Abstract: Embodiments of the present invention provide a Flow Specification-based communications method, device, and system. The method includes: obtaining, by a controller, a requirement indicating that a first resource on a forwarding device needs to be associated with a second resource on the forwarding device; and sending, by the controller, a Border Gateway Protocol Flow Specification BGP Flow Spec protocol packet according to the requirement, where the BGP Flow Spec protocol packet includes a network layer reachability information field and an extended community attribute field, the network layer reachability information field carries characteristic information of the first resource, the extended community attribute field carries a global identifier GID used to indicate the second resource, and the BGP Flow Spec protocol packet is used to instruct to associate the first resource with the second resource.

Abstract: The present disclosure discloses a method and an apparatus for implementing load sharing. The method includes: for a congested first link on a first forwarding node, selecting, by a network device, a packet flow forwarded by using the first link; selecting a second link that may be used to forward the packet flow and that is not congested after available bandwidth of the second link is occupied by the packet flow, where the second link is a link between the first forwarding node and a second forwarding node; selecting a first hash gene corresponding to the second link; determining that a third link is not in a congested state after available bandwidth of the third link is occupied by the packet flow; and saving the first hash gene in a source node of the packet flow, where the third link is a link that is on the second forwarding node.

Abstract: Embodiments of the present disclosure provide a routing control method, network device, and controller. The method may include the network device obtaining a route suppression request. The method may also include determining the second routing entry. Furthermore, the method may include setting a state of the second routing entry to a non-delivery state that is used to indicate that the second routing entry does not need to be delivered to a forwarding table. In the method, the network device may have a first routing entry and a second routing entry, an address prefix of the first routing entry is a first address prefix, an address prefix of the second routing entry is a second address prefix, a network segment to which the second address prefix belongs is a subset of a network segment to which the first address prefix belongs, and a mask in the second address prefix is greater than a mask in the first address prefix.

Abstract: The present application discloses a packet forwarding method, including: determining, by an Ingress PE in an Ethernet virtual private network instance (EVI), that a state of the EVI on a first Egress PE is Active, where an Ethernet virtual private network (EVPN) corresponding to the EVI includes a first CE; determining, by the Ingress PE, that a state of the EVI on a second Egress PE is Inactive; skipping, by the Ingress PE, forwarding a broadcast, unknown unicast, and multicast BUM packet to the second Egress PE, where the BUM packet is from the first CE; and forwarding, by the Ingress PE, the BUM packet to the first Egress PE. Repeated BUM traffic that is transmitted in a bearer network and is not finally sent to a remote site is reduced; therefore, a waste of bandwidth in the bearer network is reduced.

Abstract: The present disclosure discloses a packet processing method, device, and system. The system includes: a controller, configured to: allocate a service label to a service processing manner of an FEC, establish a mapping relationship between the service label and the service processing manner, send the service label to a source node, and send the mapping relationship to a destination node; the source node, configured to: receive the service label sent by the controller, receive a first packet, insert the service label to the first packet to obtain a second packet, and send the second packet to the destination node; the destination node, configured to: receive the mapping relationship sent by the controller, receive the second packet sent by the source node, and pop the service label from the second packet according to the mapping relationship, to obtain the first packet.

Abstract: A method, an apparatus, and a system for collecting an access control list (ACL), where a second network device receives a first link-state advertisement (LSA) packet flooded by a first network device, where the first LSA packet includes a first network device identifier and first ACL information, and the first network device and the second network device belong to a same Interior Gateway Protocol (IGP) area, and sends an extended first Border Gateway Protocol-Link State (BGP-LS) packet to a controller, where the extended first BGP-LS packet includes the first network device identifier and the first ACL information such that the controller can collect ACL information of the first network device and manage the ACL information of the first network device.

Abstract: The present disclosure provides a method, an apparatus, and a system for collecting an access control list. A second network device receives a first LSA packet flooded by a first network device, where the first LSA packet includes a first network device identifier and first ACL information, and the first network device and the second network device belong to a same IGP area; and sends an extended first BGP-LS packet to a controller, where the extended first BGP-LS packet includes the first network device identifier and the first ACL information, so that the controller can collect ACL information of the first network device and manage the ACL information of the first network device.

Abstract: A label distribution method and device are disclosed. In an embodiment the method includes: a first routing device sends a first BGP update message including a first VPN instance identifier and a first RT to a second routing device; the first routing device receives a second BGP update message including a second VPN instance identifier and a second RT; the first routing device allocates a first VPN instance label to a second VPN instance after the second routing device determines that the first RT is equal to the second RT; and the first routing device sends a third BGP update message including the first VPN instance label to the second routing device. Mutual learning on VPN instances is performed, and a label is allocated to a VPN instance, so that a service tail end node can identify a VPN instance from which an L3VPN service specifically comes.

Abstract: An LSP establishment method and a network device, where the method includes: generating, by a first network device, a first Path message, where the first Path message carries an address of a second network device, and the first Path message is used to request establishment a first LSP; and sending, the first Path message to the second network device, and establishing the first LSP, where the first Path message further carries an address of a target network device, so that the second network device stitches the first LSP and a second LSP according to the address of the target network device, so as to form a third LSP from the first network device to the target network device. This technical solutions are conducive to implementing convergence of an access network of an IP RAN and an IP backbone network.

Abstract: The present invention discloses a forward entry generating method, a forward node, and a controller. The method includes: receiving, by a first forward node, MPLS forwarding path information, which is sent by a controller, of a MPLS forwarding path, where the MPLS forwarding path information includes: ingress node information, transit node information, and egress node information; sending the MPLS forwarding path information to a third forward node; and generating an MPLS forward entry of the first forward node according to the MPLS forwarding path information. According to the method, the forward node, and the controller in embodiments of the present invention, it can be avoided that the controller sends, in a point-to-point manner, MPLS forward entries to all forward nodes that an MPLS forwarding path passes through, thereby effectively improving efficiency of generating an MPLS forward entry and reducing occupation of outbound bandwidth of the controller.

Abstract: Embodiments of the present application disclose a method for advertising information about a PE device and a related apparatus, which are applied to a BGP-based MVPN. The method includes: a PE device in the MVPN determines a role of the PE device in the MVPN and a working status corresponding to the role, where the role is a root node and/or a leaf node, and the working status is active or standby; the PE device generates a BGP update message, carrying an IP address of the PE device, an identifier of the MVPN, the role of the PE device, and the working status of the PE device; and the PE device sends the BGP update message to a BGP neighbor of the PE device in the MVPN. The method and apparatus may alleviate a configuration workload and reduce an error occurrence during an application of a BGP-based MVPN.

Abstract: Embodiments of the present invention provide a Multiprotocol Label Switching traffic engineering tunnel establishing method and device. A tunnel establishing method includes: receiving, by a second routing device, an identifier, which is sent by a first routing device, of an MPLS TE tunnel from a first VPN instance to a second VPN instance; acquiring, by the second routing device according to the identifier, path information of the MPLS TE tunnel from the first VPN instance to the second VPN instance; and establishing an MPLS TE tunnel from the second VPN instance to the first VPN instance according to the acquired path information. Therefore, forward and reverse bidirectional tunnels are co-routed or partially co-routed, thereby solving a problem caused by non-co-routing during BFD.

Abstract: Embodiments of the present invention provide a traffic switching method and apparatus. The method includes: establishing a mapping relationship between a performance parameter of a network and a forwarding node switching sequence, where the performance parameter of the network includes link usage rate before switching and link usage rate after switching; when traffic switching needs to be performed, obtaining a current performance parameter of the network, and determining, according to the mapping relationship, a switching sequence corresponding to the current performance parameter; and delivering a switching instruction to forwarding nodes according to the switching sequence, so as to control the forwarding nodes to sequentially perform traffic switching. In this way, traffic switching can be systematically implemented, thereby effectively avoiding a link congestion phenomenon in a switching process, and ensuring network performance.

Abstract: An information synchronization method includes sending, by a controller, a first message to a network device, where the first message carries control routing protocol (CRP) routing entry information, and is used to advertise a CRP route, and the first message includes first identification information, and after receiving the first message, storing, by a forwarding device, the CRP routing entry information into a CRP routing table of the network device as indicated by the first identification information. Hence, because a route advertised by the controller and a route advertised using a routing protocol between forwarding devices are stored in different routing tables, a related application of the route advertised using the routing protocol between the forwarding devices is not affected.

Abstract: Embodiments of the present invention disclose a path determining method, apparatus, and system. In a hybrid network including one controller for implementing a control function, the controller may separately obtain network topology information of a first network and a second network of different network types by using a same control channel protocol. When the controller obtains a path determining requirement for the data transmission path, because the controller has the network topology information of the first network and the second network, during computation of the data transmission path, the controller can determine a path computation result including transmission path parts of the first network and the second network, without performing additional information exchange with another device, and send the path computation result to the first network device. In this way, planning efficiency of the data transmission path is improved.

Abstract: The present application provides a method and a device for clearing a MAC forwarding entry. The method includes: detecting, by a first RB, that a topology of a network accessed by a local terminal changes; and sending, by the first RB, a first packet to a second RB, so that the second RB clears a corresponding forwarding entry after receiving the first packet, where the second RB refers to an RB configured with at least one VLAN the same as that of the first RB.

Abstract: Embodiments of the present disclosure provide a routing control method, network device, and controller. The method may include the network device obtaining a route suppression request. The method may also include determining the second routing entry. Furthermore, the method may include setting a state of the second routing entry to a non-delivery state that is used to indicate that the second routing entry does not need to be delivered to a forwarding table. In the method, the network device may have a first routing entry and a second routing entry, an address prefix of the first routing entry is a first address prefix, an address prefix of the second routing entry is a second address prefix, a network segment to which the second address prefix belongs is a subset of a network segment to which the first address prefix belongs, and a mask in the second address prefix is greater than a mask in the first address prefix.

Abstract: A control method for collecting traffic statistics includes a control node obtains a statistics collection instruction, where the statistics collection instruction is used to instruct to collect traffic statistics of a target data flow, generates a traffic statistics collection policy according to the statistics collection instruction, where the traffic statistics collection policy includes a matching identifier of the target data flow, a first command, and a second command, and sends the traffic statistics collection policy to a forwarding node. The first command is used to instruct the forwarding node to set a traffic identifier for the target data flow based on the matching identifier, the second command is used to instruct the forwarding node to add traffic generated by a target packet to a traffic statistics collection result corresponding to the traffic identifier which is used to describe the traffic of the target data flow.

Abstract: Embodiments of the present invention provide a Flow Specification-based communications method, device, and system. The method includes: obtaining, by a controller, a requirement indicating that a first resource on a forwarding device needs to be associated with a second resource on the forwarding device; and sending, by the controller, a Border Gateway Protocol Flow Specification BGP Flow Spec protocol packet according to the requirement, where the BGP Flow Spec protocol packet includes a network layer reachability information field and an extended community attribute field, the network layer reachability information field carries characteristic information of the first resource, the extended community attribute field carries a global identifier GID used to indicate the second resource, and the BGP Flow Spec protocol packet is used to instruct to associate the first resource with the second resource.

Abstract: A first network device includes a processor configured to analyze a data stream entering a network on which the first network device is located to obtain a traffic characteristic of a target data stream, and advertise a Flow Specification (FlowSpec) route, where the FlowSpec route carries redirect indication information, the redirect indication information includes identification information, the identification information is used to uniquely identify a first virtual private network (VPN) instance in a second network device, the redirect indication information instructing to redirect the data stream including the traffic characteristic of the target data stream to the first VPN instance, the second network device is an edge device of a service provider network accessed by the network, and the first VPN instance is a target VPN instance to which the target data stream is redirected in the second network device.