Packet processing method, network device, and network system
A packet processing method, a network device, and a network system are provided, which are related to the field of communication technologies. According to the method, an intermediate node updates a source IP address of a packet based on an IP address that belongs to a local end in an endpoint IP address of a connection, and updates a destination IP address of the packet based on an IP address that belongs to a remote end in the endpoint IP address of the connection. Therefore, in a scenario in which an SR path crosses underlay transport networks in a plurality of different routing domains, a problem that a packet is discarded because a source IP address is always an IP address of a head end and URPF check fails is avoided.
1. A packet processing method comprising:
receiving, by a first network device, a first packet from a second network device,
wherein an internet protocol (IP) address of the first packet comprises an endpoint IP address of a first connection,
wherein the first packet comprises a segment identifier (SID) that indicates a second connection, and
wherein the first connection is a connection from the second network device to the first network device, and the second connection is a connection from the first network device to a third network device;
performing, by the first network device, endpoint behaviors associated with the SID on the first packet to obtain a second packet,
wherein a source IP address of the second packet is an IP address that belongs to the first network device in an endpoint IP address of the second connection, and
wherein a destination IP address of the second packet is an IP address that belongs to the third network device in the endpoint IP address of the second connection; and
sending, by the first network device, the second packet to the third network device.
2. The method according to claim 1 , wherein the endpoint IP address of the first connection is an internet protocol version 6 (IPv6) address, the first packet comprises a segment routing header (SRH), and the SID is located in the SRH.
3. The method according to claim 1 , wherein the endpoint IP address of the first connection is an internet protocol version 4 (IPv4) address, the first packet comprises a segment routing header (SRH), and the SID is located in the SRH.
4. The method according to claim 3 , wherein the endpoint IP address of the first connection is located in an IPv4 header of the first packet, wherein the first packet comprises a protocol type associated with the SRH, and
wherein the protocol type is located in a generic routing encapsulation (GRE) header of the first packet, or the protocol type is located in a virtual extensible local area network (VXLAN) header of the first packet, or the protocol type is located in the IPv4 header of the first packet.
5. The method according to claim 1 , wherein the endpoint IP address of the second connection is an internet protocol version 6 (IPv6) address or an internet protocol version 4 (IPv4) address.
6. The method according to claim 1 , wherein the endpoint IP address of the first connection and/or the endpoint IP address of the second connection each are/is an IP address that is of a wide area network (WAN) interface and that is assigned by an operator of an underlay network.
7. The method according to claim 1 , wherein the first connection and/or the second connection each are/is a connection between different sites.
8. The method according to claim 1 , wherein before receiving, by the first network device, the first packet from the second network device, the method further comprises:
sending, by the first network device, the endpoint IP address of the second connection and/or the endpoint IP address of the first connection to a controller device.
9. The method according to claim 8 , wherein sending, by the first network device, the endpoint IP address of the second connection and/or the endpoint IP address of the first connection to the controller device comprises:
generating, by the first network device, a border gateway protocol-link state (BGP-LS) packet that comprises the endpoint IP address of the second connection and/or the endpoint IP address of the first connection, and wherein the BGP-LS packet further comprises an identifier of a software-defined wide area network (SD-WAN) protocol; and
sending, by the first network device, the BGP-LS packet to the controller device.
10. The method according to claim 9 , wherein before receiving, by the first network device, the first packet from the second network device, the method further comprises at least one of the following:
sending, by the first network device, an identifier of a site in which the first network device is located to the controller device; or
sending, by the first network device, a connectivity status of the first connection and/or a connectivity status of the second connection to the controller device; or
sending, by the first network device, service-level agreement (SLA) information of the first connection and/or the second connection to the controller device.
11. The method according to claim 1 , wherein before receiving, by the first network device, the first packet from the second network device, the method further comprises receiving, by the first network device, the SID from the controller device.
12. The method according to claim 1 , wherein the SID is an SID of an End.X-SD-WAN type.
13. A path determining method comprising:
obtaining, by a controller device, endpoint IP addresses of a plurality of connections;
determining, by the controller device, a segment routing (SR) path based on the endpoint IP addresses of the plurality of connections,
wherein the SR path comprises a first connection and a second connection in from the plurality of connections, and
wherein the first connection is a connection from a first network device to a second network device, and the second connection is a connection from the second network device to a third network device; and
sending, by the controller device, an SR policy to the first network device, wherein the SR policy indicates the SR path.
14. The method according to claim 13 , wherein the SR policy comprises a first segment identifier (SID) that indicates the second connection.
15. The method according to claim 14 , further comprising:
assigning, by the controller device, the first SID to the second connection, and assigning a second SID to the first connection,
wherein the first SID indicates the second connection, and the second SID indicates the first connection; and
sending, by the controller device, the first SID to the second network device, and sending the second SID to the first network device.
16. The method according to claim 13 , wherein each of the plurality of connections is a connection between different sites, and determining, by the controller device, the SR path based on the endpoint IP addresses of the plurality of connections comprises:
determining, by the controller device, the SR path based on the endpoint IP addresses of the plurality of connections by using sites as path orchestration objects.
17. A network device that is a first network device, wherein the network device comprises:
a processor coupled to a memory,
the memory storing at least one computer program instruction and, which upon being executed by the processor, cause the network device to:
receive a first packet from a second network device,
wherein an internet protocol (IP) address of the first packet comprises an endpoint IP address of a first connection,
wherein the first packet comprises a segment identifier (SID) that indicates a second connection, and
wherein the first connection is a connection from the second network device to the first network device, and the second connection is a connection from the first network device to a third network device;
perform endpoint behaviors associated with the SID on the first packet to obtain a second packet,
wherein a source IP address of the second packet is an IP address that belongs to the first network device in an endpoint IP address of the second connection, and
wherein a destination IP address of the second packet is an IP address belonging to the third network device in the endpoint IP address of the second connection; and
send the second packet to the third network device.
18. The network device according to claim 17 , wherein the at least one computer program instruction, upon being executed by the processor, further cause the network device to:
send the endpoint IP address of the second connection and/or the endpoint IP address of the first connection to a controller device.
19. The network device according to claim 18 , wherein the at least one computer program instruction, upon being executed by the processor, further cause the network device to:
generate a border gateway protocol-link state (BGP-LS) packet that comprises the endpoint IP address of the second connection and/or the endpoint IP address of the first connection, and further comprises an identifier of a software-defined wide area network (SD-WAN) protocol; and
send the BGP-LS packet to the controller device.
20. The network device according to claim 17 , wherein the at least one computer program instruction, upon being executed by the processor, further cause the network device to perform at least one of the following:
send an identifier of a site in which the first network device is located to the controller device; or
send a connectivity status of the first connection and/or a connectivity status of the second connection to the controller device; or
send service-level agreement (SLA) information of the first connection and/or the second connection to the controller device.