CN107147585A - A kind of flow control methods and device - Google Patents
A kind of flow control methods and device Download PDFInfo
- Publication number
- CN107147585A CN107147585A CN201710210707.9A CN201710210707A CN107147585A CN 107147585 A CN107147585 A CN 107147585A CN 201710210707 A CN201710210707 A CN 201710210707A CN 107147585 A CN107147585 A CN 107147585A
- Authority
- CN
- China
- Prior art keywords
- flow
- target
- mrow
- discarded
- access switch
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L47/00—Traffic control in data switching networks
- H04L47/10—Flow control; Congestion control
- H04L47/12—Avoiding congestion; Recovering from congestion
- H04L47/125—Avoiding congestion; Recovering from congestion by balancing the load, e.g. traffic engineering
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L47/00—Traffic control in data switching networks
- H04L47/10—Flow control; Congestion control
- H04L47/32—Flow control; Congestion control by discarding or delaying data units, e.g. packets or frames
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L49/00—Packet switching elements
- H04L49/20—Support for services
- H04L49/208—Port mirroring
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L49/00—Packet switching elements
- H04L49/70—Virtual switches
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The embodiments of the invention provide a kind of flow control methods and device.This method includes：Target total flow is obtained, wherein, target total flow is the mirror image flow for needing water conservancy diversion to the outer net flow of current divider；Judge whether target total flow is more than or equal to the first predetermined threshold value；If it is, based on communication session, the first flow to be discarded is determined from target total flow, and the first flow to be discarded is abandoned, wherein, the partial data that the corresponding data of the first flow to be discarded are included at least one communication session.Flow control is carried out by scheme provided in an embodiment of the present invention, the accuracy of safety analysis can be improved.
Description
Technical field
The present invention relates to Internet technical field, more particularly to a kind of flow control methods and device.
Background technology
Current common virtual network fire wall is generally located on outer network switch, directly can pass through virtual network
Fire wall is managed to the outer net flow imported by outer network switch, but some virtual network fire walls, such as sunk type are empty
Intend network firewall, be arranged within outer network switch, the flow inside outer net flow and outer network switch is mixed, manage
Reason will be more complicated.
As shown in figure 1, sunk type virtual network fire wall includes current divider, analyzer and SDN (Software
Defined Network, software defined network) controller, wherein, outer net flow is imported LB (Load by outer network switch first
Balance, load balancing) cluster, then, replicates the mirror image flow for obtaining above-mentioned outer net flow, and the importing of mirror image flow is divided
Device is flowed, and the mirror image flow that current divider can then import outer network switch is sent to analyzer to carry out safety analysis, finally, by
Analyzer obtain safety analysis result, and by the result of the safety analysis by SDN controllers feed back to outer network switch and
LB clusters, so outer network switch and LB clusters can according to above-mentioned safety analysis output control outer net flow to interior business
Access.
In practical application, when outer net flow is more than the current limliting total flow of current divider, showing for packet packet loss will occur
As, for example, outer net flow is 30G, and current divider can only allow 20G flows to pass through, then will have 10G flows to be dropped,
In the prior art, it is the data randomly selected that the 10G abandoned is needed in usually random drop packet, i.e., above-mentioned examples cited
Bag, so just may result in the partial data for abandoning a communication session, in this way, when carrying out safety analysis, for one
Communication session, it is likely that be only collected into " shaking hands " related packet, and analyzed device is considered that only " shaking hands " is without " data
Transmission " takes the malicious traffic stream of server, that is, cannot be used for carrying out the invalid outer net flow of safety analysis, so as to reduce
It is used for the effective outer net flow of safety analysis, causes the accuracy of safety analysis low.
The content of the invention
The purpose of the embodiment of the present invention is to provide a kind of flow control methods and device, to improve the accurate of safety analysis
Property.Concrete technical scheme is as follows：
In a first aspect, the embodiments of the invention provide a kind of flow control methods, methods described includes：
Target total flow is obtained, wherein, the target total flow is the mirror image for needing water conservancy diversion to the outer net flow of current divider
Flow；
Judge whether the target total flow is more than or equal to the first predetermined threshold value；
If it is, based on communication session, the first flow to be discarded is determined from the target total flow, and abandon described the
One flow to be discarded, wherein, the corresponding data of first flow to be discarded at least one communication session included it is complete
Data.
Alternatively, it is described from the target total flow determine the first flow to be discarded the step of, including：
Determine targeted loads balancing cluster；
From target mirror as determining the first flow to be discarded in flow, wherein, the target mirror is as flow：The target is total
The mirror image flow of the outer net flow of the targeted loads balancing cluster is imported in flow.
Alternatively, it is described from target mirror as in flow determine the first flow to be discarded the step of, including：
According to preset ratio, from target mirror as determining the first flow to be discarded in flow.
Alternatively, the step of determination targeted loads balancing cluster, including：
The load balancing cluster of the maximum flow of importing is defined as targeted loads balancing cluster.
Alternatively, the preset ratio is 1/Num；Wherein, Num is the port number that the targeted loads balancing cluster takes
Amount.
Alternatively, it is described according to preset ratio, from target mirror as the step of the first flow to be discarded of determination, being wrapped in flow
Include：
Target port is determined in the port taken from the targeted loads balancing cluster；
The mirror image flow that the outer net flow of the target port will be imported in the target total flow is defined as first and waits to lose
Abandoned stream amount.
Alternatively, it is described from the target total flow determine the first flow to be discarded the step of, including：
Determine the destination virtual network address；
Virtual network address in the target total flow is defined as first for the flow of the destination virtual network address
Flow to be discarded.
Alternatively, a kind of flow control methods that the embodiment of the present invention is provided, in addition to：
Determine target Intranet access switch；
Obtain the corresponding first line of a couplet bandwidth congestion degree of the target Intranet access switch；
According to the first line of a couplet bandwidth congestion degree, destination sample weighted value is determined；
According to the destination sample weighted value, based on communication session, the second flow to be discarded is determined from target flow, and
Abandon the described second flow to be discarded；Wherein, the target flow is that the target total flow or target Intranet access are handed over
Change planes flow derived from corresponding current divider；The corresponding data of second flow to be discarded are wrapped by least one communication session
The partial data contained.
Alternatively, it is described the step of obtain the target Intranet access switch corresponding first line of a couplet bandwidth congestion degree, bag
Include：
Obtain the corresponding flow delay of the target Intranet access switch；
According to below equation, the corresponding first line of a couplet bandwidth congestion degree of the target Intranet access switch is determined：
Wherein, L is the first line of a couplet bandwidth congestion degree, and n is the sampling number in preset time window, and m is default smooth
Points, RTTijFor the flow delay, j is the identification information of data package size, and RTT is preset initial value, related to j.
Alternatively, it is described according to the first line of a couplet bandwidth congestion degree, the step of determining destination sample weighted value, including：
Obtain the flow accounting of the Intranet north and south upper united mouth of the target Intranet access switch；
Destination sample weighted value is determined according to below equation：
Ws=Max (1-L, B)
Wherein, WsFor the destination sample weighted value, L is the first line of a couplet bandwidth congestion degree, and B is the flow accounting,
Max () is maximizing function.
Second aspect, the embodiments of the invention provide a kind of volume control device, described device includes：
First obtains module, for obtaining target total flow, wherein, the target total flow is to need water conservancy diversion to current divider
Outer net flow mirror image flow；
Judge module, for judging whether the target total flow is more than or equal to the first predetermined threshold value；
First determining module, in the judged result of the judge module in the case of being, based on communication session, from
The first flow to be discarded is determined in the target total flow；
First discard module, for abandoning the described first flow to be discarded, wherein, first flow to be discarded is corresponding
The partial data that data are included at least one communication session.
Alternatively, first determining module, including：
First determination sub-module, for determining targeted loads balancing cluster；
Second determination sub-module, for from target mirror as in flow determine the first flow to be discarded, wherein, the target mirror
As flow is：The mirror image flow of the outer net flow of the targeted loads balancing cluster is imported in the target total flow.
Alternatively, second determination sub-module, specifically for：
According to preset ratio, from target mirror as determining the first flow to be discarded in flow.
Alternatively, first determination sub-module, specifically for：
The load balancing cluster of the maximum flow of importing is defined as targeted loads balancing cluster.
Alternatively, the preset ratio is 1/Num；Wherein, Num is the port number that the targeted loads balancing cluster takes
Amount.
Alternatively, second determination sub-module, specifically for：
Target port is determined in the port taken from the targeted loads balancing cluster；
The mirror image flow that the outer net flow of the target port will be imported in the target total flow is defined as first and waits to lose
Abandoned stream amount.
Alternatively, first determining module, specifically for：
Determine the destination virtual network address；
Virtual network address in the target total flow is defined as first for the flow of the destination virtual network address
Flow to be discarded.
Alternatively, a kind of volume control device that the embodiment of the present invention is provided, in addition to：
Second determining module, for determining target Intranet access switch；
Second obtains module, for obtaining the corresponding first line of a couplet bandwidth congestion degree of the target Intranet access switch；
3rd determining module, for according to the first line of a couplet bandwidth congestion degree, determining destination sample weighted value；
Second discard module, for according to the destination sample weighted value, based on communication session, is determined from target flow
Second flow to be discarded, and abandon the described second flow to be discarded；Wherein, the target flow is the target total flow or institute
State flow derived from the corresponding current divider of target Intranet access switch；The corresponding data of second flow to be discarded are at least
The partial data that one communication session is included.
Alternatively, described second module is obtained, specifically for：
Obtain the corresponding flow delay of the target Intranet access switch；
According to below equation, the corresponding first line of a couplet bandwidth congestion degree of the target Intranet access switch is determined：
Wherein, L is the first line of a couplet bandwidth congestion degree, and n is the sampling number in preset time window, and m is default smooth
Points, RTTijFor the flow delay, j is the identification information of data package size, and RTT is preset initial value, related to j.
Alternatively, the 3rd determining module, specifically for：
Obtain the flow accounting of the Intranet north and south upper united mouth of the target Intranet access switch；
Destination sample weighted value is determined according to below equation：
Ws=Max (1-L, B)
Wherein, WsFor the destination sample weighted value, L is the first line of a couplet bandwidth congestion degree, and B is the flow accounting,
Max () is maximizing function.
In flow control plan provided in an embodiment of the present invention, the outer net flow for needing water conservancy diversion to current divider can be first obtained
Mirror image flow, i.e. then target total flow judges whether target total flow is more than or equal to the first predetermined threshold value, if it is, just
Based on communication session, the first flow to be discarded is determined from target total flow, and abandons the first flow to be discarded, wherein, first
The partial data that the corresponding data of flow to be discarded are included at least one communication session.As can be seen that the application present invention is real
The technical scheme of example offer is provided, flow can be lost based on communication session, discarding be all communication session one by one complete number
, so,, will not be because of the data for being only collected into " shaking hands " correlation for a communication session when carrying out safety analysis according to bag
Bag, and analyzed device is mistakenly considered the malicious traffic stream that only " shaking hands " takes server without " data transfer ", is abandoned,
Compared with prior art, it is therefore prevented that for the further reduction of effective outer net flow of safety analysis, improve safety analysis
Accuracy.
Brief description of the drawings
In order to illustrate more clearly about the embodiment of the present invention or technical scheme of the prior art, below will be to embodiment or existing
There is the accompanying drawing used required in technology description to be briefly described, it should be apparent that, drawings in the following description are only this
Some embodiments of invention, for those of ordinary skill in the art, on the premise of not paying creative work, can be with
Other accompanying drawings are obtained according to these accompanying drawings.
Fig. 1 is the schematic diagram of sunk type virtual network fire wall in the prior art；
Fig. 2 is a kind of schematic flow sheet of flow control methods provided in an embodiment of the present invention；
Fig. 3 is the network architecture schematic diagram of sunk type virtual network fire wall in the prior art；
Fig. 4 is another schematic flow sheet of flow control methods provided in an embodiment of the present invention；
Fig. 5 is a kind of network architecture schematic diagram implemented of inventive embodiments shown in Fig. 4；
Fig. 6 is a kind of structural representation of volume control device provided in an embodiment of the present invention；
Fig. 7 is another structural representation of volume control device provided in an embodiment of the present invention.
Embodiment
Below in conjunction with the accompanying drawing in the embodiment of the present invention, the technical scheme in the embodiment of the present invention is carried out clear, complete
Site preparation is described, it is clear that described embodiment is only a part of embodiment of the invention, rather than whole embodiments.It is based on
Embodiment in the present invention, it is every other that those of ordinary skill in the art are obtained under the premise of creative work is not made
Embodiment, belongs to the scope of protection of the invention.
In order to improve the accuracy of safety analysis, the embodiments of the invention provide a kind of flow control methods and device.
A kind of flow control methods provided in an embodiment of the present invention are introduced first below.
As shown in Fig. 2 a kind of flow control methods provided in an embodiment of the present invention, comprise the following steps：
S201, obtains target total flow.
Wherein, target total flow is the mirror image flow for needing water conservancy diversion to the outer net flow of current divider.It is understood that point
Device, i.e. network shunt device (Network Tap) are flowed, is a hardware device, is generally concatenated into network, the embodiment of the present invention
In, current divider is used to the mirror image flow of outer net flow being sent to analyzer, and analyzer is used to pacify the flow of importing
Complete analysis.
, can be when there is outer net flow to come to visit in a kind of implementation of the application, the handle by the way of full mirror image
Then outer net flow all water conservancy diversion, all flows of diverter ports are dynamically obtained based on SDN controllers, are obtained to current divider
The flow got is target total flow, it is to be understood that current divider is direct to be connected with outer network switch；With outer
Constantly visiting and data packet discarding processing of net flow etc., target total flow is dynamic change.Wherein, SDN controllers are
Connect bottom-layer network switching equipment and the bridge of upper layer application, on the one hand, SDN controllers are by southbound interface agreement to underlying network
Network switching equipment is managed concentratedly, status monitoring, forwarding decision and processing and the flow for dispatching datum plane；The opposing party
Face, SDN controllers open the programmability of many levels by northbound interface to upper layer application, it is allowed to which the network user is according to spy
Fixed application scenarios neatly formulate various network strategies, it is necessary to illustrate, on SDN controllers and how based on SDN
All flows that controller obtains diverter ports are prior art, and here is omitted.
S202, judges whether target total flow is more than or equal to the first predetermined threshold value, if so, performing S203.
Wherein it is possible to by judging whether target total flow is more than or equal to the first predetermined threshold value, to determine target total flow
Whether can normally transmit, specifically, if target total flow is more than or equal to the first predetermined threshold value, show target total flow not
Energy normal transmission, then, to ensure the normal transmission of data, it is to avoid cause data congestion, S203 just can be performed, packet loss is carried out
Processing.
Above-mentioned first predetermined threshold value can determine according to the current limliting size of current divider, can also be developer according to
Experience setting, the application is defined not to this.
S203, based on communication session, determines the first flow to be discarded, and abandon the first stream to be discarded from target total flow
Amount.
If it should be noted that S202 judged result is yes, then, just can be according to the size of target total flow and the
The relation of one predetermined threshold value, based on communication session, determines the first flow to be discarded, and the identified first flow to be discarded is lost
Abandon, that is, realize the sampling current limliting to target total flow.
Wherein, based on communication session, show that the corresponding data of the first flow to be discarded are wrapped by least one communication session
The partial data contained, i other words, the first flow to be discarded is the data using communication session as granularity, then to the flow analyzed
Data be also using communication session as granularity, compared with prior art, be not in some communication session data it is incomplete
Situation.
It should be noted that target total flow is the mirror image flow for the outer net flow importeding into load balancing cluster, with
The flow that load balancing cluster is imported has corresponding relation, and the flow for importeding into same load balancing cluster generally all has
Some identical attribute, such as destination address all corresponds to a certain specific interior business, then, in order to quickly and easily determine
Flow to be discarded, just can be directly based upon some load balancing cluster, according to the outer net stream for importing the load balancing cluster
The characteristic of amount, directly determines flow to be discarded from target total flow, and is not required to use across the load balancing collection of other modes
Group determines flow to be discarded.
In the first implementation, the step of determining the first flow to be discarded in the total flow from target can wrap
Include：
Determine targeted loads balancing cluster；
From target mirror as determining the first flow to be discarded in flow, wherein, target mirror is as flow：Led in target total flow
Enter the mirror image flow of the outer net flow of targeted loads balancing cluster.
For realize for greater flexibility sampling current limliting control, it is described from target mirror as in flow determine the first flow to be discarded
Step, can include：
According to preset ratio, from target mirror as determining the first flow to be discarded in flow.
It is understood that target total flow is dynamic change, wherein because current divider is as funnel, typically by
When obstruction abandons flow, current divider is also ceaselessly exporting flow, so that cause the relative reduction of target total flow,
It therefore, it can once only abandon the part in the mirror image flow for the outer net flow for importing targeted loads balancing cluster, if abandoning
Target total flow afterwards can repeat the above steps still greater than equal to the first predetermined threshold value, abandon again one in target total flow
Partial discharge, can so reduce the total flow for being actually needed discarding, that is, prevent effective outer net flow for safety analysis
Further reduction, improve the accuracy of safety analysis.
It should be noted that when the load balancing cluster for the maximum flow that targeted loads balancing cluster is introduced into, accordingly
Ground, the first flow to be discarded determined according to preset ratio also can be larger, divides in this way, outer net flow can be imported more quickly
Device is flowed, transmits to analyzer, carries out safety analysis.Therefore, the step of determination targeted loads balancing cluster, can include：
The load balancing cluster of the maximum flow of importing is defined as targeted loads balancing cluster.
The load balancing cluster for importing maximum flow is defined as targeted loads balancing cluster, can be ensured to a certain extent
Accelerate the discarding speed of flow, and then accelerate the convergence rate of flow control process.
It should be noted that a LB cluster, when being connected with outer network switch, may take multiple outer nets and hand over
The port changed planes, because a port includes multiple VIP (Virtual IP, virtual network address), and a VIP is corresponding is
Multiple complete communication sessions, therefore, corresponding a port is also multiple complete communication sessions, then, based on communication meeting
Words determine first flow to be discarded, can be implemented based on port.
Wherein, determined based on port during the first flow to be discarded, preset ratio can be 1/Num；Wherein, Num is mesh
Mark the port number that load balancing cluster takes；Correspondingly, it is described according to preset ratio, from target mirror as determining first in flow
The step of flow to be discarded, it can include：
Target port is determined in the port taken from targeted loads balancing cluster；
The mirror image flow that the outer net flow of target port will be imported in target total flow is defined as the first flow to be discarded.
It is understood that because the corresponding flow of every Single port that targeted loads balancing cluster takes is identical, therefore, mesh
Mark port can be the either port in the port that targeted loads balancing cluster takes.
It is multiple complete communication sessions because a VIP is corresponding in second of implementation, therefore, based on logical
Letter session determines the first flow to be discarded, can be implemented based on VIP, specifically, true in the total flow from target
The step of fixed first flow to be discarded, it can include：
Determine the destination virtual network address；
Virtual network address in target total flow is defined as the first stream to be discarded for the flow of the destination virtual network address
Amount.
It should be noted that due to a VIP include multiple communication sessions, therefore, using VIP as granularity, it is determined that first
What the corresponding packet of flow to be discarded contained is all complete communication session data.
In the flow control plan that embodiment illustrated in fig. 2 is provided, the outer net for needing water conservancy diversion to current divider can be first obtained
The mirror image flow of flow, i.e. target total flow, then judge whether target total flow is more than or equal to the first predetermined threshold value, if
It is, just based on communication session, the first flow to be discarded to be determined from target total flow, and abandons the first flow to be discarded, wherein,
The partial data that the corresponding data of first flow to be discarded are included at least one communication session.As can be seen that using this hair
The technical scheme that bright embodiment is provided, can lose flow, discarding is all the complete of communication session one by one based on communication session
Entire data bag, so,, will not be related because of " shaking hands " is only collected into for a communication session when carrying out safety analysis
Packet, and analyzed device is mistakenly considered the malicious traffic stream that only " shaking hands " takes server without " data transfer ", carries out
Abandon, compared with prior art, it is therefore prevented that for the further reduction of effective outer net flow of safety analysis, improve safety point
The accuracy of analysis.
In a kind of implementation of the application, as shown in figure 3, outer network switch connects with multiple LB clusters and current divider
Connect, visiting outer net flow imports LB clusters by outer network switch, and be replicated it is a import current divider, and each current divider
Derived flow, then imported on corresponding analyzer by Intranet access switch and carry out safety analysis again, wherein, analyzer
It is connected with Intranet access switch, it is to be understood that flow derived from current divider is imported into by Intranet access switch
During analyzer, meeting service traffics corresponding with the interchanger produce bandwidth contention, if flow is excessive derived from current divider, Bian Huizao
Into Intra-Network switch first line of a couplet port congestion, so as to influence normal service traffics to transmit, cause Operational Visit time-out or unstable
It is fixed.
To solve the above problems, on the basis of embodiment illustrated in fig. 2, as shown in figure 4, stream provided in an embodiment of the present invention
Amount control method, can also comprise the following steps：
S204, determines target Intranet access switch.
Wherein, target Intranet access switch can be any Intranet access switch for being connected with analyzer, can be with
It is the Intranet access switch for needing to carry out the monitoring of first line of a couplet bandwidth congestion degree, the application is defined not to this.
S205, obtains the corresponding first line of a couplet bandwidth congestion degree of target Intranet access switch.
In one implementation, can be according to ICMP (Internet Control Message Protocol, network
Internet Control Message Protocol) agreement, using Payload methods, to assess the stream of the corresponding Intranet link of target Intranet access switch
Amount delay.Because the degree of concurrence generally asked is higher, and the payload required for performance (is effectively carried
Lotus) not over 64 MTU, it is therefore possible to use 1 MTU or 64 MTU transmits small data packets and big data bag to characterize
When, the corresponding first line of a couplet bandwidth congestion degree of target Intranet access switch.Specifically, acquisition target Intranet access is exchanged
The step of machine corresponding first line of a couplet bandwidth congestion degree, it can include：
Obtain the corresponding flow delay of target Intranet access switch；
According to below equation, the corresponding first line of a couplet bandwidth congestion degree of target Intranet access switch is determined：
Wherein, L is the corresponding first line of a couplet bandwidth congestion degree of target Intranet access switch, and n is in preset time window
Sampling number, m is default smooth points, RTTijFor the corresponding flow delay of target Intranet access switch, j is packet
The identification information of size, RTT is preset initial value, related to j.
More specifically, n is limited to preset time window, j is 1MTU or 64MTU, transmission small data packets is corresponded to respectively or big
Scene during packet, RTT is preset initial value, corresponding with j.In Payload methods, the access exchange of target Intranet how is obtained
The corresponding flow delay of machine is prior art, and here is omitted.
Specifically, m typically acquiescences are taken as 3, it is ensured that the situation of network jitter can be filtered out.Correspondingly, above-mentioned formula is：
If it should be noted that L >=1, L=1, finally, L values belong to [0,1], it is to be understood that L value is got over
Close to 0, represent that first line of a couplet bandwidth congestion degree is heavier.
S206, according to first line of a couplet bandwidth congestion degree, determines destination sample weighted value.
Wherein it is possible to according to the corresponding first line of a couplet bandwidth congestion degree of target Intranet access switch, determine that destination sample is weighed
Weight values.
Specifically, described according to first line of a couplet bandwidth congestion degree, the step of determining destination sample weighted value can include：
Obtain the flow accounting of the Intranet north and south upper united mouth of the target Intranet access switch；
Destination sample weighted value is determined according to below equation：
Ws=Max (1-L, B)
Wherein, WsFor destination sample weighted value, L is the corresponding first line of a couplet bandwidth congestion journey of target Intranet access switch
Degree, B is flow accounting, and Max () is maximizing function.
Wherein, B generally refer to the ratio of the available first line of a couplet bandwidth of actual flow and target Intranet access switch, citing and
Speech, if the available a width of 40G of first line of a couplet band of target Intranet access switch, actual flow is 20G, then B=50%, it is possible to understand that
, B can be by the reading directly from target Intranet access switch of SDN controllers, and here is omitted.
S207, according to destination sample weighted value, based on communication session, determines the second flow to be discarded from target flow,
And abandon the second flow to be discarded.
Wherein, the partial data that the corresponding data of the second flow to be discarded are included at least one communication session；Target
Flow is flow derived from target total flow or the corresponding current divider of target Intranet access switch, i other words can be according to target
Sample weight value, based on communication session, to for safety point on outer net access switch or on target Intranet access switch
The mirror image flow of analysis carries out sampling current limliting, and regular traffic is have impact on to prevent fluid stopping amount is excessive, further, since when sampling current limliting
It is based on communication session, it is ensured that the data on flows to safety analysis is also using communication session as granularity, with existing skill
Art is compared, and is not in the incomplete situation of data of some communication session.
, can be first according to Intranet access switch related IP, asset inventory or frame during implementing
Etc. information, it is determined that the position of the Intranet access switch of analyzer is connected with, then, on the basis of Fig. 3, as shown in figure 5,
Test server is assessed with addition on position, using assessment test server application S204 to S206 method, to determine mesh
Sample weight value is marked, outer net access switch or corresponding Intranet access switch is then fed back to, it is corresponding to perform S207
The operation for current limliting of sampling.Wherein, it can be physical host or virtual machine to assess test server, be not construed as limiting herein.
On the basis of embodiment illustrated in fig. 2, in the flow control methods that embodiment illustrated in fig. 4 is provided, it can also be directed to
Any target Intranet access switch being connected with analyzer, obtains the corresponding first line of a couplet bandwidth of target Intranet access switch
Congestion Level SPCC, then, according to first line of a couplet bandwidth congestion degree, determines destination sample weighted value, further according to destination sample weighted value, base
In communication session, the second flow to be discarded is determined from target flow, and abandon the second flow to be discarded.In this way, can divide
When flow derived from stream device imported into analyzer by Intranet access switch, its service traffics corresponding with the interchanger is reduced
The bandwidth contention of generation, is prevented due to Intra-Network switch first line of a couplet port congestion, is influenceed normal service traffics transmission, is caused business
Overtime or unstable phenomenon is accessed to occur.
Corresponding to above method embodiment, the embodiments of the invention provide a kind of volume control device, with flow shown in Fig. 2
It is corresponding, as shown in fig. 6, including：
First obtain module 601, for obtaining target total flow, wherein, the target total flow for need water conservancy diversion to divide
Flow the mirror image flow of the outer net flow of device；
Judge module 602, for judging whether the target total flow is more than or equal to the first predetermined threshold value；
First determining module 603, in the case of being in the judged result of the judge module, based on communication meeting
Words, determine the first flow to be discarded from the target total flow；
First discard module 604, for abandoning the described first flow to be discarded, wherein, first flow pair to be discarded
The partial data that the data answered are included at least one communication session.
In the volume control device that inventive embodiments shown in Fig. 6 are provided, can first obtain needs water conservancy diversion to current divider
The mirror image flow of outer net flow, i.e. target total flow, then judge whether target total flow is more than or equal to the first predetermined threshold value, if
It is yes, just based on communication session, the first flow to be discarded is determined from target total flow, and abandons the first flow to be discarded, its
In, the partial data that the corresponding data of the first flow to be discarded are included at least one communication session.As can be seen that application is originally
The technical scheme that inventive embodiments are provided, can lose flow based on communication session, and discarding is all communication session one by one
Complete data packet, so,, will not be related because of " shaking hands " is only collected into for a communication session when carrying out safety analysis
Packet, and analyzed device is mistakenly considered the malicious traffic stream that only " shaking hands " takes server without " data transfer ", enters
Row is abandoned, compared with prior art, it is therefore prevented that for the further reduction of effective outer net flow of safety analysis, improve safety
The accuracy of analysis.
Specifically, first determining module 603, can include：
First determination sub-module, for determining targeted loads balancing cluster；
Second determination sub-module, for from target mirror as in flow determine the first flow to be discarded, wherein, the target mirror
As flow is：The mirror image flow of the outer net flow of the targeted loads balancing cluster is imported in the target total flow.
Specifically, second determination sub-module, specifically can be used for：
According to preset ratio, from target mirror as determining the first flow to be discarded in flow.
Specifically, first determination sub-module, specifically can be used for：
The load balancing cluster of the maximum flow of importing is defined as targeted loads balancing cluster.
Specifically, the preset ratio can be 1/Num；Wherein, Num is the end that the targeted loads balancing cluster takes
Mouth quantity.
Specifically, second determination sub-module, specifically can be used for：
Target port is determined in the port taken from the targeted loads balancing cluster；
The mirror image flow that the outer net flow of the target port will be imported in the target total flow is defined as first and waits to lose
Abandoned stream amount.
Specifically, first determining module 603, specifically can be used for：
Determine the destination virtual network address；
Virtual network address in the target total flow is defined as first for the flow of the destination virtual network address
Flow to be discarded.
Further, module 601, judge module 602, the first determining module 603 and the first discarding are being obtained including first
On the basis of module 604, as shown in fig. 7, provided in an embodiment of the present invention volume control device corresponding with flow shown in Fig. 4,
It can also include：
Second determining module 605, for determining target Intranet access switch；
Second obtains module 606, for obtaining the corresponding first line of a couplet bandwidth congestion degree of the target Intranet access switch；
3rd determining module 607, for according to the first line of a couplet bandwidth congestion degree, determining destination sample weighted value；
Second discard module 608, for according to the destination sample weighted value, based on communication session, from target flow
The second flow to be discarded is determined, and abandons the described second flow to be discarded；Wherein, the target flow is the target total flow
Or flow derived from the corresponding current divider of the target Intranet access switch；The corresponding data of second flow to be discarded are
The partial data that at least one communication session is included.
On the basis of inventive embodiments shown in Fig. 6, in the volume control device that inventive embodiments shown in Fig. 7 are provided, also
Any target Intranet access switch being connected with analyzer can be directed to, the target Intranet access switch is obtained corresponding
First line of a couplet bandwidth congestion degree, then, according to first line of a couplet bandwidth congestion degree, determines destination sample weighted value, further according to destination sample
Weighted value, based on communication session, determines the second flow to be discarded, and abandon the second flow to be discarded from target flow.In this way,
It can be reduced when flow derived from current divider imported into analyzer by Intranet access switch corresponding with the interchanger
The bandwidth contention that service traffics are produced, is prevented due to Intra-Network switch first line of a couplet port congestion, influences normal service traffics transmission,
Cause Operational Visit overtime or unstable phenomenon occurs.
Specifically, described second module 606 is obtained, specifically can be used for：
Obtain the corresponding flow delay of the target Intranet access switch；
According to below equation, the corresponding first line of a couplet bandwidth congestion degree of the target Intranet access switch is determined：
Wherein, L is the first line of a couplet bandwidth congestion degree, and n is the sampling number in preset time window, and m is default smooth
Points, RTTijFor the flow delay, j is the identification information of data package size, and RTT is preset initial value, related to j.
Specifically, the 3rd determining module 607, specifically can be used for：
Obtain the flow accounting of the Intranet north and south upper united mouth of the target Intranet access switch；
Destination sample weighted value is determined according to below equation：
Ws=Max (1-L, B)
Wherein, WsFor the destination sample weighted value, L is the first line of a couplet bandwidth congestion degree, and B is the flow accounting,
Max () is maximizing function.
It should be noted that herein, such as first and second or the like relational terms are used merely to a reality
Body or operation make a distinction with another entity or operation, and not necessarily require or imply these entities or deposited between operating
In any this actual relation or order.Moreover, term " comprising ", "comprising" or its any other variant are intended to
Nonexcludability is included, so that process, method, article or equipment including a series of key elements not only will including those
Element, but also other key elements including being not expressly set out, or also include being this process, method, article or equipment
Intrinsic key element.In the absence of more restrictions, the key element limited by sentence "including a ...", it is not excluded that
Also there is other identical element in process, method, article or equipment including the key element.
Each embodiment in this specification is described by the way of related, identical similar portion between each embodiment
Divide mutually referring to what each embodiment was stressed is the difference with other embodiment.It is real especially for device
Apply for example, because it is substantially similar to embodiment of the method, so description is fairly simple, related part is referring to embodiment of the method
Part explanation.
The foregoing is merely illustrative of the preferred embodiments of the present invention, is not intended to limit the scope of the present invention.It is all
Any modification, equivalent substitution and improvements made within the spirit and principles in the present invention etc., are all contained in protection scope of the present invention
It is interior.
Claims (20)
1. a kind of flow control methods, it is characterised in that methods described includes：
Target total flow is obtained, wherein, the target total flow is the mirror image flow for needing water conservancy diversion to the outer net flow of current divider；
Judge whether the target total flow is more than or equal to the first predetermined threshold value；
If it is, based on communication session, the first flow to be discarded is determined from the target total flow, and abandons described first treat
Flow is abandoned, wherein, the partial data that the corresponding data of first flow to be discarded are included at least one communication session.
2. according to the method described in claim 1, it is characterised in that described to determine that first is to be discarded from the target total flow
The step of flow, including：
Determine targeted loads balancing cluster；
From target mirror as determining the first flow to be discarded in flow, wherein, the target mirror is as flow：The target total flow
The mirror image flow of the middle outer net flow for importing the targeted loads balancing cluster.
3. method according to claim 2, it is characterised in that it is described from target mirror as determining the first stream to be discarded in flow
The step of amount, including：
According to preset ratio, from target mirror as determining the first flow to be discarded in flow.
4. method according to claim 3, it is characterised in that the step of the determination targeted loads balancing cluster, including：
The load balancing cluster of the maximum flow of importing is defined as targeted loads balancing cluster.
5. method according to claim 3, it is characterised in that the preset ratio is 1/Num；Wherein, Num is the mesh
Mark the port number that load balancing cluster takes.
6. method according to claim 5, it is characterised in that described according to preset ratio, from target mirror as true in flow
The step of fixed first flow to be discarded, including：
Target port is determined in the port taken from the targeted loads balancing cluster；
The mirror image flow that the outer net flow of the target port will be imported in the target total flow is defined as the first stream to be discarded
Amount.
7. according to the method described in claim 1, it is characterised in that described to determine that first is to be discarded from the target total flow
The step of flow, including：
Determine the destination virtual network address；
Virtual network address in the target total flow is defined as into first for the flow of the destination virtual network address to wait to lose
Abandoned stream amount.
8. according to the method described in claim 1, it is characterised in that methods described also includes：
Determine target Intranet access switch；
Obtain the corresponding first line of a couplet bandwidth congestion degree of the target Intranet access switch；
According to the first line of a couplet bandwidth congestion degree, destination sample weighted value is determined；
According to the destination sample weighted value, based on communication session, the second flow to be discarded is determined from target flow, and abandon
Second flow to be discarded；Wherein, the target flow is the target total flow or the target Intranet access switch
Flow derived from corresponding current divider；The corresponding data of second flow to be discarded are included at least one communication session
Partial data.
9. method according to claim 8, it is characterised in that the acquisition target Intranet access switch is corresponding
The step of first line of a couplet bandwidth congestion degree, including：
Obtain the corresponding flow delay of the target Intranet access switch；
According to below equation, the corresponding first line of a couplet bandwidth congestion degree of the target Intranet access switch is determined：
<mrow>
<mi>L</mi>
<mo>=</mo>
<mfrac>
<mrow>
<mi>n</mi>
<mi>R</mi>
<mi>T</mi>
<mi>T</mi>
</mrow>
<mrow>
<munderover>
<mo>&Sigma;</mo>
<mrow>
<mi>x</mi>
<mo>=</mo>
<mn>1</mn>
</mrow>
<mi>n</mi>
</munderover>
<mrow>
<mo>(</mo>
<mfrac>
<mn>1</mn>
<mi>m</mi>
</mfrac>
<munderover>
<mo>&Sigma;</mo>
<mrow>
<mi>i</mi>
<mo>=</mo>
<mi>x</mi>
</mrow>
<mrow>
<mi>x</mi>
<mo>+</mo>
<mi>m</mi>
<mo>-</mo>
<mn>1</mn>
</mrow>
</munderover>
<msub>
<mi>RTT</mi>
<mrow>
<mi>i</mi>
<mi>j</mi>
</mrow>
</msub>
<mo>)</mo>
</mrow>
</mrow>
</mfrac>
</mrow>
Wherein, L is the first line of a couplet bandwidth congestion degree, and n is the sampling number in preset time window, and m is default smooth points,
RTTijFor the flow delay, j is the identification information of data package size, and RTT is preset initial value, related to j.
10. method according to claim 9, it is characterised in that described according to the first line of a couplet bandwidth congestion degree, determines mesh
The step of marking sample weight value, including：
Obtain the flow accounting of the Intranet north and south upper united mouth of the target Intranet access switch；
Destination sample weighted value is determined according to below equation：
Ws=Max (1-L, B)
Wherein, WsFor the destination sample weighted value, L is the first line of a couplet bandwidth congestion degree, and B is the flow accounting, Max ()
For maximizing function.
11. a kind of volume control device, it is characterised in that described device includes：
First obtains module, for obtaining target total flow, wherein, the target total flow is to need water conservancy diversion to the outer of current divider
The mirror image flow of net flow；
Judge module, for judging whether the target total flow is more than or equal to the first predetermined threshold value；
First determining module, in the judged result of the judge module in the case of being, based on communication session, from described
The first flow to be discarded is determined in target total flow；
First discard module, for abandoning the described first flow to be discarded, wherein, the corresponding data of first flow to be discarded
The partial data included at least one communication session.
12. device according to claim 11, it is characterised in that first determining module, including：
First determination sub-module, for determining targeted loads balancing cluster；
Second determination sub-module, for from target mirror as in flow determine the first flow to be discarded, wherein, the target mirror picture stream
Measure and be：The mirror image flow of the outer net flow of the targeted loads balancing cluster is imported in the target total flow.
13. device according to claim 12, it is characterised in that second determination sub-module, specifically for：
According to preset ratio, from target mirror as determining the first flow to be discarded in flow.
14. device according to claim 13, it is characterised in that first determination sub-module, specifically for：
The load balancing cluster of the maximum flow of importing is defined as targeted loads balancing cluster.
15. device according to claim 13, it is characterised in that the preset ratio is 1/Num；Wherein, Num is described
The port number that targeted loads balancing cluster takes.
16. device according to claim 15, it is characterised in that second determination sub-module, specifically for：
Target port is determined in the port taken from the targeted loads balancing cluster；
The mirror image flow that the outer net flow of the target port will be imported in the target total flow is defined as the first stream to be discarded
Amount.
17. device according to claim 11, it is characterised in that first determining module, specifically for：
Determine the destination virtual network address；
Virtual network address in the target total flow is defined as into first for the flow of the destination virtual network address to wait to lose
Abandoned stream amount.
18. device according to claim 11, it is characterised in that described device also includes：
Second determining module, for determining target Intranet access switch；
Second obtains module, for obtaining the corresponding first line of a couplet bandwidth congestion degree of the target Intranet access switch；
3rd determining module, for according to the first line of a couplet bandwidth congestion degree, determining destination sample weighted value；
Second discard module, for according to the destination sample weighted value, based on communication session, second to be determined from target flow
Flow to be discarded, and abandon the described second flow to be discarded；Wherein, the target flow is the target total flow or the mesh
Mark flow derived from the corresponding current divider of Intranet access switch；The corresponding data of second flow to be discarded are at least one
The partial data that communication session is included.
19. device according to claim 18, it is characterised in that described second obtains module, specifically for：
Obtain the corresponding flow delay of the target Intranet access switch；
According to below equation, the corresponding first line of a couplet bandwidth congestion degree of the target Intranet access switch is determined：
<mrow>
<mi>L</mi>
<mo>=</mo>
<mfrac>
<mrow>
<mi>n</mi>
<mi>R</mi>
<mi>T</mi>
<mi>T</mi>
</mrow>
<mrow>
<munderover>
<mo>&Sigma;</mo>
<mrow>
<mi>x</mi>
<mo>=</mo>
<mn>1</mn>
</mrow>
<mi>n</mi>
</munderover>
<mrow>
<mo>(</mo>
<mfrac>
<mn>1</mn>
<mi>m</mi>
</mfrac>
<munderover>
<mo>&Sigma;</mo>
<mrow>
<mi>i</mi>
<mo>=</mo>
<mi>x</mi>
</mrow>
<mrow>
<mi>x</mi>
<mo>+</mo>
<mi>m</mi>
<mo>-</mo>
<mn>1</mn>
</mrow>
</munderover>
<msub>
<mi>RTT</mi>
<mrow>
<mi>i</mi>
<mi>j</mi>
</mrow>
</msub>
<mo>)</mo>
</mrow>
</mrow>
</mfrac>
</mrow>
Wherein, L is the first line of a couplet bandwidth congestion degree, and n is the sampling number in preset time window, and m is default smooth points,
RTTijFor the flow delay, j is the identification information of data package size, and RTT is preset initial value, related to j.
20. device according to claim 19, it is characterised in that the 3rd determining module, specifically for：
Obtain the flow accounting of the Intranet north and south upper united mouth of the target Intranet access switch；
Destination sample weighted value is determined according to below equation：
Ws=Max (1-L, B)
Wherein, WsFor the destination sample weighted value, L is the first line of a couplet bandwidth congestion degree, and B is the flow accounting, Max ()
For maximizing function.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201710210707.9A CN107147585B (en) | 2017-03-31 | 2017-03-31 | Flow control method and device |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201710210707.9A CN107147585B (en) | 2017-03-31 | 2017-03-31 | Flow control method and device |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN107147585A true CN107147585A (en) | 2017-09-08 |
| CN107147585B CN107147585B (en) | 2020-02-18 |
Family
ID=59784170
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201710210707.9A Active CN107147585B (en) | 2017-03-31 | 2017-03-31 | Flow control method and device |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN107147585B (en) |
Cited By (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN110198275A (en) * | 2018-03-28 | 2019-09-03 | 腾讯科技（深圳）有限公司 | A kind of flow control methods, system, server and storage medium |
| CN111654493A (en) * | 2020-06-02 | 2020-09-11 | 山东汇贸电子口岸有限公司 | Method, system, storage medium and electronic device for intercepting specified flow in Openstack |
| CN111901195A (en) * | 2020-07-23 | 2020-11-06 | 电子科技大学 | SDN flow dynamic distribution method and system |
| CN115550276A (en) * | 2022-09-13 | 2022-12-30 | 平安科技（深圳）有限公司 | Traffic discarding method based on parallel routing and related equipment |
Citations (9)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1839591A (en) * | 2003-09-11 | 2006-09-27 | 艾利森电话股份有限公司 | Method for discarding all segments corresponding to the same packet in a buffer |
| CN101159677A (en) * | 2007-10-25 | 2008-04-09 | 华为技术有限公司 | Packet transmission method and network node device |
| CN102075423A (en) * | 2011-01-10 | 2011-05-25 | 中国人民解放军国防科学技术大学 | Hardware multi-level table-based method for controlling output traffic |
| CN103166926A (en) * | 2011-12-14 | 2013-06-19 | 中国科学院沈阳计算技术研究所有限公司 | Session initiation protocol (SIP) distributed denial of service (DDoS) attack distributed defensive system and load balancing method thereof |
| CN103763212A (en) * | 2014-01-02 | 2014-04-30 | 河南科技大学 | Method for regulating network congestion |
| CN104125159A (en) * | 2014-07-29 | 2014-10-29 | 福建星网锐捷网络有限公司 | Congestion bandwidth detection method, congestion control method, device and system |
| CN104811398A (en) * | 2015-04-17 | 2015-07-29 | 北京奇艺世纪科技有限公司 | Method and device for load balancing |
| CN106302200A (en) * | 2015-05-14 | 2017-01-04 | 华为技术有限公司 | A kind of method processing network congestion and switch |
| CN106375160A (en) * | 2016-10-28 | 2017-02-01 | 上海优刻得信息科技有限公司 | Flow monitoring system and flow monitoring method |
-
2017
- 2017-03-31 CN CN201710210707.9A patent/CN107147585B/en active Active
Patent Citations (9)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1839591A (en) * | 2003-09-11 | 2006-09-27 | 艾利森电话股份有限公司 | Method for discarding all segments corresponding to the same packet in a buffer |
| CN101159677A (en) * | 2007-10-25 | 2008-04-09 | 华为技术有限公司 | Packet transmission method and network node device |
| CN102075423A (en) * | 2011-01-10 | 2011-05-25 | 中国人民解放军国防科学技术大学 | Hardware multi-level table-based method for controlling output traffic |
| CN103166926A (en) * | 2011-12-14 | 2013-06-19 | 中国科学院沈阳计算技术研究所有限公司 | Session initiation protocol (SIP) distributed denial of service (DDoS) attack distributed defensive system and load balancing method thereof |
| CN103763212A (en) * | 2014-01-02 | 2014-04-30 | 河南科技大学 | Method for regulating network congestion |
| CN104125159A (en) * | 2014-07-29 | 2014-10-29 | 福建星网锐捷网络有限公司 | Congestion bandwidth detection method, congestion control method, device and system |
| CN104811398A (en) * | 2015-04-17 | 2015-07-29 | 北京奇艺世纪科技有限公司 | Method and device for load balancing |
| CN106302200A (en) * | 2015-05-14 | 2017-01-04 | 华为技术有限公司 | A kind of method processing network congestion and switch |
| CN106375160A (en) * | 2016-10-28 | 2017-02-01 | 上海优刻得信息科技有限公司 | Flow monitoring system and flow monitoring method |
Cited By (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN110198275A (en) * | 2018-03-28 | 2019-09-03 | 腾讯科技（深圳）有限公司 | A kind of flow control methods, system, server and storage medium |
| CN111654493A (en) * | 2020-06-02 | 2020-09-11 | 山东汇贸电子口岸有限公司 | Method, system, storage medium and electronic device for intercepting specified flow in Openstack |
| CN111654493B (en) * | 2020-06-02 | 2022-04-12 | 浪潮云信息技术股份公司 | Method, system, storage medium and electronic device for intercepting specified flow in Openstack |
| CN111901195A (en) * | 2020-07-23 | 2020-11-06 | 电子科技大学 | SDN flow dynamic distribution method and system |
| CN111901195B (en) * | 2020-07-23 | 2022-02-15 | 电子科技大学 | SDN flow dynamic distribution method and system |
| CN115550276A (en) * | 2022-09-13 | 2022-12-30 | 平安科技（深圳）有限公司 | Traffic discarding method based on parallel routing and related equipment |
Also Published As
| Publication number | Publication date |
|---|---|
| CN107147585B (en) | 2020-02-18 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| Prasad et al. | Bandwidth estimation: metrics, measurement techniques, and tools | |
| Makkar et al. | Empirical study of buffer management scheme for Diffserv assured forwarding PHB | |
| Wakeman et al. | Implementing Real Time Packet Forwarding Policies Using Streams. | |
| CN107147585A (en) | A kind of flow control methods and device | |
| CN104852855B (en) | Jamming control method, device and equipment | |
| Altman et al. | TCP network calculus: The case of large delay-bandwidth product | |
| WO1999063439A1 (en) | Apparatus and method for testing network applications | |
| CN101447934B (en) | Business flow-recognizing method and system thereof and business flow charging method and system thereof | |
| CN103814555B (en) | Determining path congestion measures | |
| Pournaghshband | Identifying Traffic Prioritization on the Internet | |
| US8958424B2 (en) | Tri-colour data packet counting for tri-colour marking policies | |
| Barczyk et al. | Experimental testing of the performance of packet dropping schemes | |
| Wei et al. | A survey and measurement-based comparison of bandwidth management techniques | |
| Cisco | Frame Relay 64-Bit Counters | |
| Cisco | Traffic Policing | |
| Roy et al. | Analysis of TCP congestion control using a fluid model | |
| Mathis | Reflections on the TCP macroscopic model | |
| Kushwaha et al. | Ranking of source-based congestion control approaches for high speed networks using AHP | |
| Sari et al. | Implementation of bandwidth management and access restrictions using PCQ and firewall methods in SMP tunas bangsa network | |
| Medina et al. | Bandwidth sharing under the Assured Forwarding PHB | |
| Chan et al. | A hybrid congestion control for TCP over high speed networks | |
| Barbera et al. | Improving fairness in a WRED-based DiffServ network: A fluid-flow approach | |
| Jie et al. | Bf-red: a novel algorithm for improving bandwidth fairness of red | |
| Chanda et al. | An approximate calculation of max-min fair throughputs for non-persistent elastic flows | |
| Li et al. | Improving fairness of TCP Vegas |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |