Packet diversion method and deep packet inspection device

• US 8,594,086 B2
• Filed: 12/05/2012
• Issued: 11/26/2013
• Est. Priority Date: 11/04/2010
• Status: Active Grant

• Current Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Original Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Inventors: Ning, Zhiming, Chen, Hao, Chen, Liang
• Primary Examiner(s): Pezzlo, John
• Application Number:
  US13/706,063
• Publication Number:
  US 20130094511A1
• Time in Patent Office: 356 Days
• Field of Search: 370/282, 370/389, 370/471
• US Class Current: 370/389
• CPC Class Codes: H04L 12/4645 Details on frame tagging routing of packets H04L45/00; support for virtual LAN H04L49/354
• CPC Class Codes: H04L 45/74 Address processing for routing
• CPC Class Codes: H04L 47/2441 relying on flow classification, e.g. using integrated services [IntServ]

Abstract

A packet diversion method and a DPI device are disclosed in the present invention. The method includes: receiving a packet, where the packet contains a user identifier; according to the user identifier and preset first correspondence between the user identifier and a service type, searching for the service type corresponding to the user identifier in the packet; adding an inner virtual local area network Vlan header to the packet according to the service type, preset second correspondence between a service type and a slave device identifier, and preset third correspondence between a slave device identifier and each bit in a diversion identifier field; and diverting the packet to a corresponding slave device according to the diversion identifier in the diversion identifier field. The inner Vlan header carrying the diversion identifier field is added to the packet, to indicate diversion of the packet in a same cluster.

Claims

1. A packet diversion method, comprising:

receiving a packet, wherein the packet contains a user identifier;

according to the user identifier and preset first correspondence between the user identifier and a service type, searching for the service type corresponding to the user identifier in the packet;

adding an inner virtual local area network (Vlan) header to the packet according to the service type, preset second correspondence between a service type and a slave device identifier, and preset third correspondence between a slave device identifier and each bit in a diversion identifier field, wherein the inner Vlan header comprises a diversion identifier field, and the diversion identifier field contains a diversion identifier; and

diverting the packet to a corresponding slave device according to the diversion identifier in the diversion identifier field, wherein the packet carries the inner Vlan header, and at least one such slave device is comprised, the diversion refers to a process that one network device gives a packet to another network device for processing, and the other network device returns the packet after the processing is completed.

2. The method according to claim 1, further comprising:

determining whether diversion of the packet is completed; and

after the diversion of the packet is completed, removing the inner Vlan header in the packet, and continuing to transmit the packet through a communication link for receiving the packet.

3. The method according to claim 2, wherein the inner Vlan header further comprises a link number field, and the link number field contains a link identifier of the communication link for receiving the packet;

and

the continuing to transmit the packet through the communication link for receiving the packet comprises;

continuing to transmit the packet through a communication link corresponding to the link identifier in the link number field of the inner Vlan header.

4. The method according to claim 3, further comprising:

adding an outer Vlan header to the packet according to preset fourth correspondence between a slave device identifier and a switch port number, wherein a value of the outer Vlan header is a switch port number corresponding to a slave device to which the packet is to be diverted, wherein

the diverting the packet to the corresponding slave device according to the diversion identifier in the diversion identifier field, wherein the packet carries the inner Vlan header, comprises;

diverting the packet to the corresponding slave device through a switch port corresponding to the value of the outer Vlan header, wherein the packet carries the inner Vlan header and outer Vlan header; and

after the diversion of the packet is completed, the removing the inner Vlan header in the packet, and continuing to transmit the packet through the communication link for receiving the packet comprises;

after the diversion of the packet is completed, removing the inner Vlan header and outer Vlan header in the packet, and continuing to transmit the packet through the communication link for receiving the packet.

5. The method according to claim 2, wherein the determining whether the diversion of the packet is completed comprises:

if a diversion operation process of the packet is recorded independently, when a record of the packet diversion process indicates that the diversion of the packet is completed, confirming that the diversion of the packet is completed;

or

if a diversion operation process is recorded in the diversion identifier field and diverted together with the packet, when the diversion identifier field of the packet diverted back comprises no diversion identifier, confirming that the diversion of the packet is completed.

6. The method according to claim 2, further comprising:

adding an outer Vlan header to the packet according to preset fourth correspondence between a slave device identifier and a switch port number, wherein a value of the outer Vlan header is a switch port number corresponding to a slave device to which the packet is to be diverted, wherein

the diverting the packet to the corresponding slave device according to the diversion identifier in the diversion identifier field, wherein the packet carries the inner Vlan header, comprises;

diverting the packet to the corresponding slave device through a switch port corresponding to the value of the outer Vlan header, wherein the packet carries the inner Vlan header and outer Vlan header; and

after the diversion of the packet is completed, the removing the inner Vlan header in the packet, and continuing to transmit the packet through the communication link for receiving the packet comprises;

after the diversion of the packet is completed, removing the inner Vlan header and outer Vlan header in the packet, and continuing to transmit the packet through the communication link for receiving the packet.

7. A deep packet inspection device comprising:

a receiving unit, configured to receive a packet, wherein the packet contains a user identifier;

a searching unit, configured to search, according to the user identifier and preset first correspondence between the user identifier and a service type, for the service type corresponding to the user identifier in the packet;

a processing unit, configured to add an inner virtual local area network (Vlan) header to the packet according to the service type, preset second correspondence between a service type and a slave device identifier, and preset third correspondence between a slave device identifier and each bit in a diversion identifier field, wherein the inner Vlan header comprises a diversion identifier field, and the diversion identifier field contains a diversion identifier; and

a diverting unit, configured to divert the packet to a corresponding slave device according to the diversion identifier in the diversion identifier field, wherein the packet carries the inner Vlan header, and at least one such slave device is comprised, the diversion refers to a process that one network device gives a packet to another network device for processing, and the other network device returns the packet after the processing is completed.

8. The deep packet inspection device according to claim 7, further comprising:

a determining unit, configured to determine whether diversion of the packet is completed; and

a sending unit, configured to;

after the diversion of the packet is completed, remove the inner Vlan header in the packet, and continue to transmit the packet through a communication link for receiving the packet.

9. The deep packet inspection device according to claim 8, wherein:

the inner Vlan header further comprises a link number field, and the link number field contains a link identifier of the communication link for receiving the packet;

and the sending unit is configured to

continue to transmit the packet through a communication link corresponding to the link identifier in the link number field of the inner Vlan header.

10. The deep packet inspection device according to claim 8, wherein:

the processing unit is further configured to add an outer Vlan header to the packet according to preset fourth correspondence between a slave device identifier and a switch port number, wherein a value of the outer Vlan header is a switch port number corresponding to a slave device to which the packet is to be diverted

the diverting unit is configured to divert the packet to the corresponding slave device through a switch port corresponding to the value of the outer Vlan header, wherein the packet carries the inner Vlan header and outer Vlan header;

the sending unit is configured to;

after the diversion of the packet is completed, remove the inner Vlan header and outer Vlan header in the packet, and continue to transmit the packet through the communication link for receiving the packet.