CN101299693B - A method and device for detecting forwarding plane faults - Google Patents

Abstract

The embodiment of the invention discloses a method for detecting fault of forwarding plane, including: transmitting testing packets containing specific identification to a forwarding plane; receiving the testing packet treated by the forwarding plane; and comparing whether the transmitted testing packet is conform to the testing packet treated by the forwarding plane, if not, reporting fault. The embodiment of the invention discloses a device for detecting fault of forwarding plane, including: a transmitting module, for transmitting testing packets to the forwarding plane; a receiving module, for receiving the testing packet treated by the forwarding plane; and a comparison module, for comparing whether the transmitted testing packet is conform to the testing packet treated by the forwarding plane, if not, reporting fault. The method and device for detecting fault of forwarding plane disclosed by the embodiment of the invention can reliably detect fault of forwarding plane.

Description

A method and device for detecting forwarding plane faults

technical field

The invention relates to the technical field of communications, in particular to a method and device for detecting forwarding plane faults. the

Background technique

NP (Network Processor, network processor) is a processor that optimizes network processing to complete network processing tasks that CPU (Central Processing Unit, central processing unit) is not good at. NP adopts optimized architecture, special instruction set and hardware unit to meet the requirements of high-speed data packet line-speed processing, and is widely used in routers, Ethernet switches, firewalls, network cards and other communication equipment and network systems. the

NP can build a distributed or centralized system, which can be applied to various communication devices. As shown in FIG. 1 , it is a distributed system constructed by NP in the prior art. Distributed systems mostly use the construction method of separating the control plane and the forwarding plane. The control plane is mainly responsible for the processing of protocols and control messages, the configuration of forwarding entries, and the management of device attributes. The forwarding plane is mainly responsible for the processing and forwarding of data messages. . the

In a distributed system, if the forwarding plane fails to work properly and the control plane fails to sense and report to the network management in time, it will cause inestimable economic losses. Therefore, timely and reliable detection of forwarding plane failures is crucial for network security applications. the

In the prior art, the fault detection method for the forwarding plane is to divide a detection module in the forwarding plane, and the detection module completes the detection of the forwarding plane, and actively reports the detection result to the control plane, or the control plane actively Pick. The detection module uses a specific algorithm to detect specific components in the forwarding plane. After detecting a fault, the forwarding plane actively notifies the control plane. the

In the prior art, the detection method for forwarding plane faults depends on the normal operation of the detection module in the forwarding plane. If the detection module is abnormal, the fault cannot be detected and the reliability is poor; in addition, there are different detection methods for different faults, The detection cost is high and the scalability is poor. the

Contents of the invention

Embodiments of the present invention provide a method and device for detecting forwarding plane faults, which realize comprehensive detection of forwarding plane faults. the

In order to achieve the above object, an embodiment of the present invention proposes a method for detecting a forwarding plane failure on the one hand, including the following steps:

Send a detection message containing a special identifier to the forwarding plane, and the sender of the detection message is located outside the forwarding plane;

Counting the detection packets;

Receiving the detection message processed by the forwarding plane, the receiver of the detection message is located outside the forwarding plane;

Compare whether the sent detection message matches the detection message processed by the forwarding plane, and if the sent detection message does not match the detection message processed by the forwarding plane, report Fault;

A counting module, configured to count the detection packets sent by the sending module after the sending module sends the detection packets to the forwarding plane;

A judging module, configured to judge whether the count value of the packets processed by the counting module is greater than a set count threshold. the

The embodiment of the present invention also proposes a device for detecting faults in the forwarding plane, located outside the forwarding plane, including:

A sending module, configured to send a detection message containing a special identifier to the forwarding plane;

A receiving module, configured to receive the detection message processed by the forwarding plane;

A comparison module, configured to compare whether the detection message sent by the sending module matches the detection message received by the receiving module;

An error reporting module is used to report a fault after the comparison result of the comparison module is non-conforming;

A counting module, configured to count the detection packets sent by the sending module after the sending module sends the detection packets to the forwarding plane;

A judging module, configured to judge whether the count value of the packets processed by the counting module is greater than a set count threshold. the

The technical solution of the embodiment of the present invention has the following advantages, because the detection method and device independent of the forwarding plane are adopted, thereby achieving the effect of reliably detecting the failure of the forwarding plane independently of the normal operation of the forwarding plane. the

Description of drawings

Fig. 1 is a typical distributed network system structural diagram constructed by NP in the prior art;

Fig. 2 is a device structural diagram for detecting a forwarding plane failure in an embodiment of the present invention;

Fig. 3 is a kind of specific structural diagram of the device of detecting forwarding plane failure in the embodiment of the present invention;

Fig. 4 is the flow chart of the method for detecting forwarding plane failure in the embodiment of the present invention;

FIG. 5 is a flow chart of a specific implementation manner of detecting a forwarding plane failure in an embodiment of the present invention. the

Detailed ways

The specific implementation of the present invention will be further described in detail below in conjunction with the accompanying drawings and embodiments: As shown in Figure 2, it is a structural diagram of a device for detecting forwarding plane failures in an embodiment of the present invention. Out of plane, including:

The sending module 210 is configured to send the detection message containing the special identifier to the forwarding plane. the

The sending module 210 regularly sends the detection message to the forwarding plane according to different port types, and the forwarding plane has a routing and forwarding entry corresponding to the destination address of the detection message. Information such as the source and destination address of the message can also be set by the user. In order to distinguish detection packets from common data packets on the forwarding plane, a special identifier is added to the interface sent to the forwarding plane, and the special identifier is used to make the forwarding plane recognize the detection packets. the

The receiving module 220 is configured to receive the detection message processed by the forwarding plane. the

The comparison module 230 is configured to compare whether the detection message sent by the sending module 210 matches the detection message processed by the forwarding plane received by the receiving module 220 . the

When the forwarding plane is working normally, the detection packets are identified by special identifiers, and no data modification is made to the received detection packets. Therefore, the difference between the detection packets sent and the detection packets processed by the forwarding plane The information will be exactly the same. If the information of the two packets is found to be different after comparison, it means that a processing link in the forwarding plane is faulty. the

The error reporting module 240 is used to report a fault after the comparison result of the comparison module 230 is inconsistent. the

After the comparison result of the comparison module 230 is inconsistent, the error reporting module 240 reports the failure to the control plane, or records the failure in a log file, or directly prints the failure record. the

As shown in Figure 3, it is a specific structural diagram of a device for detecting a forwarding plane failure in an embodiment of the present invention, the device for detecting a forwarding plane failure is located outside the forwarding plane, including:

A setting module 310, configured to set information such as source and destination addresses of the detection message. the

Adding module 320, adds special identification in the interface that is sent to forwarding plane, and this special identification is used for making forwarding plane identify detection message. the

The sending module 330 is configured to send the detection message containing the special identifier to the forwarding plane; and is also used to continue sending the detection message to the forwarding plane after the counting module 340 resets the count of the message. the

The sending module 330 regularly sends the detection message to the forwarding plane according to different port types, and the forwarding plane has a routing and forwarding entry corresponding to the destination address of the detection message. Information such as the source and destination address of the message can also be set by the user. In order to distinguish detection packets from common data packets on the forwarding plane, a special identifier is added to the interface sent to the forwarding plane, and the special identifier is used to make the forwarding plane recognize the detection packets. the

The counting module 340 is used to count the detection messages sent by the sending module after the sending module 330 sends the detection messages to the forwarding plane; it is also used to reset the count of the messages after the comparison result of the comparison module 370 is consistent . the

In this embodiment, the above-mentioned counting of detection packets is specifically "adding 1", and resetting the count of packets is specifically "clearing". the

It should be further pointed out that the method of counting and resetting is not limited to this, and may also include other numerical changes that can achieve the effect of counting and resetting, and such changes also belong to the protection scope of the present invention. the

The judging module 350 is configured to judge whether the count value of the packets processed by the counting module 350 is greater than a set count threshold. the

For example, because the device for detecting the failure of the forwarding plane continuously sends detection messages to the forwarding plane, but does not receive an instruction to reset the count, the count will repeat the operation of "increment by 1" and keep increasing, thus exceeding the set threshold. , the failure needs to be reported to the control plane. the

Corresponding to the counting module 340, when counting the detection message is specifically an operation other than "adding 1", such as "minus 1", the corresponding judgment condition of the judgment module 350 will also be changed to be less than or equal to the preset threshold, so The change does not violate the technical idea of the present invention, and also belongs to the protection scope of the present invention. the

The threshold can be set by software developers based on experience, and can also be set by users according to needs during use. the

The receiving module 360 is configured to receive the detection message processed by the forwarding plane. the

The comparison module 370 is configured to compare whether the detection message sent by the sending module 330 matches the detection message processed by the forwarding plane received by the receiving module 360 . the

When the forwarding plane is working normally, the detection packets are identified by special identifiers, and no data modification is made to the received detection packets. Therefore, the difference between the detection packets sent and the detection packets processed by the forwarding plane The information will be exactly the same. If the information of the two packets is found to be different after comparison, it means that a processing link in the forwarding plane is faulty. the

The error reporting module 380 is used to report a fault after the comparison result of the comparison module 370 is inconsistent; it is also used to report a fault after the judgment module 350 judges that the count value of the message is greater than the set count threshold. the

After the comparison result of the comparison module 370 is inconsistent or the judgment module 350 judges that the count value of the message is greater than the set count threshold, the error reporting module 380 reports the fault to the control plane, or the fault can be recorded in the log file, or directly printed broken record. the

Above-mentioned judging module 350 comprises:

Storage sub-module 351, used for storing the set counting threshold;

The judging sub-module 352 is configured to judge whether the count value of the message is greater than the set count threshold stored in the storage sub-module 351 . the

As shown in Figure 4, it is a flow chart of a method for detecting a forwarding plane failure in an embodiment of the present invention, including the following steps:

Step 401, sending a detection packet including a special identifier to the forwarding plane. the

The sending module regularly sends detection packets to the forwarding plane according to different port types, and the forwarding plane has routing and forwarding entries corresponding to the destination addresses of the detection packets. The sending module is located outside the forwarding plane. Information such as the source and destination address of the message can also be set by the user. In order to distinguish detection packets from common data packets on the forwarding plane, a special identifier is added to the interface sent to the forwarding plane, and the special identifier is used to make the forwarding plane recognize the detection packets. the

Step 402, receiving the detection message processed by the forwarding plane. the

After the forwarding plane receives the data sent by the control plane, it judges whether it is a detection packet according to the special identifier. If it is not a detection packet, it is processed according to the normal process; if it is a detection packet, the priority of the packet is set to special Priority, then normal message processing, after processing, send the message to the receiving module, the receiving module is located outside the forwarding plane. the

Step 403, comparing whether the sent detection message matches the detection message processed by the forwarding plane. If the sent detection message matches the detection message processed by the forwarding plane, execute step 401; if the sent detection message does not match the detected message processed by the forwarding plane, execute step 404. the

When the forwarding plane is working normally, no data modification will be made to the received detection message. The information of the processed message is exactly the same as that of the received detection message. If the information of the two messages is found to be different after comparison, Then a certain processing link in the forwarding plane fails. the

Step 404, report failure. the

After detecting the failure of the forwarding plane, report the failure to the control plane, and record the failure in the log file, or directly print the failure record. the

As shown in Figure 5, it is a flow chart of a specific implementation of detecting a forwarding plane failure in an embodiment of the present invention, including the following steps:

In step 501, the detection device sets information such as the source and destination addresses of the detection message. the

The detection device is located outside the forwarding plane. the

Step 502, the detection device adds a special identifier to the interface sent to the forwarding plane, and the special identifier is used to make the forwarding plane recognize the detection message. the

In step 503, the detecting device judges whether the packet count is greater than a set threshold, and if yes, executes step 504; otherwise, executes step 505. the

The threshold can be set by software developers based on experience, and can also be set by users according to needs during use. the

Step 504, the detection device reports a fault. the

After detecting the failure of the forwarding plane, report the failure to the control plane, and record the failure in the log file, or directly print the failure record. the

Step 505, the detection device sends detection packets to the forwarding plane, and counts the detection packets. the

In this embodiment, the aforementioned counting of detection packets is specifically "adding 1". the

It should be further pointed out that the counting method is not limited to this, and may also include other numerical changes that can achieve the counting effect, and such changes also belong to the protection scope of the present invention. the

The sending module regularly sends detection packets to the forwarding plane according to different port types, and the forwarding plane has routing forwarding entries corresponding to the destination addresses of the detection packets. Information such as the source and destination address of the message can also be set by the user. In order to distinguish detection packets from common data packets on the forwarding plane, a special identifier is added to the interface sent to the forwarding plane, and the special identifier is used to make the forwarding plane recognize the detection packets. the

Step 506, the forwarding plane receives the detection message. the

In step 507, the forwarding plane judges whether the received data is a detection message according to the special identifier, and if yes, executes step 509; otherwise, executes step 508. the

In step 508, the forwarding plane processes the received message according to a normal process, and ends the process. the

Step 509, the forwarding plane sets the priority of the detection message as special priority. the

Step 510, the forwarding plane processes the detection message. the

Step 511, the forwarding plane sends the processed detection message to the detection device. the

Step 512, the detection device receives the detection message processed by the forwarding plane. the

In step 513, the detection device judges whether the received detection message matches the sent detection message. the

If the received detection message matches the sent detection message, execute step 514;

Otherwise, if the received detection packet does not match the sent detection packet, step 515 is executed. the

In step 514, the detection device resets the count of the packets, and returns to step 503 to continue fault detection. the

In this embodiment, the above-mentioned resetting of the message count is specifically "clearing". the

It should be further pointed out that the reset method is not limited to this, and may also include other numerical changes that can achieve a reset effect, and such changes also belong to the protection scope of the present invention. the

Step 515, the detection device reports a fault. the

After detecting the failure of the forwarding plane, report the failure to the control plane, and record the failure in the log file, or directly print the failure record. the

The technical solutions of the embodiments of the present invention have the following advantages, because a new method and device for detecting forwarding plane faults are adopted, and the effect of comprehensively detecting the forwarding plane is achieved. The method and device do not depend on the normal operation of the forwarding plane, and realize the detection according to the processing flow of the forwarding plane, without affecting the normal operation of the business, and have high reliability and practicability; in addition, the method and device have a comprehensive detection range, It can be applied to any module or unit that needs to be tested, and the carrier of the module or unit can be any communication device, including a terminal, so it has the characteristics of good scalability. the

Through the description of the above embodiments, those skilled in the art can clearly understand that the present invention can be implemented by means of software plus a necessary general-purpose hardware platform, and of course also by hardware, but in many cases the former is a better implementation Way. Based on this understanding, the essence of the technical solution of the present invention or the part that contributes to the prior art can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes several instructions to make a A terminal device (which may be a mobile phone, a personal computer, a server, or a network device, etc.) executes the methods described in various embodiments of the present invention. the

The above is only a preferred embodiment of the present invention, it should be pointed out that, for those of ordinary skill in the art, without departing from the principle of the present invention, some improvements and modifications can also be made, and these improvements and modifications can also be made. It should be regarded as the protection scope of the present invention. the

Claims (13)

1. A device for detecting a forwarding plane failure, characterized in that, it is located outside the forwarding plane, comprising: A sending module, configured to send a detection message containing a special identifier to the forwarding plane; a receiving module, configured to receive the detection message processed by the forwarding plane; A comparison module, configured to compare whether the detection message sent by the sending module matches the detection message received by the receiving module; An error reporting module, used to report a failure after the comparison result of the comparison module is inconsistent; A counting module, configured to count the detection packets sent by the sending module after the sending module sends the detection packets to the forwarding plane; A judging module, configured to judge whether the count value of the packets processed by the counting module is greater than a set count threshold. 2. The device for detecting forwarding plane faults according to claim 1, wherein the sending module is further configured to continue sending detection messages to the forwarding plane after the comparison result of the comparing module is consistent. 3. The device for detecting a forwarding plane failure as claimed in claim 1, further comprising: A setting module, configured to set the source and destination address information of the detection message. 4. The device for detecting a forwarding plane failure as claimed in claim 1, further comprising: An adding module, adding a special identifier to the interface sent to the forwarding plane, where the special identifier is used to make the forwarding plane recognize the detection message. 5. The device for detecting forwarding plane faults according to claim 1, wherein the error reporting module is further configured to, after the judging module judges that the count value of the message is greater than the set count threshold, Report a bug. 6. The device for detecting forwarding plane faults according to claim 1, wherein the counting module is further configured to reset the counting of the message after the comparison result of the comparison module is consistent. 7. the device that detects forwarding plane failure as claimed in claim 1, is characterized in that, described judging module comprises: A storage submodule, configured to store the set counting threshold; A judging submodule, configured to judge whether the count value of the message is greater than the set count threshold stored by the storage submodule. 8. A method for detecting forwarding plane faults, comprising the following steps: sending a detection message containing a special identifier to the forwarding plane, where the sender of the detection message is located outside the forwarding plane; Counting the detection packets; receiving the detection message processed by the forwarding plane, where the receiver of the detection message is located outside the forwarding plane; Compare whether the sent detection message matches the detection message processed by the forwarding plane, and if the sent detection message does not match the detection message processed by the forwarding plane, report Fault; Judging whether the count value of the detection message is greater than the set count threshold; If the count value of the detection message is not greater than the set count threshold, the step of sending the detection message containing the special identifier to the forwarding plane is performed. 9. the method for detecting forwarding plane failure as claimed in claim 8, is characterized in that, after the detection message that described comparison sends and the detection message that forwarding plane process is processed conform to, also comprise: If the sent detection packet matches the detection packet processed by the forwarding plane, continue sending the detection packet to the forwarding plane. 10. The method for detecting forwarding plane faults as claimed in claim 8, further comprising: Adding a special identifier to the interface sent to the forwarding plane, where the special identifier is used to make the forwarding plane recognize the detection message. 11. The method for detecting a forwarding plane failure as claimed in claim 10, further comprising: Set information such as the source and destination address of the detection packet. 12. the method for detecting forwarding plane failure as claimed in claim 8, is characterized in that, also comprises: If the count value of the packet is greater than the set count threshold, a fault is reported. 13. the method for detecting forwarding plane failure as claimed in claim 8, is characterized in that, after the detection message of described comparison sending and the detection message processed by described forwarding plane conform, also comprise: If the detection message sent matches the detection message processed by the forwarding plane, reset the count of the message, and continue to judge whether the count value of the detection message is greater than the set value count threshold.

Images