Abstract: The present application provides a packet processing method, device and system. A controller sends a first flow entry to a network device. The first flow entry comprises first importance information used for indicating importance of a first flow entry, where the first importance information is used by the network device to determine, according to a second importance information of a second flow entry in the flow table and the first importance information of the first flow entry, whether to add the first flow entry into a flow table of the network device when there is no idle flow entry resource in the flow table.

Abstract: This application provides a method and an apparatus for configuring a service, which help to implement automatic configuration of a service and improve efficiency. The method provided in this application includes: obtaining, by an NaaS device, a contract of a service, where the contract includes identifier information and a condition, the identifier information is used to identify a first device group, the first device group includes a device that provides the service, and the condition is a communication requirement corresponding to the service; obtaining, by the NaaS device, information about a network device group according to the identifier information and the condition; obtaining, by the NaaS device, a first forwarding rule according to the condition, where the first forwarding rule corresponds to the network device group; and sending, by the NaaS device, the first forwarding rule and the information about the network device group to a controller.

Abstract: This application discloses a policy conflict resolution method which includes receiving a first control policy and decomposing the first control policy into m first rules, and receiving a second control policy and decomposing the second control policy into n second rules. The method also includes performing negation on each first rule to obtain a first negation rule, performing negation on each second rule to obtain a second negation rule, and generating a corresponding first execution rule by using each first negation rule and each second negation rule according to a rule synthesis principle. Additionally, the method includes deleting an invalid rule, using a remaining one of the first execution rules as a valid first execution rule, performing negation on each valid first execution rule, and converting, according to a protocol supported by a first forwarding device, each valid first execution rule on which negation has been performed into a corresponding forwarding entry of the first forwarding device.

Abstract: A method for forwarding message, comprising: receiving, by a forwarding plane device, a first message, and looking up a first entry matched with the first message in a flow table of the forwarding plane device, wherein the forwarding plane device is a device compliant with a network architecture in which control and forwarding are separated; performing, by the forwarding plane device, a first operation on the first message for limiting its message forwarding rate according to the first entry. Further, a corresponding device is also provided in an embodiment of this disclosure. With the technical solutions provided in embodiments of this disclosure, the forwarding plane device can put limits on its message forwarding rate.

Abstract: Embodiments of the present invention provide a method, an apparatus, and a system for flow measurement, which are used to reduce management bandwidth of a controller over a forwarding device. The method includes: receiving a data flow sent by a forwarding device, and knowing the type of the data flow by parsing the data flow; if the type of the data flow is a preset type in a measurement flow type set, obtaining a feature identifier carried in the data flow and packet header information of the data flow, and obtain operation information corresponding to the data flow, and adding a measurement operation for the feature identifier to the operation information, where the operation information is used to record various operations of the data flow; and sending, to the forwarding device, the packet header information and the operation information added with the measurement operation for the feature identifier.

Abstract: The present application provides a packet processing method, device and system. A controller sends a first flow entry to a network device. The first flow entry comprises first importance information used for indicating importance of a first flow entry, where the first importance information is used by the network device to determine, according to a second importance information of a second flow entry in the flow table and the first importance information of the first flow entry, whether to add the first flow entry into a flow table of the network device when there is no idle flow entry resource in the flow table.

Abstract: The embodiments of the present invention disclose a method for processing a packet and a related device. One implementation consists of a method for processing a packet that comprises receiving, by a first network device, a forwarded packet, performing a flow table matching for the forwarded packet, and if unmatched, encapsulating the forwarded packet with an inner encapsulation and an outer encapsulation, and transmitting the forwarded packet to a second network device. The method further comprises receiving a flow table packet returned by the second network device, wherein the flow table packet carries flow table information of the forwarded packet and is encapsulated with a special layer 2 frame header, and processing the flow table packet according to an operation indicated by an Ethernet type value in the special layer 2 frame header.

Abstract: The present application provides a packet processing method, device and system. With the present application, timely processing can be performed on a received packet according to an added first flow table entry, so that the timely processing can be implemented for a flow whose importance is high, and the problem in the prior art that a forwarding device cannot add a new flow table entry to a flow table because all flow table entry resources are in use can be relieved, thereby improving the reliability of packet processing.

Abstract: The application discloses an Internet access method. The method includes receiving a first Internet access packet reported by a first BNG, the first Internet access packet carrying user information and information of the first BNG, and receiving the user's second Internet access packet reported by a second BNG, wherein the second Internet access packet carries user information and information of the second BNG. The method also includes recording, according to the user information, information of the first BNG and information of the second BNG in a BNG list to which the user belongs, and selecting, according to a preset policy, the first BNG from the BNG list. The method also includes delivering the user's forwarding information to the first BNG; and sending a response packet to the user, where the response packet is used to instruct the user to access the Internet by using the first BNG.

Abstract: The application provide a packet sending method, a router, and a service switching entity. According to the application, a router determines a flow group identifier of a service packet and information about a next-hop service switching entity according to a user identifier and IP 5-tuple information; and forwards the packet to the next-hop service switching entity according to the information about the next-hop service switching entity, so that the next-hop service switching entity determines a corresponding destination service instance according to the user identifier, the flow group identifier, a router identifier, and a processing result, and forwards the packet to the destination service instance, to perform corresponding service processing, thereby implementing service packet forwarding among service instances. The router in the method provided in the embodiments has a flow steering function, and steers a flow to a specified path to perform node-by-node processing.

Abstract: Embodiments disclose a packet forwarding method and device. The method includes: obtaining, by a packet forwarding device, a feature character included in a packet to be forwarded. The feature character is obtained by parsing, according to a preset packet content parsing policy, other content included in the packet to be forwarded except a 5-tuple.

Abstract: An entry adding method includes: a switch receives a first group entry sent by a controller, where the first group entry includes importance indication information of the first group entry, and a first action bucket; the switch determines that the first group entry cannot be added to a group table, and that a second group entry exits in the group table, the switch deletes the second group entry and adds the first group entry to the group table. Where importance of the second group entry is lower than importance of the first group entry; the second group entry includes a second action bucket; a quantity of first action buckets is not greater than the sum of a first value and a quantity of second action buckets; and the first value is a quantity of available action buckets in the group table.

Abstract: A multi-level flow table search method includes extracting matching information of a data packet when the data packet is received and selecting a keyword from the matching information of the data packet according to flow-table match-field configuration information. The method also includes searching for a match field of each-level flow table in a multi-level flow table starting from a first-level flow table in the multi-level flow table by using the keyword as a search keyword, and matching the search keyword with the match field. If matching of a match field of a current-level flow table is completed, the method includes executing a corresponding instruction, and if the current-level flow table is not a last-level flow table or there is an instruction for executing an action, executing a corresponding action.

Abstract: The present application discloses a flow forwarding method, device, and system. The method includes: receiving, by an edge node, an intelligent routing service request packet, and the packet includes a constraint condition required for establishing the intelligent routing service; if the edge node does not find, in a flow table, a corresponding matching flow table entry of characteristic information, sending, by the edge node, a first message to a controller, where the first message includes identification information of the edge node and the characteristic information and the edge node is an ingress edge-node or an egress edge-node that receives the packet; receiving, a first flow table entry sent by the controller, where the first flow table entry is generated according to the first message and meets the constraint condition; and processing, according to the first flow table entry, a packet sent by the user side device.

Abstract: Embodiments of the present invention provide a packet processing method, a forwarding plane device and a network device, the method includes: receiving, by a forwarding plane device, a first packet transmitted by a user, where an identity of the user is comprised in the first packet, and a forwarding table is comprised in the forwarding plane device; determining, by the forwarding plane device, an identity of a service according to a corresponding relationship between the identity of the user and the identity of the service as well as the identity of the user in the first packet; generating, by the forwarding plane device, a second packet by encapsulating the first packet with the identity of the service; and transmitting the second packet to a network device, to enable the network device to manage the service according to the identity of the service in the second packet.

Abstract: The embodiments of the present invention disclose a method for processing a packet and a related device. One implementation consists of a method for processing a packet that comprises receiving, by a first network device, a forwarded packet, performing a flow table matching for the forwarded packet, and if unmatched, encapsulating the forwarded packet with an inner encapsulation and an outer encapsulation, and transmitting the forwarded packet to a second network device. The method further comprises receiving a flow table packet returned by the second network device, wherein the flow table packet carries flow table information of the forwarded packet and is encapsulated with a special layer 2 frame header, and processing the flow table packet according to an operation indicated by an Ethernet type value in the special layer 2 frame header.

Abstract: A method for forwarding message, comprising: receiving, by a forwarding plane device, a first message, and looking up a first entry matched with the first message in a flow table of the forwarding plane device, wherein the forwarding plane device is a device compliant with a network architecture in which control and forwarding are separated; performing, by the forwarding plane device, a first operation on the first message for limiting its message forwarding rate according to the first entry. Further, a corresponding device is also provided in an embodiment of this disclosure. With the technical solutions provided in embodiments of this disclosure, the forwarding plane device can put limits on its message forwarding rate.

Abstract: Embodiments of the present invention provide a method, an apparatus, and a system for flow measurement, which are used to reduce management bandwidth of a controller over a forwarding device. The method includes: receiving a data flow sent by a forwarding device, and knowing the type of the data flow by parsing the data flow; if the type of the data flow is a preset type in a measurement flow type set, obtaining a feature identifier carried in the data flow and packet header information of the data flow, and obtain operation information corresponding to the data flow, and adding a measurement operation for the feature identifier to the operation information, where the operation information is used to record various operations of the data flow; and sending, to the forwarding device, the packet header information and the operation information added with the measurement operation for the feature identifier.