WO2016015497A1

WO2016015497A1 - Method, device and system for forwarding packet

Info

Publication number: WO2016015497A1
Application number: PCT/CN2015/077468
Authority: WO
Inventors: 张军林; 周道龙
Original assignee: 华为技术有限公司
Priority date: 2014-07-31
Filing date: 2015-04-25
Publication date: 2016-02-04
Also published as: CN104135420A; CN104135420B

Abstract

Disclosed are a method, device and system for forwarding a packet, which are applicable to the scenario in which a customer edge (CE) is connected to an Ethernet virtual private network (EVPN) by means of dual homing through a first provider edge (PE) and a second PE, wherein an Ethernet link is established between the first PE and the second PE. The method comprises: the first PE establishes a port isolation group; the first PE receives, through a port at the side of the first PE in the Ethernet link, a packet forwarded by the second PE; and the first PE forwards the packet to a CE connected to ports other than the port isolation group in the first PE. By means of the present invention, the technical problem in the prior art of traffic passing back at the customer side during packet forwarding in the EVPN can be effectively solved without changing the current hardware chip design.

Description

Method, device and system for message forwarding

This application claims the priority of the Chinese patent application filed on July 31, 2014, the Chinese Patent Office, the application number is CN201410373934.X, and the invention name is "a method, device and system for message forwarding". The citations are incorporated herein by reference.

Technical field

The present invention relates to the field of communications technologies, and in particular, to a packet forwarding method, device, and system.

Background technique

The virtual private network (VPN) connects the customer sites in different regions through the Multi-Protocol Label Switching (MPLS) bearer network, so that these sites can be like the same local area network (Local Area Network, LAN) works like that. Ethernet Virtual Private Network (EVPN) is an Ethernet VPN technology based on Border Gateway Protocol (BGP) and MPLS. Compared with traditional Ethernet VPN, EVPN has a great advantage in that it can achieve All. -Active mode, that is, the user edge device (CE) is connected to multiple provider edge devices (PEs). The multiple PEs can be called multi-homed PEs, and between CEs and multi-homed PEs. A multi-Chassis Link Aggregation Group (MC_LAG) is deployed to bundle the link between the CE and multiple PEs into one Ethernet trunk and a given virtual local area network from the CE to the PE. The traffic of the network can be forwarded by any one of the multiple PEs. The selection of the PE depends on the load sharing algorithm selected by the CE when sending data packets from the Ethernet trunk link.

However, when the All-Active mode is implemented, the broadcast, unicast, and multicast (BUM) traffic sent from the local device to the PE device is easy to form a triangular loop on the user side, resulting in traffic return. .

Currently, in order to solve the triangular loop problem that occurs when the MC_LAG is deployed between the CE and the multi-homed PE, the EVPN protocol defines a horizontal splitting mechanism, that is, the multi-homing PE from the local end station. When receiving the BUM traffic and transmitting and forwarding it to other PEs that belong to the same VPN, the packet carries the packet source identifier in the data packet encapsulation, that is, the Ethernet Segment Identifier (ESI) label is encapsulated, and the receiving end PE receives the packet. When the BUM traffic is received, the source identifier information carried in the data packet encapsulation is used to determine whether it needs to be forwarded to the local site. If the packet destination has the same identifier as the packet receiving source, that is, the packet destination ESI and the receiving packet If the ESI of the file is the same, the packet is discarded. However, the horizontal splitting mechanism requires the source PE (ie, the PE that receives the BUM sent by the local station) to encapsulate the ESI label when forwarding the BUM message to the network side, and interpret the ESI label on the destination PE, but the existing switch product is subject to Limited to hardware chip limitations does not support the packaging and processing of ESI tags, unless the hardware chip design is changed to support the packaging and processing of ESI tags, but this will increase the cost of the product.

Summary of the invention

The embodiments of the present invention provide a method, a device, and a system for forwarding a packet, which are used to solve the technical problem that the traffic on the user side occurs in the EVPN network packet forwarding process in the prior art.

In a first aspect, the embodiment of the present invention provides a method for forwarding a packet, where the method is applicable to a scenario in which a first CE is dual-homed to an EVPN by using a first PE and a second PE, and the first PE and the first An Ethernet link is established between the two PEs, and the method includes:

The first PE establishes a port isolation group, where the port isolation group includes a port on the first PE side of the Ethernet link, a port in the first PE that is connected to the first CE, and the first Network side port of the PE;

Receiving, by the first PE, a packet forwarded by the second PE by using a port on the first PE side of the Ethernet link;

The first PE forwards the packet to a second CE connected to a port other than the port isolation group in the first PE.

With reference to the first aspect, in a first possible implementation, the first PE establishing a port isolation group includes:

The first PE detects whether the Ethernet segment identifier ESI of each port in the local port is a valid value, and the local port is a port to which the CE is connected in the first PE;

The first PE adds a port whose ESI is a valid value in the local port to a port isolation group as a port connected to the first CE in the first PE;

The first PE adds the port on the first PE side and the network side port in the first PE in the Ethernet link to the port isolation group.

In conjunction with the first possible implementation of the first aspect, in a second possible implementation, the method further includes:

If the first PE detects that the first CE in the port isolation group is dual-homed to the EVPN, the first CE is connected to the first CE. The port is removed from the isolation group.

With reference to the first aspect, or the first possible implementation manner of the first aspect, or the second possible implementation manner of the first aspect, in a third possible implementation manner, the first PE and the first The two PEs have the same virtual internet protocol IP address, and the method further includes:

The first PE advertises a multicast route to the remote PE, where the next hop address of the multicast route is the virtual IP address, and the multicast route advertised by the second PE to the remote PE The next hop address is the virtual IP address.

With the third possible implementation of the first aspect, in a fourth possible implementation, the first PE receives the second PE forwarding by using the port on the first PE side of the Ethernet link. The message includes:

Receiving, by the first PE, the first multicast packet that is forwarded by the second PE by using the Ethernet link, where the first multicast packet is sent by the remote PE according to the multicast route The packet sent by the second PE.

With reference to the first aspect, or the first possible implementation manner of the first aspect, or the second possible implementation manner of the first aspect, in a fifth possible implementation manner, the first PE passes the The receiving, by the port on the first PE side of the link, the packet forwarded by the second PE includes:

The first PE receives the second multicast packet that is forwarded by the second PE by using the Ethernet link, and the second multicast packet is a CE that is connected to the second PE to the second PE. The message sent.

In a second aspect, the embodiment of the present invention further provides a first PE for packet forwarding, which is used for A CE is configured to establish an Ethernet link between the first PE and the second PE by using the first PE and the second PE to connect to the EVPN. The first PE includes:

a establishing unit, configured to establish a port isolation group, where the port isolation group includes a port on the first PE side of the Ethernet link, a port in the first PE that is connected to the first CE, and the first Network side port of the PE;

a receiving unit, configured to receive, by using a port on the first PE side of the Ethernet link, a packet that is forwarded by the second PE;

And a forwarding unit, configured to forward, to the second CE connected to the port other than the port isolation group, the packet received by the receiving unit.

With reference to the second aspect, in a first possible implementation manner, the establishing unit includes:

a detecting subunit, configured to detect, respectively, whether an Ethernet segment identifier ESI of each port in the local port is a valid value, where the local port is a port to which the CE is connected in the first PE;

a control subunit, configured to add, as the port of the first PE, the port connected to the first CE to the port isolation group;

The control subunit is further configured to add the port on the first PE side and the network side port in the first PE in the Ethernet link to the port isolation group.

With reference to the first possible implementation of the second aspect, in a second possible implementation, the first PE further includes:

a deleting unit, configured to connect the first CE to the first CE by detecting that the first CE in the port isolation group is dual-homed to the EVPN by the dual-homed connection The port is removed from the isolation group.

With reference to the second aspect, or the first possible implementation manner of the second aspect, or the second possible implementation manner of the second aspect, in a third possible implementation manner, the first PE and the first The two PEs have the same virtual IP address, and the first PE further includes:

The sending unit is configured to advertise a multicast route to the remote PE, where the next hop address of the multicast route is the virtual IP address.

In conjunction with the third possible implementation of the second aspect, in a fourth possible implementation, the receiving unit is specifically configured to:

Receiving, by the second PE, the first multicast packet that is forwarded by the Ethernet link, where the first The multicast packet is a packet sent by the remote PE to the second PE according to the multicast route.

With reference to the second aspect, or the first possible implementation manner of the second aspect, or the second possible implementation manner of the second aspect, in a fifth possible implementation manner, the receiving unit is specifically configured to:

And receiving, by the second PE, a second multicast packet that is forwarded by the Ethernet link, where the second multicast packet is a packet that is sent by the CE that is connected to the second PE to the second PE.

In a third aspect, the embodiment of the present invention further provides a packet forwarding system, where the system includes: a first CE, a first PE, and a second PE, where the first CE passes the first PE and the first Two PEs are dual-homed to the EVPN, and an Ethernet link is established between the first PE and the second PE, where

The second PE is configured to receive the packet sent by the first CE, and forward the packet to the first PE by using the Ethernet link;

The first PE is configured to establish a port isolation group, and receive, by the port on the first PE side of the Ethernet link, the packet forwarded by the second PE, and remove the packet from the first PE. The second CE connected to the port other than the port isolation group forwards the packet, where the port isolation group includes the port on the first PE side of the Ethernet link, and the connection in the first PE a port of the first CE and a network side port of the first PE.

With reference to the third aspect, in a first possible implementation, the system further includes a remote PE, where the first PE and the second PE have the same virtual IP address, and the system further includes:

The first PE is further configured to advertise a multicast route to the remote PE, where a next hop address of the multicast route is the virtual IP address;

The second PE is further configured to advertise the multicast route to the remote PE, where a next hop address of the multicast route is the virtual IP address;

Receiving, by the second PE, the packet sent by the remote PE, and forwarding the packet to the first PE by using the Ethernet link, including:

The second PE receives the multicast packet forwarded by the remote PE according to the multicast route, and sends the multicast packet to the first PE by using the Ethernet link.

The embodiment of the present invention can control the report by establishing an Ethernet link between the PE devices and establishing a port isolation group, so that the PE receives the data packet transmitted through the Ethernet link. The packet is forwarded to the CE connected to the port other than the port isolation group, and the packet is not forwarded to other CEs. This ensures that the PE receives the packet and reports it when the CE is dual-homed to the EVPN. The traffic backhaul problem formed on the user side during the forwarding of the file does not need to be encapsulated by the ESI label for traffic judgment to avoid traffic backhaul. The solution of the embodiment of the present invention does not need to change the current hardware chip design, thereby saving cost.

DRAWINGS

In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the embodiments or the description of the prior art will be briefly described below. Obviously, the drawings in the following description are only It is a certain embodiment of the present invention, and other drawings can be obtained from those skilled in the art without any creative work.

1 is a schematic flowchart of a method for packet forwarding according to an embodiment of the present invention;

2 is a schematic flowchart of a method for establishing a port isolation group according to an embodiment of the present invention;

3 is a schematic diagram of a scenario of a packet forwarding method according to an embodiment of the present invention;

4 is a schematic diagram of a scenario of another method for packet forwarding according to an embodiment of the present invention;

FIG. 5 is a schematic structural diagram of a first PE according to an embodiment of the present disclosure;

FIG. 6 is a schematic structural diagram of another first PE according to an embodiment of the present disclosure;

FIG. 7 is a schematic structural diagram of a network device according to an embodiment of the present disclosure;

FIG. 8 is a schematic structural diagram of still another packet forwarding system according to an embodiment of the present disclosure;

FIG. 9 is a schematic structural diagram of still another packet forwarding system according to an embodiment of the present invention.

detailed description

The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present invention. It is obvious that the described embodiments are only a part of the embodiments of the present invention, but not all embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

It should be noted that the embodiment of the present invention is applicable to a scenario in which the first CE is dual-homed to the EPE through the first PE and the second PE, where the dual-homed CE is between the first CE and the first PE and the second PE. In the All-Active mode, the link between the CE and the first PE and the second PE is bundled into an Ethernet trunk. The traffic from the CE to the PE can pass through the first PE or the first PE. The second PE forwards. Further, an Ethernet link is established between the first PE and the second PE.

FIG. 1 is a schematic flowchart of a method for forwarding a packet according to an embodiment of the present invention. The method in the embodiment of the present invention is specifically applicable to the first PE. Specifically, the method includes:

S101: The first PE establishes a port isolation group, where the port isolation group includes a port on the first PE side of the Ethernet link, a port in the first PE that is connected to the first CE, and a network side port on the first PE. .

It should be noted that the existing data packet transmitted through the tunnel needs to be encapsulated in the original Ethernet data packet received from the CE side, and the embodiment of the present invention is compared with the traditional data packet transmitted through the tunnel. When the Ethernet and the second PE transmit the received Ethernet data packet through the Ethernet link, the packet does not need to be encapsulated in the tunnel, so that the data transmission process can be simplified to some extent.

In a specific embodiment, after the connection between the first PE and the second PE is established through the Ethernet link, the port on the first PE side of the Ethernet link, that is, the Ethernet link is connected to the first PE. A port (hereafter referred to as an Ethernet link port) is used for VLAN configuration. The Ethernet link port is added to a VLAN that needs to be extended by EVPN, and a port isolation group is established for the VLAN.

Further, the VLAN setting of the Ethernet link port may be automatically completed when the Ethernet link is established, that is, when the port connecting the PE and the CE is added to the VLAN to be extended, the Ethernet link port is also automatically added. Go to the VLAN or add the Ethernet link to the VLAN by manual configuration. There may be multiple VLANs that need to be extended.

Further, if there are multiple VLANs to be extended, that is, the Ethernet link port is added to multiple VLANs, a port isolation group may be established for each VLAN of the Ethernet link port. Further, the ports in the same port isolation group belong to the same VLAN.

S102: The first PE receives the port on the first PE side in the Ethernet link. The packet forwarded by the second PE.

In a specific embodiment, the packet forwarded by the second PE includes a packet sent by the CE connected to the second PE to the second PE or a packet forwarded by the remote PE to the second PE.

When the remote PE receives the packet sent by the local CE and forwards the packet to the first PE and the second PE, the first PE and the second PE send the multicast route when the packet is forwarded according to the definition of the EVPN protocol. Carrying the respective IP addresses as the next hop addresses, so that after receiving the multicast route, the remote PE considers that the first PE and the second PE are two in the multicast headend replication list for the same broadcast domain. Different multicast packets are duplicated and sent to the first PE and the second PE during the multicast replication. The problem occurs when the access side CE receives double traffic and the traffic is duplicated.

Further, in order to solve the above problem of the traffic repetition, a virtual Internet Protocol (IP) address may be pre-configured for the first PE, and the first PE and the second PE have the same virtual IP address, the first When a PE advertises a multicast route to the remote PE, the next hop address of the multicast route is the virtual IP address, and the multicast route advertised by the second PE to the remote PE The next hop address is also the virtual IP address, so that the remote PE only copies one multicast packet to the same next hop address when receiving the same next hop address sent by the first PE and the second PE. The multicast packet is forwarded to the first PE or the second PE, thereby avoiding the problem that the access side CE receives double traffic and causes traffic to be duplicated. In the embodiment of the present invention, the remote PE forwards the packet to the second PE as an example, and the second PE forwards the multicast packet to the first PE through the Ethernet link.

Optionally, the receiving, by the first PE, the packet forwarded by the second PE by using the port on the first PE side of the Ethernet link may be: receiving, by the second PE, forwarding by using the Ethernet link. The first multicast packet is the packet sent by the remote PE to the second PE according to the multicast route.

Optionally, the receiving, by the first PE, the packet that is forwarded by the second PE by using the port on the first PE side of the Ethernet link may be: receiving, by the second PE, forwarding by using the Ethernet link. The second multicast packet is a packet sent by the CE connected to the second PE to the second PE.

S103: The first PE sends a port other than the port isolation group to the first PE. The connected second CE forwards the message.

In a specific embodiment, if the first PE receives the data packet sent by the second PE through the Ethernet link, the packet may be forwarded only to the second port connected to the port other than the port isolation group. CE. Specifically, for example, the first CE to the PE is determined to be forwarded by the second PE, and the second PE forwards the packet to the first PE through the Ethernet link, and the first PE only forwards the current PE to the current PE. The CE connected to the port other than the port isolation group forwards the packet, and does not forward the packet to the first CE and the network side of the port isolation group, so that the first PE and the second PE are connected. The first CE receives only one packet, avoiding the problem of traffic return caused by receiving multiple identical packets.

The embodiment of the present invention can control the forwarding of the packet to the port except that the Ethernet link is established between the PE devices and the port isolation group is established, so that the PE receives the data packet transmitted through the Ethernet link. The CE connected to the port other than the isolation group does not forward the packet to other CEs. This prevents the PE from receiving the packet and forwarding the packet when the CE is dual-homed to the EVPN. The formed traffic backhaul problem does not need to be encapsulated by the ESI label for traffic judgment to avoid traffic backhaul. The solution of the embodiment of the present invention does not need to change the current hardware chip design, thereby saving cost.

2 is a schematic flowchart of a method for establishing a port isolation group according to an embodiment of the present invention. Specifically, the method includes:

S201: The first PE detects whether the Ethernet segment identifier ESI of each port in the local port is a valid value.

The local port is a port in which the CE is connected to the first PE, and the connected CE includes a first CE and a second CE.

In a specific embodiment, when the first PE establishes a port isolation group for the VLAN where the Ethernet link port is located, it can detect whether the Ethernet segment identifier (ESI) corresponding to each local port of the current PE is a valid value. To determine if the local port is added to the port isolation group.

S202: The first PE adds the port with the ESI as the valid value in the local port as the port connected to the first CE in the first PE to the port isolation group.

Specifically, if it is detected that the ESI corresponding to the current local port is a valid value, the The CE connected to the local port is connected to the current EVPN through the dual-homing of the first PE and the second PE. If the CE is the first CE, the local port can be added to the port isolation group.

Further, if the first PE detects that the first CE in the port isolation group is dual-homed to the EVPN, the first PE is connected to the first PE. The port of a CE is deleted from the isolation group. Specifically, the CE single-homing connection to the EVPN may indicate that the CE is connected to the EVPN through the first PE or the second PE, that is, the link between the CE and the second PE or the first PE is Down, and the The port connecting the first CE in a PE is deleted from the port isolation group.

S203: The first PE adds the port on the first PE side and the network side port in the first PE in the Ethernet link to the port isolation group.

Further, the established port isolation group further includes a port that is connected to the Ethernet link by the first PE, that is, an Ethernet link port, and a network side port in the PE that exchanges information with the remote PE.

The embodiment of the present invention can establish a port isolation group by acquiring a port, an Ethernet link port, and a network side port, where the ESI is a valid value detected in the local port, so that the PE receives the data transmitted through the Ethernet link. The packet is controlled to forward the packet to the CE connected to the port other than the port isolation group, so that the traffic backhaul formed on the user side when the PE forwards the packet is effectively solved without changing the hardware of the device. problem.

FIG. 3 is a schematic diagram of a scenario of a packet forwarding method according to an embodiment of the present invention. In the method of the embodiment of the present invention, the PE1 may refer to the second PE in the corresponding embodiment of FIG. 1 to FIG. For related descriptions, the PE2 can refer to the related description of the first PE in the corresponding embodiment of FIG. 1 to FIG. 2. Specifically, as shown in Figure 3, CE1 is connected to PE1 (that is, CE1 is directly connected to the current EVPN), and CE2 is dual-homed to PE1 and PE2 (that is, CE2 is connected to EVPN through PE1 and PE2), and CE3 is connected to PE2 and CE4. Connected to PE3, the dual-homed CE2 and PE1 and PE2 are deployed in the All-Active mode. The link between CE2 and PE1 and PE2 is bundled into an Ethernet trunk. The sites connected to each CE belong to the same EVPN. The double return CE2 is the first CE described above.

For example, if the VLANs to be extended in the PE1 site include Vlan10 and Vlan20, the ports GE0/0/0 and GE0/0/1 on PE1 and PE2 are added to Vlan10 and Vlan20. The PE1 and PE2 are connected to each other through GE0/0/2 on PE1 and GE0/0/2 on PE2. Further, GE0/0/2 is added to Vlan10 and Vlan20 on PE1 and PE2. in.

Further, a port isolation group can be established for Vlan10 and Vlan20 respectively. For example, PE2, that is, the first PE, establishes a port isolation group for Vlan10. The member ports of the isolation group include GE0/0/1, GE0/0/2, and GE0/0/3. The port GE0/0/2 is the port on the first PE side of the Ethernet link, that is, the Ethernet link port. The port GE0/0/1 is the port connected to the first CE in the first PE, and the port GE0/0/ 3 is the network side port. If the second PE, PE1, receives the BUM packet from the local port GE0/0/0, the PE1 forwards the packet to the local port GE0/0/1, the Ethernet link port GE0/0/2, and the network. Side GE0/0/3. The BUM packet sent from the port GE0/0/2 is sent to the PE2 through the Ethernet link. After receiving the BUM packet from the Vlan10 in the GE0/0/2 port, the PE2 does not isolate the port from the port corresponding to Vlan10 on PE2. The member ports GE0/0/1 and GE0/0/3 are forwarded only to the local port GE0/0/0. This prevents the packets from being forwarded to CE2 through GE0/0/1. Traffic back issue.

Further, when the CE2 is dual-homed to the EVPN, the EVPN is connected to the EVPN. For example, when the link between CE2 and PE1 is Down, the port GE0/0/1 can be isolated from the ports corresponding to Vlan10 and Vlan20. If the group is deleted, the BUM packets received by PE2 from Ethernet interface port GE0/0/2 can be forwarded to GE0/0/1. For the similar processing of the Vlan 20, the embodiment of the present invention will not be described again.

The embodiment of the present invention can establish an Ethernet link that does not need to encapsulate the data packet between the PE devices, and control the forwarding of the packet to the establishment after receiving the data packet transmitted through the Ethernet link. The CE connected to the port other than the port isolation group effectively solves the problem of traffic returning on the user side when the PE receives the packet and forwards the packet when the CE is dual-homed to the EVPN.

Further, please refer to FIG. 4, which is a schematic diagram of another packet forwarding method according to an embodiment of the present invention. Specifically, as shown in FIG. 4, in the system of the embodiment of the present invention, CE1 is connected to PE1. CE2 is dual-homed to PE1 and PE2, CE3 is connected to PE2, and CE4 is connected to PE3. The CE2 is deployed in the All-Active mode between PE2 and PE2. The link between CE2 and PE1 and PE2 is bundled into one Ethernet. Trunk. Among them, CE1, CE2, CE3 and The sites connected to CE4 belong to the same EVPN.

According to the definition of the EVPN protocol, PE1 and PE2 carry the multicast routes to each other with their respective IP addresses as the next hop address, so that the remote PE, that is, PE3, after receiving the multicast routing message, is the same broadcast domain. It is considered that PE1 and PE2 are two different next hops in the multicast headend replication list. When multicast replication is performed, the packets are copied and sent to the PE1 and PE2 respectively. The problem of double traffic.

For example, if the BUM packet received by the PE3 from the CE4 is copied and forwarded to the PE1 and the PE2, the PE1 will send the packet from the Ethernet link to the PE2 after receiving the BUM packet from the PE3. After receiving the BUM packet from the Ethernet link, PE2 forwards the packet to the local station CE3. At the same time, PE2 also receives the BUM packet sent by the PE3 from the network side, and forwards the packet to the local station CE3, so that CE3 receives the double BUM packet. Correspondingly, similar problems exist for CE1 and will not be described here.

To this end, the embodiment of the present invention can set the same virtual IP address, such as 1.1.1.1, as the next hop address of the multicast route, and then send the next hop address to the remote PE. That is, PE3. After receiving the multicast route, PE3 adds 1.1.1.1 to the headend replication list of the corresponding multicast. When PE3 sends a BUM packet to the network, only one BUM report is copied to 1.1.1.1 for PE1 and PE2. The text is sent, and the intermediate node P completes the forwarding to PE1 and PE2. Therefore, only one of PE1 and PE2 will receive the BUM message sent by PE3. If the packet is received by PE1, it is forwarded to GE0/0/0, GE0/0/1, and GE0/0/2. After receiving the packet, PE2 forwards the packet to CE3, thus avoiding CE3 receiving. The problem of double BUM traffic. At the same time, it also solves the problem of traffic duplication on CE1. Specifically, the forwarding mode of the packet to the PE1 and the PE2 may be the load balancing mode or the active/standby mode, which is not limited in the embodiment of the present invention.

The embodiment of the present invention can control the forwarding of the packet to the port except that the Ethernet link is established between the PE devices and the port isolation group is established, so that the PE receives the data packet transmitted through the Ethernet link. The CE connected to the port other than the isolation group does not forward the packet to other CEs. This prevents the PE from receiving the packet and forwarding the packet when the CE is dual-homed to the EVPN. The formed traffic backhaul problem does not need to be encapsulated by the ESI label for traffic judgment to avoid traffic backhaul, by using the solution of the embodiment of the present invention, No need to change the current hardware chip design, saving costs.

FIG. 5 is a schematic structural diagram of a first PE according to an embodiment of the present invention. Specifically, the first PE includes: an establishing unit 11, a receiving unit 12, and a forwarding unit 13. among them,

The establishing unit 11 is configured to establish a port isolation group.

In a specific embodiment, an Ethernet link is established between the first PE and the second PE, and the port isolation group includes a port on the first PE side of the Ethernet link, and a first connection in the first PE. The port of the CE and the network side port of the first PE, the first CE is a CE that connects the current EVPN through the first PE and the second PE.

It should be noted that when the received Ethernet data packet is transmitted through the Ethernet link, the packet does not need to be encapsulated.

The receiving unit 12 is configured to receive, by using the port on the first PE side of the Ethernet link, a packet forwarded by the second PE.

In a specific embodiment, the packet forwarded by the second PE includes a packet sent by the CE to the second PE or a packet sent by the remote PE to the second PE.

The forwarding unit 13 is configured to forward the packet received by the receiving unit 12 to a second CE connected to a port other than the port isolation group in the first PE.

In a specific embodiment, if the receiving unit 12 receives the data packet sent by the second PE through the Ethernet link, the forwarding unit 13 may forward the packet to only the port other than the port isolation group. The CE is the second CE. Specifically, for example, the current CE to PE packet is determined to be forwarded by the second PE, and the second PE forwards the packet to the first PE through the Ethernet link, and the forwarding unit 13 only forwards the current packet to the current PE. The second CE connected to the port other than the port isolation group forwards the packet, and does not forward the packet to the first CE and the network side connected to the first PE.

FIG. 6 is a schematic structural diagram of another first PE according to an embodiment of the present invention. Specifically, the first PE includes an establishing unit 11, a receiving unit 12, and a forwarding unit 13, where

The establishing unit 11 is configured to establish a port isolation group.

Further, in the embodiment of the present invention, the establishing unit 11 may include:

The detecting sub-unit 111 is configured to detect whether the Ethernet segment identifier ESI of each port in the local port is a valid value.

In a specific embodiment, the establishing unit 11 can detect the sub-list when establishing the port isolation group. The element 111 detects whether the ESI corresponding to each local port of the current PE is a valid value, and determines whether the local port is added to the port isolation group.

The control sub-unit 112 is configured to add, as the port of the first PE, the port connected to the first CE to the port isolation group.

Specifically, if the detecting sub-unit 111 detects that the ESI corresponding to the current local port is a valid value, it may indicate that the CE connected to the local port is dual-homed to the current EVPN through the first PE and the second PE, that is, the CE is The first CE may be added to the port isolation group by the control sub-unit 112.

The control sub-unit 112 is further configured to add the port on the first PE side and the network side port in the first PE in the Ethernet link to the port isolation group.

Further, in the embodiment of the present invention, the first PE may further include:

The deleting unit 14 is configured to connect the first CE to the first CE if the first CE in the port isolation group is configured to be dual-homed to the EVPN by the dual-homed connection. The port is removed from the isolation group.

Further, in the embodiment of the present invention, the first PE and the second PE have the same virtual IP address, and the first PE further includes:

The sending unit 15 is configured to advertise a multicast route to the remote PE, where the next hop address of the multicast route is the virtual IP address.

Specifically, the first PE sends the same virtual IP address to the remote PE as the next hop address by the sending unit 15, and the next hop address of the multicast route advertised by the second PE to the remote PE is also the virtual IP address. The address is such that the remote PE only copies one multicast packet to the same next hop address, so that the CE connected to the first PE or the second PE receives only one packet, avoiding receiving more packets. The problem of duplicate traffic caused by the same message.

Optionally, the receiving unit 12 is specifically configured to:

Receiving, by the second PE, the first multicast packet that is forwarded by the Ethernet link, where the first multicast packet is sent by the remote PE to the second PE according to the multicast route. Text.

Optionally, the receiving unit 12 is further configured to:

Specifically, the first PE of the embodiment of the present invention may refer to the related description of the first PE in the corresponding embodiment of FIG. 1 to FIG. 4 .

Further, please refer to FIG. 7 , which is a schematic structural diagram of a network device according to an embodiment of the present invention. The network device in the embodiment of the present invention includes: a receiver 300, a transmitter 400, a memory 200, and a processor 100. The memory 200 may be a high speed RAM memory or a non-volatile memory such as at least one disk memory. A corresponding application or the like is stored in the memory 200 as a computer storage medium. The receiver 300, the transmitter 400, the memory 200, and the processor 100 may be connected to each other through a bus, or may be connected by other means. In the present embodiment, a bus connection will be described. Specifically, the network device in the embodiment of the present invention may be corresponding to the first PE, and is applicable to a scenario in which the first CE is dual-homed to the EVPN through the first PE and the second PE, where the first PE and the first An Ethernet link is established between the two PEs. The first PE may further refer to the related description of the first PE in the corresponding embodiment of FIG. 5 or FIG. 6.

The processor 100 performs the following steps:

Establishing a port isolation group, where the port isolation group includes a port on the first PE side of the Ethernet link, a port in the first PE that is connected to the first CE, and a network side port on the first PE. ;

Receiving, by the port on the first PE side of the Ethernet link, the packet forwarded by the second PE;

Transmitting the packet to the second CE connected to the port of the first PE except the port isolation group.

Optionally, the processor 100 is configured to establish a port isolation group, and specifically performs the following steps:

Detecting, respectively, whether the Ethernet segment identifier ESI of each port in the local port is a valid value, where the local port is a port to which the CE is connected in the first PE;

Adding, by the port in the local port, the ESI is a port that is connected to the first CE to the port isolation group;

Adding the port on the first PE side and the network side port in the first PE in the Ethernet link to the port isolation group.

Optionally, the processor 100 is further configured to:

If the first CE in the port isolation group is detected to be a single-homed connection to the EVPN by the dual-homed connection, the port connecting the first CE in the first PE is isolated from the Deleted in the group.

Optionally, the first PE and the second PE have the same virtual internet protocol IP address, and the processor 100 is further configured to:

The first PE advertises a multicast route to the remote PE, and the next hop address of the multicast route is the virtual IP address.

Optionally, the processor 100 is configured to receive, by using the port on the first PE side of the Ethernet link, a packet that is forwarded by the second PE, specifically for performing:

The embodiment of the present invention can establish an Ethernet link that does not need to encapsulate the data packet between the PE devices, and establish a port isolation group, so that the PE controls the data packet transmitted through the Ethernet link. The packet is forwarded to the CE connected to the port other than the port isolation group, which effectively solves the problem that the PE receives the report when the CE is dual-homed to the PE. When the message is forwarded, the traffic backhaul problem formed on the user side does not need to encapsulate the ESI label, so that the current hardware chip design does not need to be changed, and the cost is saved.

FIG. 8 is a schematic structural diagram of a packet forwarding system according to an embodiment of the present invention. The system includes: a first CE10, a first PE20, and a second PE30, where the first CE10 passes the first PE20. And the second PE 30 is dual-homed to the EVPN, and the Ethernet link is established between the first PE 20 and the second PE 30, where

The second PE 30 is configured to receive the packet sent by the first CE 10, and forward the packet to the first PE 20 by using the Ethernet link.

Specifically, the first PE 20 of the embodiment of the present invention may refer to the related description of the first PE 20 in the corresponding embodiment of FIG. 1 to FIG. 7.

In a specific embodiment, if the second PE 30 receives the packet sent by the first CE 10 through the local port, the second PE 30 forwards the packet to other ports. Specifically, the other port includes the port on the second PE 30 side of the Ethernet link, and the second PE 30 can send the received packet to the first PE 20 through the port when the packet is forwarded.

The first PE 20 is configured to establish a port isolation group, and receive, by the port on the first PE20 side of the Ethernet link, the packet forwarded by the second PE 30, and remove the packet from the first PE20. The second CE connected to the port other than the port isolation group forwards the packet, where the port isolation group includes the port on the first PE20 side of the Ethernet link, and the connection in the first PE20. The port of the first CE 10 and the network side port of the first PE 20.

Specifically, the first PE 20 receives the packet that is forwarded by the second PE 30 through the Ethernet link, and may forward the CE to the second CE that is connected to the port other than the established port isolation group. Message. Further, if the second CE does not exist in the system, that is, the CE connected to the first PE 20 has only the first CE 20, the packet can be directly discarded when the first PE 20 receives the packet through the Ethernet link. , no forwarding processing.

Further, please refer to FIG. 9 , which is a schematic structural diagram of another packet forwarding system according to an embodiment of the present invention. The system includes a first CE 10, a first PE 20, and a second PE 30 of the packet forwarding system. The first CE 10 is dual-homed to the EVPN by the first PE 20 and the second PE 30, and an Ethernet link is established between the first PE 20 and the second PE 30. In an embodiment of the invention, the system further includes a remote PE 40.

Specifically, the first PE 20 and the second PE 30 have the same virtual IP address. In the embodiment of the present invention, the first PE 20 is further configured to advertise a multicast route to the remote PE 40. The next hop address of the multicast route is the virtual IP address.

The second PE 30 is further configured to advertise the multicast route to the remote PE, where a next hop address of the multicast route is the virtual IP address;

Further, the second PE 30 is further configured to receive the multicast packet forwarded by the remote PE 40 according to the multicast route, and send the multicast packet to the first PE20 by using the Ethernet link. .

In a specific embodiment, before receiving the packet sent by the remote PE 40, the first PE 20 may advertise a multicast route to the remote PE 40, where the next hop address of the multicast route is the virtual IP address, and The next hop address of the multicast route advertised by the second PE 30 to the remote PE 40 is also the same virtual IP address, that is, the next hop address of the first PE 20 acquired by the remote PE 40 and the second PE 30. The next hop address is the same. Specifically, the remote PE 40 can only copy one multicast packet to the same next hop address according to the next hop address of the first PE 20 and the second PE 30 when receiving the packet sent by the local station. And forwarding the multicast packet to the first PE 20 or the second PE 30. In the embodiment of the present invention, the remote PE 40 forwards the packet to the second PE 30 as an example, and the second PE 30 is used by the second PE 30. Forwarding the multicast packet to the first CE 10 and forwarding the multicast packet to the first PE 20 through the Ethernet link.

If the first PE 20 receives the packet forwarded by the second PE 30 through the Ethernet link, the first PE 20 may forward the packet to the CE that is connected to the port other than the established port isolation group. . Further, if the second CE does not exist in the system, that is, the CE connected to the first PE 20 has only the first CE 20, the packet can be directly discarded when the first PE 20 receives the packet through the Ethernet link. , no forwarding processing.

In the several embodiments provided by the present invention, it should be understood that the disclosed apparatus and method may be implemented in other manners. For example, the device embodiments described above are merely illustrative. For example, the division of the unit is only a logical function division. In actual implementation, there may be another division manner, for example, multiple units or components may be combined or Can be integrated into another system, or some features can be ignored or not executed. In addition, the mutual coupling or direct coupling or communication connection shown or discussed may be an indirect coupling or communication connection through some interface, device or unit, and may be in an electrical, mechanical or other form.

The units described as separate components may or may not be physically separated, and the components displayed as the unit may or may not be physical units, that is, may be located in one place, or may be distributed to multiple network units. . Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of the embodiment.

In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above integrated unit can be implemented in the form of hardware or in the form of hardware plus software functional units.

The above-described integrated unit implemented in the form of a software functional unit can be stored in a computer readable storage medium. The above software functional unit is stored in a storage medium and includes instructions for causing a computer device (which may be a personal computer, a server, or a network device, etc.) or a processor to perform the methods of the various embodiments of the present invention. Part of the steps. The foregoing storage medium includes: a U disk, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk, or an optical disk, and the like, which can store program codes. .

A person skilled in the art can clearly understand that for the convenience and brevity of the description, only the division of each functional module described above is exemplified. In practical applications, the above function assignment can be completed by different functional modules as needed, that is, the device is installed. The internal structure is divided into different functional modules to perform all or part of the functions described above. For the specific working process of the device described above, refer to the corresponding process in the foregoing method embodiment, and details are not described herein again.

Finally, it should be noted that the above embodiments are only used to illustrate the technical solution of the present invention, and not The invention is described in detail with reference to the foregoing embodiments, and those skilled in the art should understand that the technical solutions described in the foregoing embodiments may be modified, or some or all of the technologies may be modified. The features are equivalent to those of the embodiments of the present invention.

Claims

A packet forwarding method, the method is applicable to a scenario in which a first user edge device CE connects to an Ethernet virtual private network EVPN through a first provider edge device PE and a second PE. Establishing an Ethernet link between the PE and the second PE, where the method includes:

The first PE establishes a port isolation group, where the port isolation group includes a port on the first PE side of the Ethernet link, a port in the first PE that is connected to the first CE, and the first Network side port of the PE;

Receiving, by the first PE, a packet forwarded by the second PE by using a port on the first PE side of the Ethernet link;

The first PE forwards the packet to a second CE connected to a port other than the port isolation group in the first PE.
The method according to claim 1, wherein the establishing a port isolation group by the first PE comprises:

The first PE detects whether the Ethernet segment identifier ESI of each port in the local port is a valid value, and the local port is a port to which the CE is connected in the first PE;

The first PE adds a port whose ESI is a valid value in the local port to a port isolation group as a port connected to the first CE in the first PE;

The first PE adds the port on the first PE side and the network side port in the first PE in the Ethernet link to the port isolation group.
The method of claim 2, wherein the method further comprises:

If the first PE detects that the first CE in the port isolation group is dual-homed to the EVPN, the first CE is connected to the first CE. The port is removed from the isolation group.
The method according to any one of claims 1-3, wherein the first PE and the second PE have the same virtual internet protocol IP address, the method further comprising:

The first PE advertises a multicast route to the remote PE, where the next hop address of the multicast route is the virtual IP address, and the multicast route advertised by the second PE to the remote PE The next hop address is the virtual IP address.
The method according to claim 4, wherein the receiving, by the first PE, the packet forwarded by the second PE by using the port on the first PE side of the Ethernet link comprises:

Receiving, by the first PE, the first multicast packet that is forwarded by the second PE by using the Ethernet link, where the first multicast packet is sent by the remote PE according to the multicast route The packet sent by the second PE.
The method according to any one of claims 1-3, wherein the receiving, by the first PE, the packet forwarded by the second PE by using the port on the first PE side of the Ethernet link comprises:

The first PE receives the second multicast packet that is forwarded by the second PE by using the Ethernet link, and the second multicast packet is a CE that is connected to the second PE to the second PE. The message sent.
A first provider edge device PE that forwards the packet, wherein the first user edge device CE is dual-homed to the Ethernet virtual private network EVPN through the first PE and the second PE, where the Establishing an Ethernet link between the PE and the second PE, where the first PE includes:

a establishing unit, configured to establish a port isolation group, where the port isolation group includes a port on the first PE side of the Ethernet link, a port in the first PE that is connected to the first CE, and the first Network side port of the PE;

a receiving unit, configured to receive, by using a port on the first PE side of the Ethernet link, a packet that is forwarded by the second PE;

And a forwarding unit, configured to forward, to the second CE connected to the port other than the port isolation group, the packet received by the receiving unit.
The first PE according to claim 7, wherein the establishing unit comprises:

a detecting subunit, configured to detect, respectively, whether an Ethernet segment identifier ESI of each port in the local port is a valid value, where the local port is a port to which the CE is connected in the first PE;

a control subunit, configured to add, as the port of the first PE, the port connected to the first CE to the port isolation group;

The control subunit is further configured to add the port on the first PE side and the network side port in the first PE in the Ethernet link to the port isolation group.
The first PE according to claim 8, wherein the first PE further comprises:

a deleting unit, configured to connect the first CE to the first CE by detecting that the first CE in the port isolation group is dual-homed to the EVPN by the dual-homed connection The port is removed from the isolation group.
The first PE according to any one of claims 7-9, wherein the first PE and the second PE have the same virtual IP address, and the first PE further includes:

The sending unit is configured to advertise a multicast route to the remote PE, where the next hop address of the multicast route is the virtual IP address.
The first PE according to claim 10, wherein the receiving unit is specifically configured to:

Receiving, by the second PE, the first multicast packet that is forwarded by the Ethernet link, where the first multicast packet is sent by the remote PE to the second PE according to the multicast route. Text.
The first PE according to any one of claims 7-9, wherein the receiving unit is specifically configured to:

And receiving, by the second PE, a second multicast packet that is forwarded by the Ethernet link, where the second multicast packet is a packet that is sent by the CE that is connected to the second PE to the second PE.
A packet forwarding system, the system includes: a first user edge device CE, a first provider edge device PE, and a second PE, wherein the first CE passes the first PE and the first The second PE is dual-homed to the Ethernet virtual private network (EVPN), and the Ethernet link is established between the first PE and the second PE, where

The second PE is configured to receive the packet sent by the first CE, and forward the packet to the first PE by using the Ethernet link;

The first PE is configured to establish a port isolation group, and receive, by the port on the first PE side of the Ethernet link, the packet forwarded by the second PE, and remove the packet from the first PE. The second CE connected to the port other than the port isolation group forwards the packet, where the port isolation group includes the port on the first PE side of the Ethernet link, and the connection in the first PE a port of the first CE and a network side port of the first PE.
The system according to claim 13, wherein the system further comprises a remote PE, the first PE and the second PE have the same virtual IP address, and the system further comprises:

The first PE is further configured to advertise a multicast route to the remote PE, where a next hop address of the multicast route is the virtual IP address;

The second PE is further configured to advertise the multicast route to the remote PE, where a next hop address of the multicast route is the virtual IP address;

Receiving, by the second PE, the packet sent by the remote PE, and forwarding the packet to the first PE by using the Ethernet link, including:

The second PE receives the multicast packet forwarded by the remote PE according to the multicast route, and sends the multicast packet to the first PE by using the Ethernet link.