CN106713137A - VPN method based on segment routing and SDN technology and device and system thereof - Google Patents

VPN method based on segment routing and SDN technology and device and system thereof Download PDF

Info

Publication number
CN106713137A
CN106713137A CN201510777433.2A CN201510777433A CN106713137A CN 106713137 A CN106713137 A CN 106713137A CN 201510777433 A CN201510777433 A CN 201510777433A CN 106713137 A CN106713137 A CN 106713137A
Authority
CN
China
Prior art keywords
label
information
target
segment
packet
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN201510777433.2A
Other languages
Chinese (zh)
Other versions
CN106713137B (en
Inventor
黄晓莹
陈迅
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
China Telecom Corp Ltd
Original Assignee
China Telecom Corp Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by China Telecom Corp Ltd filed Critical China Telecom Corp Ltd
Priority to CN201510777433.2A priority Critical patent/CN106713137B/en
Publication of CN106713137A publication Critical patent/CN106713137A/en
Application granted granted Critical
Publication of CN106713137B publication Critical patent/CN106713137B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Landscapes

  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

The invention discloses a VPN data transmission method based on segment routing in a SDN and a device and a system thereof. The method comprises the steps that entrance supplier edge equipment PE packages information transmitted by a first CE into a data packet including tag information according to the tag of second user edge equipment CE and the tag of a target PE; and the entrance PE transmits the packaged data packet to core layer equipment P, the core layer equipment establishes a forwarding path according to the tag of the target PE in the data packet and routes the data packets to the target PE, and the target PE routes the information transmitted by the first CE in the data packet to a second CE according to the tag of the second CE. According to the method, the device, and the system, the VPN routing information is published by using the integrated deployment mode SDN controller for forwarding so that the operation and maintenance workload can be reduced, and the service provider service operation efficiency can be enhanced.

Description

VPN methods, apparatus and system based on Segment routing and SDN technologies
Technical field
The present invention relates to the SDN fields in data communication, more particularly to it is based in a kind of SDN The VPN data transmission method of Segment routing, apparatus and system.
Background technology
Three-layer VPN (Virtual Private Network, VPN) is IP One important application of (Internet Protocol, Internet protocol) technology, it is presently most used Technical scheme be BGP (Border Gateway Protocol, Border Gateway Protocol) MPLS (Multi-Protocol Label Switch, multiprotocol label switching) VPN, but prior art In be primarily present three problems:Need the presence of special signaling protocol LDP (Label Distribution Protocol, tag distribution protocol), and core node need to preserve all LSP (Label Switched Path, label switched path) state, but LSP states and PE (Provider Edge, there is provided business's edge device) quantity is related, PE configuration work amounts one by one Greatly, poor expandability.If noticing user using MP-BGP agreements to route, to ensure BGP pairs Deng the connectedness between body, it is necessary to set up full annexation between bgp peer, configuration process In there is n squares problems, when bgp peer number is a lot, to Internet resources and CPU The consumption of (Central Processing Unit, central processing unit) resource is all very big.
Therefore, it is necessary to propose the data transmission method in a kind of SDN, that improves network can Autgmentability, reduces the consumption to Internet resources and cpu resource.
The content of the invention
The disclosure technical problem to be solved be how to provide it is a kind of improve network it is expansible Property, reduce to the transmission side data in the SDN of the consumption of Internet resources and cpu resource Method.
The disclosure provides the VPN data transmission method based on Segment routing in a kind of SDN, Including:Labels and mesh of the entrance provider edge PE according to second user edge device CE Mark the label Information encapsulation that sends a CE of PE into the packet containing label information;Enter Packet after the encapsulation is sent to core layer equipment P, the core layer equipment root by mouth PE Forward-path is set up according to the label of the target PE in the packet, the packet is routed to Target PE, the target PE send out a CE in the packet according to the label of the 2nd CE The information router for sending gives the 2nd CE.
Further, the entrance provider edge PE is according to second user edge device The label of CE believes the Information encapsulation that a CE sends into containing label with the label of target PE Include before the packet of breath:Controller receives entry PE and target PE to be believed based on contiguous segment The interface message that breath adj segment are reported, the interface message includes first, second CE's Interface message and entry PE, the interface message of target PE;The controller is according to receiving The Route Distinguisher of interface message, the segment label informations of each PE of unified definition, and CE The label information of RD, route purpose RT;The controller issues the mark using south orientation agreement Label information, wherein, the south orientation agreement includes PECP agreements, the border net of path computation element Close protocol link state BGP-LS, network environment setting command Netconfig.
Further, the controller receives entry PE and target PE is based on contiguous segment information The interface message that adj segment are reported includes:When user virtual routing forwarding VRF is defined Binding contiguous segment information adj-segment, label one virtual routing forwarding of correspondence, And by label storage in Segment routing tag library.
Further, the entrance provider edge PE is according to second user edge device The label of CE believes the Information encapsulation that a CE sends into containing label with the label of target PE The packet of breath includes:The label of target PE, the 2nd CE is inserted into a CE by entry PE In the information of transmission, wherein, the stack that the label of target PE is placed on into interface label is first, by second The label of CE is put into the stack bottom of interface label.
Further, by using expanding internal gateway protocol IGP protocol realization device within the domain Route data information mutual communication, each equipment need not preserve any status information, and need not run it His signaling protocol such as LDP, RSVP-TE etc..
The present invention also provides the VPN data transmission dress based on Segment routing in a kind of SDN Put, including:Package module, for label and target according to second user edge device CE The Information encapsulation that the label of PE sends a CE is into the packet containing label information;Forwarding Module, for the packet after the encapsulation to be sent into core layer equipment P, the core layer sets The label of the standby target PE in the packet sets up forward-path, by the data packet By giving target PE, the information that the target PE sends a CE according to the label of the 2nd CE It is routed to the 2nd CE.
Further, the package module is used to be inserted on the label of target PE, the 2nd CE In the information that first CE sends, wherein, the label of target PE is placed on the stack of interface label Head, the label of the 2nd CE is put into the stack bottom of interface label.
The present invention also provides the VPN data transmission system based on Segment routing in a kind of SDN System, including:Including the VPN data transmitting device based on Segment routing in above-mentioned SDN Provider edge PE, and core layer equipment P, customer edge CE, controller; Wherein, controller receives PE and is based on the interface letter that contiguous segment information adj segment are reported Breath, the interface message includes the interface message of CE and the interface message of PE;The controller The Route Distinguisher RD of unified definition PE and user CE, the label information of route purpose RT; The controller issues the label information using south orientation agreement, wherein, the south orientation agreement includes The PECP agreements of path computation element, Border Gateway Protocol Link State BGP-LS, network rings Border setting command Netconfig issues label information.
Further, the PE includes that entry PE and target PE, the CE include first CE, the 2nd CE;Wherein, the packet after the encapsulation is sent to core layer and set by entry PE The label of standby P, target PEs of the core layer equipment P in the packet sets up forwarding Path, target PE is routed to by the packet, the load point when there is a plurality of forward-path Load;The information router that the target PE sends a CE according to the label of the 2nd CE is to Two CE.
Further, contiguous segment information is bound when user virtual routing forwarding VRF is defined Adj-segment, label one virtual routing forwarding of correspondence, the controller is by the mark Sign and store in Segment routing tag library.
Further, by using expanding internal gateway protocol IGP protocol realization device within the domain Routing iinformation intercommunication, each equipment need not preserve any status information.So, without running other Signaling protocol such as LDP, RSVP-TE etc..
VPN data transmission method based on Segment routing, dress in the SDN that the present invention is provided Put and system, carried out using concentrating the SDN controllers of deployment way to issue VPN routing iinformations Forwarding, reduces maintenance work amoun, and lifting Operator Specific Service efficiency of operation improves the expansible of network Property, reduce the consumption to Internet resources and cpu resource.
Brief description of the drawings
Fig. 1 shows the VPN numbers based on Segment routing in the SDN of one embodiment of the invention According to the flow chart of transmission method.
Fig. 2 shows that the SDN controller of one embodiment of the invention realizes VPN routing iinformations The schematic diagram of distribution.
Fig. 3 shows the schematic diagram of packet transmission in the SDN of one embodiment of the invention.
Fig. 4 shows the VPN numbers based on Segment routing in the SDN of one embodiment of the invention According to the structural representation of transmitting device.
What Fig. 5 was shown in a kind of SDN of one embodiment of the invention based on Segment routing The structured flowchart of VPN data Transmission system.
Fig. 6 is shown in a kind of SDN of an alternative embodiment of the invention based on segmentation road By VPN data transmitting device structured flowchart.
Specific embodiment
The present invention is described more fully with reference to the accompanying drawings, wherein illustrating example of the invention Property embodiment.
Fig. 1 shows the VPN numbers based on Segment routing in the SDN of one embodiment of the invention According to the flow chart of transmission method.As shown in figure 1, the method mainly includes:
Step 100, entrance provider edge PE is according to second user edge device CE The information envelope that the label of (Customer Edge) and the label of target PE send a CE Dress up the packet containing label information.
In one embodiment, controller is received entry PE and target PE and is believed based on contiguous segment The interface message that breath (adj segment) is reported, the interface message includes first, second CE Interface message and entry PE, the interface message of target PE;The controller unified definition is each The segment label informations of PE and RD (the route distinguisher, Route Distinguisher of CE Or route-distinguisher), the label information of RT (Route Targets, route purpose);The control Device processed issues the label information using south orientation agreement, wherein, the south orientation agreement is counted including path Calculate PECP agreements, Border Gateway Protocol Link State BGP-LS, the network environment setting of element Order Netconfig.
In one embodiment, controller is received entry PE and target PE and is believed based on contiguous segment The interface message that breath adj segment are reported includes:Defining user's virtual routing forwarding VRF When binding contiguous segment information adj-segment, the one virtual flow-line forwarding of a label correspondence Table, and by label storage in Segment routing tag library.
Packet after the encapsulation is sent to core layer equipment P by step 102, entry PE, The label of target PE of the core layer equipment in the packet sets up forward-path, will The packet is routed to target PE, the target PE according to the label of the 2nd CE by the number According to the information router of CE transmissions in bag to the 2nd CE.
In one embodiment, the label of target PE, the 2nd CE is inserted into first by entry PE In the information that CE sends, wherein, the stack that the label of target PE is placed on into interface label is first, will The label of the 2nd CE is put into the stack bottom of interface label.
In one embodiment, by using extension IGP (Interior Gateway Protocol, Interior Gateway Protocol) protocol realization device within the domain route data information mutual communication, each equipment Any status information need not be preserved.So, without running other signaling protocols such as LDP, RSVP- TE etc..
VPN data transmission side based on Segment routing in SDN provided in an embodiment of the present invention Method, is forwarded using concentrating the SDN controllers of deployment to issue VPN routing iinformations, reduces fortune Dimension workload, lifts Operator Specific Service efficiency of operation, and lifting Operator Specific Service efficiency of operation improves net The scalability of network, reduces the consumption to Internet resources and cpu resource.
Fig. 2 shows that the SDN controller of one embodiment of the invention realizes VPN routing iinformations The schematic diagram of distribution.As shown in Fig. 2 the flow mainly includes:
Step 201, PE 22 reports local user interface information to controller 21, the interface message Binding has adj-segment labels.Binding adj-segment is to define user VRF Done when (Virtual Routing Forwarding, virtual routing forwarding), wherein, tie up Determining example is:Label a correspondence VRF A, Label b correspondence VRF B, wherein, a visitor It is this in there is segment routing tag libraries that family correspondence one VRF, such as laber a are Ground is effective.
Step 202, controller 21 is used under the south orientation agreements such as PCEP/BGP-LS/Netconfig Hair family label information, the label of unified definition RD, RT, controller and record each PE, The label of P equipment, selects optimal forward-path in repeating process, realizes user's routing iinformation Exchange and the topological structures of VPN.
Specifically, when defining RT, RD, prior art is done by PE and then by BGP points Send out, but will be set up between the PE of the whole network BGP connections (n squares connection) or By RR.Compared with prior art, after controller control, the work of this part can be with Concentrating on controller part is carried out, and distributed management is changed into centerized fusion, is capable of achieving to user The encapsulation and forwarding of data.
Using Segment routing technology, equipment need not enter row label conversion on the way, reduce maintenance work Amount, can eliminate other signaling protocols such as LDP, so intermediate node is changed without label, only Will be according to label stack forwarding just, repeating process to-controller is unrelated, improves Operator Specific Service fortune Battalion's efficiency.
Fig. 3 shows the schematic diagram of packet transmission in the SDN of one embodiment of the invention. As shown in figure 3, the transfer process mainly includes:PE 106 needs to transmit packets to PE87, Client's label 9001 of PE 87 is placed on label stack bottom first, then the label 87 of PE87 is put It is first in label stack, controller set the transmission path of the packet as by equipment of the core network 489, 314 propagate, and equipment of the core network P equipment need not change label on the way, need to only be entered according to stack head label Row forwarding, after PE 87 receives packet, stack head label 87 is ejected, and reads stack bottom label 9001, packet is given to the target CE that link tags are 9001.
PE can search routing table after route requests are received, and find mark where target PE and link Sign, then stamp target labels, wherein, 87 is target PE labels, and 9001 is object chain Road.Label propagated by LDP technologies relative to prior art, it is necessary to the side to change on the way Formula, the data transfer mode that the present invention is provided, label can on the way be propagated and will not be changed, always To target PE, so, the information transferring method based on Segment routing does not need BGP and LDP Agreement, intermediateness reduces, without control protocol end to end, and path information storage is in packet In, alleviate machine utilization;The route propagation mode of centralization, need not the company of foundation between PE Connect, it is not required that RR;Three is that centralized mode can more easily do path optimization.
Fig. 4 shows the VPN numbers based on Segment routing in the SDN of one embodiment of the invention According to the structural representation of transmitting device, the device 400 includes:
Package module 401, for label and target PE according to second user edge device CE The label Information encapsulation that sends a CE into the packet containing label information;
Forwarding module 402, for the packet after the encapsulation to be sent into core layer equipment P, The label of target PE of the core layer equipment in the packet sets up forward-path, will The packet is routed to target PE, the target PE according to the label of the 2nd CE by first The information router that CE sends is to the 2nd CE.
In one embodiment, the package module 401 is used for target PE, the 2nd CE Label is inserted into the information of CE transmissions, wherein, the label of target PE is placed on interface The stack of label is first, and the label of the 2nd CE is put into the stack bottom of interface label.
What Fig. 5 was shown in a kind of SDN of one embodiment of the invention based on Segment routing The structured flowchart of VPN data Transmission system, as shown in figure 5, the system includes:Including being based on The provider edge PE 501 of the information carrying means of Segment routing, and core layer equipment P 502nd, customer edge CE 503, controller 504;Wherein, controller 504 receives PE 501 interface messages reported based on contiguous segment information adj segment, the interface message bag Include the interface message of CE and the interface message of PE;The controller unified definition PE's The Route Distinguisher RD of segment label informations and user CE, the label letter of route purpose RT Breath;The controller 504 issues the label information using south orientation agreement, wherein, the south orientation Agreement includes PECP (the Path Computation Element of path computation element Protocol) agreement, Border Gateway Protocol Link State BGP-LS (BGP Link-State), Network environment setting command Netconfig issues label information.
In one embodiment, the PE 501 includes that entry PE and target PE, CE 503 are wrapped Include a CE, the 2nd CE;Wherein, the packet after the encapsulation is sent to core by entry PE Central layer equipment P, the label of target PE of the core layer equipment 502 in the packet Forward-path is set up, the packet is routed to target PE;The target PE is according to second The information router that the label of CE sends a CE is to the 2nd CE.
In one embodiment, adjacent point of binding when user virtual routing forwarding VRF is defined Segment information adj-segment, label one virtual routing forwarding of correspondence, the controller 504 store in Segment routing tag library the label.
In one embodiment, by using in expanding internal gateway protocol IGP protocol realizations domain The routing iinformation intercommunication of equipment, each equipment need not preserve any status information.
Fig. 6 is shown in a kind of SDN of an alternative embodiment of the invention based on segmentation road By VPN data transmitting device structured flowchart.Information carrying means based on Segment routing 600 can possess the host server of computing capability, personal computer PC or can carry Portable computer, mobile terminal or other-end etc..The specific embodiment of the invention is not to meter Implementing for operator node is limited.
Information carrying means 600 based on Segment routing includes processor (processor) 601, communication Interface (Communications Interface) 602, memory (memory) 603 and bus 604. Wherein, processor 601, communication interface 602 and memory 603 are completed by bus 604 Mutual communication.
Communication interface 602 is used for and network device communications, and wherein the network equipment includes such as virtual machine Administrative center, shared storage etc..
Processor 601 is used for configuration processor.Processor 601 can be a central processing unit CPU, or can be application-specific integrated circuit ASIC (Application Specific Integrated Circuit), or be arranged to implement the embodiment of the present invention one or more integrated circuits.
Memory 603 is used to deposit file.Memory 603 can be stored comprising high-speed RAM Device, also can also include nonvolatile memory (non-volatile memory), for example, at least one Magnetic disk storage.Memory 603 can also be memory array.Memory 603 is also possible to be divided Block, and block can be combined into virtual volume by certain rule.
In one embodiment, said procedure can be to include the program generation of computer-managed instruction Code.The program is particularly used in:According to the label and target PE of second user edge device CE The label Information encapsulation that sends a CE into the packet containing label information;By the envelope Packet after dress is sent to core layer equipment P, and the core layer equipment is according in the packet The label of target PE set up forward-path, the packet is routed to target PE, it is described The information router that target PE sends a CE in the packet according to the label of the 2nd CE To the 2nd CE.
In one embodiment, according to second user edge device CE label and target PE's The Information encapsulation that label sends a CE is into including before the packet containing label information:Control Device processed receives entry PE and target PE is based on the interface that contiguous segment information adj segment are reported Information, the interface message includes the interface message and entry PE, target of first, second CE The interface message of PE;The controller according to the interface message for receiving, each PE of unified definition Segment label informations and CE Route Distinguisher RD, the label letter of route purpose RT Breath;The controller issues the label information using south orientation agreement, wherein, the south orientation agreement PECP agreements including path computation element, Border Gateway Protocol Link State BGP-LS, net Network ambient As order Netconfig.
In one embodiment, the controller receives entry PE and target PE is based on adjacent point The interface message that segment information adj segment are reported includes:Defining user's virtual routing forwarding Contiguous segment information adj-segment is bound during VRF, label one virtual flow-line of correspondence turns Deliver, and by label storage in Segment routing tag library.
In one embodiment, the entrance provider edge PE is according to second user edge The Information encapsulation that the label of equipment CE sends a CE with the label of target PE into containing mark The packet of label information includes:The label of target PE, the 2nd CE is inserted into first by entry PE In the information that CE sends, wherein, the stack that the label of target PE is placed on into interface label is first, will The label of the 2nd CE is put into the stack bottom of interface label.
In one embodiment, by using in expanding internal gateway protocol IGP protocol realizations domain The route data information mutual communication of equipment, each equipment need not preserve any status information.
Those of ordinary skill in the art are it is to be appreciated that each example in embodiment described herein Property unit and algorithm steps, can be with electronic hardware or the knot of computer software and electronic hardware Close to realize.These functions are realized with hardware or software form actually, depending on technical scheme Application-specific and design constraint.Professional and technical personnel can be for specific application selection not With method realize described function, but this realize it is not considered that exceeding model of the invention Enclose.
If realizing function in the form of using computer software and as independent production marketing or using When, then to a certain extent it is believed that all or part of technical scheme is (such as to existing Have the part that technology contributes) embody in form of a computer software product.The computer Software product is generally stored inside in the non-volatile memory medium of embodied on computer readable, including some fingers Order is used to so that computer equipment (can be personal computer, server or the network equipment Deng) perform various embodiments of the present invention method all or part of step.And foregoing storage medium bag Include USB flash disk, mobile hard disk, read-only storage (ROM, Read-Only Memory), random Access memory (RAM, Random Access Memory), magnetic disc or CD etc. are various Can be with the medium of store program codes.
Description of the invention is given for the sake of example and description, and is not exhaustively Or limit the invention to disclosed form.Common skill of many modifications and variations for this area It is obvious for art personnel.Selection and description embodiment are to more preferably illustrate principle of the invention And practical application, and make one of ordinary skill in the art it will be appreciated that the present invention is suitable so as to design In the various embodiments with various modifications of special-purpose.

Claims (11)

1. the VPN data transmission method of Segment routing, its feature are based in a kind of SDN It is, including:
Labels and target of the entrance provider edge PE according to second user edge device CE The Information encapsulation that the label of PE sends a CE is into the packet containing label information;
Packet after the encapsulation is sent to core layer equipment P, the core layer by entry PE The label of target PE of the equipment in the packet sets up forward-path, by the packet Target PE, the target PE are routed to according to the label of the 2nd CE by first in the packet The information router that CE sends is to the 2nd CE.
2. method according to claim 1, it is characterised in that entrance provider side Edge equipment PE is according to the label of second user edge device CE and the label of target PE by first The Information encapsulation that CE sends is into including before the packet containing label information:
Controller receives entry PE and target PE is reported based on contiguous segment information adj segment Interface message, the interface message and entrance of the interface message including first, second CE The interface message of PE, target PE;
Segment label of the controller according to each PE of interface message unified definition for receiving The Route Distinguisher RD of information and CE, the label information of route purpose RT;
The controller issues the label information using south orientation agreement, wherein, the south orientation agreement PECP agreements including path computation element, Border Gateway Protocol Link State BGP-LS, net Network ambient As order Netconfig.
3. method according to claim 2, it is characterised in that the controller receive into Mouth PE and target PE is included based on the interface message that contiguous segment information adj segment are reported:
The binding contiguous segment information adj- when user virtual routing forwarding VRF is defined Segment, label one virtual routing forwarding of correspondence, and label storage is being divided In section routing tag storehouse.
4. method according to claim 1, it is characterised in that entrance provider side Edge equipment PE is according to the label of second user edge device CE and the label of target PE by first The Information encapsulation that CE sends includes into the packet containing label information:
The label of target PE, the 2nd CE is inserted into entry PE the information of CE transmissions In, wherein, the stack that the label of target PE is placed on into interface label is first, by the label of the 2nd CE It is put into the stack bottom of interface label.
5. method according to claim 1, it is characterised in that by using expanding internal The route data information mutual communication of gateway protocol IGP protocol realization device within the domain, each equipment need not Preserve any status information.
6. the VPN data transmitting device of Segment routing, its feature are based in a kind of SDN It is, including:
Package module, for label and the mark of target PE according to second user edge device CE Sign the Information encapsulation of CE transmissions into the packet containing label information;
Forwarding module, it is described for the packet after the encapsulation to be sent into core layer equipment P The label of target PE of the core layer equipment in the packet sets up forward-path, will be described Packet is routed to target PE, the target PE according to the label of the 2nd CE by the packet In a CE send information router to the 2nd CE.
7. device according to claim 6, it is characterised in that the package module is used for The label of target PE, the 2nd CE is inserted into the information of CE transmissions, wherein, will The stack that the label of target PE is placed on interface label is first, and the label of the 2nd CE is put into interface label Stack bottom.
8. the VPN data Transmission system of Segment routing, its feature are based in a kind of SDN It is, including:
Including the VPN data based on Segment routing in the SDN as described in claim 6-7 The provider edge PE of transmitting device, and core layer equipment P, customer edge CE, controller;
Wherein, controller receives PE and is based on the interface that contiguous segment information adj segment are reported Information, the interface message includes the interface message of CE and the interface message of PE;The control The segment label informations of device unified definition PE and Route Distinguisher RD, the road of user CE By the label information of purpose RT;The controller issues the label information using south orientation agreement, Wherein, the south orientation agreement includes PECP agreements, the Border Gateway Protocol chain of path computation element Line state BGP-LS, network environment setting command Netconfig issue label information.
9. system according to claim 8, it is characterised in that the PE includes entrance PE and target PE, the CE include a CE, the 2nd CE;Wherein, entry PE is by institute State the packet after encapsulation and be sent to core layer equipment P, the core layer equipment is according to the data The label of the target PE in bag sets up forward-path, and the packet is routed into target PE, The load balancing when there is a plurality of forward-path;The target PE will according to the label of the 2nd CE The information router that a CE sends in the packet is to the 2nd CE.
10. system according to claim 8, it is characterised in that:
The binding contiguous segment information adj- when user virtual routing forwarding VRF is defined Segment, label one virtual routing forwarding of correspondence, the controller is by the label Storage is in Segment routing tag library.
11. systems according to claim 8, it is characterised in that:
It is mutual by the routing iinformation using expanding internal gateway protocol IGP protocol realization device within the domain Logical, each equipment need not preserve any status information.
CN201510777433.2A 2015-11-13 2015-11-13 VPN method, device and system based on segmented routing and SDN technology Active CN106713137B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201510777433.2A CN106713137B (en) 2015-11-13 2015-11-13 VPN method, device and system based on segmented routing and SDN technology

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201510777433.2A CN106713137B (en) 2015-11-13 2015-11-13 VPN method, device and system based on segmented routing and SDN technology

Publications (2)

Publication Number Publication Date
CN106713137A true CN106713137A (en) 2017-05-24
CN106713137B CN106713137B (en) 2020-02-18

Family

ID=58930311

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201510777433.2A Active CN106713137B (en) 2015-11-13 2015-11-13 VPN method, device and system based on segmented routing and SDN technology

Country Status (1)

Country Link
CN (1) CN106713137B (en)

Cited By (14)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN108259341A (en) * 2017-12-06 2018-07-06 新华三技术有限公司 A kind of prefix label distribution method and SDN controllers
CN108259303A (en) * 2017-12-25 2018-07-06 新华三技术有限公司 A kind of message forwarding method and device
CN109327374A (en) * 2017-07-31 2019-02-12 杭州达乎科技有限公司 Realize the system and method for three-layer VPN network insertion
CN110035012A (en) * 2018-12-25 2019-07-19 ***股份有限公司 VPN traffic scheduling method based on SDN and the VPN flow scheduling system based on SDN
CN110099388A (en) * 2019-03-21 2019-08-06 世讯卫星技术有限公司 A kind of satellite mobile communication method with the 5G network integration
WO2019179188A1 (en) * 2018-03-23 2019-09-26 南京中兴新软件有限责任公司 Method and device for notification of binding information, and storage medium
CN110460507A (en) * 2019-09-11 2019-11-15 赛尔网络有限公司 Service bearer method, apparatus
CN110830354A (en) * 2018-08-08 2020-02-21 北京华为数字技术有限公司 Data forwarding method, device, equipment and storage medium
CN111131038A (en) * 2018-10-31 2020-05-08 中国电信股份有限公司 Cross-domain message forwarding method, system and storage system
CN111181938A (en) * 2019-12-20 2020-05-19 北京交通大学 Edge calculation distributed data encryption transmission method based on fragment transmission
CN112398732A (en) * 2019-08-12 2021-02-23 迈普通信技术股份有限公司 Message processing method, device and system
CN112671646A (en) * 2019-10-16 2021-04-16 ***通信有限公司研究院 Information processing method, device, equipment and computer readable storage medium
CN113194033A (en) * 2021-03-29 2021-07-30 新华三大数据技术有限公司 Message forwarding method and device based on SDN (software defined network) segment routing networking and storage medium
WO2022042610A1 (en) * 2020-08-25 2022-03-03 中兴通讯股份有限公司 Information processing method, network controller, node and computer-readable storage medium

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102394804A (en) * 2011-11-02 2012-03-28 中兴通讯股份有限公司 VPN system building method and VPN system
US20140211615A1 (en) * 2012-12-18 2014-07-31 Juniper Networks, Inc. Aggregation network with centralized control
CN104753713A (en) * 2013-12-31 2015-07-01 华为技术有限公司 SDN (Self-Defending Network) service deployment method and SDN controller
CN105049350A (en) * 2014-04-17 2015-11-11 思科技术公司 Segment routing - egress peer engineering (SP-EPE)

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102394804A (en) * 2011-11-02 2012-03-28 中兴通讯股份有限公司 VPN system building method and VPN system
US20140211615A1 (en) * 2012-12-18 2014-07-31 Juniper Networks, Inc. Aggregation network with centralized control
CN104753713A (en) * 2013-12-31 2015-07-01 华为技术有限公司 SDN (Self-Defending Network) service deployment method and SDN controller
CN105049350A (en) * 2014-04-17 2015-11-11 思科技术公司 Segment routing - egress peer engineering (SP-EPE)

Cited By (24)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN109327374A (en) * 2017-07-31 2019-02-12 杭州达乎科技有限公司 Realize the system and method for three-layer VPN network insertion
CN109327374B (en) * 2017-07-31 2021-09-28 上海层峰网络科技有限公司 System and method for realizing three-layer VPN network access
CN108259341A (en) * 2017-12-06 2018-07-06 新华三技术有限公司 A kind of prefix label distribution method and SDN controllers
CN108259341B (en) * 2017-12-06 2020-12-29 新华三技术有限公司 Prefix label distribution method and SDN controller
CN108259303A (en) * 2017-12-25 2018-07-06 新华三技术有限公司 A kind of message forwarding method and device
CN108259303B (en) * 2017-12-25 2020-12-04 新华三技术有限公司 Message forwarding method and device
CN110300061A (en) * 2018-03-23 2019-10-01 中兴通讯股份有限公司 A kind of method, equipment and storage medium for noticing binding information
WO2019179188A1 (en) * 2018-03-23 2019-09-26 南京中兴新软件有限责任公司 Method and device for notification of binding information, and storage medium
CN110830354A (en) * 2018-08-08 2020-02-21 北京华为数字技术有限公司 Data forwarding method, device, equipment and storage medium
CN111131038A (en) * 2018-10-31 2020-05-08 中国电信股份有限公司 Cross-domain message forwarding method, system and storage system
CN111131038B (en) * 2018-10-31 2022-04-19 中国电信股份有限公司 Cross-domain message forwarding method, system and storage system
US11296997B2 (en) 2018-12-25 2022-04-05 China Unionpay Co., Ltd. SDN-based VPN traffic scheduling method and SDN-based VPN traffic scheduling system
WO2020134017A1 (en) * 2018-12-25 2020-07-02 ***股份有限公司 Sdn-based vpn traffic scheduling method and sdn-based vpn traffic scheduling system
CN110035012A (en) * 2018-12-25 2019-07-19 ***股份有限公司 VPN traffic scheduling method based on SDN and the VPN flow scheduling system based on SDN
CN110099388A (en) * 2019-03-21 2019-08-06 世讯卫星技术有限公司 A kind of satellite mobile communication method with the 5G network integration
CN110099388B (en) * 2019-03-21 2021-11-16 世讯航空技术有限公司 Satellite mobile communication method fused with 5G network
CN112398732B (en) * 2019-08-12 2023-09-12 迈普通信技术股份有限公司 Message processing method, device and system
CN112398732A (en) * 2019-08-12 2021-02-23 迈普通信技术股份有限公司 Message processing method, device and system
CN110460507A (en) * 2019-09-11 2019-11-15 赛尔网络有限公司 Service bearer method, apparatus
CN112671646A (en) * 2019-10-16 2021-04-16 ***通信有限公司研究院 Information processing method, device, equipment and computer readable storage medium
CN111181938A (en) * 2019-12-20 2020-05-19 北京交通大学 Edge calculation distributed data encryption transmission method based on fragment transmission
WO2022042610A1 (en) * 2020-08-25 2022-03-03 中兴通讯股份有限公司 Information processing method, network controller, node and computer-readable storage medium
CN113194033B (en) * 2021-03-29 2022-04-01 新华三大数据技术有限公司 Message forwarding method and device based on SDN (software defined network) segment routing networking and storage medium
CN113194033A (en) * 2021-03-29 2021-07-30 新华三大数据技术有限公司 Message forwarding method and device based on SDN (software defined network) segment routing networking and storage medium

Also Published As

Publication number Publication date
CN106713137B (en) 2020-02-18

Similar Documents

Publication Publication Date Title
CN106713137A (en) VPN method based on segment routing and SDN technology and device and system thereof
CN106664252B (en) Realize method, equipment and the system of service chaining
CN104954274B (en) Generate method, controller and the business Delivery Function of forwarding information
CN104982013B (en) A kind of method, equipment and the system of business routing
CN103905315B (en) Transmit the method, apparatus and system of virtualization and the distribution of routing iinformation used in network
CN104717098B (en) A kind of data processing method and device
CN107005462A (en) The method, apparatus and system of data forwarding in software defined network
CN107181663A (en) A kind of message processing method, relevant device and computer-readable recording medium
CN105871721A (en) Segment routing processing method, processing device and sending device
CN103607349A (en) Method for determining route in virtual network and provider edge equipment
CN101960785A (en) Implementation of VPN over a link state protocol controlled Ethernet network
CN105871722A (en) Tag structure and tag message forwarding method and device
CN106921572B (en) A kind of method, apparatus and system for propagating qos policy
CN103269315B (en) Label distribution method, device, System and Network equipment
CN107968750A (en) Message transmitting method, device and node
CN105681198B (en) A kind of business chain processing method, equipment and system
CN104365066B (en) Method and apparatus for ether Virtual Private Network
CN104488235B (en) Message forwarding method and the network equipment
CN104954288B (en) Method for sending information, device and communication system
CN103634423B (en) Three-layered interface based MPLS-TP (multi-protocol label switching-transport profile) configuration method and device
CN101841487A (en) Configuration method for aggregating link service flow and packet switching device
CN105337881A (en) Data message processing method, service node and stream guiding point
CN103634217A (en) Method for issuing route information, method and device for transmitting massage
CN104396197A (en) Selecting between equal cost shortest paths in a 802.1aq network using split tiebreakers
CN107113241A (en) Route determining methods, network collocating method and relevant apparatus

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant