Method for generating detection policy, device, and system
This application relates to methods, devices, and systems for generating a detection policy. An example method can be applied to a controller. In the example method, the controller obtains path information, where the path information includes information about a first network device, and the first network device belongs to a network device through which a packet passes from a source end to a destination end. The controller generates a detection policy for a second network device based on the path information and delivers the detection policy to the second network device, where the second network device is the same as or different from the first network device.
1 . A method for generating a detection policy, applied to a controller, wherein the method comprises:
obtaining, by the controller, path information, wherein the path information comprises information about a first network device, the first network device belongs to a network device through which a packet passes from a source end to a destination end, the obtaining, by the controller, path information comprises receiving, by the controller, the path information sent from a broadband network gateway control plane (BNG-CP) device, the BNG-CP device is connected to a user plane selection function (UPSF), the UPSF is connected to the controller, and the obtaining, by the controller, path information comprises receiving, by the controller, the path information sent by the BNG-CP device via the UPSE;
generating, by the controller, a detection policy for a second network device based on the path information; and
delivering, by the controller, the detection policy to the second network device, wherein the second network device is the same as or different from the first network device.
2 . The method according to claim 1 , wherein the second network device is different from the first network device, and the method further comprises:
determining, by the controller, information about the second network device based on the information about the first network device.
3 . The method according to claim 1 , wherein the second network device is different from the first network device, and the path information further comprises information about the second network device.
4 . The method according to claim 1 , wherein the source end is connected to a spine node via a first leaf node, the spine node is connected to a second leaf node, the second leaf node is connected to the destination end, the destination end is a broadband network gateway user plane (BNG-UP) device, and the first network device is the first leaf node.
5 . The method according to claim 1 , wherein the source end is connected to at least one intermediate network device via a selection function (SF) device, one network device in the at least one intermediate network device is connected to the destination end, and the destination end is a broadband network gateway user plane (BNG-UP) device; and
the path information comprises information about the SF device.
6 . The method according to claim 1 , wherein the path information further comprises one or more of the following: a media access control (MAC) address of user equipment, a private internet protocol (IP) address of the user equipment, a public IP address, or a port of the user equipment.
7 . The method according to claim 1 , wherein the path information is carried in a detection request, and the obtaining, by the controller, path information comprises:
receiving, by the controller, the detection request sent by a broadband network gateway control plane (BNG-CP) device; and
obtaining the path information based on the detection request.
8 . The method according to claim 1 , wherein the obtaining, by the controller, path information comprises:
receiving, by the controller, a configuration command, wherein the configuration command comprises information about first user equipment;
sending, by the controller, a query request to a broadband network gateway control plane (BNG-CP) device based on the information about the first user equipment; and
receiving, by the controller, the path information returned by the BNG-CP device based on the query request, wherein the path information corresponds to the first user equipment.
9 . A network device, comprising one or more processors and one or more memories that are coupled to the one or more processors and store programming instructions for execution by the one or more processors to cause the network device to perform operations comprising:
obtaining path information, wherein the path information comprises information about a first network device, the first network device belongs to a network device through which a packet passes from a source end to a destination end, the obtaining path information comprises receiving the path information sent from a broadband network gateway control plane (BNG-CP) device, the BNG-CP device is connected to a user plane selection function (UPSF), the UPSF is connected to the network device, and the obtaining path information comprises receiving the path information sent by the BNG-CP device via the UPSE;
generating a detection policy for a second network device based on the path information; and
delivering the detection policy to the second network device, wherein the second network device is the same as or different from the first network device.
10 . The network device according to claim 9 , wherein the second network device is different from the first network device, and the operations further comprise:
determine information about the second network device based on the information about the first network device.
11 . The network device according to claim 9 , wherein the second network device is different from the first network device, and the path information further comprises information about the second network device.
12 . The network device according to claim 9 , wherein the source end is connected to a spine node via a first leaf node, the spine node is connected to a second leaf node, the second leaf node is connected to the destination end, the destination end is a broadband network gateway user plane (BNG-UP) device, and the first network device is the first leaf node.
13 . The network device according to claim 9 , wherein the source end is connected to at least one intermediate network device via a selection function (SF) device, one network device in the at least one intermediate network device is connected to the destination end, and the destination end is a broadband network gateway user plane (BNG-UP) device; and
the path information comprises information about the SF device.
14 . The network device according to claim 9 , wherein the path information further comprises one or more of the following: a media access control (MAC) address of user equipment, a private internet protocol (IP) address of the user equipment, a public IP address, or a port of the user equipment.
15 . The network device according to claim 9 , wherein the path information is carried in a detection request, and the operations further comprise:
receiving the detection request sent by a broadband network gateway control plane (BNG-CP) device; and
obtaining the path information based on the detection request.
16 . A network device, comprising one or more processors and one or more memories that are coupled to the one or more processors and store programming instructions for execution by the one or more processors to cause the network device to perform operations comprising:
sending path information to a controller, wherein the path information comprises information about a first network device, and the first network device belongs to a network device through which a packet passes from a source end to a destination end, the sending path information to a controller comprises sending the path information from a broadband network gateway control plane (BNG-CP) device to the controller via a user plane selection function (UPSF), the BNG-CP device is connected to the UPSF, and the UPSF is connected to the controller.