Data forwarding unit based on handle identifier

Abstract

The present invention discloses a data forwarding unit based on a Handle identifier, comprising a dynamic configuration module, a Handle identifier data identification module and a matching-forwarding module. The system of the present invention is applied to network devices such as switches and routers, and supports dynamic configuration of data packet analysis, matching and forwarding rules through data interaction with network systems such as SDN managers, so that the network devices can identify data packets based on the Handle identifier and perform the specified operation on the designated data packets with the Handle identifier according to the rules of dynamic configuration.

Claims

1. A data forwarding unit, comprising: a dynamic configuration module configured for dynamically configuring a Handle identification module and a matching-forwarding module; the Handle identification module configured for identifying Handle identifiers in data packets, and delivering data packet packets based on the identification of a Handle identifier, wherein; the matching-forwarding module configured for matching the Handle identifiers of data packets with stored Handle identifiers, identifying forwarding rules corresponding to matched Handle identifiers, and forwarding data according to the identified forwarding rules, wherein the Handle identification module comprises: a layer 2 data identification submodule configured to intercept layer 2 data packets received at a receiving port of a network device, identify Handle identifiers in the layer 2 data packets based on a first set of Handle identifier attributes, and delivering to the matching-forwarding module those data packets that are determined to have Handle identifiers conforming to the first set of Handle identifier attributes, and a layer 3 data identification submodule configured to intercept layer 3 data packets that have been processed in the network device, identify Handle identifiers in the layer 3 data packets based on a second set of Handle identifier attributes, and delivering to the matching-forwarding module those data packets that are determined to have Handle identifiers conforming to the second set of Handle identifier attributes.

2. The data forwarding unit according to claim 1, wherein the dynamic configuration module is configured for dynamically configuring the Handle identification module and the matching-forwarding module with configurable information that comprises: data packet features for data packets having a Handle identifier, Handle identifier attributes, matching rules, and forwarding rules.

3. The data forwarding unit according to claim 1, wherein the Handle identification module is configured such that data packets that are determined to not conform with Handle identifier attributes are delivered to the network device for processing.

4. The data forwarding unit according to claim 1, wherein the Handle identification module is configured to identify a data packet as having a Handle identifier based on data packet features that comprise at least one of: an Ethernet frame type field; an Ethernet address; a virtual local area network identification (VLAN ID); a type of service (TOS) field; an IP data packet protocol type field; and an IP address.

5. The data forwarding unit according to claim 1, wherein the layer 2 identification submodule is configured to determine if layer 2 data packets have a Handle identifier by comparing data packet features of the layer 2 data packets with stored data packet features comprising at least one of: an Ethernet frame format field; an Ethernet address; and a virtual local area network identification (VLAN ID).

6. The data forwarding unit according to claim 1, wherein the layer 3 identification submodule is configured to determine if layer 3 data packets have a Handle identifier by comparing data packet features of the layer 3 data packets with stored data packet features comprising at least one of: a type of service (TOS) field; an IP data packet protocol type field; and an IP address.

7. The data forwarding unit according to claim 1, wherein the matching-forwarding module comprises: a Handle extraction submodule configured to extract Handle identifiers in data packets; a Handle matching submodule configured to compare Handle identifier attributes in data packets with stored Handle identifier attributes, and to identify forwarding rules corresponding with matched Handle identifier attributes; a Handle forwarding submodule configured to forward data from data packets according to identified forwarding rules; and a Handle matching-forwarding table storing Handle identifier attributes and corresponding forwarding rules.

8. The data forwarding unit according to claim 1, wherein the Handle identification module is configured to determine if Handle identifiers of data packets correspond with stored Handle identifiers by comparing at least one of the following Handle identifier attributes: Handle value, Handle length, and Handle truncated value.

9. The data forwarding unit according to claim 1, wherein the matching-forwarding module is configured to forward data in accord with the following forwarding rules: forwarding data for sending through a designated port; forwarding data for sending through a designated output queue; forwarding data to a matching module for further matching; and discarding data.

10. A method of forwarding data, utilizing the data forwarding unit according to claim 1, comprising: employing the Handle identification module to identify and deliver data packets having Handle identifiers to the matching-forwarding module; employing the matching-forwarding module to match Handle identifiers in data packets to stored Handle identifiers, identify forwarding rules corresponding to matched Handle identifiers, and forward data based on identified forwarding rules.

Description

DESCRIPTION OF DRAWINGS

(1) FIG. 1 is a structural schematic diagram of one embodiment of a data forwarding unit based on a Handle identifier of the present invention;

(2) FIG. 2 is a work flow of a Handle identifier data identification module of the present invention;

(3) FIG. 3a shows Ethernet frame format fields identified by the present invention; and

(4) FIG. 3b shows IP data format fields identified by the present invention.

DETAILED DESCRIPTION

(5) The technical solution in the embodiments of the present invention will be clearly and fully described below in combination with the drawings in the embodiments of the present invention. Apparently, the described embodiments are merely part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments in the present invention, all other embodiments obtained by those ordinary skilled in the art without contributing creative labor will belong to the protection scope of the present invention.

(6) A dynamic configuration module is used for information interaction between a network management system and a forwarding unit to complete the parameter configuration and information acquisition of a Handle identifier data identification module and a matching-forwarding module of the forwarding unit.

(7) A Handle identification module identifies a data packet with a Handle identifier and delivers the data packet to the matching-forwarding module.

(8) A matching-forwarding module matches the Handle identifier with the existing matching information and forwards the Handle identifier according to forwarding rules corresponding to a matching result.

(9) Through the dynamic configuration module, configurable information comprises: data packet features with the Handle identifier, specific Handle identifier attributes and matching-forwarding rules.

(10) The data packet features with the Handle identifier comprise:

(11) Ethernet frame type field: a data packet is identified as a data packet with a Handle identifier through a designated Ethernet frame format field value;

(12) Ethernet address: the data packet is identified as a data packet with a Handle identifier through a designated Ethernet source address or destination address value;

(13) VLAN: the data packet is identified as a data packet with a Handle identifier through a designated VLAN ID;

(14) service type: the data packet is identified as a data packet with a Handle identifier through a designated TOS field value of service type;

(15) IP data packet protocol type field: the data packet is identified as a data packet with a Handle identifier through a designated IP data packet protocol type field value;

(16) IP address: the data packet is identified as a data packet with a Handle identifier through a designated IP source address or destination address value.

(17) Handle identifier attributes related to forwarding comprise:

(18) Handle value: character string or binary array with object description function;

(19) Handle length: length of Handle field;

(20) Handle truncated value: a certain byte, a certain segment of bytes or several bytes in the Handle value;

(21) The matching-forwarding rules exist in pairs, and each matching-forwarding rule comprises a matching rule and a forwarding rule.

(22) The matching rule comprises:

(23) Handle value matching: Handle value is the same as a designated value;

(24) Handle length matching: Handle length is the same as a designated value;

(25) Handle truncated value matching: a certain byte or a certain segment of bytes in the Handle value is the same as a designated value.

(26) The forwarding rule comprises:

(27) forwarding to a port: sending data through a designated port;

(28) forwarding to a data queue: sending the data through a designated output queue;

(29) forwarding to a matching module: delivering to the matching module for further matching;

(30) discarding: discarding data packets.

(31) The Handle identification module comprises:

(32) a layer 2 data identification submodule intercepts layer 2 data packets in the network device, compares the layer 2 data packets with the data packet features with the Handle identifier, delivers the data packets conforming to the Handle features to the matching-forwarding module, and delivers the data packets not conforming to the Handle features to the network device for conventional processing;

(33) a layer 3 data identification submodule intercepts layer 3 data packets in the network device, compares the layer 3 data packets with the data packet features with the Handle identifier, delivers the data packets conforming to the Handle features to the matching-forwarding module, and delivers the data packets not conforming to the Handle features to the network device for conventional processing.

(34) The layer 2 data identification submodule identifies the data packet with the Handle identifier through the following features:

(35) Ethernet frame type field: a data packet is identified as a data packet with a Handle identifier through a designated Ethernet frame format field value;

(36) Ethernet address: the data packet is identified as a data packet with a Handle identifier through a designated Ethernet source address or destination address value;

(37) VLAN: the data packet is identified as a data packet with a Handle identifier through a designated VLAN ID.

(38) The layer 3 data identification submodule identifies the data packet with the Handle identifier through the following features:

(39) service type: the data packet is identified as a data packet with a Handle identifier through a designated TOS field value of service type;

(40) IP data packet protocol type field: the data packet is identified as a data packet with a Handle identifier through a designated IP data packet protocol type field value;

(41) IP address: the data packet is identified as a data packet with a Handle identifier through a designated IP source address or destination address value.

(42) The matching-forwarding module comprises:

(43) a Handle extraction submodule which extracts the Handle identifier in the data packets;

(44) a Handle matching submodule which compares the Handle identifier in the data packets with the information in a matching-forwarding table, finds table items matched with the information, and delivers the Handle identifier that cannot be matched to an exception processing submodule;

(45) a Handle forwarding submodule which forwards data according to forwarding rules of the matched table items in the matching-forwarding table;

(46) a Handle matching-forwarding table which is a list for recording relations of the matching rules and the forwarding rules;

(47) the exception processing submodule which feeds back exception information in the Handle matching-forwarding table and the Handle matching submodule to the network management system through the dynamic configuration module.

(48) The Handle matching submodule can match the following Handle identifiers:

(49) Handle value matching: Handle value is the same as a designated value;

(50) Handle length matching: Handle length is the same as a designated value;

(51) Handle truncated value matching: a certain byte or a certain segment of bytes in the Handle value is the same as a designated value.

(52) The Handle forwarding submodule can perform the following operations on the data:

(53) forwarding to a port: sending data through a designated port;

(54) forwarding to a data queue: sending the data through a designated output queue;

(55) forwarding to a matching module: delivering to the matching module for further matching;

(56) discarding: discarding data packets.

(57) The Handle matching-forwarding table records the Handle matching rules and the forwarding rules in pairs according to the configuration of the dynamic configuration module.

(58) An exception notification module can feed back the unmatched Handle identifiers to the network management system through the dynamic configuration module.

(59) FIG. 1 shows a structural schematic diagram of one embodiment of a data forwarding unit based on a Handle identifier of the present invention. The system comprises: a dynamic configuration module 110, a Handle identification module 120 and a matching-forwarding module 130, is characterized by comprising:

(60) the dynamic configuration module 110 is used for information interaction between a network management system and a forwarding unit to complete the parameter configuration and information acquisition of a Handle identifier data identification module and matching-forwarding module of the forwarding unit;

(61) the Handle identification module 120 identifies a data packet with a Handle identifier and delivers the data packet to the matching-forwarding module;

(62) the matching-forwarding module 130 matches the Handle identifier with the existing matching information and forwards the Handle identifier according to forwarding rules corresponding to a matching result.

(63) Through the dynamic configuration module, configurable information comprises: data packet features with the Handle identifier, specific Handle identifier attributes and matching-forwarding rules. The data packet features with the Handle identifier are used for configuration of the Handle identification module. Specific Handle identifier features and the matching-forwarding rules are the configuration of the matching-forwarding module.

(64) FIG. 2 shows the functions of the Handle identification module of the present invention, comprising a layer 2 data identification submodule 210 and a layer 3 data identification submodule 220.

(65) 1) The layer 2 data identification submodule 210 intercepts received layer 2 data packets in the network device, compares the layer 2 data packets with the data packet features with the Handle identifier, delivers the data packets conforming to the Handle features to the matching-forwarding module, and delivers the data packets not conforming to the Handle features to the network device for conventional processing;

(66) 2) The layer 3 data identification submodule 220 intercepts processed IP data packets in the network device, compares the data packets with the data packet features with the Handle identifier, delivers the data packets conforming to the Handle features to the matching-forwarding module, and delivers the data packets not conforming to the Handle features to the network device for conventional processing.

(67) As shown in FIG. 3a, the layer 2 data identification submodule identifies the data packet with the Handle identifier through the following features:

(68) 1) Ethernet frame type field: the data packet is identified as a data packet with a Handle identifier through a designated Ethernet frame format field value;

(69) 2) Ethernet address: the data packet is identified as a data packet with a Handle identifier through a designated Ethernet source address or destination address value;

(70) 3) VLAN: the data packet is identified as a data packet with a Handle identifier through a designated VLAN ID.

(71) As shown in FIG. 3b, the layer 2 data identification submodule identifies the data packet with the Handle identifier through the following features:

(72) 1) service type: the data packet is identified as a data packet with a Handle identifier through a designated TOS field value of service type;

(73) 2) IP data packet protocol type field: the data packet is identified as a data packet with a Handle identifier through a designated IF data packet protocol type field value;

(74) 3) IP address: the data packet is identified as a data packet with a Handle identifier through a designated IP source address or destination address value.

(75) As shown in FIG. 1, the matching-forwarding module comprises:

(76) 1) a Handle extraction submodule 131 which extracts the Handle identifier in the data packets;

(77) 2) a Handle matching submodule 132 which compares the Handle identifier in the data packets with the information in a matching-forwarding table, finds table items matched with the information, and delivers the Handle identifier that cannot be matched to an exception processing submodule;

(78) 4) a Handle forwarding submodule 133 which forwards data according to forwarding rules of the matched table items in the matching-forwarding table;

(79) 5) a Handle matching-forwarding table 134 which is a list for recording relations of the matching rules and the forwarding rules;

(80) 6) the exception processing submodule 135 which feeds back exception information in the Handle matching-forwarding table and the Handle matching submodule to the network management system through the dynamic configuration module.

(81) The Handle matching submodule in the matching-forwarding module can match the following Handle identifier attributes:

(82) 1) Handle value matching: Handle value is the same as a designated value;

(83) 2) Handle length matching: Handle length is the same as a designated value;

(84) 3) Handle truncated value matching: a certain byte or a certain segment of bytes in the Handle value is the same as a designated value.

(85) The Handle forwarding submodule in the matching-forwarding module can perform the following operations on the data:

(86) 1) forwarding to a port: sending data through a designated port;

(87) 2) forwarding to a data queue: sending the data through a designated output queue;

(88) 3) forwarding to a matching module: delivering to the matching module for further matching;

(89) 4) discarding: discarding data packets.

(90) The matching-forwarding table in the matching-forwarding module records the Handle matching rules and the forwarding rules in pairs according to the configuration of the dynamic configuration module.

(91) An exception notification module in the matching-forwarding module can feed back the unmatched Handle identifiers to the network management system through the dynamic configuration module.