簡介
本檔案將說明監控通訊協定/使用者在Control and User Plane Separation(CUPS)User Plane(UP)上的行為,內容是關於選項34 Call Search Spaces(CSS)Data,其中行為是從舊式非CUPS系統變更的。
問題
在舊式非CUPS中,如果為監控協定/使用者啟用選項34(CSS數據),則會列印傳送到增強計費服務(ECS)模組或從增強計費服務(ECS)模組傳送的資料包。
MONITOR GLOBAL PROTOCOLS:
11 - SNMP 21 - L2TP (Admin only)
12 - RADIUS Authentication (Admin only) 22 - L2TPMGR (Admin only)
13 - RADIUS Accounting (Admin only) 23 - L2TP Data (Admin only)
14 - A11 (R-P Interface) (Admin only) 24 - GTPC (Admin only)
15 - Mobile IPv4 (Admin only) 25 - TACACS (Admin only)
16 - A11MGR (Admin only) 26 - GTPU (Admin only)
17 - PPP (Admin only) 27 - GTPP (Admin only)
18 - A10 (Admin only) 28 - DHCP (Admin only)
19 - User L3 (Admin only) 29 - CDR (Admin only)
20 - USERTCP STACK (Admin only) 30 - DHCPV6 (Admin only)
31 - RADIUS COA (Admin only) 51 - SCTP (Admin only)
32 - MIP Tunnel (Admin only) 52 - M3UA (Admin only)
33 - L3 Tunnel (Admin only) 53 - SCCP (Admin only)
> 34 - CSS Data (Admin only) 54 - TCAP (Admin only)
35 - CSS Signaling (Admin only) 55 - MAP (Admin only)
傳統非CUPS PGW的輸出示例如下:
Sunday May 02 2021
<<<
CSS Uplink Output PDU to ACS- slot:2 cpu:17 inst:4369
192.168.0.177 > 192.168.3.1: icmp: echo request (DF) (ttl 64, id 45402, len 84)
Sunday May 02 2021
***CONTROL*** 11:22:22:165 Eventid:77202
Rule matched : DEFAULT for uplink packet of subscriber MSID : 593440538564309
Sunday May 02 2021
INBOUND>>>>> 11:22:22:165 Eventid:77001(9)
CSS Uplink Input PDU from ACS- slot:3 cpu:34 inst:8738
192.168.0.177 > 192.168.3.1: icmp: echo request (DF) (ttl 64, id 45402, len 84)
但使用CUPS UP時,選項34不再列印資料包,只列印匹配消息的規則。
Wednesday May 12 2021
***CONTROL*** 03:46:03:656 Eventid:77203
Rule matched : DEFAULT for uplink packet of subscriber CallID : 0x3e02061
解決方案
由於採用了新的架構(控制平面和使用者平面分開,涉及向量資料包處理器(Vector Packet Processor,VPP)等),因此重新編寫了CUPS UP的監控器功能。 作為此更改的一部分,選項34不再列印資料包。相反,選項19(使用者L3)將在ECS中修改任何資料包後列印資料包,儘可能接近SGi。
總而言之,選項26(GTPU)和選項19(使用者L3)可用於監控使用者流量。
用於顯示上行/下行鏈路資料包在監控使用者選項中的顯示方式的圖片
在上行鏈路方向上,要在修改資料包之前獲得資料包的副本,我們需要選項26用於GTPU。選項19應該是在SGi上看到的資料包,包括報頭豐富、TCP MSS修改等。
在下行鏈路方向上,選項19和NO GTPU生成資料包的2個副本。這是有意識的,因為在傳出方向上sessmgr看不到GTPU封裝資料包。Sessmgr處理資料包後,VPP會新增GTPU報頭。相反,實施方式改為由使用者L3再次列印ECS後資料包,因此選項19列印資料包的2個副本。
此處顯示非CUPS和CUPS的示例輸出以進行比較。
CUPS:
Wednesday May 12 2021
INBOUND>>>>> 03:46:03:652 Eventid:142004(3)
GTPU Rx PDU, from fe80:192:168:1::3:2152 to fe80:10:200:1::100:2152 (92) TOS:0
TEID: 0x0000200E, Message type: GTP_TPDU_MSG (0xFF)
Sequence Number:: NA
GTP HEADER FOLLOWS:
Version number: 1
Protocol type: 1 (GTP C/U)
Message Type: 0xFF (GTP_TPDU_MSG)
Message Length: 0x0054 (84)
Tunnel ID: 0x0000200E
GTP HEADER ENDS.
Payload protocol: IPv4
PROTOCOL PAYLOAD FOLLOWS:
192.168.1.1 > 192.168.205.1: icmp: echo request (DF) (ttl 64, id 1521, len 84)
PROTOCOL PAYLOAD ENDS.
Wednesday May 12 2021
INBOUND>>>>> 03:46:03:652 Eventid:51000(0)
IPv4 Rx PDU
192.168.1.1 > 192.168.205.1: icmp: echo request (DF) (ttl 64, id 1521, len 84)
Wednesday May 12 2021
***CONTROL*** 03:46:03:656 Eventid:77203
Rule matched : DEFAULT for uplink packet of subscriber CallID : 0x3e02061
Wednesday May 12 2021
<<<
IPv4 Tx PDU
192.168.205.1 > 192.168.1.1: icmp: echo reply (DF) (ttl 64, id 11245, len 84)
Wednesday May 12 2021
***CONTROL*** 03:46:03:658 Eventid:77203
Rule matched : DEFAULT for downlink packet of subscriber CallID : 0x3e02061
Wednesday May 12 2021
<<<
IPv4 Tx PDU
192.168.205.1 > 192.168.1.1: icmp: echo reply (DF) (ttl 64, id 11245, len 84)
傳統非CUPS:
Sunday May 02 2021
INBOUND>>>>> 11:22:22:165 Eventid:142004(3)
GTPU Rx PDU, from 192.168.1.4:2152 to 192.168.10.1:2152 (92) TOS:0
TEID: 0x800CA001, Message type: GTP_TPDU_MSG (0xFF)
Sequence Number:: NA
GTP HEADER FOLLOWS:
Version number: 1
Protocol type: 1 (GTP C/U)
Message Type: 0xFF (GTP_TPDU_MSG)
Message Length: 0x0054 (84)
Tunnel ID: 0x800CA001
GTP HEADER ENDS.
Payload protocol: IPv4
PROTOCOL PAYLOAD FOLLOWS:
192.168.0.177 > 192.168.3.1: icmp: echo request (DF) (ttl 64, id 45402, len 84)
PROTOCOL PAYLOAD ENDS.
Sunday May 02 2021
INBOUND>>>>> 11:22:22:165 Eventid:51000(0)
IPv4 Rx PDU
192.168.0.177 > 192.168.3.1: icmp: echo request (DF) (ttl 64, id 45402, len 84)
Sunday May 02 2021
<<<
CSS Uplink Output PDU to ACS- slot:2 cpu:17 inst:4369
192.168.0.177 > 192.168.3.1: icmp: echo request (DF) (ttl 64, id 45402, len 84)
Sunday May 02 2021
***CONTROL*** 11:22:22:165 Eventid:77202
Rule matched : DEFAULT for uplink packet of subscriber MSID : 593440538564309
Sunday May 02 2021
INBOUND>>>>> 11:22:22:165 Eventid:77001(9)
CSS Uplink Input PDU from ACS- slot:3 cpu:34 inst:8738
192.168.0.177 > 192.168.3.1: icmp: echo request (DF) (ttl 64, id 45402, len 84)
Sunday May 02 2021
<<<
IPv4 Tx PDU
192.168.3.1 > 192.168.0.177: icmp: echo reply (ttl 64, id 56260, len 84)
Sunday May 02 2021
<<<
CSS Downlink Output PDU to ACS- slot:2 cpu:17 inst:4369
192.168.3.1 > 192.168.0.177: icmp: echo reply (ttl 64, id 56260, len 84)
Sunday May 02 2021
***CONTROL*** 11:22:22:166 Eventid:77202
Rule matched : DEFAULT for downlink packet of subscriber MSID : 593440538564309
Sunday May 02 2021
INBOUND>>>>> 11:22:22:166 Eventid:77003(9)
CSS Downlink Input PDU from ACS- slot:3 cpu:34 inst:8738
192.168.3.1 > 192.168.0.177: icmp: echo reply (ttl 64, id 56260, len 84)
Sunday May 02 2021
<<<
GTPU Tx PDU, from 192.168.10.1:2152 to 192.168.1.4:2152 (92) TOS:0
TEID: 0x60010896, Message type: GTP_TPDU_MSG (0xFF)
Sequence Number:: NA
GTP HEADER FOLLOWS:
Version number: 1
Protocol type: 1 (GTP C/U)
Message Type: 0xFF (GTP_TPDU_MSG)
Message Length: 0x0054 (84)
Tunnel ID: 0x60010896
GTP HEADER ENDS.
Payload protocol: IPv4
PROTOCOL PAYLOAD FOLLOWS:
192.168.3.1 > 192.168.0.177: icmp: echo reply (ttl 63, id 56260, len 84)
PROTOCOL PAYLOAD ENDS.