Method and system for network load balancing

[0001] This application claims priority to Chinese Patent Application No. 201210340491.4, filed on Nov. 1, 2012, which is hereby incorporated by reference in its entirety.

[0002] The present invention relates to communications technologies, and in particular, to a processing method, device and system for controlling packet broadcast.

[0003] Network load balancing (NLB) is a software-based windows load balancing solution provided by Microsoft. An NLB cluster allows a user to use two or more servers in combination to form one server cluster, which works like one server from the perspective of a client. Each server is also called an NLB node.

[0004] NLB working modes include a unicast working mode, a multicast working mode, and an Internet Group Management Protocol (IGMP) working mode. In the unicast working mode and the multicast working mode, the NLB node uses a cluster media access control (MAC) address for NLB communication. That is, a destination MAC address of a data packet sent by an Internet Protocol (IP) network to the NLB node is a cluster MAC address, and the cluster MAC address is not bound to a port. Consequently, a forwarding device broadcasts the data packet on all ports, which increases network traffic burdens.

[0005] In view of this, embodiments of the present invention provide a processing method, device and system for controlling packet broadcast, which are used for reducing network traffic burdens.

[0006] In a first aspect, a processing method for controlling packet broadcast is provided, including:

[0007] obtaining, by a first device, a cluster MAC address, and determining an egress port of the first device corresponding to the cluster MAC address; and

[0008] establishing, by the first device, a cluster table, where the cluster table is used to record correspondence between address information and the egress port of the first device, and the address information includes the cluster MAC address, so that the first device forwards a packet from the egress port of the first device corresponding to the cluster MAC address according to the cluster table after receiving the packet whose destination MAC address is the cluster MAC address.

[0009] In a second aspect, a processing device for controlling packet broadcast is provided, including:

[0010] an obtaining module, configured to obtain a cluster MAC address, and determine an egress port of a first device corresponding to the cluster MAC address; and

[0011] an establishing module, configured to establish a cluster table, where the cluster table is used to record correspondence between address information and the egress port of the first device, and the address information includes the cluster MAC address, so that the first device forwards a packet from the egress port of the first device corresponding to the cluster MAC address according to the cluster table after receiving the packet whose destination MAC address is the cluster MAC address.

[0012] In a third aspect, a processing system for controlling packet broadcast is provided, including:

[0013] a layer-3 device, configured to: broadcast an ARP request packet, and receive an ARP response packet, where the ARP response packet includes a cluster MAC address of a target NLB cluster and a private MAC address of an NLB node of the target NLB cluster; establish a cluster ARP table, where the cluster ARP table is used to record correspondence between address information of the layer-3 device and an egress port of the layer-3 device, the address information of the layer-3 device includes the cluster MAC address and a source MAC address, and the source MAC address is the private MAC address of the NLB node; and send a notification message to a layer-2 device through the egress port of the layer-3 device, where the notification message includes the cluster MAC address and the source MAC address; and

[0014] the layer-2 device, configured to: receive the notification message sent by the layer-3 device, where the notification message includes the cluster MAC address and the source MAC address; determine an egress port of the layer-2 device corresponding to the source MAC address according to the source MAC address; and establish a cluster MAC table, where the cluster MAC table is used to record correspondence between address information of the layer-2 device and the egress port of the layer-2 device, and the address information of the layer-2 device includes the cluster MAC address.

[0015] In the foregoing technical solutions, a first device establishes a cluster table, where the cluster table records correspondence between a cluster MAC address and an egress port of the first device. Therefore, after the first device determines that a destination MAC address of a packet is the cluster MAC address, the first device may forward the packet through the corresponding egress port according to the correspondence, without the need of broadcasting the packet through all egress ports, thereby reducing network traffic burdens.

[0025] To make the objectives, technical solutions, and advantages of the embodiments of the present invention more comprehensible, the following clearly describes the technical solutions in the embodiments of the present invention with reference to the accompanying drawings in the embodiments of the present invention. Apparently, the described embodiments are merely a part rather than all of the embodiments of the present invention. All other embodiments obtained by a person of ordinary skill in the art based on the embodiments of the present invention without creative efforts shall fall within the protection scope of the present invention.

[0026] FIG. 1 is a schematic flowchart of an embodiment of a processing method for controlling packet broadcast according to the present invention. The method includes:

[0027] 11. A first device obtains a cluster MAC address, and determines an egress port of the first device corresponding to the cluster MAC address.

[0028] 12. The first device establishes a cluster table, where the cluster table is used to record correspondence between address information and the egress port of the first device, and the address information includes the cluster MAC address, so that the first device forwards a packet from the egress port of the first device corresponding to the cluster MAC address according to the cluster table after receiving the packet whose destination MAC address is the cluster MAC address.

[0029] In this embodiment, a cluster table is established, where the cluster table records correspondence between a cluster MAC address and an egress port of a first device. Therefore, after the first device determines that a destination MAC address of a packet is the cluster MAC address, the first device may forward the packet through the corresponding egress port according to the correspondence, without the need of broadcasting the packet through all egress ports, thereby reducing network traffic burdens.

[0030] Optionally, the first device may a layer-2 device or layer-3 device, and specifically, may be a layer-2 switch or layer-3 switch.

[0031] When the first device is a layer-3 device, referring to FIG. 2, a specific implementation manner is provided, including:

[0032] 21. The layer-3 device broadcasts an Address Resolution Protocol (ARP) request packet, and receives an ARP response packet, where the ARP response packet includes a cluster MAC address of a target NLB cluster.

[0033] 22. The layer-3 device establishes a cluster ARP table, where the cluster ARP table is used to record correspondence between address information of the layer-3 device and an egress port of the layer-3 device, the address information of the layer-3 device includes the cluster MAC address, and the egress port of the layer-3 device is a receiving port that receives the ARP response packet.

[0034] Optionally, the ARP response packet further includes a private MAC address of an NLB node of the target NLB cluster.

[0035] The address information of the layer-3 device further includes a source MAC address, where the source MAC address is the private MAC address of the NLB node.

[0036] The method further includes:

[0037] The layer-3 device sends a notification message to a layer-2 device through the egress port of the layer-3 device, where the notification message includes the cluster MAC address and the source MAC address so that the layer-2 device establishes correspondence between address information of the layer-2 device and an egress port of the layer-2 device according to the cluster MAC address and the source MAC address.

[0038] In this embodiment, a layer-3 device establishes a cluster ARP table to record correspondence between a cluster MAC address and an egress port of the layer-3 device. Therefore, after the layer-3 device determines that a destination MAC address of a packet is the cluster MAC address, the layer-3 device may forward the packet through the corresponding egress port of the layer-3 device according to the correspondence, without the need of broadcasting the packet through all egress ports of the layer-3 device, thereby reducing network traffic burdens.

[0039] When the first device is a layer-2 device, referring to FIG. 3, another specific implementation manner is provided, including:

[0040] 31. The layer-2 device receives a notification message sent by a layer-3 device, where the notification message includes the cluster MAC address and a source MAC address.

[0041] 32. The layer-2 device determines an egress port of the layer-2 device corresponding to the source MAC address according to the source MAC address.

[0042] 33. The layer-2 device establishes a cluster MAC table, where the cluster MAC table is used to record correspondence between address information of the layer-2 device and the egress port of the layer-2 device, and the address information of the layer-2 device includes the cluster MAC address.

[0043] Optionally, the notification message further includes virtual local area network (VLAN) information.

[0044] The address information of the layer-2 device further includes the VLAN information so that the layer-2 device forwards a packet from the egress port of the layer-2 device corresponding to the cluster MAC address and the VLAN information, where a destination MAC address of the packet is the cluster MAC address, and a VLAN to which the packet belongs is a VLAN indicated by the VLAN information.

[0045] In this embodiment, a layer-2 device establishes a cluster MAC table to record correspondence between a cluster MAC address and an egress port of the layer-2 device. Therefore, after the layer-2 device receives a packet whose destination MAC address is the cluster MAC address, the layer-2 device may forward the packet through the corresponding egress port of the layer-2 device according to the correspondence, without the need of broadcasting the packet through all egress ports of the layer-2 device, thereby reducing network traffic burdens.

[0046] FIG. 4 is a schematic flowchart of another embodiment of a processing method for controlling packet broadcast according to the present invention, and FIG. 5 is a schematic structural diagram of a system corresponding to FIG. 4.

[0047] As shown in FIG. 5, in this embodiment, NLB nodes are divided into three NLB clusters. A first NLB cluster includes NLB node_11 and NLB node_12, a second NLB cluster includes NLB node_21 and NLB node_22, and a third NLB cluster includes NLB node_31 and NLB node_32. This embodiment includes three layer-2 devices, where layer-2 device_1 serves NLB node_11 and NLB node_21, layer-2 device_2 serves NLB node_12 and NLB node_22, and layer-2 device_3 serves NLB node_31 and NLB node_32. It is assumed that a port between a layer-3 device and layer-2 device_1 is port_31, a port between the layer-3 device and layer-2 device_2 is port_32, a port between the layer-3 device and layer-2 device_3 is port_33, ports between layer-2 device_1 and NLB node_11 and between layer-2 device_1 and NLB node_21 are port_211 and port_212 respectively, ports between layer-2 device_2 and NLB node_12 and between layer-2 device_2 and NLB node_22 are port_221 and port_222 respectively, ports between layer-2 device_3 and NLB node_31 and between layer-2 device_3 and NLB node_32 are port_231 and port_232 respectively (for brevity, FIG. 5 does not show names of the ports). The foregoing layer-3 device and layer-2 devices may be a layer-3 switch and layer-2 switches respectively.

[0048] When multiple NLB nodes make up an NLB cluster, each NLB cluster has one cluster IP address. A destination IP address of a data packet sent by an IP network is a cluster IP address of a target NLB cluster. Each NLB node in the NLB cluster receives the data packet, and then, according to an extent of NLB running on the NLB node, the NLB node determines whether to process the data packet by itself. For example, when the IP network sends a data packet to the first NLB cluster, that is, when a target NLB cluster is the first NLB cluster, the data packet passes through the layer-3 device and layer-2 device_1 and arrives at NLB node_11, and passes through the layer-3 device and layer-2 device_2 and arrives at NLB node_12. In addition, in the existing technology, a cluster MAC address is used for forwarding a data packet, where the cluster MAC address is not bound to any port, and therefore, a layer-3 device and a layer-2 device broadcast the data packet through all ports, and an NLB node, outside the first NLB cluster to which the data packet needs to be sent, also receives the data packet, which leads to increase of network burdens and waste of bandwidth.

[0049] To reduce network burdens and bandwidth waste, this embodiment provides the following procedure:

[0050] 41. The layer-3 device broadcasts an ARP request packet, where a destination IP address of the ARP request packet is an IP address of a target cluster. In this embodiment, a case that the target cluster is the first NLB cluster is used as an example. Therefore, the destination IP address of the ARP request packet is an IP address of the first NLB cluster.

[0051] For example, the layer-3 device broadcasts the ARP request packet through all of its ports, that is, port_31, port_32, and port_33. The ARP request packet arrives at each NLB node after passing through each layer-2 device.

[0052] 42. An NLB node of the first NLB cluster returns an ARP response packet. A source MAC address of an Ethernet header of the ARP response packet is a private MAC address of the NLB node, and an ARP packet part of the ARP response packet is filled with a cluster MAC address of the first NLB cluster.

[0053] That is, NLB node_11 and NLB node_12 send ARP response packets; source MAC addresses of Ethernet frame headers are private MAC addresses of NLB node_11 and NLB node_12, and the private MAC addresses may be configured in each NLB node by default, and may be expressed as MAC_1 and MAC_2 respectively, for example. In addition, addresses filled in ARP packet parts of the ARP response packets are a cluster MAC address, which, in this embodiment, is the cluster MAC address of the first NLB cluster and expressed as cluster MAC_1, for example.

[0054] The ARP response packet is sent to the layer-3 device through the layer-2 device.

[0055] 43. The layer-3 device establishes a cluster ARP table, where the cluster ARP table is used to record correspondence between address information of the layer-3 device and an egress port of the layer-3 device.

[0056] The egress port of the layer-3 device is a receiving port that receives the ARP response packet, and the address information of the layer-3 device includes a cluster MAC address and a source MAC address. The cluster MAC address and the source MAC address may be obtained from the ARP response packet, the cluster MAC address is located in the ARP packet part of the ARP response packet, and the source MAC address is the source MAC address in the Ethernet frame header of the ARP response packet. In this embodiment, a cluster MAC address is the cluster MAC address of the first NLB cluster, that is, cluster MAC_1; and source MAC addresses are the private MAC addresses of NLB nodes in the first NLB cluster, and are MAC_1 and MAC_2 respectively.

[0057] For example, in the foregoing scenario, the layer-3 device receives an ARP response packet from port_31, a source MAC address included in the ARP response packet is MAC_1, and a cluster MAC address in the packet is cluster MAC_1; in addition, the layer-3 device receives another ARP response packet from port_32, a source MAC address included in the ARP response packet is MAC_2, and a cluster MAC address in the packet is also cluster MAC_1. Therefore, the ARP table established by the layer-3 device includes an entry shown in Table 1:

[0058]

TABLE 1
Cluster
MAC address	Source MAC address	Egress port of layer-3 device
Cluster MAC_1	MAC_1	port_31
Cluster MAC_1	MAC_2	port_32

[0059] Optionally, in VLAN-based layer-2 forwarding, the notification message may further include VLAN information, and the VLAN information may be obtained from the ARP response packet. It is assumed that both the VLAN information included in the ARP response packet sent by NLB node_11 and the VLAN information included in the ARP response packet sent by NLB node_12 are VLAN_1.

[0060] 44. The layer-3 device sends a notification message to a layer-2 device through the port that receives the ARP response packet, where the notification message includes the VLAN information, the cluster MAC address, and the source MAC address.

[0061] For example, the layer-3 device receives the ARP response packets through port_31 and port_32, but receives no ARP response packet through port_33. Therefore, the notification messages are sent to layer-2 device_1 and layer-2 device_2 through port_31 and port_32 respectively, but not to layer-2 device_3.

[0062] In addition, correspondence between the VLAN information, the cluster MAC address, and the source MAC address may be determined according to the cluster ARP table, and the VLAN information, the cluster MAC address, and the source MAC address are sent accordingly. For example, a notification message sent from port_31 includes VLAN_1, cluster MAC_1, and MAC_1, and a notification message sent from port_32 includes VLAN_1, cluster MAC_1, and MAC_2.

[0063] 45. The layer-2 device searches for an egress port of the layer-2 device according to the source MAC address, and establishes a cluster MAC table, where the cluster MAC table is used to record correspondence between address information of the layer-2 device and the egress port of the layer-2 device.

[0064] Through static configuration or dynamic learning, the layer-2 device may obtain correspondence between a private MAC address of an NLB node under the layer-2 device and an egress port of the layer-2 device. For example, the layer-2 device_1 obtains correspondence between port_21 and MAC_1 in advance.

[0065] Therefore, after receiving the notification message, the layer-2 device may obtain a corresponding egress port of the layer-2 device according to the received source MAC address, that is, the private MAC address of the NLB node, and then may establish the correspondence between the egress port of the layer-2 device and the address information of the layer-2 device, where the address information of the layer-2 device includes the cluster MAC address or includes the cluster MAC address and VLAN information.

[0066] For example, layer-2 device_1 may establish a cluster MAC entry shown in Table 2, and layer-2 device_2 may establish a cluster MAC entry shown in Table 3:

[0067]

TABLE 2
Cluster
MAC address	VLAN information	Egress port of layer-2 device
Cluster MAC_1	VLAN_1	port_211

[0068]

TABLE 3
Cluster
MAC address	VLAN information	Egress port of layer-2 device
Cluster MAC_1	VLAN_1	port_221

[0069] In this way, a data path from the layer-3 device to the layer-2 device has been established. Afterward, when the IP network sends a data packet to an NLB cluster, the data packet may be sent to a target NLB cluster only, instead of being broadcast.

[0070] For example, when a packet needs to be sent to the first NLB cluster, a destination IP address of the data packet sent by the IP network is the cluster IP address of the first NLB cluster, and the data packet arrives at the layer-3 device first; the layer-3 device encapsulates the received data packet with an Ethernet header according to configured correspondence between a cluster IP address and a cluster MAC address; a destination MAC address of the Ethernet header is the cluster MAC address of the first NLB cluster, that is, cluster MAC_1; and the cluster MAC address may be determined according to the configured correspondence between the cluster IP address and the cluster MAC address. Then, according to the cluster ARP table, the layer-3 device finds the egress port of the layer-3 device corresponding to the cluster MAC address, such as the foregoing port_31 and port_32, and, through port_31 and port_32, sends the data packet in which the cluster MAC address is encapsulated, that is, sends the data packet to layer-2 device_1 and layer-2 device_2. After receiving the data packet, the layer-2 device determines an egress port of the layer-2 device corresponding to the destination MAC address of the received data packet according to the cluster MAC table, and sends the data packet from the corresponding egress port. Taking layer-2 device_1 as an example, after receiving a data packet sent by the layer-3 device, layer-2 device_1 finds a port corresponding to cluster MAC_1, that is, port_211, according to the cluster MAC table and the destination MAC address of the packet, that is, cluster MAC_1, and then sends the data packet to NLB node_11 from port_211. Similarly, layer-2 device_2 performs similar processing, and then layer-2 device_2 sends the data packet to NLB node_12 through port_221. In addition, during VLAN information-based layer-2 forwarding, the layer-2 device may further determine the egress port of the layer-2 device corresponding to the cluster MAC address and the VLAN information in the packet according to the VLAN information, and forward the packet from the corresponding egress port of the layer-2 device.

[0071] In this way, the data packet sent by the IP network is sent to the target NLB cluster only, instead of being broadcast to all NLB nodes.

[0072] Optionally, this embodiment may further include:

[0073] In 43, the layer-3 device may set aging time for each egress port of the layer-3 device, and then send a deletion message to the layer-2 device after the aging time is reached, where the deletion message is used to instruct the layer-2 device to delete the cluster MAC table. After aging time of port_31 arrives, the layer-3 device sends a deletion message to layer-2 device_1 through port_31, so that layer-2 device_1 deletes the cluster MAC table.

[0074] Optionally, in 44, the layer-2 device may set aging time for each egress port of the layer-2 device, and then delete a corresponding entry in the cluster MAC table after the aging time is reached. For example, after aging time of port_211 arrives, layer-2 device_1 deletes an entry that is in the cluster MAC table of layer-2 device_1 and corresponds to port_211.

[0075] In this embodiment, through combination of layer 2 and layer 3, in an NLB cluster scenario, network broadcast traffic can be reduced, packet processing of the server can be reduced, and system burdens can be reduced.

[0076] FIG. 6 is a schematic structural diagram of an embodiment of a processing device for controlling packet broadcast according to the present invention. The device includes an obtaining module 61 and an establishing module 62. The obtaining module 61 is configured to obtain a cluster MAC address, and determine an egress port of a first device corresponding to the cluster MAC address; the establishing module 62 is configured to establish a cluster table, where the cluster table is used to record correspondence between address information and the egress port of the first device, and the address information includes the cluster MAC address, so that the first device forwards a packet from the egress port of the first device corresponding to the cluster MAC address according to the cluster table after receiving the packet whose destination MAC address is the cluster MAC address.

[0077] Optionally, the device is a layer-3 device; and the obtaining module is specifically configured to: broadcast an ARP request packet, and receive an ARP response packet, where the ARP response packet includes a cluster MAC address of a target NLB cluster; and determine that a receiving port that receives the ARP response packet is the egress port of the first device corresponding to the cluster MAC address; and the establishing module is specifically configured to: establish a cluster ARP table, where the cluster ARP table is used to record correspondence between address information of the layer-3 device and an egress port of the layer-3 device, the address information of the layer-3 device includes the cluster MAC address, and the egress port of the layer-3 device is the receiving port that receives the ARP response packet.

[0078] Optionally, the ARP response packet further includes a private MAC address of an NLB node of the target NLB cluster; the address information of the layer-3 device further includes a source MAC address, where the source MAC address is the private MAC address of the NLB node; the device further includes a sending module, configured to send a notification message to a layer-2 device through the egress port of the layer-3 device, where the notification message includes the cluster MAC address and the source MAC address so that the layer-2 device establishes correspondence between address information of the layer-2 device and an egress port of the layer-2 device according to the cluster MAC address and the source MAC address.

[0079] Optionally, the device is a layer-2 device; and the obtaining module is specifically configured to: receive a notification message sent by a layer-3 device, where the notification message includes the cluster MAC address and a source MAC address; and determine an egress port of the layer-2 device corresponding to the source MAC address according to the source MAC address, and determine that the egress port of the layer-2 device is the egress port of the first device corresponding to the cluster MAC address.

[0080] The establishing module is specifically configured to establish a cluster MAC table, where the cluster MAC table is used to record correspondence between address information of the layer-2 device and the egress port of the layer-2 device, and the address information of the layer-2 device includes the cluster MAC address.

[0081] Optionally, the notification message further includes VLAN information; the address information of the layer-2 device further includes the VLAN information so that the layer-2 device forwards a packet from the egress port of the layer-2 device corresponding to the cluster MAC address and the VLAN information, where a destination MAC address of the packet is the cluster MAC address, and a VLAN to which the packet belongs is a VLAN indicated by the VLAN information.

[0082] Optionally, the device further includes a setting module, configured to set aging time for each egress port of the layer-3 device, and send a deletion message to the layer-2 device through an egress port of the layer-3 device that reaches the aging time, so that the layer-2 device deletes a cluster MAC table after receiving the deletion message.

[0083] Optionally, the device further includes a processing module, configured to: delete the cluster MAC table after receiving a deletion message sent by the layer-3 device; or, set aging time for each egress port of the layer-2 device, and delete an entry that is in the cluster MAC table and corresponds to an egress port of the layer-2 device that reaches the aging time.

[0084] In this embodiment, a cluster table is established, where the cluster table records correspondence between a cluster MAC address and an egress port of a first device. Therefore, after the first device determines that a destination MAC address of a packet is the cluster MAC address, the first device may forward the packet through the corresponding egress port according to the correspondence, without the need of broadcasting the packet through all egress ports, thereby reducing network traffic burdens.

[0085] FIG. 7 is a schematic structural diagram of another embodiment of a processing device for controlling packet broadcast according to the present invention. The device includes a processor 71 and a transceiver 72. The processor 71 is configured to obtain a cluster MAC address, and determine an egress port of a first device corresponding to the cluster MAC address; and establish a cluster table, where the cluster table is used to record correspondence between address information and the egress port of the first device, and the address information includes the cluster MAC address, so that the first device forwards a packet from the egress port of the first device corresponding to the cluster MAC address according to the cluster table after receiving the packet whose destination MAC address is the cluster MAC address.

[0086] Optionally, the device is a layer-3 device; the transceiver 72 is configured to broadcast an ARP request packet, and receive an ARP response packet, where the ARP response packet includes a cluster MAC address of a target NLB cluster; and the processor 71 is specifically configured to establish a cluster ARP table, where the cluster ARP table is used to record correspondence between address information of the layer-3 device and an egress port of the layer-3 device, the address information of the layer-3 device includes the cluster MAC address, and the egress port of the layer-3 device is a receiving port that receives the ARP response packet.

[0087] Optionally, the ARP response packet further includes a private MAC address of an NLB node of the target NLB cluster; the address information of the layer-3 device further includes a source MAC address, where the source MAC address is the private MAC address of the NLB node; the transceiver 72 is further configured to send a notification message to a layer-2 device through the egress port of the layer-3 device, where the notification message includes the cluster MAC address and the source MAC address so that the layer-2 device establishes correspondence between address information of the layer-2 device and an egress port of the layer-2 device according to the cluster MAC address and the source MAC address.

[0088] Optionally, the device is a layer-2 device; the transceiver 72 is configured to receive a notification message sent by a layer-3 device, where the notification message includes the cluster MAC address and the source MAC address; and the processor 71 is specifically configured to determine an egress port of the layer-2 device corresponding to the source MAC address according to the source MAC address, and establish a cluster MAC table, where the cluster MAC table is used to record correspondence between address information of the layer-2 device and the egress port of the layer-2 device, and the address information of the layer-2 device includes the cluster MAC address.

[0089] Optionally, the notification message further includes VLAN information; the address information of the layer-2 device further includes the VLAN information so that the layer-2 device forwards a packet from the egress port of the layer-2 device corresponding to the cluster MAC address and the VLAN information, where a destination MAC address of the packet is the cluster MAC address, and a VLAN to which the packet belongs is a VLAN indicated by the VLAN information.

[0090] Optionally, when the device is a layer-3 device, the processor 71 is further configured to set aging time for each egress port of the layer-3 device; and the transceiver 72 is further configured to send a deletion message to the layer-2 device through an egress port of the layer-3 device that reaches the aging time, so that the layer-2 device deletes the cluster MAC table after receiving the deletion message.

[0091] Optionally, when the device is a layer-2 device, the processor 71 is further configured to: delete the cluster MAC table after receiving the deletion message sent by the layer-3 device; or, set aging time for each egress port of the layer-2 device, and delete an entry that is in the cluster MAC table and corresponds to an egress port of the layer-2 device that reaches the aging time.

[0092] The transceiver may be a stand-alone sender and a stand-alone receiver which execute a sending function and a receiving function respectively, and may also be an integrated device that has a sending function and a receiving function. Specifically, the transceiver may be implemented by using a network cable, an optical fiber, or an antenna, where the antenna may be a linear antenna, a loop antenna, an array antenna, or the like.

[0093] The processor may be a universal processor, a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field programmable gate array (FPGA) or another programmable logical device, a discrete gate or transistor logic device, or a discrete hardware component. The universal processor may be a microprocessor or any conventional processor. In this embodiment, a cluster table is established, where the cluster table records correspondence between a cluster MAC address and an egress port of a first device. Therefore, after the first device determines that a destination MAC address of a packet is the cluster MAC address, the first device may forward the packet through the corresponding egress port according to the correspondence, without the need of broadcasting the packet through all egress ports, thereby reducing network traffic burdens.

[0094] FIG. 8 is a schematic structural diagram of an embodiment of a processing system for controlling packet broadcast according to the present invention. The system includes a layer-3 device 81 and a layer-2 device 82. The layer-3 device 81 is configured to: broadcast an ARP request packet, and receive an ARP response packet, where the ARP response packet includes a cluster MAC address of a target NLB cluster and a private MAC address of an NLB node of the target NLB cluster; establish a cluster ARP table, where the cluster ARP table is used to record correspondence between address information of the layer-3 device and an egress port of the layer-3 device, the address information of the layer-3 device includes the cluster MAC address and a source MAC address, and the source MAC address is the private MAC address of the NLB node; and send a notification message to a layer-2 device through the egress port of the layer-3 device, where the notification message includes the cluster MAC address and the source MAC address; and the layer-2 device 82 is configured to: receive the notification message sent by the layer-3 device, where the notification message includes the cluster MAC address and the source MAC address; determine an egress port of the layer-2 device corresponding to the source MAC address according to the source MAC address; and establish a cluster MAC table, where the cluster MAC table is used to record correspondence between address information of the layer-2 device and the egress port of the layer-2 device, and the address information of the layer-2 device includes the cluster MAC address.

[0095] Optionally, the notification message further includes VLAN information. The address information of the layer-2 device 82 further includes the VLAN information so that the layer-2 device forwards a packet from the egress port of the layer-2 device corresponding to the cluster MAC address and the VLAN information, where a destination MAC address of the packet is the cluster MAC address, and a VLAN to which the packet belongs is a VLAN indicated by the VLAN information.

[0096] Optionally, the layer-3 device 81 is further configured to: set aging time for each egress port of the layer-3 device, and send a deletion message to the layer-2 device through an egress port of the layer-3 device that reaches the aging time; and the layer-2 device 82 is further configured to delete the cluster MAC table after receiving the deletion message.

[0097] Optionally, the layer-2 device 82 is further configured to set aging time for each egress port of the layer-2 device, and delete an entry that is in the cluster MAC table and corresponds to an egress port of the layer-2 device that reaches the aging time.

[0098] In this embodiment, a cluster table is established, where the cluster table records correspondence between a cluster MAC address and an egress port of a first device. Therefore, after the first device determines that a destination MAC address of a packet is the cluster MAC address, the first device may forward the packet through the corresponding egress port according to the correspondence, without the need of broadcasting the packet through all egress ports, thereby reducing network traffic burdens.

[0099] It can be clearly understood by a person skilled in the art that, for the purpose of convenient and brief description, division of the foregoing function modules is taken as an example for illustration, in an actual application, the foregoing functions can be allocated to different modules and implemented according to the need, that is, an inner structure of the apparatus is divided into different function modules to implement all or part of the functions described above. For a specific working process of the foregoing system, apparatus and unit, reference may be made to the corresponding process in the method embodiments, and the details will not be described herein again.

[0100] In the several embodiments provided in the present invention, it should be understood that the disclosed system, apparatus, and method may be implemented in other manners. For example, the described apparatus embodiment is merely exemplary. For example, the division of the modules or units is merely logical function division and may be other division in actual implementation. For example, a plurality of units or components may be combined or integrated into another system, or some features may be ignored or not performed. In addition, the displayed or discussed mutual couplings or direct couplings or communication connections may be implemented through some interfaces. The indirect couplings or communication connections between the apparatuses or units may be implemented in electronic, mechanical or other forms.

[0101] The units described as separate parts may or may not be physically separate, and parts displayed as units may or may not be physical units, may be located in one position, or may be distributed on a plurality of network units. A part or all of the units may be selected according to actual needs to achieve the objectives of the solutions of the embodiments.

[0102] In addition, functional units in the embodiments of the present invention may be integrated into one processing unit, or each of the units may exist alone physically, or two or more units are integrated into one unit. The integrated unit may be implemented in a form of hardware, or may be implemented in a form of a software functional unit.

[0103] When the integrated unit are implemented in the form of a software functional unit and sold or used as an independent product, the integrated unit may be stored in a computer-readable storage medium. Based on such an understanding, the technical solutions of the present invention essentially, or the part contributing to the prior art, or all or a part of the technical solutions may be implemented in a form of a software product. The computer software product is stored in a storage medium and includes several instructions for instructing a computer device (which may be a personal computer, a server, or a network device or the like) or a processor to perform all or a part of steps of the methods described in the embodiments of the present invention. The foregoing storage medium includes: any medium that can store program code, such as a USB flash disk, a removable hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk, or an optical disk.

[0104] It should be noted that the foregoing embodiments are merely intended for describing the technical solutions of the present invention rather than limiting the present invention. Although the present invention is described in detail with reference to the foregoing embodiments, a person of ordinary skill in the art should understand that they may still make modifications to the technical solutions described in the foregoing embodiments, or make equivalent replacements to some technical features thereof, without departing from the spirit and scope of the technical solutions of the embodiments of the present invention.