公开(公告)号：US10592316B2

公开(公告)日：2020-03-17

申请号：US16010041

申请日：2018-06-15

Applicant: Huawei Technologies Co., Ltd.

Inventor： Fengkai Li ,  Yinben Xia

IPC: G06F9/54 ,  H04L29/08 ,  H04L12/24 ,  H04L12/927

Abstract: Embodiments of the present application disclose a message processing method, apparatus, and system, which are applied to SDN. An application sends a first message to a controller, and the message includes service content used to describe a service requirement. The service content includes target information and operation information. The application receives a second message sent by the controller. A payload of the second message includes solution information of at least one solution used to implement the service content. The application obtains the solution information of the at least one solution based on the payload of the second message. Therefore, a service requirement is converted into a control requirement between an application plane and a control plane.

公开(公告)号：US09407607B2

公开(公告)日：2016-08-02

申请号：US14149221

申请日：2014-01-07

Applicant: HUAWEI TECHNOLOGIES CO., LTD.

Inventor： Ying Liu ,  Delei Yu ,  Shihui Hu ,  Fengkai Li

IPC: G06F15/16 ,  H04L29/06 ,  H04L12/46

CPC classification number: H04L63/0272 ,  H04L12/467

Abstract: The present invention provides a method for a virtual private cloud to access a network, a network side device and a data center device. When receiving a VPC configuration resource provided by a user, the network side device and the data center device exchange information, create a VPC, determine a PE interface address, a VCE uplink port address, an access tunnel and a VCE downlink port address for the VPC, and perform a corresponding configuration operation, thereby enabling the VPC to access a VPN in a basic bearer network without the need of uniform management of a control system, so as to solve a problem that the VPC cannot access the network when the basic bearer network and a data center belong to different operators, and meanwhile, save a device resource.

Abstract translation: 本发明提供了一种用于虚拟私有云访问网络的方法，网络侧设备和数据中心设备。 当接收用户提供的VPC配置资源时，网络侧设备和数据中心设备交互信息，创建VPC，确定PE接口地址，VCE上行端口地址，接入隧道和VCE下行端口地址 VPC，并进行相应的配置操作，从而使得VPC能够在基本承载网中访问VPN，而不需要对控制系统进行统一管理，从而解决当基本承载方式时VPC无法接入网络的问题 网络和数据中心属于不同的运营商，同时保存设备资源。

公开(公告)号：US20140286342A1

公开(公告)日：2014-09-25

申请号：US14300532

申请日：2014-06-10

Applicant: Huawei Technologies Co., Ltd.

Inventor： Yinben Xia ,  Fengkai Li

IPC: H04L12/747

CPC classification number: H04L45/742 ,  H04L45/38 ,  H04L45/42 ,  H04L45/64 ,  H04L67/327

Abstract: Embodiments of present invention provide a method for generating an entry, and the method includes: receiving, by a stream forwarding apparatus, a first packet, where the stream forwarding apparatus is an apparatus in a network architecture in which controlling and forwarding are separated; searching, a flow table for a first entry matching the first packet, where a set formed by fields that are in the first entry and match the first packet is a first set; generating, a second entry according to the first entry, where a set formed by fields that are in the second entry and match the first packet is a second set, the first set is a subset of the second set. According to the technical solution in embodiments, the stream forwarding apparatus obtain an exact matching entry without interacting with a control plane apparatus through a control channel.

Abstract translation: 本发明的实施例提供了一种用于生成条目的方法，并且所述方法包括：由流转发装置接收第一分组，其中所述流转发装置是其中分离控制和转发的网络架构中的装置; 搜索与第一分组匹配的第一条目的流表，其中由在第一条目中并与第一分组匹配的字段形成的集合是第一集合; 产生根据第一条目的第二条目，其中由位于第二条目中并与第一条目匹配的字段组成的集合是第二集合，第一集合是第二集合的子集。 根据实施例的技术方案，流转发装置通过控制信道获得精确匹配条目而不与控制平面装置进行交互。

公开(公告)号：US11196620B2

公开(公告)日：2021-12-07

申请号：US17094536

申请日：2020-11-10

Applicant: Huawei Technologies Co., Ltd.

Inventor： Wenxia Dong ,  Enhui Liu ,  Chengyong Lin ,  Fengkai Li ,  Wanfu Ding

IPC: H04L12/24 ,  H04L29/08

Abstract: This application provides a method and an apparatus for configuring a service, which help to implement automatic configuration of a service and improve efficiency. The method provided in this application includes: obtaining, by an NaaS device, a contract of a service, where the contract includes identifier information and a condition, the identifier information is used to identify a first device group, the first device group includes a device that provides the service, and the condition is a communication requirement corresponding to the service; obtaining, by the NaaS device, information about a network device group according to the identifier information and the condition; obtaining, by the NaaS device, a first forwarding rule according to the condition, where the first forwarding rule corresponds to the network device group; and sending, by the NaaS device, the first forwarding rule and the information about the network device group to a controller.

公开(公告)号：US20150058922A1

公开(公告)日：2015-02-26

申请号：US14530040

申请日：2014-10-31

Applicant: Huawei Technologies Co., Ltd.

Inventor： Yinben Xia ,  Fengkai Li

IPC: H04L29/06

CPC classification number: H04L63/0227 ,  H04L63/0281 ,  H04L63/08 ,  H04L63/10 ,  H04L63/12 ,  H04L63/14 ,  H04L69/22

Abstract: The present invention relates to the field of communications and discloses a method and an apparatus for controlling a network device. An open service platform intercepts an instruction packet sent to a network device, identifies authority of the instruction packet and judges whether the instruction packet is in conflict with a previous instruction, and sends the instruction packet to the network device if the instruction packet has the authority and is not in conflict with the previous instruction. The method and apparatus can ensure correct and lawful control caused by the instruction packet on the network device.

Abstract translation: 本发明涉及通信领域，并且公开了一种用于控制网络设备的方法和装置。 开放式服务平台拦截发送到网络设备的指令包，识别指令包的权限，并判断指令包是否与先前指令相冲突，如果指令包有权限，则发送指令包给网络设备 并不与以前的指令相冲突。 该方法和装置可以确保由网络设备上的指令包引起的正确和合法的控制。

公开(公告)号：US20140123270A1

公开(公告)日：2014-05-01

申请号：US14149221

申请日：2014-01-07

Applicant: HUAWEI TECHNOLOGIES CO., LTD.

Inventor： Ying LIU ,  Delei Yu ,  Shihui Hu ,  Fengkai Li

IPC: H04L29/06

CPC classification number: H04L63/0272 ,  H04L12/467

Abstract: The present invention provides a method for a virtual private cloud to access a network, a network side device and a data center device. When receiving a VPC configuration resource provided by a user, the network side device and the data center device exchange information, create a VPC, determine a PE interface address, a VCE uplink port address, an access tunnel and a VCE downlink port address for the VPC, and perform a corresponding configuration operation, thereby enabling the VPC to access a VPN in a basic bearer network without the need of uniform management of a control system, so as to solve a problem that the VPC cannot access the network when the basic bearer network and a data center belong to different operators, and meanwhile, save a device resource.

Abstract translation: 本发明提供了一种用于虚拟私有云访问网络的方法，网络侧设备和数据中心设备。 当接收用户提供的VPC配置资源时，网络侧设备和数据中心设备交互信息，创建VPC，确定PE接口地址，VCE上行端口地址，接入隧道和VCE下行端口地址 VPC，并进行相应的配置操作，从而使得VPC能够在基本承载网中访问VPN，而不需要对控制系统进行统一管理，从而解决当基本承载方式时VPC无法接入网络的问题 网络和数据中心属于不同的运营商，同时保存设备资源。

公开(公告)号：US11552841B2

公开(公告)日：2023-01-10

申请号：US17493416

申请日：2021-10-04

Applicant: Huawei Technologies Co., Ltd.

Inventor： Wenxia Dong ,  Enhui Liu ,  Chengyong Lin ,  Fengkai Li ,  Wanfu Ding

IPC: H04L41/08 ,  H04L41/5054 ,  H04L41/00 ,  H04L41/0893 ,  H04L41/5019 ,  H04L65/40

Abstract: This application provides a method and an apparatus for configuring a service, which help to implement automatic configuration of a service and improve efficiency. The method provided in this application includes: obtaining, by an NaaS device, a contract of a service, where the contract includes identifier information and a condition, the identifier information is used to identify a first device group, the first device group includes a device that provides the service, and the condition is a communication requirement corresponding to the service; obtaining, by the NaaS device, information about a network device group according to the identifier information and the condition; obtaining, by the NaaS device, a first forwarding rule according to the condition, where the first forwarding rule corresponds to the network device group; and sending, by the NaaS device, the first forwarding rule and the information about the network device group to a controller.

公开(公告)号：US11258717B2

公开(公告)日：2022-02-22

申请号：US16886218

申请日：2020-05-28

Applicant: Huawei Technologies Co., Ltd.

Inventor： Mengzhu Liu ,  Fengkai Li ,  Yinben Xia

IPC: H04L12/851 ,  H04L1/18 ,  H04L29/06 ,  H04L47/2425 ,  H04L69/16

Abstract: A service packet sending method and device include receiving, by a first network device, a Transmission Control Protocol (TCP) packet from a second network device, where the TCP packet includes a service identifier, obtaining, by the first network device, based on the service identifier, a priority of a service, obtaining a TCP window based on the priority of the service, sending a TCP acknowledgement (ACK) packet including the TCP window to the second network device to enable the second network device to calculate a size of a service packet to be sent to the first network device.

公开(公告)号：US10193755B2

公开(公告)日：2019-01-29

申请号：US15410092

申请日：2017-01-19

Applicant: Huawei Technologies Co., Ltd.

Inventor： Wenxia Dong ,  Chengyong Lin ,  Wanfu Ding ,  Fengkai Li

IPC: H04L12/28 ,  H04L12/24 ,  H04L12/771 ,  H04L12/801

Abstract: This application discloses a policy conflict resolution method which includes receiving a first control policy and decomposing the first control policy into m first rules, and receiving a second control policy and decomposing the second control policy into n second rules. The method also includes performing negation on each first rule to obtain a first negation rule, performing negation on each second rule to obtain a second negation rule, and generating a corresponding first execution rule by using each first negation rule and each second negation rule according to a rule synthesis principle. Additionally, the method includes deleting an invalid rule, using a remaining one of the first execution rules as a valid first execution rule, performing negation on each valid first execution rule, and converting, according to a protocol supported by a first forwarding device, each valid first execution rule on which negation has been performed into a corresponding forwarding entry of the first forwarding device.

公开(公告)号：US20130308651A1

公开(公告)日：2013-11-21

申请号：US13873919

申请日：2013-04-30

Applicant: Huawei Technologies Co., LTD

Inventor： Wanfu Ding ,  Enhui Liu ,  Chengyong Lin ,  Fengkai Li

IPC: H04L12/721

CPC classification number: H04L45/38 ,  H04L45/021

Abstract: The present application provides a packet processing method, device and system. With the present application, timely processing can be performed on a received packet according to an added first flow table entry, so that the timely processing can be implemented for a flow whose importance is high, and the problem in the prior art that a forwarding device cannot add a new flow table entry to a flow table because all flow table entry resources are in use can be relieved, thereby improving the reliability of packet processing.

Abstract translation: 本申请提供了一种分组处理方法，设备和系统。 利用本申请，可以根据添加的第一流表条目对接收到的分组进行及时处理，从而可以对其重要性高的流实现及时处理，并且现有技术中的转发设备 不能将新的流表条目添加到流表中，因为所有流表入口资源都在使用中可以被释放，从而提高了数据包处理的可靠性。