Traffic processing method, apparatus, and network device

1. A traffic processing method implemented by a network device, wherein the traffic processing method comprises:

obtaining Border Gateway Protocol (BGP) flow specification (FlowSpec) information, wherein the BGP FlowSpec information comprises a filter condition and an action, wherein the BGP FlowSpec information indicates to perform the action on first traffic matching the filter condition, and wherein the filter condition comprises a first attribute of a first destination address; and

generating, based on the BGP FlowSpec information, a first forwarding information base (FIB) table entry,

wherein the first FIB table entry comprises a first correspondence between a first prefix and the action,

wherein the first FIB table entry instructs the network device to perform the action on second traffic matching the first prefix, and

wherein a second attribute of the first prefix is the same as the first attribute.

2. The traffic processing method of claim 1 , further comprising:

receiving a packet;

determining that a second destination address of the packet matches the first prefix; and

processing, based on the action, the packet.

3. The traffic processing method of claim 1 , wherein obtaining the BGP FlowSpec information comprises receiving a control packet from a control and management device, and wherein the control packet carries the BGP FlowSpec information.

4. The traffic processing method of claim 1 , wherein obtaining the BGP FlowSpec information comprises obtaining the BGP FlowSpec information from local configuration information.

5. The traffic processing method of claim 1 , wherein the first attribute is an autonomous system (AS) number to which the first destination address belongs or a set of AS numbers corresponding to the first destination address.

6. The traffic processing method of claim 1 , wherein the first attribute is a community attribute corresponding to the first destination address.

7. The traffic processing method of claim 1 , wherein the action comprises redirection, packet discarding, rate limiting, or quality of service (QoS) level setting.

8. The traffic processing method of claim 1 , wherein generating the first FIB table entry comprises:

generating, based on the BGP FlowSpec information, a FlowSpec routing table entry, wherein a first route selection priority of the FlowSpec routing table entry is higher than a second route selection priority of another routing table entry, and wherein the other routing table entry is based on another routing protocol or static configuration;

sending the FlowSpec routing table entry to a route management (RM) routing table, wherein the FlowSpec routing table entry is configured to be used as an RM routing table entry in the RM routing table; and

sending, based on route selection properties of entries in the RM routing table, the RM routing table entry to a FIB table, and

wherein the RM routing table entry is configured to be used as the first FIB table entry.

9. The traffic processing method of claim 8 , further comprising:

obtaining withdrawal information, wherein the withdrawal information indicates to perform a withdrawal operation on the BGP FlowSpec information; and

withdrawing, based on the withdrawal information, the FlowSpec routing table entry.

10. The traffic processing method of claim 9 , further comprising:

deleting a second FIB table entry corresponding to the BGP FlowSpec information; or

setting a third FIB table entry corresponding to the BGP FlowSpec information to be invalid.

11. The traffic processing method of claim 8 , wherein the other routing protocol comprises BGP or an interior gateway protocol (IGP).

12. The traffic processing method of claim 1 , wherein generating the first FIB table entry comprises:

generating, based on the BGP FlowSpec information, a first route management (RM) routing table entry, wherein a first route selection priority of the first RM routing table entry is higher than a second route selection priority of a second RM routing table entry, and wherein the second RM routing table entry is based on another routing protocol or static configuration; and

sending, based on route selection priorities of the first RM routing table entry and the second RM routing table entry, the first RM routing table entry to a FIB table,

wherein the first RM routing table entry is configured to be used as the first FIB table entry.

13. The traffic processing method of claim 12 , further comprising:

obtaining withdrawal information, wherein the withdrawal information indicates to perform a withdrawal operation on the BGP FlowSpec information; and

withdrawing, based on the withdrawal information, the first RM routing table entry.

14. The traffic processing method of claim 1 , further comprising generating, based on the BGP FlowSpec information, a second FIB table entry, wherein the second FIB table entry comprises a second correspondence between a second prefix and the action, wherein the second FIB table entry instructs the network device to perform the action on third traffic matching the second prefix, wherein a third attribute of the second prefix is the same as the first attribute, and wherein the second prefix is different from the first prefix.

15. A network device, comprising:

a memory configured to store instructions; and

a processor coupled to the memory and configured to execute the instructions to:

obtain Border Gateway Protocol (BGP) flow specification (FlowSpec) information, wherein the BGP FlowSpec information comprises a filter condition and an action, wherein the BGP FlowSpec information indicates to perform the action on first traffic matching the filter condition, and wherein the filter condition comprises a first attribute of a first destination address; and

generate, based on the BGP FlowSpec information, a first forwarding information base (FIB) table entry,

wherein the first FIB table entry comprises a first correspondence between a first prefix and the action,

wherein the first FIB table entry instructs the network device to perform the action on second traffic matching the first prefix, and

wherein a second attribute of the first prefix is the same as the first attribute.

16. The network device of claim 15 , wherein the processor is further configured to execute the instructions to:

receive a packet;

determine that a second destination address of the packet matches the first prefix; and

process, based on the action, the packet.

17. The network device of claim 15 , wherein the processor is further configured to execute the instructions to receive a control packet from a control and management device, wherein the control packet carries the BGP FlowSpec information, and wherein the control and management device comprises a controller or a forwarding device.

18. The network device of claim 15 , wherein the processor is further configured to execute the instructions to obtain the BGP FlowSpec information from local configuration information.

19. The network device of claim 15 , wherein the first attribute is an autonomous system (AS) number to which the first destination address belongs or a set of AS numbers corresponding to the first destination address.

20. A computer program product comprising instructions stored on a non-transitory computer-readable medium that, when executed by a processor, cause a network device to:

obtain Border Gateway Protocol (BGP) flow specification (FlowSpec) information, wherein the BGP FlowSpec information comprises a filter condition and an action, wherein the BGP FlowSpec information indicates to perform the action on first traffic matching the filter condition, and wherein the filter condition comprises a first attribute of a first destination address; and

generate, based on the BGP FlowSpec information, a first forwarding information base (FIB) table entry,

wherein the first FIB table entry comprises a first correspondence between a first prefix and the action,

wherein the first FIB table entry instructs the network device to perform the action on second traffic matching the first prefix, and

wherein a second attribute of the first prefix is the same as the first attribute.