Patent ID: 8892725
Filing Date: 2014-11-18
Classification: H04L

Abstract:
1. A method for detecting Network Anomaly in network architecture based on locator/identifier split, wherein the network architecture comprises a plurality of sites, and each of the plurality of sites comprises a plurality of transmitters, a plurality of receiver, an Ingress Tunnel Router (ITR), and an Egress Tunnel Router (ETR), the plurality of transmitter, the plurality of receiver, the ITR, and the ETR which are located within one site having one Endpoint Identity (EID)-prefix, the method comprising: receiving, by the ITR, a data packet from the transmitter, wherein the data packet comprises the EID-prefix of the receiver which is to receive the data packet; querying, by the ITR, a corresponding EID-to-Routing Locator (RLOC) in respect to the EID-prefix through an EID-to-RLOC Cache which records mapping relationship of the EID-prefix and RLOC, wherein the EID-to-RLOC Cache is updated by the ITR according to the information indicating the validity of the RLOC which is responded to a Map-Request message by the ETR; forwarding, by the ITR, the data packet to the receiver via the ETR in response to the obtained information indicating that the corresponding RLOC of the EID-prefix is valid; and discarding, by the ITR, the data packet in response to the obtained information indicating that the corresponding RLOC of the EID-prefix is not valid, wherein the ITR generates the Map-Request message and sends the Map-Request message to the ETR in one of the following cases which comprises that there is no corresponding entry about the EID-prefix in the EID-to-RLOC Cache and that the ITR detects the traffic from the transmitter to the receiver having the EID-prefix being an integral multiple of a predetermined local traffic threshold.