CN111464455A - Message output method and device - Google Patents

Abstract

The present application provides a method and device for outputting a packet, which is applied to a distribution network device. The method includes: matching a received packet to each policy in a preset policy set, and each policy in the preset policy set Including rules and actions; acquiring the policy identifier of at least one policy in which the rule is matched by the message and the corresponding action is the sampling output; determining whether to output according to the current flag bit of the sampling bitmap corresponding to the policy identifier of the at least one policy The message; if it is determined to output the message, output the message through the output port corresponding to the policy identifier of the at least one policy in the correspondence between the policy identifier and the output port. By applying the embodiments of the present application, the message output effect is better, and the flexibility is better.

Description

Message output method and device

technical field

The present application relates to the technical field of network communication, and particularly designs a message output method and device.

Background technique

After the distribution network device in the private network receives the packet, it will first match each preset policy, and each policy includes rules and actions. If the packet matches the rules of at least one policy, it will follow at least one policy. The action corresponding to the rule processes the message, and if the corresponding action is output, the message is output to the corresponding service system. Among them, the output can include two types: full flow output and sampling output. Full flow output needs to monitor all packets, so all packets need to be output; sampling output only needs to monitor part of the packets, so it can be output according to the sampling bitmap , after processing a message, the sampling bitmap is shifted by one bit, the current flag bit is 1, the message is output, and the current flag bit is 0, the message is not output.

Since a service system can set multiple policies, and different policies can correspond to different sampling bitmaps, when a packet hits multiple policies of a service system, the priority can only be selected according to the priority of each policy. The sampling bitmap corresponding to the policy with the highest level is used as the global sampling bitmap, and then whether to output the packet is determined according to the global sampling bitmap, but it cannot be determined whether to output the packet according to the sampling bitmap of each policy. Therefore, in the above packet output method, when the same packet matches multiple policies, the packet cannot be output according to the sampling bitmap corresponding to each policy, the sampling effect is not good, and the flexibility is poor.

SUMMARY OF THE INVENTION

In view of this, the present application provides a message output method and device to solve the problems of poor sampling effect and poor flexibility in the related art.

Specifically, the application is achieved through the following technical solutions:

A packet output method, applied to a distribution network device, the method comprising:

Matching the received message to each policy in a preset policy set, where each policy in the preset policy set includes a rule and an action;

Obtaining the policy identifier of at least one policy in which the rule is matched by the message and the corresponding action is the sampling output;

Determine whether to output the message according to the current flag bit of the sampling bitmap corresponding to the policy identifier of the at least one policy;

If it is determined to output the packet, the packet is output through the output port corresponding to the policy identifier of the at least one policy in the correspondence between the policy identifier and the output port.

A message output device, applied to a distribution network device, the device includes:

a matching module, configured to match the received message with each policy in a preset policy set, where each policy in the preset policy set includes rules and actions;

an acquisition module, configured to acquire the policy identifier of at least one policy whose rule is matched by the message and whose corresponding action is sampling output;

A determination module, configured to determine whether to output the message according to the current flag bit of the sampling bitmap corresponding to the policy identifier of the at least one policy;

The output module is configured to output the message through the output port corresponding to the policy identifier of the at least one policy in the correspondence between the policy identifier and the output port if it is determined to output the message.

An electronic device, the electronic device includes a processor, a communication interface, a memory and a communication bus, wherein the processor, the communication interface, and the memory communicate with each other through the communication bus;

memory for storing computer programs;

The processor is configured to implement the above method steps when executing the program stored in the memory.

A computer-readable storage medium stores a computer program in the computer-readable storage medium, and the computer program implements the above method steps when executed by a processor.

It can be seen from the above technical solutions provided by the present application that when the same message matches multiple policies, it can be determined whether to output the message according to the sampling bitmap corresponding to each policy. Bitmap input message, so that the message output effect is better, and the flexibility is better.

Description of drawings

1 is a flowchart of a message output method shown in the application;

2 is a schematic structural diagram of a message output device shown in this application;

FIG. 3 is a schematic structural diagram of an electronic device shown in this application.

Detailed ways

Exemplary embodiments will be described in detail herein, examples of which are illustrated in the accompanying drawings. When the following description refers to the drawings, the same numerals in different drawings represent the same or similar elements unless otherwise indicated. The implementations described in the illustrative examples below are not intended to represent all implementations consistent with this application. Rather, they are merely examples of apparatus and methods consistent with some aspects of the present application as recited in the appended claims.

The terminology used in this application is for the purpose of describing particular embodiments only and is not intended to limit the application. As used in this application and the appended claims, the singular forms "a," "" and "the" are intended to include the plural forms as well, unless the context clearly dictates otherwise. It will also be understood that the term "and/or" as used herein refers to and includes any and all possible combinations of one or more of the associated listed items.

It should be understood that although the terms first, second, third, etc. may be used in this application to describe various information, such information should not be limited by these terms. These terms are only used to distinguish the same type of information from each other. For example, the first information may also be referred to as the second information, and similarly, the second information may also be referred to as the first information without departing from the scope of the present application. Depending on the context, the word "if" as used herein can be interpreted as "at the time of" or "when" or "in response to determining."

In order to solve the above problem, the embodiment of the present invention provides a message output method, so that the message output effect is better and the flexibility is better. Please refer to FIG. 1. FIG. 1 is a flowchart of a packet output method shown in the present application, which is applied to a traffic distribution network device.

S11: Match the received message to each policy in the preset policy set.

After the distribution network device receives a packet, it usually first determines the type of the packet. Currently, the commonly used packet types are eth packet, pos packet, lldp packet, etc. At the same time, it obtains the quintuple information of the packet, and then uses The quintuple information of the packet matches each policy in the preset policy set. The quintuple information of the packet includes a source Internet Protocol (Internet Protocol, IP) address, a destination IP address, a source port, a destination port, and a protocol.

S12: Obtain a policy identifier of at least one policy whose rules are matched by the packet and whose corresponding action is sampling output.

Wherein, each policy in the preset policy set includes a rule and an action, that is, only after the packet hits the rule, will a corresponding action be taken. What is concerned in this application is that the action is the sampling output. Therefore, at least one policy whose rules are matched by the packet and the corresponding action is the sampling output can be obtained, and a policy identifier can be assigned to each policy in advance. The policy ID of a policy.

The policy identifier can be set according to actual needs.

S13: Determine whether to output the message according to the current flag bit of the sampling bitmap corresponding to the policy identifier of at least one policy.

The sampling bitmap can be configured as, but not limited to, a 128-bit sampling bitmap. All received messages should be output according to the current flag bit in the sampling bitmap.

S14: If the output message is determined, output the message through the output port corresponding to the policy ID of at least one policy in the correspondence between the policy ID and the output port.

The corresponding relationship between the policy identifier and the output port can also be preset, that is, the output port corresponding to each policy identifier can be pre-bound, and after the packet is determined to be output, at least one policy in the corresponding relationship between the policy identifier and the output port can be used. The policy identifies the corresponding output port to output packets.

It can be seen from the above technical solutions provided by the present application that when the same message matches multiple policies, it can be determined whether to output the message according to the sampling bitmap corresponding to each policy. Bitmap input message, so that the message output effect is better, and the flexibility is better.

A specific implementation manner, in the above S13, according to the current flag bit of the sampling bitmap corresponding to the policy identifier of at least one policy, whether to output the message is determined, and the implementation process specifically includes:

Read the sampling bitmap corresponding to the policy identifier of at least one policy from the preset storage space respectively;

Obtain the current flag bit of the sampling bitmap corresponding to the policy identifier of at least one policy;

Determine whether the current flag bit is the set value;

If it is determined that the current flag bit is the set value, it is determined to output the message; if it is determined that the current flag bit is not the set value, it is determined not to output the message.

The sampling bitmap can be saved in a preset storage space, and the preset storage space can be but not limited to a random access memory (Random Access Memory, RAM), and the address of each storage unit of each preset storage space can be used as The strategy ID of the sampling bitmap corresponding to the strategy. Currently, the maximum number of strategy IDs can be set to 256, which need to be stored and counted separately. If 256 shift registers are used, it will take up a lot of logic resources, so use 256X128 RAM to realize, saving resource. The message will be output to the corresponding business system later. Suppose, there are currently 8 business systems, and a message can hit 8 business systems at most. When all 8 business systems are hit, if one business system reads serially RAM, during this period, no other operations can be performed, and you can only wait for the data to return, which will seriously affect the performance; if you set 8 RAMs at the same time, the performance requirements can be met, but it will also take up a lot of resources. Therefore, considering all aspects, four dual-port RAMs can be set up, and two business systems use one RAM for reading and writing at the same time, which not only meets the performance requirements, but also reduces resource usage.

When determining whether to output a message according to the current flag bit of the sampling bitmap corresponding to the policy ID of at least one policy, the sampling bitmap stored in the storage unit with the policy ID as the address can be obtained, and then determining whether to output the message according to the current flag bit of the sampling bitmap In this packet, the flag bit of the sampling bitmap can be, but not limited to, be set to 0 or 1. In this case, only the position where the flag bit is 1 will output the packet.

For example: the sampling bitmap is 128bit, if the sampling bitmap is 0x8000...00, every time 128 packets are received, only the first packet is output; if the sampling bitmap is 0xa00...00, every When 128 messages are received, only the first and third messages are output.

A specific implementation manner, in the above-mentioned S14, the output port outputting the message through the output port corresponding to the policy identifier of at least one policy in the corresponding relationship between the policy identifier and the output port, the implementation process specifically includes:

Obtain the correspondence between the policy identifier and the output port;

Find the output port corresponding to the policy identifier of at least one policy from the corresponding relationship;

The packet is output through the found output port.

The policy identifier and the output port can be bound in advance, and recorded in the corresponding relationship between the policy identifier and the output port, and then the message can be output through the output port corresponding to the policy identifier of at least one policy in the corresponding relationship between the policy identifier and the output port, Thereby, the load balancing of each output port can be better realized.

In an optional implementation manner, after determining whether to output a message from the current flag bit of the sampling bitmap corresponding to the policy identifier of at least one policy, the above method further includes:

The sampling bitmap corresponding to the policy identifier of at least one policy is shifted according to the set rule.

After the current flag bit of the sampling bitmap corresponding to the policy identifier of at least one policy is determined whether to output the packet, the sampling bitmap needs to be updated to prepare for the next packet received. The setting rules can be set according to actual needs, for example, but not limited to, it can be set to move one position to the left or one position to the right.

Please refer to FIG. 2. FIG. 2 is a schematic structural diagram of a packet output device shown in the present application, which is applied to a distribution network device, and the device includes:

The matching module 21 is used to match the received message with each policy in the preset policy set, and each policy in the preset policy set includes rules and actions;

The acquisition module 22 is used to acquire the policy identifier of at least one policy whose rule is matched by the message and the corresponding action is the sampling output;

Determining module 23, for determining whether to output a message according to the current flag bit of the sampling bitmap corresponding to the policy identification of at least one policy;

The output module 24 is configured to output the packet through the output port corresponding to the policy identifier of at least one policy in the corresponding relationship between the policy identifier and the output port, if the output packet is determined.

It can be seen from the above technical solutions provided by the present application that when the same message matches multiple policies, it can be determined whether to output the message according to the sampling bitmap corresponding to each policy. Bitmap input message, so that the message output effect is better, and the flexibility is better.

A specific implementation manner, the above-mentioned determination module 23 is used to determine whether to output a message according to the current flag bit of the sampling bitmap corresponding to the policy identifier of at least one policy, and is specifically used for:

Read the sampling bitmap corresponding to the policy identifier of at least one policy from the preset storage space respectively;

Obtain the current flag bit of the sampling bitmap corresponding to the policy identifier of at least one policy;

Determine whether the current flag bit is the set value;

If it is determined that the current flag bit is the set value, it is determined to output the message; if it is determined that the current flag bit is not the set value, it is determined not to output the message.

A specific implementation manner, the above-mentioned output module 24 is used to output the message through the output port corresponding to the policy identifier of at least one policy in the corresponding relationship between the policy identifier and the output port, and is specifically used for:

Obtain the correspondence between the policy identifier and the output port;

Find the output port corresponding to the policy identifier of at least one policy from the corresponding relationship;

The packet is output through the found output port.

An optional implementation manner, the above-mentioned output module 24 is also used for:

After determining whether to output a message from the current flag bit of the sampling bitmap corresponding to the policy identifier of the at least one policy, the sampling bitmap corresponding to the policy identifier of the at least one policy is shifted according to the set rule.

As for the apparatus embodiments, since they basically correspond to the method embodiments, reference may be made to the partial descriptions of the method embodiments for related parts. The device embodiments described above are only illustrative, wherein the units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in One place, or it can be distributed over multiple network elements. Some or all of the modules can be selected according to actual needs to achieve the purpose of the solution of the present application. Those of ordinary skill in the art can understand and implement it without creative effort.

An embodiment of the present application further provides an electronic device, as shown in FIG. 3 , including a processor 310, a communication interface 320, a memory 330, and a communication bus 340, wherein the processor 310, the communication interface 320, and the memory 330 pass through the communication bus 340 completes the mutual communication.

a memory 330 for storing computer programs;

The processor 310 is configured to implement the message output method described in any one of the foregoing embodiments when executing the program stored in the memory 330 .

The communication interface 320 is used for communication between the above electronic device and other devices.

The memory may include random access memory (Random Access Memory, RAM), and may also include non-volatile memory (Non-Volatile Memory, NVM), such as at least one disk memory. Optionally, the memory may also be at least one storage device located away from the aforementioned processor.

The above-mentioned processor may be a general-purpose processor, including a central processing unit (Central Processing Unit, CPU), a network processor (Network Processor, NP), etc.; may also be a digital signal processor (Digital Signal Processing, DSP), an application-specific integrated circuit (Application Specific Integrated Circuit, ASIC), Field-Programmable Gate Array (Field-Programmable Gate Array, FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components.

It can be seen from the above technical solutions provided by the present application that when the same message matches multiple policies, it can be determined whether to output the message according to the sampling bitmap corresponding to each policy. Bitmap input message, so that the message output effect is better, and the flexibility is better.

Correspondingly, the embodiments of the present application further provide a computer-readable storage medium, where instructions are stored in the computer-readable storage medium, and when the computer-readable storage medium runs on a computer, the computer executes the message described in any one of the foregoing embodiments. output method.

It can be seen from the above technical solutions provided by the present application that when the same message matches multiple policies, it can be determined whether to output the message according to the sampling bitmap corresponding to each policy. Bitmap input message, so that the message output effect is better, and the flexibility is better.

The above descriptions are only preferred embodiments of the present application, and are not intended to limit the present application. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principles of the present application shall be included in the present application. within the scope of protection.

Claims (10)

1. a message output method, applied in the distribution network equipment, it is characterised in that the method comprises: Matching the received message to each policy in a preset policy set, where each policy in the preset policy set includes a rule and an action; Obtaining the policy identifier of at least one policy in which the rule is matched by the message and the corresponding action is the sampling output; Determine whether to output the message according to the current flag bit of the sampling bitmap corresponding to the policy identifier of the at least one policy; If it is determined to output the packet, the packet is output through the output port corresponding to the policy identifier of the at least one policy in the correspondence between the policy identifier and the output port. 2. The method according to claim 1, wherein determining whether to output the message according to the current flag bit of the sampling bitmap corresponding to the policy identifier of the at least one policy, specifically comprising: respectively reading the sampling bitmap corresponding to the policy identifier of the at least one policy from the preset storage space; Obtain the current flag bit of the sampling bitmap corresponding to the policy identifier of the at least one policy; determine whether the current flag bit is a set value; If it is determined that the current flag bit is the set value, it is determined to output the message; if it is determined that the current flag bit is not the set value, it is determined not to output the message. 3. The method according to claim 1, wherein the message is output through the output port corresponding to the policy identifier of the at least one policy in the correspondence between the policy identifier and the output port, specifically comprising: Obtain the correspondence between the policy identifier and the output port; Find the output port corresponding to the policy identifier of the at least one policy from the corresponding relationship; The message is output through the found output port. 4. The method according to any one of claims 1-3, wherein after determining whether to output the message from the current flag bit of the sampling bitmap corresponding to the policy identifier of the at least one policy, the method further comprises: include: The sampling bitmap corresponding to the policy identifier of the at least one policy is shifted according to the set rule. 5. A device for outputting a message, applied in a distribution network device, wherein the device comprises: a matching module, configured to match the received message with each policy in a preset policy set, where each policy in the preset policy set includes rules and actions; an acquisition module, configured to acquire the policy identifier of at least one policy whose rule is matched by the message and whose corresponding action is sampling output; A determination module, configured to determine whether to output the message according to the current flag bit of the sampling bitmap corresponding to the policy identifier of the at least one policy; The output module is configured to output the message through the output port corresponding to the policy identifier of the at least one policy in the correspondence between the policy identifier and the output port if it is determined to output the message. 6. The apparatus according to claim 5, wherein the determining module is configured to determine whether to output the message according to the current flag bit of the sampling bitmap corresponding to the policy identifier of the at least one policy, specifically using At: respectively reading the sampling bitmap corresponding to the policy identifier of the at least one policy from the preset storage space; Obtain the current flag bit of the sampling bitmap corresponding to the policy identifier of the at least one policy; determine whether the current flag bit is a set value; If it is determined that the current flag bit is the set value, it is determined to output the message; if it is determined that the current flag bit is not the set value, it is determined not to output the message. 7. The apparatus according to claim 5, wherein the output module is configured to output the message through the output port corresponding to the policy identifier of the at least one policy in the correspondence between the policy identifier and the output port, Specifically for: Obtain the correspondence between the policy identifier and the output port; Find the output port corresponding to the policy identifier of the at least one policy from the corresponding relationship; The message is output through the found output port. 8. The device according to any one of claims 5-7, wherein the output module is further configured to: After the current flag bit of the sampling bitmap corresponding to the policy identifier of the at least one policy is determined whether to output the message, the sampling bitmap corresponding to the policy identifier of the at least one policy is shifted according to a set rule. 9. An electronic device, characterized in that the electronic device comprises a processor, a communication interface, a memory, and a communication bus, wherein the processor, the communication interface, and the memory communicate with each other through the communication bus; memory for storing computer programs; The processor is configured to implement the method steps of any one of claims 1-4 when executing the program stored in the memory. 10. A computer-readable storage medium, wherein a computer program is stored in the computer-readable storage medium, and when the computer program is executed by a processor, the method steps of any one of claims 1-4 are implemented.

Images