Abstract: A route processing method includes obtaining, by a first network device, a flow effective time parameter and a route related to the flow effective time parameter, processing, by the first network device in the specified time interval, service traffic corresponding to the route related to the flow effective time parameter, generating a route control message, where the route control message carries the flow effective time parameter and the route, and sending, by the first network device, the route control message to a second network device.

Abstract: The present disclosure discloses a flow specification (FlowSpec) message processing method. In the method, a controller forwards device interface information reported by the forwarding device; selects at least one forwarding device interface to which a FlowSpec rule needs to be applied from the received forwarding device interface information; generates an application interface rule based on the at least one forwarding device interface to which the FlowSpec rule needs to be applied; and sends a FlowSpec message to the forwarding device.

Abstract: A route processing method includes obtaining, by a first network device, a flow effective time parameter and a route related to the flow effective time parameter, processing, by the first network device in the specified time interval, service traffic corresponding to the route related to the flow effective time parameter, generating a route control message, where the route control message carries the flow effective time parameter and the route, and sending, by the first network device, the route control message to a second network device.

Abstract: The present disclosure discloses a flow specification (FlowSpec) message processing method. In the method, a controller forwards device interface information reported by the forwarding device; selects at least one forwarding device interface to which a FlowSpec rule needs to be applied from the received forwarding device interface information; generates an application interface rule based on the at least one forwarding device interface to which the FlowSpec rule needs to be applied; and sends a FlowSpec message to the forwarding device.

Abstract: A route processing method includes obtaining, by a first network device, a flow effective time parameter and a route related to the flow effective time parameter, processing, by the first network device in the specified time interval, service traffic corresponding to the route related to the flow effective time parameter, generating a route control message, where the route control message carries the flow effective time parameter and the route, and sending, by the first network device, the route control message to a second network device.

Abstract: The present invention discloses a service processing method and apparatus, and relates to the communications field. The method includes: receiving trigger information sent by an intermediary device; and assisting, based on the trigger information, the intermediary device in negotiating with UE and a network server, to enable the intermediary device to obtain a first key, where the first key is used by the intermediary device to decrypt ciphertexts sent by the UE and the network server, the ciphertext is obtained after the UE or the network server encrypts service information by using a second key, and the first key is corresponding to the second key. The present invention resolves a problem that an intermediary device cannot provide service optimization for user equipment and a network server because the intermediary device cannot decrypt ciphertext, and achieves an effect of expanding a usage scope of service optimization.

Abstract: The present disclosure discloses a flow specification (FlowSpec) message processing method. In the method, a controller forwards device interface information reported by the forwarding device; selects at least one forwarding device interface to which a FlowSpec rule needs to be applied from the received forwarding device interface information; generates an application interface rule based on the at least one forwarding device interface to which the FlowSpec rule needs to be applied; and sends a FlowSpec message to the forwarding device.

Abstract: The present disclosure discloses a flow specification (FlowSpec) message processing method. In the method, a controller forwards device interface information reported by the forwarding device; selects at least one forwarding device interface to which a FlowSpec rule needs to be applied from the received forwarding device interface information; generates an application interface rule based on the at least one forwarding device interface to which the FlowSpec rule needs to be applied; and sends a FlowSpec message to the forwarding device.

Abstract: A route processing method includes obtaining, by a first network device, a flow effective time parameter and a route related to the flow effective time parameter, processing, by the first network device in the specified time interval, service traffic corresponding to the route related to the flow effective time parameter, generating a route control message, where the route control message carries the flow effective time parameter and the route, and sending, by the first network device, the route control message to a second network device.

Abstract: A packet processing method and an apparatus are provided. A first SFC proxy of a first SF entity splits a first packet to obtain a first original packet and a first SFC header, and the first SFC proxy sends the first SFC header to a second SFF. The first SF entity processes the first original packet to obtain a second original packet, and sends the second original packet to a service classifier. The service classifier sends, to the second SFF, a second packet that is obtained after the service classifier adds a second SFC header to the second original packet. The second SFF changes the second SFC header in the second packet into the first SFC header. In this way, a first packet carrying a first SFC header can be transmitted in a network architecture in which a legacy SF exists, so that the legacy SF becomes compatible.

Abstract: A route processing method, a device, and a system, where the method includes obtaining, by a first network device, a flow effective time parameter and a route related to the flow effective time parameter, processing, by the first network device in the specified time interval, service traffic corresponding to the route related to the flow effective time parameter, generating a route control message, where the route control message carries the flow effective time parameter and the route, and sending, by the first network device, the route control message to a second network device. Therefore, limited-time effective information is automatically disseminated, a limited-time effective requirement for a traffic control policy is met, configuration workload is reduced, and maintenance difficulty is lowered.

Abstract: A packet transmission method, apparatus, and system are provided. The method is applied to a server of a content provider, and the method includes: receiving an application request sent by a user side; obtaining encrypted data of original data requested by the application request; generating a first packet that includes the encrypted data; adding index information to the first packet, to obtain a second packet; sending the second packet to a gateway in an operator network; and determining, by the gateway, a transmission parameter corresponding to the index information, and sending the encrypted data to the user side based on the transmission parameter. Therefore, when data is generally encrypted, a content-aware service of the network operator can be normally used without changing an existing encryption manner and an existing service procedure, and without compromising security and privacy of the service.

Abstract: The present disclosure discloses a flow specification (FlowSpec) message processing method. In the method, a controller forwards device interface information reported by the forwarding device; selects at least one forwarding device interface to which a FlowSpec rule needs to be applied from the received forwarding device interface information; generates an application interface rule based on the at least one forwarding device interface to which the FlowSpec rule needs to be applied; and sends a FlowSpec message to the forwarding device.

Abstract: A method for detecting encrypted content and a device, where the method includes receiving, by a middlebox network device using a first secure channel, key information of a Transport Layer Security (TLS) secure channel from a key manager, obtaining, by the middlebox network device based on 5-tuple information of the TLS secure channel, encrypted application data transmitted over the TLS secure channel, decrypting, by the middlebox network device, the encrypted application data using a session key, and detecting decrypted content. Hence, the middlebox network device decrypts the encrypted application data, and detects decrypted application data. In this way, detection of encrypted content does not rely on a TLS proxy server, and detection complexity and detection costs can be reduced.

Abstract: The present invention discloses a service processing method and apparatus, and relates to the communications field. The method includes: receiving trigger information sent by an intermediary device; and assisting, based on the trigger information, the intermediary device in negotiating with UE and a network server, to enable the intermediary device to obtain a first key, where the first key is used by the intermediary device to decrypt ciphertexts sent by the UE and the network server, the ciphertext is obtained after the UE or the network server encrypts service information by using a second key, and the first key is corresponding to the second key. The present invention resolves a problem that an intermediary device cannot provide service optimization for user equipment and a network server because the intermediary device cannot decrypt ciphertext, and achieves an effect of expanding a usage scope of service optimization.

Abstract: A method and device for informing user address are disclosed. The method comprises: a defined network allocating, according to a user address prefix provided by a mobile network, a user address to a mobile network user accessing the mobile network from the defined network; and the defined network informing the mobile network of the allocated user address. The disclosure address the problems of complex flow for allocating user address and low allocation efficiency, and how to inform a mobile network of an allocated user address existing in the related art, thus achieving the allocation of an user address and improving informing efficiency.

Abstract: A method and system for sending a flow table in a Software Defined Network (SDN) are described in the present disclosure, an OpenFlow (OF) controller, and an OF switch. The method includes that an OF switch receives a flow table entry modification message sent from an OF controller, wherein the message includes a table number, a flow table entry, and a cache label; and the OF switch stores, in a control module of the OF switch, the table number and the flow table entry in the flow table entry modification message according to an indication of the cache label.

Abstract: A route processing method, a device, and a system, where the method includes obtaining, by a first network device, a flow effective time parameter and a route related to the flow effective time parameter, processing, by the first network device in the specified time interval, service traffic corresponding to the route related to the flow effective time parameter, generating a route control message, where the route control message carries the flow effective time parameter and the route, and sending, by the first network device, the route control message to a second network device. Therefore, limited-time effective information is automatically disseminated, a limited-time effective requirement for a traffic control policy is met, configuration workload is reduced, and maintenance difficulty is lowered.

Abstract: A method and a system for notifying access network location information are provided. The method includes that in a PMIPv6 architecture, a Mobile Access Gateway (MAG) sends a circuit ID to a Local Mobility Anchor (LMA) by carrying the circuit ID in a proxy binding update message; and in a GTP architecture, a local GTP peer sends a circuit ID to a correspondent GTP peer by carrying the circuit ID in a Create Session Request message, a Modify Bearer Request message or a Delete Session Request message. In the disclosure, an MAG can notify an LMA of access network location information of a UE in a PMIPv6 architecture, and a GTP peer can notify a correspondent GTP peer of access network location information of a UE in a GTP architecture.

Abstract: A packet processing method and an apparatus are provided. A first SFC proxy of a first SF entity splits a first packet to obtain a first original packet and a first SFC header, and the first SFC proxy sends the first SFC header to a second SFF. The first SF entity processes the first original packet to obtain a second original packet, and sends the second original packet to a service classifier. The service classifier sends, to the second SFF, a second packet that is obtained after the service classifier adds a second SFC header to the second original packet. The second SFF changes the second SFC header in the second packet into the first SFC header. In this way, a first packet carrying a first SFC header can be transmitted in a network architecture in which a legacy SF exists, so that the legacy SF becomes compatible.