Abstract: This application provides a method and an apparatus for configuring a service, which help to implement automatic configuration of a service and improve efficiency. The method provided in this application includes: obtaining, by an NaaS device, a contract of a service, where the contract includes identifier information and a condition, the identifier information is used to identify a first device group, the first device group includes a device that provides the service, and the condition is a communication requirement corresponding to the service; obtaining, by the NaaS device, information about a network device group according to the identifier information and the condition; obtaining, by the NaaS device, a first forwarding rule according to the condition, where the first forwarding rule corresponds to the network device group; and sending, by the NaaS device, the first forwarding rule and the information about the network device group to a controller.

Abstract: This application provides a method and an apparatus for configuring a service, which help to implement automatic configuration of a service and improve efficiency. The method provided in this application includes: obtaining, by an NaaS device, a contract of a service, where the contract includes identifier information and a condition, the identifier information is used to identify a first device group, the first device group includes a device that provides the service, and the condition is a communication requirement corresponding to the service; obtaining, by the NaaS device, information about a network device group according to the identifier information and the condition; obtaining, by the NaaS device, a first forwarding rule according to the condition, where the first forwarding rule corresponds to the network device group; and sending, by the NaaS device, the first forwarding rule and the information about the network device group to a controller.

Abstract: This application provides a method and an apparatus for configuring a service, which help to implement automatic configuration of a service and improve efficiency. The method provided in this application includes: obtaining, by an NaaS device, a contract of a service, where the contract includes identifier information and a condition, the identifier information is used to identify a first device group, the first device group includes a device that provides the service, and the condition is a communication requirement corresponding to the service; obtaining, by the NaaS device, information about a network device group according to the identifier information and the condition; obtaining, by the NaaS device, a first forwarding rule according to the condition, where the first forwarding rule corresponds to the network device group; and sending, by the NaaS device, the first forwarding rule and the information about the network device group to a controller.

Abstract: This application provides a method and an apparatus for configuring a service, which help to implement automatic configuration of a service and improve efficiency. The method provided in this application includes: obtaining, by an NaaS device, a contract of a service, where the contract includes identifier information and a condition, the identifier information is used to identify a first device group, the first device group includes a device that provides the service, and the condition is a communication requirement corresponding to the service; obtaining, by the NaaS device, information about a network device group according to the identifier information and the condition; obtaining, by the NaaS device, a first forwarding rule according to the condition, where the first forwarding rule corresponds to the network device group; and sending, by the NaaS device, the first forwarding rule and the information about the network device group to a controller.

Abstract: This application provides a method and an apparatus for configuring a service, which help to implement automatic configuration of a service and improve efficiency. The method provided in this application includes: obtaining, by an NaaS device, a contract of a service, where the contract includes identifier information and a condition, the identifier information is used to identify a first device group, the first device group includes a device that provides the service, and the condition is a communication requirement corresponding to the service; obtaining, by the NaaS device, information about a network device group according to the identifier information and the condition; obtaining, by the NaaS device, a first forwarding rule according to the condition, where the first forwarding rule corresponds to the network device group; and sending, by the NaaS device, the first forwarding rule and the information about the network device group to a controller.

Abstract: This application discloses a policy conflict resolution method which includes receiving a first control policy and decomposing the first control policy into m first rules, and receiving a second control policy and decomposing the second control policy into n second rules. The method also includes performing negation on each first rule to obtain a first negation rule, performing negation on each second rule to obtain a second negation rule, and generating a corresponding first execution rule by using each first negation rule and each second negation rule according to a rule synthesis principle. Additionally, the method includes deleting an invalid rule, using a remaining one of the first execution rules as a valid first execution rule, performing negation on each valid first execution rule, and converting, according to a protocol supported by a first forwarding device, each valid first execution rule on which negation has been performed into a corresponding forwarding entry of the first forwarding device.

Abstract: An entry adding method includes: a switch receives a first group entry sent by a controller, where the first group entry includes importance indication information of the first group entry, and a first action bucket; the switch determines that the first group entry cannot be added to a group table, and that a second group entry exits in the group table, the switch deletes the second group entry and adds the first group entry to the group table. Where importance of the second group entry is lower than importance of the first group entry; the second group entry includes a second action bucket; a quantity of first action buckets is not greater than the sum of a first value and a quantity of second action buckets; and the first value is a quantity of available action buckets in the group table.

Abstract: A multi-level flow table search method includes extracting matching information of a data packet when the data packet is received and selecting a keyword from the matching information of the data packet according to flow-table match-field configuration information. The method also includes searching for a match field of each-level flow table in a multi-level flow table starting from a first-level flow table in the multi-level flow table by using the keyword as a search keyword, and matching the search keyword with the match field. If matching of a match field of a current-level flow table is completed, the method includes executing a corresponding instruction, and if the current-level flow table is not a last-level flow table or there is an instruction for executing an action, executing a corresponding action.

Abstract: The present application provides a packet processing method, device and system. A controller sends a first flow entry to a network device. The first flow entry comprises first importance information used for indicating importance of a first flow entry, where the first importance information is used by the network device to determine, according to a second importance information of a second flow entry in the flow table and the first importance information of the first flow entry, whether to add the first flow entry into a flow table of the network device when there is no idle flow entry resource in the flow table.

Abstract: This application provides a method and an apparatus for configuring a service, which help to implement automatic configuration of a service and improve efficiency. The method provided in this application includes: obtaining, by an NaaS device, a contract of a service, where the contract includes identifier information and a condition, the identifier information is used to identify a first device group, the first device group includes a device that provides the service, and the condition is a communication requirement corresponding to the service; obtaining, by the NaaS device, information about a network device group according to the identifier information and the condition; obtaining, by the NaaS device, a first forwarding rule according to the condition, where the first forwarding rule corresponds to the network device group; and sending, by the NaaS device, the first forwarding rule and the information about the network device group to a controller.

Abstract: This application discloses a policy conflict resolution method which includes receiving a first control policy and decomposing the first control policy into m first rules, and receiving a second control policy and decomposing the second control policy into n second rules. The method also includes performing negation on each first rule to obtain a first negation rule, performing negation on each second rule to obtain a second negation rule, and generating a corresponding first execution rule by using each first negation rule and each second negation rule according to a rule synthesis principle. Additionally, the method includes deleting an invalid rule, using a remaining one of the first execution rules as a valid first execution rule, performing negation on each valid first execution rule, and converting, according to a protocol supported by a first forwarding device, each valid first execution rule on which negation has been performed into a corresponding forwarding entry of the first forwarding device.

Abstract: The present application provides a packet processing method, device and system. A controller sends a first flow entry to a network device. The first flow entry comprises first importance information used for indicating importance of a first flow entry, where the first importance information is used by the network device to determine, according to a second importance information of a second flow entry in the flow table and the first importance information of the first flow entry, whether to add the first flow entry into a flow table of the network device when there is no idle flow entry resource in the flow table.

Abstract: The present application provides a packet processing method, device and system. With the present application, timely processing can be performed on a received packet according to an added first flow table entry, so that the timely processing can be implemented for a flow whose importance is high, and the problem in the prior art that a forwarding device cannot add a new flow table entry to a flow table because all flow table entry resources are in use can be relieved, thereby improving the reliability of packet processing.

Abstract: An entry adding method includes: a switch receives a first group entry sent by a controller, where the first group entry includes importance indication information of the first group entry, and a first action bucket; the switch determines that the first group entry cannot be added to a group table, and that a second group entry exits in the group table, the switch deletes the second group entry and adds the first group entry to the group table. Where importance of the second group entry is lower than importance of the first group entry; the second group entry includes a second action bucket; a quantity of first action buckets is not greater than the sum of a first value and a quantity of second action buckets; and the first value is a quantity of available action buckets in the group table.

Abstract: A multi-level flow table search method includes extracting matching information of a data packet when the data packet is received and selecting a keyword from the matching information of the data packet according to flow-table match-field configuration information. The method also includes searching for a match field of each-level flow table in a multi-level flow table starting from a first-level flow table in the multi-level flow table by using the keyword as a search keyword, and matching the search keyword with the match field. If matching of a match field of a current-level flow table is completed, the method includes executing a corresponding instruction, and if the current-level flow table is not a last-level flow table or there is an instruction for executing an action, executing a corresponding action.