Abstract: The application provide a packet sending method, a router, and a service switching entity. According to the application, a router determines a flow group identifier of a service packet and information about a next-hop service switching entity according to a user identifier and IP 5-tuple information; and forwards the packet to the next-hop service switching entity according to the information about the next-hop service switching entity, so that the next-hop service switching entity determines a corresponding destination service instance according to the user identifier, the flow group identifier, a router identifier, and a processing result, and forwards the packet to the destination service instance, to perform corresponding service processing, thereby implementing service packet forwarding among service instances. The router in the method provided in the embodiments has a flow steering function, and steers a flow to a specified path to perform node-by-node processing.

Abstract: Embodiments disclose a packet forwarding method and device. The method includes: obtaining, by a packet forwarding device, a feature character included in a packet to be forwarded. The feature character is obtained by parsing, according to a preset packet content parsing policy, other content included in the packet to be forwarded except a 5-tuple.

Abstract: The present application discloses a flow forwarding method, device, and system. The method includes: receiving, by an edge node, an intelligent routing service request packet, and the packet includes a constraint condition required for establishing the intelligent routing service; if the edge node does not find, in a flow table, a corresponding matching flow table entry of characteristic information, sending, by the edge node, a first message to a controller, where the first message includes identification information of the edge node and the characteristic information and the edge node is an ingress edge-node or an egress edge-node that receives the packet; receiving, a first flow table entry sent by the controller, where the first flow table entry is generated according to the first message and meets the constraint condition; and processing, according to the first flow table entry, a packet sent by the user side device.

Abstract: The embodiments of the present invention relate to the field of computer networks, and disclose a method and an apparatus for processing a multicast packet. The method includes receiving a multicast packet, acquiring a local router interface corresponding to the multicast packet according to a multicast routing entry carried in the multicast packet, and forwarding the multicast packet through the acquired local router interface to a clustered routing system interface for further transfer. The embodiments of the present invention can cluster several routing devices into a virtual routing system which externally acts as a single routing node for supporting a multicast service, so as to implement the efficient and reliable forwarding of the multicast packet in a clustered routing system with virtual aggregation, and enable the clustered routing system to support the multicast service with high efficiency and quality.

Abstract: The embodiments of the present invention relate to the field of computer networks, and disclose a method and an apparatus for processing a multicast packet. The method includes receiving a multicast packet, acquiring a local router interface corresponding to the multicast packet according to a multicast routing entry carried in the multicast packet, and forwarding the multicast packet through the acquired local router interface to a clustered routing system interface for further transfer. The embodiments of the present invention can cluster several routing devices into a virtual routing system which externally acts as a single routing node for supporting a multicast service, so as to implement the efficient and reliable forwarding of the multicast packet in a clustered routing system with virtual aggregation, and enable the clustered routing system to support the multicast service with high efficiency and quality.

Abstract: Embodiments of the present invention provide a packet processing method, a forwarding plane device and a network device, the method includes: receiving, by a forwarding plane device, a first packet transmitted by a user, where an identity of the user is comprised in the first packet, and a forwarding table is comprised in the forwarding plane device; determining, by the forwarding plane device, an identity of a service according to a corresponding relationship between the identity of the user and the identity of the service as well as the identity of the user in the first packet; generating, by the forwarding plane device, a second packet by encapsulating the first packet with the identity of the service; and transmitting the second packet to a network device, to enable the network device to manage the service according to the identity of the service in the second packet.

Abstract: A method for forwarding message, comprising: receiving, by a forwarding plane device, a first message, and looking up a first entry matched with the first message in a flow table of the forwarding plane device, wherein the forwarding plane device is a device compliant with a network architecture in which control and forwarding are separated; performing, by the forwarding plane device, a first operation on the first message for limiting its message forwarding rate according to the first entry. Further, a corresponding device is also provided in an embodiment of this disclosure. With the technical solutions provided in embodiments of this disclosure, the forwarding plane device can put limits on its message forwarding rate.

Abstract: A cluster router includes at least one control apparatus and at least two forwarding apparatuses. The control apparatus is connected to the forwarding apparatuses, and the forwarding apparatuses are connected with each other. The control apparatus is configured to generate a routing table of each forwarding apparatus and a packet processing information conversion table of each forwarding apparatus. The forwarding apparatus is configured to receive the routing table of the forwarding apparatus and the packet processing information conversion table of the forwarding apparatus, and execute data exchange between the forwarding apparatuses according to the routing table and the packet processing information conversion table.

Abstract: The embodiments of the present invention relate to the field of computer networks, and disclose a method and an apparatus for processing a multicast packet. The method includes receiving a multicast packet, acquiring a local router interface corresponding to the multicast packet according to a multicast routing entry carried in the multicast packet, and forwarding the multicast packet through the acquired local router interface to a clustered routing system interface for further transfer. The embodiments of the present invention can cluster several routing devices into a virtual routing system which externally acts as a single routing node for supporting a multicast service, so as to implement the efficient and reliable forwarding of the multicast packet in a clustered routing system with virtual aggregation, and enable the clustered routing system to support the multicast service with high efficiency and quality.

Abstract: A method for making statistics of media flow information may include: sending a request for making statistics of media flow information to a BGF; and receiving statistic information of the media flow from the BGF, wherein the statistic information of the media flow is metered by the BGF after receiving the request for making statistics of media flow information A system and a BGF are also disclosed in embodiments of the present invention. In the present invention, the accurate metering ability of the BGF is employed to acquire accurate statistic information of the media flow, thereby accurate service charging may be implemented and service charging based on used network resources amount and QoS may be supported. Furthermore, the statistic information of the media flow, such as start time, end time, flow count information and statistic information of actual QoS, may help operation and maintenance of the network.

Abstract: A cluster router includes at least one control apparatus and at least two forwarding apparatuses. The control apparatus is connected to the forwarding apparatuses, and the forwarding apparatuses are connected with each other. The control apparatus is configured to generate a routing table of each forwarding apparatus and a packet processing information conversion table of each forwarding apparatus. The forwarding apparatus is configured to receive the routing table of the forwarding apparatus and the packet processing information conversion table of the forwarding apparatus, and execute data exchange between the forwarding apparatuses according to the routing table and the packet processing information conversion table.

Abstract: A Resource and Admission Control Subsystem (RACS) in an NGN includes: a Resource Control Function in access network (A-RCF), an Access Admission Control Function (A-ACF), a Resource Control Function in core network (C-RCF), an Interconnection Admission Control Function (I-ACF), and corresponding interfaces. As a logically independent subsystem, RACS can support transport QoS requirements of multiple service subsystems (including IP multimedia service subsystem and PSTN/ISDN service emulation subsystem) simultaneously, implement QoS control for interconnecting links between different administrative domains, balance network load, prevent congestion (especially at bottle necks of network resources), support necessary measurement and protection mechanisms on the transport layer, and solve the problem of competition for transport resources among NGN traffics in the network administrative domains.

Abstract: The invention provides a firewall control system based on a Next Generation Network (NGN) service and a method thereof. The method includes: resolving an application layer signaling, performing a security inspection of a signaling flow and determining requirements of a service media flow on security level; determining controlment of the service media flow on security level according to a stored policy and the requirements of the service media flow on security level; performing a security inspection of the service media flow passing by, according to the controlling information of the service media flow on security level. In embodiments of the invention, a Packet-filter-based Firewall is enabled to perform a fine granularity security hierarchy processing of each subscriber and each session in the NGN, and dynamically select working mode of firewall packet filtering of different security levels according to a subscriber requirement and a session type to prevent network attacks.

Abstract: The present invention discloses a method for providing QoS guarantee by an edge router, the edge router transporting user traffic between the access network and core network, the method comprising: creating a service traffic flow classification table; establishing a plurality of label switching paths; configuring the attributes of the label switching paths; classifying and conditioning the service traffic flows entering into the core network at a downlink interface of an edge router according to the service traffic flow classification table; forwarding the processed traffic by an uplink interface of the edge router according to the attributes of the label switching paths. The present invention also discloses an apparatus for providing QoS guarantee by an edge router. Using the present invention, an edge router can provide exact QoS guarantee and QoS routing control for the application flows.

Abstract: A method, system, and apparatus for sending mapping information are disclosed. The method includes the following steps: An endpoint searches a mapping server to obtain Egress Tunnel Router (ETR) information used for forwarding a data packet sent by the endpoint in a transit network; and the endpoint adds the ETR information to the data packet and sends the data packet to an Ingress Tunnel Router (ITR). With the present invention, the ITR does not need to search for Routing Locator (RLOC) information or Autonomous System Number (AS No.) information, the pressure of searching for mapping information on the ITR is relieved, the problems such as forwarding performance deterioration and packet loss caused by ITR overload are avoided, and the risks of Distributed Denial of Service (DDOS) attacks are reduced.

Abstract: The present invention discloses a system and a method of dynamic QoS negotiation in NGN. The Resource and Admission Control Subsystem (RACS) provides intercommunication interfaces with Transport functional (TF) entity, Service Control Functional (SCF) entities, and Network Attachment Subsystem (NASS), and thereby, when a user terminal in NGN is to develop a service with QoS requirement, the RACS can obtain the QoS requirement parameters of a service, determine the admission control decision parameters in accordance with the QoS requirement parameters, and the RACS send the determined admission control decision parameters to the TF entity for execution, such that the QoS assurance for the service is realized. The present invention allows an end-to-end QoS negotiation in NGN in accordance with the availability of current transport network resources, and thereby can effectively improve the transport resource utilities. Therefore, the present invention can effectively ensure QoS of service transported in NGN.

Abstract: A method for implementing information flow transmission in an NGN, includes: setting in the NGN a signaling channel for transmitting a signaling flow of an NGN service, and reserving resources for the signaling channel; transmitting, by a sending terminal and with a highest priority, the signaling flow of the NGN service contained in a customer traffic over the signaling channel to a receiving terminal. Straightway and reliable transmission of signaling flow is guaranteed by setting the signaling channel for the signaling flow and reserving resources for the signaling channel, and the service reachability is guaranteed in the signaling flow transmission aspect. Embodiments of the present invention further provide a method for transmitting a media flow of the NGN service, a method for controlling performing resource and admission for the media flow of the NGN service and a method for guaranteeing the reliable transmission of an emergent call service in the NGN.

Abstract: A method for implementing resources reservation in an access configuration mode in an NGN, including: when a subscriber accesses a network, an NAAF sending a resources request message to a resources mediation PDF; after receiving the resources request message, the resources mediation PDF making an admission decision according to network operator policy rules and availability of resources, send an admission installation command to a BGF, setting and keeping the corresponding admission decision parameters information in the BGF. Thus, the BGF performs packet forwarding operations as classifying, marking, shaping, and discarding on the user traffic entering the network according to the admission decision information so as to ensure the QoS class required by the user. Therefore, an applicable solution for implementing resources reservation in the access configuration mode in the NGN is provided.