Abstract: A method, an apparatus, and a system for collecting an access control list (ACL), where a second network device receives a first link-state advertisement (LSA) packet flooded by a first network device, where the first LSA packet includes a first network device identifier and first ACL information, and the first network device and the second network device belong to a same Interior Gateway Protocol (IGP) area, and sends an extended first Border Gateway Protocol-Link State (BGP-LS) packet to a controller, where the extended first BGP-LS packet includes the first network device identifier and the first ACL information such that the controller can collect ACL information of the first network device and manage the ACL information of the first network device.

Abstract: This application provides a packet sending method. The method includes: receiving, by a first network device, a data packet, and encapsulating the data packet to obtain a first packet, where the first packet includes an IPv6 header, a bit index explicit replication BIER header, and the data packet, and some bits of a source IPv6 address field in the IPv6 header include identification information of a first tenant; and sending, by the first network device, the first packet to a second network device, where the identification information of the first tenant is used by the second network device to determine to send the data packet to an interface, corresponding to the first tenant, of the second network device.

Abstract: A method for updating route information includes a monitored network element establishes a Border Gateway Protocol (BGP) Monitoring Protocol (BMP) connection to a monitoring network element, and sends a first message to the monitoring network element when detecting a synchronization requirement of BGP route information, where the first message instructs the monitoring network element to update a BGP route information set, and the BGP route information set includes at least one piece of BGP route information. The first message indicates an update set, and the update set updates the BGP route information set.

Abstract: A first network device includes a processor and a memory having instructions stored thereon that, when executed by the processor, cause the first network device to: obtain a first virtual private network (VPN) route sent by a second network device. The first VPN route includes first identification information that uniquely identifies a first VPN instance in the second network device. The first network device is also caused to generate a second VPN route according to a second VPN instance accessing a third network device and the first VPN route. The second VPN route carries second identification information and routing information of the first VPN route. The second identification information uniquely identifies the second VPN instance in the third network device. The first identification information is different from the second identification information. The first network device is further caused to send the second VPN route to the third network device.

Abstract: Various embodiments provide a fault diagnosis method and an apparatus. In those embodiments, a centralized management apparatus receives a first packet from a first network device by using a first IGP monitoring protocol session, where the first packet includes a first message sent by the first network device to a second network device. The centralized management apparatus receives a second packet from the second network device through a second IGP monitoring protocol session, where the second packet includes a second message sent by the second network device to the first network device. The centralized management apparatus performs fault diagnosis based on the first packet and the second packet.

Abstract: A mechanism for adaptively performing in-band network telemetry (INT) by a network controller is disclosed. The mechanism includes receiving one or more congestion indicators from a collector. An adjusted sampling rate is generated. The adjusted sampling rate is a specified rate of insertion of instruction headers for INT and is generated based on the congestion indicators. The adjusted sampling rate is transmitted to a head node, which is configured to perform INT via instruction header insertion into user packets.

Abstract: A method for delivering operations, administration and maintenance (OAM) configuration information includes obtaining, by a control node in a communication network and from at least two of a plurality of first nodes in the communication network, advertisement packets, wherein each of the advertisement packets comprises indication information indicating a corresponding path detection mode supported by a sender of each of the advertisement packets; determining, by the control node based on a path detection mode to be used and the advertisement packets, a detection path; and delivering OAM configuration information to a head node in the detection path and a tail node in the detection path.

Abstract: A method to perform operations, administrative, and maintenance (OAM) includes a controller generating a policy configuration packet, where the policy configuration packet includes OAM configuration information and information about a first path, and the information about the first path is used to identify the first path. The controller sends the policy configuration packet to a head node of the first path, where the policy configuration packet is used to indicate the head node to perform OAM on the first path based on the OAM configuration information.

Abstract: Embodiments of this application disclose an information reporting method, an information processing method, and a device. According to the information reporting method, a network device obtains Border Gateway Protocol (BGP) information of a network device. The network device sends a BGP Monitoring Protocol (BMP) notification message to a first device, where the BMP notification message carries the BGP information of the network device.

Abstract: A packet processing method includes determining, by a node in a first network, a transmission path for a packet, where the transmission path includes a path in the first network and a path traversing a second network; adding, by the node, path information to the packet based on the transmission path, where the path information includes traversal indication information, and the traversal indication information indicates an ingress node in the second network to encapsulate and transmit the packet based on an egress node that is specified in the traversal indication information and that is located in the second network; and sending, by the node to the ingress node in the second network through the first network, the packet to which the traversal indication information is added.

Abstract: An information reporting method includes after receiving a Border Gateway Protocol (BGP) flow specification (FS) rule, a network node obtains a status of implementing the BGP FS rule on the network node, where the status indicates that either the BGP FS rule is implemented on the network node or the BGP FS rule is not implemented on the network node. Then the network node sends the status to a server.

Abstract: A packet processing method includes receiving, by a first network node a packet from a second network node, where the packet includes one or more type-length-values (TLVs) that need to be processed by a network node and indication information indicating that a network node on a packet forwarding path needs to process at least one TLV in the one or more TLVs; determining, by the first network node based on the indication information, that the first network node needs to process a first TLV; determining, by the first network node, the first TLV; and processing, by the first network node, the first TLV.

Abstract: A first network device includes a processor and a memory having computer readable instructions stored thereon that, when executed by the processor, cause the first network device to obtain a Flow Specification (FlowSpec) rule with redirect indication information. The redirect indication information includes identification information identifying a first virtual private network (VPN) instance configured on a second network device. The indication information also includes instructions for the second network device to redirect data stream matching the FlowSpec rule to the first VPN instance. The first network device is also caused to advertise the FlowSpec rule with the redirect indication information to the second network device.

Abstract: A method for processing a packet on an SR network is provided, including: receiving a packet, where a packet header of the packet includes a destination address field, a first pointer, a second pointer, and a list used to process the packet, the list includes a plurality of sequentially arranged identifiers, and a value of the first pointer and a value of the second pointer jointly indicate a location of a first identifier in the plurality of identifiers in the list; determining the first identifier based on the value of the first pointer and the value of the second pointer; and copying the first identifier to the destination address field. In this method, a CL pointer is set in the packet header to jointly form a two-dimensional pointer with an SL pointer, to indicate a location of a C-SID in a SID list.

Abstract: A control method for collecting traffic statistics includes a control node obtains a statistics collection instruction, where the statistics collection instruction is used to instruct to collect traffic statistics of a target data flow, generates a traffic statistics collection policy according to the statistics collection instruction, where the traffic statistics collection policy includes a matching identifier of the target data flow, a first command, and a second command, and sends the traffic statistics collection policy to a forwarding node. The first command is used to instruct the forwarding node to set a traffic identifier for the target data flow based on the matching identifier, the second command is used to instruct the forwarding node to add traffic generated by a target packet to a traffic statistics collection result corresponding to the traffic identifier which is used to describe the traffic of the target data flow.

Abstract: A label management method includes allocating, by a controller, a source label to a data stream, sending, by the controller, a first Border Gateway Protocol (BGP) update packet to an ingress network device on a label switching path (LSP) of the data stream, and sending a second BGP update packet to an egress network device on the LSP of the data stream, where the first BGP update packet includes a stream identifier of the data stream and the source label, and the second BGP update packet includes a mapping relationship between the source label and a source object of the data stream.

Abstract: A segment routing-based data transmission method includes that a first network device receives a first packet from a second network device, where the first packet includes a first segment identifier (SID); the first network device obtains, based on the first SID, a first network slice identifier corresponding to the first network device; the first network device generates a second packet based on the first packet, where the second packet includes the first network slice identifier; and the first network device sends the second packet.

Abstract: A routing control methodincludes: the network device obtains a route suppression request; determines the second routing entry; and sets a state of the second routing entry to a non-delivery state that is used to indicate that the second routing entry does not need to be delivered to a forwarding table. Wherein the network device has a first routing entry and a second routing entry, an address prefix of the first routing entry is a first address prefix, an address prefix of the second routing entry is a second address prefix, a network segment to which the second address prefix belongs is a subset of a network segment to which the first address prefix belongs, and a mask in the second address prefix is greater than a mask in the first address prefix.

Abstract: A routing entry obtaining method and apparatus applied to a network device and includes obtaining an identifier of an application program, a computing capability of a first apparatus running the application program, and a computing capability of a second apparatus running the application program; and obtaining a routing entry based on the identifier of the application program, the computing capability of the first apparatus, and the computing capability of the second apparatus, wherein the routing entry comprises the identifier of the application program and an egress port, where the egress port is capable of communicating with a target apparatus determined according to the computing capability of the first apparatus and the computing capability of the second apparatus.

Abstract: The present disclosure discloses a method and an apparatus for implementing load sharing. The method includes: for a congested first link on a first forwarding node, selecting, by a network device, a packet flow forwarded by using the first link; selecting a second link that may be used to forward the packet flow and that is not congested after available bandwidth of the second link is occupied by the packet flow, where the second link is a link between the first forwarding node and a second forwarding node; selecting a first hash gene corresponding to the second link; determining that a third link is not in a congested state after available bandwidth of the third link is occupied by the packet flow; and saving the first hash gene in a source node of the packet flow, where the third link is a link that is on the second forwarding node.