CN102006218B - Tunnel protection method and device - Google Patents

Abstract

The invention discloses a tunnel protection method and device. The method includes: for each node on the ring network, respectively detecting the link failure between the adjacent node and the failure of the peer node of the node; Faulty path information notification message, and send the faulty path information notification message to the faulty upstream node; the faulty upstream node notifies the faulty path information of the egress label of the faulty upstream node and the ingress label of the faulty downstream node of the same service forwarding path in the message Perform binding to form a relationship binding table; the faulty upstream node sends the service message to the faulty downstream node according to the relationship binding table. Through the present invention, the tunnel protection is relatively simple, and the effect of recovering and protecting services under the condition of nodes or multiple failures at the same time can be realized.

Description

Tunnel protection method and device

technical field

The present invention relates to the communication field, in particular to a tunnel protection method and device.

Background technique

With the continuous increase of IP-based telecommunication services and data services, the traditional Synchronous Digital Hierarchy (referred to as SDH) SDH circuit switching equipment is not only in terms of the utilization of channel resources, but also the flexibility of services provided, There is a big problem in dealing with the suddenness of business, and it is necessary to transform from SDH circuit switching technology to IP/Multi-Protocol Label Switching (Multi-Protocol Label Switching, referred to as MPLS) and other packet transport networks. However, due to the use of packet switching technology, the existing IP/MPLS data network has made great progress in the suddenness and flexibility of business processing. and Maintenance (OAM for short) and survivability, etc., so functions such as fault detection mechanism and service protection are introduced into IP/MPLS to realize the bearer and transmission of telecommunication services.

Fig. 1 is a schematic diagram of a bypass tunnel protection method in the FRR mode according to the related art.

In the existing MPLS ring network, there are many protection schemes adopted, such as: bypass protection method of FRR, Detour protection method of FRR and G.8132 protection method. Compared with the latter two protection methods, the former is relatively simple to implement. However, it can only protect and restore a single link failure, and cannot protect and restore node failures and multiple link failures at the same time. The specific process of its implementation is shown in Figure 1. When a fault occurs between the faults, all affected services will be forwarded to the other end node adjacent to the fault through the protection tunnel in the opposite direction; after the other end node receives the message sent from the protection tunnel, it will After the outer tunnel label is removed, it will be forwarded according to the original label again, so as to protect the normal forwarding destination of the service. However, when the node at the other end of the fault fails or two or more faults occur on the ring at the same time, this protection method cannot solve the problem. Therefore, a new tunnel protection method is proposed to solve the problem of nodes appearing on the MPLS ring network. Failure or multiple failures occur at the same time to ensure the normal transmission of services.

Aiming at the problem that the related technologies cannot protect and recover node failures and multiple link failures at the same time, no effective solution has been proposed yet.

Contents of the invention

The present invention is proposed in view of the problem in the related art that it is impossible to protect and restore node failures and multiple link failures at the same time. Therefore, the main purpose of the present invention is to provide a tunnel protection method and device to solve the above problems .

In order to achieve the above object, according to one aspect of the present invention, a tunnel protection method is provided.

The tunnel protection method according to the present invention includes: for each node on the ring network, respectively detecting a link failure with an adjacent node and a failure of a peer node of the node; the node that detects the failure generates a failure path information notification message, And send the faulty path information notification message to the faulty upstream node; the faulty upstream node binds the egress label of the faulty upstream node of the same service forwarding path in the faulty path information notification message with the ingress label of the faulty downstream node to form a relationship Binding table; the faulty upstream node sends the service message to the faulty downstream node according to the relationship binding table.

Preferably, before the adjacent node detects the link failure between the adjacent nodes and the peer failure of the adjacent node, the method further includes: on the ring network, selecting the master node and the standby node, and establishing the master node and the standby node Bidirectional protection tunnels with other nodes on the ring network.

Preferably, generating a faulty path information notification message in an adjacent node, and sending the faulty path information notification message to a faulty upstream node includes: generating a faulty path information notification message in an adjacent node, and sending the faulty path information notification message Send to the master node and the standby node; the master node or the standby node forwards the failure path information notification message to the failure upstream node.

Preferably, after the failure path information notification message is sent to the master node and the standby node, the method further includes: the master node binds the first protection tunnel and the second protection tunnel, and the first protection tunnel is the failure upstream protection node and the protection channel between the main node and the second protection tunnel is the protection channel between the faulty downstream protection node and the main node.

Preferably, after the faulty upstream node receives the faulty path information notification message, binding the egress label of the upstream node of the same service forwarding path with the ingress label of the downstream node includes: after the faulty upstream node receives the faulty path information notification message , binding the egress label of the upstream node and the ingress label of the downstream node of the same service forwarding path according to the forwarding path sequence number information carried in the failure path information notification message.

Preferably, the faulty upstream node sending the service message to the faulty downstream node according to the relationship binding table includes: the faulty upstream node sends the service message to the master node according to the relational binding table; the master node forwards the service message to the faulty downstream node .

Preferably, before the master node forwards the service message to the faulty downstream node, the method further includes: the master node converts the service message into a protection tunnel.

Preferably, when a failure is detected, the adjacent node generates a failure path information notification message including: the nodes at both ends of the failure judge whether there is an upstream service passing through the node that is affected by the failure; And the entry label information in the node is encapsulated into a type length value form.

Preferably, after the nodes at both ends of the fault judge whether there is an upstream service passing through the node that is affected by the fault, the method further includes: if there is no impact, the nodes at both ends of the fault generate an empty type length value message; the nodes at both ends of the fault Send an empty type length value message to the master node.

Preferably, after the nodes at both ends of the fault judge whether there is an upstream service passing through the node that is affected by the fault, the method further includes: if there is an impact, the fault upstream node binds the packets of the service forwarding path existing in the relationship binding table After the egress label is replaced with the ingress label of the faulty downstream node, the service packet is sent to the faulty downstream node through the protection tunnel.

Preferably, the above method further includes: when the master node fails, the standby node replaces the master node to forward services.

Preferably, the failure path information notification message includes a type length value and a length type value offset, wherein, when the length type value offset is zero, there is no length type value message, and when the length type value offset is When it is not zero, there is a length type value message.

In order to achieve the above purpose, according to another aspect of the present invention, a tunnel protection device is provided.

The device includes: a detection module, which is used to detect link failures between adjacent nodes and peer-to-end failures of adjacent nodes; a generation module, which is used to generate a failure path information notification message when a failure is detected; a processing module, which uses Bind the egress label of the upstream node and the ingress label of the downstream node of the same service forwarding path to form a relationship binding table; the sending module is used to send the service message to the faulty downstream node through the protection tunnel.

Preferably, the above device further includes: a judging module, configured to judge whether any upstream service passing through the node is affected by the fault.

Through the present invention, each node on the ring network is used to respectively detect the link failure with the adjacent node and the failure of the opposite node of the node; the node that detects the failure generates a failure path information notification message, and sends the failure path The information notification message is sent to the faulty upstream node; the faulty upstream node binds the egress label of the faulty upstream node of the same service forwarding path in the faulty path information notification message with the ingress label of the faulty downstream node to form a relationship binding table; The method that the faulty upstream node sends the service message to the faulty downstream node according to the relationship binding table solves the problem of not being able to protect and restore node faults and multiple link faults at the same time, and thus realizes protection is relatively simple, And it can realize the recovery and protection effect of the node or the business under the condition of multiple failures at the same time.

Description of drawings

The accompanying drawings described here are used to provide a further understanding of the present invention and constitute a part of the application. The schematic embodiments of the present invention and their descriptions are used to explain the present invention and do not constitute improper limitations to the present invention. In the attached picture:

FIG. 1 is a schematic diagram of a bypass tunnel protection method in the FRR mode according to the related art;

2 is a schematic structural diagram of a failure path information notification message according to an embodiment of the present invention;

Fig. 3 is a schematic diagram of the LSP TLV structure according to an embodiment of the present invention;

FIG. 4 is a schematic table of label binding relationships according to an embodiment of the present invention;

FIG. 5 is a flowchart of a tunnel protection method according to an embodiment of the present invention;

6 is a schematic diagram of a tunnel protection method for detecting multiple faults based on local link faults according to an embodiment of the present invention;

FIG. 7 is a flow chart of a preferred tunnel protection method according to an embodiment of the present invention;

8 is a schematic diagram of a tunnel protection device according to an embodiment of the present invention;

Fig. 9 is a schematic diagram of a preferred tunnel protection device according to an embodiment of the present invention.

Detailed ways

Functional Overview

Considering the problem in the related art that node failures and multiple link failures occur at the same time cannot be protected and restored, the embodiments of the present invention provide a tunnel protection method and device. The method includes: for each node on the ring network, respectively detects a link failure with an adjacent node and a failure of a peer node of the node; the node that detects the failure generates a failure path information notification message, and transmits the failure path information The notification message is sent to the faulty upstream node; the faulty upstream node binds the egress label of the faulty upstream node of the same service forwarding path in the faulty path information notification message with the ingress label of the faulty downstream node to form a relationship binding table; The upstream node sends the service message to the faulty downstream node according to the relationship binding table.

It should be noted that, in the case of no conflict, the embodiments in the present application and the features in the embodiments can be combined with each other. The present invention will be described in detail below with reference to the accompanying drawings and examples.

method embodiment

According to an embodiment of the present invention, a tunnel protection method is provided.

Fig. 5 is a flowchart of a tunnel protection method according to an embodiment of the present invention.

As shown in Figure 5, the method includes the following steps S502 to S508:

Step S502, for each node on the ring network, respectively detect the failure of the link with the adjacent node and the failure of the peer node of the node;

Step S504, the node that detects the fault generates a fault path information notification message, and sends the fault path information notification message to the fault upstream node;

Step S506, the faulty upstream node binds the egress label of the faulty upstream node of the same service forwarding path in the faulty path information notification message with the ingress label of the faulty downstream node to form a relationship binding table;

Step S508, the faulty upstream node sends the service message to the faulty downstream node according to the relationship binding table.

The implementation process of the embodiment of the present invention will be described in detail below with reference to examples.

Fig. 6 is a schematic diagram of a tunnel protection method for detecting multiple faults based on local link faults according to an embodiment of the present invention; Fig. 7 is a flowchart of a preferred tunnel protection method according to an embodiment of the present invention.

As shown in Figures 6 and 7, a preferred tunnel protection method according to an embodiment of the present invention may include the following steps:

Step S701, on the data ring network, select a master node and a backup node, and establish a bidirectional protection tunnel between the master node and the backup node and other nodes on the ring. In this embodiment, first in the data ring network structure, Select a master node 101 and a backup node 108 from the 8 nodes on the ring network, and set up two-way protection tunnels with the master node 101 and the backup node 108 respectively with other nodes on the ring network;

In step S702, adjacent nodes on the data ring network detect link failures between adjacent nodes and peer failures of adjacent nodes through a local fault detection mechanism;

Step S703, when a link failure is detected, the nodes at both ends of the failure generate failure path information notification messages, and send them to the active (standby) node through their respective protection tunnels; or when there is a failure in the adjacent node, another An end node sends a failure path information notification message to the active (standby) node. In this embodiment, a link failure or a node failure is detected between every two adjacent nodes on the ring through a local failure detection mechanism; when a failure is detected , then the nodes at both ends of the failure, such as: node 103, node 104, and node 105, all generate their own failure LSP information notification messages, and send them to the master node 101 (standby node 108) through their respective protection tunnels. When the protection tunnel between node 104 and master node 101 is faulty, only node 103 and node 105 can feed back the failure path information to master node 101;

Fig. 2 is a schematic structural diagram of a failure path information notification message according to an embodiment of the present invention.

As shown in FIG. 2 , the failure path information notification message includes information length, information type, reserved fields, type length value offset, and the like.

FIG. 3 is a schematic diagram of the structure of an LSP TLV according to an embodiment of the present invention.

As shown in FIG. 3, the LSP TLV structure according to the embodiment of the present invention may include type, length, LSP sequence number and entry label.

Step S704, for the nodes 103 and 105 at both ends of the failure, when generating the failure path information notification message, first judge that those upstream service LSPs are affected by the failure (that is, the business that needs to be transmitted to the node through the failure link);

Step S705, and encapsulate the LSP ID of these services and the entry label (Entry Label) information at this node into an LSP TLV message;

Step S706, send on the master node 101 by the failure LSP information notification message; If there is no upstream service LSP affected, then send the information notification message of an empty TLV to the master node 101; the master (standby) node from the protection tunnel After receiving the faulty path information notification message, it binds the protection tunnels fed back from the two faulty nodes, and forwards the faulty path information notification message sent by the faulty downstream node to the faulty upstream node. In the embodiment, after the master node 101 receives the failure LSP information notification message sent by the nodes 103 and 105 through the protection tunnel with the nodes 103 and 105, it first binds the two protection tunnels, and The failure LSP information notification message sent by node 103 is exchanged between the protection tunnels, and then sent to node 105 through the protection tunnel between nodes 101 and 105; similarly, the failure LSP information notification message sent by node 105 After the protection tunnel exchange is performed on the master node 101, the text is sent to the node 103 through the protection tunnel between the nodes 101 and 103;

Fig. 4 is a schematic table of tag binding relationships according to an embodiment of the present invention.

Step S707, the nodes 103 and 105 at both ends of the failure, after receiving the failure LSP information notification message sent by the other party, analyze and process the LSP TLV message inside; and establish the same service LSP according to the LSP ID index The binding relationship between the egress label of the upstream node and the entry label of the downstream node, or bind the egress label of the same service forwarding path (LSP) on the node with the entry label (EntryLabel) of the faulty downstream node to form a label binding Determine the relationship table;

Step S708, the upstream node 103 or 105 of the service judges whether the service can find the corresponding binding table;

Step S709, if the corresponding binding table can be found, in the fault state, the upstream node 103 or 105 of the service, according to the label binding table, replaces the original egress label on the service message affected by the fault with the downstream node's Entry Label;

Step S710, and then send the service message to the master node 101 through the protection tunnel;

Step S711, when the master node 101 receives the service sent from the service upstream node, it directly converts the service to the protection tunnel between the master node 101 and the service downstream node 103 (105) according to the binding relationship of the protection tunnel, and sends it to The service downstream node 105 (103); after receiving the service message sent from the protection tunnel, the service downstream node 103 (105) re-switches to the original working path for forwarding and switching until reaching the destination node.

In addition, when the local node detects that the fault disappears, it will re-forward through the original working path. 103 and 105, through their respective protection tunnels, send fault disappearance information notification messages to the master node 101, and after receiving the messages, the master node deletes the original protection tunnel binding relationship; the business proceeds according to the original working path again Forward.

Preferably, when the master node 101 fails, the standby node 108 replaces the master node 101 to protect and restore services.

Compared with the prior art, adopting the method and device of the present invention, on the one hand, the protection is relatively simple to implement without complicated control protocols; on the other hand, it can realize the recovery and protection of services in the case of nodes or multiple failures at the same time.

Device embodiment

According to an embodiment of the present invention, a tunnel protection device is provided.

Fig. 8 is a schematic diagram of a tunnel protection device according to an embodiment of the present invention.

The tunnel protection device according to the embodiment of the present invention can realize the above tunnel protection method.

As shown in FIG. 8 , the device includes: a detection module 801 , a generation module 803 , a processing module 805 , and a sending module 807 . Preferably, a judging module 809 is also included.

Specifically, the detection module 801 is used to detect a link failure between adjacent nodes and the peer failure of the adjacent node; the generation module 803 is used to generate a failure path information notification message when a failure is detected; processing Module 805, used to bind the egress label of the upstream node and the ingress label of the downstream node of the same service forwarding path to form a relationship binding table; sending module 807, used to send the service message to the downstream of the fault through the protection tunnel node. A judging module 809, configured to judge whether there is an upstream service passing through the node that is affected by the fault.

Fig. 9 is a schematic diagram of a preferred tunnel protection device according to an embodiment of the present invention.

As shown in FIG. 9 , the device includes: a fault path information notification message generating module, a fault path information notification message receiving and processing module, and a fault path information notification message sending module.

Faulty path information notification message generation module: when a node on the ring detects that there is a fault in the link or the adjacent node at the opposite end through the local fault detection mechanism, it will encapsulate the affected upstream service forwarding path (LSP) information in the form of TLV to the failure path information notification message;

Failure path information notification message receiving and processing module: this module mainly refers to that after the faulty upstream node receives the faulty path information notification message sent by the downstream node, it analyzes the forwarding path (LSP) TLV message encapsulated in it, so that Form a relationship binding table between the egress label and the ingress label of the affected service on the upstream node;

Faulty path information notification message sending module: After the faulty downstream node detects a fault, this module forms a faulty path information notification message through its generation module, and sends it to the master node through its protection tunnel three times in succession, and then The master node switches the protection tunnel until it reaches the faulty upstream node; if it has not received the service message sent from the protection tunnel of the master node within a certain period of time, it will resend the failure path information notification message to the master node .

The above descriptions are only preferred embodiments of the present invention, and are not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and changes. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principles of the present invention shall be included within the protection scope of the present invention.

Claims (14)

1. A tunnel protection method, characterized in that, comprising: For each node on the ring network, respectively detect the failure of the link with the adjacent node and the failure of the peer node of the node; The node that detects the fault generates a fault path information notification message, and sends the fault path information notification message to the fault upstream node; The faulty upstream node binds the egress label of the faulty upstream node of the same service forwarding path in the faulty path information notification message with the ingress label of the faulty downstream node to form a relationship binding table; The faulty upstream node sends the service message to the faulty downstream node according to the relationship binding table. 2. The method according to claim 1, wherein, before the adjacent node detects the link failure between the adjacent nodes and the peer failure of the adjacent node, the method further comprises: On the ring network, select a master node and a backup node, and establish bidirectional protection tunnels between the master node and the backup node and other nodes on the ring network. 3. The method according to claim 2, wherein generating a fault path information notification message in the adjacent node, and sending the fault path information notification message to the fault upstream node comprises: generating a failure path information notification message in the adjacent node, and sending the failure path information notification message to the master node and the backup node; The master node or the standby node forwards the failure path information notification message to the failure upstream node. 4. The method according to claim 3, wherein, after sending the failure path information notification message to the master node and the standby node, the method further comprises: The master node binds the first protection tunnel and the second protection tunnel, the first protection tunnel is the protection channel between the faulty upstream protection node and the master node, and the second protection tunnel is the A protection channel between the faulty downstream protection node and the master node. 5. The method according to claim 1, wherein after the faulty upstream node receives the faulty path information notification message, it compares the egress label of the upstream node and the ingress label of the downstream node of the same service forwarding path Bindings include: After the faulty upstream node receives the faulty path information notification message, according to the forwarding path sequence number information carried in the faulty path information notification message, the egress label of the upstream node and the ingress label of the downstream node of the same service forwarding path to bind. 6. The method according to claim 1, wherein the faulty upstream node sending the service message to the faulty downstream node according to the relationship binding table comprises: The faulty upstream node sends the service message to the master node according to the relationship binding table; The master node forwards the service packet to the faulty downstream node. 7. The method according to claim 6, wherein, before the master node forwards the service message to the faulty downstream node, the method further comprises: The master node converts the service message into a protection tunnel. 8. The method according to claim 1, wherein when a fault is detected, the adjacent node generates a fault path information notification message comprising: The nodes at both ends of the fault judge whether there is an upstream business passing through the node that is affected by the fault; If there is an impact, the forwarding path identifier of the service and the ingress label information at the node are encapsulated into a type-length value form. 9. The method according to claim 8, characterized in that, after the nodes at both ends of the fault judge whether there is an upstream service passing through the node that is affected by the fault, the method further comprises: If there is no impact, the nodes at both ends of the fault generate an empty type length value message; The nodes at both ends of the failure send the empty type length value message to the master node. 10. The method according to claim 8, characterized in that, after the nodes at both ends of the fault judge whether there is an upstream service passing through the node that is affected by the fault, the method further comprises: If there is an impact, the faulty upstream node will replace the egress label on the message of the service forwarding path existing in the relationship binding table with the ingress label of the faulty downstream node, and then send the service message to the faulty node through the protection tunnel. downstream node. 11. The method according to any one of claims 1 to 10, further comprising: When the master node fails, the backup node replaces the master node to forward services. 12. The method according to any one of claims 1 to 10, wherein the failure path information notification message includes a type length value and a length type value offset, wherein, when the length type value When the offset is zero, there is no length type value message, and when the length type value offset is not zero, there is a length type value message. 13. A tunnel protection device, characterized in that it comprises: A detection module, configured to detect a link failure between each node on the ring network and an adjacent node and a failure of a peer node of the node; A generating module, configured to generate a faulty path information notification message when a fault is detected, and send the faulty path information notification message to the faulty upstream node; A processing module, configured to bind the egress label of the faulty upstream node and the ingress label of the faulty downstream node of the same service forwarding path in the faulty path information notification message to form a relationship binding table; A sending module, configured to send the service message to the faulty downstream node according to the relationship binding table. 14. The device according to claim 13, further comprising: A judging module, configured to judge whether there is an upstream service passing through the node that is affected by the fault.