CN104980362B - A kind of service tunnel method for building up and equipment - Google Patents

A kind of service tunnel method for building up and equipment Download PDF

Info

Publication number
CN104980362B
CN104980362B CN201410136102.6A CN201410136102A CN104980362B CN 104980362 B CN104980362 B CN 104980362B CN 201410136102 A CN201410136102 A CN 201410136102A CN 104980362 B CN104980362 B CN 104980362B
Authority
CN
China
Prior art keywords
tunnel
requirements
mark
vpn service
edge
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201410136102.6A
Other languages
Chinese (zh)
Other versions
CN104980362A (en
Inventor
阴元斌
庄顺万
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Huawei Technologies Co Ltd
Original Assignee
Huawei Technologies Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Huawei Technologies Co Ltd filed Critical Huawei Technologies Co Ltd
Priority to CN201410136102.6A priority Critical patent/CN104980362B/en
Priority to PCT/CN2015/074488 priority patent/WO2015149623A1/en
Publication of CN104980362A publication Critical patent/CN104980362A/en
Application granted granted Critical
Publication of CN104980362B publication Critical patent/CN104980362B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00Data switching networks
    • H04L12/28Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/46Interconnection of networks
    • H04L12/4633Interconnection of networks using encapsulation techniques, e.g. tunneling
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00Data switching networks
    • H04L12/28Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/46Interconnection of networks
    • H04L12/4641Virtual LANs, VLANs, e.g. virtual private networks [VPN]

Abstract

The invention discloses a kind of service tunnel method for building up and equipment, method disclosed by the invention includes receiving when the first edge equipment of first area is across needing to open a virtual private network business between at least one intermediate region and the second edge equipment of second area and the purpose edge device of the corresponding label routing of the vpn service obtaining tunnel requirements corresponding with the vpn service from the label routing and identifies;The purpose edge device matches the tunnel having built up in itself affiliated area using the tunnel requirements mark got, if the tunnel requirements mark and the matching result in any tunnel in the established tunnel meet preset condition, any tunnel is selected to carry the vpn service.Scheme provided by the embodiment of the present invention allows different business to select similar and different tunnel to carry in different domains, guarantees to be carried on correct tunnel after business enters corresponding domain.

Description

A kind of service tunnel method for building up and equipment
Technical field
The present invention relates to network technique field more particularly to a kind of service tunnel method for building up and equipment.
Background technique
The appearance of various powerful mobile terminal devices, so that data service is increasingly becoming the main business of mobile network Type, while technology of eating dishes without rice or wine also continues to develop, bandwidth is also more and more wider, and there have been the growths that many big data quantities are applied for this: Music, video, game and social networks etc..The tremendous growth of data traffic of these application drives.Lead to when 2G/3G It is often used synchronous digital system (Synchronous Digital Hierarchy, SDH) carrying mobile service, but the frame of SDH Structure can not scale support and flow bandwidth growth demand.Mobile carrying could both meet flow increasing using IP and ether technology Long demand, while reducing the networking cost of operator.The whole network runs IP agreement (ALL IP) and has become the generally acknowledged trend of industry, In long term evolution (Long Term Evolution, the LTE) epoch, very big change is had occurred in wireless network architecture, evolution Packet-based core networks (Evolved Packet Core, EPC) have been put into very high position, and a domain EPC can manage many bases It stands, in this way the service provider side of base station side gateway (Cell Site Gateway, the CSG) equipment of connection base station and connection EPC Edge equipment (Provider Edge, PE) is not just scheduled in an Area (region) or AS (autonomous system), but base station and EPC it Between need to establish S1 service connection, how bearer network preferably carries LTE S1 business, and industry is it is now recognized that seamless multi-protocols Tag switching (Seamless Multiprotocol Label Switch, Seamless MPLS) scheme is a comparison optimization Based Carrying Scheme.
Meanwhile with the sharp increase of mobile bearer network bandwidth and IPization carrying, many operators are in order to save networking Cost carries fixed service and mobile service using same IP network, this makes the business of IP bearer network also more next More complicated, type is more and more, and the access point of business also more and more flexibly, in this way also puts forward higher requirements IP bearer network. The based Carrying Scheme that industry is commonly approved at present is exactly Seamless MPLS scheme, and this scheme business and transmission tunnel layer decouple, Business only needs to be configured in access point, and O&M is fairly simple.But there is also one for current Seamless MPLS solution A little problems are not able to satisfy the demand of operator, and following demand is exactly a typical demand:
As shown in Figure 1, the whole network is carried using Seamless MPLS solution, between UPE-1 and UPE-2 there are many Business will carry, in order to make full use of the link bandwidth of network, user side PE (User-end Provider Edge, UPE many tunnels) are established between network side PE (Network Provider Edge, NPE), it is desirable to different business energy It is carried on different tunnels, and different in the tunnel quantity that not same area is established, so the mutual phase mapping of tunnel energy is needed, for figure Network structure shown in 1, the then tunnel established between UPE-1 and UPE-2 can be following various situations:
The tunnel tunnel the 1-1------- tunnel 2-1----- 3-1
The tunnel tunnel the 1-2------- tunnel 2-1----- 3-1
The tunnel tunnel the 1-3------- tunnel 2-1----- 3-2
The tunnel tunnel the 1-4------- tunnel 2-1----- 3-2
The tunnel tunnel the 1-5------- tunnel 2-2----- 3-3
The tunnel tunnel the 1-6------- tunnel 2-2----- 3-3
The tunnel tunnel the 1-7------- tunnel 2-2----- 3-4
The tunnel tunnel the 1-8------- tunnel 2-2----- 3-4
Demand is formed for above-mentioned various tunnels, the solution that current Seamless MPLS is provided is as follows:
UPE-2 issues the label road a line circle gateway protocol (Border Gateway Protocol, BGP) to UPE-1 By establishing the end-to-end Border Gateway Protocol label switched path (End-to- of an arrival UPE-2 between UPE-1 and UPE-2 End Border gateway protocol Label Switched Path, E2EBGP LSP), similarly, UPE-1 also to UPE-2 sends out a BGP label routing, and the BGP LSP of an arrival UPE-1, all business are established between UPE-2 and UPE-1 All iteration are on the BGP LSP of foundation, and then BGP LSP is carried on again on the tunnel of three segmentations, realize the end-to-end of business Carrying.
But the scheme that the above-mentioned prior art provides can only for same label routing, such as UPE-1 (1.1.1.1) Establish a BGP LSP.As soon as it will be apparent that a BGP LSP just in domain, can only be carried on a tunnel, therefore institute Some business can only just select a tunnel to carry in a domain, cannot achieve different business using different tunnels come Carrying.
Summary of the invention
The present invention provides a kind of service tunnel method for building up and equipment, and method and apparatus provided by the present invention solve existing All business can only just select a tunnel to carry in a domain in technology, cannot achieve different business using different Tunnel come the problem of carrying.
In a first aspect, the present invention provides a kind of service tunnel method for building up, this method comprises:
When first area first edge equipment across the second edge equipment of at least one intermediate region and second area it Between when needing to open a virtual private network business, the purpose edge for receiving label routing corresponding with the vpn service is set It is standby that tunnel requirements mark corresponding with the vpn service is obtained from the label routing;
The purpose edge device is matched using the tunnel requirements mark got to be had built up in itself affiliated area Tunnel, if the matching result in tunnel requirements mark and any tunnel in the established tunnel meets default item Part then selects any tunnel to carry the vpn service.
With reference to first aspect, in the first possible implementation, the purpose edge device utilizes the tunnel got Road requires mark to match the tunnel having built up in itself affiliated area
The purpose edge device is identified using preset algorithm to the tunnel requirements and itself established tunnel Mark carries out operation and obtains an operation result, needs to carry having built up for the vpn service according to operation result determination Tunnel.
The possible implementation of with reference to first aspect the first, in the second possible implementation, the tunnel It is required that be identified as business affinity property, then it is described to need to carry having built for the vpn service according to operation result determination Vertical tunnel include: by the operation result and the purpose edge device storage tunnel management attributes match, and according to The tunnel having built up for needing to carry the vpn service is determined with result.
The possible implementation of with reference to first aspect the first, in the third possible implementation, when the mesh Edge device be the second edge equipment, then this method further include:
The second edge equipment obtains transfer tunnel from the label routing, and the transfer Tunnel iteration is formed institute First edge equipment is stated to the complete business tunnel of the second edge equipment, wherein the transfer tunnel is the label road The tunnel selected by other edge devices of middle carrying.
The third possible implementation with reference to first aspect, in the fourth possible implementation, this method is also Include:
When the second edge equipment receives the vpn service routing that the first edge equipment is sent, from the VPN industry The tunnel requirements mark is obtained in business routing;
It identifies tunnel requirements mark corresponding with tunnel has been established using the tunnel requirements to be matched, if with described Tunnel requirements mark tunnel requirements mark corresponding with any tunnel is identical, then sends the VPN using the determining tunnel of matching Business.
Second aspect, the present invention also provides another service tunnel method for building up, this method comprises:
When first area first edge equipment across the second edge equipment of at least one intermediate region and second area it Between when needing to open a virtual private network business, the first edge equipment will tunnel requirements corresponding with the vpn service Mark is added in the corresponding label routing of the vpn service;
The label routing is forwarded, so that the edge device for receiving the label routing is obtained from the label routing The tunnel requirements mark, and the edge device for receiving the label routing is made to utilize the matching itself of tunnel requirements mark The tunnel being had built up in affiliated area, if tunnel requirements mark and any tunnel in the established tunnel Matching result meets preset condition, then any tunnel is selected to carry the vpn service.
The third aspect, the present invention provide a kind of edge device, which includes:
Acquiring unit, when second side of the first edge equipment across at least one intermediate region and second area of first area When needing to open a virtual private network business between edge equipment, for receiving label corresponding with vpn service road By, and tunnel requirements mark corresponding with the vpn service is obtained from the label routing;
Tunnel selecting unit is had built up for being matched in itself affiliated area using the tunnel requirements mark got Tunnel, if the matching result in tunnel requirements mark and any tunnel in the established tunnel meets default item Part then selects any tunnel to carry the vpn service.
In conjunction with the third aspect, in the first possible implementation, the tunnel selecting unit is also used to using default Algorithm the tunnel requirements are identified and the mark in itself established tunnel carry out operation obtain an operation result, according to institute It states operation result and determines the tunnel having built up for needing to carry the vpn service.
In conjunction with the first possible implementation of the third aspect, in the second possible implementation, the tunnel It is required that being identified as business affinity property, the tunnel selecting unit is also used to the tunneltron of the operation result and itself storage Attributes match is managed, and determines the tunnel having built up for needing to carry the vpn service according to matching result.
In conjunction with the first possible implementation of the third aspect, in the third possible implementation, the edge Equipment is the second edge equipment, the edge device further include:
Tunnel iteration unit is formed the transfer Tunnel iteration for obtaining transfer tunnel from the label routing The first edge equipment is to the complete business tunnel of the second edge equipment, wherein the transfer tunnel is the label The tunnel of other edge devices selection carried in routing.
In conjunction with the third possible implementation of the third aspect, in the fourth possible implementation, which is set It is standby further include:
Business matching unit, for when receiving the vpn service routing that the first edge equipment is sent, from described The tunnel requirements mark is obtained in vpn service routing;Tunnel corresponding with tunnel has been established is identified using the tunnel requirements It is required that mark is matched, and if the tunnel requirements to identify corresponding with any tunnel tunnel requirements mark identical, it is sharp The vpn service is sent with the determining tunnel of matching.
Fourth aspect, the present invention also provides another edge device, the edge device is the first side of first area Edge equipment, wherein when the first edge equipment is across between at least one intermediate region and the second edge equipment of second area When needing to open a virtual private network business, the first edge equipment includes:
Adding unit is identified, for tunnel requirements corresponding with vpn service mark to be added to the vpn service pair In the label routing answered;
Retransmission unit, for forwarding the label routing, so that receiving the edge device of the label routing from described The tunnel requirements mark is obtained in label routing, and wants the edge device for receiving the label routing using the tunnel Mark is asked to match the tunnel having built up in itself affiliated area, if tunnel requirements mark and the established tunnel In the matching result in any tunnel meet preset condition, then select any tunnel to carry the vpn service.
5th aspect, the present invention also provides a kind of service tunnels to establish device, which establishes device and include:
Memory, the memory include computer program;
The processor being connected with the memory, the processor for executing the computer program, thereby executing with Lower operation:
When first area first edge equipment across the second edge equipment of at least one intermediate region and second area it Between when needing to open a virtual private network business, receive label routing corresponding with the vpn service, and from the mark Tunnel requirements mark corresponding with the vpn service is obtained in label routing;Wherein, the tunnel requirements identify and different VPN industry Business corresponds to, and is used to indicate requirement of the different business to tunnel;
The tunnel having built up in itself affiliated area is matched using the tunnel requirements mark got, if the tunnel It is required that mark and the matching result in any tunnel in the established tunnel meet preset condition, then any tunnel is selected Road carries the vpn service.
In conjunction with the 5th aspect, in the first possible implementation, the processor is also used to execute following operation:
The tunnel requirements are identified using preset algorithm and the mark in itself established tunnel carries out operation and obtains One operation result determines the tunnel having built up for needing to carry the vpn service according to the operation result.
In conjunction with the first possible implementation of the 5th aspect, in the second possible implementation, the tunnel It is required that being identified as business affinity property, the processor is also used to: by the tunnel management category of the operation result and itself storage Property matching, and determined according to matching result and need to carry the tunnel having built up of the vpn service.
In conjunction with the first possible implementation of the 5th aspect, in the third possible implementation, the business Device is established for the second edge equipment in tunnel, and the processor is also used to:
Transfer tunnel is obtained from the label routing, and the transfer Tunnel iteration is formed into the first edge equipment and is arrived The complete business tunnel of the second edge equipment, wherein the transfer tunnel is other sides carried in the label routing The tunnel of edge equipment selection.
In conjunction with the third possible implementation of the 5th aspect, in the fourth possible implementation, the processing Device is also used to:
When receiving the vpn service routing that the first edge equipment is sent, institute is obtained from vpn service routing State tunnel requirements mark;It identifies tunnel requirements mark corresponding with tunnel has been established using the tunnel requirements to be matched, such as Fruit and tunnel requirements mark tunnel requirements mark corresponding with any tunnel are identical, then are sent using the determining tunnel of matching The vpn service.
6th aspect, the present invention also provides a kind of first edge equipment, which includes:
Memory, the memory include computer program;
The processor being connected with the memory, the processor for executing the computer program, thereby executing with Lower operation:
When the first edge equipment of first area is set across the second edge of at least one intermediate region and second area When needing to open a virtual private network business between standby, tunnel requirements corresponding with vpn service mark is added to institute It states in the corresponding label routing of vpn service;Wherein, the tunnel requirements mark is corresponding from different vpn services, is used to indicate difference Requirement of the business to tunnel;
The label routing is forwarded, so that the edge device for receiving the label routing is obtained from the label routing The tunnel requirements mark, and the edge device for receiving the label routing is made to utilize the matching itself of tunnel requirements mark The tunnel being had built up in affiliated area, if tunnel requirements mark and any tunnel in the established tunnel Matching result meets preset condition, then any tunnel is selected to carry the vpn service.
One or two of above-mentioned technical proposal at least has the following technical effect that
The above method provided in an embodiment of the present invention, initiation Virtual Private Network (Virtual Private Network, VPN) the edge device of business, the requirement for different business to tunnel distribute corresponding tunnel requirements to different business and identify, And carry tunnel requirements mark in the corresponding label routing of business, then make the side for receiving the label routing Edge equipment can be identified as the tunnel that the vpn service selection needs according to the tunnel requirements.So institute of the embodiment of the present invention The method of offer allows different business to select similar and different tunnel to carry in different domains, and tunnel can be It is dynamically mapped between different domains, guarantees to be carried on correct tunnel after business enters corresponding domain.To So that different business can greatly promote network link bandwidth availability ratio with flexible choice tunnel.
Detailed description of the invention
Fig. 1 is that the whole network is illustrated using Seamless MPLS solution come the network structure of bearer service in the prior art Figure;
Fig. 2 is a kind of flow diagram for service tunnel method for building up that the embodiment of the present invention one provides;
Fig. 3 provides scheme applicable network topological diagram by the embodiment of the present invention two and embodiment three;
Fig. 4 is a kind of flow diagram of service tunnel method for building up provided by Embodiment 2 of the present invention;
Fig. 5 is a kind of flow diagram for service tunnel method for building up that the embodiment of the present invention three provides;
Fig. 6 provides scheme applicable network topological diagram by the embodiment of the present invention four and embodiment five;
Fig. 7 is a kind of flow diagram for service tunnel method for building up that the embodiment of the present invention four provides;
Fig. 8 is a kind of flow diagram for service tunnel method for building up that the embodiment of the present invention five provides;
Fig. 9 is a kind of flow diagram for service tunnel method for building up that the embodiment of the present invention six provides;
Figure 10 is a kind of structural schematic diagram for edge device that the embodiment of the present invention seven provides;
Figure 11 is a kind of structural schematic diagram for edge device that the embodiment of the present invention eight provides;
Figure 12 is the structural schematic diagram that a kind of service tunnel that the embodiment of the present invention eight provides establishes device.
Specific embodiment
In order to make the object, technical scheme and advantages of the embodiment of the invention clearer, below in conjunction with the embodiment of the present invention In attached drawing, technical scheme in the embodiment of the invention is clearly and completely described, it is clear that described embodiment is A part of the embodiment of the present invention, instead of all the embodiments.Based on the embodiments of the present invention, those of ordinary skill in the art Every other embodiment obtained without creative efforts, shall fall within the protection scope of the present invention.
In order to solve the problems in the prior art, the present invention provides a kind of service tunnel method for building up, this method comprises:
When first area first edge equipment across the second edge equipment of at least one intermediate region and second area it Between when needing to open a virtual private network business, the purpose edge for receiving label routing corresponding with the vpn service is set It is standby that tunnel requirements mark corresponding with the vpn service is obtained from the label routing;
The purpose edge device is matched using the tunnel requirements mark got to be had built up in itself affiliated area Tunnel, if the matching result in tunnel requirements mark and any tunnel in the established tunnel meets default item Part then selects any tunnel to carry the vpn service.
The above method provided in an embodiment of the present invention initiates the edge device of vpn service, for different business to tunnel It is identified it is required that distributing corresponding tunnel requirements to different business, and tunnel requirements mark is carried in the corresponding mark of business In label routing, the edge device for receiving the label routing is then enabled to be identified as according to the tunnel requirements described The tunnel that vpn service selection needs.So method provided by the embodiment of the present invention, so that different business can in different domains It is carried with selecting similar and different tunnel, while tunnel can dynamically be mapped among different domains, be guaranteed in industry After business enters corresponding domain, it can be carried on correct tunnel.So that different business can be with flexible choice tunnel, greatly It is big to promote network link bandwidth availability ratio.
In order to become apparent from method provided by the detailed description embodiment of the present invention, below in conjunction with Figure of description to this hair Method provided by bright embodiment is further described in detail, and is specifically included:
Embodiment one
As shown in Fig. 2, the embodiment of the present invention provides a kind of service tunnel method for building up, this method specifically includes step:
Step 201, when second side of the first edge equipment across at least one intermediate region and second area of first area When needing to open a virtual private network business between edge equipment, the mesh of label routing corresponding with the vpn service is received Edge device corresponding with vpn service tunnel requirements mark is obtained from the label routing;
In embodiments of the present invention, when the edge device (can be UPE) for initiating vpn service is directed to the spy of different business Point distributes different label routings to different vpn services, enable receive the edge device of the label routing according to The label routing goes to the tunnel for selecting the demand for meeting each vpn service to carry each vpn service.
The region is the network equipment of an independent network management subset, in particular to setting quantity and specific position Network's coverage area combine the region to be formed.Such as in network structure shown in Fig. 3, first service provider core network side Edge equipment (notework faceing provider edge, NPE identify NPE-1), second service provider core network side Network's coverage area that edge equipment (NPE-2) and the first user oriented provide service edge equipment (UPE-1), which combines, to be formed Region 1.Region 2 is made of NPE-1, NPE-2, NPE-3 and NPE-4, and the 3rd region is formed by NPE-3, NPE-4 and UPE-2.? The edge device being previously mentioned in the embodiment of the present invention refers to, while providing the equipment of service for two regions.Wherein, each area Domain suffers from the independent network topology database in the region and network topological diagram.For each region, network topology structure Outside region be it is sightless, equally, router in each zone is also unknowable to its remaining overseas network structure.
Step 202, the purpose edge device is matched in itself affiliated area using the tunnel requirements mark got The tunnel being set up, if tunnel requirements mark and the matching result in any tunnel in the established tunnel meet Preset condition then selects any tunnel to carry the vpn service.
In embodiments of the present invention, when second edge equipment receives the label routing, second edge equipment By label routing pass through edge device determine first edge equipment to second edge equipment fullpath.So working as The edge device is second edge equipment, and second edge equipment also needs to determine first edge according to the label routing received Equipment to the complete business tunnel of second edge equipment, so this method comprises:
The second edge equipment obtains transfer tunnel from the label routing, and the transfer Tunnel iteration is formed institute First edge equipment is stated to the complete business tunnel of the second edge equipment, wherein the transfer tunnel is the label road The tunnel selected by other edge devices of middle carrying.
Further, it because first edge equipment and the second equipment are established after service tunnel, needs to utilize the business established Tunnel carries corresponding vpn service, so second edge equipment also needs to build the service tunnel of foundation with corresponding vpn service Found corresponding relationship, thus second edge equipment according to label routing determine first edge equipment to second edge equipment tunnel Road, further includes:
When the second edge equipment receives the vpn service routing that the first edge equipment is sent, from the VPN industry The tunnel requirements mark is obtained in business routing;
It identifies tunnel requirements mark corresponding with tunnel has been established using the tunnel requirements to be matched, if with described Tunnel requirements mark tunnel requirements mark corresponding with any tunnel is identical, then sends the VPN using the determining tunnel of matching Business.
In present example, specifically can be for tunnel requirements marks is accomplished in several ways, and mentions below It is described in detail for several optional modes, specifically:
Firstly, because different edge devices may distinguish the tunnel of different condition using different marks, so generally In the case of edge device get the tunnel requirements in label routing mark after, need to determine the tunnel according to certain algorithm Road requires to identify itself corresponding that established tunnel, so utilizing acquisition after edge device receives label routing To tunnel requirements mark match the tunnel that has built up in itself affiliated area and include:
The purpose edge device is identified using preset algorithm to the tunnel requirements and itself established tunnel Mark carries out operation and obtains an operation result, needs to carry having built up for the vpn service according to operation result determination Tunnel.
Wherein, the tunnel requirements mark wishes that the Tunnel Identifier of carrying is corresponding with the vpn service.
Mode one, when the tunnel requirements are identified as business affinity property, the edge device is by operation result and itself The mark that tunnel has been established carries out matched specific implementation and may is that the tunnel requirements are identified as business affinity property, It is then described to determine that needing to carry the tunnel of the vpn service having built up includes: by the operation according to the operation result As a result the tunnel management attributes match stored with the purpose edge device, and determined and needed described in carrying according to matching result The tunnel of vpn service having built up.Wherein, the business affinity property is calculated using RFC3209, then utilizes operation result Go matching tunnel management group.
Topology network architecture according to Fig.3, is provided for the embodiments of the invention tunnel selecting method and makees further Explanation, wherein tunnel used in each domain can be TE LSP, first node of 3 sections of TE LSP in respective AREA in the following figure Respectively UPE-1, NPE-1, NPE-3.
If BGP label routing publication direction: UPE-2 → NPE-3 → NPE-1 → UPE-1 (be also possible to UPE-2 → NPE-4→NPE-2→UPE-1)。
VPN routing publication: UPE-2 → UPE-1.
It is routed for VPN, Router Reflector (Route Reflector, RR) of the NPE as adjacent UPE, between NPE again The relationship of RR and Client each other, so VPN routing, which can be reflected from distal end UPE through multiple RR, reaches local UPE, it may be assumed that as follows In scene, the VPN routing of UPE-2 can reach UPE-1.
Embodiment two
Wherein, VPN1 triggering is opened between UPE-2 and UPE-1 to establish BGP LSP and select the processing side in each section of tunnel Method includes (as shown in Figure 4):
Step 401, UPE-2 exemplary configuration business affinity property X1, UPE-2 where VPN1 is issued to NPE-3 carries industry The BGP label routing of business affinity property X1;
Step 402, NPE-3 is carried affine in the BGP label routing for receiving UPE-2 publication according to the label routing Attribute removes to match the tunnel management attribute on the TE tunnel in the equipment, further finds corresponding TE LSP: tunnel 3-1;
Step 403, NPE-3 by BGP label route in next-hop be revised as NPE-3, do not change the affine category of original business Property, it is preceding to be sent to NPE-1;
Step 404, NPE-1 is carried affine in the BGP label routing for receiving NPE-3 publication according to the label routing Attribute removes to match the tunnel management attribute on the TE tunnel in the equipment, further finds corresponding TE LSP: tunnel 2-1;
Step 405, NPE-1 by BGP label route in next-hop be revised as NPE-1, do not change the affine category of original business Property, it is preceding to be sent to UPE-1;
Step 406, UPE-1 is carried affine in the BGP label routing for receiving NPE-1 publication according to the label routing Attribute removes to match the tunnel management attribute on the TE tunnel in the equipment, further finds corresponding TE LSP: tunnel 1-1; To this step, establish UPE-1 to UPE-2 BGP LSP (such as: BGP LSP1), from left to right successively iterate to tunnel 1- 1, tunnel 2-1, tunnel 3-1;
Step 407, the example where VPN1 issues VPN route to UPE-1 from UPE-2, which also carries parent With attribute X1, BGP LSP1 is iterated in UPE-1.
In this embodiment, for carrying business affinity property (the Service Affinity in the label routing Property Attribute) specific implementation can be accomplished by the following way,
A, a bgp attribute is increased newly, newly-increased bgp attribute is used to indicate the business affinity property of vpn service.
In this embodiment, business affinity property is an optional transitive property, and 3 fields in attribute Value contain Justice is consistent with RFC3209, but length is without limitation.The attribute can be routed in company with BGP label and VPN routes a starting It send.The various scenes for needing BGP routing to carry the attribute can be used in.
Wherein, the processing of each field of business affinity property is as follows:
Include-any=Affinity&Mask
(- Include-any) &Mask, i.e. Include-any are negated Exclude-any=by Mask
Include-all=0x0
B increases a LDP TLV:Service Affinity Property TLV (business affinity property TLV) newly:
It include type/length/value (Type/Length/Value, the letter of many different purposes in LDP Mapping message Claim: TLV):
Service Affinity Property TLV, the TLV are issued together in company with LDP Mapping message, carrying Content is business affinity property.
The LDP extension of the embodiment of the present invention devises the business affinity property TLV, is arranged for L2VPN business Business affinity property (Service Affinity Property), specific format is as follows:
The U-bit of the TLV is set as 1, when receiving the TLV, but can not identify, ignores and does not handle.
The F-bit of the TLV is set as 1, the bit only use when U-bit is set as 1.1 expression is set as to receive Even if the TLV, can not identify, the TLV is also forwarded forward.
The setting and processing of above-mentioned business affinity property, only the present invention program a special case, it is intended to illustrate the present invention The exploitativeness of scheme, the limitation present invention does not only have this realization means.
Below provided by Fig. 1 for network structure, to utilizing business affinity property and management in the embodiment of the present invention Group attributes match realizes that the method specific implementation of tunnel selection may is that
Firstly, adding affinity property in the attribute list of VPN label routing, affinity property can be arranged to following lattice Formula: service affinity property properties [mask mask-value];
The corresponding matching that realize management group attribute Yu the affinity property, then it is corresponding also to need receiving label road By edge device management group attribute in add corresponding match attribute, which can be set are as follows: tunnel administrative group[value]。
Topology network architecture according to Fig.3, in embodiment two, opens VPN1, UPE-2 between UPE-2 and UPE-1 The exemplary configuration business affinity property X1 where VPN1, if X1 concrete configuration are as follows: service affinity property 10011mask 11101;
In the NPE-3 management group attribute for receiving label routing, the management group of tunnel 3-1 is identified as 10010, in addition, tunnel The management group of road 3-2 is 10101.Then NPE-3 selects the detailed process in tunnel may is that according to X1
Overall matching rule is: corresponding for 1 position in the result of administrative group&mask Correspondence position in Affinity&mask result is also 1, then it is assumed that matching.
Such as:
NPE-3 receives BGP label routing from UPE-2 and carries affinity property, calculates on NPE-3:
Business affinity property is calculated first: because of Affinity=10011;MASK=11101;Then Affinity&mask =10001;
Secondly calculating can be with matched tunnel:
For tunnel 3-2, administrative group=10101, (mask is received from UPE-2: 11101);Then corresponding administrative group&mask=10101&11101=10101, in this result One, third and four or five these three positions are 1, so according to rule, it is desirable that three positions of affinity property also will be 1, but affine category Property calculate result be 10001, only there are two position be 1, so this tunnel mismatch.
For 3-1, administrative group=10010, (mask is received from UPE-2: 11101); Administrative group&mask=10010&11101=10000, it is 1 (from a left side that resulting result, which requires first position, To right number), the result that affinity property calculates is 10001, and affinity property can be with management group attributes match, so tunnel 3-1 is matched.
Above-mentioned is a kind of implementation of affinity property, but method provided by the restriction embodiment of the present invention can only lead to Cross aforesaid way realization.
Embodiment three
The triggering of PW1 business is opened between UPE-2 and UPE-1 to establish BGP LSP and select the process flow in each section of tunnel (as shown in Figure 5):
Step 501, UPE-2 is issued to NPE-3 for the place PW1 exemplary configuration business affinity property X6, UPE-2 and is carried industry The BGP label routing of business affinity property X6;
Step 502, NPE-3 is carried affine in the BGP label routing for receiving UPE-2 publication according to the label routing Attribute removes to match the tunnel management attribute on the TE tunnel in the equipment, further finds corresponding TE LSP: tunnel 3-3;
Step 503, NPE-3 by BGP label route in next-hop be revised as NPE-3, do not change the affine category of original business Property, it is preceding to be sent to NPE-1;
Step 504, NPE-1 is carried affine in the BGP label routing for receiving NPE-3 publication according to the label routing Attribute removes to match the tunnel management attribute on the TE tunnel in the equipment, further finds corresponding TE LSP: tunnel 2-2;
Step 505, NPE-1 by BGP label route in next-hop be revised as NPE-1, do not change the affine category of original business Property, it is preceding to be sent to UPE-1;
Step 506, UPE-1 is carried affine in the BGP label routing for receiving NPE-1 publication according to the label routing Attribute removes to match the tunnel management attribute on the TE tunnel in the equipment, further finds corresponding TE LSP: tunnel 1-6; To this step, establish UPE-1 to UPE-2 BGP LSP (such as: BGP LSP6), from left to right successively iterate to tunnel 1- 6, tunnel 2-2, tunnel 3-3;
Step 507, the example where PW1 issues Label Mapping message to UPE-1 from UPE-2, which carries industry Be engaged in affinity property TLV, is gone to match corresponding BGP LSP according to business affinity property on UPE-1, matches and iterate to BGP LSP6。
Mode two, when the tunnel requirements be identified as mark tunnel ID mark, then it is detailed below in conjunction with scene shown in Fig. 6 Illustrate that the embodiment of the present invention realizes process.
It is TE LSP used in each domain, first node of 3 sections of TE LSP in respective AREA is respectively in the following figure UPE-1、NPE-1、NPE-3。
BGP label routing publication direction: UPE-2 → NPE-3 → NPE-1 → UPE-1 (be also possible to UPE-2 → NPE-4 → NPE-2→UPE-1)。
VPN routing publication: UPE-2 → UPE-1.
It is routed for VPN, RR and Client each other again between the NPE RR (Router Reflector) as adjacent UPE, NPE Relationship, so VPN routing, which can be reflected from distal end UPE through multiple RR, reaches local UPE, it may be assumed that in following scene, the VPN of UPE-2 Routing can reach UPE-1.
Example IV
Wherein, VPN triggering is opened between UPE-2 and UPE-1 to establish BGP LSP and select the process flow in each section of tunnel Including (as shown in Figure 7):
Step 701, UPE-2 is the preferred tunnel requirements identification list of the place VPN1 exemplary configuration, has id:1 in list, BGP label routing of the UPE-2 to NPE-3 publication carrying business preferred identity attribute;
Step 702, NPE-3 is in the BGP label routing for receiving UPE-2 publication, the business carried according to the label routing Preferred identity attribute goes to match the mark of the tunnel management in the equipment, finds corresponding TE LSP: tunnel 3-1 (tunnel 3-1 configuration Management id:1~2);
That is, NPE-3 after receiving BGP label routing, detects that the business preferred identity attribute in label routing is id: 1, and tunnel 3-1 is configured with management ID:1~2 in the established tunnel NPE-3, so id:1 is matched with tunnel 3-1;
Step 703, the next-hop that BGP label routes is revised as NPE-3 by NPE-3, does not change original business preferred identity Attribute, it is preceding to be sent to NPE-1;
Step 704, NPE-1 is in the BGP label routing for receiving NPE-3 publication, the business carried according to the label routing Preferred identity attribute goes to match the mark of the tunnel management in the equipment, finds corresponding TELSP: tunnel 2-1 (tunnel 2-1 configuration Management ID:1~4);
Step 705, NPE-1 by BGP label route in next-hop be revised as NPE-1, do not change original business and preferably mark Know attribute, it is preceding to be sent to UPE-1;
Step 706, UPE-1 is in the BGP label routing for receiving NPE-1 publication, the business carried according to the label routing Preferred identity attribute goes to match the mark of the tunnel management in the equipment, further finds corresponding TE LSP: the tunnel (tunnel 1-1 1-1 is configured with management ID:1);To this step, establish UPE-1 to UPE-2 BGP LSP (such as: BGP LSP1), from a left side to The right side successively iterates to TE LSP: tunnel 1-1, tunnel 2-1, tunnel 3-1;
Step 707, the example where VPN1 issues VPN route to UPE-1 from UPE-2, which also carries industry Business preferred identity attribute, is matched according to the business preferred identity attribute of the attribute and BGP LSP, is matched simultaneously on UPE-1 Iterate to BGP LSP1.
Embodiment five
Wherein, the triggering of PW business is opened between UPE-2 and UPE-1 to establish BGP LSP and select the processing in each section of tunnel Process specifically includes (as shown in Figure 8):
Step 801, UPE-2 is the preferred tunnel requirements identification list of the place PW1 exemplary configuration, has id:6 in list, BGP label routing of the UPE-2 to NPE-3 publication carrying business preferred identity attribute;
Step 802, NPE-3 is in the BGP label routing for receiving UPE-2 publication, the business carried according to the label routing Preferred identity attribute goes to match the mark of the tunnel management in the equipment, finds corresponding TELSP: tunnel 3-3 (tunnel 3-3 configuration Management ID:5~6);
Step 803, the next-hop that BGP label routes is revised as NPE-3 by UPE-2, does not change original business preferred identity Attribute, it is preceding to be sent to NPE-1;
Step 804, NPE-1 is in the BGP label routing for receiving NPE-3 publication, the business carried according to the label routing Preferred identity attribute goes to match the mark of the tunnel management in the equipment, finds corresponding TE LSP: tunnel 2-2 (tunnel 2-2 configuration Management ID:5~8);
Step 805, NPE-1 by BGP label route in next-hop be revised as NPE-1, do not change original business and preferably mark Know attribute, it is preceding to be sent to UPE-1;
Step 806, UPE-1 is in the BGP label routing for receiving NPE-1 publication, the business carried according to the label routing Preferred identity attribute goes to match the mark of the tunnel management in the equipment, further finds corresponding TE LSP: the tunnel (tunnel 1-6 1-6 is configured with management ID:6);To this step, establish UPE-1 to UPE-2 BGP LSP (such as: BGP LSP6), from a left side to The right side successively iterates to TE LSP: tunnel 1-6, tunnel 2-2, tunnel 3-3;
Step 807, the example where PW1 issues LDP Mapping message to UPE-1 from UPE-2, which also takes simultaneously Band business preferred identity TLV is matched according to the business preferred identity attribute of mark and BGP LSP in the TLV, in UPE- It is matched on 1 and iterates to BGP LSP6.
Embodiment six
As shown in figure 9, the embodiment of the present invention also provides another service tunnel method for building up, this method comprises:
Step 901, when second side of the first edge equipment across at least one intermediate region and second area of first area When needing to open a virtual private network business between edge equipment, the first edge equipment will be corresponding with the vpn service Tunnel requirements mark is added in the corresponding label routing of the vpn service;
Step 902, the label routing is forwarded, so that receiving the edge device of the label routing from the label road The tunnel requirements mark is obtained by middle, and identifies the edge device for receiving the label routing using the tunnel requirements The tunnel having built up in itself affiliated area is matched, if tunnel requirements mark and appointing in the established tunnel The matching result in one tunnel meets preset condition, then any tunnel is selected to carry the vpn service.
Embodiment seven
As shown in Figure 10, for the method for the offer of embodiment one, the present invention also provides a kind of edge device 1000, the edges Equipment includes:
Acquiring unit 1001, when the first edge equipment of first area is across the of at least one intermediate region and second area When needing to open a virtual private network business between two edge devices, for receiving label corresponding with the vpn service Routing, and tunnel requirements mark corresponding with the vpn service is obtained from the label routing;
Tunnel selecting unit 1002 has been built for being matched in itself affiliated area using the tunnel requirements mark got Vertical tunnel, if the matching result in tunnel requirements mark and any tunnel in the established tunnel meets and presets Condition then selects any tunnel to carry the vpn service.
In order to guarantee that edge device can identify the tunnel for finding vpn service and needing by the tunnel requirements, so this hair In scheme provided by bright, the tunnel side having built up in itself affiliated area is being matched using the tunnel requirements mark got Face:
The tunnel selecting unit 1002 is also used to identify the tunnel requirements using preset algorithm and itself is built The mark in vertical tunnel carries out operation and obtains an operation result, needs to carry the vpn service according to operation result determination The tunnel having built up.
In addition, the tunnel requirements mark can be a variety of implementations, wherein main can be as the affine category of business Property, it is described operation result is matched with the mark that tunnel itself has been established in terms of: the tunnel selecting unit 1002 is also used In the tunnel management attributes match for storing the operation result with itself, and is determined and needed described in carrying according to matching result The tunnel of vpn service having built up.
In addition, in embodiments of the present invention, because two edge devices are across multiple intermediate regions and realize vpn service It is open-minded, so the label routing will can just be forwarded to purpose edge device via the edge device of multiple intermediate regions, for The main task of edge device in intermediate region is the tunnel that selection carrying vpn service is identified according to tunnel requirements, is then turned Send out label routing.But the purpose edge device for establishing vpn service is then also needed then after receiving label routing The path iteration that label routing forwards is formed into complete bearing tunnel;And it also requires tunnel is built with corresponding vpn service Corresponding relationship is found, enables and is sent on corresponding tunnel when sending vpn service.So described when receiving The edge device of label routing is purpose edge device (being in this embodiment second edge equipment), then the embodiment provides Edge device further include:
Firstly, the edge device needs to forward label routing the path passed through to be iterated to form a complete carrying The tunnel of the vpn service, then the equipment include:
Tunnel iteration unit is formed the transfer Tunnel iteration for obtaining transfer tunnel from the label routing The first edge equipment is to the complete business tunnel of the second edge equipment, wherein the transfer tunnel is the label The tunnel of other edge devices selection carried in routing.
Secondly, will need the vpn service that carries it is corresponding with the tunnel of foundation on, then the edge device is just further include:
Business matching unit, for when receiving the vpn service routing that the first edge equipment is sent, from described The tunnel requirements mark is obtained in vpn service routing;Tunnel corresponding with tunnel has been established is identified using the tunnel requirements It is required that mark is matched, and if the tunnel requirements to identify corresponding with any tunnel tunnel requirements mark identical, it is sharp The vpn service is sent with the determining tunnel of matching.
Embodiment eight
As shown in figure 11, another edge device is also provided according to the method embodiment of the present invention that embodiment six provides 1100, the edge device is the first edge equipment of first area, wherein when the first edge equipment is across at least one Between when needing to open a virtual private network business between region and the second edge equipment of second area, the first edge Equipment 1100 includes:
Adding unit 1101 is identified, tunnel requirements corresponding with vpn service mark is added to the vpn service pair In the label routing answered;
Retransmission unit 1102, for forwarding the label routing so that receive the edge device of the label routing from The tunnel requirements mark is obtained in the label routing, and the edge device for receiving the label routing is made to utilize the tunnel Road requires mark to match the tunnel that has built up in itself affiliated area, if tunnel requirements mark with it is described established The matching result in any tunnel in tunnel meets preset condition, then any tunnel is selected to carry the vpn service.
As shown in figure 12, the present invention also provides a kind of service tunnels to establish device 120, for executing foregoing individual embodiments In service tunnel method for building up, it includes at least one processor 1201 (such as CPU) which, which establishes device, at least one A network interface 1202 or other communication interfaces, memory 1203 and at least one communication bus 1204, for realizing these Connection communication between device.Processor 1201 is for executing the executable module stored in memory 1203, such as computer Program.Memory 1203 may include high-speed random access memory (RAM:Random Access Memory), it is also possible to also Including non-labile memory (non-volatile memory), for example, at least a magnetic disk storage.Pass through at least one Network interface 1202 (can be wired or wireless) realizes the communication link between the system gateway and at least one other network element It connects, internet, wide area network, local network, Metropolitan Area Network (MAN) etc. can be used.
In some embodiments, memory stores program 12031, and program can be executed by processor, this program It include: the first edge equipment when first area across being needed between at least one intermediate region and the second edge equipment of second area When opening a virtual private network business, label routing corresponding with the vpn service is received, from the label routing It is middle to obtain tunnel requirements mark corresponding with the vpn service;Itself affiliated area is matched using the tunnel requirements mark got The tunnel being had built up in domain, if the matching knot of the tunnel requirements mark and any tunnel in the established tunnel Fruit meets preset condition, then any tunnel is selected to carry the vpn service.
Said one or multiple technical solutions in the embodiment of the present application, at least have the following technical effect that:
The above method provided in an embodiment of the present invention initiates the edge device of vpn service, for different business to tunnel It is identified it is required that distributing corresponding tunnel requirements to different business, and tunnel requirements mark is carried in the corresponding mark of business In label routing, the edge device for receiving the label routing is then enabled to be identified as according to the tunnel requirements described The tunnel that vpn service selection needs.So method provided by the embodiment of the present invention, so that different business can in different domains It is carried with selecting similar and different tunnel, while tunnel can dynamically be mapped among different domains, be guaranteed in industry After business enters corresponding domain, it can be carried on correct tunnel.So that different business can be with flexible choice tunnel, greatly It is big to promote network link bandwidth availability ratio.
Additionally by scheme provided by the invention, user can establish different tunnels according to planning the case where not same area, Mapping between tunnel can be dynamically completed, and O&M is simple.
Further, it is also convenient for the corresponding relationship that client explicitly, end-to-endly plans srvice instance and tunnel.
Method of the present invention is not limited to embodiment described in specific embodiment, those skilled in the art according to Technical solution of the present invention obtains other embodiments, also belongs to the scope of the technical innovation of the present invention.
Obviously, various changes and modifications can be made to the invention without departing from essence of the invention by those skilled in the art Mind and range.In this way, if these modifications and changes of the present invention belongs to the range of the claims in the present invention and its equivalent technologies Within, then the present invention is also intended to include these modifications and variations.

Claims (18)

1. a kind of service tunnel method for building up, which is characterized in that this method comprises:
When the first edge equipment of first area between at least one intermediate region and the second edge equipment of second area across needing When opening a virtual private network business, receive the purpose edge device of label routing corresponding with the vpn service from Tunnel requirements mark corresponding with the vpn service is obtained in the label routing;Wherein, tunnel requirements mark from it is different Vpn service is corresponding, is used to indicate requirement of the different business to tunnel;
The purpose edge device matches the tunnel having built up in itself affiliated area using the tunnel requirements mark got, If the tunnel requirements mark and the matching result in any tunnel in the established tunnel meet preset condition, select It selects any tunnel and carries the vpn service.
2. the method as described in claim 1, which is characterized in that the purpose edge device utilizes the tunnel requirements mark got Knowing the tunnel for matching and having built up in itself affiliated area includes:
The purpose edge device is identified using preset algorithm to the tunnel requirements and the mark in itself established tunnel It carries out operation and obtains an operation result, the tunnel having built up for needing to carry the vpn service is determined according to the operation result Road.
3. method according to claim 2, which is characterized in that the tunnel requirements are identified as business affinity property, then described According to the operation result determine need to carry the vpn service the tunnel having built up include: by the operation result with The tunnel management attributes match of the purpose edge device storage, and need to carry the vpn service according to matching result determination The tunnel having built up.
4. method according to claim 2, which is characterized in that when the purpose edge device be the second edge equipment, Then this method further include:
The second edge equipment obtains transfer tunnel from the label routing, and the transfer Tunnel iteration is formed described One edge device is to the complete business tunnel of the second edge equipment, wherein the transfer tunnel is in the label routing The tunnel of other edge devices selection carried.
5. method as claimed in claim 4, which is characterized in that this method further include:
When the second edge equipment receives the vpn service routing that the first edge equipment is sent, from the vpn service road The tunnel requirements mark is obtained by middle;
It identifies tunnel requirements mark corresponding with tunnel has been established using the tunnel requirements to be matched, if the tunnel is wanted It asks mark tunnel requirements mark corresponding with any tunnel identical, then sends the vpn service using the determining tunnel of matching.
6. a kind of service tunnel method for building up, which is characterized in that this method comprises:
When the first edge equipment of first area between at least one intermediate region and the second edge equipment of second area across needing When opening a virtual private network business, the first edge equipment will tunnel requirements mark corresponding with the vpn service It is added in the corresponding label routing of the vpn service;Wherein, the tunnel requirements mark is corresponding from different vpn services, is used for Indicate requirement of the different business to tunnel;
The label routing is forwarded, so that described in the edge device for receiving the label routing obtains from the label routing Tunnel requirements mark, and make the edge device for receiving the label routing using belonging to the matching itself of tunnel requirements mark The tunnel being had built up in region, if the matching of the tunnel requirements mark and any tunnel in the established tunnel As a result meet preset condition, then any tunnel is selected to carry the vpn service.
7. a kind of edge device, which is characterized in that the edge device includes:
Acquiring unit, when the first edge equipment of first area is set across the second edge of at least one intermediate region and second area When needing to open a virtual private network business between standby, for receiving label routing corresponding with the vpn service, and Tunnel requirements mark corresponding with the vpn service is obtained from the label routing;Wherein, tunnel requirements mark with not It is corresponding with vpn service, it is used to indicate requirement of the different business to tunnel;
Tunnel selecting unit, for matching the tunnel having built up in itself affiliated area using the tunnel requirements mark got Road, if tunnel requirements mark and the matching result in any tunnel in the established tunnel meet preset condition, Any tunnel is then selected to carry the vpn service.
8. edge device as claimed in claim 7, which is characterized in that the tunnel selecting unit is also used to utilize preset calculation Method identifies the tunnel requirements and the mark in itself established tunnel carries out operation and obtains an operation result, according to the fortune It calculates result and determines the tunnel having built up for needing to carry the vpn service.
9. edge device as claimed in claim 8, which is characterized in that the tunnel requirements are identified as business affinity property, institute It states tunnel selecting unit to be also used to the tunnel management attributes match of the operation result and itself storage, and according to matching result Determine the tunnel having built up for needing to carry the vpn service.
10. edge device as claimed in claim 8, which is characterized in that the edge device is the second edge equipment, institute State edge device further include:
Tunnel iteration unit is formed the transfer Tunnel iteration described for obtaining transfer tunnel from the label routing First edge equipment is to the complete business tunnel of the second edge equipment, wherein the transfer tunnel is the label routing The tunnel of other edge devices selection of middle carrying.
11. edge device as claimed in claim 10, which is characterized in that the edge device further include:
Business matching unit, when for being routed in the vpn service for receiving the first edge equipment transmission, from the VPN industry The tunnel requirements mark is obtained in business routing;Tunnel requirements mark corresponding with tunnel has been established is identified using the tunnel requirements Knowledge is matched, true using matching if tunnel requirements mark tunnel requirements mark corresponding with any tunnel is identical Fixed tunnel sends the vpn service.
12. a kind of edge device, which is characterized in that the edge device is the first edge equipment of first area, wherein works as institute It is virtual special across needing to open one between at least one intermediate region and the second edge equipment of second area to state first edge equipment When with net vpn service, the first edge equipment includes:
Adding unit is identified, it is corresponding for tunnel requirements corresponding with vpn service mark to be added to the vpn service In label routing;Wherein, the tunnel requirements mark is corresponding from different vpn services, is used to indicate different business and wants to tunnel It asks;
Retransmission unit, for forwarding the label routing, so that receiving the edge device of the label routing from the label The tunnel requirements mark is obtained in routing, and the edge device for receiving the label routing is made to utilize the tunnel requirements mark The tunnel for matching and having built up in itself affiliated area is known, if in tunnel requirements mark and the established tunnel The matching result in any tunnel meets preset condition, then any tunnel is selected to carry the vpn service.
13. a kind of service tunnel establishes device characterized by comprising
Memory, the memory include computer program;
The processor being connected with the memory, the processor is for executing the computer program, thereby executing following behaviour Make:
When the first edge equipment of first area between at least one intermediate region and the second edge equipment of second area across needing When opening a virtual private network business, label routing corresponding with the vpn service is received, and from the label road Tunnel requirements mark corresponding with the vpn service is obtained by middle;Wherein, the tunnel requirements identify and different vpn services pair It answers, is used to indicate requirement of the different business to tunnel;
The tunnel having built up in itself affiliated area is matched using the tunnel requirements mark got, if the tunnel requirements Mark and the matching result in any tunnel in the established tunnel meet preset condition, then any tunnel is selected to hold Carry the vpn service.
14. device according to claim 13, which is characterized in that the processor is also used to execute following operation:
The tunnel requirements are identified using preset algorithm and the mark in itself established tunnel carries out operation and obtains a fortune It calculates as a result, determining the tunnel having built up for needing to carry the vpn service according to the operation result.
15. device according to claim 14, which is characterized in that the tunnel requirements are identified as business affinity property, institute It states processor to be also used to: be determined by the tunnel management attributes match of the operation result and itself storage, and according to matching result Need to carry the tunnel of the vpn service having built up.
16. device according to claim 14, which is characterized in that the service tunnel establishes device for second side Edge equipment, the processor are also used to:
Transfer tunnel is obtained from the label routing, and the transfer Tunnel iteration is formed into the first edge equipment described in The complete business tunnel of second edge equipment, wherein the transfer tunnel is that other edges carried in the label routing are set The tunnel of alternative.
17. device according to claim 16, which is characterized in that the processor is also used to:
When receiving the vpn service routing that the first edge equipment is sent, the tunnel is obtained from vpn service routing Road requires mark;It identifies tunnel requirements mark corresponding with tunnel has been established using the tunnel requirements to be matched, if institute It states tunnel requirements and identifies that corresponding with any tunnel tunnel requirements mark is identical, then described in the tunnel transmission using matching determination Vpn service.
18. a kind of first edge equipment characterized by comprising
Memory, the memory include computer program;
The processor being connected with the memory, the processor is for executing the computer program, thereby executing following behaviour Make:
When first area the first edge equipment across the second edge equipment of at least one intermediate region and second area it Between when needing to open a virtual private network business, tunnel requirements corresponding with vpn service mark is added to described In the corresponding label routing of vpn service;Wherein, the tunnel requirements mark is corresponding from different vpn services, is used to indicate not of the same trade or business The requirement being engaged in tunnel;
The label routing is forwarded, so that described in the edge device for receiving the label routing obtains from the label routing Tunnel requirements mark, and make the edge device for receiving the label routing using belonging to the matching itself of tunnel requirements mark The tunnel being had built up in region, if the matching of the tunnel requirements mark and any tunnel in the established tunnel As a result meet preset condition, then any tunnel is selected to carry the vpn service.
CN201410136102.6A 2014-04-04 2014-04-04 A kind of service tunnel method for building up and equipment Active CN104980362B (en)

Priority Applications (2)

Application Number Priority Date Filing Date Title
CN201410136102.6A CN104980362B (en) 2014-04-04 2014-04-04 A kind of service tunnel method for building up and equipment
PCT/CN2015/074488 WO2015149623A1 (en) 2014-04-04 2015-03-18 Service tunnel establishment method and device

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201410136102.6A CN104980362B (en) 2014-04-04 2014-04-04 A kind of service tunnel method for building up and equipment

Publications (2)

Publication Number Publication Date
CN104980362A CN104980362A (en) 2015-10-14
CN104980362B true CN104980362B (en) 2019-04-12

Family

ID=54239379

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201410136102.6A Active CN104980362B (en) 2014-04-04 2014-04-04 A kind of service tunnel method for building up and equipment

Country Status (2)

Country Link
CN (1) CN104980362B (en)
WO (1) WO2015149623A1 (en)

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110611607B (en) * 2019-10-08 2021-10-19 深信服科技股份有限公司 Tunnel connection method, control device, storage medium and apparatus

Citations (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1507230A (en) * 2002-12-10 2004-06-23 ��Ϊ�������޹�˾ Method of realizing special multiple-protocol label exchanging virtual network
CN1744541A (en) * 2004-08-31 2006-03-08 华为技术有限公司 Method for realizing virtual private network business in multi-layer label switch network
CN101163098A (en) * 2007-11-13 2008-04-16 中兴通讯股份有限公司 Method of implementing service data flow and label switching path tunnel mapping
CN101702665A (en) * 2009-11-13 2010-05-05 中兴通讯股份有限公司 Method of Ethernet service accessing bearing tunnel, operator edge device and system
CN101848199A (en) * 2009-03-26 2010-09-29 华为技术有限公司 Method for implementing layering virtual link, system and transmission equipment thereof
CN102148738A (en) * 2010-02-05 2011-08-10 华为技术有限公司 Label distribution method, device and system for seamless multi-protocol label switching network
CN102377630A (en) * 2011-10-13 2012-03-14 华为技术有限公司 Traffic engineering tunnel-based virtual private network implementation method and traffic engineering tunnel-based virtual private network implementation system
CN103209125A (en) * 2013-04-07 2013-07-17 杭州华三通信技术有限公司 Label information transmission method and device
CN103475557A (en) * 2013-09-05 2013-12-25 华为技术有限公司 Tunnel setup method and router
US8625465B1 (en) * 2004-08-30 2014-01-07 Juniper Networks, Inc. Auto-discovery of virtual private networks

Family Cites Families (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101009627A (en) * 2006-12-27 2007-08-01 华为技术有限公司 A service binding method and device

Patent Citations (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1507230A (en) * 2002-12-10 2004-06-23 ��Ϊ�������޹�˾ Method of realizing special multiple-protocol label exchanging virtual network
US8625465B1 (en) * 2004-08-30 2014-01-07 Juniper Networks, Inc. Auto-discovery of virtual private networks
CN1744541A (en) * 2004-08-31 2006-03-08 华为技术有限公司 Method for realizing virtual private network business in multi-layer label switch network
CN101163098A (en) * 2007-11-13 2008-04-16 中兴通讯股份有限公司 Method of implementing service data flow and label switching path tunnel mapping
CN101848199A (en) * 2009-03-26 2010-09-29 华为技术有限公司 Method for implementing layering virtual link, system and transmission equipment thereof
CN101702665A (en) * 2009-11-13 2010-05-05 中兴通讯股份有限公司 Method of Ethernet service accessing bearing tunnel, operator edge device and system
CN102148738A (en) * 2010-02-05 2011-08-10 华为技术有限公司 Label distribution method, device and system for seamless multi-protocol label switching network
CN102377630A (en) * 2011-10-13 2012-03-14 华为技术有限公司 Traffic engineering tunnel-based virtual private network implementation method and traffic engineering tunnel-based virtual private network implementation system
CN103209125A (en) * 2013-04-07 2013-07-17 杭州华三通信技术有限公司 Label information transmission method and device
CN103475557A (en) * 2013-09-05 2013-12-25 华为技术有限公司 Tunnel setup method and router

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
RSVP-TE:Extensions to RSVP for LSP Tunnels;D.Awduche;《IETF》;20011231;全文

Also Published As

Publication number Publication date
CN104980362A (en) 2015-10-14
WO2015149623A1 (en) 2015-10-08

Similar Documents

Publication Publication Date Title
US8068442B1 (en) Spanning tree protocol synchronization within virtual private networks
CN101606341B (en) Technique for efficiently routing ip traffic on CE-CE paths across a provider network
JP5410998B2 (en) Software control plane for switches and routers
CN104980347B (en) A kind of method and device for establishing tunnel
EP3200402B1 (en) Segment routing information obtainment method and segment routing network establishment method
EP2911348A1 (en) Control device discovery in networks having separate control and forwarding devices
CN111385207B (en) Service data forwarding method, network device and network system
CN105594167B (en) Method, controller, forwarding device and the network system to E-Packet
CN105871722A (en) Tag structure and tag message forwarding method and device
CN106664252A (en) Method, device and system for realizing service link
US20200053000A1 (en) Method, Device and Node for Message Transmission, and Computer Storage Medium
WO2015165311A1 (en) Method for transmitting data packet and provider edge device
CN107222449A (en) Communication means, equipment and system based on the regular agreement of stream
US20170149685A1 (en) Address information publishing method and apparatus
CN101536375A (en) Inter-domain path computation technique
CN106982157A (en) Traffic engineering tunnel building method and device
US7630298B2 (en) Method and apparatus for forwarding data in a data communications network
WO2014022726A1 (en) Label distribution and route installation in a loop-free routing topology using routing arcs
EP3054634A1 (en) Scheme for performing one-pass tunnel forwarding function on two-layer network structure
CN107370673A (en) Method, controller and the system of forward-path are established in a kind of network
US20120124238A1 (en) Prioritization of routing information updates
CN108141392A (en) The method and apparatus that pseudowire load is shared
CN107483338A (en) A kind of method, apparatus and system for determining cross-domain label switched path tunnel
CN103138955B (en) Multiple igmp querying device is used in layer 2 network
CN109450793A (en) A kind of method and apparatus of service traffics scheduling

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant