[go: up one dir, main page]

CN1210919C - Data flow control method in data insertion equipment - Google Patents

Data flow control method in data insertion equipment Download PDF

Info

Publication number
CN1210919C
CN1210919C CNB021212716A CN02121271A CN1210919C CN 1210919 C CN1210919 C CN 1210919C CN B021212716 A CNB021212716 A CN B021212716A CN 02121271 A CN02121271 A CN 02121271A CN 1210919 C CN1210919 C CN 1210919C
Authority
CN
China
Prior art keywords
flow control
user
message
network
data
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Expired - Fee Related
Application number
CNB021212716A
Other languages
Chinese (zh)
Other versions
CN1466335A (en
Inventor
侯超
李力
常悦
吴海军
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Huawei Technologies Co Ltd
Original Assignee
Huawei Technologies Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Huawei Technologies Co Ltd filed Critical Huawei Technologies Co Ltd
Priority to CNB021212716A priority Critical patent/CN1210919C/en
Publication of CN1466335A publication Critical patent/CN1466335A/en
Application granted granted Critical
Publication of CN1210919C publication Critical patent/CN1210919C/en
Anticipated expiration legal-status Critical
Expired - Fee Related legal-status Critical Current

Links

Images

Landscapes

  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

The present invention discloses a data flow control method in data access equipment. The method first judges an access message, if the access message is a message from a user to the other user or a message from a user to a network, the flow control range and the user identification(ID) of the user to whom the message belongs are determined according to the source address of the message, and then the flow control attribute of the user to whom the message belongs is determined according to the destination address of the message; if the message is a message from the network to a user, the flow control range and the user ID of the user to whom the message belongs are determined according to the destination address of the message, and the flow control attribute of the message is determined according to the source address of the message; then data flow control parameters are determined according to the user ID and the flow control attribute of the message; finally, whether the data flow of the user is larger than a permissible maximum value or not is judged, if the data flow of the user is larger than the permissible maximum value, the message is discarded, else, the message is forwarded normally; if the message is a message from a network to the other network, the flow control of the message is ignored. The method can control the network data flow effectively and reasonably.

Description

Data flow control method in a kind of data insertion equipment
Technical field:
The present invention relates to the data flow control method in the communication system, relate in particular to the data flow control method in the data insertion equipment of the communications field.
Background technology:
In the data insertion equipment of communication system, the multi-service BAS Broadband Access Server of access, authentication, billing function for example is provided for the user, for the user provides service, usually the flow that inserts data is controlled for better.In the reality, Internet access service merchant (ISP) offers user's bandwidth along with the variation of distance is often different, in general local metropolitan area network bandwidth is often bigger, can support than higher local flowing of access, and the interface that metropolitan area network leads to Internet often bandwidth be less than the metropolitan area network internal bandwidth.And ISP is when inserting the user, if can not control customer flow respectively according to the difference of visit distance, then cause the conflict of allocated bandwidth easily, if set user bandwidth bigger, impact Wide Area Network interface easily, if but user bandwidth were set smaller, then could not make full use of the high bandwidth of metropolitan area network in the home server in visit.Simultaneously, different users also is different to the demand of bandwidth, and therefore wishing can be according to user's demand customization bandwidth.After for example a user surfs the Net, visit local metropolitan area network server and the server of visiting wide area network, for example external server is compared, there is a big difference for the Internet resources that use, visiting external server obviously needs by more router, and need at this time obviously the flow control parameter to be put smaller by wanting narrower and more valuable international interface relatively.And the user is when using local metropolitan area server to carry out operation such as video request program (VOD), the broad because the bandwidth of local metropolitan area network compares, realize that cost is also cheap, so the flow control parameter should be amplified, if the bandwidth parameter during at this time still according to the visit international site may will cause local metropolitan area network fully not use.
The flow control methods that present data insertion equipment adopts has two kinds usually, a kind of is to be unit with the account number, adopt different flow control parameters to carry out data traffic control to the user who has different rights, a kind of is to be combined as unit discharge control with data source address and destination address.The defective of above-mentioned first method is to adopt different flow control parameters when not considering same user capture difference address, and second method does not have the relation between consideration and the user account number.As seen,, can not satisfy the data traffic control that ISP and user require the demand of bandwidth, make data insertion equipment effectively not utilized although the data traffic control mode of existing method is fairly simple.
Summary of the invention
The object of the present invention is to provide a kind of data flow control method that can control effectively and reasonably the flow that inserts data in the data access device.
For achieving the above object, the data flow control method in the data insertion equipment provided by the invention comprises:
(1) storage user ID ID and Flow Control attribute in access device;
(2) set different data traffic Control Parameter according to different Flow Control attributes;
(3) access device receives the message that inserts;
(4) judge that whether described message is from user to user or from the message of user-to-network, if change step (5), otherwise change step (6);
(5) determine Flow Control scope and the user ID (ID) of user under this message according to the source address of message, determine the Flow Control attribute of user under the message then according to the destination address of message, change step (7) then;
(6) judge that whether described message is the message from the network to user, if, determine Flow Control scope and the user ID of user under this message according to the destination address of message, determine the Flow Control attribute of message according to the source address of message, change step (7) then, otherwise, think that described message is the message from network-to-network, ignore flow control, finish the flow control operation then this message;
(7) according to the Flow Control attribute specified data flow control parameter of user ID and message, judge the maximum whether network traffic data of user under this message allows greater than the data traffic Control Parameter, if greater than, abandon this message, carry out the normal forwarding of this message.
Described method also comprises:
Set up user's Flow Control attribute list, in order to determine user's data current control scope, this table comprises following field:
User account number: the ID that is used to preserve the user;
Flow Control group LD: be used to identify the affiliated Flow Control group of different user ID, to determine the Flow Control scope of different user.
Set up destination address Flow Control attribute list, be used for determining the Flow Control attribute of destination address, this table comprises following field:
Address: the scope that is used to describe the IP address of different user;
Flow Control attribute: the Flow Control character that is used to describe different IP addresses scope user.Set up the flow control parameters table, be used for determining user's concrete data traffic Control Parameter, this table comprises following field;
Flow Control group ID: be used to describe the affiliated Flow Control group of different user ID;
Flow Control attribute: the Flow Control character that is used to describe different IP addresses scope user;
Flow control parameters: the data traffic Control Parameter that is used to describe different Flow Control group ID and the common sign of Flow Control attribute.
Set up flow control meter, be used to store user's flow control record, this table comprises following field:
User account number: the ID that is used to describe the user;
Entry: be used to store user's data flow control content.
Because method of the present invention is according to the character that receives message, with message be divided into from user to user, from user-to-network, from the network to user, from four kinds of situations of network-to-network, make that the present invention can be according to the difference of user right and the difference of visit destination address, adopt different flow control parameters to carry out flow control, flow control mode is flexible.For example, the user capture this locality or the relieving of exchanging visits are not controlled, and visit metropolitan area server allows high flow capacity, visits domestic network by intermediate flow, and the international site on the access internet is pressed low discharge and controlled; Simultaneously, for high-priority users, suitably strengthen flow control parameters.Therefore, the flow control method that the present invention adopts can be controlled effectively and reasonably to network traffic data, helps protecting scarce resource, promotes making full use of rich resource.
Description of drawings:
Fig. 1 is the embodiment flow chart of the method for the invention;
Fig. 2 uses network diagram of the present invention.
Embodiment:
The present invention is described in further detail below in conjunction with drawings and Examples.
The present invention can be applied in the diverse network connecting system, with reference to figure 2.User 1 to user N among the figure is connected with metropolitan area network or backbone network by access server, connects and Internet connection by metropolitan area network or backbone network again.When user access network, user's network traffic data is controlled by access server.
The data traffic control that the present invention carries out in network access equipment, by the difference different uses different flow control strategy of access device by the data message destination address that inserts, just when the statistics user's message carries out flow control, authority according to the user, the classification of destination address adopts different flow control parameters to carry out respectively.Specifically, the present invention is by storing user ID (ID) and Flow Control attribute in access device, set different data traffic Control Parameter according to different Flow Control attributes again, adopt corresponding data traffic parameter that this user is carried out flow control according to user ID and Flow Control attribute in the message that receives then.
In concrete enforcement of the present invention, data traffic control operation for achieving the above object, need set up user's Flow Control attribute list, destination address Flow Control attribute list, Flow Control table of grading and Flow Control record sheet, wherein, user's Flow Control attribute list, in order to determine user's data current control scope, this table comprises following field:
User account number: the ID that is used to preserve the user;
Flow Control group ID: be used to identify the affiliated Flow Control group of different user ID, to determine the Flow Control scope of different user.
User's Flow Control attribute list is the one dimension table, can use the IP address search, and search method can adopt Hash lookup algorithm, binary search tree, CAM modes such as (Content addressable memory, Content Addressable Memories) to realize.
Destination address Flow Control attribute list is used for determining the Flow Control attribute of destination address, and this table comprises following field:
Address: the scope that is used to describe the IP address of different user;
Flow Control attribute: the Flow Control character that is used to describe different IP addresses scope user.
Destination address Flow Control attribute list and routing table are similar, and difference is that the lookup result of this table is not a gateway, but the Flow Control attribute of destination address, and this table can use methods such as can supporting the longest Matching Algorithm such as Ji Shu (binary tree a kind of), CAM to realize.In the reality, because the space of destination address Flow Control attribute list is limited, and user's IP address is a lot, can not comprise all IP addresses, thus can adopt the mask mode of routing table to dispose the Flow Control attribute of this table, for example: 201.1110.0.0/16.Stipulate that simultaneously the highest the and necessary acquiescence purpose flow control parameters of setting of priority that mask is the longest that is to say the flow control parameters of necessary setting 0.0.0.0/0.Address with the user also is located in the destination address Flow Control attribute list as a kind of purpose Flow Control set of properties simultaneously.Owing to there is the acquiescence flow control parameters, the situation of destination address flow control parameters attribute can not appear can not find, again because the longest coupling of tenaculum mask makes the keeper configuration to be simplified in the address of same network segment by mask.
The flow control parameters table is used for determining user's concrete data traffic Control Parameter, and this table comprises following field:
Flow Control group ID: be used to describe the affiliated Flow Control group of different user ID;
Flow Control attribute: the Flow Control character that is used to describe different IP addresses scope user;
Flow control parameters: the data traffic Control Parameter that is used to describe different Flow Control group ID and the common sign of Flow Control attribute.
The flow control parameters table is a bivariate table,, can find and insert the concrete flow control parameters of message as this two-dimensional seek index according to the lookup result of user's Flow Control attribute list, destination address Flow Control attribute list.
Flow control meter is used to store user's flow control record, and this table comprises following field:
User account number: the ID that is used to describe the user;
Entry: be used to store user's data flow control content.
Flow control meter also is a bivariate table, and its inquiry mode can be with reference to foregoing.
Based on above-mentioned table, when the present invention uses in reality, the user of similar demand can be divided into same group, the destination address with similar Flow Control attribute is divided into same group, can reduce the requirement to system resource like this.
Fig. 1 is the embodiment flow chart of the method for the invention.According to Fig. 1, access device is four kinds with the message received by the difference of source address and destination address: the user is to user, user-to-network, and network is to user, network-to-network.If only be concerned about and subscriber-related flow control that the data traffic of network-to-network can be ignored so.
Data insertion equipment receives the message that inserts in step 1, because user's route also is a kind of destination address that the Flow Control attribute is arranged, so the user can be handled together to user and these two kinds of messages of user-to-network, therefore judge that in step 2 whether described message is from user to user or from the message of user-to-network, if, access device is at first searched user's Flow Control attribute list according to the source address of message in step 3, Flow Control scope and user ID with user under definite this message, after Flow Control Property ID that finds user under the message and user ID, search destination address Flow Control attribute list according to the destination address of message, determine the affiliated user's of message Flow Control attribute, change step 6 then; If judge that in step 2 described message is not from user to user or from the message of user-to-network, then judge that in step 4 whether described message is the message from the network to user, if, search user's Flow Control attribute list in step 5 according to the destination address of message, Flow Control Property ID and user ID with user under definite this message, search destination address Flow Control attribute list according to the source address of message again, to obtain the Flow Control attribute of message, change step 6 then, otherwise illustrate that the message and the user that receive are irrelevant, think that promptly described message is the message from network-to-network, can ignore this message is carried out flow control; In step 6, search the flow control parameters table according to user ID and destination address Flow Control attribute, find the flow control parameter of current message, search user's Flow Control table according to user ID at last, find suitable item, the flow control result of user under this message and the result in the table are carried out comprehensive statistics, statistics deposits this list item in, judge the maximum whether user's data flow under this message allows greater than the flow control parameter then, if greater than, then abandon this message in step 7, otherwise at normal this message of transmitting of step 8.
Above-mentioned steps 2 judges that whether described message is from user to user or from the message of user-to-network, searching user's Flow Control attribute list by the source address of using message realizes, if in user's Flow Control attribute list, can not find out the source address of message, think that then described message is for from user to user or from the message of user-to-network.
Above-mentioned steps 4 judges that whether described message is the message from the network to user, search the realization of user's Flow Control attribute list by the source address and the destination address that use message, if in user's Flow Control attribute list, can not find out the source address and the destination address of message, think that then described message is the message from network-to-network.

Claims (8)

1.一种数据接入设备中的数据流量控制方法,包括:1. A data flow control method in a data access device, comprising: (1)在接入设备中存储用户标识ID和流控属性:(1) Store user ID and flow control attributes in the access device: (2)根据不同的流控属性设定不同的数据流量控制参数;(2) Set different data flow control parameters according to different flow control attributes; (3)接入设备接收接入的报文;(3) The access device receives the incoming message; (4)判断所述报文是否为从用户到用户或者从用户到网络的报文,如果是,转步骤(5),否则转步骤(6);(4) judging whether the message is from the user to the user or from the user to the network message, if so, turn to step (5), otherwise turn to step (6); (5)根据报文的源地址确定该报文所属用户的流控范围和用户标识ID,然后根据报文的目的地址确定报文所属用户的流控属性,然后转步骤(7);(5) Determine the flow control scope and the user identification ID of the user to which the message belongs according to the source address of the message, then determine the flow control attribute of the user to which the message belongs according to the destination address of the message, then turn to step (7); (6)判断所述报文是否为从网络到用户的报文,如果是,根据报文的目的地址确定该报文所属用户的流控范围和用户ID,根据报文的源地址确定报文的流控属性,然后转步骤(7),否则,认为所述报文为从网络到网络的报文,忽略对该报文的流量控制,然后结束流量控制操作;(6) Determine whether the message is a message from the network to the user, if so, determine the flow control scope and user ID of the user to which the message belongs according to the destination address of the message, and determine the message according to the source address of the message flow control attribute, then go to step (7), otherwise, consider that the message is a message from network to network, ignore the flow control of this message, and then end the flow control operation; (7)根据用户ID和报文的流控属性确定数据流量控制参数,判断该报文所属用户的网络数据流量是否大于数据流量控制参数允许的最大值,如果大于,丢弃该报文,进行该报文的正常转发。(7) Determine the data flow control parameter according to the flow control attribute of the user ID and the message, judge whether the network data flow of the user to whom the message belongs is greater than the maximum value allowed by the data flow control parameter, if greater, discard the message, and perform the process Normal forwarding of packets. 2.根据权利要求1所述的数据接入设备中的数据流量控制方法,其特征在于所述方法包括建立用户流控属性表,用以确定用户的数据流控制范围,该表包括下述字段:2. The data flow control method in the data access device according to claim 1, characterized in that the method includes establishing a user flow control attribute table to determine the user's data flow control range, and the table includes the following fields : 用户帐号:用于保存用户的LD;User account: used to save the user's LD; 流控群LD:用于标识不同用户1D所属的流控群组,以确定不同用户的流控范围。Traffic control group LD: used to identify the traffic control group to which different users 1D belong, so as to determine the traffic control range of different users. 3.根据权利要求2所述的数据接入设备中的数据流量控制方法,其特征在于所述方法包括建立目的地址流控属性表,用于确定目的地址的流控属性,该表包括下述字段:3. The data flow control method in the data access device according to claim 2, characterized in that the method includes establishing a destination address flow control attribute table for determining the flow control attribute of the destination address, and the table includes the following field: 地址:用于描述不同用户的IP地址的范围;Address: used to describe the range of IP addresses of different users; 流控属性:用于描述不同IP地址范围用户的流控性质。Flow control attribute: used to describe the flow control properties of users in different IP address ranges. 4.根据权利要求3所述的数据接入设备中的数据流量控制方法,其特征在于所述方法包括建立流控参数表,用于确定用户的具体数据流量控制参数,该表包括下述字段:4. The data flow control method in the data access device according to claim 3, characterized in that the method includes establishing a flow control parameter table for determining specific data flow control parameters of users, and the table includes the following fields : 流控群1D:用于描述不同用户ID所属的流控群组;Traffic control group 1D: used to describe the traffic control group to which different user IDs belong; 流控属性:用于描述不同IP地址范围用户的流控性质;Flow control attribute: used to describe the flow control nature of users in different IP address ranges; 流控参数:用于描述不同流控群ID和流控属性共同标识的数据流量控制参数。Flow control parameters: used to describe data flow control parameters jointly identified by different flow control group IDs and flow control attributes. 5.根据权利要求4所述的数据接入设备中的数据流量控制方法,其特征在于所述方法包括建立流量控制表,用于存储用户的流量控制记录,该表包括下述字段:5. The data flow control method in the data access device according to claim 4, wherein the method includes establishing a flow control table for storing user flow control records, and the table includes the following fields: 用户帐号:用于描述用户的ID;User account: ID used to describe the user; 记录项:用于存储用户的数据流量控制内容。Record item: used to store the user's data flow control content. 6.根据权利要求5所述的数据接入设备中的数据流量控制方法,其特征在于步骤(7)包括:根据用户ID查找流量控制表,将用户的流量控制记录存储到表中适合的表项中,利用该表对接入报文所属用户的数据流量进行控制。6. The data flow control method in the data access device according to claim 5, characterized in that step (7) comprises: searching the flow control table according to the user ID, and storing the flow control record of the user into a suitable table in the table In the item, use this table to control the data flow of the user to whom the access message belongs. 7.根据权利要求3、4、5或6所述的数据接入设备中的数据流量控制方法,其特征在于步骤(4)判断所述报文是否为从用户到用户或者从用户到网络的报文,通过使用报文的源地址查找用户流控属性表实现,如果在用户流控属性表中查不到报文的源地址,则认为所述报文为从用户到用户或者从用户到网络的报文。7. The data flow control method in the data access device according to claim 3, 4, 5 or 6, characterized in that step (4) judges whether the message is from user to user or from user to network Packets are realized by using the source address of the packet to search the user flow control attribute table. If the source address of the packet cannot be found in the user flow control attribute table, the packet is considered to be from user to user or from user to user. Network messages. 8.根据权利要求3所述的数据接入设备中的数据流量控制方法,其特征在于步骤(6)判断所述报文是否为从网络到用户的报文,通过使用报文的源地址和目的地址查找用户流控属性表实现,如果在用户流控属性表中查不到报文的源地址和目的地址,则认为所述报文为从网络到网络的报文。8. The data flow control method in the data access device according to claim 3, characterized in that step (6) judges whether the message is a message from the network to the user, by using the source address and The destination address searches the user flow control attribute table for realization. If the source address and destination address of the message cannot be found in the user flow control attribute table, the message is considered to be a message from network to network.
CNB021212716A 2002-06-12 2002-06-12 Data flow control method in data insertion equipment Expired - Fee Related CN1210919C (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CNB021212716A CN1210919C (en) 2002-06-12 2002-06-12 Data flow control method in data insertion equipment

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CNB021212716A CN1210919C (en) 2002-06-12 2002-06-12 Data flow control method in data insertion equipment

Publications (2)

Publication Number Publication Date
CN1466335A CN1466335A (en) 2004-01-07
CN1210919C true CN1210919C (en) 2005-07-13

Family

ID=34142160

Family Applications (1)

Application Number Title Priority Date Filing Date
CNB021212716A Expired - Fee Related CN1210919C (en) 2002-06-12 2002-06-12 Data flow control method in data insertion equipment

Country Status (1)

Country Link
CN (1) CN1210919C (en)

Families Citing this family (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN100370771C (en) * 2004-04-21 2008-02-20 华为技术有限公司 Method of flow control in communication system
CN100466603C (en) * 2005-05-17 2009-03-04 华为技术有限公司 Method and apparatus for shaping transmission service stream in network
CN101202696B (en) * 2006-12-11 2010-11-03 华为技术有限公司 Method and apparatus for flow control of load among intraoffice across gateways
CN101197836B (en) * 2007-12-20 2010-08-18 华为技术有限公司 Data communication control method and data communication control device
US9848355B2 (en) * 2011-09-28 2017-12-19 Telefonaktiebolaget Lm Ericsson (Publ) Centralized data plane flow control
CN103746928A (en) * 2013-12-30 2014-04-23 迈普通信技术股份有限公司 Method and system for controlling flow rate by utilizing access control list
CN107612768B (en) * 2017-08-24 2020-09-25 杭州安恒信息技术股份有限公司 Method and system for accessing traffic based on Windows local database
CN111757041B (en) * 2020-06-17 2022-01-07 许继集团有限公司 Network video conference flow identification method and device

Also Published As

Publication number Publication date
CN1466335A (en) 2004-01-07

Similar Documents

Publication Publication Date Title
CN1153416C (en) Packet switch communication method
US9582289B2 (en) Communication interface selection on multi-homed devices
EP1557977A1 (en) A method for adding devices to management system
CN105812261A (en) Message forwarding method and system in information center network
CN1177439C (en) Method of Proxy Address Resolution Protocol in Ethernet Access Application
CN1773936A (en) Method and system for determining available of target of computer network communication
CN1505338A (en) User identifying technique on networks having different address systems
CN1252961C (en) Method for authenticating group broadcast service
CN101030980A (en) Wide-band terminal identifier based on Ethernet and its identifying method
CN1194502C (en) A system and method for managing network user access rights
CN101047618A (en) Method and system for acquiring network route information
CN101056306A (en) Network device and its access control method
CN1210919C (en) Data flow control method in data insertion equipment
CN1703890A (en) Method for protocol recognition and analysis in data networks
CN1852297A (en) Network data flow recognizing system and method
CN1152516C (en) Method for finding out IP network node
US20040148417A1 (en) Method and system for distinguishing higher layer protocols of the internet traffic
CN106230723B (en) A kind of message forwarding cache method and device
CN1359212A (en) Comprehensive strategic realizing service for telecommunicaltion network
US8051167B2 (en) Optimized mirror for content identification
CN1208927C (en) Control method for connecting network based on proxy mode in network equipment
CN1744538A (en) Method for selecting services provided by different providers of network service
US20090323548A1 (en) Method, system and terminal for determining qos level
CN1852187A (en) Method for realizing access-in management of on-line apparatus
CN1214563C (en) Fee counting method in data insertion system

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant
CF01 Termination of patent right due to non-payment of annual fee

Granted publication date: 20050713

Termination date: 20150612

EXPY Termination of patent right or utility model