Abstract: A service processing method and a network device, where the network device includes a network processor (NP) and a central processing unit (CPU). The NP is configured to receive a first packet, obtain a packet feature of the first packet, obtain a processing rule corresponding to the packet feature, process the first packet based on the processing rule, to obtain a second packet, and send the second packet to the CPU. The CPU is configured to receive the second packet, and process the second packet. Before the CPU processes the first packet, the NP processes the first packet, and sends the second packet obtained after processing to the CPU.

Abstract: A service processing method and a network device, where the network device includes a network processor (NP) and a central processing unit (CPU). The NP is configured to receive a first packet, obtain a packet feature of the first packet, obtain a processing rule corresponding to the packet feature, process the first packet based on the processing rule, to obtain a second packet, and send the second packet to the CPU. The CPU is configured to receive the second packet, and process the second packet. Before the CPU processes the first packet, the NP processes the first packet, and sends the second packet obtained after processing to the CPU.

Abstract: Embodiments of the present invention disclose a method, an apparatus and a system for processing a tunnel packet. When a tunnel ingress device performs tunnel encapsulation on a data packet, a dynamic identifier is included in an encapsulated packet header, so that each tunnel-encapsulated data packet has a different triplet. In this way, when the tunnel-encapsulated data packet is fragmented, a tunnel egress device may correctly reassemble the tunnel-encapsulated data packet according to the triplet of the fragmented packet.