Separating CGN forwarding and control
By splitting CGN functions based on a control plane and a forwarding plane, a CGN control plane function is put into a BRAS CP device, and a CGN forwarding plane function is retained on a CGN card on the BRAS DP device, and CGN configuration information is distributed by the BRAS CP device to the BRAS DP device.
1. A method of separating carrier-grade network address translation (CGN) forwarding and control, comprising:
assigning, by a Broadband Remote Access Server (BRAS) control plane (CP) device, a private network address and a private network port to a target user terminal accessing a BRAS data plane (DP) device when detecting that the target user terminal is successfully authenticated;
selecting, by the BRAS CP device, a target CGN card from one or more CGN cards in the BRAS DP device;
selecting, by the BRAS CP device, a target public network address and a target port block from idle public network addresses and port blocks on the target CGN card;
sending, by the BRAS CP device, CGN configuration information for the target user terminal to the BRAS DP device, wherein the CGN configuration information comprises identity information of the target CGN card, the private network address, the private network port, the target public network address and the target port block,
wherein, before selecting the target public network address and the target port block from the idle public network addresses and the port blocks on the target CGN card, determining, by the BRAS CP device, whether there are idle public network addresses and port blocks on the target CGN card.
2. The method according to claim 1 , wherein sending the CGN configuration information for the target user terminal to the BRAS DP device comprises:
sending, by the BRAS CP device, a user flow table for the target user terminal to the BRAS DP device, wherein the CGN configuration information is carried in the user flow table.
3. The method according to claim 1 , further comprising:
when there are idle public network addresses and port blocks on the target CGN card,
selecting, by the BRAS CP device, the target public network address and the target port block from the idle public network addresses and the port blocks on the target CGN card; and
when there are no idle public network address and port block on the target CGN card,
selecting, by the BRAS CP device, idle public network addresses for the target CGN card from a public network address pool based on a preconfigured allocation granularity and
assigning, by the BRAS CP device, the selected idle public network addresses and port blocks corresponding to the selected idle public network addresses to the target CGN card.
4. The method according to claim 1 , wherein selecting the target CGN card from one or more CGN cards in the BRAS DP device comprises:
selecting, by the BRAS CP device, the target CGN card from the CGN cards in the BRAS DP device in a polling manner when there are a plurality of CGN cards in the BRAS DP device.
5. The method according to claim 4 , after selecting the target CGN card from the CGN cards in the BRAS DP device in the polling manner, further comprising:
recording, by the BRAS CP device, a corresponding relationship between a target interface and the selected CGN card, wherein the target user terminal accesses the BRAS DP device via the target interface on the BRAS DP device.
6. The method according to claim 5 , wherein,
when detecting that another target user terminal accessing the BRAS DP device via the target interface is successfully authenticated,
selecting the target CGN card for the other target user terminal comprises:
selecting a CGN card corresponding to the target interface as the target CGN card based on the corresponding relationship.
7. An apparatus for separating carrier-grade network address translation (CGN) forwarding and control, comprising:
a processor, and
a machine-readable storage medium storing machine executable instructions wherein by executing the machine executable instructions, the processor is caused to:
assign, by a Broadband Remote Access Server (BRAS) control plane (CP) device, a private network address and a private network port to a target user terminal accessing a BRAS data plane (DP) device when detecting that the target user terminal is successfully authenticated;
select, by the BRAS CP device, a target CGN card from one or more CGN cards in the BRAS DP device;
select, by the BRAS CP device, a target public network address and a target port block from idle public network addresses and port blocks on the target CGN card; and
send, by the BRAS CP device, CGN configuration information for the target user terminal to the BRAS DP device, wherein the CGN configuration information comprises identity information of the target CGN card, the private network address, the private network port, the target public network address and the target port block,
wherein, before selecting the target public network address and the target port block from the idle public network addresses and the port blocks on the target CGN card, determining, by the BRAS CP device, whether there are idle public network addresses and port blocks on the target CGN card.
8. The apparatus according to claim 7 , wherein when sending the CGN configuration information for the target user terminal to the BRAS DP device, the processor is further caused by the machine executable instructions to:
send a user flow table for the target user terminal to the BRAS DP device, wherein the CGN configuration information is carried in the user flow table.
9. The apparatus according to claim 7 , wherein the processor is further caused by the machine executable instructions to:
when there are idle public network addresses and port blocks on the target CGN card, select the target public network address and the target port block from the idle public network addresses and the port blocks on the target CGN card; and
when there are no idle public network addresses and port blocks on the target CGN card, select idle public network addresses for the target CGN card from a public network address pool based on a preconfigured allocation granularity, and assign the selected idle public network addresses and port blocks corresponding to the selected idle public network addresses to the target CGN card.
10. The apparatus according to claim 7 , wherein when selecting the target CGN card from one or more CGN cards in the BRAS DP device, the processor is further caused by the machine executable instructions to:
select the target CGN card from the CGN cards in the BRAS DP device in a polling manner when there are a plurality of CGN cards in the BRAS DP device.
11. The apparatus according to claim 10 , wherein after selecting the target CGN card from the CGN cards in the BRAS DP device in a polling manner, the processor is further caused by the machine executable instructions to:
record a corresponding relationship between a target interface and the selected CGN card, wherein the target user terminal accesses the BRAS DP device via the target interface on the BRAS DP device.
12. The apparatus according to claim 11 , wherein when detecting that another target user terminal accessing the BRAS DP device via the target interface is successfully authenticated,
selecting a target CGN card for the other target user terminal comprises:
selecting a CGN card corresponding to the target interface as the target CGN card based on the corresponding relationship.