Back to results
US 12,726,513 B2Granted
Method and apparatus for route verification and data sending, device, and storage medium
AssigneeHuawei Technologies Co., Ltd.
InventorsShunwan Zhuang, Haibo Wang, Yunan Gu
Life of this patent
Estimating the term…
Abstract
A method includes a network device that obtains Border Gateway Protocol (BGP) route information, where the BGP route information includes a target route prefix; obtains, based on the target route prefix, a region identifier of a region to which the target route prefix actually belongs; and verifies the BGP route information based on the target route prefix and the region identifier of the region to which the target route prefix actually belongs.
Claims20
A method implemented by processing circuitry and comprising:
- obtaining a stored route origin authorization (ROA) database comprising a correspondence between a target route prefix and a first region identifier;
- obtaining Border Gateway Protocol (BGP) route information comprising the target route prefix, wherein the target route prefix is a prefix of a network address;
- obtaining, based on the target route prefix, the first region identifier of a region to which the target route prefix belongs by:
- detecting network devices through which the target route prefix passes to obtain a subset of the network devices;
- performing traceroute on the target route prefix to identify the subset of the network devices;
- determining a region identifier of a region that a starting network device in the subset of the network devices belongs and that the target route prefix passes through;
- and
- setting the region identifier of the starting network device as the first region identifier;
- and
- verifying, based on the target route prefix and the first region identifier, the BGP route information by:
- determining, from the ROA database, a first entry matching the target route prefix;
- and
- verifying, based on the first entry, the BGP route information.
10 more elements
A method implemented by a server comprising processing circuitry, wherein the method comprises:
- obtaining a target route prefix and target region indication information, wherein the target region indication information comprises a region identifier or indication information indicating that the target route prefix is applicable to any region, and wherein the target region indication information is obtained by traceroute on the target route prefix;
- and
- sending, to a network device, the target route prefix and the target region indication information for storage in a route origin authorization (ROA) database and to permit the network device to:
- detect network devices through which the target route prefix passes to obtain a subset of the network devices;
- perform traceroute on the target route prefix to identify the subset of the network devices;
- determine a region identifier of a region that a starting network device in the subset of the network devices belongs and that the target route prefix passes through;
- and
- set the region identifier of the starting network device as a first region identifier;
- and
- verifying a Border Gateway Protocol (BGP) route information, wherein the target route prefix is a prefix of a network address, wherein the ROA database comprises a correspondence between the target route prefix and the first region identifier, and wherein the network device is in a network that is based on BGP.
7 more elements
An apparatus comprising:
- at least one memory configured to store instructions;
- and
- at least one processor coupled to the at least one memory and configured to execute the instructions to cause the apparatus to:
- obtain a stored route origin authorization (ROA) database comprising a correspondence between a target route prefix and a first region identifier;
- obtain Border Gateway Protocol (BGP) route information comprising the target route prefix, wherein the target route prefix is a prefix of a network address;
- obtain, based on the target route prefix, a region identifier of a region to which the target route prefix belongs by:
- detecting network devices through which the target route prefix passes to obtain a subset of the network devices;
- performing traceroute on the target route prefix to identify the subset of the network devices;
- determining a region identifier of a region that a starting network device in the subset of the network devices belongs and that the target route prefix passes through;
- and
- setting the region identifier of the starting network device as the first region identifier;
- and
- verify, based on the target route prefix and the region identifier, the BGP route information by:
- determining, from the stored route origin authorization (ROA) database, a first entry matching the target route prefix;
- and
- verifying, based on the first entry, the BGP route information.
13 more elements
An apparatus comprising:
- at least one memory configured to store instructions;
- and
- at least one processor coupled to the at least one memory and configured to execute the instructions to cause the apparatus to:
- obtain a target route prefix and target region indication information, wherein the target region indication information comprises a region identifier or indication information indicating that the target route prefix is applicable to any region, and wherein the target region indication information is obtained by traceroute on the target route prefix;
- and
- send, to a network device, the target route prefix and the target region indication information for storage in a route origin authorization (ROA) database and to permit the network device to:
- detect network devices through which the target route prefix passes to obtain a subset of the network devices;
- perform traceroute on the target route prefix to identify the subset of the network devices;
- determine a region identifier of a region that a starting network device in the subset of the network devices belongs and that the target route prefix passes through;
- and
- set the region identifier of the starting network device as a first region identifier;
- and
- verify a Border Gateway Protocol (BGP) route information, wherein the target route prefix is a prefix of a network address, wherein the ROA database comprises a correspondence between the target route prefix and the first region identifier, and wherein the network device is any network device in a network based on BGP.
10 more elements
Dependencies are inferred from the claim text.