WO2012106892A1 - 一种业务流处理的方法、装置及系统 - Google Patents

一种业务流处理的方法、装置及系统 Download PDF

Info

Publication number
WO2012106892A1
WO2012106892A1 PCT/CN2011/077159 CN2011077159W WO2012106892A1 WO 2012106892 A1 WO2012106892 A1 WO 2012106892A1 CN 2011077159 W CN2011077159 W CN 2011077159W WO 2012106892 A1 WO2012106892 A1 WO 2012106892A1
Authority
WO
WIPO (PCT)
Prior art keywords
service
service flow
attribute
service application
flow
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/CN2011/077159
Other languages
English (en)
French (fr)
Inventor
王云贵
孙福清
杨小华
鄂维
郭俊
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Huawei Technologies Co Ltd
Original Assignee
Huawei Technologies Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Huawei Technologies Co Ltd filed Critical Huawei Technologies Co Ltd
Priority to PCT/CN2011/077159 priority Critical patent/WO2012106892A1/zh
Priority to EP11858212.1A priority patent/EP2725749B1/en
Priority to CN201180001386.2A priority patent/CN102318291B/zh
Publication of WO2012106892A1 publication Critical patent/WO2012106892A1/zh
Priority to US14/154,427 priority patent/US9262191B2/en
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00—Arrangements for program control, e.g. control units
    • G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/44—Arrangements for executing specific programs
    • G06F9/455—Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
    • G06F9/45533—Hypervisors; Virtual machine monitors
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q10/00—Administration; Management
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00—Routing or path finding of packets in data switching networks
    • H04L45/38—Flow based routing
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/50—Network services
    • H04L67/60—Scheduling or organising the servicing of application requests, e.g. requests for application data transmissions using the analysis and optimisation of the required network resources
    • H04L67/63—Routing a service request depending on the request content or context

Definitions

  • the present invention relates to the field of communications, and in particular, to a method, an apparatus, and a system for processing a service flow. Background technique
  • the current communication network tends to be more and more intelligent, and business diversity has become an important feature of communication networks.
  • service diversity is a great challenge for the switching equipment or routing equipment of the current network.
  • the processing of the business application processes or business logic is complicated by the switching equipment and the routing equipment, on the other hand, the service It is difficult to apply the advantages of switching equipment and routing equipment in various applications.
  • the NSP (Network Service Platform) board can be connected to an AR (Access Router) or switch. It is designed to handle a variety of business applications, such as security services, server integration, and application acceleration services. Wait. At the same time, NSP has an independent hardware system and software system that can easily handle one or more business applications.
  • a router or switch can be connected to one or more NSP boards.
  • the router or the switch includes at least a main control board, a local area network (LAN) line card, or a wide area network (WAN) line card, a backend board, and a router or a switch through the backboard.
  • the main control board includes a Microprocessor Unit (MPU) and a Fabric Unit.
  • the switching unit is responsible for data exchange between the router or the switch and the NSP board.
  • the traffic processed by the service application on the NSP is forwarded from the LAN line card or WAN line card of the router or switch through the switching unit.
  • the service application on the NSP directly provides services to the user (such as a local mail server or a voice call controller), and the destination IP (Internet Protocol, Network Protocol) or MAC (Media Access) of the service flow sent by the user terminal.
  • IP Internet Protocol, Network Protocol
  • MAC Media Access
  • the address is the IP address or MAC address of the virtual machine in the NSP board responsible for processing the service application of the service flow.
  • the service flow is forwarded to the NSP through the switching unit by the LAN or WAN line card on the router or switch.
  • the service traffic of the user terminal is processed by the virtual machine in the NSP.
  • the service application that can be processed on the NSP such as the traffic statistics application, or the virus detection application, is invisible to the user terminal, that is, the destination IP address or MAC address of the user terminal is not responsible for processing the service in the NSP board.
  • the service flow sent by the user terminal needs to be on the router or switch.
  • the LAN line card or the WAN line card copies a service traffic and sends it to the NSP through the switching unit.
  • the virtual machine on the NSP processes the traffic of the copied user terminal.
  • a service application that can be processed on the NSP is not visible to the user terminal. That is, the destination IP address or MAC address of the user terminal is not responsible for processing the service flow in the NSP.
  • the IP or MAC address of the virtual machine of the business application is sent to the NSP through the switching of the LAN line card or the WAN line card on the router or the switch through the switching unit, and then the service flow is processed by the virtual machine on the NSP, and then sent to the switching unit through the switching unit after the processing is completed.
  • the original destination address is sent to the NSP through the switching of the LAN line card or the WAN line card on the router or the switch through the switching unit, and then the service flow is processed by the virtual machine on the NSP, and then sent to the switching unit through the switching unit after the processing is completed.
  • the NSP In the mirroring or redirection service flow forwarding mode, the NSP needs to be processed more because the destination IP or MAC address sent by the user terminal is not the IP address or MAC address of the virtual machine in the NSP board that is responsible for processing the service application of the service flow.
  • the virtual machine in the NSP In a service application, the virtual machine in the NSP needs to listen to all the packets on the NIC. That is, a virtual machine service application receives traffic of other services in addition to the traffic of the service application processed by the virtual machine. Therefore, business flow isolation between different business applications cannot be achieved. Summary of the invention
  • the present invention provides a service flow processing method, apparatus, and system, and the technical solution is as follows:
  • a service flow processing method comprising:
  • a service flow processing device comprising:
  • a receiving unit configured to receive a service flow after the network application device inserts the service application attribute
  • a service flow isolation unit configured to determine, according to a correspondence between a pre-configured service application attribute and a service application identifier, a destination virtual machine capable of processing the service flow, and strip the service application attribute from the service flow, and The service flow after stripping the service application attribute is sent to the destination virtual machine.
  • a service flow processing system comprising the foregoing service flow processing device and network device;
  • the network device is configured to send, to the device for processing the service flow, a service flow inserted with a service application attribute.
  • the technical solution provided by the embodiment of the present invention has the following advantages:
  • the present invention determines the service flow after receiving the service flow carrying the service application attribute by pre-configuring the correspondence between the service application attribute and the service application identifier in the NSP board.
  • the service application identifier can be used to know the service application corresponding to the service flow according to the service application identifier corresponding to the service flow.
  • the service flow can be correctly sent to the corresponding service application.
  • the virtual machine performs business processing.
  • FIG. 1 is a flowchart of a method for processing a service flow according to Embodiment 1 of the present invention
  • FIG. 2 is a flowchart of a method for processing a service flow according to Embodiment 2 of the present invention
  • FIG. 3 is a first schematic structural view of an improved NSP according to Embodiment 2 of the present invention.
  • FIG. 4 is a schematic diagram showing a second structure of an improved NSP according to Embodiment 2 of the present invention.
  • FIG. 5 is a schematic structural diagram of a service flow processing apparatus according to Embodiment 3 of the present invention.
  • FIG. 6 is a schematic diagram of a second structure of a service flow processing apparatus according to Embodiment 3 of the present invention.
  • FIG. 7 is a first structural diagram of an NSP implementation according to Embodiment 3 of the present invention.
  • FIG. 8 is a second structural diagram of an NSP implementation according to Embodiment 3 of the present invention.
  • FIG. 9 is a third structural diagram of an NSP implementation according to Embodiment 3 of the present invention. detailed description
  • an embodiment of the present invention provides a service flow processing method, where the method includes:
  • the NSP receives the service flow after the network device inserts the service application attribute.
  • the pre-configuration of the correspondence between the service application attribute and the service application identifier in the NSP board can determine the service application identifier of the service flow after receiving the service flow carrying the service application attribute, according to the service application corresponding to the service flow.
  • the identification can be used to know the business application of the service flow, and only send to the destination virtual machine responsible for processing the business application, so that the business flow can be correctly performed even when the virtual machine that processes multiple business applications is deployed in the NSP at the same time. Send to the corresponding virtual machine for business processing.
  • the embodiment of the invention provides a method for processing a service flow, which is improved on the basis of the embodiment 1.
  • a method for processing a service flow specifically includes:
  • the network device inserts the service application attribute into the service flow sent by the user terminal, and forwards the service flow carrying the service application attribute to the NSP board.
  • the network device may specifically be a router or a switch.
  • the correspondence between the service application attribute and the service application identifier is saved in the NSP, and the correspondence between the service flow attribute and the service application attribute may also be saved.
  • the correspondence between the service flow attribute and the business application attribute is stored in the network device.
  • the service application attribute includes a service flow forwarding mode of the service flow and a source device No. (Forwarding Mode of Service Flow), a destination device number (Destination Device No.), and a source.
  • the VLAN Virtual Local Area Network
  • the VLAN is a virtual local area network.
  • the service flow packet is an object to be processed by the NSP board, and the service flow is a set of service flow packets, and the service flow attribute is specifically an attribute indicated by various protocol fields in the service flow message, for example, a service flow message.
  • Source MAC Address Destination MAC Address, VLAN ID, Source IP address, Destination IP Address, Source Port, Destination Port Number (Source MAC Address) Destination Port) and so on.
  • the service application identifier is specifically used to distinguish the network interface information of each virtual machine in the NSP, including the virtual network interface identifier, such as the virtual machine's IP address or MAC address, or the virtual machine's virtual network interface and the service flow isolation unit. logo.
  • the structure of the NSP can be as shown in FIG. 3 or FIG. 4, and multiple virtual machines can be established in the NSP, which are respectively responsible for processing different service applications. Each virtual machine is configured with its corresponding virtual network interface.
  • the service flow isolation unit determines, by the service application identifier, which destination virtual machine to forward the service flow to.
  • the service application attribute may also include other attributes, such as source port number, destination port number, source device number, and destination device. Number, message ID, service priority, forwarding type, and the value of the above attributes.
  • the service application module identifier is used to distinguish different service application processes.
  • the service application identifier may be a virtual network interface identifier, or a port identifier of the virtual network interface and the service flow isolation module.
  • the network device inserts the service application attribute into the service flow sent by the user terminal, and specifically includes two situations:
  • the network device receives the service flow sent by the user terminal, and inserts the service application attribute into the service flow according to the service flow attribute and the service flow attribute.
  • the network device receives the service flow sent by the user terminal, and when the service flow passes through the CPU of the network device, the software module on the CPU of the network device inserts the service application attribute into the service flow according to the service flow attribute; when the service flow passes through the LAN In the interface, the forwarding chip of the LAN interface hardware inserts the service application attribute into the service flow according to the service flow attribute.
  • the network device inserts the CPU code into the service flow according to the service flow attribute and the correspondence between the service flow attribute and the CPU code in the service application attribute. Specifically, when the service flow passes through the LAN interface, the forwarding chip of the LAN interface hardware inserts the CPU code into the service flow according to the service flow attribute.
  • the method further includes: configuring a correspondence between the CPU code and the service application identifier in the service application attribute, and the CPU in the service flow attribute and the service application attribute. Corresponding relationship of the code, and transmitting the correspondence between the service flow attribute and the CPU code in the service application attribute to the network device.
  • the service flow isolation module in the NSP determines the service application identifier corresponding to the received service flow by using the correspondence in Table 1 as described in step 201.
  • the destination virtual machine performs service processing on the service flow after stripping the service application attribute.
  • the pre-configuration of the correspondence between the service application attribute and the service application identifier in the NSP board can determine the service application identifier of the service flow after receiving the service flow carrying the service application attribute, according to the service application corresponding to the service flow.
  • the identification can be used to know the business application of the service flow, and only send to the destination virtual machine responsible for processing the business application, so that the business flow can be correctly performed even when the virtual machine that processes multiple business applications is deployed in the NSP at the same time. Send to the corresponding virtual machine for business processing.
  • an embodiment of the present invention provides a service flow processing device, where the service flow processing device is specifically implemented by using an NSP board, and the device specifically includes:
  • the receiving unit 301 is configured to receive a service flow after the network application device inserts the service application attribute.
  • the service flow isolation unit 302 is configured to determine a destination virtual machine that can process the service flow according to the correspondence between the pre-configured service application attribute and the service application identifier, and strip the service application attribute from the service flow, and strip the service application attribute.
  • the business flow is sent to the destination virtual machine.
  • the correspondence between the service application attribute and the service application identifier is stored in the service flow processing device, and the correspondence between the service flow attribute and the service application attribute may also be saved.
  • the correspondence between the service flow attribute and the service application attribute is stored in the network device.
  • the service application attribute includes a combination of the service flow forwarding mode and the source device number of the service flow, a destination device number, a source device port number, a destination device port number, a service priority, and a source device virtual local area network VLAN identifier.
  • the service flow packet is an object to be processed by the NSP board, and the service flow is a set of service flow packets, and the service flow attribute is specifically an attribute indicated by various protocol fields in the service flow packet, for example, a service flow message.
  • the service application identifier is specifically used to distinguish network interface information of each virtual machine in the NSP. Including the virtual network interface identifier, such as the virtual machine's IP address or MAC address, or the virtual machine's virtual network interface communicates with the service flow isolation unit Port ID.
  • a plurality of service application units can be established in the NSP.
  • Each service application unit is specifically a virtual machine in the NSP, and is responsible for processing different service applications.
  • the service flow processed by the virtual machine is sent by the switching unit of the network device. And forwarded through the service isolation unit.
  • Each virtual machine is configured with its corresponding virtual network interface.
  • the service flow isolation unit determines the destination virtual machine that forwards the service flow by using the service application identifier.
  • the network device inserts the service application attribute into the service flow sent by the user terminal, and specifically includes two situations: (1) when the service application attribute includes a combination of the service flow forwarding mode and the source device number, the destination device number, and the source device port.
  • the network device receives the service flow sent by the user terminal according to one or more of the destination device port number, the service priority, the source device virtual local area network VLAN identifier, and the destination device VLAN identifier, and according to the service flow attribute and the service flow attribute Insert business application properties into the business flow.
  • the network device receives the service flow sent by the user terminal, and when the service flow passes through the CPU of the network device, the software module on the CPU of the network device inserts the service application attribute into the service flow according to the service flow attribute; when the service flow passes through the LAN In the interface, the forwarding chip of the LAN interface hardware inserts the service application attribute into the service flow according to the service flow attribute.
  • the service application attribute includes the CPU code
  • the network device inserts the CPU code into the service flow according to the service flow attribute and the correspondence between the service flow attribute and the CPU code in the service application attribute.
  • the forwarding chip of the LAN interface hardware inserts the CPU code into the service flow according to the service flow attribute.
  • the foregoing service flow processing apparatus when the service application attribute includes a CPU code, the foregoing service flow processing apparatus further includes:
  • the configuration proxy unit 303 is configured to configure a correspondence between the CPU code and the service application identifier in the service application attribute, and a correspondence between the service flow attribute and the CPU code in the service application attribute, and code the service flow attribute and the CPU in the service application attribute. The correspondence is sent to the network device.
  • the NSP architecture includes: NSP host OS (Operation System), multiple virtual machines (VMs, Virtual Machines), and virtual machine monitors.
  • NSP host OS Operating System
  • VMs virtual machines
  • Virtual Machines Virtual Machines
  • virtual machine monitors virtual machines
  • the NSP host 0S is an NSP host operating system and is used to provide related functions for network management and maintenance of the NSP.
  • a virtual switch (vSwitch) is established in the NSP host OS, and the virtual machine switch is used to implement the service flow forwarding and the service flow is forwarded and forwarded.
  • the service flow isolation unit in the device provided by the present invention can be implemented by using the virtual switch;
  • a plurality of virtual machines are established based on the host OS for processing various service applications, and each of the service flows in the present invention
  • a business application can be implemented by the above virtual machine at a specific implementation time.
  • NSP architecture 2 as shown in Figure 8:
  • NSP architecture 2 The difference between NSP architecture 2 and NSP architecture is that in NSP architecture 1, the traffic isolation unit is implemented by a virtual switch established in the NSP host OS, and in the NSP architecture 2, the virtual switch is directly established on the NSP hardware platform. The virtual switch is implemented, and the rest of the modules are not described here.
  • NSP architecture three as shown in Figure 9:
  • the virtual switch used to implement the service isolation unit is built in the physical network device driver in the NSP host OS.
  • the service flow processing device provided by the present invention can determine the service application identifier of the service flow after receiving the service flow carrying the service application attribute by configuring the correspondence between the service application attribute and the service application identifier, according to the service flow corresponding to the service flow.
  • the service application identifier can know which service application the service flow is, and only sends it to the destination virtual machine that is responsible for processing the service application, so that the service flow can be performed even when the virtual machine that processes multiple service applications is deployed in the NSP at the same time. Properly sent to the corresponding virtual machine for business processing.
  • a service flow processing system the system includes the service flow processing apparatus and the network device provided in Embodiment 3.
  • the network device is configured to send, to the service flow processing device, a service flow in which the service application attribute is inserted.
  • the network device may specifically be a router or a switch.
  • the service flow processing apparatus provided by the foregoing embodiment is only illustrated by the division of each functional module. In actual applications, the function allocation may be completed by different functional modules according to requirements, that is, the service flow processing is performed. The internal structure of the device is divided into different functional modules to perform all or part of the functions described above.
  • the service flow processing device provided by the foregoing embodiment is the same as the method embodiment of the service flow processing, and the specific implementation process is described in detail in the method embodiment, and details are not described herein again. All or part of the technical solutions provided by the above embodiments may be implemented by software programming, and the software program is stored in a readable storage medium such as a hard disk, an optical disk or a floppy disk in a computer.

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Business, Economics & Management (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Software Systems (AREA)
  • General Physics & Mathematics (AREA)
  • Physics & Mathematics (AREA)
  • Economics (AREA)
  • Entrepreneurship & Innovation (AREA)
  • Human Resources & Organizations (AREA)
  • Marketing (AREA)
  • Operations Research (AREA)
  • Quality & Reliability (AREA)
  • Strategic Management (AREA)
  • Tourism & Hospitality (AREA)
  • General Business, Economics & Management (AREA)
  • General Engineering & Computer Science (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

本发明公开了一种业务流处理的方法、装置及系统，属于通信领域。本发明通过在NSP单板中预先配置业务应用属性和业务应用标识的对应关系，可以在接收携带有业务应用属性的业务流后确定该业务流的业务应用标识，按照该业务流对应的业务应用标识即可知道该业务流对应何种业务应用，在NSP中同时部署多个业务应用时，可将业务流正确的发送给对应的业务应用的虚拟机进行业务处理。

Description

一种业务流处理的方法、 装置及系统 技术领域
本发明涉及通信领域， 特别涉及一种业务流处理的方法、 装置及系统。 背景技术
当前通信网络趋向越来越智能说， 业务多样性成为通信网络的一个重要特征。 但是， 业 务多样性对当前网络的交换设备或路由设备来说是一个极大的挑战， 一方面， 由于交换设 备和路由设备对业务应用的流程或业务逻辑的处理比较复杂， 另一方面， 业务应用各式各 样难以发挥交换设备和路由设备的优势。
NSP (Network Service Platform, 网络业务平台书） 单板可与 AR (Access Router, 接 入路由器） 或交换机连接， 专门用于处理各种各样的业务应用， 如安全业务、 服务器集成、 应用加速业务等。 同时， NSP具有独立硬件系统和软件系统， 可以方便的处理一个或多个业 务应用。
路由器或交换机可连接一个或多个 NSP单板。 其中， 路由器或交换机至少包括主控板 ( Main Control Board ) 局域网（Local Area Network, LAN) 线卡或广域网（Wide Area Network, WAN)线卡、 背板 （Backend Board), 路由器或交换机通过背板与 NSP单板相连。 主控板包括有微处理器 （MPU， Microprocessor Unit ) 和交换单元 (Fabric Unit ), 交换 单元负责路由器或交换机以及 NSP单板之间的数据交换。 NSP上的业务应用处理的流量是从 路由器或交换机的 LAN线卡或 WAN线卡通过交换单元转发而来。 目前主要有 3种典型的业 务流转发模式： 主机模式、 镜像模式和重定向模式。
在主机模式中， NSP上的业务应用直接为用户提供服务（如本地邮件服务器， 或语音呼 叫控制器等）， 用户终端发送的业务流的目的 IP ( Internet Protocol , 网络协议） 或 MAC (Media Access Control, 介质访问控制） 地址就是 NSP单板中负责处理该业务流的业务 应用的虚拟机的 IP或 MAC地址， 业务流由路由器或交换机上的 LAN或 WAN线卡通过交换单 元转发给 NSP， 然后由 NSP中的虚拟机对用户终端的业务流量进行处理。
在镜像模式中， NSP上可处理的业务应用， 如流量统计应用， 或病毒检测应用等， 对用 户终端不可见， 即用户终端的业务流量目的 IP或 MAC地址不是 NSP单板中负责处理该业务 流的业务应用的虚拟机的 IP或 MAC地址。 用户终端发送的业务流需要由路由器或交换机上 的 LAN线卡或 WAN线卡复制一份业务流量通过交换单元发送给 NSP， NSP上的虚拟机对复制 的用户终端的业务流量进行处理。
在重定向模式中， 与镜像模式类似， NSP上可处理的业务应用， 如防火墙， 对用户终端 也不可见， 即用户终端的业务流量目的 IP或 MAC地址不是 NSP单板中负责处理该业务流的 业务应用的虚拟机的 IP或 MAC地址。 用户终端发送的业务流由路由器或交换机上的 LAN线 卡或 WAN线卡通过交换单元重定向发送给 NSP，然后由 NSP上的虚拟机对业务流量进行处理， 处理完成后再通过交换单元发送到原来的目的地址。
在镜像或重定向业务流转发模式下，由于用户终端发送的目的 IP或 MAC地址并不是 NSP 单板中负责处理该业务流的业务应用的虚拟机的 IP或 MAC地址， 因此当 NSP需要处理多个 业务应用时， NSP中的虚拟机需要监听网卡上的所有报文， 即一个虚拟机业务应用除了接收 本虚拟机处理的业务应用的流量， 也将接收到其他业务的流量。 因此， 无法做到不同业务 应用之间的业务流隔离。 发明内容
为了解决当 NSP上存在多个业务应用时， 无法做到业务流隔离的问题， 本发明提出了 业务流处理方法、 装置及系统， 所述技术方案如下：
一种业务流处理方法， 所述方法包括：
接收由网络设备插入业务应用属性后的业务流；
根据预先配置的业务应用属性和业务应用标识的对应关系确定能够处理所述业务流的 目的虚拟机；
将所述业务应用属性从所述业务流中剥离， 并将剥离业务应用属性后的所述业务流发 送给所述目的虚拟机。 一种业务流处理装置， 所述装置包括：
接收单元， 用于接收由网络设备插入业务应用属性后的业务流；
业务流隔离单元， 用于根据预先配置的业务应用属性和业务应用标识的对应关系确定 能够处理所述业务流的目的虚拟机， 并将所述业务应用属性从所述业务流中剥离， 并将剥 离业务应用属性后的所述业务流发送给所述目的虚拟机。 其中， 本发明基于上述一种业务流处理的装置， 还提供了业务流处理系统：
一种业务流处理系统， 所述系统包括上述业务流处理的装置及网络设备； 其中， 所述网络设备用于向所述业务流处理的装置发送插入有业务应用属性的业务流。 本发明实施例提供的技术方案的有益效果是： 本发明通过在 NSP单板中预先配置业务 应用属性和业务应用标识的对应关系， 可以在接收携带有业务应用属性的业务流后确定该 业务流的业务应用标识， 按照该业务流对应的业务应用标识即可知道该业务流对应何种业 务应用， 在 NSP 中同时部署多个业务应用时， 可将业务流正确的发送给对应的业务应用的 虚拟机进行业务处理。 附图说明
为了更清楚地说明本发明实施例的技术方案， 下面将对实施例中使用的附图并做简单 地介绍， 显而易见地， 下面所列附图仅仅是本发明的一些实施例， 对于本领域普通技术人 员来讲， 在不付出创造性劳动的前提下， 还可以根据这些附图获得其他的附图。
图 1为本发明实施例 1所提供的一种业务流处理的方法的流程图；
图 2为本发明实施例 2所提供的一种业务流处理的方法的流程图；
图 3为本发明实施例 2所提供的经过改进的 NSP的第一种结构示意图；
图 4为本发明实施例 2所提供的经过改进的 NSP的第二种结构示意图；
图 5为本发明实施例 3所提供的一种业务流处理装置的结构示意图；
图 6为本发明实施例 3所提供的一种业务流处理装置的第二种结构示意图
图 7为本发明实施例 3所提供的 NSP实现时的第一种架构图；
图 8为本发明实施例 3所提供的 NSP实现时的第二种架构图；
图 9为本发明实施例 3所提供的 NSP实现时的第三种架构图。 具体实施方式
为使本发明的目的、 技术方案和优点更加清楚， 下面将结合附图对本发明实施方式做 进一步地详细描述。
实施例 1
如图 1所示， 本发明实施例提供了一种业务流处理方法， 该方法包括：
101、 NSP接收由网络设备插入业务应用属性后的业务流。
102、 根据预先配置的业务应用属性和业务应用标识的对应关系确定能够处理上述业务 流的目的虚拟机。
103、 将业务应用属性从上述业务流中剥离， 并将剥离业务应用属性后的上述业务流发 送给所述目的虚拟机。 本发明通过在 NSP单板中预先配置业务应用属性和业务应用标识的对应关系， 可以在 接收携带有业务应用属性的业务流后确定该业务流的业务应用标识， 按照该业务流对应的 业务应用标识即可知道该业务流为何种业务应用， 并只发送到负责处理该业务应用的目的 虚拟机， 使得即使在 NSP 中同时部署处理多个业务应用的虚拟机时， 也可将业务流正确的 发往对应的虚拟机进行业务处理。 实施例 2
本发明实施例提供了一种业务流处理的方法， 是在实施例 1的基础之上改进而来。 如图 2所示， 一种业务流处理的方法， 具体包括：
201、 网络设备在用户终端发送的业务流中插入业务应用属性， 并将携带有业务应用属 性的业务流转发给 NSP单板。
在本发明实施例中， 网络设备具体的可以为路由器或交换机。
需要说明的是， 在 NSP单板中保存有业务应用属性和业务应用标识的对应关系， 还可 以保存有业务流属性和业务应用属性的对应关系。 网络设备中保存有业务流属性和业务应 用属性的对应关系。
在本实施例中， 业务应用属性包括所述业务流的业务流转发模式和源设备号 （Source Device No. )的组合 (Forwarding Mode of Service Flow)、 目的设备号 (Destination Device No. )、 源设备端口号 （Source Port No. )、 目的设备端口号 （Destination Port No. )、 业 务优先级 （Service Priority), 源设备虚拟局域网 VLAN标识 （VLAN Ident ity of Source Device)、目的设备 VLAN标识（VLAN Identity of Destination Device)、 CPU编码（CPU Code ) 中的一项或多项。 其中， VLAN (Virtual Local Area Network) 为虚拟局域网。
其中， 业务流报文为 NSP单板要处理的对象， 业务流为业务流报文的集合， 业务流属 性具体为业务流报文中各种协议字段所指示的属性，例如业务流报文的源 MAC地址（Source MAC Address ) 目的 MAC地址 （Destination MAC Address )、 VLAN标识、 源 IP地址（Source IP address) , 目的 IP地址（Destination IP Address)、 源端口号（Source Port)、 目的端 口号（Destination Port)等。
业务应用标识具体的为用于区分 NSP 中各个虚拟机的网络接口信息， 包括虚拟网络接 口标识， 例如虚拟机的 IP地址或 MAC地址， 或虚拟机的虚拟网络接口与业务流隔离单元通 信的端口标识。 NSP的结构可以如图 3或图 4所示， 在 NSP中可建立多个虚拟机， 分别负责处理不同的 业务应用。 每个虚拟机配置有其对应的虚拟网络接口， 在本实施例中， 业务流隔离单元通 过业务应用标识确定将业务流转发到哪一个目的虚拟机。
其中， 使用表 1对预先配置的业务应用属性和业务应用标识的对应关系进行说明： 表 1
Figure imgf000007_0001
需要说明的是， 在表 1 中只列出了业务应用属性中的部分属性， 在实际应用中， 业务 应用属性还可以包括其他属性， 例如源端口号、 目的端口号、 源设备号、 目的设备号、 报 文标识、 业务优先级、 转发类型及上述属性的值。 业务应用模块标识用于区分不同的业务 应用进程， 具体实施中， 业务应用标识具体可以为虚拟网络接口标识， 或虚拟网络接口与 业务流隔离模块连接的端口标识。
其中， 网络设备在用户终端发送的业务流中插入业务应用属性， 具体的包括两种情况:
( 1 ) 当业务应用属性包括业务流转发模式和源设备号的组合、 目的设备号、 源设备端 口号、 目的设备端口号、 业务优先级、 源设备虚拟局域网 VLAN标识、 目的设备 VLAN标识 中的一项或多项时， 网络设备接收用户终端发送的业务流， 并根据业务流属性以及业务流 属性在业务流中插入业务应用属性。
具体的， 网络设备接收用户终端发送的业务流， 当业务流经过网络设备的 CPU 时， 由 网络设备的 CPU上的软件模块根据业务流属性在业务流中插入业务应用属性； 当业务流经 过 LAN接口时， 由 LAN接口硬件的转发芯片根据业务流属性在业务流中插入业务应用属性。
( 2 ) 当业务应用属性中包括 CPU编码时， 网络设备根据业务流属性以及业务流属性和 业务应用属性中 CPU编码的对应关系将 CPU编码插入到业务流中。 具体的， 当业务流经过 LAN接口时， 由 LAN接口硬件的转发芯片根据业务流属性在业务流中插入 CPU编码。
需要说明的是， 当业务应用属性中包括 CPU编码时， 在步骤 201之前， 本方法还包括： 配置业务应用属性中 CPU编码和业务应用标识的对应关系， 以及业务流属性与业务应 用属性中 CPU编码的对应关系， 并将业务流属性与业务应用属性中 CPU编码的对应关系发 送给网络设备。
202、 根据预先配置的业务应用属性和业务应用标识的对应关系确定与上述业务流对应 的业务应用标识， 并根据对应的业务应用标识确定能够处理上述业务流的目的虚拟机； NSP中的业务流隔离模块接收到携带有业务应用属性的业务流后，使用如步骤 201中所 述的表 1中的对应关系， 确定接收到的业务流对应的业务应用标识。
203、 将所述业务应用属性从所述业务流中剥离， 并将剥离业务应用属性后的业务流发 送给目的虚拟机；
204、 目的虚拟机对上述剥离业务应用属性后的业务流进行业务处理。 本发明通过在 NSP单板中预先配置业务应用属性和业务应用标识的对应关系， 可以在 接收携带有业务应用属性的业务流后确定该业务流的业务应用标识， 按照该业务流对应的 业务应用标识即可知道该业务流为何种业务应用， 并只发送到负责处理该业务应用的目的 虚拟机， 使得即使在 NSP 中同时部署处理多个业务应用的虚拟机时， 也可将业务流正确的 发往对应的虚拟机进行业务处理。 实施例 3
如图 5所示， 本发明实施例提供了一种业务流处理装置， 该业务流处理装置具体地可 通过 NSP单板实现， 该装置具体包括：
接收单元 301， 用于接收由网络设备插入业务应用属性后的业务流；
业务流隔离单元 302，用于根据预先配置的业务应用属性和业务应用标识的对应关系确 定能够处理业务流的目的虚拟机， 并将业务应用属性从业务流中剥离， 并将剥离业务应用 属性后的业务流发送给目的虚拟机。 需要说明的是， 在业务流处理装置中保存有业务应用属性和业务应用标识的对应关系， 还可以保存有业务流属性和业务应用属性的对应关系。 网络设备中保存有业务流属性和业 务应用属性的对应关系。
在本实施例中， 业务应用属性包括所述业务流的业务流转发模式和源设备号的组合、 目的设备号、源设备端口号、 目的设备端口号、业务优先级、源设备虚拟局域网 VLAN标识、 目的设备 VLAN标识、 CPU编码中的一项或多项；
其中， 业务流报文为 NSP单板要处理的对象， 业务流为业务流报文的集合， 业务流属 性具体为业务流报文中各种协议字段所指示的属性， 例如业务流报文的源 MAC地址、 目的 MAC地址、 VLAN标识、 源 IP地址、 目的 IP地址、 源端口号（Source Port)、 目的端口号等； 业务应用标识具体为用于区分 NSP 中各个虚拟机的网络接口信息， 包括虚拟网络接口 标识， 例如虚拟机的 IP地址或 MAC地址， 或虚拟机的虚拟网络接口与业务流隔离单元通信 的端口标识。
在 NSP中可建立多个业务应用单元， 每个业务应用单元在 NSP单板中具体的为一个虚 拟机， 分别负责处理不同的业务应用， 虚拟机处理的业务流由网络设备的交换单元发送， 并通过业务隔离单元转发得到。 每个虚拟机配置有其对应的虚拟网络接口， 在本实施例中， 业务流隔离单元通过业务应用标识判断将业务流转发的目的虚拟机。
其中， 网络设备在用户终端发送的业务流中插入业务应用属性， 具体的包括两种情况： ( 1 ) 当业务应用属性包括业务流转发模式和源设备号的组合、 目的设备号、 源设备端 口号、 目的设备端口号、 业务优先级、 源设备虚拟局域网 VLAN标识、 目的设备 VLAN标识 中的一项或多项时， 网络设备接收用户终端发送的业务流， 并根据业务流属性以及业务流 属性在业务流中插入业务应用属性。
具体的， 网络设备接收用户终端发送的业务流， 当业务流经过网络设备的 CPU 时， 由 网络设备的 CPU上的软件模块根据业务流属性在业务流中插入业务应用属性； 当业务流经 过 LAN接口时， 由 LAN接口硬件的转发芯片根据业务流属性在业务流中插入业务应用属性。 ( 2 ) 当业务应用属性中包括 CPU编码时， 网络设备根据业务流属性以及业务流属性和业务 应用属性中 CPU编码的对应关系将 CPU编码插入到业务流中。 具体的， 当业务流经过 LAN 接口时， 由 LAN接口硬件的转发芯片根据业务流属性在业务流中插入 CPU编码。
进一步地， 如图 6所示， 当业务应用属性中包括 CPU编码时， 上述业务流处理装置还 包括：
配置代理单元 303， 用于配置业务应用属性中 CPU编码和业务应用标识的对应关系， 以 及业务流属性与业务应用属性中 CPU编码的对应关系， 并将业务流属性与业务应用属性中 CPU编码的对应关系发送给网络设备。
需要说明的是， 上述业务流处理装置在具体实现时可包括三种架构：
NSP架构一， 具体如图 7所示：
NSP架构包括： NSP主机 OS (Operation System, 操作系统）、 多个虚拟机（VM， Virtual Machine )、 虚拟机监控器。
其中， NSP主机 0S， 为 NSP主机操作系统， 用于为 NSP的网络管理维护提供相关的功 能；
在 NSP主机 OS中建立有虚拟交换机 （vSwitch), 虚拟机交换机用于实现业务流转发， 对业务流进行路由转发， 本发明提供的装置中的业务流隔离单元可通过上述虚拟交换机实 现；
基于主机 0S建立有多个虚拟机， 用于处理各种业务应用， 本发明中的对业务流进行各 种业务应用即可在具体实现时刻通过上述虚拟机实现。
NSP架构二， 具体如图 8所示：
NSP架构二与 NSP架构一的区别是， 在 NSP架构一中， 业务流隔离单元通过在 NSP主机 OS中建立的虚拟交换机实现， 而在 NSP架构二中， 虚拟交换机通过直接建立在 NSP硬件平 台上的虚拟交换机实现， 其余模块这里不再赘述。
NSP架构三， 具体如图 9所示：
在 NSP架构三中， 用以实现业务隔离单元的虚拟交换机建立在 NSP主机 OS中的物理网 络设备驱动中。 本发明提供的业务流处理装置， 通过预先配置业务应用属性和业务应用标识的对应关 系， 可以在接收携带有业务应用属性的业务流后确定该业务流的业务应用标识， 按照该业 务流对应的业务应用标识即可知道该业务流为何种业务应用， 并只发送到负责处理该业务 应用的目的虚拟机， 使得即使在 NSP 中同时部署处理多个业务应用的虚拟机时， 也可将业 务流正确的发往对应的虚拟机进行业务处理。 进一步地， 基于实施例 3 所提供的装置， 一种业务流处理系统， 该系统包括实施例 3 所提供的业务流处理装置和网络设备。
其中， 网络设备用于向业务流处理装置发送插入有业务应用属性的业务流。
在本实施例中， 网络设备具体的可以为路由器或交换机。 需要说明的是： 上述实施例提供的业务流处理装置， 仅以上述各功能模块的划分进行 举例说明， 实际应用中， 可以根据需要而将上述功能分配由不同的功能模块完成， 即将业 务流处理装置的内部结构划分成不同的功能模块， 以完成以上描述的全部或者部分功能。 另外， 上述实施例提供的业务流处理装置与业务流处理的方法实施例属于同一构思， 其具 体实现过程详见方法实施例， 这里不再赘述。 以上实施例提供的技术方案中的全部或部分内容可以通过软件编程实现， 其软件程序 存储在可读取的存储介质中， 存储介质例如： 计算机中的硬盘、 光盘或软盘。
以上所述仅为本发明的较佳实施例， 并不用以限制本发明， 凡在本发明的精神和原则 之内， 所作的任何修改、 等同替换、 改进等， 均应包含在本发明的保护范围之内。

Claims

权 利 要 求 书
1、 一种业务流处理方法， 其特征在于， 所述方法包括：
接收由网络设备插入业务应用属性后的业务流；
根据预先配置的业务应用属性和业务应用标识的对应关系确定能够处理所述业务流的目 的虚拟机；
将所述业务应用属性从所述业务流中剥离， 并将剥离业务应用属性后的所述业务流发送 给所述目的虚拟机。
2、 根据权利要求 1所述的方法， 其特征在于， 所述业务应用标识包括目的虚拟机的虚拟 网络接口标识或与目的虚拟机进行通信的端口标识；
相应地， 所述根据预先配置的业务应用属性和业务应用标识的对应关系确定能够处理所 述业务流的目的虚拟机， 具体包括：
根据预先配置的业务应用属性和业务应用标识的对应关系确定能够处理所述业务流的目 的虚拟机的网络接口标识或与目的虚拟机进行通信的端口标识。
3、 根据权利要求 1或 2所述的方法， 其特征在于， 所述业务应用属性包括所述业务流的 业务流转发模式与源设备号的组合、 目的设备号、 源设备端口号、 目的设备端口号、 业务优 先级、 源设备虚拟局域网 VLAN标识、 目的设备 VLAN标识中的一项或多项；
相应地， 所述业务应用属性为所述业务流经过网络设备时， 由所述网络设备根据业务流 属性以及业务流属性和业务应用属性的对应关系在所述业务流中插入的。
4、 根据权利要求 1或 2所述的方法， 其特征在于， 所述业务应用属性包括 CPU编码； 相应地， 所述 CPU编码为所述网络设备根据业务流属性以及业务流属性和业务应用属性 中 CPU编码的对应关系在所述业务流中插入的。
5、 根据权利要求 3所述的方法， 其特征在于， 所述业务应用属性还包括 CPU编码。
6、 根据权利要求 4或 5所述的方法， 其特征在于， 所述方法还包括：
配置所述业务应用属性中 CPU编码和业务应用标识的对应关系， 以及所述业务流属性与 业务应用属性中 CPU编码的对应关系， 并将所述业务流属性与业务应用属性中 CPU编码的对 应关系发送给所述网络设备。
7、 一种业务流处理装置， 其特征在于， 所述装置包括：
接收单元， 用于接收由网络设备插入业务应用属性后的业务流；
业务流隔离单元， 用于根据预先配置的业务应用属性和业务应用标识的对应关系确定能 够处理所述业务流的目的虚拟机， 并将所述业务应用属性从所述业务流中剥离， 并将剥离业 务应用属性后的所述业务流发送给所述目的虚拟机。
8、 根据权利要求 7所述的装置， 其特征在于， 所述业务应用标识包括目的虚拟机的虚拟 网络接口标识或与目的虚拟机进行通信的端口标识；
相应地， 所述业务流隔离单元具体用于， 根据预先配置的业务应用属性和业务应用标识 的对应关系确定能够处理所述业务流的目的虚拟机的网络接口标识或与目的虚拟机进行通信 的端口标识， 并将所述业务应用属性从所述业务流中剥离， 并将剥离业务应用属性后的所述 业务流发送给所述目的虚拟机。
9、 根据权利要求 7或 8所述的装置， 其特征在于， 所述业务应用属性包括所述业务流的 业务流转发模式与源设备号的组合、 目的设备号、 源设备端口号、 目的设备端口号、 业务优 先级、 源设备虚拟局域网 VLAN标识、 目的设备 VLAN标识中的一项或多项；
相应地， 所述业务应用属性为所述业务流经过网络设备时， 由所述网络设备根据业务流 属性以及业务流属性和业务应用属性的对应关系在所述业务流中插入的。
10、 根据权利要求 7或 8所述的装置， 其特征在于， 所述业务应用属性包括 CPU编码； 相应地， 所述 CPU编码为所述网络设备根据业务流属性以及业务流属性和业务应用属性 中 CPU编码的对应关系在所述业务流中插入的。
11、 根据权利要求 9所述的装置， 其特征在于， 所述业务应用属性还包括 CPU编码。
12、 根据权利要求 10或 11所述的装置， 其特征在于， 所述装置还包括：
配置代理单元， 用于配置所述业务应用属性中 CPU编码和业务应用标识的对应关系， 以 及所述业务流属性与业务应用属性中 CPU编码的对应关系， 并将所述业务流属性与业务应用 属性中 CPU编码的对应关系发送给所述网络设备。
13、 一种业务流处理系统， 其特征在于， 所述系统包括权利要求 7-12所述的任一业务流 处理装置及网络设备；
其中， 所述网络设备用于向所述业务流处理装置发送插入有业务应用属性的业务流。
PCT/CN2011/077159 2011-07-14 2011-07-14 一种业务流处理的方法、装置及系统 Ceased WO2012106892A1 (zh)

Priority Applications (4)

Application Number Priority Date Filing Date Title
PCT/CN2011/077159 WO2012106892A1 (zh) 2011-07-14 2011-07-14 一种业务流处理的方法、装置及系统
EP11858212.1A EP2725749B1 (en) 2011-07-14 2011-07-14 Method, apparatus and system for processing service flow
CN201180001386.2A CN102318291B (zh) 2011-07-14 2011-07-14 一种业务流处理的方法、装置及系统
US14/154,427 US9262191B2 (en) 2011-07-14 2014-01-14 Method, apparatus, and system for processing service flow

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
PCT/CN2011/077159 WO2012106892A1 (zh) 2011-07-14 2011-07-14 一种业务流处理的方法、装置及系统

Related Child Applications (1)

Application Number Title Priority Date Filing Date
US14/154,427 Continuation US9262191B2 (en) 2011-07-14 2014-01-14 Method, apparatus, and system for processing service flow

Publications (1)

Publication Number Publication Date
WO2012106892A1 true WO2012106892A1 (zh) 2012-08-16

Family

ID=45429439

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2011/077159 Ceased WO2012106892A1 (zh) 2011-07-14 2011-07-14 一种业务流处理的方法、装置及系统

Country Status (4)

Country Link
US (1) US9262191B2 (zh)
EP (1) EP2725749B1 (zh)
CN (1) CN102318291B (zh)
WO (1) WO2012106892A1 (zh)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103916302A (zh) * 2013-01-04 2014-07-09 上海贝尔股份有限公司 向虚拟wlan提供sdn流路径的方法和设备
WO2015118377A1 (en) * 2014-02-04 2015-08-13 Telefonaktiebolaget L M Ericsson (Publ) Managing service availability in a mega virtual machine

Families Citing this family (15)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102739644B (zh) * 2012-04-20 2015-11-18 深圳证券通信有限公司 一种金融数据的发送/接收方法及装置
CN103019861A (zh) * 2012-12-11 2013-04-03 华为技术有限公司 虚拟机分配方法及装置
CN103067295A (zh) * 2013-01-04 2013-04-24 华为技术有限公司 业务传输的方法、装置与系统
US9311123B2 (en) * 2013-07-02 2016-04-12 Hillstone Networks, Corp. Distributed virtual security appliance and flow-based forwarding system using virtual machines
CN103747539B (zh) * 2013-12-31 2018-03-02 上海斐讯数据通信技术有限公司 无线路由器支持多网络连接的方法
US9569192B2 (en) * 2014-03-31 2017-02-14 Red Hat Israel, Ltd. Configuring dependent services associated with a software package on a host system
CN105101195B (zh) * 2014-04-30 2018-11-30 华为技术有限公司 网络准入的控制方法及装置
US9378041B2 (en) * 2014-07-08 2016-06-28 Cognizant Technology Solutions India Pvt. Ltd. Method and system for integrating and implementing virtual service packages across different service virtualization tools
US10116553B1 (en) 2015-10-15 2018-10-30 Cisco Technology, Inc. Application identifier in service function chain metadata
US10223024B2 (en) * 2016-10-12 2019-03-05 Oracle International Corporation Storage controller for provisioning storage services for an application based upon application-specific requirements
CN107070959A (zh) * 2017-06-28 2017-08-18 郑州云海信息技术有限公司 一种网络隔离的方法和装置
CN110580256B (zh) * 2018-05-22 2022-06-10 华为技术有限公司 一种识别应用标识的方法、设备及系统
CN110266747B (zh) * 2019-04-12 2022-04-08 创新先进技术有限公司 业务请求的机房转接方法和装置
CN112822087B (zh) * 2020-12-30 2022-12-20 深圳市共进电子股份有限公司 数据区分方法、数据区分装置、路由器及网络中继设备
CN116599901B (zh) * 2023-06-13 2024-01-23 苏州浪潮智能科技有限公司 业务调度方法、装置、计算机设备及存储介质

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101515880A (zh) * 2008-02-18 2009-08-26 诺基亚西门子通信有限责任两合公司 在基于分组弹性环的网络上提供以太网业务的方法和设备
CN101772102A (zh) * 2009-12-28 2010-07-07 中国科学院计算技术研究所 一种异构无线网络选择方法
CN101826999A (zh) * 2010-04-26 2010-09-08 瑞斯康达科技发展股份有限公司 一种在线报文流量监测及带宽补偿的方法和装置
CN102014448A (zh) * 2009-09-04 2011-04-13 华为技术有限公司 一种业务流的绑定方法、设备及系统

Family Cites Families (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
KR100555664B1 (ko) * 2001-01-08 2006-03-03 삼성전자주식회사 무선 통신기기 및 이를 적용한 무선 통신시스템 및 그통신방법
US7228337B1 (en) * 2001-09-11 2007-06-05 Cisco Technology, Inc. Methods and apparatus for providing a network service to a virtual machine
US7508764B2 (en) * 2005-09-12 2009-03-24 Zeugma Systems Inc. Packet flow bifurcation and analysis
WO2007064849A1 (en) * 2005-12-01 2007-06-07 Cassatt Corporation Automated deployment and configuration of applications in an autonomically controlled distributed computing system
US8798056B2 (en) * 2007-09-24 2014-08-05 Intel Corporation Method and system for virtual port communications
CN101841456B (zh) * 2009-03-18 2012-07-25 中国电信股份有限公司 一种实现业务应用区分的方法和系统
CN102549977B (zh) * 2009-09-24 2014-11-05 日本电气株式会社 虚拟服务器间通信识别系统和虚拟服务器间通信识别方法
US8879554B2 (en) * 2010-05-07 2014-11-04 Cisco Technology, Inc. Preventing MAC spoofs in a distributed virtual switch
US9106445B2 (en) * 2011-06-16 2015-08-11 Verizon Patent And Licensing Inc. Virtual extended network

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101515880A (zh) * 2008-02-18 2009-08-26 诺基亚西门子通信有限责任两合公司 在基于分组弹性环的网络上提供以太网业务的方法和设备
CN102014448A (zh) * 2009-09-04 2011-04-13 华为技术有限公司 一种业务流的绑定方法、设备及系统
CN101772102A (zh) * 2009-12-28 2010-07-07 中国科学院计算技术研究所 一种异构无线网络选择方法
CN101826999A (zh) * 2010-04-26 2010-09-08 瑞斯康达科技发展股份有限公司 一种在线报文流量监测及带宽补偿的方法和装置

Non-Patent Citations (4)

* Cited by examiner, † Cited by third party
Title
FENG, LEI ET AL.: "Virtualization stays constant to cope with the changes", CIO INSIGHT, 2008, pages 72 - 75 *
LIU, ZHONGBAO ET AL.: "Application prospects of virtualization technology in commercial banks", FINANCIAL COMPUTER OF CHINA, June 2008 (2008-06-01), pages 4649 *
See also references of EP2725749A4 *
ZHANG, YANG: "VMware Virtualization Solution Helping Telecom", CHINA TELECOMMUNICATIONS TRADE, September 2008 (2008-09-01), pages 76 - 77 *

Cited By (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103916302A (zh) * 2013-01-04 2014-07-09 上海贝尔股份有限公司 向虚拟wlan提供sdn流路径的方法和设备
CN103916302B (zh) * 2013-01-04 2017-03-15 上海贝尔股份有限公司 向虚拟wlan提供sdn流路径的方法和设备
WO2015118377A1 (en) * 2014-02-04 2015-08-13 Telefonaktiebolaget L M Ericsson (Publ) Managing service availability in a mega virtual machine
US9952946B2 (en) 2014-02-04 2018-04-24 Telefonaktiebolaget L M Ericsson (Publ) Managing service availability in a mega virtual machine
US10691563B2 (en) 2014-02-04 2020-06-23 Telefonaktiebolaget Lm Ericsson (Publ) Managing service availability in a mega virtual machine

Also Published As

Publication number Publication date
US20140130047A1 (en) 2014-05-08
CN102318291A (zh) 2012-01-11
CN102318291B (zh) 2014-02-19
EP2725749A4 (en) 2014-05-21
US9262191B2 (en) 2016-02-16
EP2725749A1 (en) 2014-04-30
EP2725749B1 (en) 2017-11-15

Similar Documents

Publication Publication Date Title
WO2012106892A1 (zh) 一种业务流处理的方法、装置及系统
US5684800A (en) Method for establishing restricted broadcast groups in a switched network
CN106664261B (zh) 一种配置流表项的方法、装置和系统
US10404773B2 (en) Distributed cluster processing system and packet processing method thereof
WO2013178099A1 (zh) 一种实现远程桌面的系统、方法、客户端和服务中心
WO2012167697A1 (zh) 抑制网络风暴的方法及处理器
US10423434B2 (en) Logical port authentication for virtual machines
CN105430113A (zh) Sdn网络arp报文处理方法、系统、控制器及交换机
CN104796336B (zh) 一种配置、下发流表项的方法及装置
WO2008017270A1 (en) Method and device and system of ethernet supporting source specific multicast forwarding
WO2015014187A1 (zh) 一种支持多租户的数据转发方法和装置
WO2012088954A1 (zh) 基于网络配置协议的网络配置管理方法、设备和系统
WO2011147371A1 (zh) 一种实现虚拟机间数据传输的方法和系统
WO2013086897A1 (zh) 生成表项的方法、接收报文的方法及相应装置和系统
EP4170939A1 (en) Service processing method and apparatus, and device, and system
WO2014134919A1 (zh) 同一租户内服务器间的通信控制方法及网络设备
CN101860551B (zh) 一种单接入端口下多用户的认证方法与系统
WO2019196914A1 (zh) 一种发现转发路径的方法及其相关设备
CN104168200A (zh) 一种基于Open vSwitch实现ACL功能的方法及系统
WO2009135422A1 (zh) 一种QinQ内广播的实现方法和装置
CN104113513B (zh) 一种主机发现方法、装置及系统
WO2016019676A1 (zh) 一种软件定义网络sdn中处理数据包的方法、装置及系统
CN104539539A (zh) 一种 ac 设备多业务板数据转发方法
WO2015149367A1 (zh) 报文处理的方法与设备
WO2013107056A1 (zh) 报文转发的方法及装置

Legal Events

Date Code Title Description
WWE Wipo information: entry into national phase

Ref document number: 201180001386.2

Country of ref document: CN

121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 11858212

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

REEP Request for entry into the european phase

Ref document number: 2011858212

Country of ref document: EP