WO2015070667A1 - Method for issuing route information, and method and apparatus for transmitting packet - Google Patents

Abstract

Disclosed are a method for issuing route information, a method and an apparatus for transmitting a packet. The method for issuing route information comprises: a VPN server receiving route issuing information issued by a first PE; selecting the VPN server as a second PE of a destination end; the VPN server selecting, according to the first VPN identification, a second VPN identification matching a first VPN identification from VPN identifications of the second PE, adding the second VPN identification used as the VPN identification of the destination end into VPN topological connection information, and obtaining modified route issuing information; the VPN server determining, according to the first VPN identification and the second VPN identification, VXLAN tunnel encapsulation information through which a packet is transmitted to the first PE by the second PE; and the VPN server sending the VXLAN tunnel encapsulation information and the modified route issuing information to the second PE.

Description

Method for distributing routing information, method and device for transmitting message

This application claims the priority of the Chinese Patent Application filed on November 13, 2013 by the Chinese Patent Office, the application number is CN201310567457.6, and the invention is entitled "Method of Routing Information Distribution, Method and Apparatus for Transmitting Messages". The content is incorporated herein by reference.

Technical field

The present invention relates to the field of computer technologies, and in particular, to a method and device for issuing routing information and a method and device for transmitting a message.

Background technique

The existing virtual private network (VPN) usually needs to use the Multi-Protocol Protocol Switch (MPLS) technology, and the VPN is a remote access technology. It uses a public network link to set up a private network, usually through Different autonomous systems (AS), because VPN essentially encapsulates a data communication tunnel on the public network by using encryption technology, so that the security performance is improved during the transmission of packets through the VPN.

However, when the existing VPN performs routing, the publishing end transmits the routing information of the publishing end to the router connected to the publishing end, and the router forwards the routing information to the next one connected to the router. The router then forwards the routing information in sequence, and then completes the route advertisement. As a result, the route advertisement in the prior art needs to be forwarded one by one, and when routing is performed between different ASs, The domain technology implements route forwarding. As a result, the number of routes is forwarded more frequently when the route is forwarded. In the case of routing and forwarding between different ASs, the cross-domain technology is required to implement route forwarding. The time is long and the efficiency of routing is low.

Summary of the invention

The embodiment of the present application provides a method and an apparatus for distributing routing information, and a method and a device for transmitting a message, which are used to solve the technical problem that the route publishing time is long and the route publishing efficiency is low in the prior art.

According to a first aspect of the present invention, a method for routing information is provided, the method comprising: a virtual private network VPN server receiving route advertisement information from a first service provider edge device PE, wherein the route issuance information The VPN topology connection information corresponding to the first PE, the VPN topology connection information includes a VPN identifier of the source end, the VPN identifier of the source end is a first VPN identifier in the first PE, and the VPN server is selected as a second PE of the destination end; the VPN server selects, according to the first VPN identifier, a second VPN identifier that matches the first VPN identifier from the VPN identifiers of the second PE, and connects in the VPN topology Adding the second VPN identifier that is the VPN identifier of the destination end to the information, and obtaining the modified route advertisement information; and determining, by the VPN server, the first VPN identifier and the second VPN identifier. Transmitting, by the second PE, the packet to the virtual extended local area network VXLAN tunnel encapsulation information of the first PE; the VPN server, the VPN server encapsulates the VXLAN tunnel encapsulation information and the modified route advertisement Transmitted to the second PE.

With reference to the first aspect, in a first possible implementation manner, the route advertisement information further includes a protocol IP address interconnected by a network of a user network edge device CE connected to the first PE, where the VPN topology connection is Information and an IP address of the first PE, and the first VPN identifier corresponds to the CE.

With reference to the first aspect or the first possible implementation manner, in a second possible implementation manner, the VPN server selects, according to the first VPN identifier, a second VPN identifier that matches the first VPN identifier, Specifically, the VPN server selects, according to the first VPN identifier, a match with the first VPN identifier from a TAG correspondence relationship in the VPN. The second VPN identifier, the TAG correspondence includes a correspondence between a VPN identifier in the first PE and a VPN identifier in the second PE.

With reference to the first aspect, the first possible implementation, or the second possible implementation, in a third possible implementation, the VXLAN tunnel encapsulation information includes a VXLAN interface IP set in the first PE. An address and a VXLAN interface IP address set in the second PE.

According to a second aspect of the present invention, a method for transmitting a message is provided, the method comprising: receiving, by a first PE, a packet sent by a source CE, and determining, according to the packet sent by the source CE The target PE of the packet transmission is the second PE; the first PE selects the corresponding destination CE from the received route advertisement information of the second PE according to the IP address of the destination CE in the packet. The route issuance information, and the VXLAN tunnel encapsulation information corresponding to the destination CE is selected from the received VXLAN tunnel encapsulation information of the second PE, where the route advertisement information and the VXLAN tunnel encapsulation information of the second PE are Is sent by the VPN server to the first PE; the first PE determines, according to the route advertisement information and the VXLAN tunnel encapsulation information, that the first PE transmits the packet to the VXLAN of the second PE. a tunnel: the first PE transmits the packet to the second PE by using the VXLAN tunnel.

With reference to the second aspect, in a first possible implementation manner, the first PE determines, according to the route advertisement information and the VXLAN tunnel encapsulation information, that the first PE transmits a packet to the second PE. The VXLAN tunnel specifically includes:

Determining, by the first PE, that the first PE transmits the packet according to the first VPN identifier of the first PE and the second VPN identifier of the second PE in the route advertisement information corresponding to the destination CE. a VPN routing forwarding table for the second PE;

Determining, by the first PE, the IP address of the first PE and the IP address of the second PE according to the VXLAN tunnel encapsulation information corresponding to the destination CE;

Determining, by the first PE, the first PE to transmit the packet to the second PE according to the VPN routing forwarding table, the IP address of the first PE, and the IP address of the second PE. VXLAN tunnel.

According to a third aspect of the present invention, an apparatus for routing information is provided, the apparatus comprising:

a receiving unit, configured to receive route advertisement information from the first PE, where the route advertisement information includes VPN topology connection information corresponding to the first PE, and the VPN topology connection information includes a VPN identifier of the source end, the source The VPN identifier of the end is the first VPN identifier in the first PE;

a selection unit, configured to select a second PE as a destination;

a route modification unit, configured to receive the route advertisement information sent by the receiving unit, and receive the second PE sent by the selecting unit, according to the first VPN identifier, from a VPN identifier of the second PE And the second VPN identifier that matches the first VPN identifier is selected, and the second VPN identifier that is the VPN identifier of the destination end is added to the VPN topology connection information, and the modified route advertisement information is obtained.

a tunnel selection unit, configured to receive the first VPN identifier and the second VPN identifier sent by the route modification unit, and determine, according to the first VPN identifier and the second VPN identifier, that the second PE Transmitting the message to the virtual extended local area network VXLAN tunnel encapsulation information of the first PE;

a sending unit, configured to receive the modified route advertisement information sent by the route modification unit, and receive the VXLAN tunnel encapsulation information sent by the tunnel selection unit, and encapsulate the VXLAN tunnel encapsulation information and the modified The route advertisement information is sent to the second PE.

With reference to the third aspect, in a first possible implementation manner, the route advertisement information further includes a protocol IP address interconnected by a network of a user network edge device CE connected to the first PE, where the VPN topology connection is Information and an IP address of the first PE, and the first VPN identifier corresponds to the CE.

With reference to the third aspect or the first possible implementation manner, in a second possible implementation manner, the route modification unit includes a VPN identity determining unit, configured to use, according to the first VPN And identifying, by the TAG correspondence in the VPN, the second VPN identifier that matches the first VPN identifier, where the TAG correspondence includes the VPN identifier in the first PE and the second PE The correspondence between the VPN IDs.

With reference to the third aspect, the first possible implementation manner, or the second possible implementation manner, in a third possible implementation manner, the VXLAN tunnel encapsulation information includes a VXLAN interface IP set in the first PE. An address and a VXLAN interface IP address set in the second PE.

According to a fourth aspect of the present invention, a VPN server is provided, the server comprising:

a receiver, configured to receive route advertisement information from the first PE, where the route advertisement information includes VPN topology connection information corresponding to the first PE, and the VPN topology connection information includes a VPN identifier of the source end, the source The VPN identifier of the end is the first VPN identifier in the first PE;

a processor, configured to select a second PE that is the destination end, and select, according to the first VPN identifier, a second VPN identifier that matches the first VPN identifier from the VPN identifiers of the second PE, and Adding the second VPN identifier that is the VPN identifier of the destination end to the VPN topology connection information, and obtaining the modified route advertisement information; and determining the first according to the first VPN identifier and the second VPN identifier. Transmitting, by the second PE, the packet to the virtual extended local area network VXLAN tunnel encapsulation information of the first PE;

And a transmitter, configured to send the VXLAN tunnel encapsulation information and the modified route advertisement information to the second PE.

With reference to the fourth aspect, in a first possible implementation manner, the route advertisement information further includes a protocol IP address interconnected by a network of a user network edge device CE connected to the first PE, where the VPN topology connection is Information and an IP address of the first PE, and the first VPN identifier corresponds to the CE.

With reference to the fourth aspect or the first possible implementation manner, in a second possible implementation manner, the processor is specifically configured to use the TAG in the VPN according to the first VPN identifier. And selecting, by the correspondence, the second VPN identifier that matches the first VPN identifier, where the TAG correspondence includes a correspondence between the VPN identifier in the first PE and the VPN identifier in the second PE.

With reference to the fourth aspect, the first possible implementation manner, or the second possible implementation manner, in a third possible implementation manner, the VXLAN tunnel encapsulation information includes a VXLAN interface IP set in the first PE. An address and a VXLAN interface IP address set in the second PE.

According to a fifth aspect of the present invention, an apparatus for transmitting a message is provided, the apparatus comprising:

a receiving unit, configured to receive a packet sent by the source CE,

a PE determining unit, configured to receive a packet sent by the receiving unit, and determine, according to the packet, that the destination PE of the packet is a second PE;

a routing unit, configured to receive a packet sent by the receiving unit, and select, according to the IP address of the destination CE in the packet, the received routing information corresponding to the destination CE from the received routing information of the second PE. Route publishing information, wherein the route publishing information of the second PE is sent by the VPN server to the routing unit;

a tunnel information acquiring unit, configured to receive the second PE sent by the PE determining unit, and select VXLAN tunnel encapsulation information corresponding to the destination CE from the received VXLAN tunnel encapsulation information of the second PE, where The VXLAN tunnel encapsulation information of the second PE is sent by the VPN server to the tunnel selection unit;

a tunnel determining unit, configured to receive route advertisement information corresponding to the destination CE and send the VXLAN tunnel encapsulation information sent by the tunnel information acquisition unit, according to a route corresponding to the destination CE Deriving the information and the VXLAN tunnel encapsulation information, and determining that the first PE transmits the packet to the VXLAN tunnel of the second PE;

And a message transmission unit, configured to receive the VXLAN tunnel sent by the tunnel determining unit, and transmit the packet to the second PE by using the VXLAN tunnel.

With reference to the fifth aspect, in a first possible implementation manner, the tunnel determining unit The first PE is configured to transmit the packet to the first PE according to the first VPN identifier of the first PE and the second VPN identifier of the second PE in the route advertisement information corresponding to the destination CE. Determining, by the VPN routing and forwarding table of the second PE, the IP address of the first PE and the IP address of the second PE according to the VXLAN tunnel encapsulation information corresponding to the destination CE, and changing according to the VPN route And the IP address of the first PE and the IP address of the second PE are published, and the first PE is determined to transmit the packet to the VXLAN tunnel of the second PE.

The beneficial effects of the present invention are as follows:

In the embodiment of the present invention, the technical solution of the present application is that the VPN server receives the route advertisement information advertised by the first PE, and selects the VPN server to select the second PE that performs the packet transmission with the first PE, according to the And the first VPN identifier, the second VPN identifier that matches the first VPN identifier is selected, and the second VPN identifier that is the VPN identifier of the destination end is added to the VPN topology connection information, and the modified route is obtained. And the VPN server sends the VXLAN tunnel encapsulation information and the modified routing information to the second PE, so that the route publishing information of the first PE is only used by the VPN server. The second PE is directly transmitted to the destination PE, so that the route advertisement of the first PE is implemented, thereby shortening the route publishing time and improving the efficiency of route advertisement.

DRAWINGS

1 is a flowchart of a method for publishing routing information according to an embodiment of the present invention;

2 is a first structural diagram of a first PE performing route advertisement according to an embodiment of the present invention;

FIG. 3 is a second structural diagram of a first PE being issued according to an embodiment of the present invention; FIG.

FIG. 4 is a flowchart of a route advertised by a first PE according to an embodiment of the present invention;

FIG. 5 is a flowchart of a method for transmitting a message according to an embodiment of the present invention;

6 is a structural diagram of an apparatus for issuing routing information according to an embodiment of the present invention;

FIG. 7 is a structural diagram of a VPN server according to an embodiment of the present invention; FIG.

FIG. 8 is a structural diagram of an apparatus for transmitting a message according to an embodiment of the present invention.

detailed description

In the technical solution proposed by the embodiment of the present invention, the VPN server receives the route advertisement information advertised by the first PE and selects the existing route advertisement policy for the existing route advertisement policy. The VPN server selects a second service provider edge device PE that performs packet transmission with the first PE, and then selects a second VPN identifier that matches the first VPN identifier according to the first VPN identifier, and Adding the second VPN identifier that is the VPN identifier of the destination end to the VPN topology connection information, and obtaining the modified route advertisement information, where the VPN server encapsulates the VXLAN tunnel encapsulation information and the modified route The issuing information is sent to the second PE, so that the route publishing information of the first PE can be directly transmitted to the second PE as the destination PE through the VPN server, thereby implementing the first The route of the PE is advertised, which shortens the route publishing time and improves the efficiency of route advertisement.

The main implementation principles, specific implementation manners, and the corresponding beneficial effects that can be achieved by the technical solutions of the embodiments of the present invention are described in detail below with reference to the accompanying drawings.

Embodiment 1:

A method for publishing routing information is proposed in the first embodiment of the present invention. As shown in FIG. 1 , the specific processing procedure of the method is as follows:

Step 101: The virtual private network VPN server receives the route advertisement information advertised by the first service provider edge device PE, where the route advertisement information includes VPN topology connection information corresponding to the first PE, and the VPN topology connection information. The VPN identifier of the source end is included, and the VPN identifier of the source end is the first VPN identifier in the first PE.

Step 102: The VPN server selects a second PE as a destination end;

Step 103: The VPN server is from the second PE according to the first VPN identifier. The second VPN identifier that matches the first VPN identifier is selected in the VPN identifier, and the second VPN identifier that is the VPN identifier of the destination end is added to the VPN topology connection information, and the modified route is obtained. information;

Step 104: Determine that the second PE transmits the packet to the virtual extended local area network VXLAN tunnel encapsulation information of the first PE.

Step 105: The VPN server sends the VXLAN tunnel encapsulation information and the modified route advertisement information to the second PE.

In the step 101, the virtual private network (VPN) server receives the route advertisement information advertised by the Provider Edge (PE), wherein the route advertisement information includes the The VPN topology connection information corresponding to the PE, the VPN topology connection information only includes the VPN identifier of the source end, and the VPN identifier of the source end is the first VPN identifier of the first PE.

The VPN server is connected to multiple PEs, so that a route from one PE to another PE can be implemented through the VPN server, and a VPN identifier and a VPN routing forwarding table in the source end (VPN Routing) And the forwarding table corresponds to the VRF, and the source end is the first PE, that is, a VPN identifier is associated with one VRF in the first PE.

In a specific implementation process, the first PE may have one or more VRFs, and one VPN identifier corresponds to one VRF, so that the corresponding VRF may be determined by using the VPN identifier, and the VPN topology connection information corresponding to the first PE is configured. The VPN identifier field of the source end and the VPN identifier field of the destination end are included. The VPN information received by the VPN server is the source VPN of the VPN topology connection information corresponding to the first PE. The identifier field is the first VPN identifier, and the VPN identifier field of the destination end is empty, so that the VPN topology connection information corresponding to the first PE includes the first VPN identifier, but the destination is not included. End of the VPN ID.

The VPN topology connection information can be entered by using VPN_TOPO_CONNECTOR. The line indicates that the VPN identifier of the source end can be represented by a Local VPN TAG (L-TAG), and the VPN identifier of the destination end can be represented by a Remote VPN TAG (R-TAG for short), for example, the VPN topology connection. The information can be expressed in the following ways:

VPN_TOPO_CONNECTOR Attribue:

Local VPN TAG

Remote VPN TAG.

The Local VPN TAG and the Remote VPN TAG can be represented by 4 bytes or 8 bytes.

Specifically, the PE is directly connected to the customer network edge device (CE), and the CE may be a router or a switch, or may be a host, when the PE receives the request of the CE. The PE will perform route advertisement, so that when the VPN server receives the route advertisement information advertised by the first PE, the route advertisement information includes the user network edge device CE connected to the first PE. The IP address, the VPN topology connection information, and the IP of the first PE (a protocol interconnected by the Internet Protocol), and the first VPN identifier corresponds to the CE.

For example, referring to FIG. 2, the first PE is an example of PE1, and PE1 is directly connected to CE1, CE2, and CE3. Assume that CE3 is a 163 server. In order to enable the user to find 163 servers, CE3 requests PE1 to perform route advertisement. And the VPN server receives the route advertisement information of the PE1, where the route advertisement information includes the IP address of the CE3, the VPN topology connection information corresponding to the PE1, and the IP address of the PE1.

PE1 has VRF1, VRF2, and VRF3, and the VPN identifier corresponding to VRF1 in PE1 is TAG1, the VPN identifier corresponding to VRF2 is TAG2, and the VPN identifier corresponding to VRF3 is TAG3, and each TAG corresponds to one or more CE.

For example, TAG1 corresponds to CE3, TAG1 can also correspond to CE1 and CE2, and TAG1 can also correspond to CE1, CE2, and CE3. For example, when TAG1 and CE3 correspond, if CE3 requests PE1 to perform route advertisement, it can determine PE1. VPN topology connection information is The local VPN TAG is TAG1, and the remote VPN TAG is empty. The IP address of the CE3 is the private IP address, for example, 192.168.1.102, and the IP address of the PE1 is the public IP address, for example, 4.4.4.4. The route advertisement information of PE1 is:

VPN_TOPO_CONNECTOR:

Local VPN TAG: TAG1;

Remote VPN TAG: NULL;

NLRI (Network Layer Reachability Information): 192.168.1.102;

NHP (Next Hop Prefix next hop public network address): 4.4.4.4;

Then, it is encapsulated into a Border Gateway Protocol (BGP) packet for distribution.

Among them, VPN_TOPO_CONNECTOR is specifically: Local VPN TAG: TAG1; Remote VPN TAG: NULL; can also be represented by VPNATR (L-TAG1, R-RULL).

Certainly, when TAG2 and CE3 correspond, if CE3 requests PE1 to perform route advertisement, it can be determined that the VPN topology connection information of PE1 is VPNATR (L-TAG2, R-RULL).

Next, step 102 is performed, in which the VPN server selects the second PE as the destination.

In a specific implementation process, the VPN server is configured with another PE that performs VPN communication with the first PE, and configured with tunnel encapsulation information of the first PE and the other PEs, so that the VPN is configured. The server selects the second PE as the destination end according to the IP address of the first PE in the route advertisement information, and may select the second VPN according to the first VPN identifier in the route advertisement information. PE is the destination.

For example, as shown in Figure 2, the PE server can communicate with the PE2 through the VPN. The VPN server associates the PE2 with the PE1. When the VPN server receives the route advertisement information sent by the PE1, the VPN server posts the information according to the route. IP address of PE1, select PE2 For the purpose.

For example, as shown in FIG. 3, the PE1 can also be transmitted through the VPN packet with the PE3. The VPN server associates the PE2 and the PE1, and also associates the PE3 with the PE1, so that the VPN server receives the route sent by the PE1. When the information is published, the second PE that performs packet transmission with the PE1 is determined to be PE2 or PE3 according to the IP address of the PE1 in the routing information.

For example, referring to FIG. 2, PE2 has VRF4 and VRF5, the VPN identifier corresponding to VRF4 is TAG4, the VPN identifier corresponding to VRF5 is TAG5, and TAG4 corresponds to TAG1, and VRF of PE2 to PE1 can be determined through VRF4 and VRF1. And TAG5 corresponds to TAG2. VRF5 and VRF2 can also be used to determine the VRF of PE2 to PE1. As a result, the VPN server associates PE1 with PE2, TAG5 corresponds to TAG2, and TAG4 corresponds to TAG1. The VPN identifier in the message is TAG1. Since the TAG1 in the VPN server corresponds to the TAG4, and the TAG4 belongs to the PE2, the second PE may be determined to be the PE2.

Next, step 103 is performed, in which the VPN server selects a second VPN identifier matching the first VPN identifier from the VPN identifiers of the second PE according to the first VPN identifier, and The second VPN identifier that is the VPN identifier of the destination end is added to the VPN topology connection information, and the modified route advertisement information is obtained.

In a specific implementation process, the VPN server further configures a correspondence between the VPN identifier of the first PE and the VPN identifier of the other PEs in the process of configuring the first PE and the other PEs. And storing the TAG correspondence between the first PE and the other PEs, so that the VPN server can select, according to the first VPN identifier, the TAG correspondence relationship in the VPN. The second VPN identifier matched by the VPN identifier, the TAG correspondence includes a correspondence between the VPN identifier in the first PE and the VPN identifier in the second PE.

For example, referring to Figure 3, PE2 has VRF4 and VRF5, and the VPN label corresponding to VRF4. Known as TAG4, the VPN identifier corresponding to VRF5 is TAG5, and TAG4 corresponds to TAG1. VRF4 and VRF1 can be used to determine the VRF of PE2 to PE1, and TAG5 corresponds to TAG2. PE2 to V1 can also be determined by VRF5 and VRF2. VRF, in this way, causes the VPN server to associate PE1 with PE2, TAG5 corresponds to TAG2, and TAG4 corresponds to TAG1, which can be expressed as: {vPE1: TAG1, vPE2: TAG4}, {vPE1: TAG2, vPE2: TAG5 }.

PE3 has VRF6 and VRF7, the VPN identifier corresponding to VRF6 is TAG6, and the VPN identifier corresponding to VRF7 is TAG7, and TAG6 corresponds to TAG2. VRF6 and VRF2 can determine the VRF of PE3 to PE1, and TAG7 and TAG3 Correspondingly, the VRF of PE3 to PE1 can also be determined by VRF7 and VRF3. In this way, PE1 is associated with PE3 in the VPN server, TAG6 corresponds to TAG2, and TAG7 corresponds to TAG3, which can be expressed as: {vPE1:TAG2 , vPE3: TAG6}, {vPE1: TAG3, vPE3: TAG7}.

Further, since the VRF selected by the CE3 to request the PE1 to perform the route advertisement is VRF1, the route advertisement information of the PE1 is {NLRI: 192.168.1.102, VPNATR (L-TAG1, R-RULL), NHP: 4.4.4.4}, which When the first TAG is TAG1, according to the configuration in the VPN server {vPE1: TAG1, vPE2: TAG4}, {vPE1: TAG2, vPE2: TAG5}, {vPE1: TAG2, vPE3: TAG6}, and {vPE1: TAG3, vPE3: TAG7}, it can be determined that the second TAG is TAG4, and the VPNATR (L-TAG1, R-RULL) is modified to VPNATR (L-TAG1, R-TAG4).

Next, step 104 is performed, in which the VPN server determines, according to the first VPN identifier and the second VPN identifier, that the second PE transmits the packet to the virtual extended local area network of the first PE. VXLAN tunnel encapsulation information.

In a specific implementation process, the VPN server is configured with the tunnel encapsulation information of the first PE and the other PEs, and the second VPN identifier and the second VPN identifier are determined according to the first VPN identifier and the second VPN identifier. The PE transmits the packet to the VXLAN tunnel of the first PE. Package information.

The VXLAN tunnel encapsulation information includes a VXLAN interface IP address set in the first PE and a VXLAN interface IP address set in the second PE, so that an entry of the packet points to the VXLAN in the second PE. The IP address of the interface, the egress of the packet is directed to the IP address of the VXLAN interface in the first PE, and the packet is transmitted through the VXLAN tunnel between the first PE and the second PE.

Specifically, when the VPN server configures the tunnel encapsulation information of the first PE and the other PEs, the virtual network instance (virtual network instance is referred to as vni), and the tunnel can be determined according to the vni. Package information.

For example, referring to FIG. 2, the VPN server is configured with {vPE1: TAG1, vPE2: TAG4} and its corresponding vni is vni1, and vni1 includes a virtual extended local area network interface (vxlanif) corresponding to TAG1, and The IP address corresponding to TAG1 in the Virtual Extensible Local Area Network (VXLAN), the vxlanif corresponding to TAG4, and the IP address corresponding to TAG4 in VXLAN can be expressed in the following manner:

Where vxlanif1 represents vxlanif corresponding to TAG1, vxlanif4 represents vxlanif corresponding to TAG4, further, uip is a shorthand for Underlying network IP, uip1 represents an IP address corresponding to TAG1 in VXLAN, and uip4 represents a corresponding to TAG4 in VXLAN IP address.

Similarly, the VPN server is configured with {vPE1: TAG2, vPE2: TAG5} and its corresponding vni is vni2, which can be expressed in the following manner:

The second VPN identifier determined by the VPN server according to the request of the CE3 is TAG4, and according to the TAG1 and the TAG4, determining that the vni matching the TAG1 and the TAG4 is vni1, the tunnel encapsulation information of the VXLAN may be determined as:

Next, step 105 is performed, in which the VPN server sends the VXLAN tunnel encapsulation information and the modified route advertisement information to the second PE.

In the specific implementation process, the VXLAN tunnel encapsulation information and the modified route advertisement information are sent to the second PE, so that the second PE finds the R- according to the R-VPN identifier. And the VXLAN tunnel corresponding to the VPN identifier, and then generating a packet from the second PE to the VXLAN tunnel of the first PE according to the VXLAN tunnel encapsulation information, and then passing the packet received by the second PE to the VXLAN. The tunnel is transmitted to the first PE.

For example, referring to Figure 4, the private network IP address of CE3 is 192.168.1.102, and PE1 is requested. When the route is advertised, PE1 generates route advertisement information. The route advertisement information is: {NLRI: 192.168.1.102, VPNATR: (L_TAG1, NULL), NHP: 4.4.4.4}. At this time, step 401 is executed, and PE1 is released. Routed to the VPN server, the {NLRI: 192.168.1.102, VPNATR: (L_TAG1, NULL), NHP: 4.4.4.4} is encapsulated into BGP message 1, the BGP message 1 is referred to as BGP1.

Next, in step 402, PE1 sends BGP1 to enable the VPN server to receive BGP1.

Next, in step 403, the VPN server receives the BGP1 advertised by the PE1, and obtains the modified route advertisement information and the VXLAN tunnel information according to the configuration in the VPN server: {NLRI: 192.168.1.102, VPN ATR: (L_TAG1, R_TAG4), VXLANATR: (vni1, uip1, uip4), NHP: 4.4.4.4}, and {NLRI: 192.168.1.102, VPNATR: (L_TAG1, R_TAG4), VXLAN ATR: (vni1, uip1, uip4), NHP: 4.4.4.4 } encapsulated into BGP packet 2, which is referred to as BGP2.

Next, in step 404, the VPN server sends BGP2 to PE2, so that PE2 receives BGP2.

Next, in step 405, PE2 receives the BGP2 sent by the VPN server, matches the local VRF according to the R-TAG flag, finds vxlanif1 and vxlanif4 according to the carried uip4 address and uip1, and sets the packet vxlanif1 to the packet. The egress exits the vxlanif4 and generates a vxlan tunnel table associated with the PEI and the PE2 to form a vxlan tunnel, so that the packet sent by the CE that is connected to the PE2 is transmitted to the PE1 through the vxlan tunnel.

As shown in Figure 3, the route advertisement information of PE1 is advertised to AS1 and AS3. The AS1 sends the route advertisement information of PE1 to Router A1. Router A1 then advertises the route of PE1. It is sent to the router A2, and the router A2 sends the route advertisement information of the PE1 to the AS2. Then, the AS2 advertises the route advertisement information of the PE1 to the PE2, and the AS3 sends the route advertisement information of the PE1 to the router A3. The route advertisement information of PE1 is sent to router A4, and router A4 routes PE1. The information is sent to the AS4, and then the AS4 advertises the route advertisement information of the PE1 to the PE3. When both the PE2 and the PE3 receive the route advertisement information of the PE1, the PE1 completes the route advertisement.

Among them, AS is short for Autonomous System, and Chinese name is autonomous system.

In the embodiment of the present application, the route advertisement information of the PE1 is directly transmitted to the VPN server, and the VPN server determines the destination PE as the PE2 according to the route advertisement information of the PE1, adds the TAG of the destination end, and obtains the modified route information of the PE1, and according to the PE1. TAG matches the TAG of the PE2, determines the VXLAN tunnel encapsulation information, and sends the modified PE1 route advertisement information and the VXLAN tunnel encapsulation information to the PE2, thereby completing the route advertisement of the PE1, and the route advertisement in the prior art needs to be one by one. When routing and forwarding are performed, and route forwarding is performed between different ASs, the cross-domain technology is required to implement route forwarding. As a result, the number of routes is forwarded more frequently in the prior art, and in different ASs. When the route is forwarded, the route forwarding is required to be implemented, and the route is advertised for a long time, and the efficiency of the route is also low. However, this application allows the application to complete the route only through the VPN server. Publish, routing is completed only by one route forwarding, and there is no need to implement the road through cross-domain technology. By forwarding, the time of route advertisement can be shortened, and the efficiency of route advertisement is improved.

Embodiment 2:

Based on the same technical concept as the above method, the second embodiment of the present invention provides a method for transmitting a message. As shown in FIG. 5, the specific processing procedure of the method is as follows:

Step 501: The first PE receives the packet sent by the source CE, and determines, according to the packet sent by the source CE, that the destination PE of the packet is the second PE.

Step 502: The first PE selects route advertisement information corresponding to the destination CE from the received route advertisement information of the second PE according to the IP address of the destination CE in the packet, and receives the route Selecting, by the VXLAN tunnel encapsulation information of the second PE, VXLAN tunnel encapsulation information corresponding to the destination CE, where the route of the second PE is The publishing information and the VXLAN tunnel encapsulation information are sent by the VPN server to the first PE;

Step 503: The first PE determines, according to the route advertisement information and the VXLAN tunnel encapsulation information corresponding to the destination CE, that the first PE transmits the packet to the VXLAN tunnel of the second PE.

Step 504: The first PE transmits the packet to the second PE by using the VXLAN tunnel.

In the step 501, the first PE receives the packet sent by the source CE, and determines, according to the packet sent by the source CE, that the destination PE of the packet is the second PE, where the The source CE is connected to the first PE.

In a specific implementation process, the first PE receives the route advertisement information and the VXLAN tunnel encapsulation information sent by the VPN server, and when the first PE receives the packet sent by the source CE, The packet has the IP address of the destination CE, and the second PE directly connected to the destination CE may be determined according to the route advertisement information sent by the received VPN server according to the IP address of the destination CE. The second PE is the target PE.

For example, referring to FIG. 2, taking PE2 as the first PE, the PE2 firstly receives the route advertisement information and the tunnel encapsulation information of the PE1 sent by the VPN server, and the route advertisement information and the tunnel encapsulation information of the PE1 may include the CE1. And the route advertisement information corresponding to the CE2 and the CE3 and the corresponding tunnel encapsulation information, and then, when the PE2 receives the packet sent by the source CE, the IP address of the destination CE in the packet is obtained, if the destination is The IP address of the CE is the IP address of the CE3. According to the received route advertisement information of the PE1, the destination PE is determined to be PE1.

Next, step 502 is performed, in which the first PE selects a destination corresponding to the destination CE from the received route advertisement information of the second PE according to the IP address of the destination CE in the packet. The route issuance information, and the VXLAN tunnel encapsulation information corresponding to the destination CE is selected from the received VXLAN tunnel encapsulation information of the second PE, where the route advertisement information and the VXLAN tunnel encapsulation information of the second PE are Is sent by the VPN server to the first A PE.

In a specific implementation process, the IP address of the CE that requests the second PE to perform the route advertisement is written into the route advertisement information of the second PE, After determining the second PE in step 501, the first PE can select route advertisement information and VXLAN tunnel encapsulation information corresponding to the destination CE from the route advertisement information and the VXLAN tunnel encapsulation information of the second PE.

For example, referring to FIG. 2, taking PE2 as the first PE, after the CE3 requests the route advertisement information of the PE1, the PE2 receives the route advertisement information and the VXLAN tunnel information sent by the VPN server, including: {NLRI: 192.168. 1.102, VPN ATR: (L_TAG1, R_TAG4), VXLAN ATR: (vni1, uip1, uip4), NHP: 4.4.4.4}, and if the IP address of CE2 is 192.168.1.95, and the routing information issued by PE1 is requested The routing information and VXLAN tunnel information sent by the PE2 to the VPN server include: {NLRI: 192.168.1.95, VPN ATR: (L_TAG2, R_TAG5), VXLAN ATR: (vni2, uip2, uip5), NHP: 4.4.4.4 }.

If the IP address of the destination CE of the packet is 192.168.1.102, the second PE is determined to be PE1 and the destination CE is CE3, and then the packet is received from the source CE. The PE2 receives the route advertisement information of the PE1 and the VXLAN tunnel information that is determined by the VPN server to determine the route advertisement information and the VXLAN tunnel information corresponding to the CE3. {NLRI: 192.168.1.102, VPN ATR: (L_TAG1, R_TAG4), VXLAN ATR: ( Vni1, uip1, uip4), NHP: 4.4.4.4}.

Next, step 503 is performed, in which the first PE determines, according to the route advertisement information and the VXLAN tunnel encapsulation information corresponding to the destination CE, that the first PE transmits the packet to the second PE. VXLAN tunnel.

In a specific implementation process, the first PE searches for the VRF corresponding to the R-VPN identifier according to the R-VPN identifier in the route advertisement information corresponding to the destination CE, and then encapsulates the information according to the VXLAN tunnel. Determining that the first PE transmits the packet to the second PE And transmitting, by the VXLAN tunnel, the packet received by the first PE to the second PE by using the VXLAN tunnel.

Specifically, the first PE determines the first PE according to the first VPN identifier of the first PE and the second VPN identifier of the second PE in the route advertisement information corresponding to the destination CE. Transmitting the packet to the VPN routing forwarding table of the second PE; the first PE determines the IP address of the first PE and the second PE according to the VXLAN tunnel encapsulation information corresponding to the destination CE The first PE determines that the first PE transmits the packet to the second PE according to the VPN routing forwarding table, the IP address of the first PE, and the IP address of the second PE. VXLAN tunnel.

For example, referring to FIG. 2, PE2 receives the packet of the CE, and the IP address of the destination CE of the packet is 192.168.1.102, and the second PE is determined to be PE1 and the destination CE is CE3, and then the PE2 is obtained. The route advertisement information and the VXLAN tunnel information corresponding to the CE3 determined by the route advertisement information and the VXLAN tunnel information of the PE1 sent by the VPN server are {NLRI: 192.168.1.102, VPN ATR: (L_TAG1, R_TAG4), VXLANATR: (vni1, Uip1, uip4), NHP: 4.4.4.4}, according to R-TAG4, determine the VRF4 corresponding to TAG4 from the VRF in PE2, and according to VRF1 corresponding to TAG1, according to VRF4 and VRF1, the VRF of PE2 to PE1 can be determined. Then, according to the uip4 address and uip1 carried in the VXLAN tunnel information, vxlanif1 and vxlanif4 are found, and the entry vxlanif1 of the packet is directed to the vxlanif4, and then the VXLAN tunnel table of the associated PEI and PE2 is generated, thereby obtaining the VXLAN tunnel. The packet sent by the source CE to the PE2 is transmitted to the PE1 through the VXLAN tunnel.

Next, step 504 is performed, in which the first PE transmits the message to the second PE through the VXLAN tunnel.

In a specific implementation, after the VXLAN tunnel is obtained through the step 503, the first PE transmits the received packet of the source CE to the second PE through the VXLAN tunnel, so that The second PE sends the packet according to the destination IP address in the packet. Transfer to the destination CE.

For example, referring to FIG. 2, the PE2 receives the packet sent by the CE and transmits the packet to the PE1 through the VXLAN tunnel. The PE1 removes the encapsulation information from the VXLAN tunnel and reads the destination IP address in the packet as 192.168.1.102. Then, PE1 finds that the CE corresponding to 192.168.1.102 is CE3 according to the destination IP address, and then the packet is transmitted to CE3.

In the prior art, the MPLS technology is generally used to construct the VPN, which is referred to as MPLS/VPN. However, the existing MPLS/VPN needs to deploy the Label Distribution Protocol (LDP) as a tunnel, and then deploy the BGP multi-protocol. Multiprotocol Extensions for BGP (MP-BGP) propagates VPN routes and performs distributed configuration. Each additional PE/VPN needs to adjust the configuration of other PEs. Because MPLS/VPN passes through different ASs, it needs to be deployed. A variety of inter-domain technologies, and the addition of VPN services in a new area, also requires MPLS to be deployed on the network to ensure MPLS connectivity. As a result, the VPN service performance of the prior art is poor, and technical problems of cross-domain configuration are required.

On the basis of the routing and forwarding of the VPN server, the source PE can obtain the VXLAN tunnel according to the route advertisement information and the VXLAN tunnel information of the VPN server after receiving the route advertisement information and the VXLAN tunnel information of the VPN server. And transmitting the packet to the destination PE through the VXLAN tunnel, so that the cross-domain configuration is not required, and when the VPN service is added in a new area, only the newly added PE and other PEs need to be configured, instead of being deployed in the network. MPLS improves the performance of VPN services and makes VPN services more convenient and maintainable.

Embodiment 3:

Based on the same technical concept as the above method, the third embodiment of the present invention provides a device for issuing routing information. Referring to FIG. 6, the device includes:

The receiving unit 601 is configured to receive the route advertisement information from the first PE, where the route advertisement information includes VPN topology connection information corresponding to the first PE, and the VPN topology connection information includes a VPN identifier of the source end, where The VPN ID of the source is the first PE. The first VPN identifier in the middle;

The selecting unit 602 is configured to select a second PE as a destination end;

The route modification unit 603 is configured to receive the route advertisement information sent by the receiving unit 601 and the second PE sent by the receiving and selecting unit 602, and select, according to the first VPN identifier, the VPN identifier of the second PE. Adding a second VPN identifier that matches the first VPN identifier, and adding the second VPN identifier that is the VPN identifier of the destination end to the VPN topology connection information, and obtaining the modified route advertisement information;

The tunnel selection unit 604 is configured to receive the first VPN identifier and the second VPN identifier sent by the route modification unit 603, and determine, according to the first VPN identifier and the second VPN identifier, that the second PE Transmitting the message to the virtual extended local area network VXLAN tunnel encapsulation information of the first PE;

The sending unit 605 is configured to receive the modified route advertisement information sent by the route modification unit 603 and receive the VXLAN tunnel encapsulation information sent by the tunnel selection unit, and encapsulate the VXLAN tunnel encapsulation information and the modified The route advertisement information is sent to the second PE.

The device for issuing the routing information is connected to multiple PEs, so that a route advertisement of one PE to another PE can be implemented by the device, and a VPN identifier corresponds to one VRF in the source end, and The source end is the first PE, that is, a VPN identifier is associated with one VRF in the first PE.

In a specific implementation process, the first PE may have one or more VRFs, and one VPN identifier corresponds to one VRF, so that the corresponding VRF may be determined by using the VPN identifier, and the VPN topology connection information corresponding to the first PE is configured. The VPN identifier field of the source end and the VPN identifier field of the destination end are included. The VPN information received by the VPN server is the source VPN of the VPN topology connection information corresponding to the first PE. The identifier field is the first VPN identifier, and the VPN identifier field of the destination end is empty, so that the VPN topology connection information corresponding to the first PE includes the first VPN label. Knowledge, but does not contain the VPN ID of the destination.

Specifically, the route advertisement information further includes an IP address of the CE connected to the first PE, the VPN topology connection information and an IP address of the first PE, and the first VPN identifier and the CE correspond.

For example, referring to FIG. 2, the first PE is an example of PE1, and PE1 is directly connected to CE1, CE2, and CE3. Assume that CE3 is a 163 server. In order to enable the user to find 163 servers, CE3 requests PE1 to perform route advertisement. And the VPN server receives the route advertisement information of the PE1, wherein the route advertisement information includes the IP address of the CE3, and the VPN topology connection information corresponding to the PE1 and the IP address of the PE1 are, for example, 159.226.1.1.

Preferably, the route modification unit 603 includes a VPN identity determining unit 606, configured to select, according to the first VPN identity, the second VPN that matches the first VPN identity from the TAG correspondence in the VPN. And the TAG correspondence includes a correspondence between the VPN identifier in the first PE and the VPN identifier in the second PE.

Specifically, the device for issuing the routing information, in the process of configuring the first PE and the other PE, further configuring a correspondence between the VPN identifier of the first PE and the VPN identifier of the other PE, thereby obtaining And storing the TAG correspondence between the first PE and the other PEs, so that the VPN server can select, according to the first VPN identifier, the TAG correspondence relationship in the VPN. Corresponding relationship between the VPN identifier in the first PE and the VPN identifier in the second PE, where the TAG indicates the meaning of the identifier. .

For example, referring to FIG. 3, PE2 has VRF4 and VRF5, the VPN identifier corresponding to VRF4 is TAG4, the VPN identifier corresponding to VRF5 is TAG5, and TAG4 corresponds to TAG1, and VRF of PE2 to PE1 can be determined through VRF4 and VRF1, and TAG5 corresponds to TAG2. The VRF of PE2 to PE1 can also be determined through VRF5 and VRF2. In this way, the VPN server associates PE1 with PE2, TAG5 corresponds to TAG2, and TAG4 corresponds to TAG1, which can be expressed as: vPE1: TAG1, vPE2: TAG4}, {vPE1: TAG2, vPE2: TAG5}.

Specifically, the device that is advertised by the routing information is configured with the tunnel encapsulation information of the first PE and the other PE, so that the tunnel selection unit 604 can be configured according to the first VPN identifier and the second VPN identifier. And determining, by the second PE, the message to be transmitted to the VXLAN tunnel encapsulation information of the first PE.

Preferably, the VXLAN tunnel encapsulation information includes a VXLAN interface IP address set in the first PE and a VXLAN interface IP address set in the second PE.

Preferably, the sending unit 605 sends the VXLAN tunnel encapsulation information and the modified route advertisement information to the second PE, so that the second PE finds the R according to the R-VPN identifier. a VRF corresponding to the VPN identifier, and then generating a packet from the second PE to the VXLAN tunnel of the first PE according to the VXLAN tunnel encapsulation information, and then passing the packet received by the second PE by using the VRFLAN tunnel encapsulation information The VXLAN tunnel is transmitted to the first PE.

In the embodiment of the present application, the route advertisement information of the PE1 is directly transmitted to the VPN server, and the VPN server determines the destination PE as the PE2 according to the route advertisement information of the PE1, adds the TAG of the destination end, and obtains the modified route information of the PE1, and according to the PE1. TAG matches the TAG of the PE2, determines the VXLAN tunnel encapsulation information, and sends the modified PE1 route advertisement information and the VXLAN tunnel encapsulation information to the PE2, thereby completing the route advertisement of the PE1, and the route advertisement in the prior art needs to be one by one. When routing and forwarding are performed, and route forwarding is performed between different ASs, the cross-domain technology is required to implement route forwarding. As a result, the number of routes is forwarded more frequently in the prior art, and in different ASs. When the route is forwarded, the route forwarding is required to be implemented, and the route is advertised for a long time, and the efficiency of the route is also low. However, this application allows the application to complete the route only through the VPN server. Publish, routing is completed only by one route forwarding, and there is no need to implement the road through cross-domain technology. By forwarding, the time of route advertisement can be shortened, and the efficiency of route advertisement is improved.

Embodiment 4:

Based on the same technical concept as the above method, a fourth embodiment of the present invention provides a VPN server. Referring to FIG. 7, the server includes:

The receiver 701 is configured to receive the route advertisement information from the first PE, where the route advertisement information includes VPN topology connection information corresponding to the first PE, and the VPN topology connection information includes a VPN identifier of the source end, where The VPN identifier of the source is the first VPN identifier in the first PE.

The processor 702 is configured to select a second PE that is the destination end, and select, according to the first VPN identifier, a second VPN identifier that matches the first VPN identifier from the VPN identifiers of the second PE, and Adding the second VPN identifier that is the VPN identifier of the destination end to the VPN topology connection information, and obtaining the modified route advertisement information; and determining, according to the first VPN identifier and the second VPN identifier, Transmitting, by the second PE, the packet to the virtual extended local area network VXLAN tunnel encapsulation information of the first PE;

The transmitter 703 is configured to send the VXLAN tunnel encapsulation information and the modified route advertisement information to the second PE.

The receiver 701 is, for example, an electronic device such as a wireless antenna or a wifi module. Further, the processor 702 is, for example, a separate processing chip or an electronic device such as a single chip microcomputer. Further, the transmitter 703 is, for example, an electronic device such as a wireless antenna.

Specifically, the VPN server is connected to multiple PEs, so that a route advertisement from one PE to another PE can be implemented by using the VPN server, and a VPN identifier and a VPN routing forwarding table in the source end (VPN) The routing and forwarding table (VRF) corresponds to the first PE, that is, the VPN identifier is associated with one VRF in the first PE.

Preferably, the first PE may have one or more VRFs, and one VPN identifier corresponds to one VRF, so that the corresponding VRF can be determined by using the VPN identifier, and the VPN topology connection information corresponding to the first PE includes only The VPN identification field of the source end and the VPN identification field of the destination end, because the VPN server receives the route advertisement information of the first PE, The VPN identifier field of the source end in the VPN topology connection information corresponding to the first PE is the first VPN identifier, and the VPN identifier field of the destination end is empty, so that the VPN topology corresponding to the first PE is obtained. The connection information includes the first VPN identifier, and does not include the VPN identifier of the destination end.

Preferably, the route advertisement information further includes an IP address of a CE connected to the first PE, the VPN topology connection information and an IP address of the first PE, and the first VPN identifier and the CE corresponds.

For example, referring to FIG. 2, the first PE is an example of PE1, and PE1 is directly connected to CE1, CE2, and CE3. Assume that CE3 is a 163 server. In order to enable the user to find 163 servers, CE3 requests PE1 to perform route advertisement. And the VPN server receives the route advertisement information of the PE1, wherein the route advertisement information includes the IP address of the CE3, and the VPN topology connection information corresponding to the PE1 and the IP address of the PE1 are, for example, 159.226.1.1.

Preferably, the processor 702 is configured to select, according to the first VPN identifier, the second VPN identifier that matches the first VPN identifier from the TAG correspondence in the VPN, where the TAG corresponds to The relationship includes the correspondence between the VPN identifier in the first PE and the VPN identifier in the second PE.

Specifically, in the process of configuring the first PE and the other PE, the VPN server further configures a correspondence between the VPN identifier of the first PE and the VPN identifier of the other PE, thereby obtaining and saving the Determining the TAG correspondence between the first PE and the other PEs, so that the VPN server can select the first VPN identifier from the TAG correspondence relationship in the VPN according to the first VPN identifier. Matching the second VPN identifier, the TAG correspondence includes a correspondence between the VPN identifier in the first PE and a VPN identifier in the second PE, where the TAG indicates the meaning of the identifier.

For example, referring to FIG. 3, PE2 has VRF4 and VRF5, the VPN identifier corresponding to VRF4 is TAG4, the VPN identifier corresponding to VRF5 is TAG5, and TAG4 corresponds to TAG1, and VRF of PE2 to PE1 can be determined through VRF4 and VRF1, and TAG5 and TAG2 Correspondingly, the VRF of PE2 to PE1 can also be determined by VRF5 and VRF2. As a result, the VPN server associates PE1 with PE2, TAG5 corresponds to TAG2, and TAG4 corresponds to TAG1, which can be expressed as: {vPE1:TAG1 , vPE2: TAG4}, {vPE1: TAG2, vPE2: TAG5}.

Specifically, the device that is advertised by the routing information is configured with tunnel encapsulation information of the first PE and the other PE, so that the processor 702 can be configured according to the first VPN identifier and the second VPN identifier. Determining that the second PE transmits the message to the VXLAN tunnel encapsulation information of the first PE.

Preferably, the VXLAN tunnel encapsulation information includes a VXLAN interface IP address set in the first PE and a VXLAN interface IP address set in the second PE.

Preferably, the transmitter 703 is configured to send the VXLAN tunnel encapsulation information and the modified route advertisement information to the second PE, so that the second PE finds the R-VPN identifier according to the R-VPN identifier. And the VRF corresponding to the R-VPN identifier, according to the VXLAN tunnel encapsulation information, generating a packet from the second PE to the VXLAN tunnel of the first PE, and then receiving the report received by the second PE The text is transmitted to the first PE through the VXLAN tunnel.

In the embodiment of the present application, the route advertisement information of the PE1 is directly transmitted to the VPN server, and the VPN server determines the destination PE as the PE2 according to the route advertisement information of the PE1, adds the TAG of the destination end, and obtains the modified route information of the PE1, and according to the PE1. TAG matches the TAG of the PE2, determines the VXLAN tunnel encapsulation information, and sends the modified PE1 route advertisement information and the VXLAN tunnel encapsulation information to the PE2, thereby completing the route advertisement of the PE1, and the route advertisement in the prior art needs to be one by one. When routing and forwarding are performed, and route forwarding is performed between different ASs, the cross-domain technology is required to implement route forwarding. As a result, the number of routes is forwarded more frequently in the prior art, and in different ASs. When routing and forwarding between the two, the cross-domain technology is required to implement the routing and forwarding, so that the route is advertised for a long period of time, and the efficiency of the route is also low. However, the present application only needs to pass the VPN server. In order to complete the route advertisement, the route advertisement is completed only by one route forwarding, and the route forwarding is not required to be implemented by the cross-domain technology, thereby shortening the route advertisement time and improving the efficiency of route advertisement.

Embodiment 5:

Based on the same technical concept as the above method, the fifth embodiment of the present invention provides an apparatus for transmitting a message. Referring to FIG. 8, the apparatus includes:

The receiving unit 801 is configured to receive a packet sent by the source CE,

The PE determining unit 802 is configured to receive the packet sent by the receiving unit 801, and determine, according to the packet, that the destination PE of the packet transmission is the second PE;

The routing unit 803 is configured to receive the packet sent by the receiving unit 801, and select, according to the IP address of the destination CE in the packet, the corresponding route CE from the received route advertisement information of the second PE. Route publishing information, wherein the route publishing information of the second PE is sent by the VPN server to the routing unit 803;

The tunnel information acquiring unit 804 is configured to receive the second PE sent by the PE determining unit 802, and select VXLAN tunnel encapsulation information corresponding to the destination CE from the received VXLAN tunnel encapsulation information of the second PE, where The VXLAN tunnel encapsulation information of the second PE is sent by the VPN server to the tunnel selection unit 804;

The tunnel determining unit 805 is configured to receive the route advertisement information corresponding to the destination CE and the VXLAN tunnel encapsulation information sent by the receiving tunnel information acquiring unit 804, which is sent by the routing unit 803, and is distributed according to the route corresponding to the destination CE. Determining, by the information, the VXLAN tunnel encapsulation information, that the first PE transmits the packet to the VXLAN tunnel of the second PE;

The message transmission unit 806 is configured to receive the VXLAN tunnel sent by the tunnel determining unit 805, and transmit the packet to the second PE by using the VXLAN tunnel.

Specifically, the device that transmits the packet receives the route advertisement information and the VXLAN tunnel encapsulation information sent by the VPN server, and the receiving unit 801 in the device receives the packet sent by the source CE, because The packet has the IP address of the destination CE, so that the PE is indeed The determining unit 802 may determine, according to the IP address of the destination CE, the second PE directly connected to the destination CE, and the second PE is the destination PE, from the route advertisement information sent by the received VPN server. .

For example, referring to FIG. 2, taking PE2 as the first PE, the PE2 firstly receives the route advertisement information and the tunnel encapsulation information of the PE1 sent by the VPN server, and the route advertisement information and the tunnel encapsulation information of the PE1 may include the CE1. And the route advertisement information corresponding to the CE2 and the CE3 and the corresponding tunnel encapsulation information, and then, when the PE2 receives the packet sent by the source CE, the IP address of the destination CE in the packet is obtained, if the destination is The IP address of the CE is the IP address of the CE3. According to the received route advertisement information of the PE1, the destination PE is determined to be PE1.

Specifically, the second PE is configured to write the IP address of the CE that requests the second PE to perform the route advertisement to the route advertisement information of the second PE, so that the PE determines After determining the second PE, the tunnel information acquiring unit 804 can select the route advertisement information corresponding to the destination CE from the route advertisement information of the second PE, and the tunnel determining unit 805 can The VXLAN tunnel encapsulation information corresponding to the destination CE is selected in the VXLAN tunnel encapsulation information of the second PE.

Preferably, the tunnel determining unit 805 is configured to determine, according to the first VPN identifier of the first PE and the second VPN identifier of the second PE in the route advertisement information corresponding to the destination CE, The first PE transmits the packet to the VPN routing forwarding table of the second PE, and determines the IP address of the first PE and the IP of the second PE according to the VXLAN tunnel encapsulation information corresponding to the destination CE. And determining, according to the VPN routing forwarding table, the IP address of the first PE, and the IP address of the second PE, that the first PE transmits the packet to the VXLAN tunnel of the second PE.

For example, referring to FIG. 2, PE2 receives the packet of the CE, and the IP address of the destination CE of the packet is 192.168.1.102, and the second PE is determined to be PE1 and the destination CE is CE3, and then the PE2 is obtained. Receive route advertisement information and VXLAN tunnel information corresponding to CE3 in the route advertisement information and VXLAN tunnel information of the PE1 sent by the VPN server. For {NLRI: 192.168.1.102, VPN ATR: (L_TAG1, R_TAG4), VXLAN ATR: (vni1, uip1, uip4), NHP: 4.4.4.4}, according to R-TAG4, determine the corresponding to TAG4 from the VRF in PE2 According to VRF1 corresponding to TAG1, according to VRF4 and VRF1, the VRF of PE2 to PE1 can be determined, and according to the uip4 address and uip1 carried in the VXLAN tunnel information, vxlanif1 and vxlanif4 are found, and the entry vxlanif1 of the packet will be The egress of the packet is directed to vxlanif4, and then the VXLAN tunnel table of the associated PEI and PE2 is generated, and the VXLAN tunnel is obtained, so that the packet sent by the source CE is transmitted to the PE1 through the VXLAN tunnel.

Preferably, the message transmission unit 806 transmits the received message of the source CE to the second PE through the VXLAN tunnel, so that the second PE is based on the destination IP in the packet. The address is transmitted to the destination CE.

For example, referring to FIG. 2, the PE2 receives the packet sent by the CE and transmits the packet to the PE1 through the VXLAN tunnel. The PE1 removes the encapsulation information from the VXLAN tunnel and reads the destination IP address in the packet as 192.168.1.102. Then, PE1 finds that the CE corresponding to 192.168.1.102 is CE3 according to the destination IP address, and then the packet is transmitted to CE3.

In the prior art, the MPLS technology is generally used to construct a VPN, which is referred to as MPLS/VPN. However, the existing MPLS/VPN needs to deploy LDP as a tunnel, deploy BGP to propagate VPN routes, and perform distributed configuration. Each additional PE/VPN needs to adjust the configuration of each other PE. Since MPLS/VPN needs to pass different ASs, it also needs to deploy various cross-domain technologies, and if VPN services are added in a new area, it needs to be deployed in the network. MPLS ensures MPLS connectivity, which leads to poor performance of VPN services in the prior art and requires technical problems of cross-domain configuration.

On the basis of the routing and forwarding of the VPN server, the source PE can obtain the VXLAN tunnel according to the route advertisement information and the VXLAN tunnel information of the VPN server after receiving the route advertisement information and the VXLAN tunnel information of the VPN server. And transmitting the packet to the destination PE through the VXLAN tunnel, thereby eliminating the need for cross-domain configuration, and When the VPN service is added to the new area, the newly added PEs and other PEs need to be configured. Instead of deploying MPLS on the network, the VPN service expansion performance is improved, and the VPN service is opened and maintained more conveniently.

Those skilled in the art will appreciate that embodiments of the present invention can be provided as a method, apparatus (device), or computer program product. Accordingly, the present invention may take the form of an entirely hardware embodiment, an entirely software embodiment, or a combination of software and hardware. Moreover, the invention can take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) including computer usable program code.

The present invention has been described with reference to flowchart illustrations and/or block diagrams of methods, apparatus, and computer program products according to embodiments of the invention. It will be understood that each flow and/or block of the flowchart illustrations and/or FIG. These computer program instructions can be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing device to produce a machine for the execution of instructions for execution by a processor of a computer or other programmable data processing device. Means for implementing the functions specified in one or more of the flow or in a block or blocks of the flow chart.

The computer program instructions can also be stored in a computer readable memory that can direct a computer or other programmable data processing device to operate in a particular manner, such that the instructions stored in the computer readable memory produce an article of manufacture comprising the instruction device. The apparatus implements the functions specified in one or more blocks of a flow or a flow and/or block diagram of the flowchart.

These computer program instructions can also be loaded onto a computer or other programmable data processing device such that a series of operational steps are performed on a computer or other programmable device to produce computer-implemented processing for execution on a computer or other programmable device. The instructions provide steps for implementing the functions specified in one or more of the flow or in a block or blocks of a flow diagram.

While the preferred embodiment of the invention has been described, it will be understood that Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and the modifications and

It is apparent that those skilled in the art can make various modifications and variations to the invention without departing from the spirit and scope of the invention. Thus, it is intended that the present invention cover the modifications and modifications of the invention

Claims (15)

1. A method for publishing routing information, characterized in that the method comprises:

   The virtual private network VPN server receives the route advertisement information from the first service provider edge device PE, where the route advertisement information includes VPN topology connection information corresponding to the first PE, and the VPN topology connection information includes the source VPN. The identifier of the VPN at the source end is the first VPN identifier in the first PE;

   The VPN server selects a second PE as a destination end;

   The VPN server selects, according to the first VPN identifier, a second VPN identifier that matches the first VPN identifier from the VPN identifiers of the second PE, and adds the target as the destination end in the VPN topology connection information. The second VPN identifier of the VPN identifier obtains the modified route advertisement information;

   Determining, by the VPN server, the second PE to transmit the packet to the virtual extended local area network VXLAN tunnel encapsulation information of the first PE according to the first VPN identifier and the second VPN identifier;

   The VPN server sends the VXLAN tunnel encapsulation information and the modified route advertisement information to the second PE.
2. The method according to claim 1, wherein the route advertisement information further comprises a protocol IP address interconnected by a network of a user network edge device CE connected to the first PE, the VPN topology connection information and An IP address of the first PE, and the first VPN identifier corresponds to the CE.
3. The method of claim 1 or 2, wherein the VPN server selects a second VPN identifier that matches the first VPN identifier according to the first VPN identifier, and specifically includes:

   The VPN server selects, according to the first VPN identifier, the second VPN identifier that matches the first VPN identifier from the TAG correspondence in the VPN, the TAG The correspondence includes the correspondence between the VPN identifier in the first PE and the VPN identifier in the second PE.
4. The method according to any one of claims 1 to 3, wherein the VXLAN tunnel encapsulation information comprises a VXLAN interface IP address set in the first PE and a VXLAN interface disposed in the second PE. IP address.
5. A method for transmitting a message, the method comprising:

   The first PE receives the packet sent by the source CE, and determines, according to the packet sent by the source CE, that the destination PE of the packet is the second PE;

   The first PE selects, according to the IP address of the destination CE in the packet, the route advertisement information corresponding to the destination CE from the received route advertisement information of the second PE, and the received route information. The VXLAN tunnel encapsulation information corresponding to the destination CE is selected in the VXLAN tunnel encapsulation information of the second PE, where the route advertisement information and the VXLAN tunnel encapsulation information of the second PE are sent by the VPN server to the first PE. of;

   Determining, by the first PE, the packet sent by the first PE to the VXLAN tunnel of the second PE according to the route advertisement information and the VXLAN tunnel encapsulation information corresponding to the destination CE;

   The first PE transmits the packet to the second PE by using the VXLAN tunnel.
6. The method according to claim 5, wherein the first PE determines, according to the route advertisement information and the VXLAN tunnel encapsulation information, that the first PE transmits a message to the VXLAN of the second PE. The tunnel specifically includes:

   Determining, by the first PE, that the first PE transmits the packet according to the first VPN identifier of the first PE and the second VPN identifier of the second PE in the route advertisement information corresponding to the destination CE. a VPN routing forwarding table for the second PE;

   Determining, by the first PE, the IP address of the first PE and the IP address of the second PE according to the VXLAN tunnel encapsulation information corresponding to the destination CE;

   Determining, by the first PE, the first PE to transmit the packet to the second PE according to the VPN routing forwarding table, the IP address of the first PE, and the IP address of the second PE. VXLAN tunnel.
7. An apparatus for issuing routing information, characterized in that the apparatus comprises:

   a receiving unit, configured to receive route advertisement information from the first PE, where the route advertisement information includes VPN topology connection information corresponding to the first PE, and the VPN topology connection information includes a VPN identifier of the source end, the source The VPN identifier of the end is the first VPN identifier in the first PE;

   a selection unit, configured to select a second PE as a destination;

   a route modification unit, configured to receive the route advertisement information sent by the receiving unit, and receive the second PE sent by the selecting unit, according to the first VPN identifier, from a VPN identifier of the second PE And the second VPN identifier that matches the first VPN identifier is selected, and the second VPN identifier that is the VPN identifier of the destination end is added to the VPN topology connection information, and the modified route advertisement information is obtained.

   a tunnel selection unit, configured to receive the first VPN identifier and the second VPN identifier sent by the route modification unit, and determine, according to the first VPN identifier and the second VPN identifier, that the second PE Transmitting the message to the virtual extended local area network VXLAN tunnel encapsulation information of the first PE;

   a sending unit, configured to receive the modified route advertisement information sent by the route modification unit, and receive the VXLAN tunnel encapsulation information sent by the tunnel selection unit, and encapsulate the VXLAN tunnel encapsulation information and the modified The route advertisement information is sent to the second PE.
8. The device according to claim 7, wherein the route advertisement information further comprises a protocol IP address interconnected by a network of a user network edge device CE connected to the first PE, the VPN topology connection information and An IP address of the first PE, and the first VPN identifier corresponds to the CE.
9. The device according to claim 7 or 8, wherein the route modification unit comprises a VPN identity determining unit, configured to select from the TAG correspondence in the VPN according to the first VPN identity The second VPN identifier matched by the first VPN identifier, The TAG correspondence includes a correspondence between a VPN identifier in the first PE and a VPN identifier in the second PE.
10. The apparatus according to any one of claims 7-9, wherein the VXLAN tunnel encapsulation information comprises a VXLAN interface IP address disposed in the first PE and a VXLAN interface disposed in the second PE IP address.
11. A VPN server, characterized in that the server comprises:

    a receiver, configured to receive route advertisement information from the first PE, where the route advertisement information includes VPN topology connection information corresponding to the first PE, and the VPN topology connection information includes a VPN identifier of the source end, the source The VPN identifier of the end is the first VPN identifier in the first PE;

    a processor, configured to select a second PE that is the destination end, and select, according to the first VPN identifier, a second VPN identifier that matches the first VPN identifier from the VPN identifiers of the second PE, and Adding the second VPN identifier that is the VPN identifier of the destination end to the VPN topology connection information, and obtaining the modified route advertisement information; and determining the first according to the first VPN identifier and the second VPN identifier. Transmitting, by the second PE, the packet to the virtual extended local area network VXLAN tunnel encapsulation information of the first PE;

    And a transmitter, configured to send the VXLAN tunnel encapsulation information and the modified route advertisement information to the second PE.
12. The server according to claim 11, wherein the route advertisement information further comprises a protocol IP address interconnected by a network of a user network edge device CE connected to the first PE, the VPN topology connection information and An IP address of the first PE, and the first VPN identifier corresponds to the CE.
13. The server according to claim 11 or 12, wherein the processor is configured to select, according to the first VPN identifier, a match with the first VPN identifier from a TAG correspondence relationship in the VPN. The second VPN identifier, the TAG correspondence includes a correspondence between a VPN identifier in the first PE and a VPN identifier in the second PE.
14. An apparatus for transmitting a message, the apparatus comprising:

    a receiving unit, configured to receive a packet sent by the source CE,

    a PE determining unit, configured to receive a packet sent by the receiving unit, and determine, according to the packet, that the destination PE of the packet is a second PE;

    a routing unit, configured to receive a packet sent by the receiving unit, and select, according to the IP address of the destination CE in the packet, the received routing information corresponding to the destination CE from the received routing information of the second PE. Route publishing information, wherein the route publishing information of the second PE is sent by the VPN server to the routing unit;

    a tunnel information acquiring unit, configured to receive the second PE sent by the PE determining unit, and select VXLAN tunnel encapsulation information corresponding to the destination CE from the received VXLAN tunnel encapsulation information of the second PE, where The VXLAN tunnel encapsulation information of the second PE is sent by the VPN server to the tunnel selection unit;

    a tunnel determining unit, configured to receive route advertisement information corresponding to the destination CE and send the VXLAN tunnel encapsulation information sent by the tunnel information acquisition unit, according to a route corresponding to the destination CE Deriving the information and the VXLAN tunnel encapsulation information, and determining that the first PE transmits the packet to the VXLAN tunnel of the second PE;

    And a message transmission unit, configured to receive the VXLAN tunnel sent by the tunnel determining unit, and transmit the packet to the second PE by using the VXLAN tunnel.
15. The device according to claim 14, wherein the tunnel determining unit is configured to: according to a route advertisement information corresponding to the destination CE, a first VPN identifier of the first PE and the second Determining, by the second VPN identifier of the PE, the first PE to transmit the packet to the VPN routing forwarding table of the second PE, and determining the first PE according to the VXLAN tunnel encapsulation information corresponding to the destination CE Determining, by the first PE, the packet to be transmitted to the IP address and the IP address of the second PE, and according to the VPN routing forwarding table and the IP address of the first PE and the IP address of the second PE The VXLAN tunnel of the second PE.

Images