CN118740731A - Business processing method and business processing device - Google Patents
Business processing method and business processing device Download PDFInfo
- Publication number
- CN118740731A CN118740731A CN202310332697.1A CN202310332697A CN118740731A CN 118740731 A CN118740731 A CN 118740731A CN 202310332697 A CN202310332697 A CN 202310332697A CN 118740731 A CN118740731 A CN 118740731A
- Authority
- CN
- China
- Prior art keywords
- sfc
- service
- target application
- description
- request
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
- 238000012545 processing Methods 0.000 title claims abstract description 34
- 238000003672 processing method Methods 0.000 title claims abstract description 25
- 230000004044 response Effects 0.000 claims abstract description 51
- 230000006870 function Effects 0.000 claims description 70
- 238000000034 method Methods 0.000 claims description 26
- 238000013475 authorization Methods 0.000 claims description 15
- 238000004590 computer program Methods 0.000 claims description 6
- 238000012423 maintenance Methods 0.000 abstract description 7
- 239000003795 chemical substances by application Substances 0.000 description 32
- 238000010586 diagram Methods 0.000 description 7
- 230000008569 process Effects 0.000 description 4
- 101100012902 Saccharomyces cerevisiae (strain ATCC 204508 / S288c) FIG2 gene Proteins 0.000 description 3
- 101100233916 Saccharomyces cerevisiae (strain ATCC 204508 / S288c) KAR5 gene Proteins 0.000 description 3
- 238000005538 encapsulation Methods 0.000 description 3
- 238000005516 engineering process Methods 0.000 description 3
- 230000008447 perception Effects 0.000 description 3
- 230000009471 action Effects 0.000 description 2
- 230000008859 change Effects 0.000 description 2
- 230000007246 mechanism Effects 0.000 description 2
- 238000012986 modification Methods 0.000 description 2
- 230000004048 modification Effects 0.000 description 2
- 101001121408 Homo sapiens L-amino-acid oxidase Proteins 0.000 description 1
- 101000827703 Homo sapiens Polyphosphoinositide phosphatase Proteins 0.000 description 1
- 102100026388 L-amino-acid oxidase Human genes 0.000 description 1
- 102100023591 Polyphosphoinositide phosphatase Human genes 0.000 description 1
- 230000009286 beneficial effect Effects 0.000 description 1
- 230000005540 biological transmission Effects 0.000 description 1
- 239000000969 carrier Substances 0.000 description 1
- 238000004891 communication Methods 0.000 description 1
- 238000010276 construction Methods 0.000 description 1
- 238000011217 control strategy Methods 0.000 description 1
- 230000003287 optical effect Effects 0.000 description 1
- 238000000926 separation method Methods 0.000 description 1
- 230000003068 static effect Effects 0.000 description 1
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L45/00—Routing or path finding of packets in data switching networks
- H04L45/74—Address processing for routing
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L45/00—Routing or path finding of packets in data switching networks
- H04L45/645—Splitting route computation layer and forwarding layer, e.g. routing according to path computational element [PCE] or based on OpenFlow functionality
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/50—Network services
- H04L67/56—Provisioning of proxy services
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/50—Network services
- H04L67/60—Scheduling or organising the servicing of application requests, e.g. requests for application data transmissions using the analysis and optimisation of the required network resources
- H04L67/63—Routing a service request depending on the request content or context
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L69/00—Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
- H04L69/22—Parsing or analysis of headers
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L2212/00—Encapsulation of packets
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Security & Cryptography (AREA)
- Computing Systems (AREA)
- Theoretical Computer Science (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
Description
技术领域Technical Field
本发明涉及边缘计算技术领域,特别是指一种业务处理方法及业务处理装置。The present invention relates to the field of edge computing technology, and in particular to a business processing method and a business processing device.
背景技术Background Art
5G网络在设计时就考虑了对边缘计算的支持,5G核心网支持控制面与用户面分离,UPF(用户面网元)可以灵活地下沉部署到网络边缘,可实现5G边缘计算的数据面功能。而PCF(策略控制功能)以及SMF(会话管理功能)等控制面功能可以集中部署。5G核心网SMF选择靠近终端的UPF,实现本地路由建立和数据分流;5G本地分流方式包括UL-CL(UplinkClassifier,上行链路分类)方式和Branching Point(分支点)方式。5G边缘计算还同时支持LADN(Local Area Data Network,本地数据网)本地接入方式。PCF为本地数据提供QoS(服务质量)控制策略和计费策略。边缘计算平台可提供多种服务供边缘应用调用,常见的服务包括数据库、消息中间件等通用服务,DNS(域名系统)、带宽管理以及云游戏等行业服务等。垂直行业的APP(应用)部署到边缘计算节点的虚拟机或容器中,可通过调用边缘计算平台的API(应用程序编程接口)的方式,来调用边缘计算平台的服务。The 5G network was designed with support for edge computing in mind. The 5G core network supports the separation of the control plane and the user plane. The UPF (user plane network element) can be flexibly deployed to the edge of the network to realize the data plane functions of 5G edge computing. Control plane functions such as PCF (policy control function) and SMF (session management function) can be deployed centrally. The 5G core network SMF selects the UPF close to the terminal to achieve local routing establishment and data diversion; 5G local diversion methods include UL-CL (Uplink Classifier) method and Branching Point (branching point) method. 5G edge computing also supports LADN (Local Area Data Network) local access method. PCF provides QoS (quality of service) control strategy and billing strategy for local data. The edge computing platform can provide a variety of services for edge applications to call. Common services include general services such as databases and message middleware, DNS (domain name system), bandwidth management, and industry services such as cloud games. The APP (application) of the vertical industry is deployed to the virtual machine or container of the edge computing node, and the services of the edge computing platform can be called by calling the API (application programming interface) of the edge computing platform.
垂直行业业务差异性大,所以业务需求差异性也大。当边缘场景的垂直行业APP有SFC(Service Function Chain,业务功能链)需求时,如图1所示,一般会通过引流,将从UE(终端)发送给APP的流量引流到业务资源池,并在业务资源池内实现SFC,该SFC实现与ECP(Edge Computing Platform,边缘计算平台)无关,SFC的控制面由业务控制器执行,数据面由业务功能执行。一般可通过PBR(Policy-based Routing,策略路由)方式实现SFC,该方案存在一定程度的限制,配置SFC时需要根据流量的转发路径,基于每条SFC业务流,依次在各个业务节点上逐跳配置,当SFC扩容时,其配置复杂度也随之增大,导致运维困难。The vertical industry services vary greatly, so the business requirements also vary greatly. When the vertical industry APP in the edge scenario has SFC (Service Function Chain) requirements, as shown in Figure 1, the traffic sent from the UE (terminal) to the APP is generally diverted to the business resource pool, and SFC is implemented in the business resource pool. This SFC implementation has nothing to do with ECP (Edge Computing Platform). The control plane of SFC is executed by the business controller, and the data plane is executed by the business function. SFC can generally be implemented through PBR (Policy-based Routing). This solution has certain limitations. When configuring SFC, it is necessary to configure it hop by hop on each business node based on each SFC business flow according to the forwarding path of the traffic. When the SFC is expanded, its configuration complexity also increases, resulting in difficulties in operation and maintenance.
发明内容Summary of the invention
本发明要解决的技术问题是提供一种业务处理方法及业务处理装置,可以减少配置SFC的复杂性,提高运维效率。The technical problem to be solved by the present invention is to provide a business processing method and a business processing device, which can reduce the complexity of configuring SFC and improve operation and maintenance efficiency.
为解决上述技术问题,本发明的实施例提供技术方案如下:To solve the above technical problems, the embodiments of the present invention provide the following technical solutions:
一方面,本发明的实施例提供一种业务处理方法,应用于边缘计算平台,包括:On the one hand, an embodiment of the present invention provides a service processing method, which is applied to an edge computing platform, including:
向业务控制器发送业务功能链SFC请求,所述SFC请求包括SFC描述,所述SFC描述包括目标应用请求的业务功能SF类型和SF的转发顺序;Sending a service function chain SFC request to the service controller, wherein the SFC request includes an SFC description, and the SFC description includes a service function SF type requested by the target application and a forwarding order of the SF;
接收所述业务控制器返回的SFC响应,所述SFC响应包括SFC转发路径,所述SFC转发路径为根据所述目标应用请求的SF或SF代理的IP地址,以及所述转发顺序生成;receiving an SFC response returned by the service controller, wherein the SFC response includes an SFC forwarding path, wherein the SFC forwarding path is generated according to the IP address of the SF or SF proxy requested by the target application and the forwarding sequence;
将用户面功能转发至所述目标应用的流量封装为SRv6报文,将所述SRv6报文发送给所述目标应用关联的SFC转发路径上的第一个SF或SF代理。The traffic forwarded by the user plane function to the target application is encapsulated into an SRv6 message, and the SRv6 message is sent to the first SF or SF proxy on the SFC forwarding path associated with the target application.
一些实施例中,所述向业务控制器发送SFC请求之前,所述方法还包括:In some embodiments, before sending the SFC request to the service controller, the method further includes:
接收所述目标应用的SFC服务调用请求,所述SFC服务调用请求包括所述目标应用的标识和所述SFC描述;receiving an SFC service call request of the target application, wherein the SFC service call request includes an identifier of the target application and the SFC description;
向所述目标应用返回SFC服务调用响应。An SFC service call response is returned to the target application.
一些实施例中,所述向所述目标应用返回SFC服务调用响应之前,所述方法还包括:In some embodiments, before returning the SFC service call response to the target application, the method further includes:
根据所述目标应用的标识确定所述目标应用签约SFC服务;Determining the SFC service subscribed by the target application according to the identifier of the target application;
与所述目标应用之间进行认证和SFC应用程序编程接口API调用授权。Authentication and SFC application programming interface API call authorization are performed with the target application.
一些实施例中,所述接收所述业务控制器返回的SFC响应之前,所述方法还包括:In some embodiments, before receiving the SFC response returned by the service controller, the method further includes:
与所述业务控制器之间进行相互认证和授权。Mutual authentication and authorization are performed with the business controller.
本发明实施例还提供了一种业务处理方法,应用于业务控制器,包括:The embodiment of the present invention further provides a service processing method, which is applied to a service controller, comprising:
接收边缘计算平台的业务功能链SFC请求,所述SFC请求包括SFC描述,所述SFC描述包括目标应用请求的业务功能SF类型和SF的转发顺序;Receive a service function chain SFC request from the edge computing platform, where the SFC request includes an SFC description, where the SFC description includes a service function SF type requested by a target application and a forwarding order of the SF;
根据所述SFC描述选取SF或SF代理,利用选取的SF或SF代理的IP地址生成SFC转发路径;Selecting a SF or SF proxy according to the SFC description, and generating an SFC forwarding path using the IP address of the selected SF or SF proxy;
向所述边缘计算平台发送SFC响应,所述SFC响应包括所述SFC转发路径。An SFC response is sent to the edge computing platform, where the SFC response includes the SFC forwarding path.
一些实施例中,所述SFC描述还包括流量处理需求,所述方法还包括:In some embodiments, the SFC description further includes a traffic processing requirement, and the method further includes:
根据所述流量处理需求对所述选取的SF或SF代理进行策略配置。The selected SF or SF proxy is configured with a policy according to the traffic processing requirement.
一些实施例中,向所述边缘计算平台发送SFC响应之前,所述方法还包括:In some embodiments, before sending the SFC response to the edge computing platform, the method further includes:
与所述边缘计算平台之间进行相互认证和授权。Mutual authentication and authorization are performed with the edge computing platform.
一些实施例中,接收边缘计算平台的业务功能链SFC请求之前,所述方法还包括:In some embodiments, before receiving a service function chain SFC request from an edge computing platform, the method further includes:
接收SF发送的第一注册请求和SF代理发送的第二注册请求,所述第一注册请求包括所述SF的信息,所述第二注册请求包括所述SF代理的信息,所述SF的信息包括以下至少一项:自身的IP地址、是否支持SRv6协议、是否关联某个SF代理、资源规格、提供的业务类型,所述SF代理的信息包括以下至少一项:自身的IP地址、支持SRv6协议、代理的SF的IP地址;receiving a first registration request sent by the SF and a second registration request sent by the SF agent, wherein the first registration request includes information of the SF, the second registration request includes information of the SF agent, the information of the SF includes at least one of the following: its own IP address, whether it supports the SRv6 protocol, whether it is associated with a certain SF agent, resource specifications, and provided service types, and the information of the SF agent includes at least one of the following: its own IP address, support for the SRv6 protocol, and the IP address of the proxy SF;
将所述SF代理的信息与对应的SF的信息进行关联存储。The information of the SF agent is associated with the information of the corresponding SF and stored.
一些实施例中,所述根据所述SFC描述选取SF或SF代理包括:In some embodiments, selecting a SF or a SF proxy according to the SFC description includes:
选取所述SFC描述中,所述目标应用请求的SF;Selecting the SF requested by the target application in the SFC description;
若所述SF不支持SRv6,选取与所述SF对应的SF代理。If the SF does not support SRv6, a SF agent corresponding to the SF is selected.
本发明实施例还提供了一种业务处理装置,应用于边缘计算平台,包括处理器和收发机,The embodiment of the present invention further provides a service processing device, which is applied to an edge computing platform and includes a processor and a transceiver.
所述收发机用于向业务控制器发送业务功能链SFC请求,所述SFC请求包括SFC描述,所述SFC描述包括目标应用请求的业务功能SF类型和SF的转发顺序;接收所述业务控制器返回的SFC响应,所述SFC响应包括SFC转发路径,所述SFC转发路径为根据所述目标应用请求的SF或SF代理的IP地址,以及所述转发顺序生成;将用户面功能转发至所述目标应用的流量封装为SRv6报文,将所述SRv6报文发送给所述目标应用关联的SFC转发路径上的第一个SF或SF代理。The transceiver is used to send a service function chain SFC request to the service controller, the SFC request includes an SFC description, and the SFC description includes the service function SF type requested by the target application and the forwarding order of the SF; receive an SFC response returned by the service controller, the SFC response includes an SFC forwarding path, and the SFC forwarding path is generated according to the IP address of the SF or SF agent requested by the target application, and the forwarding order; encapsulate the traffic forwarded by the user plane function to the target application into an SRv6 message, and send the SRv6 message to the first SF or SF agent on the SFC forwarding path associated with the target application.
本发明实施例还提供了一种业务处理装置,应用于业务控制器,包括处理器和收发机,The embodiment of the present invention further provides a service processing device, which is applied to a service controller and includes a processor and a transceiver.
所述收发机用于接收边缘计算平台的业务功能链SFC请求,所述SFC请求包括SFC描述,所述SFC描述包括目标应用请求的业务功能SF类型和SF的转发顺序;The transceiver is used to receive a service function chain SFC request of the edge computing platform, wherein the SFC request includes an SFC description, and the SFC description includes a service function SF type requested by a target application and a forwarding order of the SF;
所述处理器用于根据所述SFC描述选取SF或SF代理,利用选取的SF或SF代理的IP地址生成SFC转发路径;The processor is used for selecting a SF or a SF proxy according to the SFC description, and generating an SFC forwarding path using the IP address of the selected SF or SF proxy;
所述收发机还用于向所述边缘计算平台发送SFC响应,所述SFC响应包括所述SFC转发路径。The transceiver is also used to send an SFC response to the edge computing platform, where the SFC response includes the SFC forwarding path.
本发明实施例还提供了一种业务处理系统,包括:The embodiment of the present invention further provides a service processing system, including:
边缘计算平台,用于向业务控制器发送业务功能链SFC请求,所述SFC请求包括SFC描述,所述SFC描述包括目标应用请求的业务功能SF类型和SF的转发顺序;接收所述业务控制器返回的SFC响应,所述SFC响应包括SFC转发路径,所述SFC转发路径为根据所述目标应用请求的SF或SF代理的IP地址,以及所述转发顺序生成;将用户面功能转发至所述目标应用的流量封装为SRv6报文,将所述SRv6报文发送给所述目标应用关联的SFC转发路径上的第一个SF或SF代理;The edge computing platform is used to send a service function chain SFC request to the service controller, wherein the SFC request includes an SFC description, wherein the SFC description includes the service function SF type requested by the target application and the forwarding order of the SF; receive an SFC response returned by the service controller, wherein the SFC response includes an SFC forwarding path, wherein the SFC forwarding path is generated according to the IP address of the SF or SF agent requested by the target application and the forwarding order; encapsulate the traffic forwarded from the user plane function to the target application into an SRv6 message, and send the SRv6 message to the first SF or SF agent on the SFC forwarding path associated with the target application;
所述业务控制器,用于接收所述边缘计算平台的所述SFC请求,所述SFC请求包括SFC描述;根据所述SFC描述选取SF或SF代理,利用选取的SF或SF代理的IP地址生成SFC转发路径;向所述边缘计算平台发送SFC响应,所述SFC响应包括所述SFC转发路径。The service controller is used to receive the SFC request of the edge computing platform, wherein the SFC request includes an SFC description; select an SF or SF agent according to the SFC description, and generate an SFC forwarding path using the IP address of the selected SF or SF agent; and send an SFC response to the edge computing platform, wherein the SFC response includes the SFC forwarding path.
本发明实施例还提供了一种业务处理装置,包括存储器、处理器及存储在所述存储器上并可在所述处理器上运行的计算机程序;所述处理器执行所述程序时实现如上所述的业务处理方法。An embodiment of the present invention further provides a business processing device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor; when the processor executes the program, the business processing method described above is implemented.
本发明实施例还提供了一种计算机可读存储介质,其上存储有计算机程序,该程序被处理器执行时实现如上所述的业务处理方法中的步骤。An embodiment of the present invention further provides a computer-readable storage medium on which a computer program is stored. When the program is executed by a processor, the steps in the business processing method described above are implemented.
本发明的实施例具有以下有益效果:The embodiments of the present invention have the following beneficial effects:
上述方案中,由边缘计算平台与业务控制器进行协同,业务控制器解析SFC描述,对相关业务功能进行配置,并将SFC转发路径发送给边缘计算平台;边缘计算平台获得SFC转发路径,根据SFC转发路径进行SRv6报文封装和转发。通过本实施例的技术方案,能够为应用提供服务调用,利用SRv6的灵活路由特性,使SFC服务的提供变得非常灵活,不再局限于个别业务资源池提供厂家,能够提升用户感知,并且减少了配置SFC的复杂性,提高了运维效率。本实施例的技术方案无需对现有组网进行改动,能够降低部署成本。In the above scheme, the edge computing platform and the business controller collaborate, the business controller parses the SFC description, configures the relevant business functions, and sends the SFC forwarding path to the edge computing platform; the edge computing platform obtains the SFC forwarding path, and encapsulates and forwards the SRv6 message according to the SFC forwarding path. Through the technical solution of this embodiment, it is possible to provide service calls for applications, and by utilizing the flexible routing characteristics of SRv6, the provision of SFC services becomes very flexible and is no longer limited to individual business resource pool providers. It can enhance user perception, reduce the complexity of configuring SFC, and improve operation and maintenance efficiency. The technical solution of this embodiment does not require changes to the existing network, and can reduce deployment costs.
附图说明BRIEF DESCRIPTION OF THE DRAWINGS
图1为现有边缘场景提供SFC服务的示意图;FIG1 is a schematic diagram of providing SFC services in existing edge scenarios;
图2为本发明实施例边缘场景基于ECP提供SFC服务的示意图;FIG2 is a schematic diagram of providing SFC services based on ECP in an edge scenario according to an embodiment of the present invention;
图3为本发明实施例应用调用边缘计算平台的SFC服务的流程示意图;FIG3 is a schematic diagram of a process of applying an edge computing platform to call an SFC service according to an embodiment of the present invention;
图4为本发明实施例ECP协同业务控制器、业务功能以及业务功能代理实现SFC服务的流程示意图;4 is a schematic diagram of a process of implementing an SFC service by an ECP collaborating with a service controller, a service function, and a service function agent according to an embodiment of the present invention;
图5为本发明实施例业务处理装置的结构示意图;5 is a schematic diagram of the structure of a service processing device according to an embodiment of the present invention;
图6为本发明实施例业务处理装置的组成示意图。FIG. 6 is a schematic diagram showing the composition of a service processing device according to an embodiment of the present invention.
具体实施方式DETAILED DESCRIPTION
为使本发明的实施例要解决的技术问题、技术方案和优点更加清楚,下面将结合附图及具体实施例进行详细描述。In order to make the technical problems, technical solutions and advantages to be solved by the embodiments of the present invention more clear, a detailed description will be given below with reference to the accompanying drawings and specific embodiments.
本发明实施例提供一种业务处理方法及业务处理装置,可以减少配置SFC的复杂性,提高运维效率。The embodiments of the present invention provide a service processing method and a service processing device, which can reduce the complexity of configuring SFC and improve operation and maintenance efficiency.
本发明的实施例提供一种业务处理方法,应用于边缘计算平台,包括:An embodiment of the present invention provides a service processing method, which is applied to an edge computing platform, including:
向业务控制器发送业务功能链SFC请求,所述SFC请求包括SFC描述,所述SFC描述包括目标应用请求的业务功能SF类型和SF的转发顺序;Sending a service function chain SFC request to the service controller, wherein the SFC request includes an SFC description, and the SFC description includes a service function SF type requested by the target application and a forwarding order of the SF;
接收所述业务控制器返回的SFC响应,所述SFC响应包括SFC转发路径,所述SFC转发路径为根据所述目标应用请求的SF或SF代理的IP地址,以及所述转发顺序生成;receiving an SFC response returned by the service controller, wherein the SFC response includes an SFC forwarding path, wherein the SFC forwarding path is generated according to the IP address of the SF or SF proxy requested by the target application and the forwarding sequence;
将用户面功能转发至所述目标应用的流量封装为SRv6报文,将所述SRv6报文发送给所述目标应用关联的SFC转发路径上的第一个SF或SF代理。The traffic forwarded by the user plane function to the target application is encapsulated into an SRv6 message, and the SRv6 message is sent to the first SF or SF proxy on the SFC forwarding path associated with the target application.
本实施例中,边缘计算平台在SFC控制面与业务控制器进行协同,获得业务控制器发送的SFC转发路径;边缘计算平台在SFC数据面,将业务链涉及的业务功能SF的IP地址封装到SRv6报文,在SFC数据面通过SRv6将应用的数据按照业务链路径进行传输,不需要依次在每个业务节点进行配置,并且依赖SRv6的灵活性,也会使得数据面实施SFC非常灵活。In this embodiment, the edge computing platform collaborates with the service controller on the SFC control plane to obtain the SFC forwarding path sent by the service controller; the edge computing platform encapsulates the IP address of the service function SF involved in the service chain into the SRv6 message on the SFC data plane, and transmits the application data along the service chain path through SRv6 on the SFC data plane. It does not need to be configured on each service node in turn, and relies on the flexibility of SRv6, which also makes the implementation of SFC on the data plane very flexible.
图2为本发明实施例边缘场景基于ECP提供SFC服务的示意图,如图2所示,本实施例中,边缘计算平台ECP具备SFC服务,并可被授权的应用(APP)进行调用。该SFC服务包括以下几项:FIG2 is a schematic diagram of an edge scenario providing SFC services based on ECP in an embodiment of the present invention. As shown in FIG2 , in this embodiment, the edge computing platform ECP has SFC services and can be called by authorized applications (APP). The SFC services include the following items:
SFC服务注册:SFC服务可注册到EPC上,使其能够被其他服务或应用发现;SFC service registration: SFC services can be registered on EPC, making them discoverable by other services or applications;
SFC服务调用:SFC服务可被边缘应用调用;SFC service call: SFC service can be called by edge applications;
SFC控制面能力:SFC服务可与业务控制器之间协同,向业务控制器发送SFC描述,并从业务控制器获得APP需要的业务链上的每个业务功能的IP地址;SFC control plane capability: The SFC service can collaborate with the business controller, send the SFC description to the business controller, and obtain the IP address of each business function on the business chain required by the APP from the business controller;
SFC相关的报文封装(SFC数据面能力):在收到来自终端(UE)发往APP的报文,并识别该APP签约SFC服务后,根据之前获得的SFC相关的业务功能的IP地址,将业务链中每个业务功能对应的IP地址作为一个标识,按照业务链顺序进行排列,封装SRv6报文并转发给业务资源池中的SFC上的第一个业务功能;SFC-related message encapsulation (SFC data plane capability): After receiving a message from a terminal (UE) to an APP and identifying the SFC service that the APP has signed up for, the IP address corresponding to each service function in the service chain is used as an identifier based on the IP address of the SFC-related service function obtained previously, and the IP addresses are arranged in the order of the service chains. The SRv6 message is encapsulated and forwarded to the first service function on the SFC in the service resource pool;
存储功能:能够存储SFC相关的信息,包括SFC签约信息、SFC描述、SFC服务对应的SFC转发路径的信息、APP标识、APP的IP地址等。Storage function: It can store SFC-related information, including SFC contract information, SFC description, information on the SFC forwarding path corresponding to the SFC service, APP identification, APP IP address, etc.
其中,业务资源池是个逻辑概念,由多个业务功能构成,这些业务功能可以是虚拟化的方式部署也可以是物理设备方式部署。所有业务功能被业务控制器管理,包括业务功能向业务控制器注册(上报IP地址、是否支持SRv6协议等),业务功能接收来自业务控制器的策略,并执行业务控制器的策略;业务功能接收来自业务控制器的统计请求,向业务控制器上报运行状态等。The service resource pool is a logical concept, which consists of multiple service functions, which can be deployed in a virtualized manner or in a physical device manner. All service functions are managed by the service controller, including the service function registering with the service controller (reporting IP address, whether to support SRv6 protocol, etc.), the service function receiving policies from the service controller and executing the policies of the service controller; the service function receiving statistical requests from the service controller and reporting the operating status to the service controller, etc.
一些实施例中,所述向业务控制器发送SFC请求之前,所述方法还包括:In some embodiments, before sending the SFC request to the service controller, the method further includes:
接收所述目标应用的SFC服务调用请求,所述SFC服务调用请求包括所述目标应用的标识和所述SFC描述;receiving an SFC service call request of the target application, wherein the SFC service call request includes an identifier of the target application and the SFC description;
向所述目标应用返回SFC服务调用响应。An SFC service call response is returned to the target application.
本实施例中,在目标应用向ECP发送SFC服务调用请求后,ECP向业务控制器发送SFC请求;SFC服务调用请求包括目标应用的标识和SFC描述,SFC描述包括目标应用请求的业务功能SF类型和SF的转发顺序,ECP向业务控制器转发SFC描述,使得业务控制器能够解析SFC描述,提供与SFC描述对应的SFC转发路径。通过本实施例,能够为目标应用提供SFC服务。In this embodiment, after the target application sends an SFC service call request to the ECP, the ECP sends an SFC request to the service controller; the SFC service call request includes the target application identifier and the SFC description, the SFC description includes the service function SF type requested by the target application and the forwarding order of the SF, and the ECP forwards the SFC description to the service controller, so that the service controller can parse the SFC description and provide an SFC forwarding path corresponding to the SFC description. Through this embodiment, the SFC service can be provided for the target application.
图3为本发明实施例应用调用边缘计算平台的SFC服务的流程示意图,如图3所示,目标应用调用边缘计算平台的SFC服务包括以下步骤:FIG3 is a flow chart of an application calling an SFC service of an edge computing platform according to an embodiment of the present invention. As shown in FIG3 , the target application calling the SFC service of the edge computing platform includes the following steps:
步骤1、APP向ECP发送SFC服务调用请求,包括API(应用程序编程接口)类型、APP标识、SFC描述等。本实施例中,API类型即为SFC服务;SFC描述包含SF类型以及转发顺序,SFC描述还可以包括流量处理需求,比如禁止访问某个URL(Uniform Resource Locator,统一资源定位器);Step 1: APP sends an SFC service call request to ECP, including API (application programming interface) type, APP identifier, SFC description, etc. In this embodiment, the API type is SFC service; SFC description includes SF type and forwarding order, and SFC description may also include traffic processing requirements, such as prohibiting access to a certain URL (Uniform Resource Locator);
步骤2、ECP检查APP是否签约SFC服务,如果签约SFC服务则执行步骤3;否则,向APP返回请求失败消息;Step 2: ECP checks whether the APP has signed the SFC service. If so, it goes to step 3; otherwise, it returns a request failure message to the APP.
步骤3、ECP和APP之间进行相互认证,可以基于证书进行认证。例如ECP和APP均向运营商CA申请证书,ECP和APP之间交换证书,并分别使用可信根证书对证书签名进行认证,从而证明其身份为可信;Step 3: Mutual authentication between ECP and APP can be based on certificates. For example, ECP and APP both apply for certificates from the operator CA, exchange certificates between ECP and APP, and use the trusted root certificate to authenticate the certificate signature, thereby proving that their identities are trustworthy;
步骤4、认证成功后,ECP与APP之间进行SFC API调用授权,可基于Oath 2.0机制实现授权。例如使用Oath 2.0协议,ECP对APP进行身份认证后,发送token给APP,APP向ECP请求API服务调用,其中携带token,ECP认证token后允许APP调用服务;Step 4: After successful authentication, the SFC API call authorization is performed between ECP and APP, which can be implemented based on the Oath 2.0 mechanism. For example, using the Oath 2.0 protocol, after ECP authenticates the APP, it sends a token to the APP. The APP requests the ECP to call the API service, which carries the token. After ECP authenticates the token, it allows the APP to call the service;
步骤5、APP向ECP发起SFC服务调用请求,携带授权凭证;Step 5: APP initiates an SFC service call request to ECP, carrying the authorization certificate;
步骤6、ECP的SFC服务向APP发送SFC服务调用响应。Step 6: The SFC service of ECP sends an SFC service call response to the APP.
一些实施例中,所述接收所述业务控制器返回的SFC响应之前,所述方法还包括:In some embodiments, before receiving the SFC response returned by the service controller, the method further includes:
与所述业务控制器之间进行相互认证和授权,这样可以保证SFC服务的安全性,使得ECP与业务控制器之间能够基于安全通道进行通信。Mutual authentication and authorization are performed with the service controller, so that the security of the SFC service can be guaranteed, and the ECP and the service controller can communicate based on a secure channel.
本发明实施例还提供了一种业务处理方法,应用于业务控制器,包括:The embodiment of the present invention further provides a service processing method, which is applied to a service controller, comprising:
接收边缘计算平台的业务功能链SFC请求,所述SFC请求包括SFC描述,所述SFC描述包括目标应用请求的业务功能SF类型和SF的转发顺序;Receive a service function chain SFC request from the edge computing platform, where the SFC request includes an SFC description, where the SFC description includes a service function SF type requested by a target application and a forwarding order of the SF;
根据所述SFC描述选取SF或SF代理,利用选取的SF或SF代理的IP地址生成SFC转发路径;Selecting a SF or SF proxy according to the SFC description, and generating an SFC forwarding path using the IP address of the selected SF or SF proxy;
向所述边缘计算平台发送SFC响应,所述SFC响应包括所述SFC转发路径。An SFC response is sent to the edge computing platform, where the SFC response includes the SFC forwarding path.
本实施例中,由边缘计算平台与业务控制器进行协同,业务控制器接收并解析SFC描述,对相关业务功能进行配置,并将SFC转发路径发送给边缘计算平台;使得边缘计算平台能够获得SFC转发路径,并根据SFC转发路径进行SRv6报文封装和转发。通过本实施例的技术方案,能够为应用提供服务调用,利用SRv6的灵活路由特性,使SFC服务的提供变得非常灵活,不再局限于个别业务资源池提供厂家,能够提升用户感知,并且减少了配置SFC的复杂性,提高了运维效率。In this embodiment, the edge computing platform collaborates with the service controller, the service controller receives and parses the SFC description, configures the relevant service functions, and sends the SFC forwarding path to the edge computing platform, so that the edge computing platform can obtain the SFC forwarding path, and encapsulate and forward SRv6 messages according to the SFC forwarding path. Through the technical solution of this embodiment, it is possible to provide service calls for applications, and by utilizing the flexible routing characteristics of SRv6, the provision of SFC services becomes very flexible, no longer limited to individual service resource pool providers, which can enhance user perception, reduce the complexity of configuring SFC, and improve operation and maintenance efficiency.
一些实施例中,所述SFC描述还包括流量处理需求,所述方法还包括:In some embodiments, the SFC description further includes a traffic processing requirement, and the method further includes:
根据所述流量处理需求对所述选取的SF或SF代理进行策略配置。例如,流量处理需求是SF需要对源IP地址为A、目的IP地址为B、端口为8080、协议为HTTP的流量进行丢弃,那么可以根据该流量处理需求为SF配置相应的策略,使SF在收到符合“源IP地址为A、目的IP地址为B、端口为8080、协议为HTTP”的流量时执行丢弃动作。另外,在策略配置之前需要检查是否与SF上现有的策略冲突,比如SF上现有的策略为不丢弃“源IP地址为A、目的IP地址为B”的流量,则不能为SF配置“丢弃源IP地址为A、目的IP地址为B、端口为8080、协议为HTTP的流量”的策略;如果SF上现有的策略与“丢弃源IP地址为A、目的IP地址为B、端口为8080、协议为HTTP的流量”的策略不冲突,则可以为SF配置“丢弃源IP地址为A、目的IP地址为B、端口为8080、协议为HTTP的流量”的策略。The selected SF or SF agent is configured with a policy according to the traffic processing requirement. For example, if the traffic processing requirement is that the SF needs to discard traffic with source IP address A, destination IP address B, port 8080, and protocol HTTP, then a corresponding policy can be configured for the SF according to the traffic processing requirement, so that the SF performs a discard action when receiving traffic that meets the "source IP address A, destination IP address B, port 8080, and protocol HTTP". In addition, before configuring the policy, you need to check whether it conflicts with the existing policy on SF. For example, if the existing policy on SF is not to discard the traffic with source IP address A and destination IP address B, then you cannot configure the policy of "discarding the traffic with source IP address A, destination IP address B, port 8080, and protocol HTTP" for SF; if the existing policy on SF does not conflict with the policy of "discarding the traffic with source IP address A, destination IP address B, port 8080, and protocol HTTP", then you can configure the policy of "discarding the traffic with source IP address A, destination IP address B, port 8080, and protocol HTTP" for SF.
一些实施例中,向所述边缘计算平台发送SFC响应之前,所述方法还包括:In some embodiments, before sending the SFC response to the edge computing platform, the method further includes:
与所述边缘计算平台之间进行相互认证和授权,这样可以保证SFC服务的安全性,使得ECP与业务控制器之间能够基于安全通道进行通信。Mutual authentication and authorization are performed with the edge computing platform to ensure the security of the SFC service, so that the ECP and the business controller can communicate based on a secure channel.
一些实施例中,接收边缘计算平台的业务功能链SFC请求之前,所述方法还包括:In some embodiments, before receiving a service function chain SFC request from an edge computing platform, the method further includes:
接收SF发送的第一注册请求和SF代理发送的第二注册请求,所述第一注册请求包括所述SF的信息,所述第二注册请求包括所述SF代理的信息,所述SF的信息包括以下至少一项:自身的IP地址、是否支持SRv6协议、是否关联某个SF代理、资源规格、提供的业务类型,所述SF代理的信息包括以下至少一项:自身的IP地址、支持SRv6协议、代理的SF的IP地址;receiving a first registration request sent by the SF and a second registration request sent by the SF agent, wherein the first registration request includes information of the SF, the second registration request includes information of the SF agent, the information of the SF includes at least one of the following: its own IP address, whether it supports the SRv6 protocol, whether it is associated with a certain SF agent, resource specifications, and provided service types, and the information of the SF agent includes at least one of the following: its own IP address, support for the SRv6 protocol, and the IP address of the proxy SF;
将所述SF代理的信息与对应的SF的信息进行关联存储。The information of the SF agent is associated with the information of the corresponding SF and stored.
本实施例中,业务功能被业务控制器管理,业务功能以及业务功能代理向业务控制器注册,包括上报自身的IP地址、是否支持SRv6协议等。In this embodiment, the service function is managed by the service controller, and the service function and the service function agent register with the service controller, including reporting their own IP address, whether to support the SRv6 protocol, etc.
一些实施例中,所述根据所述SFC描述选取SF或SF代理包括:In some embodiments, selecting a SF or a SF proxy according to the SFC description includes:
选取所述SFC描述中,所述目标应用请求的SF;Selecting the SF requested by the target application in the SFC description;
若所述SF不支持SRv6,选取与所述SF对应的SF代理。If the SF does not support SRv6, a SF agent corresponding to the SF is selected.
本实施例中,如果SFC描述中目标应用请求的SF支持SRv6,则可以选取该SF;如果SFC描述中目标应用请求的SF不支持SRv6,则可以选取该SF对应的SF代理,其中,SF代理需要支持SRv6。本实施例通过SRv6提供SFC服务,利用SRv6的灵活路由特性,使SFC服务的提供变得非常灵活。In this embodiment, if the SF requested by the target application in the SFC description supports SRv6, the SF can be selected; if the SF requested by the target application in the SFC description does not support SRv6, the SF agent corresponding to the SF can be selected, wherein the SF agent needs to support SRv6. This embodiment provides SFC services through SRv6, and uses the flexible routing characteristics of SRv6 to make the provision of SFC services very flexible.
本发明实施例还提供了一种业务处理系统,如图4所示,包括边缘计算平台、业务控制器、业务功能以及业务功能,ECP协同业务控制器、业务功能以及业务功能代理实现SFC服务,具体包括以下步骤:The embodiment of the present invention further provides a business processing system, as shown in FIG4 , including an edge computing platform, a business controller, a business function and a business function, and the ECP collaborates with the business controller, the business function and the business function agent to implement the SFC service, specifically including the following steps:
步骤1、在ECP向APP返回SFC响应后,ECP向业务控制器发送SFC请求,其中包含APP的IP地址、APP的标识、SFC描述,该SFC描述包含SF类型以及转发顺序,SFC描述还可以包括流量处理需求等。ECP可通过调用业务控制器的北向接口进行交互。Step 1: After the ECP returns the SFC response to the APP, the ECP sends an SFC request to the service controller, which includes the IP address of the APP, the APP identifier, and the SFC description. The SFC description includes the SF type and forwarding order. The SFC description may also include traffic processing requirements, etc. The ECP can interact by calling the northbound interface of the service controller.
其中,在步骤1之前,SF向业务控制器完成注册,包括业务功能向业务控制器发送IP地址、是否支持SRv6协议、资源规格(如CPU、内存大小、吞吐量等)、提供的业务类型(如防火墙、负载均衡等)等,业务控制器进行记录并保存。SF代理(proxy)向业务控制器注册时,发送的信息包括自身的IP地址、支持SRv6协议、代理的SF的IP地址等。业务控制器将SFproxy信息与其代理的SF的信息进行关联存储。Before step 1, SF completes registration with the service controller, including sending IP address, whether SRv6 protocol is supported, resource specifications (such as CPU, memory size, throughput, etc.), and service types provided (such as firewall, load balancing, etc.) to the service controller, which are recorded and saved by the service controller. When the SF proxy registers with the service controller, the information sent includes its own IP address, support for SRv6 protocol, IP address of the proxy SF, etc. The service controller associates and stores the SFproxy information with the information of the SF it proxies.
步骤2、ECP和业务控制器之间进行相互认证,业务控制器授权ECP调用北向接口的SFC服务。Step 2: ECP and the business controller perform mutual authentication, and the business controller authorizes ECP to call the SFC service of the northbound interface.
二者之间可基于证书进行相互认证,例如ECP和业务控制器均向运营商CA申请证书,ECP和业务控制器之间交换证书,并分别使用可信根证书对证书签名进行认证,从而证明其身份为可信。二者之间进行认证后,建立安全通道进行通信;ECP与业务控制器之间进行SFC API调用授权,可基于Oath 2.0机制实现授权。例如使用Oath 2.0协议,业务控制器对ECP进行身份认证后,发送token给ECP,ECP向业务控制器请求API服务调用,携带token,业务控制器认证token后允许ECP调用服务。The two can authenticate each other based on certificates. For example, both ECP and business controller apply for certificates from the operator CA. ECP and business controller exchange certificates and use trusted root certificates to authenticate the certificate signatures to prove their identities are credible. After authentication, a secure channel is established for communication. SFC API call authorization is performed between ECP and business controller, which can be implemented based on the Oath 2.0 mechanism. For example, using the Oath 2.0 protocol, after the business controller authenticates the ECP, it sends a token to the ECP. The ECP requests the business controller to call the API service, carrying the token. After the business controller authenticates the token, it allows the ECP to call the service.
步骤3、认证和授权成功后,业务控制器解析收到的SFC描述,根据SFC描述选取SF,其中对于不支持SRv6的SF,还要选取相应的SF proxy;对于支持SRv6的SF,则不需要选取SFproxy。业务控制器向ECP发送SFC响应,其中包含SFC转发路径,即按照SFC描述中的转发顺序排列的SF或SF proxy的IP地址。Step 3: After authentication and authorization are successful, the service controller parses the received SFC description and selects the SF according to the SFC description. For SFs that do not support SRv6, the corresponding SF proxy must be selected; for SFs that support SRv6, there is no need to select SFproxy. The service controller sends an SFC response to the ECP, which contains the SFC forwarding path, that is, the IP addresses of the SFs or SF proxies arranged in the forwarding order in the SFC description.
步骤4、ECP收到SFC响应后,将SFC响应中包含的SFC相关的SFC转发路径与APP的SFC服务签约信息关联存储。Step 4: After receiving the SFC response, the ECP associates and stores the SFC forwarding path related to the SFC contained in the SFC response with the SFC service contract information of the APP.
步骤5、业务控制器根据SFC描述中的流量处理需求,对需要处理流量的SF进行策略配置。例如,流量处理需求是SF需要对源IP地址为A、目的IP地址为B、端口为8080、协议为HTTP的流量进行丢弃,那么可以根据该流量处理需求为SF配置相应的策略,使SF在收到符合“源IP地址为A、目的IP地址为B、端口为8080、协议为HTTP”的流量时执行丢弃动作。另外,在策略配置之前需要检查是否与SF上现有的策略冲突,比如SF上现有的策略为不丢弃“源IP地址为A、目的IP地址为B”的流量,则不能为SF配置“丢弃源IP地址为A、目的IP地址为B、端口为8080、协议为HTTP的流量”的策略;如果SF上现有的策略与“丢弃源IP地址为A、目的IP地址为B、端口为8080、协议为HTTP的流量”的策略不冲突,则可以为SF配置“丢弃源IP地址为A、目的IP地址为B、端口为8080、协议为HTTP的流量”的策略。Step 5. The service controller configures policies for the SF that needs to process traffic according to the traffic processing requirements in the SFC description. For example, if the traffic processing requirement is that the SF needs to discard traffic with source IP address A, destination IP address B, port 8080, and protocol HTTP, then the corresponding policy can be configured for the SF according to the traffic processing requirement, so that the SF performs the discard action when receiving traffic that meets the "source IP address A, destination IP address B, port 8080, and protocol HTTP". In addition, before configuring the policy, you need to check whether it conflicts with the existing policy on SF. For example, if the existing policy on SF is not to discard the traffic with source IP address A and destination IP address B, then you cannot configure the policy of "discarding the traffic with source IP address A, destination IP address B, port 8080, and protocol HTTP" for SF; if the existing policy on SF does not conflict with the policy of "discarding the traffic with source IP address A, destination IP address B, port 8080, and protocol HTTP", then you can configure the policy of "discarding the traffic with source IP address A, destination IP address B, port 8080, and protocol HTTP" for SF.
步骤6、UPF根据分流策略将从UE到APP的流量转发给ECP。Step 6: UPF forwards the traffic from UE to APP to ECP according to the diversion strategy.
步骤7、ECP收到流量后,根据APP的IP地址或标识,判断APP是否签约SFC服务。如果签约了SFC服务,则查找该APP签约的SFC服务对应的SFC转发路径,并按照SFC转发路径中的SF和SF proxy的IP地址,将收到的报文封装为SRv6报文Step 7: After receiving the traffic, ECP determines whether the APP has signed up for the SFC service based on the APP's IP address or identifier. If the APP has signed up for the SFC service, it searches for the SFC forwarding path corresponding to the SFC service signed by the APP, and encapsulates the received message into an SRv6 message based on the IP addresses of the SF and SF proxy in the SFC forwarding path.
步骤8、ECP转发SRv6报文给SFC路径上的第一个SF或SF proxy。Step 8: ECP forwards the SRv6 packet to the first SF or SF proxy on the SFC path.
步骤9、SF收到流量后,按照配置的策略进行流量处理,比如丢弃“源IP地址为A、目的IP地址为B”的流量;SF proxy收到流量后解封SRv6报文,并转发给关联的SF,该SF按照配置策略进行流量处理后,返回流量给SF proxy;SF proxy进行后续分段路由的封装,并进行转发。Step 9: After receiving the traffic, SF processes it according to the configured policy, such as discarding the traffic with source IP address A and destination IP address B. After receiving the traffic, SF proxy decapsulates the SRv6 message and forwards it to the associated SF. After processing the traffic according to the configured policy, the SF returns the traffic to SF proxy. SF proxy performs subsequent segment routing encapsulation and forwards it.
当SF或SF proxy向下一跳转发报文并发现是SRv6段路由的最后一个端点时,进行SRv6报文解封后,再转发给APP。When SF or SF proxy forwards the message to the next hop and finds that it is the last endpoint of the SRv6 segment route, it decapsulates the SRv6 message and then forwards it to APP.
本实施例中,由ECP提供SFC服务,并由APP进行SFC服务调用。由ECP的SFC控制面服务与业务控制器进行协同,获得SFC转发路径的相关信息;由业务控制器解析SFC描述,对相关的业务功能进行配置,实现SFC控制面的构建;由EPC的SFC数据面服务根据SFC转发路径进行SRv6报文封装和转发,实现SFC数据面的功能。本实施例能够为APP提供服务调用,利用SRv6提供灵活路由特性,使SFC服务的提供变得非常灵活,不会局限于个别业务资源池提供厂家,提升用户感知,并且减少了配置SFC的复杂性,提高了运维效率,本实施例对现有组网没有改动,能够快速部署。In this embodiment, the ECP provides SFC services, and the APP calls the SFC services. The SFC control plane service of the ECP collaborates with the business controller to obtain relevant information of the SFC forwarding path; the business controller parses the SFC description, configures relevant business functions, and implements the construction of the SFC control plane; the SFC data plane service of the EPC performs SRv6 message encapsulation and forwarding according to the SFC forwarding path to implement the functions of the SFC data plane. This embodiment can provide service calls for the APP, and use the flexible routing features provided by SRv6 to make the provision of SFC services very flexible, not limited to individual business resource pool providers, improve user perception, reduce the complexity of configuring the SFC, and improve operation and maintenance efficiency. This embodiment does not change the existing network and can be deployed quickly.
本发明实施例还提供了一种业务处理装置,应用于边缘计算平台,如图5所示,包括处理器22和收发机21,The embodiment of the present invention further provides a service processing device, which is applied to an edge computing platform, as shown in FIG5 , and includes a processor 22 and a transceiver 21.
所述收发机21用于向业务控制器发送业务功能链SFC请求,所述SFC请求包括SFC描述,所述SFC描述包括目标应用请求的业务功能SF类型和SF的转发顺序;接收所述业务控制器返回的SFC响应,所述SFC响应包括SFC转发路径,所述SFC转发路径为根据所述目标应用请求的SF或SF代理的IP地址,以及所述转发顺序生成;将用户面功能转发至所述目标应用的流量封装为SRv6报文,将所述SRv6报文发送给所述目标应用关联的SFC转发路径上的第一个SF或SF代理。The transceiver 21 is used to send a service function chain SFC request to the service controller, the SFC request includes an SFC description, and the SFC description includes the service function SF type requested by the target application and the forwarding order of the SF; receive an SFC response returned by the service controller, the SFC response includes an SFC forwarding path, and the SFC forwarding path is generated according to the IP address of the SF or SF agent requested by the target application, and the forwarding order; encapsulate the traffic forwarded by the user plane function to the target application into an SRv6 message, and send the SRv6 message to the first SF or SF agent on the SFC forwarding path associated with the target application.
一些实施例中,所述收发机21还用于接收所述目标应用的SFC服务调用请求,所述SFC服务调用请求包括所述目标应用的标识和所述SFC描述;向所述目标应用返回SFC服务调用响应。In some embodiments, the transceiver 21 is further configured to receive an SFC service call request from the target application, wherein the SFC service call request includes an identifier of the target application and the SFC description; and return an SFC service call response to the target application.
一些实施例中,所述处理器22还用于根据所述目标应用的标识确定所述目标应用签约SFC服务;与所述目标应用之间进行认证和SFC应用程序编程接口API调用授权。In some embodiments, the processor 22 is further configured to determine that the target application has signed up for an SFC service based on an identifier of the target application; and perform authentication and SFC application programming interface API call authorization with the target application.
一些实施例中,所述处理器22还用于与所述业务控制器之间进行相互认证和授权。In some embodiments, the processor 22 is further configured to perform mutual authentication and authorization with the service controller.
本发明实施例还提供了一种业务处理装置,应用于业务控制器,如图5所示,包括处理器22和收发机21,The embodiment of the present invention further provides a service processing device, which is applied to a service controller, as shown in FIG5 , and includes a processor 22 and a transceiver 21.
所述收发机21用于接收边缘计算平台的业务功能链SFC请求,所述SFC请求包括SFC描述,所述SFC描述包括目标应用请求的业务功能SF类型和SF的转发顺序;The transceiver 21 is used to receive a service function chain SFC request of the edge computing platform, wherein the SFC request includes an SFC description, and the SFC description includes a service function SF type requested by a target application and a forwarding order of the SF;
所述处理器22用于根据所述SFC描述选取SF或SF代理,利用选取的SF或SF代理的IP地址生成SFC转发路径;The processor 22 is used for selecting a SF or a SF proxy according to the SFC description, and generating a SFC forwarding path using the IP address of the selected SF or SF proxy;
所述收发机21还用于向所述边缘计算平台发送SFC响应,所述SFC响应包括所述SFC转发路径。The transceiver 21 is further used to send an SFC response to the edge computing platform, where the SFC response includes the SFC forwarding path.
一些实施例中,所述处理器22还用于根据所述流量处理需求对所述选取的SF或SF代理进行策略配置。In some embodiments, the processor 22 is further configured to perform policy configuration on the selected SF or SF proxy according to the traffic processing requirement.
一些实施例中,所述处理器22还用于与所述边缘计算平台之间进行相互认证和授权。In some embodiments, the processor 22 is also used to perform mutual authentication and authorization with the edge computing platform.
一些实施例中,所述收发机21还用于接收SF发送的第一注册请求和SF代理发送的第二注册请求,所述第一注册请求包括所述SF的信息,所述第二注册请求包括所述SF代理的信息,所述SF的信息包括以下至少一项:自身的IP地址、是否支持SRv6协议、是否关联某个SF代理、资源规格、提供的业务类型,所述SF代理的信息包括以下至少一项:自身的IP地址、支持SRv6协议、代理的SF的IP地址;将所述SF代理的信息与对应的SF的信息进行关联存储。In some embodiments, the transceiver 21 is further used to receive a first registration request sent by the SF and a second registration request sent by the SF agent, the first registration request includes information of the SF, the second registration request includes information of the SF agent, the information of the SF includes at least one of the following: its own IP address, whether to support the SRv6 protocol, whether to associate with a certain SF agent, resource specifications, and the type of service provided, and the information of the SF agent includes at least one of the following: its own IP address, support for the SRv6 protocol, and the IP address of the proxy SF; the information of the SF agent is associated with the information of the corresponding SF and stored.
一些实施例中,所述处理器22还用于选取所述SFC描述中,所述目标应用请求的SF;若所述SF不支持SRv6,选取与所述SF对应的SF代理。In some embodiments, the processor 22 is further configured to select a SF requested by the target application in the SFC description; if the SF does not support SRv6, select a SF agent corresponding to the SF.
本发明实施例还提供了一种业务处理装置,如图6所示,包括存储器31、处理器32及存储在所述存储器31上并可在所述处理器32上运行的计算机程序;所述处理器32执行所述程序时实现如上所述的业务处理方法。An embodiment of the present invention also provides a business processing device, as shown in Figure 6, including a memory 31, a processor 32, and a computer program stored in the memory 31 and executable on the processor 32; when the processor 32 executes the program, the business processing method described above is implemented.
本发明实施例还提供了一种计算机可读存储介质,其上存储有计算机程序,该程序被处理器执行时实现如上所述的业务处理方法中的步骤。An embodiment of the present invention further provides a computer-readable storage medium on which a computer program is stored. When the program is executed by a processor, the steps in the business processing method described above are implemented.
计算机可读介质包括永久性和非永久性、可移动和非可移动媒体可以由任何方法或技术来实现信息存储。信息可以是计算机可读指令、数据结构、程序的模块或其他数据。计算机的存储介质的例子包括,但不限于相变内存(PRAM)、静态随机存取存储器(SRAM)、动态随机存取存储器(DRAM)、其他类型的随机存取存储器(RAM)、只读存储器(ROM)、电可擦除可编程只读存储器(EEPROM)、快闪记忆体或其他内存技术、只读光盘只读存储器(CD-ROM)、数字多功能光盘(DVD)或其他光学存储、磁盒式磁带,磁带磁磁盘存储或其他磁性存储待检测终端设备或任何其他非传输介质,可用于存储可以被计算待检测终端设备访问的信息。按照本文中的界定,计算机可读介质不包括暂存电脑可读媒体(transitory media),如调制的数据信号和载波。Computer readable media include permanent and non-permanent, removable and non-removable media that can be used to store information by any method or technology. Information can be computer readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, read-only compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, magnetic tape magnetic disk storage or other magnetic storage terminal devices to be detected or any other non-transmission media that can be used to store information that can be accessed by the computer terminal device to be detected. As defined in this article, computer readable media does not include temporary computer readable media (transitory media), such as modulated data signals and carriers.
以上所述是本发明的优选实施方式,应当指出,对于本技术领域的普通技术人员来说,在不脱离本发明所述原理的前提下,还可以作出若干改进和润饰,这些改进和润饰也应视为本发明的保护范围。The above is a preferred embodiment of the present invention. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principles of the present invention. These improvements and modifications should also be regarded as the scope of protection of the present invention.
Claims (14)
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN202310332697.1A CN118740731A (en) | 2023-03-31 | 2023-03-31 | Business processing method and business processing device |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN202310332697.1A CN118740731A (en) | 2023-03-31 | 2023-03-31 | Business processing method and business processing device |
Publications (1)
Publication Number | Publication Date |
---|---|
CN118740731A true CN118740731A (en) | 2024-10-01 |
Family
ID=92844489
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN202310332697.1A Pending CN118740731A (en) | 2023-03-31 | 2023-03-31 | Business processing method and business processing device |
Country Status (1)
Country | Link |
---|---|
CN (1) | CN118740731A (en) |
-
2023
- 2023-03-31 CN CN202310332697.1A patent/CN118740731A/en active Pending
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US12088501B2 (en) | Systems and methods for supporting traffic steering through a service function chain | |
US11350336B2 (en) | Systems and methods for user plane path selection, reselection, and notification of user plane changes | |
US11777783B2 (en) | Network slicing with smart contracts | |
US20230189368A1 (en) | Associating transport identifiers with quality of service flows | |
CN113661696B (en) | Systems and methods for processing scalable FQDNs | |
CN104521249B (en) | Method and apparatus | |
EP2910036B1 (en) | Offloaded security as a service | |
US20230188413A1 (en) | Enabling enterprise segmentation with 5g slices in a service provider network | |
CN113873453B (en) | Communication method, device, system and medium | |
CN118450540A (en) | System and method for application-friendly protocol data unit session management | |
CN111356207A (en) | A method and device for selecting slices for services | |
JP2020517132A (en) | Method, apparatus and system for implementing policy control | |
WO2021135663A1 (en) | Application instance determination method, device, and system | |
CN114080054B (en) | A PDU session establishment method, terminal device and chip system | |
KR102397750B1 (en) | GTP tunnels to support anchorless backhaul | |
CN112422397B (en) | Service forwarding method and communication device | |
US10057236B2 (en) | Method for operating a network and a network | |
WO2024067338A1 (en) | Cloud networking system, secure access method, and device and storage medium | |
US20230291607A1 (en) | System and method for ursp-based tunneling through fixed wireless access | |
EP4164179A1 (en) | Diverse pathway integration | |
CN118740731A (en) | Business processing method and business processing device | |
US20250184269A1 (en) | Routing ingress traffic for logically isolated networks destined for ip blocks without any network address translation | |
US9294299B2 (en) | Method of communication between two items of termination equipment | |
CN117478734A (en) | Message sending method, device and system | |
WO2012083803A1 (en) | Priority inheritance method and system for quality of service in identifier network |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
PB01 | Publication | ||
PB01 | Publication | ||
SE01 | Entry into force of request for substantive examination | ||
SE01 | Entry into force of request for substantive examination |