A data flow redirection method, comprising: receiving, by a network device, a control message sent by a control device (120, 710), wherein the control message carries redirection routing information of a data flow and a redirection routing indication, the redirection routing information of the data flow comprises destination address information of the data flow and redirection next hop information of the network device, the redirection routing indication is used to instruct to convert the redirection routing information of the data flow into a forwarding entry in a target forwarding table, and tablespace of the target forwarding table is greater than tablespace of a flow specification forwarding table of the network device; and converting, by the network device (110, 120, 300, 400, 500, 600, 710, 720), the redirection routing information of the data flow into the forwarding entry in the target forwarding table according to the redirection routing indication, characterized in that the redirection routing indication comprises a conversion indication and a conversion description, the conversion indication is used to instruct to perform conversion processing on the redirection routing information of the data flow, and the conversion description is used to describe that the conversion processing is to convert the redirection routing information of the data flow into the forwarding entry in the target forwarding table; and the network device (110, 120, 300, 400, 500, 600, 710, 720) converts the redirection routing information of the data flow into the forwarding entry in the target forwarding table according to the conversion indication and the conversion description, wherein the control message is a Border Gateway Protocol, BGP, Flow Specification, FlowSpec, message, and a traffic action field in an extended community attribute of the BGP FlowSpec message is used to carry the conversion indication. receiving, by a network device, a control message sent by a control device (120, 710), wherein the control message carries redirection routing information of a data flow and a redirection routing indication, the redirection routing information of the data flow comprises destination address information of the data flow and redirection next hop information of the network device, the redirection routing indication is used to instruct to convert the redirection routing information of the data flow into a forwarding entry in a target forwarding table, and tablespace of the target forwarding table is greater than tablespace of a flow specification forwarding table of the network device; and converting, by the network device (110, 120, 300, 400, 500, 600, 710, 720), the redirection routing information of the data flow into the forwarding entry in the target forwarding table according to the redirection routing indication, characterized in that the redirection routing indication comprises a conversion indication and a conversion description, the conversion indication is used to instruct to perform conversion processing on the redirection routing information of the data flow, and the conversion description is used to describe that the conversion processing is to convert the redirection routing information of the data flow into the forwarding entry in the target forwarding table; and the network device (110, 120, 300, 400, 500, 600, 710, 720) converts the redirection routing information of the data flow into the forwarding entry in the target forwarding table according to the conversion indication and the conversion description, wherein the control message is a Border Gateway Protocol, BGP, Flow Specification, FlowSpec, message, and a traffic action field in an extended community attribute of the BGP FlowSpec message is used to carry the conversion indication.