CN101252523B - Message redirecting method, method and device for reverting redirecting message feature information - Google Patents
Message redirecting method, method and device for reverting redirecting message feature information Download PDFInfo
- Publication number
- CN101252523B CN101252523B CN200810087592XA CN200810087592A CN101252523B CN 101252523 B CN101252523 B CN 101252523B CN 200810087592X A CN200810087592X A CN 200810087592XA CN 200810087592 A CN200810087592 A CN 200810087592A CN 101252523 B CN101252523 B CN 101252523B
- Authority
- CN
- China
- Prior art keywords
- message
- redirection
- field
- characteristic information
- information
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Expired - Fee Related
Links
- 238000000034 method Methods 0.000 title claims abstract description 52
- 239000000284 extract Substances 0.000 claims abstract description 8
- 230000004048 modification Effects 0.000 claims description 20
- 238000012986 modification Methods 0.000 claims description 20
- 238000000605 extraction Methods 0.000 claims description 8
- 238000011084 recovery Methods 0.000 claims description 8
- 101150082208 DIABLO gene Proteins 0.000 claims 1
- 102100033189 Diablo IAP-binding mitochondrial protein Human genes 0.000 claims 1
- MHABMANUFPZXEB-UHFFFAOYSA-N O-demethyl-aloesaponarin I Natural products O=C1C2=CC=CC(O)=C2C(=O)C2=C1C=C(O)C(C(O)=O)=C2C MHABMANUFPZXEB-UHFFFAOYSA-N 0.000 claims 1
- 230000026676 system process Effects 0.000 abstract 1
- 238000012545 processing Methods 0.000 description 18
- 230000008569 process Effects 0.000 description 17
- 230000032683 aging Effects 0.000 description 8
- 238000010586 diagram Methods 0.000 description 7
- 230000007246 mechanism Effects 0.000 description 6
- 230000007547 defect Effects 0.000 description 5
- 238000001514 detection method Methods 0.000 description 3
- 238000004891 communication Methods 0.000 description 2
- 238000005034 decoration Methods 0.000 description 2
- 238000011161 development Methods 0.000 description 2
- 230000018109 developmental process Effects 0.000 description 2
- 230000000977 initiatory effect Effects 0.000 description 2
- 238000012544 monitoring process Methods 0.000 description 2
- 230000002265 prevention Effects 0.000 description 2
- 230000005540 biological transmission Effects 0.000 description 1
- 230000008859 change Effects 0.000 description 1
- 238000005516 engineering process Methods 0.000 description 1
- 238000001914 filtration Methods 0.000 description 1
Images
Landscapes
- Mobile Radio Communication Systems (AREA)
Abstract
The invention discloses a message redirection method used for an OAA system. The method includes that the NFC of the OAA system processes redirection rule matching towards the message which transfers through the NFC of the OAA system and extracts the characteristic information from the description information area of the redirection message which is successful in rule matching; the content of the specified field in the redirection message is modified to the characteristic information; the modified redirection message is transmitted to the IAC of the OAA system; meanwhile, the invention also provides a message redirection device, a method and a device used for reducing the redirection message. Based on the message redirection method, the key characteristic information is ensured to be reduced; the disadvantages of complex implementation and low efficiency found in the prior proposal are overcome.
Description
Technical Field
The present invention relates to the field of network technologies, and in particular, to a method for redirecting a message, a method for restoring redirected message feature information, and a device for restoring redirected message feature information in an Open Application Architecture (OAA) system.
Background
The basic network of data communication mainly comprises router and exchanger, which finish the transmission of data message. With the gradual development of data networks, services running on data networks are increasing, services supported by routers and switches are increasing, and all services processed by conventional devices are no longer suitable, so that some products special for processing services are generated, such as security products like firewalls, Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), and voice and wireless products.
In order to better support these services, traditional network devices (here, routers and switches) also push service boards (service cards) to specially process these services, and manufacturers of traditional network devices provide a set of software and hardware interfaces, which allow other manufacturers to provide hardware or software of boards (cards) or devices, insert or connect to traditional network devices, and cooperatively process these services, thereby exerting the advantages of each manufacturer in their respective fields, more effectively supporting these services, and reducing user investment.
The OAA is an open service architecture proposed based on the idea, an Application Control Forwarding Protocol (ACFP) is an ACFP designed based on the OAA architecture, an IPS/IDS card or IPS/IDS equipment in linkage is used as an ACFP client, and software of other manufacturers is operated on the IPS/IDS client to support IPS/IDS services. After receiving the IP packet from other interfaces, the router or switch mirrors or redirects the packet to the ACFP client by matching the linkage policy rule of the ACFP, and software on the ACFP client performs service processing such as monitoring and detection on the packet, and then feeds back the result to the router or switch through the linkage MIB according to the monitoring and detection result, so as to instruct the router or switch to perform corresponding processing, such as filtering some packets.
As shown in fig. 1, the ACFP-based OAA system can be divided into three parts:
network Forwarding Component (NFC): or called route switching element, is the main part of the router and switch, which has the complete router or switch function and is also the core of the user management control.
Independent Application Component (IAC): the Platform may also be called an Open Application Platform (OAP), and may be opened to a main body of third party cooperative development, mainly used to provide various unique business service functions;
connecting the interface: is an interface connector for a route switching component and an independent service component, and the components are used for connecting equipment of two different manufacturers together to form a whole.
In the OAA system, the forwarding function is completed by NFC, and the traffic addition processing is completed by IAC. For different applications, 4 operating modes are defined: a host (host) mode, a mirror (mirror) mode, a redirection (redirection) mode, and a pass-through (pass-through) mode, and communication between NFC and the IAC can be accomplished through one of these 4 modes or a combination of several of them.
The present invention is expanded only for the redirection mode, and only the meaning thereof is described below: in the redirection mode, the redirection packet is forwarded through an ethernet port of an Interface Link Component (ILC), and the NFC redirects a specific packet to the IAC according to a requirement during the packet forwarding process. After IAC processing, either discarded or passed. If the message passes through the interruption, the message is returned to the NFC, and the NFC continues to process from the initially interrupted place to complete subsequent forwarding work. This mode is mostly used for IPS (intrusion prevention system). That is, after the NFC redirects the packet to the IAC, the processing of the packet is interrupted, and when the IAC returns the packet or gives a processing instruction, the subsequent forwarding flow of the packet is restarted.
Specifically, after a data message is processed by each service module in NFC, the service module records some feature information, such as a session identifier (session ID), in a description information area (MBUF header) of the message to guide the service processing of a subsequent message, if the message needs to be redirected, after the message is redirected to an IAC, the IAC processes the message, and after the redirected message returns to NFC, the feature information cannot be identified or found, which causes an exception in the subsequent service processing. In fact, the information of the MBUF is not sent out of the NFC device, and it is the description information inside the device. And sending a clean message to the IAC, and reallocating a new MBUF after the message returns to the NFC equipment, so that the information recorded in the MBUF before NFC is not reserved. It can be seen that the MUBF may change before and after redirection, which may cause subsequent traffic handling exceptions.
In order to prevent the loss of the feature information in the redirection process, the applicant discloses a method for restoring the feature information of a redirection message in a patent document with application number 200610137617.3, and in summary, the method firstly stores the feature information of the message in NFC before redirection, adds identification information corresponding to the feature information in the message, finds out the stored feature information through the identification information in the message after the IAC returns the message to the NFC, and restores the feature information to the message; for the case that the IAC discards the redirect message, that is, when the redirect message is not returned, the NFC needs to maintain an aging table, and periodically ages the stored feature information.
The method disclosed by the 200610137617.3 patent document can solve the problem of loss of feature information in the redirection process, but the scheme also has certain defects, firstly, NFC needs to maintain a large amount of feature information, occupies original precious storage resources, and affects the operating speed of NFC, and in addition, for a redirection message which is not returned, the redirection message needs to be aged through an aging mechanism, thereby further aggravating the implementation complexity.
Disclosure of Invention
In view of this, the present invention provides a message redirection method, which can realize fast recovery of feature information when a redirected message returns to NFC, and avoid the defect of storing a large amount of feature information in NFC;
in addition, the invention also provides a method and a device for restoring the feature information of the redirection message, so as to solve the problem of complex realization caused by the existing scheme that a large amount of feature information needs to be stored in NFC and an aging mechanism is needed.
Therefore, the embodiment of the invention adopts the following technical scheme:
a message redirection method is used for an OAA system and comprises the following steps: the NFC of the OAA system carries out redirection rule matching on the message passing through the component, and extracts characteristic information from the description information area of the successfully matched redirection message; modifying the specific field content in the redirection message into the characteristic information; the specific field refers to a two-layer protocol field; and sending the modified redirection message to an IAC in the OAA system.
The two-layer protocol field comprises a source MAC field, a destination MAC field, a VLAN type field, a VLAN ID field or/and a VLAN priority.
The feature information is part of key information in the description information area, and includes: session ID, and/or QoS priority.
A message redirection device is located at the NFC side in an OAA system, and comprises: a redirection message determining unit, configured to perform redirection rule matching on a message flowing through NFC, and determine that a successfully matched message is a redirection message, where the redirection message determining unit is configured to: the characteristic information extraction unit is used for extracting characteristic information from the description information area of the redirection message; a field modification control unit, configured to modify a specific field content in the redirection message into the feature information; the specific field refers to a two-layer protocol field; and the redirection starting unit is used for sending the redirection message processed by the field modification control unit to the IAC in the OAA system.
The two-layer protocol field comprises an SMAC field, a DMAC field, a VLAN type field, a VLAN ID field or/and a VLAN priority field.
A method for restoring redirection message characteristic information is used for an OAA system, and comprises the following steps: the NFC of the OAA system carries out redirection rule matching on the message passing through the component, and extracts characteristic information from the description information area of the successfully matched redirection message; after the specific field content in the redirection message is modified into the characteristic information, the modified redirection message is sent to an IAC in an OAA system; the specific field refers to a two-layer protocol field; and receiving the processed redirection message returned from the IAC, searching the characteristic information from a specific field in the returned redirection message, and restoring the characteristic information to a description information area of the message.
After restoring the characteristic information to the description information area of the message, the method further comprises the following steps: and searching a forwarding table by using the IP header information of the message, and recovering the modified specific field content by using the matched forwarding table information.
A device for restoring redirected message feature information is located at an NFC side in an OAA system, and comprises: a redirection message determining unit, configured to perform redirection rule matching on a message flowing through NFC, and determine that a successfully matched message is a redirection message, further including: the characteristic information extraction unit is used for extracting characteristic information from the description information area of the redirection message; a field modification control unit, configured to modify a specific field content in the redirection message into the feature information; the specific field refers to a two-layer protocol field; the redirection starting unit is used for sending the redirection message processed by the field modification control unit to an IAC in the OAA system; a return message receiving unit, configured to receive, from the IAC, the redirect message processed by the IAC; and the characteristic information recovery unit is used for searching the characteristic information from the specific field in the redirection message received by the return message receiving unit and recovering the characteristic information to the description information area of the message.
Further comprising: and the field recovery unit is used for searching a preset forwarding table by using the IP header information of the message and recovering the modified specific field by using the matched forwarding table information.
The method and the device provided by the invention only need to rewrite certain fields in the message for storing the characteristic information, and when the message returns from the IAC, the characteristic information is restored, thereby overcoming the defect that the prior scheme stores a large amount of characteristic information in NFC.
Drawings
FIG. 1 is a schematic diagram of a prior art ACFP-based OAA system architecture;
fig. 2 is a schematic diagram of a redirect message structure;
FIG. 3 is a flow chart of a message redirection method of the present invention;
FIG. 4 is a flowchart of a method for restoring redirected packet feature information according to the present invention;
FIG. 5 is a diagram illustrating the feature information of a recovery redirection packet according to the present invention;
fig. 6 is a schematic structural diagram of a message redirection device according to the present invention;
fig. 7 is a schematic structural diagram of the apparatus for restoring redirect message feature information according to the present invention.
Detailed Description
Different from the scheme of storing the feature information in the NFC in the prior art, the feature information is directly stored in the specific field in the redirection message, wherein the IAC equipment is required to be ensured not to modify or delete the specific field, so that the feature information can be recovered from the fields in the redirection message returned by the IAC, and the normal processing and forwarding of the message in the NFC are ensured.
Therefore, the scheme adopted by the invention is to set the characteristic information in the security field of the message instead of storing the characteristic information in the NFC, so that the problem that the existing scheme occupies NFC storage resources can be solved, and the redirection message which is not returned from the IAC does not need to be processed by adopting an aging mechanism, thereby reducing the implementation complexity.
Fig. 2 is a schematic diagram of a structure of a message flowing through NFC. The whole message can be subdivided into the following parts:
[1] description information area (MBUF)
The description information area contains some characteristic information recorded by each service module of the NFC, for example: sessionID, and QoS priority, etc.
[2] Two-layer protocol field
Some link layer fields are included, such as source media access control address (SMAC), destination media access control address (DMAC), virtual local area network type (VLAN type), virtual local area network identification (VLAN ID), and VLAN priority, among others.
[3] IP header
Contains IP header information such as source address, destination address, source port number, and destination port number.
[4] IP payload (payload)
In OAA system, IAC does not process the two-layer protocol field, the invention uses the characteristic of OAA system to store the characteristic information in the two-layer protocol field, and ensures that the characteristic information is not modified or deleted by IAC.
The content of the key feature information which may be lost in the currently affected service is limited, and generally does not exceed 10 bytes, so that some two-layer protocol fields can fully meet the requirements, for example, 12 bytes of SMAC and DMAC are required, and the requirement for modifying the key feature information can be met.
Referring to fig. 3, a flow chart of a message redirection method provided by the present invention includes:
s301: the NFC carries out redirection rule matching on the message passing through the component, and extracts characteristic information from the description information area of the successfully matched redirection message;
s302: modifying the specific field content in the redirection message into the characteristic information;
s303: and sending the modified redirection message to the IAC.
As long as the security field that is not used on the IAC side can be used as the specific field, preferably, the specific field refers to a layer two protocol field, including: a source MAC field, a destination MAC field, a VLAN type field, a VLAN ID field, or/and, a VLAN priority. The above is only an example, and the specific field is not limited thereto, but the following is all described by taking a two-layer protocol field as an example.
The feature information is part of key information in the description information area, and includes: a session ID, and/or a quality of service (QoS) priority.
By adopting the message redirection method provided by the invention, a large amount of characteristic information does not need to be stored on NFC, and the characteristic information is directly added to the two-layer protocol field which is not used by the IAC, so that the characteristic information can be ensured to be re-analyzed by utilizing the returned redirection message, and the normal processing and forwarding of the message by utilizing the characteristic information in the follow-up process can be ensured.
For the redirection message discarded by the IAC, the process that the existing scheme needs to utilize an aging mechanism to process a large amount of stored feature information is also avoided.
Meanwhile, the present invention also provides a method for restoring the feature information of the redirected packet, referring to fig. 4, which is a flow chart of the method, and the method comprises the following steps:
s401: receiving a message by NFC;
s402: the NFC carries out redirection rule matching on the message, and if the matching is successful, the message is determined to be a redirection message;
s403: extracting characteristic information from a description information area of the redirection message;
s404: modifying the content of a two-layer protocol field in the redirection message into the characteristic information;
s405: sending the modified redirection message to the IAC;
s406: whether a processed redirection message returned from the IAC is received or not, if so, executing subsequent steps such as S407 and the like, and if not, ending the flow;
s407: finding the characteristic information from a two-layer protocol field in the returned redirection message, and restoring the characteristic information to a description information area of the message;
thus, the process of restoring the feature information is completed.
For the subsequent NFC processing of the message, the following steps are executed:
s408: searching a preset forwarding table by using the IP header information of the message, and recovering the modified two-layer protocol field content by using the matched forwarding table information, for example, recovering the SMAC and the DMAC;
s409: and forwarding the message according to the recovered two-layer protocol field information, namely executing a message forwarding process interrupted by the redirection process.
Referring to fig. 5, a schematic diagram of restoring the feature information of the redirect message is shown, in which firstly:
finding out the characteristic information needing protection, such as session ID, from the MBUF header;
then executing the following steps:
writing the searched characteristic information into a two-layer protocol field, for example, writing the session ID into SMAC and DMAC fields;
and then, the NFC sends the modified redirection message to the IAC. If the IAC does not return the redirection message, the process is ended, the complex processing process of aging the stored characteristic information by the existing scheme is avoided, and if the IAC returns the redirection message, the third step is executed:
finding protected feature information from the modified layer two protocol field, e.g., finding a session ID from the SMAC and DMAC fields;
because the two-layer protocol field is modified, the message cannot be normally processed and forwarded in NFC, the two-layer protocol field must be restored, for example, the SMAC and the DMAC in the SMAC and DMAC fields need to be restored, and at this time, the fourth step is executed:
searching a forwarding table in NFC by using IP header information, and acquiring the content in the rewritten two-layer protocol field of the message, for example, searching SMAC and DMAC;
finally, executing the fifth step:
and restoring the searched two-layer protocol field content into the rewritten two-layer protocol field, for example, writing the SMAC and the DMAC into the SMAC and the DMAC fields.
So far, the NFC can utilize the recovered two-layer protocol field to perform normal processing and forwarding on the packet.
The method for restoring the feature information of the redirection message only needs to rewrite some fields in the message for storing the feature information, and the feature information is restored after the message returns from the IAC, so that the defect that the prior scheme stores a large amount of feature information by NFC is overcome, and the redirection message which does not return does not need to be processed by adopting a complex aging mechanism, so that the method is simple to implement and can improve the efficiency.
Corresponding to the above message redirection method, the present invention provides a message redirection apparatus, which is located at an NFC side of an OAA system, and specifically, the apparatus may be an NFC device itself, or a functional entity integrated inside the NFC, and may be implemented by software, hardware, or a combination of software and hardware.
As can be seen from fig. 6, the apparatus includes: a redirect message determining unit 601, a feature information extracting unit 602, a field modification control unit 603, and a redirect initiating unit 604, wherein,
a redirection message determining unit 601, configured to perform redirection rule matching on a message flowing through NFC, and determine that a successfully matched message is a redirection message;
a feature information extraction unit 602, configured to extract feature information from a description information area of the redirection packet;
a field modification control unit 603, configured to modify a specific field content in the redirection message into the feature information;
a redirection starting unit 604, configured to send the redirection packet processed by the field modification control unit 603 to an IAC in the OAA system.
Wherein,
the feature information extracted by the feature information extraction unit 602 is part of key information in the description information area, and includes: session ID, and/or QoS priority.
The specific field controlled by the field modification control unit 603 is referred to as a two-layer protocol field, and includes: a source MAC field, a destination MAC field, a VLAN type field, a VLAN ID field, or/and, a VLAN priority.
The processing flow of the device is that firstly, the redirection message determining unit 601 performs redirection rule matching on the message to determine the redirection message, then the characteristic information extracting unit 602 extracts the characteristic information from the description information area of the redirection message, then the field modification control unit 603 modifies the field content of the two-layer protocol into the characteristic information, and finally, the redirection starting unit 604 sends the redirection message after the processing to the IAC.
By adopting the message redirection device provided by the invention, a large amount of characteristic information does not need to be stored on NFC, and the characteristic information is directly added to the two-layer protocol field which is not processed by the IAC, so that the characteristic information can be re-analyzed by utilizing the returned redirection message, and the normal processing and forwarding of the message by utilizing the characteristic information in the follow-up process can be ensured.
Corresponding to the above method for restoring redirected packet feature information, the present invention provides a device for restoring redirected packet feature information, where the device is located at an NFC side of an OAA system, and specifically, the device may be an NFC device itself, or a functional entity integrated inside an NFC, and may be implemented by software, hardware, or a combination of software and hardware.
As can be seen from fig. 7, the apparatus includes: a redirection message determining unit 701, a feature information extracting unit 702, a field modification control unit 703, a redirection initiating unit 704, a return message receiving unit 705, and a feature information recovering unit 706, wherein,
a redirection message determining unit 701, configured to perform redirection rule matching on a message flowing through NFC, and determine that a successfully matched message is a redirection message;
a feature information extraction unit 702, configured to extract feature information from a description information area of the redirection packet;
a field modification control unit 703, configured to modify a specific field content in the redirection message into the feature information;
a redirection starting unit 704, configured to send the redirection packet processed by the field modification control unit 603 to an IAC in the OAA system;
a return message receiving unit 705, configured to receive, from the IAC, a redirect message processed by the IAC;
a feature information recovery unit 706, configured to search the feature information from the specific field in the redirection message received by the return message receiving unit 705, and recover the feature information to the description information area of the message.
Preferably, the apparatus further comprises:
a field recovery unit 707, configured to search a preset forwarding table using the IP header information of the packet, and recover the modified specific field using the matched forwarding table information. Wherein,
the feature information extracted by the feature information extraction unit 602 is part of key information in the description information area, and includes: session ID, and/or QoS priority.
The specific field controlled by the field modification control unit 603 is referred to as a two-layer protocol field, and includes: a source MAC field, a destination MAC field, a VLAN type field, a VLAN ID field, or/and, a VLAN priority.
The processing flow of the device is that firstly, a redirection message determining unit 701 performs redirection rule matching on the message to determine the redirection message, then a characteristic information extracting unit 702 extracts characteristic information from a description information area of the redirection message, then a field modification control unit 703 modifies the field content of a two-layer protocol into the characteristic information, and then a redirection starting unit 704 sends the processed redirection message to an IAC; then, if the IAC does not return the redirect message, the process is ended, otherwise, the return message receiving unit 705 receives the redirect message processed by the IAC from the IAC, and then the feature information recovering unit 706 searches the feature information from the two-layer protocol field in the return redirect message and recovers it to the description information area of the message, and finally, the field recovering unit 707 searches the preset forwarding table by using the IP header information of the message and recovers the modified two-layer protocol field by using the matched forwarding table information.
The device for restoring the feature information of the redirected message only needs to rewrite certain fields in the message for storing the feature information, and the feature information is restored after the message is returned from the IAC, so that the defect that the prior scheme stores a large amount of feature information by NFC is overcome, and the redirected message which is not returned does not need to be processed by adopting a complex aging mechanism, so that the device is simple to implement and can improve the efficiency.
The foregoing is only a preferred embodiment of the present invention, and it should be noted that, for those skilled in the art, various modifications and decorations can be made without departing from the principle of the present invention, and these modifications and decorations should also be regarded as the protection scope of the present invention.
Claims (9)
1. A message redirection method is used for an Open Application Architecture (OAA) system, and is characterized by comprising the following steps:
a network forwarding component NFC of the OAA system carries out redirection rule matching on the message passing through the component, and extracts characteristic information from a description information area of the successfully matched redirection message;
modifying the specific field content in the redirection message into the characteristic information; the specific field refers to a two-layer protocol field;
and sending the modified redirection message to an independent service component IAC in the OAA system.
2. The method of claim 1,
the two-layer protocol field comprises a source MAC field, a destination MAC field, a VLAN type field, a VLAN ID field or/and a VLAN priority.
3. The method according to claim 1 or 2, wherein the characteristic information is part of key information in the description information area, and includes: session ID, or/and QoS priority.
4. A message redirection device is located at the NFC side in an OAA system, and comprises: a redirection message determining unit, configured to perform redirection rule matching on a message flowing through NFC, and determine that a successfully matched message is a redirection message, where the redirection message determining unit is further configured to:
the characteristic information extraction unit is used for extracting characteristic information from the description information area of the redirection message;
a field modification control unit, configured to modify a specific field content in the redirection message into the feature information; the specific field refers to a two-layer protocol field;
and the redirection starting unit is used for sending the redirection message processed by the field modification control unit to the IAC in the OAA system.
5. The apparatus of claim 4, wherein the layer two protocol field comprises a SMAC field, a DMAC field, a VLAN type field, a VLAN ID field, or/and a VLAN priority field.
6. A method for restoring redirection message characteristic information is used for an OAA system, and is characterized by comprising the following steps:
the NFC of the OAA system carries out redirection rule matching on the message passing through the component, and extracts characteristic information from the description information area of the successfully matched redirection message;
after the specific field content in the redirection message is modified into the characteristic information, the modified redirection message is sent to an IAC in an OAA system; the specific field refers to a two-layer protocol field;
and receiving the processed redirection message returned from the IAC, searching the characteristic information from a specific field in the returned redirection message, and restoring the characteristic information to a description information area of the message.
7. The method of claim 6, further comprising, after restoring the feature information to the descriptor region of the packet:
and searching a forwarding table by using the IP header information of the message, and recovering the modified specific field content by using the matched forwarding table information.
8. A device for restoring redirected message feature information is located at an NFC side in an OAA system, and comprises: a redirection message determining unit, configured to perform redirection rule matching on a message flowing through NFC, and determine that a successfully matched message is a redirection message, where the redirection message determining unit is further configured to:
the characteristic information extraction unit is used for extracting characteristic information from the description information area of the redirection message;
a field modification control unit, configured to modify a specific field content in the redirection message into the feature information; the specific field refers to a two-layer protocol field;
a redirection starting unit, configured to send the redirection packet processed by the field modification control unit to an IAC in the OAA system;
a return message receiving unit, configured to receive, from the IAC, the redirect message processed by the IAC;
and the characteristic information recovery unit is used for searching the characteristic information from the specific field in the redirection message received by the return message receiving unit and recovering the characteristic information to the description information area of the message.
9. The apparatus of claim 8, further comprising:
and the field recovery unit is used for searching the forwarding table by using the IP header information of the message and recovering the modified specific field by using the matched forwarding table information.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN200810087592XA CN101252523B (en) | 2008-04-18 | 2008-04-18 | Message redirecting method, method and device for reverting redirecting message feature information |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN200810087592XA CN101252523B (en) | 2008-04-18 | 2008-04-18 | Message redirecting method, method and device for reverting redirecting message feature information |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN101252523A CN101252523A (en) | 2008-08-27 |
| CN101252523B true CN101252523B (en) | 2011-07-20 |
Family
ID=39955716
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN200810087592XA Expired - Fee Related CN101252523B (en) | 2008-04-18 | 2008-04-18 | Message redirecting method, method and device for reverting redirecting message feature information |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN101252523B (en) |
Families Citing this family (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102301663B (en) | 2011-07-06 | 2013-11-06 | 华为技术有限公司 | Message processing method and associated devices |
| US9357332B2 (en) * | 2012-06-08 | 2016-05-31 | Broadcom Corporation | Near field communication application identification routing in card emulation |
| CN102932246B (en) * | 2012-10-15 | 2016-03-23 | 杭州华三通信技术有限公司 | Operation flow method of adjustment and device in a kind of open architecture |
| CN103780481B (en) | 2012-10-18 | 2017-10-27 | 中兴通讯股份有限公司 | The method and device of message modification and forwarding in a kind of data communication network |
| CN103475516B (en) * | 2013-09-04 | 2017-03-15 | 杭州华三通信技术有限公司 | Drainage recognition methods and route switching part based on open application architecture |
| CN105282049B (en) * | 2014-06-18 | 2019-09-27 | 中国移动通信集团公司 | Method and device for processing IP data packets |
| CN107404439B (en) | 2016-05-18 | 2020-02-21 | 华为技术有限公司 | Method and system, network device and control device for redirecting data flow |
| CN108259378B (en) * | 2017-03-30 | 2021-09-21 | 新华三技术有限公司 | Message processing method and device |
Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1953398A (en) * | 2006-09-25 | 2007-04-25 | 杭州华为三康技术有限公司 | Network transmitting part of open application architecture and method to collocate independent service part |
| CN1956415A (en) * | 2006-10-31 | 2007-05-02 | 杭州华为三康技术有限公司 | Method for reducing redirected message characteristic information |
-
2008
- 2008-04-18 CN CN200810087592XA patent/CN101252523B/en not_active Expired - Fee Related
Patent Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1953398A (en) * | 2006-09-25 | 2007-04-25 | 杭州华为三康技术有限公司 | Network transmitting part of open application architecture and method to collocate independent service part |
| CN1956415A (en) * | 2006-10-31 | 2007-05-02 | 杭州华为三康技术有限公司 | Method for reducing redirected message characteristic information |
Also Published As
| Publication number | Publication date |
|---|---|
| CN101252523A (en) | 2008-08-27 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN101252523B (en) | Message redirecting method, method and device for reverting redirecting message feature information | |
| US7406037B2 (en) | Packet forwarding apparatus with redundant routing module | |
| JP4115721B2 (en) | Classification and tagging rules for switching nodes | |
| EP2068498B1 (en) | Method and network device for communicating between different components | |
| EP2033111B1 (en) | Implementation of reflexive access control lists on distributed platforms | |
| WO2006074596A1 (en) | A route switching method and a network node device | |
| WO2004075485A1 (en) | Network system, spanning tree configuration method, configuration program, and spanning tree configuration node | |
| WO2009033428A1 (en) | Method, system and device for removing media access control address | |
| CN102447618A (en) | Route switching method in LISP network and apparatus thereof | |
| CN106576108B (en) | Communication method, equipment and system in communication system | |
| CN102571613A (en) | Method and network device for message forwarding | |
| CN110830371A (en) | Message redirection method and device, electronic equipment and readable storage medium | |
| EP1699247B1 (en) | Multiple isp local area network egress selecting method | |
| CN102137024A (en) | Message processing method, exit routing device and border routing device | |
| CN102769557B (en) | A kind of transmission method of business datum message and device | |
| CN101262429B (en) | A system and method for realizing virtual private network communication | |
| CN102420767B (en) | Method and device for switching forwarding paths, and network equipment | |
| CN102761534A (en) | Method and device for realizing transparent proxy of media access control layer | |
| CN100446509C (en) | Method for realizing correct forwarding of redirection message, first component and second component | |
| CN108737273B (en) | Message processing method and device | |
| CN101616069B (en) | Information restoration method based on graceful restart and router | |
| WO2013107056A1 (en) | Message forwarding method and device | |
| JP4383216B2 (en) | Communication terminal | |
| JP4040045B2 (en) | Data transfer device | |
| CN102142931B (en) | Method, device and system for preventing packet loss of E-TRUNK (Enhanced-Trunk) |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant | ||
| CP03 | Change of name, title or address |
Address after: 310052 Binjiang District Changhe Road, Zhejiang, China, No. 466, No. Patentee after: NEW H3C TECHNOLOGIES Co.,Ltd. Address before: 310053 Hangzhou hi tech Industrial Development Zone, Zhejiang province science and Technology Industrial Park, No. 310 and No. six road, HUAWEI, Hangzhou production base Patentee before: HANGZHOU H3C TECHNOLOGIES Co.,Ltd. |
|
| CP03 | Change of name, title or address | ||
| CF01 | Termination of patent right due to non-payment of annual fee |
Granted publication date: 20110720 |
|
| CF01 | Termination of patent right due to non-payment of annual fee |