JP4369768B2 - Route information registration method and data relay device - Google Patents

Description

  The present invention constructs a VPN (Virtual Private Network) in an IP (Internet Protocol) backbone network, and registers the route information and relays the data via the VPN. It relates to the device.

  As a conventional data relay method, for example, there is an IP-VPN in which an ISP (Internet Service Provider) performs a VPN service using a shared IP backbone network. In this data relay method, a control process for exchanging route information for each user is a connection-oriented route exchange protocol that can ensure redundancy as a routing control function, such as BGP (Border Gateway). Protocol: RFC 1771) is used.

  As such a data relay method, for example, a terminal belonging to the same VPN of a specific user via a CE (customer edge) router is connected to a metro edge router such as a PE (provider edge) router provided on an IP-VPN backbone network. May be used for systems that are connected. Among these PE routers, each router belonging to the same VPN forms a mesh to exchange route information. The route information exchanged here is stored in the routing table, and this PE router has selected the optimum route based on this route information.

"Humuzd Khosravi and Randy Worzella" "IPv4 Unicast Forwarding Service API Implementation Implementation" Copyright The Network Processing Forum (NPI), March 29, 2000, 29th year, 29th year, 29th year, 29th year of the Internet : Http://www.npforum.org/techinfo/Ipv4_IA.pdf>

  However, in recent years, the total number of routes and the number of transmission routers tend to increase with the increase in the scale of intranet construction due to the widespread use of IP (Internet Protocol) networks. For this reason, the amount of data and the amount of processing to be managed by an NP (network processor: forwarding processing unit) are increasing, and the conventional example has a problem that the memory amount of the database increases. In addition, the CP (control point: routing processing unit) requires a function to copy all the route information in the network and send it to all the lower-order NPs. There was a problem that the route information distribution processing time increased.

  The present invention has been made in view of the above problems, and an object of the present invention is to provide a route information registration method and a data relay device that can reduce the memory capacity of a database and the route information distribution processing time.

  In order to solve the above-described problems and achieve the object, the route information registration method according to the present invention uses a connection-type communication route exchange protocol to establish a connection with different data relay apparatuses and exchange route information. And exchanging route information of a specific user constructed by a preset network in a route information registration method for registering the exchanged route information in a database so that data transfer by an information transfer means is possible, and A route information generating step for generating route information belonging to each network from the route information, a registration step for registering the generated route information in a database, information on the network, and information on the information transfer means are associated with each other. A storage step of storing in the storage means and the stored association information; And distributing the route information belonging to the network to the information transfer means to which the specific user belonging to the network is connected, and storing the route information belonging to the network in the storage means. And a storing step.

  According to a second aspect of the present invention, in the route information registration method according to the second aspect of the invention, in the registration step, the route information is divided into predetermined bits, and the network information is inserted between the divided route information. The route information belonging to the network is stored in the database.

  According to a third aspect of the present invention, in the route information registration method according to the first aspect, in the distribution step, according to the interface setting change, the route information belonging to the network related to the setting change is changed to a specific user belonging to the network. Is distributed to the information transfer means connected.

  The route information registration method according to a fourth aspect of the present invention is characterized in that, in the above invention, the network is a network set by a VPN.

  According to a fifth aspect of the present invention, there is provided a data relay device that establishes a connection with a different data relay device using a connection-type communication route exchange protocol, and stores route information of a specific user constructed by a preset network. Route exchange means for exchanging and generating route information belonging to each network from the route information; information processing means for processing the generated route information; and a database for registering the processed route information; An information transfer means for performing data transfer processing based on the path information, wherein the information processing means stores the network information and the information transfer means in association with each other, and the storage means Route information belonging to the network based on the association information stored in the network. And distribution means for distributing said information transfer means for a specific user is connected to belongs to, the information transfer means, a storage means for storing routing information belonging to the network, characterized in that it has.

  According to a sixth aspect of the present invention, in the data relay device according to the present invention, the information processing means divides the route information into predetermined bits, and inserts the network information between the divided route information. The route information belonging to the network is stored in the database.

  According to a seventh aspect of the present invention, in the data relay device according to the first aspect of the invention, in accordance with the interface setting change, the distribution unit can change the route information belonging to the network related to the setting change to a specific user belonging to the network. The information is distributed to the connected information transfer means.

  The data relay apparatus according to an eighth aspect of the present invention is characterized in that, in the above invention, the network is a network set by a VPN.

  The route information registration method according to the present invention associates information about a network (VPN) with information of information transfer means belonging to the VPN, and based on this association information, only route information belonging to the VPN belongs to the VPN. Since the information is transferred and registered to the information transfer means, the memory capacity of the database and the distribution processing time of the route information can be reduced.

  The data relay apparatus according to the present invention stores information relating to the VPN in association with information on the information transfer means belonging to the VPN in the storage means, and only the route information belonging to the VPN from the distribution means to the information transfer means belonging to the VPN Therefore, it is possible to reduce the memory capacity of the database and the distribution processing time of the route information.

  Embodiments of a route information registration method and a data relay apparatus according to the present invention will be described below in detail with reference to the drawings of FIGS. The present invention is not limited to these embodiments, and various modifications can be made without departing from the scope of the present invention.

(Embodiment 1)
FIG. 1 is a configuration diagram showing a configuration of a data relay system using a data relay device according to the present invention. In the figure, the data relay system of this embodiment is configured by connecting PE routers 2 and 3 according to the present invention to an IP-VPN backbone network 1.

  The PE routers 2 and 3 as data relay apparatuses according to the present invention include a network of a specific user who is an AS (Autonomous System), in this embodiment, for example, a LAN of each company site (A company, B company site). It is connected. That is, the LAN 4 of company A and the LAN 5 of company B are connected to the PE router 2, and the LAN 6 of company A and the LAN 7 of company B are connected to the PE router 3. At each company site, a VPN based on VPN Routing Forwarding (VPN) is constructed using a general public network.

  Since these PE routers 2 and 3 have the same configuration, the configuration of the PE router 2 will be representatively described based on the configuration diagram of FIG. The PE router includes a CP that performs information processing such as protocol processing, and an NP that performs data transfer (relay) between, for example, a LAN connected at a lower level and a higher-level backbone network.

  The CP includes a BGP daemon unit 20 as a route information exchanging unit that performs BGP protocol processing, and an interface (hereinafter referred to as “I / F”) circuit 21 connected to another router in the network via a transmission path. An interface daemon unit 22 that performs setting processing of the I / F circuit 21, a database 23 of a daemon unit that registers the exchanged path information, a kernel unit 24 that is a core part of an OS (operating system) having a multitask function, And a database 25 of a kernel unit 24 for registering route information from the daemon unit.

  In this CP, the BGP daemon unit 20 uses the BGP protocol to exchange route information with other routers in the backbone network 1, for example, routers belonging to the same VRF. Based on the exchanged route information, the BGP daemon unit 20 Route information is generated and registered in the database 23. The interface daemon unit 22 changes the setting of the I / F circuit 21, for example, adds or deletes an I / F circuit by inserting or removing a board on which the NP is mounted, or changes the VRF set in the I / F circuit The state is detected, and the setting is changed according to the detection result. These setting changes are notified to the NP driver unit 26 as interface change notifications. Further, as shown in FIG. 3, the database 23 registers route information having a tree structure separately for each VRF ID (identifier, for example, VRF0, VRF1, VRF2) to which the own router belongs.

  The kernel unit 24 is the core of the OS and is a manager for controlling the NP. When the changed route information is input from the daemon unit, the kernel unit 24 reconstructs the database 25 in the kernel unit based on the route information, registers and deletes the route information, and stores the route information. A change notification is sent to the NP driver unit 26. Similarly to the database of the daemon unit, the database 25 registers route information by dividing the tree for each VRF ID to which the own router belongs, as shown in FIG. In exchanging route information between databases, VRF ID and IP address (that is, IP address of destination and next hop) are exchanged.

  The NP driver unit 26 manages the operation of each NP unit (to be described later) and has a function as a distribution unit that distributes route information input from the kernel unit 24. In the NP driver unit 26, a path 27 from the database 25 of the kernel unit 24 is registered in association with each VRF, and a database 27 as a storage unit that stores the VRF and the NP belonging to the VRF in association with each other is stored. It is connected.

  The NP driver unit 26 has a function as information processing means, and generates new route information belonging to the VPN based on the route information input from the kernel unit 24 and registers it in the database 27. As shown in FIG. 5, the route information registered in the database 27 is composed of, for example, an IP address including a VRF ID. That is, for example, a 32-bit IP address is divided into an upper stage and a lower stage of 16 bits, and a VRF ID is inserted between them. This address is divided into a tree for each VRF ID, and the database 27 It is registered in. In addition, as shown in FIG. 6, the database 27 also stores association data of VRF IDs and NPs, and sets which VRF each NP belongs to, for example, by setting a flag. In FIG. 6, NPs # 0 to # 15 are associated with which of VRFs 0 to 10 belongs.

  Further, as shown in the configuration diagram of FIG. 7, the NP driver unit 26 generates a path information of the database 27 based on the change and association of the VRF ID and the destination IP address, and the VRF A transmission NP determination unit 26b that determines an NP to send route information according to the ID and interface settings, a guide frame generation unit 26c that generates a guide frame, and a frame transmission that transmits the generated guide frame to the determined NP Part 26d.

  The NP is connected to a plurality of NP units 28 to 30 as information transfer means for transferring data for each VRF set in the own router, and is input from the connected NPs. Route information tables 31 to 33 as storage means for storing route information for each VRF.

  Next, the operation of the NP driver unit 26 will be described based on the flowcharts of FIGS. First, the route information registration operation by the NP driver unit 26 will be described with reference to the flowchart of FIG.

  Here, as the entire flow of the route information, the kernel unit 24 captures the route information (VRF ID and destination IP address (next hop)) notified from the BGP daemon unit 20 and sends the route information to the NP driver unit 26. 8, the database creation unit 26a determines whether or not there has been a route information change notification from the kernel unit 24 (step 101), and when this route information change notification is captured, the received route is received. Of the information, the database is created by modifying the tree in the database 27 from the VRF ID and the destination IP address and associating them (step 102).

  Next, the transmission NP determination unit 26b checks the interface setting change notification from the interface daemon unit 22 and the database 27 to determine a necessary NP (step 103). Based on the determination result, a command for instructing creation of a guide frame is created and output to the guide frame creation unit 26c (step 104).

  When this command is input, the guide frame creation unit 26c creates a guide frame indicating a change in the path information of the tree structure in accordance with the command (step 105), and the created guide frame needs to be determined in step 103. The data is transmitted to the NP unit (any one of the NP units 28 to 30) via the Ethernet (registered trademark) (step 106). As a result, the created guide frame for each VRF is transmitted to the necessary NP units 28 to 30 and can be registered in the corresponding route information tables 31 to 33.

  As shown in the frame configuration diagram of FIG. 10, this guide frame is composed of one frame header and several guide commands. In this frame header, frame control information is stored. Includes an insert leaf (Insert Leaf) command indicating addition to the search tree, an insert leaf format (Insert Leaf Format) in which path information for each VRF added to the search tree is stored, and an end delimiter format ( End delimiter format) and an end delimiter indicating the end of the frame are stored. As other commands, there is a delete leaf (Delete Leaf) for deleting route information from the search tree. When there are a plurality of commands, there are a plurality of guide command portions.

  Next, the interface setting addition operation will be described with reference to the flowchart of FIG. In the case of addition of this interface setting, since the database 27 of the NP driver unit 26 has already been created, when the interface setting change notification is input from the interface daemon unit 22 (step 201), the transmission NP determining unit 26b The interface setting and the database 27 are checked to determine the necessary NP (step 202). Based on the determination result, a command for instructing the creation of a guide frame is created and output to the guide frame creation unit 26c (step 203).

  When this command is input, the guide frame creation unit 26c creates a guide frame indicating a change in the path information of the tree structure in accordance with the command (step 204), and the created guide frame needs to be determined in step 202. It is transmitted to the NP unit (in the case of interface setting change, the NP unit related to the changed part) (step 205). As a result, the created guide frame for each VRF is transmitted to the necessary NP units 28 to 30 and can be registered in the corresponding route information tables 31 to 33.

  Next, the operation of starting the apparatus and removing / inserting the board (NP addition or deletion) on which the NP unit is mounted will be described. Here, when the apparatus is activated, the interface daemon unit 22 detects board insertion / removal, rebuilds the settings of the apparatus, registers the interface, acquires route information, and the like.

  In the NP driver unit 26, as in FIG. 8, the route information change notification is made, and after registration of the route information in the database 27 is completed, the interface setting is confirmed, and the necessary NP unit is determined and created. The guide frame for each VRF is transmitted to the necessary NP units 28 to 30 to enable registration in the corresponding route information tables 31 to 33.

  Thus, in this embodiment, the route information for each VRF is created by the NP driver unit, and the route information for each VRF is transmitted only to the NP unit belonging to the VRF and stored in the route information table. Compared to the case where all the conventional route information is transmitted to each NP unit, it is possible to use a route information table with a high speed and a low memory amount. Therefore, the memory capacity of the database and the distribution processing time of the route information can be reduced. Can be reduced.

  In the present invention, it is possible to set the priority order assuming that the route information registration operation for the interface setting, the setting from the console, and the like occur simultaneously, for example.

  Further, the route information registration method of the present invention can be used even when, for example, VPN is not set. In this case, for example, the ID of the VRF is set to “0”, the Internet route is also treated as one of the VPNs, and is distinguished from a network or the like in which the VPN is set. As a result, it is possible to distribute route information using the NP driver unit as distribution means, and it is possible to further reduce the memory capacity of the database and the route information distribution processing time.

It is a block diagram which shows the structure of the data relay system using the data relay apparatus concerning this invention. It is a block diagram which shows the structure of the routing information registration function of PE router shown in FIG. It is a block diagram which shows the data structure of the database of the BGP daemon part shown in FIG. FIG. 3 is a configuration diagram illustrating a data configuration of a database of a kernel unit illustrated in FIG. 2. FIG. 3 is a configuration diagram illustrating a data configuration of a database address of the NP driver unit illustrated in FIG. 2. Similarly, it is the block diagram which shows the data structure of correlation of VRF ID and NP of the database of an NP driver part. FIG. 3 is a configuration diagram illustrating a configuration of an NP driver unit illustrated in FIG. 2. It is a flowchart for demonstrating the routing information registration operation | movement of a NP driver part. It is a flowchart for demonstrating the change operation | movement of the interface of a NP driver part. It is a block diagram which shows the frame structure of a guide frame.

Explanation of symbols

1 Backbone network 2, 3 router 4-7 LAN
20 BGP daemon part 21 Interface circuit (I / F circuit)
22 Interface daemon unit 23, 25, 27 Database 24 Kernel unit 26 NP driver unit 26a Database creation unit 26b Transmission NP determination unit 26c Guide frame creation unit 26d Frame transmission unit 28-30 NP unit 31-33 Path information table 40 Console

Claims (8)

A plurality of information transfer means for establishing a connection with different data relay apparatuses using a path exchange protocol for connection type communication, exchanging path information, and performing data transfer processing on the exchanged path information by a network processor In the route information registration method to register in the database so that data transfer is possible,
A route information generation step of exchanging route information of a specific user constructed by a preset network and generating route information belonging to each network from the route information;
A registration step of registering the route information generated by the route information generation step in a database;
A storage step of storing information relating to the network and information relating to the information transfer means in association with each other;
A distribution step of distributing the route information belonging to the network only to the information transfer means to which a specific user belonging to the network is connected based on the association information stored in the storage step;
A storage step in which the information transfer means stores route information belonging to the network distributed by the distribution step in a storage means of the information transfer means;
A route information registration method comprising:   The route information belonging to a network is stored in the database by dividing the route information by predetermined bits in the registration step and inserting the network information between the divided route information. 1. The route information registration method according to 1.   2. The distribution process according to claim 1, wherein in accordance with the interface setting change, route information belonging to the network related to the setting change is distributed to the information transfer means connected to a specific user belonging to the network. The route information registration method described in 1.   The route information registration method according to claim 1, wherein the network is a network set by VPN. A connection with a different data relay apparatus is established using a path exchange protocol for connection-type communication, a path information of a specific user constructed by a preset network is exchanged, and a path belonging to each network from the path information A route exchange means for generating information;
Information processing means for processing the route information generated by the route exchange means;
A database for registering route information processed by the information processing means;
A plurality of information transfer means comprising a network processor for performing data transfer processing based on the path information;
A data relay device having
The information processing means includes
Storage means for storing information relating to the network and information relating to the information transfer means in association with each other;
A distribution unit that distributes route information belonging to the network only to the information transfer unit to which a specific user belonging to the network is connected based on the association information stored in the storage unit;
The information transfer means includes
A data relay apparatus comprising storage means for storing route information belonging to the network distributed by the distribution means.   The information processing means stores route information belonging to a network in the database by dividing the route information into predetermined bits and inserting the network information between the divided route information. Item 6. The data relay device according to Item 5.   The distribution unit distributes the route information belonging to the network related to the setting change to the information transfer unit to which a specific user belonging to the network is connected according to the interface setting change. The data relay device described in 1.   The data relay device according to claim 5, wherein the network is a network set by VPN.

Images