A network service establishment method, applied to a multi-layer network, wherein the method comprises: receiving, by an orchestration control center, a service establishment request of a service; wherein the service establishment request comprises quality of protection, QoP information and service level agreement, SLA information of the service; obtaining, by means of screening, all target service protection types that satisfy the QoP information and/or the SLA information of the service for each layer of network in the multi-layer network; determining, according to all the target service protection types of each layer of network in the multi-layer network, at least one group of multi-layer service protection types that satisfy the QoP information and the SLA information of the service for the multi-layer network; wherein each group of the at least one group of the multi-layer service protection types comprises a target service protection type of each layer of network in the multi-layer network; determining a group of target multi-layer service protection types of the service according to network topology information of each layer of network and resource usage of each layer of network from the at least one group of the multi-layer service protection types that satisfy the QoP information and the SLA information of the service; wherein the service needs fewest network resources in the target multi-layer service protection types; and sending an instruction message that carries the target multi-layer service protection types to a network controller corresponding to the multi-layer network; wherein the instruction message is used to instruct the network controller of the multi-layer network to determine a service link according to the target multi-layer service protection types. receiving, by an orchestration control center, a service establishment request of a service; wherein the service establishment request comprises quality of protection, QoP information and service level agreement, SLA information of the service; obtaining, by means of screening, all target service protection types that satisfy the QoP information and/or the SLA information of the service for each layer of network in the multi-layer network; determining, according to all the target service protection types of each layer of network in the multi-layer network, at least one group of multi-layer service protection types that satisfy the QoP information and the SLA information of the service for the multi-layer network; wherein each group of the at least one group of the multi-layer service protection types comprises a target service protection type of each layer of network in the multi-layer network; determining a group of target multi-layer service protection types of the service according to network topology information of each layer of network and resource usage of each layer of network from the at least one group of the multi-layer service protection types that satisfy the QoP information and the SLA information of the service; wherein the service needs fewest network resources in the target multi-layer service protection types; and sending an instruction message that carries the target multi-layer service protection types to a network controller corresponding to the multi-layer network; wherein the instruction message is used to instruct the network controller of the multi-layer network to determine a service link according to the target multi-layer service protection types.