CN1210919C - Data flow control method in data insertion equipment - Google Patents

Abstract

The present invention discloses a data flow control method in data access equipment. The method first judges an access message, if the access message is a message from a user to the other user or a message from a user to a network, the flow control range and the user identification(ID) of the user to whom the message belongs are determined according to the source address of the message, and then the flow control attribute of the user to whom the message belongs is determined according to the destination address of the message; if the message is a message from the network to a user, the flow control range and the user ID of the user to whom the message belongs are determined according to the destination address of the message, and the flow control attribute of the message is determined according to the source address of the message; then data flow control parameters are determined according to the user ID and the flow control attribute of the message; finally, whether the data flow of the user is larger than a permissible maximum value or not is judged, if the data flow of the user is larger than the permissible maximum value, the message is discarded, else, the message is forwarded normally; if the message is a message from a network to the other network, the flow control of the message is ignored. The method can control the network data flow effectively and reasonably.

Description

A data flow control method in a data access device

Technical field:

The invention relates to a data flow control method in a communication system, in particular to a data flow control method in a data access device in the communication field.

Background technique:

In the data access equipment of the communication system, such as a multi-service broadband access server that provides access, authentication, and billing functions for users, in order to provide better services for users, the flow of access data is usually controlled. In practice, the bandwidth provided by the Internet access service provider (ISP) to users is often different with the change of distance. Generally speaking, the bandwidth of the local metropolitan area network is usually relatively large, which can support relatively high local access traffic, while the metropolitan area network The bandwidth of the interface leading to the Internet is often smaller than the internal bandwidth of the MAN. When the ISP accesses users, if they cannot control the user traffic according to the difference in access distance, it will easily cause conflicts in bandwidth allocation. If the user bandwidth is set to be relatively large, it will easily impact the WAN interface. If it is relatively small, the high bandwidth of the MAN cannot be fully utilized when accessing the local server. At the same time, different users have different requirements for bandwidth, so it is hoped that bandwidth can be customized according to user requirements. For example, after a user accesses the Internet, there is a big difference in network resources when accessing a local MAN server and a WAN server, such as a foreign server. Obviously, more routers are required to access a foreign server, and relatively more For narrower and more valuable international interfaces, it is obviously necessary to reduce the flow control parameters at this time. When users use the local metropolitan area server for video on demand (VOD) and other operations, since the bandwidth of the local metropolitan area network is relatively wide and the implementation cost is also cheap, the flow control parameters should be enlarged. When the bandwidth parameter is not specified, the local MAN may not be fully utilized.

There are usually two flow control methods used by current data access devices. One is based on the account as a unit and uses different flow control parameters for users with different permissions to control data flow. The other is based on the source address of the data. Combined with the destination address for unit flow control. The defect of the above-mentioned first method is that it does not consider the different traffic control parameters used when the same user visits different addresses, and the second method does not consider the relationship with the user account. It can be seen that although the data flow control method of the existing method is relatively simple, it cannot meet the data flow control required by the ISP and the user for bandwidth, so that the data access equipment cannot be effectively utilized.

Contents of the invention

The purpose of the present invention is to provide a data flow control method capable of effectively and reasonably controlling the flow of data connected to a data access device.

In order to achieve the above purpose, the data flow control method in the data access device provided by the present invention includes:

(1) storing user identification ID and flow control attribute in the access device;

(2) Set different data flow control parameters according to different flow control attributes;

(3) The access device receives the incoming message;

(4) judging whether the message is from the user to the user or from the user to the network message, if so, turn to step (5), otherwise turn to step (6);

(5) Determine the flow control scope and the user identification (ID) of the user to which the message belongs according to the source address of the message, then determine the flow control attribute of the user to which the message belongs according to the destination address of the message, then turn to step (7);

(6) Determine whether the message is a message from the network to the user, if so, determine the flow control scope and user ID of the user to which the message belongs according to the destination address of the message, and determine the message according to the source address of the message flow control attribute, then go to step (7), otherwise, consider that the message is a message from network to network, ignore the flow control of this message, and then end the flow control operation;

(7) Determine the data flow control parameter according to the flow control attribute of the user ID and the message, judge whether the network data flow of the user to whom the message belongs is greater than the maximum value allowed by the data flow control parameter, if greater, discard the message, and perform the process Normal forwarding of packets.

The method also includes:

Create a user flow control attribute table to determine the user's data flow control range, which includes the following fields:

User account: used to save the user's ID;

Traffic control group LD: used to identify the traffic control group to which different user IDs belong, so as to determine the traffic control range of different users.

Establish the destination address flow control attribute table, which is used to determine the flow control attribute of the destination address. The table includes the following fields:

Address: used to describe the range of IP addresses of different users;

Flow control attribute: used to describe the flow control properties of users in different IP address ranges. Establish a flow control parameter table for determining the user's specific data flow control parameters, which includes the following fields;

Traffic control group ID: used to describe the traffic control group to which different user IDs belong;

Flow control attribute: used to describe the flow control nature of users in different IP address ranges;

Flow control parameters: used to describe data flow control parameters jointly identified by different flow control group IDs and flow control attributes.

Create a flow control table for storing user flow control records, which includes the following fields:

User account: ID used to describe the user;

Record item: used to store the user's data flow control content.

Because the method of the present invention divides the message into four situations from user to user, from user to network, from network to user, and from network to network according to the nature of the received message, the present invention can Different flow control parameters are used for flow control, and the flow control method is flexible. For example, user visits to local or mutual visits are not controlled, access to metropolitan servers is allowed to have high traffic, access to domestic networks is controlled by medium traffic, and access to international sites on the Internet is controlled by low traffic; at the same time, for high-priority users, appropriate increase Flow control parameters. Therefore, the flow control method adopted in the present invention can effectively and reasonably control network data flow, which is beneficial to protect scarce resources and promote full utilization of rich resources.

Description of drawings:

Fig. 1 is the flow chart of the embodiment of the method of the present invention;

Fig. 2 is a schematic diagram of a network applying the present invention.

Detailed ways:

The present invention will be further described in detail below in conjunction with the accompanying drawings and embodiments.

The present invention can be applied to various network access systems, refer to FIG. 2 . User 1 to user N in the figure are connected to the MAN or the backbone network through the access server, and then connected to the Internet through the MAN or the backbone network. When a user accesses the network, the access server controls the user's network data flow.

The data flow control carried out in the network access device of the present invention uses different flow control strategies according to the difference of the destination address of the data message accessed by the access device, that is, when performing flow control on statistical user messages, according to The authority of the user and the category of the destination address are respectively carried out by using different flow control parameters. Specifically, the present invention stores user identification (ID) and flow control attributes in the access device, and then sets different data flow control parameters according to different flow control attributes, and then according to the user ID and flow control attributes in the received message The flow control attribute uses the corresponding data flow parameters to control the flow of the user.

In the specific implementation of the present invention, in order to realize the above-mentioned data flow control operation, it is necessary to establish a user flow control attribute table, a destination address flow control attribute table, a flow control level table, and a flow control record table, wherein the user flow control attribute table , which is used to determine the data flow control scope of the user. This table includes the following fields:

User account: used to save the user's ID;

Traffic control group ID: used to identify the traffic control group to which different user IDs belong, so as to determine the traffic control range of different users.

The user flow control attribute table is a one-dimensional table, which can be retrieved by IP address. The retrieval method can be implemented by hash search algorithm, binary search tree, CAM (Content addressable memory, content addressable memory) and other methods.

Destination address flow control attribute table, used to determine the flow control attribute of the destination address, the table includes the following fields:

Address: used to describe the range of IP addresses of different users;

Flow control attribute: used to describe the flow control properties of users in different IP address ranges.

The destination address flow control attribute table is similar to the routing table, the difference is that the search result of this table is not the gateway, but the flow control attribute of the destination address. This table can use the algorithm that can support the longest match, such as base tree (a type of binary tree) , CAM and other methods to achieve. In practice, due to the limited space of the flow control attribute table of the destination address, and the user has many IP addresses, which cannot contain all IP addresses, the flow control attribute of the table can be configured by using the mask of the routing table, for example: 201.1110.0.0 /16. At the same time, it is stipulated that the priority of the longest mask is the highest and the default destination flow control parameter must be set, that is, the flow control parameter of 0.0.0.0/0 must be set. At the same time, the user's address is also set as a destination flow control attribute group in the destination address flow control attribute table. Due to the default flow control parameters, there will be no situation where the destination address flow control parameter attributes cannot be found, and because the longest match with mask is supported, the administrator can simplify the configuration of addresses on the same network segment through the mask.

The flow control parameter table is used to determine the user's specific data flow control parameters. The table includes the following fields:

Traffic control group ID: used to describe the traffic control group to which different user IDs belong;

Flow control attribute: used to describe the flow control nature of users in different IP address ranges;

Flow control parameters: used to describe data flow control parameters jointly identified by different flow control group IDs and flow control attributes.

The flow control parameter table is a two-dimensional table. According to the search results of the user flow control attribute table and the destination address flow control attribute table as the two-dimensional search index, the specific flow control parameters of the incoming packets can be found.

The flow control table is used to store user flow control records, and the table includes the following fields:

User account: ID used to describe the user;

Record item: used to store the user's data flow control content.

The flow control table is also a two-dimensional table, and its query method can refer to the above content.

Based on the above table, the present invention can divide users with similar requirements into the same group, and divide destination addresses with similar flow control attributes into the same group in actual use, so that the requirements on system resources can be reduced.

Fig. 1 is a flowchart of an embodiment of the method of the present invention. According to Figure 1, the access device divides the received packets into four types according to the source address and destination address: user-to-user, user-to-network, network-to-user, and network-to-network. If only user-related flow control is of interest, network-to-network data traffic can be ignored.

The data access device receives the incoming packets in step 1. Since the user route is also a destination address with flow control attributes, the user-to-user and user-to-network packets can be processed together. Therefore, in step 1 2. Determine whether the message is a message from user to user or from user to network. If so, the access device first searches the user flow control attribute table according to the source address of the message in step 3 to determine whether the message belongs to The user's flow control range and user ID, after finding the flow control attribute ID and user ID of the user to which the message belongs, search the destination address flow control attribute table according to the destination address of the message, determine the flow control attribute of the user to which the message belongs, and then Go to step 6; if it is judged in step 2 that the message is not from the user to the user or from the user to the network, then in step 4 it is judged whether the message is a message from the network to the user, if so, in Step 5 Search the user flow control attribute table according to the destination address of the message to determine the flow control attribute ID and user ID of the user to which the message belongs, and then search the destination address flow control attribute table according to the source address of the message to obtain the message flow control attribute, then turn to step 6, otherwise the received message has nothing to do with the user, that is, the message is considered as a message from the network to the network, and the flow control of the message can be ignored; in step 6, Search the flow control parameter table according to the user ID and the flow control attribute of the destination address, find the flow control parameters of the current message, and finally search the user flow control table according to the user ID, find a suitable item, and compare the flow control result of the user to which the message belongs The results in the table are comprehensively counted, and the statistical results are stored in this table item, and then it is judged whether the data flow of the user to which the message belongs is greater than the maximum value allowed by the flow control parameters. If it is greater, the message is discarded in step 7, otherwise in Step 8 forwards the packet normally.

The above step 2 judges whether the message is from the user to the user or from the user to the network, and realizes by using the source address of the message to search the user flow control attribute table, if no report is found in the user flow control attribute table If the source address of the message is not found, then the message is considered as a message from user to user or from user to network.

The above step 4 judges whether the message is a message from the network to the user, and realizes by using the source address and destination address of the message to search the user flow control attribute table, if the message cannot be found in the user flow control attribute table source address and destination address, the packet is considered to be a packet from network to network.

Claims (8)

1. the data flow control method in the data insertion equipment comprises:

(1) storage user ID ID and Flow Control attribute in access device:

(2) set different data traffic Control Parameter according to different Flow Control attributes;

(3) access device receives the message that inserts;

(4) judge that whether described message is from user to user or from the message of user-to-network, if change step (5), otherwise change step (6);

(5) determine Flow Control scope and the user ID ID of user under this message according to the source address of message, determine the Flow Control attribute of user under the message then according to the destination address of message, change step (7) then;

(6) judge that whether described message is the message from the network to user, if, determine Flow Control scope and the user ID of user under this message according to the destination address of message, determine the Flow Control attribute of message according to the source address of message, change step (7) then, otherwise, think that described message is the message from network-to-network, ignore flow control, finish the flow control operation then this message;

(7) according to the Flow Control attribute specified data flow control parameter of user ID and message, judge the maximum whether network traffic data of user under this message allows greater than the data traffic Control Parameter, if greater than, abandon this message, carry out the normal forwarding of this message.

2. the data flow control method in the data insertion equipment according to claim 1 is characterized in that described method comprises to set up user's Flow Control attribute list, and in order to determine user's data current control scope, this table comprises following field:

User account number: the LD that is used to preserve the user;

Flow Control group LD: be used to identify the affiliated Flow Control group of different user 1D, to determine the Flow Control scope of different user.

3. the data flow control method in the data insertion equipment according to claim 2 is characterized in that described method comprises to set up destination address Flow Control attribute list, is used for determining the Flow Control attribute of destination address, and this table comprises following field:

Address: the scope that is used to describe the IP address of different user;

Flow Control attribute: the Flow Control character that is used to describe different IP addresses scope user.

4. the data flow control method in the data insertion equipment according to claim 3 is characterized in that described method comprises to set up the flow control parameters table, is used for determining user's concrete data traffic Control Parameter, and this table comprises following field:

Flow Control group 1D: be used to describe the affiliated Flow Control group of different user ID;

Flow Control attribute: the Flow Control character that is used to describe different IP addresses scope user;

Flow control parameters: the data traffic Control Parameter that is used to describe different Flow Control group ID and the common sign of Flow Control attribute.

5. the data flow control method in the data insertion equipment according to claim 4 is characterized in that described method comprises to set up flow control meter, and be used to store user's flow control record, this table comprises following field:

User account number: the ID that is used to describe the user;

Entry: be used to store user's data flow control content.

6. the data flow control method in the data insertion equipment according to claim 5, it is characterized in that step (7) comprising: search flow control meter according to user ID, user's flow control record is stored in the list item that is fit in the table, utilize this table that user's data flow under inserting message is controlled.

7. according to the data flow control method in claim 3,4, the 5 or 6 described data insertion equipments, it is characterized in that step (4) judges that whether described message is from user to user or from the message of user-to-network, searching user's Flow Control attribute list by the source address of using message realizes, if in user's Flow Control attribute list, can not find out the source address of message, think that then described message is for from user to user or from the message of user-to-network.

8. the data flow control method in the data insertion equipment according to claim 3, it is characterized in that step (6) judges that whether described message is the message from the network to user, search the realization of user's Flow Control attribute list by the source address and the destination address that use message, if in user's Flow Control attribute list, can not find out the source address and the destination address of message, think that then described message is the message from network-to-network.

Images