CN106254152B - A kind of flow control policy treating method and apparatus - Google Patents
A kind of flow control policy treating method and apparatus Download PDFInfo
- Publication number
- CN106254152B CN106254152B CN201610830975.6A CN201610830975A CN106254152B CN 106254152 B CN106254152 B CN 106254152B CN 201610830975 A CN201610830975 A CN 201610830975A CN 106254152 B CN106254152 B CN 106254152B
- Authority
- CN
- China
- Prior art keywords
- next hop
- hop address
- flow control
- module
- iteration
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 238000000034 method Methods 0.000 title claims abstract description 48
- 230000008859 change Effects 0.000 claims abstract description 70
- 238000012545 processing Methods 0.000 claims description 24
- 230000005540 biological transmission Effects 0.000 claims description 23
- 230000008569 process Effects 0.000 claims description 11
- 238000011217 control strategy Methods 0.000 claims description 10
- 238000005111 flow chemistry technique Methods 0.000 claims description 9
- 238000003672 processing method Methods 0.000 claims description 9
- 238000012217 deletion Methods 0.000 claims description 3
- 230000037430 deletion Effects 0.000 claims description 3
- 238000007689 inspection Methods 0.000 abstract description 12
- 230000006870 function Effects 0.000 description 10
- 238000010586 diagram Methods 0.000 description 6
- 235000013399 edible fruits Nutrition 0.000 description 4
- 230000003287 optical effect Effects 0.000 description 2
- 238000004891 communication Methods 0.000 description 1
- 230000007423 decrease Effects 0.000 description 1
- 238000005516 engineering process Methods 0.000 description 1
- 239000000686 essence Substances 0.000 description 1
- 238000001914 filtration Methods 0.000 description 1
- 230000006872 improvement Effects 0.000 description 1
- 230000003993 interaction Effects 0.000 description 1
- 230000009191 jumping Effects 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 230000004044 response Effects 0.000 description 1
- 238000000926 separation method Methods 0.000 description 1
- 238000006467 substitution reaction Methods 0.000 description 1
- 238000012546 transfer Methods 0.000 description 1
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
- H04L63/1408—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/08—Configuration management of networks or network elements
- H04L41/0803—Configuration setting
- H04L41/0823—Configuration setting characterised by the purposes of a change of settings, e.g. optimising configuration for enhancing reliability
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L45/00—Routing or path finding of packets in data switching networks
- H04L45/74—Address processing for routing
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Security & Cryptography (AREA)
- Computer Hardware Design (AREA)
- Computing Systems (AREA)
- General Engineering & Computer Science (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The application provides a kind of flow control policy treating method and apparatus, this method are as follows: the BGP module of the network equipment receives the FlowSpec flow control policy that ebgp neighbor is sent, and the redirection next hop address that the flow control policy carries is sent to iteration module, iteration module, which changes in the accessibility of the next hop address or sends iteration result change notification when the best match routing of the next hop address changes, gives BGP module, BGP module re-starts validity checking to the next hop address according to iteration result change notification, according to the validity checking result treatment flow control policy.The above method, which has borrowed existing route iteration function, realizes quick inspection to the redirection next hop address of FlowSpec flow control policy, the traversing operation of a large amount of unnecessary flow control policy when reducing routing variation, alleviates unnecessary system resource for the network equipment and occupies.
Description
Technical field
This application involves wireless communication technology field more particularly to a kind of flow control policy treating method and apparatus.
Background technique
In asking for Internet engineering task force (The Internet Engineering Task Force, IETF)
It asks and explains in agreement (English: request for comments, RFC) document, Flow Specification is (hereinafter referred to as
FlowSpec) be defined as can be applied to Internet protocol (InternetProtocol, IP) flow by several matching rule (examples
Such as: source address, destination address, port, source port, destination port, protocol type) the n tuple formed.Pass through the portion FlowSpec
The flow control policy of administration can accurately match attack traffic, while there are many selections to act to attack traffic: abandon, limit
Speed, flow redirection etc., are defence refusal service (Denial of service, DoS) and distributed denial of service
The effective ways of (Distributed Denial of service, DDoS) attack.
By the multi-protocols extended capability of Border Gateway Protocol (Border Gateway Protocol, BGP),
FlowSpec flow control policy can be distributed in the equipment of other configurations bgp protocol, and the stream issued as Forwarding plane
Control strategy is measured, the flow of the attack source of DoS/DDoS attack is initiated in limitation.BGP is supported in autonomous system (Autonomous
System, AS) in and across autonomous system distribution routing, it can be achieved that realization is to attack traffic in the equipment closest to attack source
Filtering and control reduce influence of the attack traffic to forwarded performance to the greatest extent.
When some equipment receives the FlowSpec of its External BGP (External BGP, EBGP) neighbours transmission
When the mode that flow control policy and the FlowSpec flow control policy take flow to redirect attack traffic, such as it will attack
Hit flow and be redirected to specific next hop address, need to carry out the next hop address that is redirected at this time validity checking with
Determine the validity and legitimacy of the FlowSpec flow control policy.The FlowSpec flow control of validity checking is not passed through
Strategy will not come into force.The validity checking is carried out by receiving the BGP module in the equipment of FlowSpec flow control policy
, it is desirable that there are the best match of the next hop address to route (i.e. the next hop address is reachable), and the next hop address is most
Good matching routing is a BGP routing, and the nearest autonomous system that the best match is routed across is flowed with the FlowSpec is sent
Autonomous system where measuring the ebgp neighbor of control strategy is identical.
From the point of view of the rule of validity checking, as long as subsequent have protocol type to change for the singlecast router of BGP, have
The validity checking result that may cause FlowSpec flow control policy changes.Therefore there is BGP singlecast router hair every time
Changing, it is necessary to be that the FlowSpec flow control policy that flow redirects re-starts legitimacy inspection to all control strategies
It looks into.
Since the validity checking of FlowSpec flow control policy needs to be traversed for the entire unicast routing table of inquiry BGP,
Therefore, when FlowSpec flow control policy is relatively more, and when the BGP unicast routing table singlecast router that includes is more, legitimacy
Inspection can expend a large amount of system resource, such as central processing unit (Central Processing Unit, CPU) resource and memory
Resource etc., causes equipment performance to decline, and influences the progress of regular traffic.
To reduce the influence to equipment performance, existing method is usually to enable cycle timer, regular (60 seconds such as every)
It checks whether there is BGP singlecast router to change, a legitimacy is re-started according to newest BGP unicast routing table if having
It checks.In this way, it is assumed that in a cycle as defined in cycle timer, 1000 variations are had occurred in BGP singlecast router altogether, finally
Also a validity checking need to only be carried out.
But often having the variation of BGP singlecast router, the method for above-mentioned enabling cycle timer requires to wait certain time length
It can be carried out validity checking, cause validity checking convergence slow；And often there is BGP singlecast router to change, it is still necessary to all
Control strategy is that the FlowSpec flow control policy that flow redirects re-starts validity checking, and treatment effeciency is low.
Summary of the invention
In view of this, the application provides a kind of flow control policy treating method and apparatus, to solve in the prior art
It enables and restrains slow problem when cycle timer carries out validity checking to FlowSpec flow control policy, and solve often to have
The variation of BGP singlecast router needs to be that the FlowSpec flow control policy that flow redirects re-starts conjunction to all control strategies
Method inspection leads to the problem that treatment effeciency is low.
Specifically, the application is achieved by the following technical solution:
For the application in a first aspect, providing a kind of flow control policy processing method, the method is applied to operation BGP's
The network equipment, which comprises
The BGP module of the network equipment receives the FlowSpec flow control that the ebgp neighbor of the network equipment is sent
Strategy；
The BGP module is determining that the FlowSpec flow control policy is specified for specified data flow to be redirected to
Next hop address when, the next hop address is sent to the iteration module of the network equipment；
The BGP module receives the iteration result change notification that the iteration module is sent, and the iteration result variation is logical
Know by the iteration module the accessibility of the next hop address change or the next hop address best match
Transmission when routing changes；
The BGP module re-starts legitimacy inspection to the next hop address according to the iteration result change notification
It looks into, according to FlowSpec flow control policy described in validity checking result treatment.
The application second aspect, provides a kind of flow control policy processing method, and the method is applied to operation BGP's
The network equipment, which comprises
The iteration module of the network equipment receives the next hop address that the BGP module of the network equipment is sent；
When any bar routes and changes, the iteration module judges the accessibility of the next hop address and described next
Whether the best match routing for jumping address changes；
It is described when the best match routing of the accessibility or the next hop address of the next hop address changes
Iteration module to the BGP module send iteration result change notification so that the BGP module to the next hop address again
Carry out validity checking.
The application third aspect provides a kind of flow control policy processing unit, and the network applied to operation BGP is set
It is standby, have the function of realizing BGP module in the above method.The function can also be held by hardware realization by hardware
The corresponding software realization of row.The hardware or software include one or more modules corresponding with above-mentioned function or unit.
In a kind of possible implementation, described device includes:
First receiving unit, the FlowSpec flow control plan that the ebgp neighbor for receiving the network equipment is sent
Slightly；
Transmission unit, for determining the FlowSpec flow control policy for specified data flow to be redirected to finger
When fixed next hop address, the next hop address is sent to the iteration module of the network equipment；
Second receiving unit, the iteration result change notification sent for receiving the iteration module, the iteration result
Change notification by the iteration module the accessibility of the next hop address change or the next hop address most
Transmission when good matching routing changes；
Processing unit, for re-starting legitimacy inspection to the next hop address according to the iteration result change notification
It looks into, according to FlowSpec flow control policy described in validity checking result treatment.
In alternatively possible implementation, described device includes processor, network interface and for storing the processing
The memory of device executable instruction, it is mutual by bus system between the memory, the network interface and the processor
Connection；The processor is for performing the following operations:
The FlowSpec flow control policy sent by the ebgp neighbor that the network interface receives the network equipment；
When determining that the FlowSpec flow control policy is used to specified data flow being redirected to specified next hop address, by institute
State the iteration module that next hop address is sent to the network equipment；And it receives the iteration result that the iteration module is sent and becomes
Change notice, the iteration result change notification by the iteration module the accessibility of the next hop address change or
Transmission when the best match routing of the next hop address changes；According to the iteration result change notification to described next
It jumps address and re-starts validity checking, according to FlowSpec flow control policy described in validity checking result treatment.
The application fourth aspect provides a kind of flow control policy processing unit, and the network applied to operation BGP is set
It is standby, have the function of realizing iteration module in the above method.The function can also be held by hardware realization by hardware
The corresponding software realization of row.The hardware or software include one or more modules corresponding with above-mentioned function or unit.
In a kind of possible implementation, described device includes:
Receiving unit, the next hop address that the BGP module for receiving the network equipment is sent；
Judging unit, for any bar route change when, judge the next hop address accessibility and it is described under
Whether the best match routing of one jump address changes；
Transmission unit, for determining the accessibility or the next hop address of the next hop address in the judging unit
Best match routing when changing, Xiang Suoshu BGP module sends iteration result change notification, so that the BGP module pair
The next hop address re-starts validity checking.
In alternatively possible implementation, described device includes processor and the processor is executable to be referred to for storing
The memory of order is connected with each other between the memory and the processor by bus system；The processor is for executing
It operates below:
Receive the next hop address that the BGP module of the network equipment is sent；When any bar routes and changes, described in judgement
Whether the best match routing of the accessibility of next hop address and the next hop address changes；In the next-hop
When the best match routing of the accessibility of location or the next hop address changes, Xiang Suoshu BGP module sends iteration result
Change notification, so that the BGP module re-starts validity checking to the next hop address.
By the above technical scheme of the application, realized based on route iteration function to FlowSpec flow control policy
Redirection next hop address quick inspection, a large amount of unnecessary FlowSpec flow control policy when reducing routing variation
Traversing operation, alleviate unnecessary system resource for the network equipment and occupy.And it is provided by the present application when routing variation
Method can find the FlowSpec flow control policy influenced by routing variation in real time, carry out validity checking, in time for net
Network equipment provides higher performance.
Detailed description of the invention
Fig. 1 is the relation schematic diagram of EBGP, IBGP and IGP in the prior art；
Fig. 2 is a kind of flow chart of flow control policy processing method provided by the embodiments of the present application；
Fig. 3 is a kind of schematic diagram for illustrating AS path attribute information provided by the embodiments of the present application；
Fig. 4 is the schematic diagram of an embodiment provided by the embodiments of the present application；
Fig. 5 is a kind of structural schematic diagram of flow control policy processing unit provided by the embodiments of the present application；
Fig. 6 is the structural schematic diagram of another flow control policy processing unit provided by the embodiments of the present application.
Specific embodiment
Example embodiments are described in detail here, and the example is illustrated in the accompanying drawings.Following description is related to
When attached drawing, unless otherwise indicated, the same numbers in different drawings indicate the same or similar elements.Following exemplary embodiment
Described in embodiment do not represent all embodiments consistent with the application.On the contrary, they be only with it is such as appended
The example of the consistent device and method of some aspects be described in detail in claims, the application.
It is only to be not intended to be limiting the application merely for for the purpose of describing particular embodiments in term used in this application.
It is also intended in the application and the "an" of singular used in the attached claims, " described " and "the" including majority
Form, unless the context clearly indicates other meaning.It is also understood that term "and/or" used herein refers to and wraps
It may be combined containing one or more associated any or all of project listed.
It will be appreciated that though various information, but this may be described using term first, second, third, etc. in the application
A little information should not necessarily be limited by these terms.These terms are only used to for same type of information being distinguished from each other out.For example, not departing from
In the case where the application range, the first information can also be referred to as the second information, and similarly, the second information can also be referred to as
One information.Depending on context, word as used in this " if " can be construed to " ... when " or " when ...
When " or " in response to determination ".
Hereinafter, the part term in the application is explained.
" BGP ": being a kind of dynamic routing protocol between autonomous system.Autonomous system is to possess same routing plan
Slightly, the set of router run under same technical management department.When BGP is run on inside same autonomous system, referred to as
IBGP, when BGP is run between different autonomous system, referred to as EBGP.For example, in Fig. 1, it is assumed that the road R1, R2 and R3 Jun Shi BGP
By device, R4 is non-bgp router, and since R1 and R2 belongs to the same autonomous system, IBGP, R2 are run between R1 and R2
It is the IBGP neighbours of R1；Since R1 belongs to different autonomous systems from R3, EBGP is run between R1 and R3, R3 is R1
Ebgp neighbor；And Interior Gateway Protocol (Interior Gateway Protocol, IGP) is then run between R1 and R4, R4 is R1
IGP neighbours.
" best match routing " refers to the routing to match according to longest match principle and some address.Specifically, address X
Best match routing Y meet the following conditions: 1) route Y match address X, i.e. address X be included in routing Y network segment in；2) road
By Y be all match address X routing subnet mask it is longest.For example, if inquiry 192.168.20.19 has found two matchings
Address 192.168.20.16/28 and 192.168.0.0/16, due to the former subnet mask (/ 28) than the latter subnet mask
(/ 16) long, therefore 192.168.20.16/28 is the best match routing of 192.168.20.19.
Technical scheme is illustrated with each embodiment with reference to the accompanying drawings of the specification.
At present in the case where BGP routes case of frequent changes, needing to be traversed for all control strategies is what flow redirected
FlowSpec flow control policy re-starts validity checking to redirect address, this can expend a large amount of system resource.This
The method that application provides, can be just for when routing variation by borrowing the existing route iteration function of network device internal
The FlowSpec flow control policy influenced by routing variation carries out validity checking, avoids to a large amount of unnecessary
The traversing operation of FlowSpec flow control policy alleviates unnecessary system resource for the network equipment and occupies.And work as road
Method provided by the present application can find the FlowSpec flow control policy influenced by routing variation in real time when by changing, and and
It is slow to solve the problems, such as that validity checking caused by cycle timer restrains for Shi Jinhang validity checking.
Flow control policy processing method provided by the present application is applicable to run the network equipment of BGP, which sets
It is standby to can be router, interchanger, optical transfer network (optical transport network, OTN) equipment, Packet Transport Network
(packet transport network, PTN) equipment, wavelength-division multiplex (wavelength division multiplexing,
WDM) equipment or server.
When the network equipment executes flow control policy processing method provided by the present application, following three internal modes are related generally to
The interaction of block.
BGP module such as receives the BGP unicast road from ebgp neighbor or IBGP neighbours for sending and receiving BGP message
By.It can be also used for receiving the FlowSpec flow control policy that the ebgp neighbor of the network equipment is sent in this application, and
Ebgp neighbor and the IBGP neighbours of the network equipment will be sent to by the FlowSpec flow control policy of validity checking.
Iteration module, alternatively referred to as route iteration module, for executing route iteration function.In BGP, due to agreement sheet
The particularity of body, the next hop address for the routing that it is generated may not be the neighbours that current router is connected directly.Such case
Under, in order to which message is correctly forwarded, it is necessary to first find a directly reachable address, pass through this address arrival road
By the next-hop indicated in table.In above process, iteration module may be implemented multi-stage iteration, first order iteration be find by
The routing to match according to longest match principle and the next hop address, it is assumed that the routing found is routing A, then the second level changes
Generation is the routing B that matches of next hop address found according to longest match principle and routing A, and so on can carry out it is more
Secondary iteration, until finding a direct-connected interface IP address.The process of direct-connected interface IP address is found just by the next hop address of routing
It is route iteration (recursion).In the application, the first order iteration result of iteration module is exactly borrowed, to realize pair
The validity checking of the redirection next hop address of FlowSpec flow control policy.
Flow processing module, for FlowSpec flow control policy to be come into force or failed according to the instruction of BGP module
Processing, and according to the FlowSpec flow control policy matching attack traffic to come into force and following at least one is executed to attack traffic
A movement: it abandons, speed limit or flow redirect.
The FlowSpec flow control policy that the network equipment receives can come from the ebgp neighbor of the network equipment, can also be with
IBGP neighbours from the network equipment.Below by Fig. 2, how to handle the FlowSpec flow control from ebgp neighbor
For strategy, method provided by the present application is described.
Certainly, processing the FlowSpec flow control policy from IBGP neighbours can also use method shown in Fig. 2, two
The main distinction of person is, when carrying out validity checking to the FlowSpec flow control policy from IBGP neighbours, is not necessarily to
Check the redirection next hop address that the FlowSpec flow control policy includes best match routing passed through recently from
Control system, if identical with the autonomous system where the IBGP neighbours for sending the FlowSpec flow control policy.
Referring to fig. 2, Fig. 2 is method flow diagram provided by the present application.As shown in Fig. 2, the process can comprise the following steps that
Step 201: the BGP module of the network equipment receives the FlowSpec flow that the ebgp neighbor of the network equipment is sent
Control strategy.
Step 202: the BGP module is determining the FlowSpec flow control policy for resetting specified data flow
When to specified next hop address, the next hop address is sent to the iteration module of the network equipment.
Wherein, the BGP module can be by the rope of the next hop address and the FlowSpec flow control policy
Draw and is sent to the iteration module together.The index is for identifying the next hop address and the FlowSpec flow control
Incidence relation between strategy.For example, the index can be the storage location for being used to indicate FlowSpec flow control policy
Pointer, be also possible in advance for FlowSpec flow control policy distribution unique identification.
The iteration module, can be in existing iteration knot after receiving the next hop address that the BGP module is sent
The matching iteration result that inquiry matches with the next hop address in fruit record, the matching iteration result are used to indicate described
Whether next hop address reachable and the next hop address up to when the next hop address best match route.
If inquiring the matching iteration result, show that the next hop address is closed being iterated module before
Note, the matching iteration result inquired directly can be sent to the BGP module by the iteration module, so that the BGP mould
Block is based on the iteration result and carries out validity checking to the next hop address, and the process of validity checking can refer to following
The description of step 205.
If not inquiring the matching iteration result, show that the next hop address is closed not being iterated module before
Note, the iteration module can call route iteration process, obtain iteration result corresponding with the next hop address, and will obtain
The iteration result got is sent to the BGP module, and the iteration result that will acquire is added to the existing iteration knot
In fruit record.Wherein, the route iteration process can be realized by searching for the global routing table of present networks equipment, overall situation routing
Table includes the routing of various agreements, for example may include BGP routing and IGP routing.
Step 203: any bar route change when, the iteration module judge the next hop address accessibility and
Whether the best match routing of the next hop address changes.
The routing variation is embodied in: routing update, routing, which are deleted or routed, increases three kinds of situations newly.For example, working as BGP
Module receives the new BGP singlecast router of ebgp neighbor or IBGP neighbours' transmission and determines that the new BGP singlecast router is effective
When (i.e. the next hop address of the new BGP singlecast router is reachable) or the next hop address of stored BGP singlecast router
When accessibility changes, it all can be considered that routing is changed.
Specifically, the next hop address may have following six kinds of situations when any bar routes and changes:
First, the next hop address becomes unreachable from reachable；
Second, the next hop address becomes reachable from unreachable, and the best match of the next hop address routes hair
Changing；
Third, the next hop address become reachable from unreachable, and the best match routing of the next hop address is not
It changes；
4th, the next hop address be always maintained at it is reachable, and the next hop address best match routing become
Change；
5th, the next hop address be always maintained at it is reachable, and the next hop address best match routing do not occur
Variation；
6th, the next hop address is always maintained at unreachable.
Step 204: becoming in the best match routing of the accessibility or the next hop address of the next hop address
When change, the iteration module sends iteration result change notification to the BGP module.
Specifically, it is logical that the iteration module can send iteration result variation to BGP module at above-mentioned first four kinds
Know, and carries the rope of FlowSpec flow control policy corresponding with the next hop address in iteration result change notification
Draw, corresponding come into force or fail in order to which the BGP module pair FlowSpec flow control policy corresponding with the index is made
Judgement.
Specifically, in the first scenario, i.e., any bar routing variation causes the next hop address to be become not from reachable
When reachable, the inaccessible information of the next hop address can be carried and be sent in iteration result change notification by the iteration module
To the BGP module.
In the second and third case, i.e., any bar routing variation causes the next hop address to be become from unreachable
When reachable, the iteration module can obtain best match routing of the next hop address after any bar routing variation, and will
The information carrying that the best match of the acquisition routes and the next hop address is reachable is sent in iteration result change notification
To the BGP module.
In the fourth case, i.e., any bar routing variation does not influence the accessibility of the next hop address but causes described
When the best match routing of next hop address changes, the iteration module can obtain the next hop address on any bar road
It is taken by the best match routing after changing, and by the reachable information of the best match of acquisition routing and the next hop address
Band is sent to the BGP module in iteration result change notification.
Step 205: after the BGP module receives the iteration result change notification that the iteration module is sent, according to institute
It states iteration result change notification and validity checking is re-started to the next hop address, according to validity checking result treatment institute
State FlowSpec flow control policy.
Wherein, the realization process of validity checking is as follows:
A, when determining that the next hop address is unreachable according to the iteration result change notification, the BGP module can
Do not pass through validity checking with the determination next hop address, no longer needs to the validity checking for carrying out other projects.
If b, the next hop address is reachable after routing variation, the BGP module is logical from iteration result variation
Know the best match routing for obtaining the next hop address after routing variation, and continues to judge the association of best match routing
Discuss whether type is BGP.If it is not, can then determine that the next hop address does not pass through validity checking, no longer need to carry out it
The validity checking of its project.
Wherein, BGP module can know the agreement that the best match routes from the routing iinformation that the best match routes
Type.
If c, the next hop address is reachable after routing variation, and the association of the best match routing of the next hop address
View type is BGP, then the BGP module continue to judge nearest autonomous system that the best match is routed across whether with send institute
Autonomous system where stating the ebgp neighbor of FlowSpec flow control policy is identical, if it is not, then the BGP module can be true
The fixed next hop address does not pass through validity checking.
Wherein, BGP module can know the best match from the path AS (AS_PATH) attribute that the best match routes
The nearest autonomous system being routed across.
AS path attribute has recorded certain in a certain order and routes to be passed through from local to destination address all No. AS.
When BGP by an advertising of route to other AS when, will be local No. AS addition in the foremost of AS path list.Receive this road
By bgp router according to AS path attribute it is known that the AS for going destination address to be passed through.The phase nearest from local AS
Adjacent No. AS comes front, other No. AS is arranged successively in order.
For example, the AS path attribute information for the routing that R5 is received is (30,20,10) in Fig. 3, show the routing
It is issued from AS 10, successively have passed through AS 20 and AS 30, eventually arrive at the R5 positioned at AS 50.Another routing that R5 is received
AS path attribute information be (40,10), show the routing from AS 10 issue, by AS 40, eventually arrive at R5.For the road AS
For diameter attribute information is the routing of (30,20,10), which is AS 30, for the path AS
For attribute information is the routing of (40,10), which is AS 40.
If d, the next hop address is reachable after routing variation, and the association of the best match routing of the next hop address
View type is BGP, and the nearest autonomous system that is routed across of the best match and sends the FlowSpec flow control policy
Ebgp neighbor where autonomous system it is identical, then the BGP module can determine the next hop address pass through legitimacy examine
It looks into.
Optionally, during above-mentioned validity checking BGP module also projects of adjustable validity checking sequence,
For example, BGP module can first judge the accessibility of next hop address, the best match routing of the next hop address is then judged again
AS path attribute, finally judge the best match routing protocol type.
Later, when according to validity checking result treatment FlowSpec flow control policy, if the next hop address
Not by validity checking, then the BGP module determines corresponding to the index carried in the iteration result change notification
The failure of FlowSpec flow control policy.If the next hop address determines the rope by validity checking, the BGP module
Draw corresponding FlowSpec flow control policy to come into force.
When FlowSpec flow control policy is become by failure to come into force, the BGP module is indicated in the network equipment
Flow processing module enters the flow of the network equipment according to the FlowSpec flow control policy processing, and will be described
FlowSpec flow control policy is sent to the IBGP neighbours of the network equipment and except the transmission FlowSpec flow control
Other ebgp neighbors except the ebgp neighbor of strategy.
When FlowSpec flow control policy becomes failure by coming into force, the BGP module indicates the flow processing module
The FlowSpec flow control policy is deleted, and is notified described in IBGP neighbours and the ebgp neighbor deletion of the network equipment
FlowSpec flow control policy.
FlowSpec is flowed in conclusion technical solution provided by the present application borrows existing route iteration function and realizes
The quick inspection for measuring the redirection next hop address of control strategy, largely unnecessary FlowSpec flows when reducing routing variation
The traversing operation of control strategy is measured, unnecessary system resource is alleviated for the network equipment and occupies.And the sheet when routing variation
The method that application provides can find the FlowSpec flow control policy influenced by routing variation in real time, carry out legitimacy in time
It checks, provides higher performance for the network equipment.
In order to illustrate more clearly of the technical solution of the application, below by one embodiment to above-mentioned technical proposal do into
The explanation of one step, it should be noted that this embodiment is only a kind of implementation of the application, does not constitute the limit to the application
It is fixed.
Referring to fig. 4, R1 belongs to AS 10, and R2 belongs to AS 20, and R3 belongs to AS 30, and R1 and R2 are ebgp neighbor, R2
It is ebgp neighbor with R3.
1, R3 has sent the FlowSpec flow control for redirecting that next hop address is 173.1.1.8 to the BGP module of R2
Strategy.
2, R2 examines the legitimacy for the next hop address 173.1.1.8 that the FlowSpec flow control policy carries
It looks into.173.1.1.8 is sent to the iteration module of R2 by the BGP module of R2, it is assumed that iteration module is not found and 173.1.1.8 phase
The routing matched, then BGP module thinks that 173.1.1.8 does not pass through validity checking, which will not be
It comes into force on R2.
3, R3 to the BGP module of R2 have sent a 173.1.1.0/24 BGP routing (AS path attribute be 30, it is next
Jump address is 23.1.1.3).
4, the BGP module of R2 by the routing change notification to iteration module after, iteration module call route iteration process
It was found that 173.1.1.8 iterates to 173.1.1.0/24, (the next hop address 23.1.1.3 of this routing can iterate to local direct-connected
On interface IP address 23.1.1.0/24) in this BGP routing, then iteration module by the reachable message of 173.1.1.8, iterate to
Routing 173.1.1.0/24 be sent to BGP module.
5, R2 BGP module determine routing 173.1.1.0/24 be BGP routing, and 173.1.1.0/24 this be routed across
Nearest autonomous system marked as 30, it is identical as the autonomous system of R3, it is thus determined that 173.1.1.8 meet legitimacy inspection
It looks into.
6, R2 is 173.1.1.8's redirection next hop address by local direct-connected interface IP address 23.1.1.0/24
FlowSpec flow control policy is transmitted to R1, at the same to R1 forward routing 173.1.1.0/24 (AS path attribute be (20,
30), next hop address 12.1.1.2).
7, R1 examines the legitimacy for the next hop address 173.1.1.8 that the FlowSpec flow control policy carries
It looks into.The iteration module discovery 173.1.1.8 of R1 iterates to 173.1.1.0/24 (the next hop address 12.1.1.2 meeting of this routing
Iterate on local direct-connected interface IP address 12.1.1.0/24) in this BGP routing, then iteration module by 173.1.1.8 can
BGP module is sent to up to message, the routing 173.1.1.0/24 iterated to.
8, R1 BGP module determine routing 173.1.1.0/24 be BGP routing, and 173.1.1.0/24 this be routed across
Nearest autonomous system marked as 20, it is identical as the autonomous system of R2, it is thus determined that 173.1.1.8 meet legitimacy inspection
It looks into.
Optionally, if this routing of the received 173.1.1.0/24 of R1 is not transmitted directly to R1 by R2, by R2
The R4 being first sent in AS 40, then R1 is transmitted to by R4, then the BGP module of R1 can determine whether out in above-mentioned step 8
173.1.1.0/24 this nearest autonomous system being routed across marked as 40, with send the FlowSpec flow control plan
The autonomous system of R2 slightly is not identical, so that it is determined that 173.1.1.8 does not meet validity checking.
Method provided by the present application is described above.Device provided by the present application is described below:
For device embodiment, since it corresponds essentially to embodiment of the method, so related place is referring to method reality
Apply the part explanation of example.The apparatus embodiments described above are merely exemplary, wherein described be used as separation unit
The unit of explanation may or may not be physically separated, and component shown as a unit can be or can also be with
It is not physical unit, it can it is in one place, or may be distributed over multiple network units.It can be according to actual
The purpose for needing to select some or all of the modules therein to realize application scheme.Those of ordinary skill in the art are not paying
Out in the case where creative work, it can understand and implement.
Based on the flow control policy processing method that present invention provides, further embodiment of this invention provides one
Kind flow control policy processing unit 500, the device 500 are applied in the network equipment 50 of operation BGP, the network equipment 50
Hardware environment typically at least include CPU, memory and nonvolatile memory, be also possible that various forwarding cores certainly
The hardware such as piece, I/O interface.Taking software implementation as an example, the present embodiment is by the CPU of the network equipment 50 by nonvolatile memory
In corresponding machine readable instructions be read into memory operation so that the device 500 complete preceding method embodiment in BGP module
The step of completed, please refers to shown in Fig. 5, which includes:
First receiving unit 501, the FlowSpec flow control that the ebgp neighbor for receiving the network equipment is sent
Strategy.
Transmission unit 502, for determining the FlowSpec flow control policy for redirecting specified data flow
When to specified next hop address, the next hop address is sent to the iteration module of the network equipment.
Second receiving unit 503, the iteration result change notification sent for receiving the iteration module, the iteration knot
Fruit change notification is changed in the accessibility of the next hop address by the iteration module or in the next hop address
Transmission when best match routing changes.
Processing unit 504, it is legal for being re-started according to the iteration result change notification to the next hop address
Property inspection, according to FlowSpec flow control policy described in validity checking result treatment.
Optionally, validity checking is being re-started to the next hop address according to the iteration result change notification
When, the processing unit 504 is specifically used for:
When determining that the next hop address is unreachable according to the iteration result change notification, with determining the next-hop
Location does not pass through validity checking；
When according to the iteration result change notification determine the next hop address up to when,
The best match routing that the next hop address is obtained from the iteration result change notification, in the best of acquisition
Match that the nearest autonomous system that is routed across is identical with the autonomous system where the ebgp neighbor and the best match of the acquisition
When the protocol type of routing is BGP, determine that the next hop address passes through validity checking, otherwise, it determines the next-hop
Location does not pass through validity checking.
Optionally, when according to FlowSpec flow control policy described in validity checking result treatment, the processing is single
Member 504 is specifically used for:
If the next hop address does not pass through validity checking, it is determined that the FlowSpec flow control policy failure；
If the next hop address passes through validity checking, it is determined that the FlowSpec flow control policy comes into force.
Correspondingly, the transmission unit 502 is also used to:
When the FlowSpec flow control policy is become by failure to come into force, the flow processing in the network equipment is indicated
Module enters the flow of the network equipment according to the FlowSpec flow control policy processing, and by the FlowSpec
Flow control policy is sent to the Internal BGP IBGP neighbours of the network equipment and in addition to the ebgp neighbor
Other ebgp neighbors；
When the FlowSpec flow control policy becomes failure by coming into force, indicate described in the flow processing module deletion
FlowSpec flow control policy, and the IBGP neighbours of the network equipment and ebgp neighbor is notified to delete the FlowSpec
Flow control policy.
Based on the flow control policy processing method that present invention provides, further embodiment of this invention provides one
Kind flow control policy processing unit 600, the device 600 and above-mentioned apparatus 500 are located at the network equipment 50 of the same operation BGP
In, the hardware environment of the network equipment 50 typically at least includes CPU, memory and nonvolatile memory, may be used also certainly
It can include the hardware such as various forwarding chips, I/O interface.Taking software implementation as an example, the present embodiment passes through the CPU of the network equipment 50
Machine readable instructions corresponding in nonvolatile memory are read into memory operation, so that the device 600 completes aforementioned side
The step of iteration module is completed in method embodiment please refers to shown in Fig. 6, which includes:
Receiving unit 601, the next hop address that the BGP module for receiving the network equipment is sent.
Judging unit 602, for when any bar routes and changes, judging the accessibility of the next hop address and described
Whether the best match routing of next hop address changes.
Transmission unit 603, for determining the accessibility of the next hop address or described next in the judging unit 602
When the best match routing of jump address changes, Xiang Suoshu BGP module sends iteration result change notification, so that the BGP
Module re-starts validity checking to the next hop address.
Optionally, the transmission unit 603 is specifically used for:
If any bar routing variation causes the next hop address by unreachable up to change, not by the next hop address
Reachable information carrying is sent to the BGP module in iteration result change notification；
If any bar routing variation causes the next hop address to become reachable by unreachable, the next hop address is obtained
Best match routing after any bar routing variation, and can by the best match of acquisition routing and the next hop address
The information carrying reached is sent to the BGP module in iteration result change notification；
If any bar routing variation does not influence the accessibility of the next hop address but leads to the next hop address most
Good matching routing changes, then obtains best match routing of the next hop address after any bar routing variation, and will
The information carrying that the best match of the acquisition routes and the next hop address is reachable is sent in iteration result change notification
To the BGP module.
Optionally, described device 600 further includes query unit；The query unit is specifically used for:
After the next hop address that the receiving unit 601 receives that the BGP module is sent, in existing iteration knot
Match query iteration result in fruit record；The matching iteration result is used to indicate whether the next hop address reachable and institute
State next hop address up to when the next hop address best match route；
If inquiring the matching iteration result, the matching iteration result that the transmission unit 603 will inquire is indicated
It is sent to the BGP module, so that the BGP module, which is based on the iteration result, carries out legitimacy inspection to the next hop address
It looks into；
If not inquiring the matching iteration result, route iteration process is called to obtain corresponding with the next hop address
Iteration result, the iteration result that will acquire is added in the existing iteration result record, and indicates transmissions singly
The iteration result that member 603 will acquire is sent to the BGP module.
The foregoing is merely the preferred embodiments of the application, not to limit the application, all essences in the application
Within mind and principle, any modification, equivalent substitution, improvement and etc. done be should be included within the scope of the application protection.
Claims (14)
1. a kind of flow control policy processing method, which is characterized in that the method is applied to running boundary gateway protocol BGP's
The network equipment, which comprises
What the External BGP ebgp neighbor that the BGP module of the network equipment receives the network equipment was sent
FlowSpec flow control policy；
The BGP module determine the FlowSpec flow control policy for specified data flow is redirected to it is specified under
When one jump address, the next hop address is sent to the iteration module of the network equipment；
The BGP module receives the iteration result change notification that the iteration module is sent, the iteration result change notification by
The iteration module changes in the accessibility of the next hop address or routes in the best match of the next hop address
Transmission when changing；
The BGP module re-starts validity checking to the next hop address according to the iteration result change notification, according to
According to FlowSpec flow control policy described in validity checking result treatment.
2. the method as described in claim 1, which is characterized in that the BGP module is according to the iteration result change notification pair
The next hop address re-starts validity checking
When determining that the next hop address is unreachable according to the iteration result change notification, the next hop address is determined not
Pass through validity checking；
When according to the iteration result change notification determine the next hop address up to when,
The best match routing that the next hop address is obtained from the iteration result change notification, in the best match of acquisition
The nearest autonomous system being routed across is identical with the autonomous system where the ebgp neighbor and the best match of acquisition routing
Protocol type when being BGP, determine the next hop address by validity checking, otherwise, it determines the next hop address is not
Pass through validity checking.
3. method according to claim 1 or 2, which is characterized in that described according to described in validity checking result treatment
FlowSpec flow control policy includes:
If the next hop address does not pass through validity checking, it is determined that the FlowSpec flow control policy failure；
If the next hop address passes through validity checking, it is determined that the FlowSpec flow control policy comes into force.
4. method as claimed in claim 3, which is characterized in that the method further includes:
When the FlowSpec flow control policy is become by failure to come into force, the BGP module is indicated in the network equipment
Flow processing module enters the flow of the network equipment according to the FlowSpec flow control policy processing, and will be described
FlowSpec flow control policy is sent to the Internal BGP IBGP neighbours of the network equipment and except the EBGP
Other ebgp neighbors except neighbours；
When the FlowSpec flow control policy becomes failure by coming into force, the BGP module indicates the flow processing module
Delete the FlowSpec flow control policy, and notify the network equipment IBGP neighbours and except the ebgp neighbor it
Outer other ebgp neighbors delete the FlowSpec flow control policy.
5. a kind of flow control policy processing method, which is characterized in that the method is applied to running boundary gateway protocol BGP's
The network equipment, which comprises
The iteration module of the network equipment receives the next hop address that the BGP module of the network equipment is sent；
When any bar routes and changes, the iteration module judges the accessibility and the next-hop of the next hop address
Whether the best match routing of location changes；
When the best match routing of the accessibility or the next hop address of the next hop address changes, the iteration
Module sends iteration result change notification to the BGP module, so that the BGP module re-starts the next hop address
Validity checking.
6. method as claimed in claim 5, which is characterized in that the iteration module sends iteration result to the BGP module
Change notification includes:
If any bar routing variation causes the next hop address by unreachable up to change, and the next hop address is unreachable
Information carrying the BGP module is sent in iteration result change notification；
If any bar routing variation causes the next hop address to become reachable by unreachable, it is in office to obtain the next hop address
Best match routing after one routing variation, and the best match of acquisition routing and the next hop address is reachable
Information carrying is sent to the BGP module in iteration result change notification；
If any bar routing variation does not influence the accessibility of the next hop address but leads to best of the next hop address
It changes with routing, then obtains best match routing of the next hop address after any bar routing variation, and this is obtained
The information carrying that the best match taken routes and the next hop address is reachable is sent to institute in iteration result change notification
State BGP module.
7. such as method described in claim 5 or 6, which is characterized in that the iteration module is receiving what the BGP module was sent
After next hop address, before any bar routing variation, the method further includes:
The match query iteration result in existing iteration result record；The matching iteration result is used to indicate the next-hop
Whether address reachable and the next hop address up to when the next hop address best match route；
If inquiring the matching iteration result, the matching iteration result inquired is sent to the BGP module, so that institute
It states BGP module and is based on the iteration result to next hop address progress validity checking；
If not inquiring the matching iteration result, route iteration process is called to obtain change corresponding with the next hop address
Generation as a result, and the iteration result that will acquire be sent to the BGP module, and the iteration result that will acquire be added to it is described
In existing iteration result record.
8. a kind of flow control policy processing unit, which is characterized in that described device is applied to running boundary gateway protocol BGP's
The network equipment, described device include:
First receiving unit, the FlowSpec that the External BGP ebgp neighbor for receiving the network equipment is sent
Flow control policy；
Transmission unit, for determining that the FlowSpec flow control policy is specified for specified data flow to be redirected to
When next hop address, the next hop address is sent to the iteration module of the network equipment；
Second receiving unit, the iteration result change notification sent for receiving the iteration module, the iteration result variation
Notice is changed in the accessibility of the next hop address by the iteration module or at best of the next hop address
Transmission when changing with routing；
Processing unit, for re-starting validity checking to the next hop address according to the iteration result change notification,
According to FlowSpec flow control policy described in validity checking result treatment.
9. device as claimed in claim 8, which is characterized in that the processing unit is specifically used for:
When determining that the next hop address is unreachable according to the iteration result change notification, the next hop address is determined not
Pass through validity checking；
When according to the iteration result change notification determine the next hop address up to when,
The best match routing that the next hop address is obtained from the iteration result change notification, in the best match of acquisition
The nearest autonomous system being routed across is identical with the autonomous system where the ebgp neighbor and the best match of acquisition routing
Protocol type when being BGP, determine the next hop address by validity checking, otherwise, it determines the next hop address is not
Pass through validity checking.
10. device as claimed in claim 8 or 9, which is characterized in that the processing unit is specifically used for:
If the next hop address does not pass through validity checking, it is determined that the FlowSpec flow control policy failure；
If the next hop address passes through validity checking, it is determined that the FlowSpec flow control policy comes into force.
11. device as claimed in claim 10, which is characterized in that the transmission unit is also used to:
When the FlowSpec flow control policy is become by failure to come into force, the flow processing module in the network equipment is indicated
Enter the flow of the network equipment according to the FlowSpec flow control policy processing, and by the FlowSpec flow
Control strategy is sent to the Internal BGP IBGP neighbours of the network equipment and its in addition to the ebgp neighbor
Its ebgp neighbor；
When the FlowSpec flow control policy becomes failure by coming into force, indicate described in the flow processing module deletion
FlowSpec flow control policy, and notify the IBGP neighbours of the network equipment and other in addition to the ebgp neighbor
Ebgp neighbor deletes the FlowSpec flow control policy.
12. a kind of flow control policy processing unit, which is characterized in that described device is applied to running boundary gateway protocol BGP
The network equipment, described device includes:
Receiving unit, the next hop address that the BGP module for receiving the network equipment is sent；
Judging unit, for judging the accessibility and the next-hop of the next hop address when any bar routes and changes
Whether the best match routing of address changes；
Transmission unit, accessibility or the next hop address for determining the next hop address in the judging unit are most
When good matching routing changes, Xiang Suoshu BGP module sends iteration result change notification, so that the BGP module is to described
Next hop address re-starts validity checking.
13. device as claimed in claim 12, which is characterized in that the transmission unit is specifically used for:
If any bar routing variation causes the next hop address by unreachable up to change, and the next hop address is unreachable
Information carrying the BGP module is sent in iteration result change notification；
If any bar routing variation causes the next hop address to become reachable by unreachable, it is in office to obtain the next hop address
Best match routing after one routing variation, and the best match of acquisition routing and the next hop address is reachable
Information carrying is sent to the BGP module in iteration result change notification；
If any bar routing variation does not influence the accessibility of the next hop address but leads to best of the next hop address
It changes with routing, then obtains best match routing of the next hop address after any bar routing variation, and this is obtained
The information carrying that the best match taken routes and the next hop address is reachable is sent to institute in iteration result change notification
State BGP module.
14. device as described in claim 12 or 13, which is characterized in that described device further includes query unit；The inquiry
Unit is specifically used for:
After the next hop address that the receiving unit receives that the BGP module is sent, recorded in existing iteration result
Middle match query iteration result；Whether the matching iteration result is used to indicate the next hop address reachable and described next
Jump address up to when the next hop address best match route；
If inquiring the matching iteration result, indicate that the matching iteration result inquired is sent to institute by the transmission unit
BGP module is stated, so that the BGP module, which is based on the iteration result, carries out validity checking to the next hop address；
If not inquiring the matching iteration result, route iteration process is called to obtain change corresponding with the next hop address
In generation, is as a result, the iteration result that will acquire is added in the existing iteration result record, and indicates that the transmission unit will
The iteration result got is sent to the BGP module.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201610830975.6A CN106254152B (en) | 2016-09-19 | 2016-09-19 | A kind of flow control policy treating method and apparatus |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201610830975.6A CN106254152B (en) | 2016-09-19 | 2016-09-19 | A kind of flow control policy treating method and apparatus |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN106254152A CN106254152A (en) | 2016-12-21 |
| CN106254152B true CN106254152B (en) | 2019-11-08 |
Family
ID=57600254
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201610830975.6A Active CN106254152B (en) | 2016-09-19 | 2016-09-19 | A kind of flow control policy treating method and apparatus |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN106254152B (en) |
Families Citing this family (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN108259205B (en) * | 2016-12-29 | 2021-05-25 | 新华三技术有限公司 | Route publishing method and network equipment |
| CN108881041A (en) * | 2017-05-15 | 2018-11-23 | 中国移动通信有限公司研究院 | A kind of method and system controlling flow |
| CN112910792B (en) | 2018-08-30 | 2023-06-20 | 华为技术有限公司 | Message processing method, device and related equipment |
| CN112688874B (en) * | 2019-10-18 | 2022-12-16 | 中国移动通信有限公司研究院 | Flow optimization control method, device, equipment and storage medium |
| CN111147478B (en) * | 2019-12-24 | 2022-08-12 | 北京网太科技发展有限公司 | Safety protection method, device and storage medium |
| CN114978563B (en) * | 2021-02-26 | 2024-05-24 | 中国移动通信集团广东有限公司 | Method and device for blocking IP address |
| CN115022165B (en) * | 2022-05-27 | 2023-06-02 | 烽火通信科技股份有限公司 | BGP stream specification effective interface optimization method, device, equipment and storage medium |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101155118A (en) * | 2006-09-27 | 2008-04-02 | 华为技术有限公司 | BGP route processing method and device |
| CN102752205A (en) * | 2012-07-04 | 2012-10-24 | 杭州华三通信技术有限公司 | Route iteration method and device |
| CN103297340A (en) * | 2013-06-07 | 2013-09-11 | 杭州华三通信技术有限公司 | Routing convergence method and device in multi-protocol label switching (MPLS) and border gateway protocol (BGP) networking |
| CN104518899A (en) * | 2013-09-30 | 2015-04-15 | 中国电信股份有限公司 | Network routing traffic simulation method and device |
| CN105376169A (en) * | 2014-08-29 | 2016-03-02 | 中国电信股份有限公司 | Method, router and system for realizing coexistence of inequable-velocity links |
-
2016
- 2016-09-19 CN CN201610830975.6A patent/CN106254152B/en active Active
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101155118A (en) * | 2006-09-27 | 2008-04-02 | 华为技术有限公司 | BGP route processing method and device |
| CN102752205A (en) * | 2012-07-04 | 2012-10-24 | 杭州华三通信技术有限公司 | Route iteration method and device |
| CN103297340A (en) * | 2013-06-07 | 2013-09-11 | 杭州华三通信技术有限公司 | Routing convergence method and device in multi-protocol label switching (MPLS) and border gateway protocol (BGP) networking |
| CN104518899A (en) * | 2013-09-30 | 2015-04-15 | 中国电信股份有限公司 | Network routing traffic simulation method and device |
| CN105376169A (en) * | 2014-08-29 | 2016-03-02 | 中国电信股份有限公司 | Method, router and system for realizing coexistence of inequable-velocity links |
Also Published As
| Publication number | Publication date |
|---|---|
| CN106254152A (en) | 2016-12-21 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN106254152B (en) | A kind of flow control policy treating method and apparatus | |
| US11943136B2 (en) | Advanced preferred path route graph features in a network | |
| US8942106B2 (en) | Method and apparatus for route optimization enforcement and verification | |
| ES2445169T3 (en) | Computer method and program for collaboration between an internet service provider (ISP) and a content distribution system, as well as among several ISPs | |
| EP3148128B1 (en) | Information-centric networking with small multi-path or single-path forwarding state | |
| US7619982B2 (en) | Active probe path management | |
| CN101496348B (en) | Technique for multiple path forwarding of label-switched data traffic | |
| US6968393B1 (en) | Method and apparatus for an attribute oriented routing update | |
| CN102859944B (en) | For the method and apparatus of local application route is provided at DIAMETER Nodes | |
| US9455995B2 (en) | Identifying source of malicious network messages | |
| TWI461030B (en) | Resource Retention Agreement under the condition of fast rerouting | |
| US20130282860A1 (en) | Name-Based Neighbor Discovery and Multi-Hop Service Discovery in Information-Centric Networks | |
| CN106559256B (en) | System and method for eliminating undetected cycles of interest in information-centric networks | |
| US11632322B2 (en) | Preferred path route graphs in a network | |
| JP2018191290A (en) | Method, apparatus, and network system for realizing load balancing | |
| US20150109934A1 (en) | Internet protocol routing mehtod and associated architectures | |
| CN101420384A (en) | Method for realizing self-curing protection in ECMP region | |
| EP1465376A2 (en) | Prohibit or avoid route mechanims for path setup | |
| CN112995040A (en) | Message path tracing method and device based on equipment identification calculation | |
| CN104168194B (en) | Cluster network controlling of path thereof, equipment and cluster network system | |
| US20250219928A1 (en) | Intra-Domain Source Address Validation Using IGPs | |
| RU2675212C1 (en) | Adaptive load balancing during package processing | |
| CN111327545B (en) | Data transmission method, device, network system and switch | |
| CN107566298A (en) | A kind of method and apparatus for generating list item | |
| JP5648560B2 (en) | Traffic engineering apparatus, traffic engineering method and program |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| CB02 | Change of applicant information | ||
| CB02 | Change of applicant information |
Address after: 310052 Binjiang District Changhe Road, Zhejiang, China, No. 466, No. Applicant after: Xinhua three Technology Co., Ltd. Address before: 310052 Binjiang District Changhe Road, Zhejiang, China, No. 466, No. Applicant before: Huasan Communication Technology Co., Ltd. |
|
| GR01 | Patent grant | ||
| GR01 | Patent grant |