Abstract: A method for configuring a path for intercepting user data, a method for intercepting user data, an apparatus, a system, a control plane entity and a user plane entity are provided. The method for configuring the path for intercepting user data comprises: acquiring a target to be intercepted and an intercepting interface address; configuring data path configuration information on a user plane entity GW-U according to the target to be intercepted and the intercepting interface address; sending the data path configuration information to the user plane entity GW-U so that the GW-U establishes a path for data transmission; initiating an establishment of an intercepting connection of an intercepting interface to an intercepting entity based on the intercepting interface address so as to transmit the data of the target to be intercepted.

Abstract: Embodiments of the present invention provide a QoS control method and a device for SDN. A control plane device includes: a determining unit, configured to determine a flow entry, where the flow entry includes QoS information, the QoS information is used to indicate a QoS processing rule, the QoS processing rule includes a QoS parameter, and the QoS processing rule is used to instruct to perform QoS control on a data packet according to the QoS parameter; and a sending unit, configured to send the flow entry to a forwarding plane device, so that the forwarding plane device obtains the QoS processing rule, and performs QoS control on a target packet according to the QoS parameter in the QoS processing rule, where the target packet is a data packet that matches the flow entry.

Abstract: Example communication methods and communications apparatuses are provided to verify a user equipment route selection policy (URSP) used by a terminal apparatus. One example communication method includes obtaining information about a first application of at least one packet data unit (PDU) session, where the information about the first application is determined based on a first URSP, and then sending the information about the first application to a second network element, where the information about the first application is used to verify whether information about a second application of the at least one PDU session matches the information about the first application, and the information about the second application is information about an application to which a data packet in the at least one PDU session belongs.

Abstract: An embodiment of the present disclosure discloses a method and device for managing a forwarding plane tunnel resource. The method includes sending a forwarding plane tunnel resource request message to a forwarding plane device, for enabling the forwarding plane device to allocate a forwarding plane tunnel resource based on the forwarding plane tunnel resource request message; acquiring the allocated forwarding plane tunnel resource from the forwarding plane device; and sending the acquired forwarding plane tunnel resource to a target network element, to establish a packet data network connection with the target network element. By adopting the present disclosure, the load balancing of the forwarding plane device is achieved, the signaling interaction between the control plane device and the forwarding plane device is reduced.

Abstract: Embodiments of the present disclosure provide a universal session persistence method for different communications protocol layers. The method includes: generating, by a first node device, a first interaction message, where the first interaction message includes a first load balancing protocol header, the first load balancing protocol header is independent of a protocol header corresponding to a communications protocol layer at which the first interaction message is generated, the first load balancing protocol header includes a first destination end load balancing index, and the first destination end load balancing index is used to identify a second node device that is to receive the first interaction message; and sending, by the first node device, the first interaction message to the second node device via a first load balancer.

Abstract: Embodiments of this application provide a communication method and a communications apparatus, to implement a purpose that a terminal can perform normal communication without local authentication. In the embodiments of this application, the method includes: receiving, by a mobility management network element, a request message that is from a terminal and that is used to request access to a network; and triggering, by the mobility management network element, third-party authentication when the mobility management network element determines, based on the request message, to perform third-party authentication on the terminal. In this case, after authentication is performed between the terminal and a third party, even if local authentication is not performed, the terminal may access the network for communication after third-party authentication is performed.

Abstract: Example quality of service (QoS) control methods and apparatus for software defined network (SDN) are described. One example method includes determining a flow entry that includes QoS information. The QoS information is used to indicate a QoS processing rule that includes a QoS parameter. The QoS processing rule is used to instruct to perform QoS control on a data packet according to the QoS parameter. The flow entry is sent to a forwarding plane device, so that the forwarding plane device obtains the QoS processing rule, and performs QoS control on a target packet according to the QoS parameter in the QoS processing rule, where the target packet is a data packet that matches the flow entry.

Abstract: Embodiments of the present invention provide a switch, a controller, a system, and a link quality detection method, and pertain to the field of network technologies. In the present invention, the controller determines a detection path, and controls each switch on the detection path to obtain a detection packet, so that after determining that the obtained detection packet matches a prestored flow table entry, each switch adds OAM information to the successfully matched detection packet; and the controller obtains a termination detection packet, and determines link quality according to the termination detection packet. Each switch on a detection path does not need to use a corresponding link quality detection protocol to detect link quality, and only needs to add OAM information to an obtained detection packet. In this way, not only a structure of each switch can be simplified, but also operations of each switch are simplified.

Abstract: Embodiments of the present invention provide a method and an apparatus for controlling a service data flow. The method includes: acquiring, by a controller, index information related to a UE, where the index information includes at least a user information index, a PDN connection index, a bearer index, and a service data flow table index that are related to the UE; sending, by the controller, the index information to a forwarder by using an entry notification message; when a first control event of a service data flow is triggered, acquiring, by the controller, a first instruction index according to the first control event, where the first instruction index includes at least one type of the index information related to the UE; and sending, by the controller, the first instruction index to the forwarder by using first control signaling.

Abstract: This application discloses a resource configuration method and apparatus. The method includes: obtaining, by a terminal, a slice attribute corresponding to a slice type of a first session, where the slice attribute corresponding to the slice type includes at least one of a security requirement or a latency requirement of the slice type; and performing resource configuration for the first session based on the slice attribute. In this way, a security requirement and/or a latency requirement of network slices can be implemented on a terminal side.

Abstract: This application is directed to a method and an apparatus for associating an application with a network slice, and a communications system. The method includes: obtaining, by a terminal, display instruction information, an identifier of a first network slice that the terminal is allowed to access, and service feature information corresponding to the first network slice. The method further includes: displaying the service feature information corresponding to the first network slice on a first display interface of the terminal based on the display instruction information, and generating a first network slice selection policy when detecting an operation of associating a first application with the first display interface. The first network slice selection policy can include a mapping relationship between the first application and the identifier of the first network slice corresponding to the first display interface.

Abstract: A communication method and a device are provided. The method includes: generating, by a first terminal device, first data, where the first data includes second data, the second data includes third data and an identifier of the first terminal device, the second data is data that needs to be reported by the first terminal device to a network device, and the identifier of the first terminal device is used to determine the first terminal device; and sending, by the first terminal device, the first data to a second terminal device when a connection to the network device is not established. Power consumption of the first terminal device can be reduced by using the method and the device in this application.

Abstract: Embodiments of the present disclosure disclose a method, an apparatus, and a system for data transmission. The method includes: broadcasting, by a relay device, a first message, where the first message is used to indicate that the relay device supports data forwarding; receiving, by the relay device, a second message from a remote device, where the second message includes data of the remote device; and sending, by the relay device, the data to a core network device based on the second message. In the present method, after receiving the first message broadcast by the relay device, the remote device directly sends the data of the remote device to the relay device without establishing a connection dedicated for transmitting the data of the remote device between the remote device and the relay device, thereby reducing signaling and reducing power consumption of the remote device.

Abstract: This application provides a session processing method and device. The method includes: receiving, by an SMF entity, a PDU session establishment request, where the PDU session establishment request is used to request to establish a PDU session for a terminal device; determining, by the SMF entity based on reference information, to authenticate the PDU session; and sending, by the SMF entity, an authentication request to a third-party authentication entity by using a network exposure function NEF entity. A control-plane-based PDU session authentication manner is provided, so that the terminal device and the third-party authentication entity that is in a DN may be required to perform mutual authentication, and unauthorized user access may be rejected, thereby improving security of the DN, and reducing network resources.

Abstract: A packet processing method and an apparatus, where the method includes determining a to-be-installed flow entry and packet sending information, and sending, to a switch, a flow entry installation message carrying the to-be-installed flow entry and the packet sending information, such that the switch obtains the to-be-installed flow entry and the packet sending information from the flow entry installation message, installs the flow entry, and sends a packet according to the packet sending information. In the present disclosure, a controller sends a flow entry installation message carrying a to-be-installed flow entry and a packet sending message, where the to-be-installed flow entry and a to-be-sent packet are simultaneously sent, such that a switch simultaneously receives the to-be-installed flow entry and the to-be-sent packet, and performs flow entry installation and packet sending.

Abstract: The present disclosure discloses a route determining method, including: receiving a first flow entry which includes a first route mapping relationship and a first load ratio with respect to a full load capacity of each service node; receiving a second flow entry which includes a second route mapping relationship, a second load ratio with respect to a full load capacity of each service node, and a start time of the second flow entry; receiving a first packet of a first service flow; determining, according to a service chain identifier included in the first packet, that the first service flow is a first type of service flow; determining whether a time corresponding to a timestamp precedes the start time of the second flow entry; and if so, determining a service node for receiving the first packet according to the first flow entry; if not, determining a service node for receiving the first packet according to the second flow entry.

Abstract: Embodiments of the present invention provide a method for processing information, a forwarding plane device and a control plane device. The method includes: receiving a data packet, and extracting the data packet's characteristic information; searching for context information corresponding to the data packet's characteristic information; buffering or discarding the data packet if the context information is not found; and sending an event reporting message to a gateway control plane device, wherein the event reporting message carries the data packet's characteristic information, so that the gateway control plane device acquires the context information corresponding to the data packet's characteristic information forwarding of the data packet to the greatest extent.

Abstract: A method includes receiving, by an ingress network element, a data packet, wherein an ingress flow entry is stored in the ingress network element. The ingress flow entry comprises flow description information and a processing network element indication, where the flow description information matches the data packet, and the processing network element indication is used to indicate a processing network element that processes the data packet after the ingress network element. The method further includes sending, by the ingress network element, the data packet to the processing network element according to the ingress flow entry, so that the processing network element performs context processing on the data packet.

Abstract: A packet processing method and an apparatus, where the method includes determining a to-be-installed flow entry and packet sending information, and sending, to a switch, a flow entry installation message carrying the to-be-installed flow entry and the packet sending information, such that the switch obtains the to-be-installed flow entry and the packet sending information from the flow entry installation message, installs the flow entry, and sends a packet according to the packet sending information. In the present disclosure, a controller sends a flow entry installation message carrying a to-be-installed flow entry and a packet sending message, where the to-be-installed flow entry and a to-be-sent packet are simultaneously sent, such that a switch simultaneously receives the to-be-installed flow entry and the to-be-sent packet, and performs flow entry installation and packet sending.

Abstract: A method includes receiving, by an ingress network element, a data packet, wherein an ingress flow entry is stored in the ingress network element. The ingress flow entry comprises flow description information and a processing network element indication, where the flow description information matches the data packet, and the processing network element indication is used to indicate a processing network element that processes the data packet after the ingress network element. The method further includes sending, by the ingress network element, the data packet to the processing network element according to the ingress flow entry, so that the processing network element performs context processing on the data packet.