CN101217494A - A method and network device for operation flow monitoring - Google Patents
A method and network device for operation flow monitoring Download PDFInfo
- Publication number
- CN101217494A CN101217494A CNA2008100557522A CN200810055752A CN101217494A CN 101217494 A CN101217494 A CN 101217494A CN A2008100557522 A CNA2008100557522 A CN A2008100557522A CN 200810055752 A CN200810055752 A CN 200810055752A CN 101217494 A CN101217494 A CN 101217494A
- Authority
- CN
- China
- Prior art keywords
- business stream
- flow
- strategy
- set rate
- service
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
- 238000000034 method Methods 0.000 title claims abstract description 38
- 238000012544 monitoring process Methods 0.000 title claims abstract description 15
- 238000001514 detection method Methods 0.000 claims abstract description 29
- 238000012545 processing Methods 0.000 claims abstract description 27
- 230000008878 coupling Effects 0.000 claims description 14
- 238000010168 coupling process Methods 0.000 claims description 14
- 238000005859 coupling reaction Methods 0.000 claims description 14
- 230000000295 complement effect Effects 0.000 claims description 11
- 238000005516 engineering process Methods 0.000 description 4
- 230000008569 process Effects 0.000 description 4
- 238000005070 sampling Methods 0.000 description 4
- 230000013011 mating Effects 0.000 description 3
- 238000004891 communication Methods 0.000 description 2
- 230000006870 function Effects 0.000 description 2
- 238000004458 analytical method Methods 0.000 description 1
- 230000008901 benefit Effects 0.000 description 1
- 230000008859 change Effects 0.000 description 1
- 230000007423 decrease Effects 0.000 description 1
- 238000013461 design Methods 0.000 description 1
- 238000007429 general method Methods 0.000 description 1
- 238000012423 maintenance Methods 0.000 description 1
Images
Landscapes
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The invention provides a method for monitoring business flow and a network equipment thereof. The method includes the following steps that: the actual rate of each business flow which flows into the network equipment is acquired, and the business flow is a data flow with the same characteristics; whether the actual rate of each business flow surpasses a predetermined rate threshold of the business flow is judged, and if not, the business flow is transmitted; or the business type of the business flow is identified through a depth detection and the business flow is processed according to the identifying result and the preserved flow managing strategies. The method and the device of the invention can reduce the system resource occupied by identifying the business of business flow and the system resource occupied by identifying and processing the business of business flow, which can greatly reduce the request for the processing ability of network equipment.
Description
Technical field
The present invention relates to the flow control technique field, be specifically related to a kind of method and network equipment of operation flow monitoring.
Background technology
End-to-end (P2P, Peer to Peer) technology provides the ability of distributed swap data, its maximum purposes has just provided swap data file between the personal user, and server as just one to the user online be connected the manager who manages, no longer be responsible for providing downloaded resources to all users.
The develop rapidly of P2P technology makes that having occurred a large amount of use P2P softwares on the internet uploads and download business." content is positioned at the " center " pattern and changes " content is disperseed storage " pattern into this memory module that will cause the Internet, is the flow status at center with changing in the present internet with big website by present.
According to China's internet business flow quantitative statistics, in miscellaneous service, (comprise business such as HTTP, P2P, UDP, TCP) at present, the P2P business has taken a large amount of bandwidth.The a large amount of P2P business that occur on the network cause the extreme congestion of network, bring loss for operator and enterprise customer.For operator,, cause its network cost and maintenance cost to increase because the continuous increase of broadband user's line duration and flow need be carried out dilatation to network; For the enterprise customer, its massive band width is shared by the P2P business, causes network busy, thereby possibly can't guarantee the quality of enterprise customer's key business, simultaneously, also causes employee's effective time to reduce problems such as inefficiency.Therefore, operator and enterprise customer wish and can carry out traffic management and control preferably to the P2P business, thereby guarantee that limited bandwidth better service is in key business and application.
For being used, P2P carries out traffic management and control preferably, guarantee that limited network bandwidth better service is in key business and application, the general method that adopts depth detection in the prior art, promptly by network message and P2P protocol massages feature are mated, can accurately identify the P2P business, thereby service quality (QoS) module can be carried out control corresponding and management to the P2P flow according to the flow management strategy that prestores.
Because P2P traffic identification/processes such as forwarding are handled complicated, need be by content of message being carried out identification one by one and mating the feature of finding some Business Stream, therefore, this method requires the CPU of the network equipment to have very strong message processing capability, need take a large amount of system resource of the network equipment.Traditional network equipment based on the CPU framework is after opening functions such as P2P flow control, and its service process performance is often had a greatly reduced quality, and becomes the bottleneck of network processes.And the method for above-mentioned depth detection when flow exceeds the disposal ability of the network equipment, often adopts the mode of stochastical sampling that message is carried out detection and Identification.Obviously, this way since its to the sampling of message without any restriction, therefore, the message of directly not transmitted through over-sampling all is at random, thereby causes this method to have very big uncontrollability and randomness.
In addition, the network equipment of increase based on the specialized hardware of the hardware-accelerated framework of special-purpose Communication processor also appearred in the prior art.Tasks such as P2P flow control processing, QoS processing all are to adopt specialized hardware to handle, by the above-mentioned task of extra hardware handles, though do not have influence on the service process performance of the network equipment, these special-purpose Communication processor general costs are not suitable for being used on the low and middle-end equipment than higher.
Summary of the invention
Technical problem to be solved by this invention provides a kind of method and network equipment of operation flow monitoring, has reduced the Business Stream traffic identification and has handled shared system resource, has reduced the requirement to the network device processing ability.
For solving the problems of the technologies described above, it is as follows to the invention provides scheme:
A kind of method of operation flow monitoring, wherein, described method comprises:
Obtain the actual speed rate of every the Business Stream that flows into the network equipment, described Business Stream is the data flow with same characteristic features item;
Judge that whether the actual speed rate of every Business Stream exceeds the set rate thresholding of this Business Stream, if do not exceed, then transmits this Business Stream; Otherwise, by depth detection the type of service of this Business Stream is discerned, and this Business Stream is handled according to recognition result and the flow management strategy that prestores.
Method of the present invention, wherein, described method also comprises:
The new service flow that flows into the described network equipment is carried out type of service identification, and recognition result and the initial threshold strategy that prestores be complementary, described initial threshold strategy comprises the initial rate thresholding of the Business Stream correspondence of each type of service: if there is the initial threshold strategy of coupling, then according to the set rate thresholding of this Business Stream of initial rate threshold setting in the initial threshold strategy of this coupling; Otherwise, the set rate thresholding of a predetermined value is set for described new service flow.
Method of the present invention, wherein, described with the flow management strategy that prestores this Business Stream the processing according to recognition result comprises:
The recognition result and the flow management strategy that prestores are complementary:, then this Business Stream is handled according to this flow management strategy if there is the flow management strategy that is complementary; Otherwise, keep the set rate thresholding of this Business Stream constant, and transmit all data of this Business Stream.
Method of the present invention, wherein, described this Business Stream the processing specifically according to this flow management strategy comprises:
When this flow management strategy requires to limit the flow of this Business Stream, reduce the set rate thresholding of this Business Stream, and abandon the data that exceed described set rate thresholding in this Business Stream;
When this flow management strategy requires to increase the flow of this Business Stream, increase the set rate thresholding of this Business Stream;
When this flow management strategy requires this Business Stream of blocking-up, be zero with the set rate threshold setting of this Business Stream, and abandon all data of this Business Stream.
Method of the present invention, wherein, described data flow is the IP message flow, described characteristic item comprises source IP address, source port number, purpose IP address, destination slogan and the protocol type of IP message.
A kind of network equipment wherein, comprising:
The speed acquiring unit is used to obtain the actual speed rate of every the Business Stream that flows into the network equipment, and described Business Stream is the data flow with same characteristic features item;
Judging unit is used to judge whether the actual speed rate of every Business Stream exceeds the set rate thresholding of this Business Stream, if do not exceed, then triggers first retransmission unit; Otherwise, trigger second retransmission unit;
First retransmission unit is used for the triggering according to described judging unit, transmits the Business Stream that actual speed rate does not exceed the set rate thresholding;
Second retransmission unit is used for the triggering according to described judging unit, by depth detection the type of service that actual speed rate exceeds the Business Stream of set rate thresholding is discerned, and according to recognition result and the flow management strategy that prestores this Business Stream is handled.
The network equipment of the present invention wherein, also comprises:
The initial threshold strategy is preserved the unit, is used to preserve the initial threshold strategy, and described initial threshold strategy comprises the initial rate thresholding of the Business Stream correspondence of each type of service;
Set rate thresholding determining unit, be used for the type of service of the new service flow that flows into the described network equipment is discerned, and recognition result and described initial threshold strategy are preserved the initial threshold strategy of preserving the unit be complementary: if there is the initial threshold strategy of coupling, then according to the set rate thresholding of this Business Stream of initial rate threshold setting in the initial threshold strategy of this coupling; Otherwise, the set rate thresholding of a predetermined value is set for described new service flow.
The network equipment of the present invention, wherein, described second retransmission unit comprises:
The type of service recognition unit is used for the triggering according to described judging unit, by depth detection the type of service that actual speed rate exceeds the Business Stream of set rate thresholding is discerned;
Matching unit is used for the recognition result of described type of service recognition unit to type of service mated with the flow management strategy that prestores;
First processing unit is used for the flow management strategy that matches according to described matching unit, and described Business Stream is handled;
Second processing unit is used for when described matching unit does not match flow management strategy, keeps the set rate thresholding of this Business Stream, and transmits all data of this Business Stream.
The network equipment of the present invention, wherein, described first processing unit comprises:
First subelement is used for when the described flow management strategy that matches requires to limit the flow of described Business Stream, reduces the set rate thresholding of described Business Stream, and abandons the data that exceed described set rate thresholding in the described Business Stream;
Second subelement is used for when the described flow management strategy that matches requires to increase the flow of this Business Stream, increases the set rate thresholding of this Business Stream;
The 3rd subelement is used for when the described flow management strategy that matches requires to block this Business Stream, is zero with the set rate threshold setting of this Business Stream, and abandons all data of this Business Stream.
The network equipment of the present invention, wherein, described data flow is the IP message flow, described characteristic item comprises source IP address, source port number, purpose IP address, destination slogan and the protocol type of IP message.
From the above as can be seen, the method of a kind of operation flow monitoring provided by the invention and the network equipment, monitor by speed Business Stream, only the Business Stream that exceeds the set rate thresholding is carried out depth detection, and according to type of service that depth detection identified, handle according to corresponding flow management strategy, thereby realization is to the monitoring management of Business Stream.Owing to only the Business Stream that exceeds the set rate thresholding is carried out depth detection, therefore, the present invention can reduce the Business Stream traffic identification and handle shared system resource, reduces the requirement to the network device processing ability.Simultaneously, the present invention adjusts the speed threshold value of the Business Stream that exceeds the set rate thresholding also according to flow management strategy, has realized the flow control function to Business Stream.
Description of drawings
Fig. 1 is the flow chart of the method for the described operation flow monitoring of the embodiment of the invention;
Fig. 2 is the structural representation of the described network equipment of the embodiment of the invention;
Fig. 3 is the structural representation of second retransmission unit in the network equipment shown in the embodiment of the invention;
Fig. 4 is the structural representation of first processing unit in the network equipment shown in the embodiment of the invention.
Embodiment
In data network, can distinguish data flow by characteristic item.Data flow with different characteristic item can be regarded as different Business Streams.Here, described characteristic item comprises each field in the header of data message or port numbers of the network equipment etc.Concrete, for the IP message flow, its header fields includes source IP address, source port number, purpose IP address, destination interface, these five parameters of protocol type are called five-tuple with these five parameters herein, therefore, can be with the characteristic item of described five-tuple, in order to distinguish different Business Streams as the IP message.
Following examples are that example elaborates to the present invention with the IP message flow, but the present invention is not limited to the IP message flow.
In the IP message, described five-tuple can Business Stream of unique identification.Usually, two Business Streams of two-way correspondence can be represented application end to end in the network.In the network equipment, there is described five-tuple to constitute forwarding information table (FIB) usually, the network equipment is transmitted control according to the forwarding information table to message.The concrete type of service of certain Business Stream then can identify the service feature field by depth detection and determine.Generally, a Business Stream is corresponding to a kind of business, and a kind of business may be corresponding to many Business Streams, and for example, the HTTP business that certain user produces when the visit different web sites can be corresponding to many Business Streams.
The present invention mainly solves identification, supervision and the control problem of Business Streams such as similar P2P.Design philosophy of the present invention is: from statistical angle, network traffics have certain rules, and this regularity can get access to by the method for statistics.Change under the little situation in network configuration, this regularity remains unchanged substantially.For example, the internal network of certain company, at network equipment place by various traffic streams is added up, can obtain the traffic models of the said firm, such as, all there is the Business Stream of what type of service in the said firm, what is in the speed range of a certain period miscellaneous service.Here, described speed is meant the bit information amount of this Business Stream in the unit interval.Under normal circumstances, the traffic models of the said firm has certain rules and stable.In addition, the Business Stream of different types of service, the form of expression of its discharge characteristic is also different usually.For example, the P2P business is commonly used to carry out the download and the upload operation of mass data, and the speed of P2P Business Stream is generally relatively more even and can continue the long time, and speed and data volume are generally bigger; And the speed and the data volume of the Business Stream of the web page operation that is undertaken by HTTP are generally smaller, and the duration is very short.
Based on above 2 points, the flow form of expression that is Business Stream with certain rules and different service types of the Business Stream at network equipment place is different usually, in the present embodiment, at first, according under the network normal operation to the statistics (traffic models) of network equipment place Business Stream, in the initial threshold strategy, save as the pairing initial rate thresholding of Business Stream of various typical types of service in advance, here, the setting of described initial rate threshold value can be taken all factors into consideration traffic models and the network bandwidth condition that statistics obtains, and sets according to certain strategy; For the new service flow of the described network equipment of flowing through,, determine the set rate thresholding of this new service flow by mating described initial threshold strategy; Then, the speed of all Business Streams in the real-time monitor network equipment, only when the actual speed rate of certain Business Stream surpasses the set rate thresholding of this Business Stream, just give CPU or other processing apparatus carry out depth detection to message content with this Business Stream, identify the type of service of this Business Stream; According to the type of service that identifies, the coupling flow management strategy according to corresponding processing policy in the flow management strategy, carries out control corresponding to this Business Stream and handles then.
The method of the described operation flow monitoring of present embodiment as shown in Figure 1, may further comprise the steps:
For the IP message that flows into network equipment inbound port, the network equipment can get access to the five-tuple of this IP message by resolving header information, and then determines the Business Stream attribute of this IP message, and promptly which bar Business Stream this IP message belongs to; In the statistics predetermined amount of time, as 1 second, the total amount of data of every Business Stream divided by described time period duration, can obtain the actual speed rate of every Business Stream with described total amount of data.To the realization of Business Stream speed statistics, can realize work such as the byte quantity of identification, statistical service stream of Business Stream and Business Stream rate calculations by special-purpose application-specific IC (ASIC), field programmable logic device (FPGA) or CPU.
Here, in specific implementation, can on the basis of forwarding information table five-tuple, increase actual speed rate and two attributes of set rate thresholding of Business Stream, be used to write down and preserve the actual speed rate of the Business Stream that obtains and the set rate threshold parameter of this Business Stream, the structure of described forwarding information table is as shown in table 1:
| Source IP address | Source port number | Purpose IP address | Destination interface | Protocol type | Actual speed rate | The set rate thresholding |
| …… | …… | …… | …… | …… | …… | …… |
Table 1
The concrete numerical value of the set rate thresholding in the table 1 can be determined in such a way: at first by the Business Stream at this network equipment place is added up, and the statistics of the Business Stream of the various types of traffic of this network equipment that obtains flowing through; According to this statistics, take all factors into consideration network bandwidth condition, according to specific strategy is that the Business Stream of various typical types of service is provided with corresponding initial rate thresholding, and the initial rate thresholding of the Business Stream of each type of service is kept in the initial threshold strategy of the network equipment; After this network equipment receives certain bar new service flow, the network equipment is by the top n message to this new service flow, as preceding 100 messages, carry out depth detection, in order to discern the type of service of this new service flow, and recognition result and described initial threshold strategy be complementary: if there is initial threshold strategy with the Business Stream coupling of this type of service, then according to the set rate thresholding of this new service flow of initial rate threshold setting in the initial threshold strategy of this coupling; The set rate thresholding of one predetermined value if there is no, then is set for this new service flow.The value of above-mentioned N can be selected according to system's actual needs, in order to identify the service feature field of Business Stream, need analyze a plurality of IP messages usually, to obtain business information wherein.
Here, the Business Stream that does not exceed the set rate thresholding for actual speed rate, because its speed is less, influence to the network bandwidth is little, therefore, and for this Business Stream, can directly transmit, and it is not done depth detection, thus reduce the workload that needs depth detection, reduce requirement to the network device processing ability.
Here, for the Business Stream that exceeds the set rate thresholding, the network equipment carries out the traffic identification of the degree of depth with the IP message of this Business Stream by depth detection, and recognition result and the flow management strategy that prestores are complementary:
If can mate certain bar flow management strategy, then handle according to this flow management strategy, specifically comprise: when requiring to limit the flow of this Business Stream, then according to the requirement of flow management strategy, can reduce the set rate thresholding of this Business Stream, and abandon the IP message that exceeds described set rate thresholding in this Business Stream; When requiring to increase the flow of this Business Stream,, can increase the set rate thresholding of this Business Stream then according to the requirement of flow management strategy; When requiring to block this Business Stream, can be zero with the set rate threshold setting of this Business Stream, and abandon all IP messages of this Business Stream;
If there is not the flow management strategy of coupling, then may be because do not identify the type of service (reason may be that the identification of the service feature field of this Business Stream need be by the IP message of more number) of this Business Stream or less than flow management strategy at this type of service Business Stream, at this moment, the network equipment keeps the set rate threshold value of this Business Stream constant, and transmits all IP messages of this Business Stream.Because the set rate thresholding is constant, so this Business Stream will be always by depth detection to carry out traffic identification, up to mating flow management strategy, for example, in the type of service that identifies this Business Stream or after having increased flow management strategy at this Business Stream, this Business Stream just can mate corresponding flow management strategy, thereby the network equipment can carry out respective handling to this Business Stream according to corresponding flow management strategy.
Above-mentioned processing for the Business Stream that exceeds the set rate thresholding can be provided with different flow management strategies according to system's needs, to reach the flow of restriction such as the P2P business, guarantees the purposes such as quality of key business.Above-mentioned flow management strategy includes but not limited to the processing to flow.
In the present embodiment, owing to do not need all Business Streams are carried out the detection of the degree of depth, and realize that the speed statistics of Business Stream is more a lot of easily than the realization depth detection, therefore with respect to prior art, the present invention decreases to the requirement of network device processing ability.Because needed hardware resource is added up and managed to the speed of Business Stream will be far smaller than the needed hardware resource of depth detection, therefore, under similar hardware configuration, adopt the described method of present embodiment can improve the traffic identification of the network equipment and the performance of supervision to a great extent, thereby provide the network equipment for the user than high performance-price ratio.In addition, because present embodiment has adopted the speed monitoring, has gone up layer analysis (depth detection), has transmitted the control procedure of controlling such closed loop, it is certain intelligent to make network have, controllability to network traffics and business is better, effectively avoid prior art when flow exceeds the disposal ability of the network equipment, adopted the mode of stochastical sampling message to be handled the uncertain problem that is caused.
Based on the method for above-mentioned operation flow monitoring, present embodiment also correspondingly provides a kind of network equipment.As shown in Figure 2, this network equipment comprises:
The speed acquiring unit is used to obtain the actual speed rate of every the Business Stream that flows into the network equipment, and described Business Stream is the data flow with same characteristic features item.Here, what described data flow was concrete is the IP message flow, and described characteristic item comprises source IP address, source port number, purpose IP address, destination slogan and the protocol type of IP message.
The initial threshold strategy is preserved the unit, is used to preserve the initial threshold strategy, and described initial threshold strategy comprises the initial rate thresholding of the Business Stream correspondence of each type of service.Here, described initial rate thresholding can be the statistics setting of basis to the Business Stream of each type of service of the described network equipment of flowing through.
Set rate thresholding determining unit, be used to pass through depth detection, type of service to the new service flow that flows into the described network equipment is discerned, and recognition result and described initial threshold strategy are preserved the initial threshold strategy of preserving the unit be complementary: if there is the initial threshold strategy of coupling, then according to the set rate thresholding of this Business Stream of initial rate threshold setting in the initial threshold strategy of this coupling; Otherwise, the set rate thresholding of a predetermined value is set for described new service flow.
Judging unit is used to judge whether the actual speed rate of every Business Stream exceeds the set rate thresholding of this Business Stream, if do not exceed, then triggers first retransmission unit; Otherwise, trigger second retransmission unit.
First retransmission unit is used for the triggering according to described judging unit, transmits the Business Stream that actual speed rate does not exceed the set rate thresholding.
Second retransmission unit is used for the triggering according to described judging unit, by depth detection the type of service that actual speed rate exceeds the Business Stream of set rate thresholding is discerned, and according to recognition result and the flow management strategy that prestores this Business Stream is handled.
As shown in Figure 3, described second retransmission unit specifically comprises:
The type of service recognition unit is used for the triggering according to described judging unit, by depth detection the type of service that actual speed rate exceeds the Business Stream of set rate thresholding is discerned;
Matching unit is used for the recognition result of described type of service recognition unit to type of service mated with the flow management strategy that prestores;
First processing unit is used for the flow management strategy that matches according to described matching unit, and described Business Stream is handled;
Second processing unit is used for when described matching unit does not match flow management strategy, keeps the set rate thresholding of this Business Stream, and transmits all data of this Business Stream.
Wherein,, please refer to Fig. 4, can specifically comprise again for described first processing unit:
First subelement is used for when the described flow management strategy that matches requires to limit the flow of described Business Stream, reduces the set rate thresholding of described Business Stream, and abandons the data that exceed described set rate thresholding in the described Business Stream;
Second subelement is used for when the described flow management strategy that matches requires to increase the flow of this Business Stream, increases the set rate thresholding of this Business Stream;
The 3rd subelement is used for when the described flow management strategy that matches requires to block this Business Stream, is zero with the set rate threshold setting of this Business Stream, and abandons all data of this Business Stream.
In sum, the method of the described operation flow monitoring of the embodiment of the invention and the network equipment, by only the Business Stream that exceeds the set rate thresholding being carried out depth detection, handle shared system resource thereby reduced the Business Stream traffic identification, reduce requirement greatly to the disposal ability of the network equipment.
The method of operation flow monitoring of the present invention and the network equipment, be not restricted to listed utilization in specification and the execution mode, it can be applied to various suitable the present invention's field fully, for those skilled in the art, can easily realize additional advantage and make amendment, therefore under the situation of the spirit and scope of the universal that does not deviate from claim and equivalency range and limited, the examples shown that the present invention is not limited to specific details, representational equipment and illustrates here and describe.
Claims (10)
1. the method for an operation flow monitoring is characterized in that, described method comprises:
Obtain the actual speed rate of every the Business Stream that flows into the network equipment, described Business Stream is the data flow with same characteristic features item;
Judge that whether the actual speed rate of every Business Stream exceeds the set rate thresholding of this Business Stream, if do not exceed, then transmits this Business Stream; Otherwise, by depth detection the type of service of this Business Stream is discerned, and this Business Stream is handled according to recognition result and the flow management strategy that prestores.
2. the method for claim 1 is characterized in that, described method also comprises:
The new service flow that flows into the described network equipment is carried out type of service identification, and recognition result and the initial threshold strategy that prestores be complementary, described initial threshold strategy comprises the initial rate thresholding of the Business Stream correspondence of each type of service: if there is the initial threshold strategy of coupling, then according to the set rate thresholding of this Business Stream of initial rate threshold setting in the initial threshold strategy of this coupling; Otherwise, the set rate thresholding of a predetermined value is set for described new service flow.
3. the method for claim 1 is characterized in that, described with the flow management strategy that prestores this Business Stream the processing according to recognition result comprises:
The recognition result and the flow management strategy that prestores are complementary:, then this Business Stream is handled according to this flow management strategy if there is the flow management strategy that is complementary; Otherwise, keep the set rate thresholding of this Business Stream constant, and transmit all data of this Business Stream.
4. method as claimed in claim 3 is characterized in that,
Described this Business Stream the processing specifically according to this flow management strategy comprises:
When this flow management strategy requires to limit the flow of this Business Stream, reduce the set rate thresholding of this Business Stream, and abandon the data that exceed described set rate thresholding in this Business Stream;
When this flow management strategy requires to increase the flow of this Business Stream, increase the set rate thresholding of this Business Stream;
When this flow management strategy requires this Business Stream of blocking-up, be zero with the set rate threshold setting of this Business Stream, and abandon all data of this Business Stream.
5. as each described method of claim 1 to 4, it is characterized in that described data flow is the IP message flow, described characteristic item comprises source IP address, source port number, purpose IP address, destination slogan and the protocol type of IP message.
6. a network equipment is characterized in that, comprising:
The speed acquiring unit is used to obtain the actual speed rate of every the Business Stream that flows into the network equipment, and described Business Stream is the data flow with same characteristic features item;
Judging unit is used to judge whether the actual speed rate of every Business Stream exceeds the set rate thresholding of this Business Stream, if do not exceed, then triggers first retransmission unit; Otherwise, trigger second retransmission unit;
First retransmission unit is used for the triggering according to described judging unit, transmits the Business Stream that actual speed rate does not exceed the set rate thresholding;
Second retransmission unit is used for the triggering according to described judging unit, by depth detection the type of service that actual speed rate exceeds the Business Stream of set rate thresholding is discerned, and according to recognition result and the flow management strategy that prestores this Business Stream is handled.
7. the network equipment as claimed in claim 6 is characterized in that, also comprises:
The initial threshold strategy is preserved the unit, is used to preserve the initial threshold strategy, and described initial threshold strategy comprises the initial rate thresholding of the Business Stream correspondence of each type of service;
Set rate thresholding determining unit, be used for the type of service of the new service flow that flows into the described network equipment is discerned, and recognition result and described initial threshold strategy are preserved the initial threshold strategy of preserving the unit be complementary: if there is the initial threshold strategy of coupling, then according to the set rate thresholding of this Business Stream of initial rate threshold setting in the initial threshold strategy of this coupling; Otherwise, the set rate thresholding of a predetermined value is set for described new service flow.
8. the network equipment as claimed in claim 6 is characterized in that, described second retransmission unit comprises:
The type of service recognition unit is used for the triggering according to described judging unit, by depth detection the type of service that actual speed rate exceeds the Business Stream of set rate thresholding is discerned;
Matching unit is used for the recognition result of described type of service recognition unit to type of service mated with the flow management strategy that prestores;
First processing unit is used for the flow management strategy that matches according to described matching unit, and described Business Stream is handled;
Second processing unit is used for when described matching unit does not match flow management strategy, keeps the set rate thresholding of this Business Stream, and transmits all data of this Business Stream.
9. the network equipment as claimed in claim 8 is characterized in that, described first processing unit comprises:
First subelement is used for when the described flow management strategy that matches requires to limit the flow of described Business Stream, reduces the set rate thresholding of described Business Stream, and abandons the data that exceed described set rate thresholding in the described Business Stream;
Second subelement is used for when the described flow management strategy that matches requires to increase the flow of this Business Stream, increases the set rate thresholding of this Business Stream;
The 3rd subelement is used for when the described flow management strategy that matches requires to block this Business Stream, is zero with the set rate threshold setting of this Business Stream, and abandons all data of this Business Stream.
10. the network equipment as claimed in claim 9 is characterized in that, described data flow is the IP message flow, and described characteristic item comprises source IP address, source port number, purpose IP address, destination slogan and the protocol type of IP message.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CNA2008100557522A CN101217494A (en) | 2008-01-08 | 2008-01-08 | A method and network device for operation flow monitoring |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CNA2008100557522A CN101217494A (en) | 2008-01-08 | 2008-01-08 | A method and network device for operation flow monitoring |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN101217494A true CN101217494A (en) | 2008-07-09 |
Family
ID=39623856
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CNA2008100557522A Pending CN101217494A (en) | 2008-01-08 | 2008-01-08 | A method and network device for operation flow monitoring |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN101217494A (en) |
Cited By (10)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2011009306A1 (en) * | 2009-07-24 | 2011-01-27 | 中兴通讯股份有限公司 | Service flux allocation method and equipment thereof |
| CN101447934B (en) * | 2008-11-06 | 2011-07-27 | 中国移动（深圳）有限公司 | Business flow-recognizing method and system thereof and business flow charging method and system thereof |
| CN101616098B (en) * | 2009-08-12 | 2011-11-16 | 杭州华三通信技术有限公司 | Method and device for dispatching TCP data stream |
| CN102946360A (en) * | 2012-12-03 | 2013-02-27 | 深圳中兴网信科技有限公司 | Network flow control system and network flow control method |
| CN102984077A (en) * | 2012-12-04 | 2013-03-20 | 中国联合网络通信集团有限公司 | Network congestion control method and system |
| CN105530302A (en) * | 2015-12-15 | 2016-04-27 | 中国联合网络通信集团有限公司 | A method and system for controlling uplink bandwidth |
| CN106358232A (en) * | 2015-07-14 | 2017-01-25 | 中国移动通信集团公司 | Method, device and system for monitoring business speeds of cellular networks |
| CN111371699A (en) * | 2020-02-28 | 2020-07-03 | 五八有限公司 | Resource current limiting method and device, electronic equipment and storage medium |
| CN112448918A (en) * | 2019-08-29 | 2021-03-05 | 华为技术有限公司 | Message transmission method and device and computer storage medium |
| CN115037694A (en) * | 2022-04-26 | 2022-09-09 | 上海地面通信息网络股份有限公司 | Data transmission method and device, electronic equipment and storage medium |
-
2008
- 2008-01-08 CN CNA2008100557522A patent/CN101217494A/en active Pending
Cited By (15)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101447934B (en) * | 2008-11-06 | 2011-07-27 | 中国移动（深圳）有限公司 | Business flow-recognizing method and system thereof and business flow charging method and system thereof |
| WO2011009306A1 (en) * | 2009-07-24 | 2011-01-27 | 中兴通讯股份有限公司 | Service flux allocation method and equipment thereof |
| US8780707B2 (en) | 2009-07-24 | 2014-07-15 | Zte Corporation | Service flux allocation method and equipment thereof |
| CN101616098B (en) * | 2009-08-12 | 2011-11-16 | 杭州华三通信技术有限公司 | Method and device for dispatching TCP data stream |
| CN102946360A (en) * | 2012-12-03 | 2013-02-27 | 深圳中兴网信科技有限公司 | Network flow control system and network flow control method |
| CN102946360B (en) * | 2012-12-03 | 2016-04-13 | 深圳中兴网信科技有限公司 | Network flow control system and method for controlling network flow |
| CN102984077B (en) * | 2012-12-04 | 2015-09-16 | 中国联合网络通信集团有限公司 | The control method of network congestion and system |
| CN102984077A (en) * | 2012-12-04 | 2013-03-20 | 中国联合网络通信集团有限公司 | Network congestion control method and system |
| CN106358232A (en) * | 2015-07-14 | 2017-01-25 | 中国移动通信集团公司 | Method, device and system for monitoring business speeds of cellular networks |
| CN105530302A (en) * | 2015-12-15 | 2016-04-27 | 中国联合网络通信集团有限公司 | A method and system for controlling uplink bandwidth |
| CN112448918A (en) * | 2019-08-29 | 2021-03-05 | 华为技术有限公司 | Message transmission method and device and computer storage medium |
| US12170652B2 (en) | 2019-08-29 | 2024-12-17 | Huawei Technologies Co., Ltd. | Packet transmission method and apparatus and computer storage medium |
| CN111371699A (en) * | 2020-02-28 | 2020-07-03 | 五八有限公司 | Resource current limiting method and device, electronic equipment and storage medium |
| CN111371699B (en) * | 2020-02-28 | 2023-07-21 | 五八有限公司 | Resource current limiting method and device, electronic equipment and storage medium |
| CN115037694A (en) * | 2022-04-26 | 2022-09-09 | 上海地面通信息网络股份有限公司 | Data transmission method and device, electronic equipment and storage medium |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN101217494A (en) | A method and network device for operation flow monitoring | |
| CN106815112B (en) | Massive data monitoring system and method based on deep packet inspection | |
| US9906495B2 (en) | Network device implementing two-stage flow information aggregation | |
| CN100493094C (en) | P2P data message detection method based on feature code | |
| CA2607607C (en) | Traffic analysis on high-speed networks | |
| US20070160073A1 (en) | Packet communications unit | |
| DE202021103381U1 (en) | Computer readable medium and systems for implementing a regionally contiguous proxy service | |
| US12250151B2 (en) | Method and system for triggering augmented data collection on a network based on traffic patterns | |
| Chen et al. | Comprehensive understanding of TCP Incast problem | |
| KR101602189B1 (en) | traffic analysis and network monitoring system by packet capturing of 10-giga bit data | |
| CN108111558A (en) | A kind of high-speed packet disposal method, apparatus and system | |
| CN1750538B (en) | Method for discovering and controlling of producing flow based on P2P high speed unloading software | |
| CN107547425B (en) | Convergence layer data transmission method and system | |
| CN102480503B (en) | P2P (peer-to-peer) traffic identification method and P2P traffic identification device | |
| Freire et al. | On metrics to distinguish skype flows from http traffic | |
| Rossi et al. | A detailed measurement of skype network traffic. | |
| CN109842623A (en) | Big data distribution method for industry control safety database auditing system | |
| Monakhov et al. | On the behavior of drop-tail queue management algorithms under high packet loss | |
| Chen et al. | Stochastic RED and its applications | |
| CN101558604B (en) | Method and apparatus for peer-to-peer network traffic analysis | |
| US10644983B2 (en) | Control plane analytics and policing | |
| CN102136952B (en) | Condition code failure detection method and system | |
| CN100362809C (en) | Method for controlling BT client end data transmission | |
| Morzelona | An experimental study of various network protocols and understanding its implementation in real world | |
| Monakhov et al. | Analysis Of Congestion Control In Data Channels With Frequent Frame Loss |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C02 | Deemed withdrawal of patent application after publication (patent law 2001) | ||
| WD01 | Invention patent application deemed withdrawn after publication |
Open date: 20080709 |