the FIB, and finds the next hop information according to the FIB. Now for data packet forwarding, all FEs and IFEs that need packet forwarding need to store FIB tables.
  • the FE also includes:
  • the redirection module the FE separates the routing protocol-related packets from the data packet, and redirects the packet to the CE;
  • the information reporting module is configured to report the network information of the connected link to the CE for route calculation.
  • the content between the layer 2 and the layer 7 of the data packet is obtained by using the deep packet detection technology in the FE setting message identification module, and based on the layer 2 of the data packet.
  • the information between layers 7 determines the corresponding routing strategy to meet as many requirements as possible.
  • bandwidth resources may be occupied in a large amount, which may result in other users not being able to obtain normal services.
  • the current IP network cannot perform targeted routing policy calculation.
  • the embodiment of the present invention can set a corresponding routing policy for the P2P service.
  • the BT service is taken as an example to describe the processing procedure in detail.
  • the CE presets a packet identification rule.
  • the packet including the BT feature (19BitTorrent Protocol) in the Layer 2 layer 7 of the data packet is the data packet of the P2P service.
  • the identification of the Bittorrent protocol the peer-to-peer protocol is analyzed by reverse engineering.
  • the so-called peer-to-peer protocol refers to the protocol for exchanging information between Peer and Peer.
  • the peer-to-peer protocol starts with a handshake, followed by a looped message flow. Each message has a number to indicate the length of the message. For example, during the handshake process, the first is to send 19 followed by the string "BitTorrent”. Protocol” , Blade "19BitTorrent Protocol” is the Bittorrent "feature word”.
  • the rule sending module of the CE sends the packet identification rule to the FE;
  • the rule receiving module of the FE receives and saves the message identification rule.
  • the message identification module uses the depth detection technology to comprehensively analyze the message, if the message is a service
  • the obtained identification result indicates that the service type of the data packet is the BT service
  • the result reporting module reports the recognition result to the result receiving module of the CE;
  • the message identification module can analyze the received data message and determine the report. Whether the string "19BitTorrent Protocol" exists in the text, if it exists, it can be determined that the data packet is a data packet of the BT service, and the obtained recognition result indicates that the service type of the data packet is BT service, and the indication data is generated.
  • the service type of the packet is the recognition result of the BT service.
  • the policy determining module finds that the identification result indicates the service type of the data packet, and determines the corresponding routing policy according to the service type to which the data packet belongs.
  • the routing strategy is assumed as follows:
  • the CE can allocate the specific link of the data forwarding plane to the P2P service.
  • the data packets of the P2P service can only be transmitted in the network through these specific links (that is, the routing and forwarding information is determined). It does not preempt the bandwidth of other non-P2P services, and can ensure the normal operation of other services.
  • the policy issuing module of the CE sends the determined routing policy to the FE.
  • the policy receiving module of the FE receives the routing policy, and the forwarding control module forwards the data packet of the BT service according to the routing policy.
  • the foregoing policy may also be other policies.
  • the embodiment of the present invention only focuses on the routing policy according to the information of the data packet identified by the packet identification module, so as to meet as many requirements as possible, and does not limit the specific routing policy. .
  • the present invention can set a corresponding routing policy for the QoS of the service, and details the processing procedure.
  • the CE pre-sets a packet identification rule.
  • the packet identification rule is to obtain a QoS field in the data packet.
  • the rule sending module of the CE sends the packet identification rule to the FE;
  • the rule receiving module of the FE receives and saves the message identification rule.
  • the message identification module uses the depth detection technology to comprehensively analyze the message, and obtains the information of the QoS field of the data message, and the corresponding recognition result.
  • the QoS requirement of the data packet is indicated, and the result reporting module reports the recognition result to the result receiving module of the CE;
  • the policy determining module finds that the identification result indicates the QoS of the data packet, and determines the corresponding routing policy according to the QoS of the data packet, and assumes that the routing policy is as follows:
  • the CE can allocate a link with the best quality of service on the link that may serve the packet on the data forwarding plane, and the data packet can pass the data packet.
  • the policy issuing module of the CE sends the determined routing policy to the FE.
  • the policy receiving module of the FE receives the routing policy, and the forwarding control module forwards the data packet according to the routing policy.
  • the above-mentioned policy may also be other policies.
  • the embodiment of the present invention only focuses on the formulation of the routing policy based on the information of the data packet identified by the packet identification module, so as to meet as many requirements as possible, and does not limit the specific routing policy.
  • the invention can set corresponding routing strategies for different users, and detailed description The process is as follows.
  • the CE pre-sets a packet identification rule.
  • the packet identification rule is to obtain a user information field in the data packet.
  • the CE sends the packet identification rule to the FE.
  • the rule sending module of the CE sends the packet identification rule to the FE;
  • the rule receiving module of the FE receives and saves the message identification rule.
  • the message identification module uses the depth detection technology to comprehensively analyze the message, and obtains the information of the user field of the data message, and the corresponding recognition result.
  • the user information of the data message is indicated, and the result is reported by the result reporting module.
  • the policy determining module finds that the identification result indicates the user information of the data packet, and determines the corresponding routing policy according to the user information of the data packet, and assumes that the routing policy is as follows:
  • the CE can allocate a packet with a higher data forwarding plane than the user with a lower priority.
  • the data packet can be transmitted over the network through these specific links. (That is to determine the routing and forwarding information), to ensure that users with higher priority users can enjoy better service.
  • the policy issuing module of the CE sends the determined routing policy to the FE.
  • the policy receiving module of the FE receives the routing policy, and the forwarding control module forwards the data packet according to the routing policy.
  • the above-mentioned policy may also be other policies.
  • the embodiment of the present invention only focuses on the formulation of the routing policy based on the information of the data packet identified by the packet identification module, so as to meet as many requirements as possible, and does not limit the specific routing policy.
  • the description is based on a feature (based on service type, QoS-based requirements, and user-based). It should be understood that the message characteristics of the message identification rule may be layer 2-layer. Characteristics in 7, such as encryption features, etc., satisfy certain conditions in the encryption feature When you choose a link with a higher security for forwarding, you can even process it based on the data content.
  • the packet identification rule may further include multiple packet features, and the multiple packet features may be different layers from the data packet, such as the source address, the destination address, the source port, and the destination. Port and protocol type, etc.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
  • Computer And Data Communications (AREA)

Abstract

本发明提供一种控制网元、转发网元及因特网协议网络的路由方法，包括：转发网元根据控制网元下发的报文识别规则对数据报文进行深度报文检测得到识别结果，并上报给所述控制网元；控制网元根据所述识别结果制定路由策略；控制网元下发所述路由策略到所述转发网元；转发网元根据所述路由策略转发所述数据报文；本发明还提供一种控制网元和一种转发网元。利用本发明的技术方案，能够提供尽可能多的路由方案，满足不同的需求。

Description

一种控制网元、 转发网元及因特网协议网络的路由方法 技术领域
本发明涉及 IP ( Internet Protocol, 因特网协议）网络技术领域， 特别是 一种控制网元、 转发网元及因特网协议网络的路由方法。 背景技术
随着互联网技术的飞速发展， IP 网络得到了广泛大规模的商用， 并且 商用网络的规模和用户数正持续快速的发展。
随着越来越多的新业务、 新功能被引入网络， IP 网络的控制平面变得 越来越复杂， 控制平面、 数据平面和管理平面的可扩展性成为了 IP网络演 进过程中面临的主要问题。
当前 IP网络架构设计的缺陷极大限制了网络容量、 网络可扩展性、 可 控性、 安全性及 QoS ( Quality of Service, 服务质量）等。 在当前 IP网络中 控制平面和数据平面集成在同一个网络节点， 因此当越来越多的业务和控 制信令被加入网络节点时， 使得整个网络异常复杂难以维护， 难于扩展。
为应对以上网络问题， 目前业界提出了控制转发分离的理念， 即将控 制平面从数据平面中分离出来， 各自维护， 以此减轻网络扩展和控制能力 上的压力， 增加网络的健壮性。
图 1为现有的控制转发分离的 IP网络的结构示意图。 图 1中的网络为 控制平面与数据平面分离的网络， 其中控制平面由多个 CE ( Control Element, 控制网元）组成， 主要用于控制和管理所有网络协议的运行， 包 括路由计算、路由选择、业务处理等； 数据平面由 FE ( Forwarding Element, 转发网元）和 IFE ( Internal forwarding element, 内部转发网元）共同组成， 主要用于完成业务数据的转发。 此外还包括一个管理网元 ME ( Management Element ), 用于管理 CE、 FE等网元的网络实体， ME监视并搜集各网元的静态信息、 状态信息等， 并根据这些信息和配置命令对各网元进行管理。
图 1为现有技术的控制转发分离的 IP网络的结构示意图，如图 1所示， 数据平面中数据的转发可依据多种路由方案实现， 例如， 可依据网管通过 ME为其静态配置的路由信息进行转发； 可依据 CE计算出的路由信息（根 据 CE搜集到的 FE和 IFE的相连链路的网络信息计算）进行转发等。
然而， 现有技术至少存在如下缺点：
现有技术的数据平面中的路由方案中， 仅能利用数据报文的层 4 以下 的内容， 也就是网络层信息来获取路由方案， 这种路由方案具有很大的局 限性， 无法满足用户的不同需求， 如差异化服务需求、 安全需求等。 发明内容
本发明的目的是提供一种控制网元、 转发网元及因特网协议网络的路 由方法， 提供尽可能多的路由方案， 满足不同的需求。
为了实现上述目的， 本发明提供了一种控制网元， 包括： 策略制定模 块、 策略下发模块； 其中，
策略制定模块， 用于根据转发网元上报的识别结果制定路由策略； 所 述识别结果为所述转发网元根据识别规则对数据报文进行深度报文检测得 到的结果；
策略下发模块， 用于下发所述路由策略到所述转发网元， 使得所述转 发网元根据所述路由策略转发数据报文。
上述控制网元中， 所述识别结果包括用户信息、 业务信息和数据内容 信息中的至少一个。
上述控制网元中， 所述策略制定模块进一步包括：
规则下发模块， 用于向管辖范围内的转发网元下发报文识别规则； 结果接收模块， 用于接收所述转发网元上报的识别结果； 策略确定模块， 用于根据所述识别结果确定路由策略， 所述路由策略 中包括路由转发信息。
上述控制网元中， 所述识别结果中包括开放式系统互联模型中的层 2 到层 7中的信息。
本发明还提供了一种转发网元， 包括： 识别处理模块、 转发处理模块； 其中，
识别处理模块， 用于根据控制网元下发的报文识别规则对数据报文进 行深度报文检测， 得到识别结果， 并上报所述识别结果给所述控制网元； 转发处理模块， 用于根据路由策略转发所述数据报文， 所述路由策略 由所述控制网元根据所述识别结果确定并下发。
上述转发网元中， 所述识别结果包括用户信息、 业务信息和数据内容 信息中的至少一个。
上述转发网元中， 所述识别处理模块进一步包括：
规则接收模块， 用于接收控制网元下发的报文识别规则；
报文识别模块， 用于根据所述识别规则对接收到的数据报文进行深度 报文检测， 得到包括所述识别结果；
结果上 模块， 用于将所述识别结果上 给所述控制网元；
上述转发网元中， 所述转发处理模块进一步包括： 策略接收模块、 转 发控制模块； 其中，
策略接收模块， 用于接收所述控制网元根据所述识别结果确定并下发 的路由策略；
转发控制模块， 用于根据所述路由策略转发所述数据报文。
本发明还提供了一种因特网协议网络的路由方法， 包括：
所述转发网元根据控制网元下发的报文识别规则对数据报文进行深度 报文检测得到识别结果， 并上报给所述控制网元；
所述控制网元根据所述识别结果制定路由策略；
所述控制网元下发所述路由策略到所述转发网元；
所述转发网元根据所述路由策略转发所述数据报文。
上述的因特网协议网络的路由方法， 其中， 所述识别结果包括用户信 息、 业务信息和数据内容信息中的至少一个。
本发明具有以下的有益效果：
本发明中 ,通过在 FE中设置深度报文检测模块，在接收到数据报文后， 由深度报文检测模块获取数据报文的应用层信息， 并上报给 CE, 由 CE根 据所述数据报文的应用层信息进行路由策略计算， FE进而根据 CE计算出 的路由策略进行数据报文的转发， 因此， 不但可以基于现有方式进行路由， 还能根据深度报文检测的结果来制定对应的路由策略， 能提供尽可能多的 路由方案， 满足不同的需求。 附图说明
图 1为现有技术的控制转发分离的 IP网络的结构示意图；
图 2 为本发明 CE和 FE的结构及其连接关系的示意图；
图 3为本发明因特网协议网络的路由方法的流程示意图；
图 4为本发明在控制层面实现因特网协议网络的路由方法的流程示意 图；
图 5 为本发明在转发层面实现因特网协议网络的路由方法的流程示意 图。 具体实施方式
本发明的基本方案是： 转发网元根据控制网元下发的报文识别规则对 数据报文进行深度报文检测得到识别结果， 并上报给所述控制网元； 控制 网元根据所述识别结果制定路由策略； 控制网元下发所述路由策略到所述 转发网元； 转发网元根据所述路由策略转发所述数据报文。
下面通过附图及具体实施例对本发明再做进一步的详细说明。
本发明提供一种控制网元和转发网元， 图 2 为本发明 CE和 FE的结构 及其连接关系的示意图， 如图 2所示， CE21包括：
策略制定模块 211 , 用于根据 FE22上报的识别结果制定路由策略； 所 述识别结果为所述 FE22根据识别规则对数据报文进行深度报文检测得到 的结果；
策略下发模块 212 ,用于下发所述路由策略到所述 FE22 ,使得所述 FE22 根据所述路由策略转发数据报文；
其中该策略制定模块 211具体包括：
规则下发模块 2111 , 用于向管辖范围内的 FE22下发报文识别规则； 结果接收模块 2112,用于接收 FE22上报的识别结果，所述识别结果为 所述 FE22 根据所述识别规则对接收到的数据报文进行深度报文检测得到 的包括所述数据报文的应用层信息的结果；
策略确定模块 2113 , 用于根据所述识别结果确定路由策略， 所述路由 策略中包括路由转发信息。
如图 2所示， FE22包括：
识别处理模块 221 , 用于根据 CE21下发的报文识别规则对数据报文进 行深度报文检测， 得到识别结果， 并上报所述识别结果给所述 CE21 ;
转发处理模块 222, 用于根据路由策略转发所述数据报文， 所述路由策 略由所述 CE21根据所述识别结果确定并下发。
其中识别处理模块 221包括：
规则接收模块 2211 , 用于接收 CE21下发的报文识别规则；
报文识别模块 2212, 用于根据所述报文识别规则对接收到的数据报文 进行深度报文检测， 得到的包括所述数据报文的应用层信息的识别结果； 结果上报模块 2213 , 用于将所述识别结果上报给所述 CE21 ;
而转发处理模块 222具体包括：
策略接收模块 2221 , 用于接收所述 CE21根据所述识别结果确定的路 由策略；
转发控制模块 2222, 用于根据所述路由策略转发所述数据报文。
本发明中的因特网协议网络， 包括至少一个控制网元、 多个转发网元、 多个内部转发网元， 其中的 CE和 FE已经在上面进行了详细说明， 在此不 再赘述。
控制网元可以是一个， 但也可以是多个， 在控制网元的数量为多个时， 可以实现 CE的负载分担和 /或冗余备份。
本发明提供一种因特网协议网络的路由方法， 图 3 为本发明因特网协 议网络的路由方法的流程示意图； 如图 3所示， 该方法包括以下步骤： 步骤 31 , 所述转发网元根据 CE下发的报文识别规则对数据报文进行 深度报文检测得到识别结果， 并上报给所述 CE;
步骤 32, 所述 CE根据所述识别结果制定路由策略；
步骤 33 , 所述 CE下发所述路由策略到所述 FE;
步骤 34, 所述 FE根据所述路由策略转发所述数据报文。
图 4为本发明在控制层面实现因特网协议网络的路由方法的流程示意 图； 如图 4所示， 该方法包括以下步骤：
步骤 41 , CE向管辖范围内的 FE下发报文识别规则；
步骤 42, CE接收 FE上报的识别结果， 所述识别结果为所述 FE根据 所述识别规则对接收到的数据报文进行深度报文检测得到的包括所述数据 报文的应用层信息的结果；
步骤 43 , CE根据所述识别结果确定路由策略； 步骤 44, CE下发所述路由策略到所述 FE,使得所述 FE根据所述路由 策略转发所述数据报文。
图 5 为本发明在转发层面实现因特网协议网络的路由方法的流程示意 图， 如图 5所示， 该方法包括以下步骤：
步骤 51 , FE接收 CE下发的报文识别规则；
步骤 52, FE根据所述识别规则对接收到的数据报文进行深度报文检 测， 得到的包括所述数据报文的应用层信息的识别结果；
步骤 53 , FE用于将所述识别结果上报给所述 CE;
步骤 54, FE接收所述 CE根据所述识别结果确定的路由策略； 步骤 55， FE根据所述路由策略转发所述数据报文。
本发明提供的 IP网络为控制与转发分离的网络，也可以是 FPBN(Future Packet Based Networks, 未来分组网）， 而 CE可以是基于 iSCP ( independent Scalable Control Plane, 独立可扩展控制平面）技术实现的控制设备。
在上述的描述中， 是以本发明中新增的部分进行的说明， 此外， 本发 明中的 CE也具有其他的路由策略的计算模块， 分别说明如下。
本发明中 CE还包括：
路由计算模块， 用于依据 FE上报的相连链路的网络信息进行计算路 由；
决策模块， 用于执行路由相关的策略决策 (来自 ME), 运行路由协议、 计算和维护路由表 RIB ( Routing Information Base ),向数据平面发送包含下 一跳信息的邻接表和转发表 FIB ( Forwarding Information Base )等；
路由表 RIB中记录了来自各种路由协议如 OSPF、 BGP等的路由， 而 FIB是将 RIB 中选择出来的最佳路由附加上相关的转发信息， 如下一跳地 址、 出接口信息等结合在一起形成的信息表。
而 FE根据 FIB更新自身保存的 FIB, 并根据 FIB查找下一跳信息来实 现对数据报文的转发，所有需要包转发功能的 FE和 IFE均需要存放 FIB表。 而 FE中还包括：
重定向模块， FE将路由协议相关的报文从数据报文中分离出来， 并重 定向到 CE;
信息上报模块， 用于将相连链路的网络信息上报给 CE进行路由计算。 在本发明的具体实施方式中， 主要通过在 FE设置报文识别模块， 利用 深度报文检测技术来获取数据报文的层 2-层 7之间的内容， 并基于数据报 文的层 2-层 7之间的信息来确定对应的路由策略， 满足尽可能多的需求。
下面以不同的实例来对本发明进行详细说明。
本发明的第一实施例：
对于当前的 P2P业务（如 BT业务、 电驴业务等）， 可能大量占用带宽 资源， 有可能导致其他用户无法得到正常的服务， 对于这种情况， 当前 IP 网络无法进行针对性的路由策略计算， 而本发明实施例可以针对这种 P2P 业务设置对应的路由策略， 下面以 BT业务为例详细说明处理过程。
CE预设一个报文识别规则， 如数据报文中层 2-层 7中包括 BT特征字 ( 19BitTorrent Protocol ) 的报文就是 P2P业务的数据报文；
如： Bittorrent协议的识别， 通过反向工程的方法对其对等协议进行分 析， 所谓对等协议指的是 Peer与 Peer之间交换信息的协议。 对等协议由一 个握手开始， 后面是循环的消息流， 每个消息的前面， 都有一个数字来表 示消息的长度， 例如在其握手过程中， 首先是先发送 19 , 跟着是字符串 "BitTorrent protocol" , 刃 么 "19BitTorrent Protocol" 就是 Bittorrent "特 征字"。
CE中的规则下发模块下发该报文识别规则到 FE;
FE的规则接收模块接收并保存该报文识别规则，在接收到数据报文时， 报文识别模块利用深度检测技术，全面分析报文， 如果该报文为 ΒΤ业务的 数据报文， 则得到的识别结果会指示数据报文的业务类型为 BT业务， 并由 结果上报模块将该识别结果上报给 CE的结果接收模块；
对于利用深度检测技术识别 BT报文具体说明如下：
因为对等协议由一个握手开始， 后面是循环的消息流， 每个消息的前 面， 都有一个数字来表示消息的长度， 所以报文识别模块可以对接收到的 数据报文进行分析， 判断报文中是否存在字符串 "19BitTorrent Protocol" , 如果存在， 则可以判断该数据报文为 BT业务的数据报文， 则得到的识别结 果会指示数据报文的业务类型为 BT业务，并生成指示数据报文的业务类型 为 BT业务的识别结果。
CE的结果接收模块接收到该识别结果后， 策略确定模块发现该识别结 果指示了数据报文的业务类型， 则根据数据报文所属的业务类型确定对应 的路由策略， 假定路由策略如下：
对于所有 P2P 业务， CE可以将数据转发面的特定的链路单独分配给 P2P业务， 则 P2P业务的数据报文只能够通过这些特定的链路在网内传输 (也就是确定了路由转发信息）， 不会抢占其他非 P2P业务的带宽， 能够保 证其他业务的正常进行。
CE的策略下发模块将确定的路由策略发送给 FE;
FE的策略接收模块接收该路由策略， 并由转发控制模块根据该路由策 略进行 BT业务的数据报文的转发。
上述的策略也可以是其他策略， 本发明实施例仅关注可以根据报文识 别模块识别出的数据报文的信息进行路由策略的制定， 以满足尽可能多的 需求， 并不限定具体的路由策略。
本发明的第二实施例：
对于当前的不同的业务， 有其各自的 QoS需求， 如果不按照其 QoS需 求来确定路由策略， 则有可能无法满足业务需求， 可能导致用户满意度降 低， 本发明可以针对业务的 QoS设置对应的路由策略， 详细说明处理过程 ^口下。
CE预先设置一个报文识别规则， 对于本实施例中的情况， 报文识别规 则为获取数据报文中的 QoS字段；
CE中的规则下发模块下发该报文识别规则到 FE;
FE的规则接收模块接收并保存该报文识别规则，在接收到数据报文时， 报文识别模块利用深度检测技术， 全面分析报文， 获取数据报文的 QoS字 段的信息， 对应的识别结果会指示数据报文的 QoS需求， 并由结果上报模 块将该识别结果上报给 CE的结果接收模块；
CE的结果接收模块接收到该识别结果后， 策略确定模块发现该识别结 果指示了数据报文的 QoS, 则根据数据报文的 QoS确定对应的路由策略， 假定路由策略如下：
对于 QoS需求大于第一预设值的报文， CE可以为其分配数据转发面的 可能为该报文服务的链路中服务质量最好的链路， 则该数据报文能够通过
CE的策略下发模块将确定的路由策略发送给 FE;
FE的策略接收模块接收该路由策略， 并由转发控制模块根据该路由策 略进行数据报文的转发。
上述的策略也可以是其他策略， 本发明实施例仅关注根据报文识别模 块识别出的数据报文的信息进行路由策略的制定， 以满足尽可能多的需求， 并不限定具体的路由策略。
本发明的第三实施例：
对于当前的不同用户， 有的用户具有较高的优先级， 有些用户的优先 级相对降低， 因此， 在服务过程中， 需要区别对待， 如果无法区别对待则 会导致不公平。 本发明可以针对不同用户设置对应的路由策略， 详细说明 处理过程如下。
CE预先设置一个报文识别规则， 对于本实施例中的情况， 报文识别规 则为获取数据报文中的用户信息字段；
CE下发该报文识别规则到 FE;
CE中的规则下发模块下发该报文识别规则到 FE;
FE的规则接收模块接收并保存该报文识别规则，在接收到数据报文时， 报文识别模块利用深度检测技术， 全面分析报文， 获取数据报文的用户字 段的信息， 对应的识别结果会指示数据报文的用户信息， 并由结果上报模 块将该识别结果上
CE的结果接收模块接收到该识别结果后， 策略确定模块发现该识别结 果指示了数据报文的用户信息， 则根据数据报文的用户信息确定对应的路 由策略， 假定路由策略如下：
对于用户优先级较高的报文， CE可以为其分配数据转发面的链路的质 量高于用户优先级较低的报文， 则该数据报文能够通过这些特定的链路在 网内传输（也就是确定了路由转发信息）， 保证用户优先级高的用户能够享 受更加优质的服务。
CE的策略下发模块将确定的路由策略发送给 FE;
FE的策略接收模块接收该路由策略， 并由转发控制模块根据该路由策 略进行数据报文的转发。
上述的策略也可以是其他策略， 本发明实施例仅关注根据报文识别模 块识别出的数据报文的信息进行路由策略的制定， 以满足尽可能多的需求， 并不限定具体的路由策略。
在上述的例子中， 都是以一个特征为例 （基于业务类型、 基于 QoS需 求、 基于用户）进行的说明， 应当理解的是， 报文识别规则所涉及的报文 特征可以是层 2-层 7中的特征， 如加密特征等， 在加密特征满足一定条件 时， 为其选择安全性较高的链路进行转发， 甚至还可以基于数据内容进行 处理。
当然该报文识别规则中还可以涉及多个报文特征， 而该多个报文特征 可以是来自数据报文的不同层， 如该报文特征可以是源地址、 目的地址、 源端口、 目的端口以及协议类型等。
对于上述各种情况的组合， 在此不——列举。
以上所述仅是本发明的优选实施方式， 应当指出， 对于本技术领域的 普通技术人员来说， 在不脱离本发明原理的前提下， 还可以作出若干改进 和润饰， 这些改进和润饰也应视为本发明的保护范围。

Claims

权利要求书
1、 一种控制网元， 其特征在于， 该控制网元包括： 策略制定模块、 策 略下发模块； 其中，
策略制定模块， 用于根据转发网元上报的识别结果制定路由策略； 所 述识别结果为所述转发网元根据识别规则对数据报文进行深度报文检测得 到的结果；
策略下发模块， 用于下发所述路由策略到所述转发网元， 使得所述转 发网元根据所述路由策略转发数据报文。
2、 根据权利要求 1所述的控制网元， 其特征在于， 所述识别结果包括 用户信息、 业务信息和数据内容信息中的至少一个。
3、 根据权利要求 1或 2所述的控制网元， 其特征在于， 所述策略制定 模块进一步包括： 规则下发模块、 结果接收模块、 策略确定模块； 其中， 规则下发模块， 用于向管辖范围内的转发网元下发报文识别规则； 结果接收模块， 用于接收所述转发网元上报的识别结果；
策略确定模块， 用于根据所述识别结果确定路由策略， 所述路由策略 中包括路由转发信息。
4、 根据权利要求 3所述的控制网元， 其特征在于， 所述识别结果中包 括开放式系统互联模型中的层 2到层 7中的信息。
5、 一种转发网元， 其特征在于， 该转发网元包括： 识别处理模块、 转 发处理模块； 其中，
识别处理模块， 用于根据控制网元下发的报文识别规则对数据报文进 行深度报文检测， 得到识别结果， 并上报所述识别结果给所述控制网元； 转发处理模块， 用于根据路由策略转发所述数据报文， 所述路由策略 由所述控制网元根据所述识别结果确定并下发。
6、 根据权利要求 5所述的转发网元， 其特征在于， 所述识别结果包括 用户信息、 业务信息和数据内容信息中的至少一个。
7、 根据权利要求 6所述的转发网元， 其特征在于， 所述识别处理模块 进一步包括： 规则接收模块、 报文识别模块、 结果上报模块； 其中，
规则接收模块， 用于接收控制网元下发的报文识别规则；
报文识别模块， 用于根据所述识别规则对接收到的数据报文进行深度 报文检测， 得到包括所述识别结果；
结果上 模块， 用于将所述识别结果上 给所述控制网元。
8、 根据权利要求 6所述的转发网元， 其特征在于， 所述转发处理模块 进一步包括： 策略接收模块、 转发控制模块； 其中，
策略接收模块， 用于接收所述控制网元根据所述识别结果确定并下发 的路由策略；
转发控制模块， 用于根据所述路由策略转发所述数据报文。
9、 一种因特网协议网络的路由方法， 其特征在于， 该方法包括： 所述转发网元根据控制网元下发的报文识别规则对数据报文进行深度 报文检测得到识别结果， 并上报给所述控制网元；
所述控制网元根据所述识别结果制定路由策略；
所述控制网元下发所述路由策略到所述转发网元；
所述转发网元根据所述路由策略转发所述数据报文。
10、 根据权利要求 9所述的因特网协议网络的路由方法， 其特征在于， 所述识别结果包括用户信息、 业务信息和数据内容信息中的至少一个。
PCT/CN2010/072642 2009-08-28 2010-05-11 一种控制网元、转发网元及因特网协议网络的路由方法 Ceased WO2011022992A1 (zh)

Priority Applications (4)

Application Number Priority Date Filing Date Title
JP2012523188A JP2013501434A (ja) 2009-08-28 2010-05-11 制御ネットワーク要素、転送ネットワーク要素及びインターネットプロトコルネットワークのルーティング方法
EP10811152.7A EP2445145B1 (en) 2009-08-28 2010-05-11 Control element, forwarding element and routing method for internet protocol network
US13/384,718 US20120144061A1 (en) 2009-08-28 2010-05-11 Control element, forwarding element and routing method for internet protocol network
IN320DEN2012 IN2012DN00320A (zh) 2009-08-28 2012-01-11

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN200910092103.4 2009-08-28
CN2009100921034A CN101997826A (zh) 2009-08-28 2009-08-28 一种控制网元、转发网元及因特网协议网络的路由方法

Publications (1)

Publication Number Publication Date
WO2011022992A1 true WO2011022992A1 (zh) 2011-03-03

Family

ID=43627206

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2010/072642 Ceased WO2011022992A1 (zh) 2009-08-28 2010-05-11 一种控制网元、转发网元及因特网协议网络的路由方法

Country Status (7)

Country Link
US (1) US20120144061A1 (zh)
EP (1) EP2445145B1 (zh)
JP (1) JP2013501434A (zh)
KR (1) KR20120042892A (zh)
CN (1) CN101997826A (zh)
IN (1) IN2012DN00320A (zh)
WO (1) WO2011022992A1 (zh)

Families Citing this family (33)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP5994847B2 (ja) * 2011-09-16 2016-09-21 日本電気株式会社 通信端末、通信方法、通信システムおよび制御装置
CN103067199B (zh) 2012-12-19 2015-11-25 华为技术有限公司 深度报文检测结果扩散方法及装置
CN103200086B (zh) * 2013-03-12 2015-08-19 浙江工商大学 一种ForCES系统中路由协议的信息交互方法
CN106713260B (zh) * 2013-12-27 2020-07-10 恒为科技（上海）股份有限公司 一种用于虚拟专用拨号网中动态数据注入的方法
US9729439B2 (en) 2014-09-26 2017-08-08 128 Technology, Inc. Network packet flow controller
US10277506B2 (en) 2014-12-08 2019-04-30 128 Technology, Inc. Stateful load balancing in a stateless network
US9736184B2 (en) 2015-03-17 2017-08-15 128 Technology, Inc. Apparatus and method for using certificate data to route data
US9729682B2 (en) 2015-05-18 2017-08-08 128 Technology, Inc. Network device and method for processing a session using a packet signature
US9762485B2 (en) 2015-08-24 2017-09-12 128 Technology, Inc. Network packet flow controller with extended session management
KR102035047B1 (ko) * 2015-10-22 2019-10-22 후아웨이 테크놀러지 컴퍼니 리미티드 서비스 처리 방법, 장치 및 시스템
US9723027B2 (en) 2015-11-10 2017-08-01 Sonicwall Inc. Firewall informed by web server security policy identifying authorized resources and hosts
US9871748B2 (en) 2015-12-09 2018-01-16 128 Technology, Inc. Router with optimized statistical functionality
US9860259B2 (en) 2015-12-10 2018-01-02 Sonicwall Us Holdings Inc. Reassembly free deep packet inspection for peer to peer networks
US9985883B2 (en) 2016-02-26 2018-05-29 128 Technology, Inc. Name-based routing system and method
US10205651B2 (en) 2016-05-13 2019-02-12 128 Technology, Inc. Apparatus and method of selecting next hops for a session
US10298616B2 (en) 2016-05-26 2019-05-21 128 Technology, Inc. Apparatus and method of securing network communications
US10091099B2 (en) 2016-05-31 2018-10-02 128 Technology, Inc. Session continuity in the presence of network address translation
US9832072B1 (en) 2016-05-31 2017-11-28 128 Technology, Inc. Self-configuring computer network router
US10841206B2 (en) 2016-05-31 2020-11-17 128 Technology, Inc. Flow modification including shared context
US10257061B2 (en) 2016-05-31 2019-04-09 128 Technology, Inc. Detecting source network address translation in a communication system
US11075836B2 (en) 2016-05-31 2021-07-27 128 Technology, Inc. Reverse forwarding information base enforcement
US10200264B2 (en) 2016-05-31 2019-02-05 128 Technology, Inc. Link status monitoring based on packet loss detection
US10009282B2 (en) 2016-06-06 2018-06-26 128 Technology, Inc. Self-protecting computer network router with queue resource manager
US9985872B2 (en) 2016-10-03 2018-05-29 128 Technology, Inc. Router with bilateral TCP session monitoring
US10425511B2 (en) 2017-01-30 2019-09-24 128 Technology, Inc. Method and apparatus for managing routing disruptions in a computer network
EP3593498B1 (en) 2017-03-07 2023-05-03 128 Technology, Inc. Router device using flow duplication
US10432519B2 (en) 2017-05-26 2019-10-01 128 Technology, Inc. Packet redirecting router
US11165863B1 (en) 2017-08-04 2021-11-02 128 Technology, Inc. Network neighborhoods for establishing communication relationships between communication interfaces in an administrative domain
US20190253341A1 (en) 2018-02-15 2019-08-15 128 Technology, Inc. Service Related Routing Method and Apparatus
CN113328936B (zh) * 2020-02-28 2022-06-07 中国电信股份有限公司 路由控制方法、系统、装置及计算机可读存储介质
CN115428411B (zh) 2020-04-23 2024-05-28 瞻博网络公司 使用会话建立度量的会话监测
US12068955B2 (en) * 2020-10-21 2024-08-20 Huawei Technologies Co., Ltd. Method for controlling traffic forwarding, device, and system
US12363035B2 (en) 2021-09-29 2025-07-15 Juniper Networks, Inc. Opportunistic mesh for software-defined wide area network (SD-WAN)

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101056222A (zh) * 2007-05-17 2007-10-17 华为技术有限公司 一种深度报文检测方法、网络设备及系统
CN101350781A (zh) * 2008-07-31 2009-01-21 成都市华为赛门铁克科技有限公司 一种流量监控的方法、设备和系统
CN101471858A (zh) * 2007-12-24 2009-07-01 中兴通讯股份有限公司 一种业务识别与控制系统中内部协作的方法
CN101488946A (zh) * 2008-01-16 2009-07-22 华为技术有限公司 报文检测方法及系统

Family Cites Families (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP4107252B2 (ja) * 2004-03-11 2008-06-25 日本電気株式会社 通信中継装置、通信中継方法、および通信中継プログラム
US9014181B2 (en) * 2004-11-01 2015-04-21 Alcatel Lucent Softrouter separate control network
US7719966B2 (en) * 2005-04-13 2010-05-18 Zeugma Systems Inc. Network element architecture for deep packet inspection
US7508764B2 (en) * 2005-09-12 2009-03-24 Zeugma Systems Inc. Packet flow bifurcation and analysis
CN1937570A (zh) * 2005-09-23 2007-03-28 株式会社日立制作所 路由选择控制装置、方法和系统
US8005101B1 (en) * 2006-08-10 2011-08-23 Bivio Networks, Inc. Scalable architecture for deep-packet processing
GB0623101D0 (en) * 2006-11-20 2006-12-27 British Telecomm Secure network architecture
EP2168325B1 (en) * 2007-06-14 2010-12-15 Telefonaktiebolaget LM Ericsson (publ) Routing in a network
CA2926677C (en) * 2007-09-26 2020-07-14 Nicira, Inc. Network operating system for managing and securing networks
US8059533B2 (en) * 2007-10-24 2011-11-15 Cisco Technology, Inc. Packet flow optimization (PFO) policy management in a communications network by rule name

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101056222A (zh) * 2007-05-17 2007-10-17 华为技术有限公司 一种深度报文检测方法、网络设备及系统
CN101471858A (zh) * 2007-12-24 2009-07-01 中兴通讯股份有限公司 一种业务识别与控制系统中内部协作的方法
CN101488946A (zh) * 2008-01-16 2009-07-22 华为技术有限公司 报文检测方法及系统
CN101350781A (zh) * 2008-07-31 2009-01-21 成都市华为赛门铁克科技有限公司 一种流量监控的方法、设备和系统

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
See also references of EP2445145A4 *

Also Published As

Publication number Publication date
EP2445145A1 (en) 2012-04-25
JP2013501434A (ja) 2013-01-10
EP2445145A4 (en) 2017-08-09
IN2012DN00320A (zh) 2015-05-08
KR20120042892A (ko) 2012-05-03
EP2445145B1 (en) 2018-11-14
CN101997826A (zh) 2011-03-30
US20120144061A1 (en) 2012-06-07

Similar Documents

Publication Publication Date Title
WO2011022992A1 (zh) 一种控制网元、转发网元及因特网协议网络的路由方法
KR101317969B1 (ko) 링크 애그리게이션 방법 및 노드
Singh et al. A survey on internet multipath routing and provisioning
CN103155499B (zh) 用于计算点到多点标签交换路径的备份出口的系统和方法
CN102123097B (zh) 一种路由保护方法和设备
US8953604B2 (en) Root node redundancy for multipoint-to-multipoint transport trees
CN104539443B (zh) 多宿网络中的通信网络路径和状态信息
EP3422632B1 (en) Pim join entropy
CN101854697B (zh) 一种无线网状网络中多约束服务质量控制路由方法和系统
CN101065677A (zh) 被配置用于根据规定路由协议输出指定了所连接的活动路径的检测到的属性变化的更新消息的路由器
WO2010051699A1 (zh) 建立标签交换路径的方法、系统及网络节点
CN101095316A (zh) 通信系统以及通信方法
CN110120916B (zh) Bgp会话的优先级形成
WO2009043256A1 (en) Method, system and device for obtaining label switched path
US10382323B1 (en) Flooding-based routing protocol having label switched path session information
CN1969492A (zh) 动态转发邻接关系
CN1791073A (zh) 路由消息分组的系统、方法和程序产品
CN104620637A (zh) 用于标签交换网络中的移动性管理的方法和系统
US20080137669A1 (en) Network of nodes
CN114448859B (zh) 支持用于边界网关协议的多传输选项
WO2011079695A1 (zh) 一种网络流量切换控制方法、装置及系统
WO2016082580A1 (zh) 负载分担的方法和路由设备
WO2009074093A1 (en) Method and apparatus for finding topology and managing resource automatically in the pbb network
KR101688682B1 (ko) 빠른 ｌｓｐ 경보 메커니즘
CN103503373B (zh) 通信系统和方法

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 10811152

Country of ref document: EP

Kind code of ref document: A1

WWE Wipo information: entry into national phase

Ref document number: 320/DELNP/2012

Country of ref document: IN

WWE Wipo information: entry into national phase

Ref document number: 13384718

Country of ref document: US

Ref document number: 2010811152

Country of ref document: EP

ENP Entry into the national phase

Ref document number: 20127002672

Country of ref document: KR

Kind code of ref document: A

WWE Wipo information: entry into national phase

Ref document number: 2012523188

Country of ref document: JP

NENP Non-entry into the national phase

Ref country code: DE