WO2015154603A1

WO2015154603A1 - Tunnel protecting method and device based on shared tunnel

Info

Publication number: WO2015154603A1
Application number: PCT/CN2015/074119
Authority: WO
Inventors: 齐增义; 于同泉; 唐益慰
Original assignee: 中兴通讯股份有限公司
Priority date: 2014-10-21
Filing date: 2015-03-12
Publication date: 2015-10-15
Also published as: CN105591898A

Abstract

A tunnel protecting method and device based on shared tunnels, the method comprising: configuring a shared work tunnel and a shared protection tunnel to form a protection group; periodically transmitting packets on the shared work tunnel and shared protection tunnel, detecting the status of the shared work tunnel and shared protection tunnel; when detecting changes in the status of the shared work tunnel and shared protection tunnel, performing a shared tunnel switching operation on the tunnel protection group. The technical solution of the present invention saves resources used for tunnel protection group switching, reducing bandwidth resources and computation resources used by devices.

Description

基于共享隧道的隧道保护方法及装置Tunnel protection method and device based on shared tunnel

技术领域Technical field

本发明涉及基于共享隧道的隧道保护技术领域，尤其涉及一种基于共享隧道的隧道保护方法及装置。The present invention relates to the field of tunnel protection technologies based on shared tunnels, and in particular, to a tunnel protection method and apparatus based on shared tunnels.

背景技术Background technique

目前，在PTN通信领域中，VP层的保护表现为隧道间的保护，两条隧道组成一个保护组，一条为工作隧道，另外一条为工作隧道的备用隧道即保护隧道，保护隧道在工作隧道故障的时候进行工作，以保证业务的正常运行。At present, in the field of PTN communication, the protection of the VP layer is represented as protection between tunnels. Two tunnels form a protection group, one is a working tunnel, and the other is a standby tunnel that is a working tunnel, that is, a protection tunnel. Work at the time to ensure the normal operation of the business.

在相关技术中，工作隧道和保护隧道均需要设置相应的检测模块，并且每个保护组需要维护一个自动保护切换(APS，Automatic protection switch)状态机；其中检测模块用来检测工作隧道、保护隧道是否故障，当检测到故障时，通告给隧道保护组；其中APS状态机用来接收隧道保护组工作隧道和保护隧道的故障，计算最新的保护状态，然后通告给隧道保护组，隧道保护组根据最新保护状态指导转发。In the related art, the working tunnel and the protection tunnel need to be provided with corresponding detection modules, and each protection group needs to maintain an automatic protection switch (APS) state machine; wherein the detection module is used to detect the working tunnel and the protection tunnel. Whether it is faulty, when a fault is detected, it is advertised to the tunnel protection group; wherein the APS state machine is used to receive the fault of the tunnel protection group working tunnel and the protection tunnel, calculate the latest protection state, and then notify the tunnel protection group, and the tunnel protection group is The latest protection status guides forwarding.

目前，在实际应用中，如果在相同的物理链路上存在大量的需要保护的隧道业务时，通常会配置大量的隧道保护组，那么，这些隧道保护组的检测模块会定期发送大量的检测报文，从而会占用大量的带宽资源。另外，每个隧道保护组启用的APS状态机都会根据当前保护组的工作隧道和保护隧道状态计算最新的保护状态，这样会占用大量的计算资源，另外对于双向隧道保护，APS状态机还会发送协议报文协商保护状态，同样占用带宽资源。Currently, in a practical application, if there are a large number of tunnel services to be protected on the same physical link, a large number of tunnel protection groups are usually configured. Then, the detection modules of the tunnel protection groups periodically send a large number of detection reports. Text, which will consume a lot of bandwidth resources. In addition, the APS state machine enabled by each tunnel protection group calculates the latest protection state according to the working tunnel and protection tunnel state of the current protection group, which consumes a large amount of computing resources. In addition, for the two-way tunnel protection, the APS state machine also sends Protocol packets negotiate protection status and also occupy bandwidth resources.

因此，相关技术针对相同的物理链路上存在大量的需要保护的隧道业务的时候，或者造成带宽资源和计算资源的浪费，或者配置比较复杂。Therefore, the related technology is directed to a large number of tunnel services that need to be protected on the same physical link, or wastes bandwidth resources and computing resources, or the configuration is complicated.

发明内容Summary of the invention

本发明的主要目的在于提供一种基于共享隧道的隧道保护方法及装置，旨在解决相关技术中相同的物理链路上存在大量的需要保护的隧道业务时，带宽资源和计算资源浪费的问题、配置比较复杂的问题。The main objective of the present invention is to provide a tunnel protection method and device based on a shared tunnel. It is intended to solve the problem that the bandwidth resource and the computing resource are wasted and the configuration is complicated when there are a large number of tunnel services that need to be protected on the same physical link in the related art.

为了达到上述目的，采用如下技术方案：In order to achieve the above objectives, the following technical solutions are adopted:

一种基于共享隧道的隧道保护方法，包括：A tunnel protection method based on a shared tunnel, comprising:

配置共享工作隧道和共享保护隧道，形成隧道保护组；Configure a shared working tunnel and a shared protection tunnel to form a tunnel protection group.

检测所述共享工作隧道和共享保护隧道的状态；Detecting a status of the shared working tunnel and the shared protection tunnel;

当检测到所述共享工作隧道或共享保护隧道的状态发生变化时，对所述隧道保护组进行共享隧道的切换操作。When it is detected that the state of the shared working tunnel or the shared protection tunnel changes, the switching operation of the shared tunnel is performed on the tunnel protection group.

可选地，所述检测所述共享工作隧道和共享保护隧道的状态的步骤包括：Optionally, the step of detecting the status of the shared working tunnel and the shared protection tunnel includes:

在所述共享工作隧道和共享保护隧道上定期发送隧道检测报文，根据上述隧道检测报文的接收情况，检测所述共享工作隧道和所述共享保护隧道的状态。The tunnel detection packet is periodically sent on the shared working tunnel and the shared protection tunnel, and the status of the shared working tunnel and the shared protection tunnel is detected according to the receiving condition of the tunnel detection packet.

可选地，所述当检测到所述共享工作隧道或共享保护隧道的状态发生变化时，对所述隧道保护组进行共享隧道的切换操作的步骤包括：Optionally, when the state of the shared working tunnel or the shared protection tunnel is changed, the step of performing the switching operation of the shared tunnel to the tunnel protection group includes:

当检测到所述共享工作隧道或共享保护隧道的状态发生变化时，通过所述隧道保护组的APS状态机进行状态计算，获取状态切换结果；When the state of the shared working tunnel or the shared protection tunnel is changed, the APS state machine of the tunnel protection group performs state calculation to obtain a state switching result;

根据状态切换结果，对隧道业务报文封装相应的共享隧道标签并转发，包括：According to the state switching result, the corresponding shared tunnel label is encapsulated and forwarded to the tunnel service packet, including:

当所述状态切换结果为切换状态时，通知物理链路上承载的隧道业务外层对隧道业务报文封装共享保护隧道标签并转发；When the state switching result is the switching state, the outer layer of the tunnel service carried on the physical link is encapsulated with the shared protection tunnel label and forwarded by the tunnel service packet;

当所述状态切换结果为非切换状态时，通知所述物理链路上承载的隧道业务外层对所述隧道业务报文封装共享工作隧道标签并转发。When the state switching result is a non-handover state, the outer layer of the tunnel service carried on the physical link is encapsulated and the working tunnel label is encapsulated and forwarded.

可选地，对隧道业务报文封装相应的共享隧道标签并转发的步骤包括：Optionally, the step of encapsulating the corresponding shared tunnel label and forwarding the tunnel service packet includes:

在共享隧道的头节点转发所述隧道业务报文时，根据所述隧道业务报文的流向和共享隧道的运行方向压入相应的共享隧道标签，沿着所述共享隧道进行转发，在所述共享隧道运行方向的尾节点弹出所述共享隧道标签。 When the tunnel node forwards the tunnel service packet, the corresponding shared tunnel label is pushed according to the flow direction of the tunnel service packet and the running direction of the shared tunnel, and the forwarding is performed along the shared tunnel. The shared node label is popped up by the tail node of the shared tunnel running direction.

可选地，所述共享工作隧道和共享保护隧道均支持倒数第二跳弹出。Optionally, the shared working tunnel and the shared protection tunnel both support a penultimate hop pop.

可选地，所述配置共享工作隧道和共享保护隧道，形成隧道保护组的步骤包括：Optionally, the step of configuring the shared working tunnel and the shared protection tunnel to form a tunnel protection group includes:

在不同的物理链路上分别配置所述共享工作隧道和所述共享保护隧道，其中，设置所述共享工作隧道承载物理链路上的隧道业务，在区别于所述共享工作隧道所在物理链路的链路上配置所述共享保护隧道，形成所述隧道保护组。The shared working tunnel and the shared protection tunnel are separately configured on different physical links, where the shared working tunnel is set to carry the tunnel service on the physical link, which is different from the physical link where the shared working tunnel is located. The shared protection tunnel is configured on the link to form the tunnel protection group.

可选地，所述隧道业务为单层标签的VPN业务、多层标签的LSP业务，或无标签的IP或Eth业务。Optionally, the tunnel service is a single-layer label VPN service, a multi-layer label LSP service, or an unlabeled IP or Eth service.

一种基于共享隧道的隧道保护装置，包括保护配置模块、检测模块和业务切换模块，其中：A tunnel protection device based on a shared tunnel includes a protection configuration module, a detection module, and a service switching module, where:

所述保护配置模块设置成：配置共享工作隧道和共享保护隧道，形成隧道保护组；The protection configuration module is configured to: configure a shared working tunnel and a shared protection tunnel to form a tunnel protection group;

所述检测模块设置成：检测所述共享工作隧道和共享保护隧道的状态；The detecting module is configured to: detect a state of the shared working tunnel and the shared protection tunnel;

所述业务切换模块设置成：当所述检测模块检测到所述共享工作隧道或共享保护隧道的状态发生变化时，对隧道保护组进行共享隧道的切换操作。The service switching module is configured to perform a switching operation of the shared tunnel to the tunnel protection group when the detecting module detects that the state of the shared working tunnel or the shared protection tunnel changes.

可选地，所述检测模块设置成按照如下方式检测所述共享工作隧道和共享保护隧道的状态；Optionally, the detecting module is configured to detect a state of the shared working tunnel and the shared protection tunnel according to the following manner;

可选地，所述业务切换模块设置成按照如下方式对隧道保护组进行共享隧道的切换操作：Optionally, the service switching module is configured to perform a switching operation of the shared tunnel to the tunnel protection group as follows:

当所述检测模块检测到所述共享工作隧道或共享保护隧道的状态发生变化时，通过所述隧道保护组的APS状态机进行状态计算，获取状态切换结果； When the detecting module detects that the state of the shared working tunnel or the shared protection tunnel changes, the state is calculated by the APS state machine of the tunnel protection group, and the state switching result is obtained;

按照如下方式根据状态切换结果，对隧道业务报文封装相应的共享隧道标签并转发：当所述状态切换结果为切换状态时，通知物理链路上承载的隧道业务外层对隧道业务报文封装共享保护隧道标签并转发；当所述状态切换结果为非切换状态时，通知所述物理链路上承载的隧道业务外层对所述隧道业务报文封装共享工作隧道标签并转发。According to the state switching result, the tunnel service packet is encapsulated with the corresponding shared tunnel label and forwarded: when the state switching result is the switching state, the outer layer of the tunnel service carried on the physical link is encapsulated into the tunnel service packet. The protection tunnel label is shared and forwarded. When the state switching result is a non-handover state, the outer layer of the tunnel service carried on the physical link is encapsulated and the working tunnel label is encapsulated and forwarded.

可选地，所述业务切换模块设置成按照如下方式对隧道业务报文封装相应的共享隧道标签并转发：Optionally, the service switching module is configured to encapsulate the corresponding shared tunnel label and forward the tunnel service packet according to the following manner:

在共享隧道的头节点转发所述隧道业务报文时，根据所述隧道业务报文的流向和共享隧道的运行方向压入相应的共享隧道标签，沿着所述共享隧道进行转发，在所述共享隧道运行方向的尾节点弹出所述共享隧道标签。When the tunnel node forwards the tunnel service packet, the corresponding shared tunnel label is pushed according to the flow direction of the tunnel service packet and the running direction of the shared tunnel, and the forwarding is performed along the shared tunnel. The shared node label is popped up by the tail node of the shared tunnel running direction.

可选地，所述保护配置模块设置成按照如下方式配置共享工作隧道和共享保护隧道，形成隧道保护组：Optionally, the protection configuration module is configured to configure a shared working tunnel and a shared protection tunnel to form a tunnel protection group as follows:

在不同的物理链路上分别配置所述共享工作隧道和所述共享保护隧道，其中，设置该共享工作隧道承载物理链路上的隧道业务，在区别于所述共享工作隧道所在物理链路的链路上配置所述共享保护隧道，形成所述隧道保护组。The shared working tunnel and the shared protection tunnel are respectively configured on different physical links, where the shared working tunnel is set to carry the tunnel service on the physical link, which is different from the physical link where the shared working tunnel is located. The shared protection tunnel is configured on the link to form the tunnel protection group.

一种计算机程序，包括程序指令，当该程序指令被计算机执行时，使得该计算机可执行上述任意的基于共享隧道的隧道保护方法。A computer program comprising program instructions that, when executed by a computer, cause the computer to perform any of the above-described shared tunnel-based tunnel protection methods.

一种载有所述计算机程序的载体。A carrier carrying the computer program.

本发明实施例提出的一种基于共享隧道的隧道保护方法及装置，通过配置共享工作隧道和共享保护隧道，形成隧道保护组；在所述共享工作隧道和共享保护隧道上定期发送检测报文，检测所述共享工作隧道和共享保护隧道的状态；当检测到所述共享工作隧道或共享保护隧道的状态发生变化时，对隧道保护组进行共享隧道的切换操作，克服了相关技术中针对相同的物理链路上存在大量的需要保护的隧道业务的时候，带宽资源和计算资源浪费的问题、配置比较复杂的问题，与相关技术相比，本发明不需要配置大量的隧道保护组、隧道保护组群组，配置简单；同时节省了隧道保护组切换时占用的资源，减少了设备占用的带宽资源和计算资源。A shared tunnel-based tunnel protection method and device according to the embodiment of the present invention, a shared working tunnel and a shared protection tunnel are configured to form a tunnel protection group; and the detection packet is periodically sent on the shared working tunnel and the shared protection tunnel. The state of the shared working tunnel and the shared protection tunnel is detected; when the state of the shared working tunnel or the shared protection tunnel is changed, the switching operation of the shared tunnel is performed on the tunnel protection group, and the related technology is overcome for the same When there are a large number of tunnel services that need to be protected on the physical link, bandwidth resources and computing resources are wasted. Compared with related technologies, the present invention does not need to configure a large number of tunnel protection groups and tunnel protection group groups, and the configuration is simple; the resources occupied by the tunnel protection group are saved, and the equipment occupation is reduced. Bandwidth resources and computing resources.

附图概述BRIEF abstract

图1是本发明基于共享隧道的隧道保护方法一实施例的流程示意图；1 is a schematic flowchart of an embodiment of a tunnel protection method based on a shared tunnel according to the present invention;

图2是本发明实施例的隧道保护非切换状态的转发流程示意图；2 is a schematic diagram of a forwarding process of a tunnel protection non-handover state according to an embodiment of the present invention;

图3是本发明实施例的隧道保护切换状态的转发流程示意图；3 is a schematic flowchart of a forwarding process of a tunnel protection switching state according to an embodiment of the present invention;

图4是本发明基于共享隧道的隧道保护装置一实施例的功能模块示意图。4 is a schematic diagram of functional modules of an embodiment of a tunnel protection device based on a shared tunnel according to the present invention.

下面将结合附图作进一步详述。The details will be further described below with reference to the accompanying drawings.

本发明的较佳实施方式Preferred embodiment of the invention

本发明实施例的解决方案主要是：通过配置共享工作隧道和共享保护隧道，形成隧道保护组；在所述共享工作隧道和共享保护隧道上定期发送检测报文，检测所述共享工作隧道和共享保护隧道的状态；当检测到所述共享工作隧道或共享保护隧道的状态发生变化时，对隧道保护组进行共享隧道的切换操作，与相关技术相比，不需要配置大量的隧道保护组、隧道保护组群组，配置简单；同时节省了隧道保护组切换时占用的资源，减少了设备占用的带宽资源和计算资源。The solution of the embodiment of the present invention is: forming a tunnel protection group by configuring a shared working tunnel and a shared protection tunnel; and periodically sending detection packets on the shared working tunnel and the shared protection tunnel to detect the shared working tunnel and sharing The state of the protection tunnel is changed. When the state of the shared working tunnel or the shared protection tunnel is changed, the switching operation of the shared tunnel is performed on the tunnel protection group. Compared with the related technologies, a large number of tunnel protection groups and tunnels are not required to be configured. The protection group group is simple in configuration. It saves the resources occupied by the tunnel protection group and reduces the bandwidth resources and computing resources occupied by the device.

如图1所示，本发明一实施例提出一种基于共享隧道的隧道保护方法，包括：As shown in FIG. 1 , an embodiment of the present invention provides a tunnel protection method based on a shared tunnel, including:

步骤S101，配置共享工作隧道和共享保护隧道，形成隧道保护组；Step S101: Configure a shared working tunnel and a shared protection tunnel to form a tunnel protection group.

由于相关技术中，在相同的物理链路上存在大量的需要保护的隧道业务时，通常会配置大量的隧道保护组，存在带宽资源和计算资源浪费的问题以及配置比较复杂的问题。 In the related art, when there are a large number of tunnel services to be protected on the same physical link, a large number of tunnel protection groups are usually configured, and there are problems of waste of bandwidth resources and computing resources, and complicated configuration.

本实施例方案通过配置共享隧道，可以节省隧道保护组切换时占用的资源，减少设备占用的带宽资源和计算资源。In this embodiment, the configuration of the shared tunnel can save the resources occupied by the tunnel protection group and reduce the bandwidth resources and computing resources occupied by the device.

具体地，在需要承载隧道业务的物理链路上配置一条隧道，作为共享隧道，该隧道用于承载多个承载在该物理链路上的隧道业务。Specifically, a tunnel is configured on the physical link that needs to carry the tunnel service, and is used as a shared tunnel. The tunnel is used to carry multiple tunnel services that are carried on the physical link.

其中，配置的共享隧道包括共享工作隧道和共享保护隧道，形成隧道保护组。The shared tunnel configured includes a shared working tunnel and a shared protection tunnel to form a tunnel protection group.

可选地，在物理链路上配置共享隧道，设置物理链路上承载的隧道业务外层走该共享隧道，并配置该共享隧道为隧道保护组工作隧道，称其为共享工作隧道；在区别于共享工作隧道所在物理链路的链路上配置共享隧道，设置其为隧道保护组的保护隧道，称其为共享保护隧道，由此形成隧道保护组。其中，设置物理链路上承载的隧道业务外层走该共享隧道是指设置该共享隧道承载物理链路上的各个隧道业务。Optionally, a shared tunnel is configured on the physical link, and the tunnel service carried on the physical link is taken out of the shared tunnel, and the shared tunnel is configured as a tunnel protection group working tunnel, which is called a shared working tunnel; Configure a shared tunnel on the link of the physical link where the working tunnel is located, and set it as the protection tunnel of the tunnel protection group. This is called a shared protection tunnel, thus forming a tunnel protection group. The outer layer of the tunnel service carried on the physical link is configured to set the tunnel service on the physical link.

其中，共享隧道上承载的隧道业务可以是单层标签的VPN业务(L2/L3VPN)，也可以是多层标签的LSP业务(IP-MPLS/MPLS-TP Tunnel等)，甚至是无标签的IP或Eth业务等。The tunnel service carried on the shared tunnel may be a single-layer label VPN service (L2/L3VPN), or a multi-layer label LSP service (IP-MPLS/MPLS-TP tunnel, etc.) or even an unlabeled IP address. Or Eth business, etc.

步骤S102，检测所述共享工作隧道和共享保护隧道的状态；Step S102, detecting a state of the shared working tunnel and the shared protection tunnel;

检测共享工作隧道和共享保护隧道的状态，以便当检测到共享工作隧道、共享保护隧道的状态发生变化时，对上述隧道保护组进行切换操作。The state of the shared working tunnel and the shared protection tunnel is detected, so that when the state of the shared working tunnel and the shared protection tunnel is changed, the tunnel protection group is switched.

其中检测共享工作隧道、共享保护隧道的状态包括：在所述共享工作隧道和共享保护隧道上定期发送隧道检测报文(CC&CV、BFD等)，根据上述隧道检测报文的接收情况，检测上述隧道保护组的共享工作隧道、共享保护隧道的状态，包括是否存在节点或者链路故障，或者故障恢复。The detecting the status of the shared working tunnel and the shared protection tunnel includes: periodically transmitting tunnel detection packets (CC&CV, BFD, etc.) on the shared working tunnel and the shared protection tunnel, and detecting the tunnel according to the receiving condition of the tunnel detection packet. The status of the shared working tunnel and shared protection tunnel of the protection group, including whether there is a node or link failure, or fault recovery.

例如，通过检测CC&CV(Continuity Check and Connectivity Verification，连续性检测和连通性确认)、BFD(Bidirectional Forwarding Detection，双向转发检测)报文等，来检测链路状态。For example, the link state is detected by detecting a CC&CV (Continuity Check and Connectivity Verification), a BFD (Bidirectional Forwarding Detection) message, or the like.

步骤S103，当检测到所述共享工作隧道或共享保护隧道的状态发生变化时，对隧道保护组进行共享隧道的切换操作。Step S103: When it is detected that the state of the shared working tunnel or the shared protection tunnel changes, the switching operation of the shared tunnel is performed on the tunnel protection group.

作为一种实施方式，当检测到所述共享工作隧道或共享保护隧道的状态发生变化时，对隧道保护组通过相应计算，获取隧道保护组的切换状态，根据隧道保护组的切换状态执行切换或者回切操作，进行隧道业务外层共享隧道标签的封装。As an embodiment, when the state of the shared working tunnel or the shared protection tunnel is changed, the tunnel protection group obtains the switching state of the tunnel protection group through corresponding calculation, and performs switching according to the switching state of the tunnel protection group. Switchback operation, tunneling service outer shared tunnel The package of the track label.

作为另一种实施方式，当检测到所述共享工作隧道或共享保护隧道的状态发生变化时，通过隧道保护组的APS状态机进行状态计算，APS状态机把计算结果通告给隧道保护组，然后隧道保护组根据切换状态执行切换或者回切操作，进行隧道业务外层共享隧道标签的封装。As another implementation manner, when it is detected that the state of the shared working tunnel or the shared protection tunnel changes, the state is calculated by the APS state machine of the tunnel protection group, and the APS state machine notifies the calculation result to the tunnel protection group, and then The tunnel protection group performs the switching or the switchback operation according to the switching state, and encapsulates the outer shared tunnel label of the tunnel service.

具体实现时，当状态切换结果为切换状态时，通知物理链路上承载的隧道业务外层对隧道业务报文封装共享保护隧道标签并转发，如图2所示，图2是本发明实施例的隧道保护非切换状态的转发流程示意图。In the specific implementation, when the state switching result is the switching state, the outer layer of the tunnel service carried on the physical link is notified to the tunnel service packet, and the shared protection tunnel label is encapsulated and forwarded. As shown in FIG. 2, FIG. 2 is an embodiment of the present invention. Schematic diagram of the forwarding process of the tunnel protection non-switching state.

当状态切换结果为非切换状态时，通知物理链路上承载的隧道业务外层对隧道业务报文封装共享工作隧道标签并转发，如图3所示，图3是本发明实施例的隧道保护切换状态的转发流程示意图。When the result of the state switching is a non-handover state, the outer layer of the tunnel service carried on the physical link is notified to share the working tunnel label and forward the tunnel service packet, as shown in FIG. 3, FIG. 3 is a tunnel protection according to an embodiment of the present invention. Schematic diagram of the forwarding process of the switching state.

也就是说，如果隧道保护组当前处于切换状态，物理链路上承载的隧道业务外层封装共享保护隧道标签进行转发，如果隧道保护组没有切换，则物理链路上承载的隧道业务外层封装共享工作隧道的标签进行转发。以此隧道保护方法实现对物理链路上承载的大量隧道业务的保护，该方法配置简单，不需要配置大量隧道保护组及其维护的APS状态机，不需要配置大量的隧道检测，从而节省了带宽资源及计算资源。That is, if the tunnel protection group is currently in the switching state, the tunnel service carried on the physical link encapsulates the shared protection tunnel label for forwarding. If the tunnel protection group does not switch, the tunnel service outer layer encapsulation on the physical link is encapsulated. The label of the shared working tunnel is forwarded. The tunnel protection method is used to protect a large number of tunnel services carried on the physical link. The method is simple in configuration, and does not need to be configured with a large number of tunnel protection groups and APS state machines maintained by them. Bandwidth resources and computing resources.

可选地，在对隧道业务报文封装相应的共享隧道标签并转发时，具体采用如下方案：Optionally, when the corresponding shared tunnel label is encapsulated and forwarded to the tunnel service packet, the following solution is specifically adopted:

在相应的共享隧道的头节点转发隧道业务报文时，根据隧道业务报文的流向和共享隧道的运行方向压入共享隧道标签，沿着共享隧道进行转发，在共享隧道运行方向的尾节点弹出共享隧道标签。When the tunnel node of the corresponding shared tunnel forwards the tunnel service packet, it pushes the shared tunnel label according to the flow direction of the tunnel service packet and the running direction of the shared tunnel, and forwards it along the shared tunnel, and pops up at the tail node in the running direction of the shared tunnel. Shared tunnel label.

具体实现时，隧道业务报文在共享隧道的头节点转发的时候，采用压入(PUSH)共享隧道标签堆栈的方式，即根据隧道业务报文的流向和共享隧道的运行方向压入(PUSH)共享隧道标签，沿着共享隧道进行转发，在共享隧道运行方向的尾节点弹出(POP)共享隧道标签。In the specific implementation, when the tunnel service packet is forwarded by the head node of the shared tunnel, the PUSH shared tunnel label stack is used, that is, according to the flow direction of the tunnel service packet and the running direction of the shared tunnel (PUSH). The shared tunnel label is forwarded along the shared tunnel, and the shared node label is popped (POP) in the tail node of the shared tunnel.

隧道业务报文在共享隧道头节点转发的时候，需要根据隧道保护组的切换状态选择压入共享工作隧道的标签还是共享保护隧道的标签，如果隧道保护组处于切换状态则压入共享保护隧道的标签，如果隧道保护组没有切换则压入共享工作隧道的标签。 When the tunnel service packet is forwarded by the shared tunnel head node, the label of the shared working tunnel or the label of the shared protection tunnel needs to be selected according to the switching state of the tunnel protection group. If the tunnel protection group is in the switching state, the tunnel protection group is pushed into the shared protection tunnel. Label, if the tunnel protection group does not switch, push the label of the shared working tunnel.

可选地，所述共享工作隧道和共享保护隧道均支持倒数第二跳弹出(PHP)。Optionally, both the shared working tunnel and the shared protection tunnel support a penultimate hop pop (PHP).

采用本发明上述技术方案，在物理链路上配置共享隧道，使用该共享隧道承载物理链路上承载的隧道业务，配置隧道保护组，把该共享隧道加入隧道保护组做为共享工作隧道，通过该隧道保护组保护物理链路上承载的大量隧道业务，该方式配置简单，同时解决了相关技术中隧道保护组进行切换时会占用大量资源的问题，减少了设备占用的网络带宽资源和计算资源，缩短了隧道保护组处理的时间。With the above technical solution of the present invention, a shared tunnel is configured on the physical link, and the shared tunnel is used to carry the tunnel service carried on the physical link, the tunnel protection group is configured, and the shared tunnel is added to the tunnel protection group as a shared working tunnel. The tunnel protection group protects a large number of tunnel services carried on the physical link. The configuration is simple, and the problem that the tunnel protection group occupies a large amount of resources when the switchover is performed in the related art is solved, and the network bandwidth resources and computing resources occupied by the device are reduced. , shortened the processing time of the tunnel protection group.

以下将以图2和图3所示网络的处理为例，对本发明的隧道保护的具体实例过程进行说明。其中共享工作隧道承载的业务是隧道业务，隧道业务可以是可以是单层标签的VPN业务(L2/L3VPN)，也可以是多层标签的LSP业务(IP-MPLS/MPLS-TP Tunnel等)，甚至是无标签的IP或Eth业务等。The specific example process of the tunnel protection of the present invention will be described below by taking the processing of the network shown in FIG. 2 and FIG. 3 as an example. The service carried by the shared working tunnel is a tunnel service, and the tunnel service may be a single-layer label VPN service (L2/L3VPN) or a multi-layer label LSP service (IP-MPLS/MPLS-TP tunnel, etc.). Even unlabeled IP or Eth services.

实现隧道保护的主要过程描述如下：The main process of implementing tunnel protection is described as follows:

1)首先配置共享工作隧道和共享保护隧道，以图2所示，配置Ra-Rb-Rc为共享工作隧道，Ra-Rd-Re-Rc为共享保护隧道；或者Rc-Rb-Ra为共享工作隧道，对应Rc-Re-Rd-Ra为共享保护隧道；或者分别配置共享工作隧道和共享保护隧道为双向隧道，共享工作隧道跨越Ra、Rb、Rc三个节点，共享保护隧道跨越Ra、Rd、Re、Rc四个节点。1) First configure the shared working tunnel and the shared protection tunnel. As shown in Figure 2, configure Ra-Rb-Rc as the shared working tunnel, Ra-Rd-Re-Rc as the shared protection tunnel, or Rc-Rb-Ra as the shared working. The tunnel corresponds to Rc-Re-Rd-Ra as a shared protection tunnel; or the shared working tunnel and the shared protection tunnel are respectively configured as two-way tunnels, and the shared working tunnel spans three nodes Ra, Rb, and Rc, and the shared protection tunnel spans Ra, Rd, Re, Rc four nodes.

2)假如物理链路上承载的隧道业务1和隧道业务2在Ra节点分别设置外层走共享工作隧道，隧道业务1和隧道业务2进行在Ra节点标签交换后，隧道保护组没有切换的情况下，隧道业务1和隧道业务2外层压入共享工作隧道标签TE label ab，沿共享工作隧道进行转发，其封装后报文结构如下表1所示。2) If the tunnel service 1 and the tunnel service 2 carried on the physical link are respectively set to the outer shared working tunnel at the Ra node, the tunnel service 1 and the tunnel service 2 are switched after the label switching of the Ra node, and the tunnel protection group is not switched. The tunnel service 1 and the tunnel service 2 are layered into the shared working tunnel label TE label ab and forwarded along the shared working tunnel. The encapsulated packet structure is shown in Table 1 below.

表1报文封装格式Table 1 Packet Encapsulation Format

其中，Share Tunnel Label：表示外层共享隧道标签(根据隧道保护组切换状态，非切换状态即为共享工作隧道标签，切换状态即为共享保护隧道标签)；The Share Tunnel Label: indicates the outer shared tunnel label (cut according to the tunnel protection group) In the change state, the non-switching state is the shared working tunnel label, and the switching state is the shared protection tunnel label);

Tunnel Label：表示共享工作隧道所在物理链路上承载的隧道业务的标签；物理链路上的隧道业务外层压入Share Tunnel Label，在外层共享隧道上传送；Tunnel Label: indicates the label of the tunnel service carried on the physical link where the working tunnel is located. The tunnel service on the physical link is layered into the Share Tunnel Label and transmitted on the outer shared tunnel.

LSP label、PW Label、IP Header等：其中LSP Label表示物理链路上的隧道业务承载的是LSP业务，该业务在外层压入Tunnel Label，在外层隧道上传送；PW label表示物理链路上的隧道承载的是伪线仿真的业务(如：ATM，ETH，TDM等等)，该业务压入外层隧道Tunnel Label，在外层隧道上传送；IP Header表示物理链路上的隧道业务承载的是IP业务，其压入外层隧道Tunnel Label，在外层隧道上传送；外层隧道压入Share Tunnel Label，在共享隧道上传送；LSP label, PW Label, IP Header, etc.: LSP Label indicates that the tunnel service on the physical link carries the LSP service. The service is layered into the Tunnel Label and transmitted on the outer tunnel. The PW label indicates the physical link. The tunnel carries the pseudowire emulation service (such as ATM, ETH, TDM, etc.). The service is pushed into the outer tunnel tunnel label and transmitted on the outer tunnel. The IP header indicates that the tunnel service on the physical link carries the bearer. The IP service is pushed into the tunnel label of the outer tunnel and transmitted on the outer tunnel. The outer tunnel is pushed into the Share Tunnel Label and transmitted on the shared tunnel.

Data：是指里面具体所封装的业务的内容。Data: refers to the content of the specific packaged business.

如图2物理链路上承载的隧道业务，在共享工作隧道上传送的时候，只进行共享工作隧道标签的交换(SWAP)操作，在共享工作隧道的尾节点，先弹出(POP)外层Share Tunnel Label，然后再对隧道业务1和隧道业务2进行相应的处理。As shown in Figure 2, the tunnel service carried on the physical link is only exchanged (SWAP) for the shared working tunnel label when it is transmitted on the shared working tunnel. In the tail node of the shared working tunnel, the outer share is popped up (POP). Tunnel Label, and then process the tunnel service 1 and tunnel service 2 accordingly.

比如，如果共享工作隧道尾节点不是物理链路上承载隧道Tunnel的尾节点，则直接进行Tunnel Label交换(Swap)后继续沿Tunnel转发，如果该节点也是Tunnel的尾节点，若是LSP业务来说，则先弹出(POP)外层Tunnel label，再进行里面LSP Label交换(Swap)后继续转发；若是IP业务来说，弹出(POP)外层Tunnel Label后，直接根据里面IP Header包头上信息，进行转发；若是PW业务来说，则先弹出(POP)外层Tunnel Label后，再弹出(POP)PW Label后，根据PW Label进行仿真业务的封装等处理，然后继续转发。For example, if the shared working tunnel tail node is not the tail node of the tunnel carrying the tunnel on the physical link, the tunnel label switching (Swap) is performed and the tunnel is forwarded along the tunnel. If the node is also the tail node of the tunnel, if it is the LSP service, Then, the outer tunnel label is popped up (POP), and then the LSP Label Exchange (Swap) is carried out, and then the forwarding is continued; if the IP service is used, the outer tunnel label is popped up (POP), and the information is directly based on the IP header header. Forwarding; if it is a PW service, it will pop up (POP) the outer tunnel label, then pop up the (POP) PW Label, and then perform processing such as encapsulation of the emulation service according to the PW Label, and then continue forwarding.

3)如图3所示，当共享工作隧道检测出链路或者节点故障的时候，隧道保护组发生切换动作。隧道业务1和隧道业务2外层走共享保护隧道，即隧道业务1和隧道业务2在Ra节点标签交换后，外层压入共享保护隧道标签TE label ad，直至在共享保护隧道尾节点先弹出(POP)Share Tunnel Label，然后再对隧道业务1和隧道业务2进行处理。 3) As shown in FIG. 3, when the shared working tunnel detects a link or a node failure, the tunnel protection group switches. The tunnel service 1 and the tunnel service 2 share the shared protection tunnel. That is, the tunnel service 1 and the tunnel service 2 are spliced into the shared protection tunnel label TE label ad after the label switching of the Ra node, until the tail node of the shared protection tunnel is popped up first. (POP)Share Tunnel Label, and then process tunnel service 1 and tunnel service 2.

4)共享工作隧道故障消失后，隧道保护组维护的APS状态机重新计算状态，如果回切到共享工作隧道，则隧道业务1和隧道业务2外层走共享工作隧道，即隧道业务1和隧道业务2在Ra节点标签交换后，外层压入共享工作隧道标签TE label ab，直至在共享工作隧道尾节点先弹出(POP)Share Tunnel Label，然后再对隧道业务1和隧道业务2进行处理。如果隧道保护组切换状态没有发生变化，则隧道业务1和隧道业务2继续沿共享保护隧道转发。4) After the shared working tunnel failure disappears, the APS state machine maintained by the tunnel protection group recalculates the state. If the switch back to the shared working tunnel, the tunnel service 1 and the tunnel service 2 share the working tunnel, that is, the tunnel service 1 and the tunnel. After the label switching of the Ra node, the service 2 is layered into the shared working tunnel label TE label ab until the Share Tunnel Label is popped up at the tail node of the shared working tunnel, and then the tunnel service 1 and the tunnel service 2 are processed. If the switching state of the tunnel protection group does not change, tunnel service 1 and tunnel service 2 continue to be forwarded along the shared protection tunnel.

本发明实施例还公开了一种计算机程序，包括程序指令，当该程序指令被计算机执行时，使得该计算机可执行上述任意的基于共享隧道的隧道保护方法。The embodiment of the invention also discloses a computer program, comprising program instructions, which when executed by a computer, enable the computer to perform any of the above-mentioned shared tunnel-based tunnel protection methods.

本发明实施例还公开了一种载有所述计算机程序的载体。The embodiment of the invention also discloses a carrier carrying the computer program.

本发明实施例方案，通过配置共享工作隧道和共享保护隧道，形成隧道保护组；在所述共享工作隧道和共享保护隧道上定期发送检测报文，检测所述共享工作隧道和共享保护隧道的状态；当检测到所述共享工作隧道或共享保护隧道的状态发生变化时，对隧道保护组进行共享隧道的切换操作，克服了相关技术中针对相同的物理链路上存在大量的需要保护的隧道业务的时候，带宽资源和计算资源浪费的问题、配置比较复杂的问题，与相关技术相比，本发明不需要配置大量的隧道保护组、隧道保护组群组，配置简单；同时节省了隧道保护组切换时占用的资源，减少了设备占用的带宽资源和计算资源。In the embodiment of the present invention, the shared working tunnel and the shared protection tunnel are configured to form a tunnel protection group; the detection packet is periodically sent on the shared working tunnel and the shared protection tunnel, and the status of the shared working tunnel and the shared protection tunnel is detected. When the state of the shared working tunnel or the shared protection tunnel is changed, the switching operation of the shared tunnel is performed on the tunnel protection group, which overcomes a large number of tunnel services that need to be protected on the same physical link in the related art. Compared with the related technologies, the present invention does not need to configure a large number of tunnel protection groups and tunnel protection group groups, and the configuration is simple; and the tunnel protection group is saved at the same time. The resources occupied during switching reduce the bandwidth resources and computing resources occupied by the device.

如图4所示，本发明一实施例提出一种基于共享隧道的隧道保护装置，包括：保护配置模块201、检测模块202及业务切换模块203，其中：As shown in FIG. 4, an embodiment of the present invention provides a tunnel protection device based on a shared tunnel, including: a protection configuration module 201, a detection module 202, and a service switching module 203, where:

保护配置模块201，设置成：配置共享工作隧道和共享保护隧道，形成隧道保护组；The protection configuration module 201 is configured to: configure a shared working tunnel and a shared protection tunnel to form a tunnel protection group;

检测模块202，设置成：检测所述共享工作隧道和共享保护隧道的状态；The detecting module 202 is configured to: detect a status of the shared working tunnel and the shared protection tunnel;

业务切换模块203，设置成：当检测到所述共享工作隧道或共享保护隧道的状态发生变化时，对隧道保护组进行共享隧道的切换操作。The service switching module 203 is configured to perform a switching operation of the shared tunnel to the tunnel protection group when it is detected that the state of the shared working tunnel or the shared protection tunnel changes.

具体地，保护配置模块201在不同的物理链路上分别配置共享隧道，设置其为隧道保护组的共享工作隧道和共享保护隧道；设置物理链路上承载的隧道业务外层走共享工作隧道。Specifically, the protection configuration module 201 separately configures a shared tunnel on different physical links. Set the shared working tunnel and the shared protection tunnel of the tunnel protection group. Set the tunnel service carried on the physical link to the shared working tunnel.

所述检测模块202设置成按照如下方式检测所述共享工作隧道和共享保护隧道的状态；The detecting module 202 is configured to detect a state of the shared working tunnel and the shared protection tunnel according to the following manner;

检测模块202检测共享工作隧道和共享保护隧道的状态；共享工作隧道或者共享保护隧道状态发生变化的时候，通告最新状态到业务业务切换模块203。The detecting module 202 detects the state of the shared working tunnel and the shared protection tunnel; when the state of the shared working tunnel or the shared protection tunnel changes, the latest state is notified to the service switching module 203.

业务切换模块203接收共享工作隧道和共享保护隧道的状态，然后进行APS状态机计算，并通告最新状态计算结果到当前隧道保护组，指导隧道保护组进行切换或者回切。The service switching module 203 receives the status of the shared working tunnel and the shared protection tunnel, and then performs the APS state machine calculation, and notifies the current state calculation result to the current tunnel protection group, and guides the tunnel protection group to switch or switch back.

可选地，业务切换模块203当共享工作隧道或者共享保护隧道状态变化触发隧道保护组切换状态发生变化的时候，通知承载在该共享工作隧道或者共享保护隧道上的业务根据当前隧道保护组的切换状态重新封装外层共享隧道标签。Optionally, when the shared working tunnel or the shared protection tunnel state change triggers the change of the switching state of the tunnel protection group, the service switching module 203 notifies the service that is carried on the shared working tunnel or the shared protection tunnel according to the current tunnel protection group. The state re-encapsulates the outer shared tunnel label.

以下详细阐述本实施例的隧道保护原理。The tunnel protection principle of this embodiment will be described in detail below.

由于相关技术中，在相同的物理链路上存在大量的需要保护的隧道业务时，通常会配置大量的隧道保护组，存在带宽资源和计算资源浪费的问题以及配置比较复杂的问题。In the related art, when there are a large number of tunnel services to be protected on the same physical link, a large number of tunnel protection groups are usually configured, and there are problems of waste of bandwidth resources and computing resources, and complicated configuration.

具体地，保护配置模块201在需要承载隧道业务的物理链路上配置一条隧道，做为共享隧道，该隧道用于承载多个承载在该物理链路上的隧道业务。Specifically, the protection configuration module 201 configures a tunnel on the physical link that needs to carry the tunnel service, and serves as a shared tunnel, where the tunnel is used to carry multiple tunnel services that are carried on the physical link.

可选地，在物理链路上配置共享隧道，设置物理链路上承载的隧道业务外层走该共享隧道，并配置该共享隧道为隧道保护组工作隧道，称其为共享工作隧道；在区别于共享工作隧道所在物理链路的链路上配置共享隧道，设置其为隧道保护组的保护隧道，称其为共享保护隧道，由此形成隧道保护组。Optionally, a shared tunnel is configured on the physical link, and the tunnel service carried on the physical link is taken out of the shared tunnel, and the shared tunnel is configured as a tunnel protection group working tunnel, which is called a shared working tunnel; Configure a shared tunnel on the link of the physical link where the shared working tunnel is located. It is a protection tunnel of the tunnel protection group, which is called a shared protection tunnel, thus forming a tunnel protection group.

之后，由检测模块202检测共享工作隧道和共享保护隧道的状态，以便当检测到共享工作隧道、共享保护隧道的状态发生变化时，业务切换模块203对上述隧道保护组进行切换操作。Then, the detection module 202 detects the state of the shared working tunnel and the shared protection tunnel, so that when the state of the shared working tunnel and the shared protection tunnel is changed, the service switching module 203 performs a switching operation on the tunnel protection group.

其中共享工作隧道、共享保护隧道的状态包括：定期发送隧道检测报文(CC&CV、BFD等)，根据上述隧道检测报文的接收情况，检测上述隧道保护组的共享工作隧道、共享保护隧道是否存在节点或者链路故障，或者故障恢复。The state of the shared working tunnel and the shared protection tunnel is: the tunnel detection packet (CC&CV, BFD, etc.) is periodically sent, and the shared working tunnel and the shared protection tunnel of the tunnel protection group are detected according to the receiving condition of the tunnel detection packet. The node or link is faulty, or the fault is recovered.

当检测模块202检测到所述共享工作隧道或共享保护隧道的状态发生变化时，业务切换模块203对隧道保护组进行共享隧道的切换操作。When the detecting module 202 detects that the state of the shared working tunnel or the shared protection tunnel changes, the service switching module 203 performs a switching operation of the shared tunnel to the tunnel protection group.

作为一种实施方式，当检测到所述共享工作隧道或共享保护隧道的状态发生变化时，对隧道保护组通过相应计算，获取隧道保护组的切换状态，根据隧道保护组的切换状态执行切换或者回切操作，进行隧道业务外层共享隧道标签的封装。As an embodiment, when the state of the shared working tunnel or the shared protection tunnel is changed, the tunnel protection group obtains the switching state of the tunnel protection group through corresponding calculation, and performs switching according to the switching state of the tunnel protection group. The switchback operation performs encapsulation of the outer shared tunnel label of the tunnel service.

当状态切换结果为非切换状态时，通知物理链路上承载的隧道业务外层对隧道业务报文封装共享工作隧道标签并转发，如图3所示，图3是本发明实施例的隧道保护切换状态的转发流程示意图。 When the result of the state switching is a non-handover state, the outer layer of the tunnel service carried on the physical link is notified to share the working tunnel label and forward the tunnel service packet, as shown in FIG. 3, FIG. 3 is a tunnel protection according to an embodiment of the present invention. Schematic diagram of the forwarding process of the switching state.

隧道业务报文在共享隧道头节点转发的时候，需要根据隧道保护组的切换状态选择压入共享工作隧道的标签还是共享保护隧道的标签，如果隧道保护组处于切换状态则压入共享保护隧道的标签，如果隧道保护组没有切换则压入共享工作隧道的标签。When the tunnel service packet is forwarded by the shared tunnel head node, the label of the shared working tunnel or the label of the shared protection tunnel needs to be selected according to the switching state of the tunnel protection group. If the tunnel protection group is in the switching state, the tunnel protection group is pushed into the shared protection tunnel. Label, if the tunnel protection group does not switch, push the label of the shared working tunnel.

从以上的描述中可以看出，本发明实现了对同一物理链路上承载的各个隧道业务的保护，配置简单，不需要配置大量的隧道保护组，且因为只需要在共享隧道上启用检测协议，从而减少了隧道检测模块发送检测报文时占用的大量带宽，同时只需要对一个隧道保护组进行状态计算及切换操作，减少了设备的计算资源。As can be seen from the above description, the present invention implements the protection of each tunnel service carried on the same physical link, and is simple in configuration, and does not need to be configured with a large number of tunnel protection groups, and because only The detection protocol is enabled on the shared tunnel, which reduces the bandwidth occupied by the tunnel detection module when sending detection packets. At the same time, only one tunnel protection group needs to perform state calculation and switching operations, which reduces the computing resources of the device.

显然，本领域的技术人员应该明白，上述的本发明的各模块或各步骤可以用通用的计算装置来实现，它们可以集中在单个的计算装置上，或者分布在多个计算装置所组成的网络上，可选地，它们可以用计算装置可执行的程序代码来实现，从而，可以将它们存储在存储装置中由计算装置来执行，并且在某些情况下，可以以不同于此处的顺序执行所示出或描述的步骤，或者将它们分别制作成各个集成电路模块，或者将它们中的多个模块或步骤制作成单个集成电路模块来实现。这样，本发明不限制于任何特定的硬件和软件结合。It will be apparent to those skilled in the art that the various modules or steps of the present invention described above can be implemented by a general-purpose computing device that can be centralized on a single computing device or distributed across a network of multiple computing devices. Alternatively, they may be implemented by program code executable by the computing device such that they may be stored in the storage device by the computing device and, in some cases, may be different from the order herein. The steps shown or described are performed, or they are separately fabricated into individual integrated circuit modules, or a plurality of modules or steps thereof are fabricated as a single integrated circuit module. Thus, the invention is not limited to any specific combination of hardware and software.

以上所述仅为本发明的优选实施例，并非因此限制本发明的专利范围，凡是利用本发明说明书及附图内容所作的等效结构或流程变换，或直接或间接运用在其它相关的技术领域，均同理包括在本发明的专利保护范围内。The above description is only a preferred embodiment of the present invention, and is not intended to limit the scope of the invention, and the equivalent structure or process changes made by the specification and the drawings of the present invention may be directly or indirectly applied to other related technical fields. The same is included in the scope of patent protection of the present invention.

工业实用性Industrial applicability

本发明实施例提出的一种基于共享隧道的隧道保护方法及装置，通过配置共享工作隧道和共享保护隧道，形成隧道保护组；在所述共享工作隧道和共享保护隧道上定期发送检测报文，检测所述共享工作隧道和共享保护隧道的状态；当检测到所述共享工作隧道或共享保护隧道的状态发生变化时，对隧道保护组进行共享隧道的切换操作，克服了相关技术中针对相同的物理链路上存在大量的需要保护的隧道业务的时候，带宽资源和计算资源浪费的问题、配置比较复杂的问题，与相关技术相比，本发明不需要配置大量的隧道保护组、隧道保护组群组，配置简单；同时节省了隧道保护组切换时占用的资源，减少了设备占用的带宽资源和计算资源。因此本发明具有很强的工业实用性。 A shared tunnel-based tunnel protection method and device according to the embodiment of the present invention, a shared working tunnel and a shared protection tunnel are configured to form a tunnel protection group; and the detection packet is periodically sent on the shared working tunnel and the shared protection tunnel. The state of the shared working tunnel and the shared protection tunnel is detected; when the state of the shared working tunnel or the shared protection tunnel is changed, the switching operation of the shared tunnel is performed on the tunnel protection group, and the related technology is overcome for the same When there are a large number of tunnel services to be protected on the physical link, the bandwidth resources and the computing resources are wasted, and the configuration is complicated. Compared with the related technologies, the present invention does not need to configure a large number of tunnel protection groups and tunnel protection groups. The configuration of the group is simple. The resources occupied by the tunnel protection group are saved, and the bandwidth resources and computing resources occupied by the device are reduced. Therefore, the present invention has strong industrial applicability.

Claims

一种基于共享隧道的隧道保护方法，包括：A tunnel protection method based on a shared tunnel, comprising:

配置共享工作隧道和共享保护隧道，形成隧道保护组；Configure a shared working tunnel and a shared protection tunnel to form a tunnel protection group.

检测所述共享工作隧道和共享保护隧道的状态；Detecting a status of the shared working tunnel and the shared protection tunnel;

当检测到所述共享工作隧道或共享保护隧道的状态发生变化时，对所述隧道保护组进行共享隧道的切换操作。When it is detected that the state of the shared working tunnel or the shared protection tunnel changes, the switching operation of the shared tunnel is performed on the tunnel protection group.
根据权利要求1所述的基于共享隧道的隧道保护方法，其中，所述检测所述共享工作隧道和共享保护隧道的状态的步骤包括：The shared tunnel-based tunnel protection method according to claim 1, wherein the detecting the status of the shared working tunnel and the shared protection tunnel comprises:

在所述共享工作隧道和共享保护隧道上定期发送隧道检测报文，根据上述隧道检测报文的接收情况，检测所述共享工作隧道和所述共享保护隧道的状态。The tunnel detection packet is periodically sent on the shared working tunnel and the shared protection tunnel, and the status of the shared working tunnel and the shared protection tunnel is detected according to the receiving condition of the tunnel detection packet.
根据权利要求1所述的基于共享隧道的隧道保护方法，其中，所述当检测到所述共享工作隧道或共享保护隧道的状态发生变化时，对所述隧道保护组进行共享隧道的切换操作的步骤包括：The shared tunnel-based tunnel protection method according to claim 1, wherein when the state of the shared working tunnel or the shared protection tunnel is changed, the switching operation of the shared tunnel is performed on the tunnel protection group. The steps include:

当检测到所述共享工作隧道或共享保护隧道的状态发生变化时，通过所述隧道保护组的APS状态机进行状态计算，获取状态切换结果；When the state of the shared working tunnel or the shared protection tunnel is changed, the APS state machine of the tunnel protection group performs state calculation to obtain a state switching result;

根据状态切换结果，对隧道业务报文封装相应的共享隧道标签并转发，包括：According to the state switching result, the corresponding shared tunnel label is encapsulated and forwarded to the tunnel service packet, including:

当所述状态切换结果为切换状态时，通知物理链路上承载的隧道业务外层对隧道业务报文封装共享保护隧道标签并转发；When the state switching result is the switching state, the outer layer of the tunnel service carried on the physical link is encapsulated with the shared protection tunnel label and forwarded by the tunnel service packet;

当所述状态切换结果为非切换状态时，通知所述物理链路上承载的隧道业务外层对所述隧道业务报文封装共享工作隧道标签并转发。When the state switching result is a non-handover state, the outer layer of the tunnel service carried on the physical link is encapsulated and the working tunnel label is encapsulated and forwarded.
根据权利要求3所述的基于共享隧道的隧道保护方法，其中，对隧道业务报文封装相应的共享隧道标签并转发的步骤包括： The shared tunnel-based tunnel protection method according to claim 3, wherein the step of encapsulating the corresponding shared tunnel label and forwarding the tunnel service packet includes:

在共享隧道的头节点转发所述隧道业务报文时，根据所述隧道业务报文的流向和共享隧道的运行方向压入相应的共享隧道标签，沿着所述共享隧道进行转发，在所述共享隧道运行方向的尾节点弹出所述共享隧道标签。When the tunnel node forwards the tunnel service packet, the corresponding shared tunnel label is pushed according to the flow direction of the tunnel service packet and the running direction of the shared tunnel, and the forwarding is performed along the shared tunnel. The shared node label is popped up by the tail node of the shared tunnel running direction.
根据权利要求1-4中任一项所述的基于共享隧道的隧道保护方法，其中，所述共享工作隧道和共享保护隧道均支持倒数第二跳弹出。The shared tunnel-based tunnel protection method according to any one of claims 1 to 4, wherein the shared working tunnel and the shared protection tunnel both support a penultimate hop pop-up.
根据权利要求1所述的基于共享隧道的隧道保护方法，其中，所述配置共享工作隧道和共享保护隧道，形成隧道保护组的步骤包括：The shared tunnel-based tunnel protection method according to claim 1, wherein the step of configuring the shared working tunnel and the shared protection tunnel to form a tunnel protection group includes:

在不同的物理链路上分别配置所述共享工作隧道和所述共享保护隧道，其中，设置所述共享工作隧道承载物理链路上的隧道业务，在区别于所述共享工作隧道所在物理链路的链路上配置所述共享保护隧道，形成所述隧道保护组。The shared working tunnel and the shared protection tunnel are separately configured on different physical links, where the shared working tunnel is set to carry the tunnel service on the physical link, which is different from the physical link where the shared working tunnel is located. The shared protection tunnel is configured on the link to form the tunnel protection group.
根据权利要求1所述的基于共享隧道的隧道保护方法，其中，所述隧道业务为单层标签的VPN业务、多层标签的LSP业务，或无标签的IP或Eth业务。The shared tunnel-based tunnel protection method according to claim 1, wherein the tunnel service is a single-layer label VPN service, a multi-layer label LSP service, or an unlabeled IP or Eth service.
一种基于共享隧道的隧道保护装置，包括保护配置模块、检测模块和业务切换模块，其中：A tunnel protection device based on a shared tunnel includes a protection configuration module, a detection module, and a service switching module, where:

所述保护配置模块设置成：配置共享工作隧道和共享保护隧道，形成隧道保护组；The protection configuration module is configured to: configure a shared working tunnel and a shared protection tunnel to form a tunnel protection group;

所述检测模块设置成：检测所述共享工作隧道和共享保护隧道的状态；The detecting module is configured to: detect a state of the shared working tunnel and the shared protection tunnel;

所述业务切换模块设置成：当所述检测模块检测到所述共享工作隧道或共享保护隧道的状态发生变化时，对隧道保护组进行共享隧道的切换操作。The service switching module is configured to perform a switching operation of the shared tunnel to the tunnel protection group when the detecting module detects that the state of the shared working tunnel or the shared protection tunnel changes.
根据权利要求8所述的基于共享隧道的隧道保护装置，其中，所述检测模块设置成按照如下方式检测所述共享工作隧道和共享保护隧道的状态；The shared tunnel-based tunnel protection device according to claim 8, wherein the inspection The measurement module is configured to detect the status of the shared working tunnel and the shared protection tunnel according to the following manner;

在所述共享工作隧道和共享保护隧道上定期发送隧道检测报文，根据上述隧道检测报文的接收情况，检测所述共享工作隧道和所述共享保护隧道的状态。The tunnel detection packet is periodically sent on the shared working tunnel and the shared protection tunnel, and the status of the shared working tunnel and the shared protection tunnel is detected according to the receiving condition of the tunnel detection packet.
根据权利要求8所述的基于共享隧道的隧道保护装置，其中，所述业务切换模块设置成按照如下方式对隧道保护组进行共享隧道的切换操作：The shared tunnel-based tunnel protection device according to claim 8, wherein the service switching module is configured to perform a switching operation of the shared tunnel to the tunnel protection group as follows:

当所述检测模块检测到所述共享工作隧道或共享保护隧道的状态发生变化时，通过所述隧道保护组的APS状态机进行状态计算，获取状态切换结果；When the detecting module detects that the state of the shared working tunnel or the shared protection tunnel changes, the state is calculated by the APS state machine of the tunnel protection group, and the state switching result is obtained;

按照如下方式根据状态切换结果，对隧道业务报文封装相应的共享隧道标签并转发：当所述状态切换结果为切换状态时，通知物理链路上承载的隧道业务外层对隧道业务报文封装共享保护隧道标签并转发；当所述状态切换结果为非切换状态时，通知所述物理链路上承载的隧道业务外层对所述隧道业务报文封装共享工作隧道标签并转发。According to the state switching result, the tunnel service packet is encapsulated with the corresponding shared tunnel label and forwarded: when the state switching result is the switching state, the outer layer of the tunnel service carried on the physical link is encapsulated into the tunnel service packet. The protection tunnel label is shared and forwarded. When the state switching result is a non-handover state, the outer layer of the tunnel service carried on the physical link is encapsulated and the working tunnel label is encapsulated and forwarded.
根据权利要求8、9或10所述的基于共享隧道的隧道保护装置，其中，所述业务切换模块设置成按照如下方式对隧道业务报文封装相应的共享隧道标签并转发：The shared tunnel-based tunnel protection device according to claim 8, 9 or 10, wherein the service switching module is configured to encapsulate the corresponding shared tunnel label and forward the tunnel service packet according to the following manner:

在共享隧道的头节点转发所述隧道业务报文时，根据所述隧道业务报文的流向和共享隧道的运行方向压入相应的共享隧道标签，沿着所述共享隧道进行转发，在所述共享隧道运行方向的尾节点弹出所述共享隧道标签。When the tunnel node forwards the tunnel service packet, the corresponding shared tunnel label is pushed according to the flow direction of the tunnel service packet and the running direction of the shared tunnel, and the forwarding is performed along the shared tunnel. The shared node label is popped up by the tail node of the shared tunnel running direction.
根据权利要求8所述的基于共享隧道的隧道保护装置，其中，所述保护配置模块设置成按照如下方式配置共享工作隧道和共享保护隧道，形成隧道保护组：The shared tunnel-based tunnel protection device according to claim 8, wherein the protection configuration module is configured to configure a shared working tunnel and a shared protection tunnel according to the following manner to form a tunnel protection group:

在不同的物理链路上分别配置所述共享工作隧道和所述共享保护隧道，其中，设置该共享工作隧道承载物理链路上的隧道业务，在区别于所述共享工作隧道所在物理链路的链路上配置所述共享保护隧道，形成所述隧道保护组。The shared working tunnel and the shared protection tunnel are respectively configured on different physical links, where the shared working tunnel is set to carry the tunnel service on the physical link, which is different from the physical link where the shared working tunnel is located. Configuring the shared protection tunnel on the link to form the tunnel protection group.
一种计算机程序，包括程序指令，当该程序指令被计算机执行时，使得该计算机可执行如权利要求1-7中任一项所述的基于共享隧道的隧道保护方法。A computer program comprising program instructions which, when executed by a computer, cause the computer to perform the shared tunnel based tunnel protection method of any of claims 1-7.
一种载有如权利要求13所述计算机程序的载体。 A carrier carrying the computer program of claim 13.